Commit Graph

Select branches

Hide Pull Requests

dependabot/go_modules/otel-323bcb409e

dependabot/go_modules/otel-3525194e36

dependabot/go_modules/redis-daff1b3274

master

#1

#10

#101

#102

#103

#104

#105

#106

#107

#108

#109

#11

#110

#111

#111

#112

#113

#114

#115

#117

#118

#119

#12

#120

#121

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#154

#155

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#300

#301

#302

#303

#304

#305

#308

#309

#31

#310

#311

#312

#313

#314

#316

#317

#318

#319

#32

#320

#321

#322

#323

#325

#326

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#432

#433

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#485

#486

#487

#488

#489

#490

#491

#491

#492

#492

#5

#51

#53

#56

#57

#58

#59

#60

#61

#62

#63

#64

#65

#66

#68

#69

#70

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#84

#85

#86

#87

#88

#89

#9

#90

#91

#92

#93

#94

#95

#96

#97

#98

#99

Mono Color

• d766e247a9 refactor: safer implementation for getting sid claim from id_token Trong Huu Nguyen 2021-10-14 10:48:08 +02:00
• 4d437063b9 Merge pull request #4 from nais/use-nais-team-app Kent DandGitHub 2021-10-13 11:01:36 +02:00
• 071a8c0436 use nais-team-app instead of srvnais pat Kent D 2021-10-13 10:54:10 +02:00
• 5db2a01f63 fix: explicitly set status response header for front-channel logout 3 people 2021-10-13 10:43:57 +02:00
• d0482b3490 refactor: log session store unavailability, ensure fallback cookies are deleted when no longer needed Trong Huu Nguyen 2021-10-13 08:49:53 +02:00
• f7f476db87 refactor: add toggle for redis tls negotiation Trong Huu Nguyen 2021-10-13 08:47:58 +02:00
• 6152b94aba Configure HA redis 3 people 2021-10-12 15:56:30 +02:00
• d58e3339a9 refactor: only log route requests for owned routes 3 people 2021-10-12 10:24:22 +02:00
• 657d7df988 refactor: remove startup redis ping Trong Huu Nguyen 2021-10-12 09:23:01 +02:00
• e209516d32 feat: add toggle for auto redirect to login handler for default route Trong Huu NguyenandSindre Rødseth Hansen 2021-10-11 12:50:05 +02:00
• 2e10801d0e refactor: move client assertion generation, replace go-jose with jwx Trong Huu NguyenandSindre Rødseth Hansen 2021-10-11 11:46:11 +02:00
• 399a8175c8 refactor: user-friendly retry URI for default error page Trong Huu NguyenandSindre Rødseth Hansen 2021-10-07 10:02:18 +02:00
• 3bdbfd0030 refactor: only handle single ingress Trong Huu Nguyen 2021-10-07 08:02:16 +02:00
• 8b3075f6d0 fix: do not remove login cookies until end of callback Trong Huu Nguyen 2021-10-07 07:59:48 +02:00
• 9d48d444af chore: remove unused nais manifest Trong Huu Nguyen 2021-10-07 07:59:21 +02:00
• b8a62826ad fix: remove debug error Trong Huu NguyenandSindre Rødseth Hansen 2021-10-06 14:54:30 +02:00
• 1f939d603d feat: add configurable redirect to custom error page sindrerh2andTrong Huu Nguyen 2021-10-06 14:49:04 +02:00
• 7979bb09fb refactor: move request related utilities to own pkg Trong Huu Nguyen 2021-10-06 12:39:08 +02:00
• fb4adc9cc5 feat: add templated error page sindrerh2andTrong Huu Nguyen 2021-10-05 14:09:09 +02:00
• 9616587854 chore: go mod tidy Trong Huu Nguyen 2021-10-05 12:10:47 +02:00
• 77d0438411 feat: use latest go-chi v5, add middlewares for panic recovery and logging Trong Huu NguyenandSindre Rødseth Hansen 2021-10-05 10:55:08 +02:00
• 70516c3efb refactor: more cleanups; split up route handlers Trong Huu Nguyen 2021-10-04 19:10:19 +02:00
• 569855cef2 refactor: minor cleanups for middleware Trong Huu Nguyen 2021-10-04 18:45:40 +02:00
• 788ef1278a refactor: add correlation ID for error response logs Trong Huu NguyenandSindre Rødseth Hansen 2021-10-04 14:36:41 +02:00
• ce8d8c6460 refactor: clean up error handling Trong Huu NguyenandSindre Rødseth Hansen 2021-10-04 14:07:08 +02:00
