Commit Graph

  • 80738f2a4b fix(handler/url): use base64 encoding for redirects to preserve query parameters Trong Huu Nguyen 2022-09-19 11:51:27 +02:00
  • 97d2a88bb1 fix(handler/url): ensure that parameters for original url aren't dropped Trong Huu Nguyen 2022-09-17 14:16:00 +02:00
  • ed56aac3d0 style: follow conventions for error variable names Trong Huu Nguyen 2022-09-16 20:16:00 +02:00
  • b8785b7414 style: use shorthand time functions where possible Trong Huu Nguyen 2022-09-16 20:05:40 +02:00
  • d718c36595 style(openid/client): remove unused struct field Trong Huu Nguyen 2022-09-16 20:03:24 +02:00
  • d732a5b3cd test(session/store): add missing assertion Trong Huu Nguyen 2022-09-16 20:02:38 +02:00
  • 62f0359438 fix(handler/autologin): ensure path has prefix Trong Huu Nguyen 2022-09-16 20:02:09 +02:00
  • 9af867bf91 chore: bump deps Trong Huu Nguyen 2022-09-16 20:01:36 +02:00
  • 889e0c8edf feat(middleware/correlationid): use x-request-id header if found in request Trong Huu Nguyen 2022-09-16 19:23:21 +02:00
  • b68877b963 fix(ingress): also use X-Forwarded-Host for match operation Trong Huu Nguyen 2022-09-16 16:02:22 +02:00
  • 5a385622d8 Merge pull request #51 from nais/dependabot/go_modules/github.com/spf13/viper-1.13.0 Jan-Kåre Solbakken 2022-09-19 08:33:43 +02:00
  • 4fddbaa4df Merge branch 'master' into dependabot/go_modules/github.com/spf13/viper-1.13.0 Jan-Kåre Solbakken 2022-09-19 08:11:47 +02:00
  • 2fd76001d8 build(deps): bump github.com/spf13/viper from 1.12.0 to 1.13.0 dependabot[bot] 2022-09-12 19:24:24 +00:00
  • b4eecfc663 fix(handler/autologin): only trigger for GET requests Trong Huu Nguyen 2022-09-12 12:33:42 +02:00
  • 43c39c89ad refactor(handler/reverseproxy): skip logging for client context cancellation Trong Huu Nguyen 2022-09-12 09:37:40 +02:00
  • fcc6a7472c fix(handler/autologin): return http 303 for autologin redirects Trong Huu Nguyen 2022-09-09 14:38:46 +02:00
  • a4ceaeaacc feat(handler/autologin): add favicon.ico and robots.txt to default ignorelist Trong Huu Nguyen 2022-09-09 13:09:36 +02:00
  • 7f93c62604 fix(openid/client): handle missing redirect uri for callbacks Trong Huu Nguyen 2022-09-09 12:31:17 +02:00
  • 27d2bc2c26 fix(session/handler): log errors for lock release failures Trong Huu Nguyen 2022-09-09 10:19:22 +02:00
  • 69ebd9270f refactor(handler/reverseproxy): improve log messages Trong Huu Nguyen 2022-09-09 10:18:39 +02:00
  • f830ff575c docs: clarify session refresh cooldown mechanism Trong Huu Nguyen 2022-09-08 16:42:11 +02:00
  • 84d521e968 feat(reverseproxy): configure errorlog to use logrus implementation Trong Huu Nguyen 2022-09-06 15:34:32 +02:00
  • 00b39276df debug(handler/reverseproxy): log proxy errors Trong Huu Nguyen 2022-09-05 15:29:14 +02:00
  • 3f24537b36 fix(openid/client): set iat for assertion in the past to alleviate clock skew Trong Huu Nguyen 2022-09-05 15:28:16 +02:00
  • b22c130e60 fix(session/handler): invalidate session state if refresh attempt is a client error Trong Huu Nguyen 2022-09-04 13:08:39 +02:00
  • c0138f4b49 feat(session): use locks for refreshing Trong Huu Nguyen 2022-09-03 20:18:27 +02:00
  • 989aa1e998 refactor(middleware/logentry): add fields to default logger Trong Huu Nguyen 2022-09-03 20:05:28 +02:00
  • c78674e54a fix(session/store): check for existence before update Trong Huu Nguyen 2022-09-03 16:48:37 +02:00
  • 2a80bd7765 refactor(mock/openid): use interface for handler Trong Huu Nguyen 2022-09-02 18:43:59 +02:00
  • 08eefbf1d5 refactor(openid): clean up client and provider Trong Huu Nguyen 2022-09-02 18:08:36 +02:00
  • 92ee6313c5 refactor: remove unnecessary interfaces Trong Huu Nguyen 2022-09-02 17:39:27 +02:00
  • c8f48335d4 refactor(openid/config): extract getter for ingresses Trong Huu Nguyen 2022-09-02 15:13:44 +02:00
  • 9144056e28 refactor(handler): split up request handlers into separate modules Trong Huu Nguyen 2022-09-02 14:53:11 +02:00
