Commit Graph

  • 305ab1786d fix(reverseproxy/autologin): handle multiple accept headers Trong Huu Nguyen 2023-10-16 12:01:15 +02:00
  • 3da0ed1019 fix(middleware/prometheus): filter out irrelevant paths Trong Huu Nguyen 2023-10-16 11:41:51 +02:00
  • 6d2bad76dd chore(deps): bump dependencies Trong Huu Nguyen 2023-10-12 09:54:06 +02:00
  • c363bea556 test(reverseproxy): extract common assertions Trong Huu Nguyen 2023-10-12 09:18:51 +02:00
  • b910d3e65a feat(config): redis username and password flags overrides uri Trong Huu Nguyen 2023-10-12 08:21:34 +02:00
  • 555f87b42b docs: correct default value for session lifetime [ci skip] Trong Huu Nguyen 2023-10-11 14:42:15 +02:00
  • f246fc7975 refactor(openid): move acr to own package Trong Huu Nguyen 2023-10-11 14:25:12 +02:00
  • 320176d48b refactor(config): consolidate, don't parse/bind/load flags twice Trong Huu Nguyen 2023-10-11 14:24:19 +02:00
  • 6dbc747aad feat(config): enable refresh tokens and automatic refreshing by default, increase default session lifetime Trong Huu Nguyen 2023-10-11 14:16:53 +02:00
  • 3594a5c8ff build: bump docker-compose images, simplify redis config Trong Huu Nguyen 2023-10-11 14:13:30 +02:00
  • 7e97fd7a93 revert: "style: go fmt" Trong Huu Nguyen 2023-10-10 14:50:28 +02:00
  • 8bbd947d5b feat(config): add support for Redis URI Trong Huu Nguyen 2023-10-10 14:48:50 +02:00
  • d71ff7ddc3 style: go fmt Trong Huu Nguyen 2023-10-10 13:41:28 +02:00
  • af6642fe90 refactor(openid): use pkce implementation from golang.org/x/oauth2 Trong Huu Nguyen 2023-10-10 10:18:01 +02:00
  • 4f722d9041 build(deps): bump golang.org/x/crypto from 0.13.0 to 0.14.0 (#167) dependabot[bot] 2023-10-09 19:14:52 +00:00
  • 2585fd51b8 build(deps): bump golang.org/x/oauth2 from 0.12.0 to 0.13.0 (#165) dependabot[bot] 2023-10-09 19:11:39 +00:00
  • a8f003089e build(deps): bump github.com/spf13/viper from 1.16.0 to 1.17.0 (#166) dependabot[bot] 2023-10-09 19:07:56 +00:00
  • 63685a09a5 docs: more, prettier mermaid diagrams and minor corrections [ci skip] Trong Huu Nguyen 2023-10-09 14:44:18 +02:00
  • a2e939f716 fix(handler/sessionrefresh): handle not found error Trong Huu Nguyen 2023-10-04 09:39:36 +02:00
  • c1bdb90566 feat(handler/reverseproxy): don't return json response after all Trong Huu Nguyen 2023-10-04 09:38:18 +02:00
  • 91cd58d18b docs: update sections on autologin and sessions Trong Huu Nguyen 2023-10-03 14:20:08 +02:00
  • 2e21dae33a feat(handler/reverseproxy): return json response for non-navigational autologin requests Trong Huu Nguyen 2023-10-03 14:18:52 +02:00
  • 52331a93db refactor(ingress): simplify and remove unnecessary variables Trong Huu Nguyen 2023-10-03 14:17:43 +02:00
  • 92cec63d0c build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.12 to 2.0.13 (#163) dependabot[bot] 2023-10-02 20:10:53 +00:00
  • cabf4d257b build(deps): bump github.com/redis/go-redis/v9 from 9.2.0 to 9.2.1 (#162) dependabot[bot] 2023-10-02 20:07:07 +00:00
  • 5e12cd3fe8 build(deps): bump github.com/rs/cors from 1.10.0 to 1.10.1 (#164) dependabot[bot] 2023-10-02 20:03:42 +00:00
  • 64e933a718 build(deps): bump github.com/prometheus/client_golang (#161) dependabot[bot] 2023-10-02 20:00:32 +00:00
  • 7a72586ca8 refactor(autologin): return early if fetch metadata is set Trong Huu Nguyen 2023-09-25 15:07:11 +02:00
  • 0ce938c101 build, docs: simplify local run instructions Trong Huu Nguyen 2023-09-25 14:16:25 +02:00