• 5e113f4284 refactor: use common cookie name across all instances Trong Huu NguyenandSindre Rødseth Hansen 2021-10-04 10:52:41 +02:00
• f73b4605a1 refactor: use encrypted cookie as session fallback Trong Huu NguyenandSindre Rødseth Hansen 2021-10-04 10:45:01 +02:00
• 80c7abd70a refactor: update jwx; now infers alg from keys where missing Trong Huu Nguyen 2021-10-01 12:22:43 +02:00
• 43dd8d7926 More, correct, metrics 3 people 2021-10-01 10:28:44 +02:00
• c70c7d7267 Increase login cookie lifetime 3 people 2021-10-01 09:46:54 +02:00
• 03eec9d2b8 refactor: robustify logout routes 3 people 2021-10-01 09:35:21 +02:00
• cc8ba980ca refactor: deduplicate crypto operations for sessions Trong Huu Nguyen 2021-09-30 18:27:53 +02:00
• 8f9cb671c6 fix: set jwt ID for client assertion to prevent token replay Trong Huu Nguyen 2021-09-30 15:38:23 +02:00
• 2ec1b7ace9 feat: encrypt session data Trong Huu NguyenandSindre Rødseth Hansen 2021-09-30 13:47:22 +02:00
• cf7ca9c5b8 refactor: separate login param generation Trong Huu NguyenandSindre Rødseth Hansen 2021-09-30 12:13:38 +02:00
• dbc0a47a46 refactor: ensure session lifetime does not exceed access token lifetime Trong Huu NguyenandSindre Rødseth Hansen 2021-09-30 11:44:15 +02:00
• b2e89f32fa refactor: ensure cookies are properly disposed of Trong Huu NguyenandSindre Rødseth Hansen 2021-09-30 10:05:45 +02:00
• ae2ca7ae9a Add versions in use panel to dashboard Morten Lied Johansen 2021-09-29 22:02:28 +02:00
• aad2a49591 Register the metrics we collect Morten Lied Johansen 2021-09-29 22:00:10 +02:00
• bf7d877183 Merge pull request #3 from nais/metrics Morten Lied JohansenandGitHub 2021-09-29 15:06:54 +02:00
• fb6dc12a9a Only in gcp 4 people 2021-09-29 13:56:59 +02:00
• 535f90a099 Merge pull request #2 from nais/cookies Morten Lied JohansenandGitHub 2021-09-29 13:51:07 +02:00
• 25221added rename callbackparams to logincookie for clarity, ensure logincookie is deleted when no longer needed Trong Huu Nguyen 2021-09-29 13:27:30 +02:00
• 345691eb08 Starting on a dashboard Morten Lied JohansenandSindre Rødseth Hansen 2021-09-29 11:24:31 +02:00
• f551386113 Add Redis latency metrics Morten Lied JohansenandSindre Rødseth Hansen 2021-09-29 10:50:27 +02:00
• b60db493ac Add ClientID to cookie names Morten Lied JohansenandSindre Rødseth Hansen 2021-09-29 10:20:11 +02:00
• 28b750517b wip: cookies Trong Huu Nguyen 2021-09-29 10:00:42 +02:00
• 11f860d5dd docs: write an actual readme 3 people 2021-09-29 09:38:47 +02:00
• bf8441bb1c build: bump go to 1.17 Trong Huu Nguyen 2021-09-29 09:22:25 +02:00
• 7869c3368b Merge pull request #1 from nais/graceful Morten Lied JohansenandGitHub 2021-09-29 09:00:48 +02:00
• 214b14323c Do graceful shutdown on signals Morten Lied Johansen 2021-09-28 21:29:33 +02:00
• 5160987978 feat: allow user-defined post_logout_redirect_uri Trong Huu Nguyen 2021-09-10 14:45:41 +02:00
• 9dc5b08d65 ci: byttet til SRVNAIS_REPO_PUSH_PAT Kyrre Havik 2021-09-08 14:18:54 +02:00
• acc32fe893 fix: log actual errors for callback route Trong Huu Nguyen 2021-09-08 09:26:26 +02:00
• c7040b0284 feat: add feature toggle for authorization locale; allow user-supplied parameter Trong Huu Nguyen 2021-09-08 09:17:08 +02:00
• 55002e3cfe refactor: separate parsing and validation of id_token Trong Huu Nguyen 2021-09-07 21:30:38 +02:00
• 09bbc35df7 fix: ensure acr claim exists if security level is enabled Trong Huu Nguyen 2021-09-06 11:35:46 +02:00
• 4237e84de3 feat: add feature toggle for security level; allow user-defined levels Trong Huu Nguyen 2021-09-06 11:05:19 +02:00
• e819cc0de1 use host-agnostic path for default zero-config ingress Trong Huu Nguyen 2021-09-02 12:23:32 +02:00
• 081921d0fa add http request metrics Kim Tore Jensen 2021-09-02 11:16:45 +02:00