  • 5d00d132dd refactor: decouple handler implementation from router and middleware Trong Huu Nguyen 2022-09-01 19:39:47 +02:00
  • d9cc60c4cc refactor: move autologin to handler pkg Trong Huu Nguyen 2022-09-01 08:17:21 +02:00
  • 619ae52d45 refactor: separate refresh-specific fields from session info; enable endpoint without refresh feature Trong Huu Nguyen 2022-08-31 15:54:13 +02:00
  • 06b71cf56d docs: clarify endpoint usage, add notes on session management and refresh tokens Trong Huu Nguyen 2022-08-31 15:10:20 +02:00
  • 9d7732fc25 deps: bump em Trong Huu Nguyen 2022-08-31 08:50:09 +02:00
  • cdba90bc5b test(session/data): add missing tests Trong Huu Nguyen 2022-08-29 14:48:39 +02:00
  • af48778bf7 fix(session/handler): lock metadata operations behind feature gate until rollout Trong Huu Nguyen 2022-08-29 09:49:33 +02:00
  • cdd07838f4 refactor(session/data): separate into object groups Trong Huu Nguyen 2022-08-29 08:35:03 +02:00
  • 1d9339e139 refactor(session/handler): extract predicates for readability Trong Huu Nguyen 2022-08-26 18:09:40 +02:00
  • 5ec969981d fix(session/handler): ensure access token is not expired before proxying Trong Huu Nguyen 2022-08-26 17:58:39 +02:00
  • d5bbca9897 feat: rudimentary support for refresh tokens Trong Huu Nguyen 2022-08-25 11:30:04 +02:00
  • dc0741f79f refactor(middleware): extract handlers for consistency Trong Huu Nguyen 2022-08-26 08:34:07 +02:00
  • 4d7502a4be refactor(middleware/logentry): strip query and fragment from referer logs Trong Huu Nguyen 2022-08-25 22:27:12 +02:00
  • cafebabea5 fix(openid/client): set redirect_uri param when redeeming auth code Trong Huu Nguyen 2022-08-23 08:27:34 +02:00
  • f9b7bbe10b deps: bump it Trong Huu Nguyen 2022-08-22 08:40:27 +02:00
  • c29501d964 refactor(handler): add utility method for path-aware cookie options Trong Huu Nguyen 2022-08-19 12:09:21 +02:00
  • 08f570363a refactor(openid): extract magic strings Trong Huu Nguyen 2022-08-19 10:34:32 +02:00
  • 5990e4bb71 refactor(session): extract session handler Trong Huu Nguyen 2022-08-19 10:07:14 +02:00
  • c15e00469b refactor: clean up session error handling Trong Huu Nguyen 2022-08-18 21:35:15 +02:00
  • ae8028cc96 refactor: remove cookie session fallback store Trong Huu Nguyen 2022-08-16 09:42:48 +02:00
  • 5a50ba7c3a feat: support multiple ingresses Trong Huu Nguyen 2022-08-16 09:13:10 +02:00
  • 41a10d8fe7 refactor: replace deprecated ioutil method and magic string Trong Huu Nguyen 2022-08-16 09:09:03 +02:00
  • 5f6c0c01a8 feat: add ingress middleware Trong Huu Nguyen 2022-08-16 09:00:23 +02:00
  • a9e9644764 refactor: move context utils to middleware Trong Huu Nguyen 2022-08-16 08:57:51 +02:00
  • a088ddd2d0 feat: add ingress package Trong Huu Nguyen 2022-08-16 08:49:42 +02:00
  • e460a5eab2 fix(handler/reverseproxy): do not overwrite host header Trong Huu Nguyen 2022-08-16 09:24:44 +02:00
  • 758277a267 build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.4 to 2.0.5 (#45) dependabot[bot] 2022-08-11 10:59:15 +02:00
  • 51075ad9ed refactor(middleware/logentry): remove httplog dependency Trong Huu Nguyen 2022-08-11 09:54:23 +02:00
  • cbc49de826 refactor(handler/default): clean up access token getter Trong Huu Nguyen 2022-07-28 22:21:12 +02:00
  • 13fd194318 refactor(handler/default): extract reverseproxy to avoid unnecessary instantiation Trong Huu Nguyen 2022-07-28 18:44:19 +02:00
  • ea5b7701a9 deps: bump to go 1.19 Trong Huu Nguyen 2022-08-10 13:12:17 +02:00
  • 261f0e039d deps: bump various dependencies Trong Huu Nguyen 2022-08-10 13:10:34 +02:00
  • ac45aec044 fix(autologin): filter out empty and duplicate patterns Trong Huu Nguyen 2022-07-21 17:44:13 +02:00
  • 4646c36b74 refactor(autologin): skip -> ignore Trong Huu Nguyen 2022-07-21 12:50:55 +02:00
  • d79f31c18d refactor(autologin): use glob-style matching instead of regex Trong Huu Nguyen 2022-07-21 11:38:37 +02:00
  • 124aff9f08 docs: note some gotchas for the docker compose setup [ci skip] Trong Huu Nguyen 2022-07-21 08:37:55 +02:00
  • 31ab8ad3b7 refactor(handler/default): redirect auto-login requests instead of inlining login handler Trong Huu Nguyen 2022-07-21 08:21:28 +02:00
  • 27ea0793ba refactor(handler): reduce logging severity for spammy statements Trong Huu Nguyen 2022-07-21 07:49:58 +02:00
  • 595d902dcd fix(handler/default): only assert loginstatus if we already have an active session Trong Huu Nguyen 2022-07-20 15:56:17 +02:00
  • 242dc12be9 refactor(openid/config): remove unused field Trong Huu Nguyen 2022-07-20 15:25:28 +02:00
  • b4e6e97448 refactor(metrics): use const label for hpa, ensure provider label is set Trong Huu Nguyen 2022-07-20 14:27:46 +02:00
  • 13f1713fc2 refactor(config): move loading and setup into init Trong Huu Nguyen 2022-07-20 11:21:54 +02:00
  • eac2d5789d refactor: passthrough for consistency in openid configuration Trong Huu Nguyen 2022-07-20 09:42:38 +02:00
  • 09ab8b9e3b refactor(handler): minor cleanups Trong Huu Nguyen 2022-07-19 20:11:52 +02:00
  • 3e62683cad refactor: use pointer receivers when possible Trong Huu Nguyen 2022-07-19 19:24:28 +02:00
  • 655ff8dd2c docs: update docker-compose setup Trong Huu Nguyen 2022-07-19 13:11:57 +02:00
  • cbb6be135a feat(metrics): add metrics for successful logins and logouts Trong Huu Nguyen 2022-07-19 09:25:43 +02:00
  • 0d0f75d21e style(handler/callback): accidentally a letter Trong Huu Nguyen 2022-07-18 20:55:32 +02:00
  • b674a0ffa7 refactor(session): wrap own error type instead of using store-specific errors Trong Huu Nguyen 2022-07-18 19:16:28 +02:00
  • 4ab07e9dc2 refactor: clean up logging Trong Huu Nguyen 2022-07-18 17:27:19 +02:00
  • a639ff2903 refactor(retry): extract retry package, add retry for session operations Trong Huu Nguyen 2022-07-18 16:51:00 +02:00
  • 81fa96ccb8 refactor(handler/default): minor cleanups for loginstatus Trong Huu Nguyen 2022-07-18 16:48:01 +02:00
  • bece03c94e refactor(middleware/logentry): replace zerologger with logrus Trong Huu Nguyen 2022-07-18 15:47:35 +02:00
  • 445a20f1c1 refactor(middleware/prometheus): add host label Trong Huu Nguyen 2022-07-18 09:40:18 +02:00
  • f504bb0030 refactor: add logger field to config logger Trong Huu Nguyen 2022-07-18 09:35:05 +02:00
  • 284fa2a76f fix(openid/client): ensure assertion time claims are rounded down instead of up Trong Huu Nguyen 2022-07-18 09:24:20 +02:00
  • 4a3f1d3d7e refactor(handler/test): extract upstream and httpclient for readability Trong Huu Nguyen 2022-07-15 15:47:16 +02:00
  • ef649e7aaa feat: add allowlisting of paths for autologin Trong Huu Nguyen 2022-07-15 15:09:49 +02:00
  • 9d32d100f0 refactor(handler/test): consistency passthrough, replace unneeded location parsing with stdlib function Trong Huu Nguyen 2022-07-15 10:23:56 +02:00
  • f6afc3cb6b test(handler): add tests for default reverse proxy handler Trong Huu Nguyen 2022-07-15 10:07:36 +02:00
  • ee28484829 test(handler): use correct session ID for front-channel logout Trong Huu Nguyen 2022-07-15 09:07:29 +02:00
  • 24da9ee4f7 refactor(handler/frontchannellogout): ignored request should just return accepted status Trong Huu Nguyen 2022-07-15 09:06:04 +02:00
  • 4b2bf6e095 fix(mock/openid): ensure tokens have jti claim set Trong Huu Nguyen 2022-07-15 09:04:55 +02:00
  • 8e45eb1bc2 style: do not use resp before checking for errors Trong Huu Nguyen 2022-07-15 08:44:54 +02:00
  • 822c37ac20 test: add error handler tests, use httptest lib for requests Trong Huu Nguyen 2022-07-15 08:43:25 +02:00
  • e3b9d33296 refactor: split out packages from router Trong Huu Nguyen 2022-07-15 07:44:54 +02:00
  • fd630e6dbd test(router): extract some reusable test methods Trong Huu Nguyen 2022-07-14 13:52:47 +02:00