• e0662efa66 default zero-config ingress for testing Kim Tore Jensen 2021-08-30 11:50:15 +02:00
• 1aa134ecf0 redirect after successful oauth2 flow - to user-defined location, or referer Kim Tore Jensen 2021-08-26 12:54:40 +02:00
• c1660ad1d0 also unset x-pwned-by when un-authenticated Kim Tore Jensen 2021-08-26 12:21:21 +02:00
• da4f6dc6a7 use correct session ID for front-channel logout Trong Huu Nguyen 2021-08-26 10:35:45 +02:00
• 723f25326c ping redis on startup; fail on error Trong Huu Nguyen 2021-08-26 08:33:33 +02:00
• c76daf61f7 don't set x-pwned-by header for end-users; only upstream Kim Tore Jensen 2021-08-25 17:29:09 +02:00
• 679566977e forward host header correctly Kim Tore Jensen 2021-08-25 17:28:46 +02:00
• 8ee87a8a84 get ingresses from naiserator to build router correctly 3 people 2021-08-25 13:15:26 +02:00
• 26a74cb0db ci: do not push to nais-yaml unless on master Trong Huu Nguyen 2021-08-25 12:03:23 +02:00
• 5da34f0139 fix: include id_token_hint on self-initiated logout Trong Huu Nguyen 2021-08-25 11:55:36 +02:00
• e83542b046 fix: prefix local session keys to prevent collisions Trong Huu Nguyen 2021-08-25 11:11:23 +02:00
• cb514c2294 refactor: make SessionMaxLifetime configurable Trong Huu Nguyen 2021-08-25 10:55:53 +02:00
• 6e45fa804c refactor: use keygen from liberator Trong Huu Nguyen 2021-08-25 10:15:45 +02:00
• 700b6732d7 fix: add acceptable skew for id_token validation Trong Huu Nguyen 2021-08-25 09:31:21 +02:00
• f63bade2b9 chore: remove obsolete fixme, redundant type conversion Trong Huu Nguyen 2021-08-25 09:28:14 +02:00
• de619c6e89 refactor: add constructor for routing handler to deduplicate config Trong Huu Nguyen 2021-08-25 09:21:40 +02:00
• 0f160f7f99 fix: generate encryption key if not set Trong Huu Nguyen 2021-08-25 08:23:19 +02:00
• 03a14eb2bd refactor: clean up id_token validation Trong Huu Nguyen 2021-08-25 08:22:34 +02:00
• f414470910 support entering encryption key as environment variable Kim Tore Jensen 2021-08-24 15:46:55 +02:00
• d6b6b617d5 deploy only as part of nais-yaml Kim Tore Jensen 2021-08-24 14:35:52 +02:00
• 18aaa754c6 makefile for integration tests Kim Tore Jensen 2021-08-24 13:11:11 +02:00
• 097f4fd5b2 make redis support configurable Kim Tore Jensen 2021-08-24 13:07:57 +02:00
• 94569a6f3c include redis docker-compose file Kim Tore Jensen 2021-08-24 12:58:28 +02:00
• 55f26fb54c incorporate new session storage code Kim Tore Jensen 2021-08-24 12:58:16 +02:00
• 15a7c14324 redis and in-memory session store Kim Tore Jensen 2021-08-24 12:46:28 +02:00
• 2becde51b9 add front-channel logout test Trong Huu NguyenandKim Tore Jensen 2021-08-24 10:52:00 +02:00
• b7dbb000aa test self-initiated logout Trong Huu NguyenandKim Tore Jensen 2021-08-24 10:31:43 +02:00
• 1f58b5ae15 write callback test Kent DalengandTrong Huu Nguyen 2021-08-24 09:59:34 +02:00
• cf8b4d56cc fix: set path for cookies Trong Huu Nguyen 2021-08-24 08:49:57 +02:00
• 43cb01ad00 wip: idporten mock server Trong Huu Nguyen 2021-08-24 07:44:05 +02:00
• 9354ee7629 wip: mock authorization server Kim Tore Jensen 2021-08-23 15:12:47 +02:00
• 764adc3d77 wip: tests for authorize Kim Tore Jensen 2021-08-23 14:39:48 +02:00
• 6c23aaa243 test for login url handler Kim Tore Jensen 2021-08-23 14:03:35 +02:00
• b4b9fd1a2a implement front-channel logout Kim Tore Jensen 2021-08-23 13:44:26 +02:00
• 612fcaed78 deduplication; store sessions with name Kim Tore Jensen 2021-08-23 13:29:15 +02:00
• d2a3db75c2 refactor cookie handling Kent Daleng 2021-08-23 13:11:50 +02:00
• 1d36b8e6a3 code restructuring Kim Tore Jensen 2021-08-23 11:17:30 +02:00
• 42d6d93ee3 lock concurrent session writes Kim Tore Jensen 2021-08-23 11:10:59 +02:00
• 2d7adb55b5 remove unused session id Kim Tore Jensen 2021-08-23 11:01:30 +02:00
• 0677c29c5b fix merge imports Kim Tore Jensen 2021-08-23 11:00:13 +02:00