  • 61a641c8d7 fix(url): only add redirect query parameter if non-empty Trong Huu Nguyen 2023-09-25 14:14:28 +02:00
  • 337723150b fix(reverseproxy/autologin): skip cleaning redirect target Trong Huu Nguyen 2023-09-25 14:13:15 +02:00
  • ff39783f78 chore(deps): bump dependencies Trong Huu Nguyen 2023-09-22 22:24:18 +02:00
  • a1d7cc3587 ci: use dependabot groups Trong Huu Nguyen 2023-09-22 22:22:05 +02:00
  • 34d90d2c78 fix(autologin): do not return ambiguous 3xx redirect Trong Huu Nguyen 2023-09-22 14:41:01 +02:00
  • 735a3b12b1 build(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.12.0 (#157) dependabot[bot] 2023-09-18 19:39:55 +00:00
  • abe8401fb8 build(deps): bump honnef.co/go/tools from 0.4.5 to 0.4.6 (#159) dependabot[bot] 2023-09-18 19:36:22 +00:00
  • 67b8d29d70 build(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0 (#160) dependabot[bot] 2023-09-18 19:33:21 +00:00
  • e4eb932fba build(deps): bump github.com/rs/cors from 1.9.0 to 1.10.0 (#158) dependabot[bot] 2023-09-18 19:29:55 +00:00
  • c4911b1344 feat(session): add feature toggle for automatic refreshing Trong Huu Nguyen 2023-09-15 08:58:12 +02:00
  • 0b3cd4d9f6 build(deps): bump actions/checkout from 3 to 4 dependabot[bot] 2023-09-07 06:42:00 +00:00
  • 4a72a01496 feat(server): support wait before triggering graceful shutdown Trong Huu Nguyen 2023-09-06 15:23:11 +02:00
  • c887cf711e fix(handler/sso/server): wildcard redirects to default url Trong Huu Nguyen 2023-08-31 10:59:04 +02:00
  • 80d1415fbc fix(logentry): reduce log level for response entries Trong Huu Nguyen 2023-08-23 10:11:51 +02:00
  • 2d99cc1a60 build(deps): bump sigstore/cosign-installer from 3.1.1 to 3.1.2 (#155) dependabot[bot] 2023-09-04 19:54:32 +00:00
  • 7029bd1210 fix(router): correct cors setup for session routes Trong Huu Nguyen 2023-08-22 07:44:35 +02:00
  • 7ffe291ebe build(deps): bump github.com/redis/go-redis/v9 from 9.0.5 to 9.1.0 (#152) dependabot[bot] 2023-08-21 20:15:34 +00:00
  • df508c9526 build(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1 (#153) dependabot[bot] 2023-08-21 20:01:38 +00:00
  • 45df4830ff build(deps): bump honnef.co/go/tools from 0.4.3 to 0.4.5 (#151) dependabot[bot] 2023-08-21 19:58:55 +00:00
  • fc713acac1 build(deps): bump golang.org/x/vuln from 1.0.0 to 1.0.1 (#150) dependabot[bot] 2023-08-21 19:55:54 +00:00
  • 7987ad767e feat(config): allow specifying upstream ip and port separately Trong Huu Nguyen 2023-08-17 08:41:53 +02:00
  • 185701d53b refactor(openid): clean up tests Trong Huu Nguyen 2023-08-16 12:18:58 +02:00
  • e7799204b2 feat(openid): harden id_token validation Trong Huu Nguyen 2023-08-15 21:08:15 +02:00
  • f8d6633abd build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 (#149) dependabot[bot] 2023-08-14 19:36:42 +00:00
  • 3f1f2e2233 build(deps): bump github.com/alicebob/miniredis/v2 from 2.30.4 to 2.30.5 (#147) dependabot[bot] 2023-08-14 19:28:43 +00:00
  • 8ca4f22143 build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.11 to 2.0.12 (#148) dependabot[bot] 2023-08-14 19:24:48 +00:00
  • 28256089f1 build: bump to go 1.21 Trong Huu Nguyen 2023-08-10 13:41:44 +02:00
  • a9a8a5f3bd build(deps): bump golang.org/x/oauth2 from 0.10.0 to 0.11.0 (#146) dependabot[bot] 2023-08-07 19:04:49 +00:00
  • 7f824323e2 build(deps): bump github.com/bsm/redislock from 0.9.3 to 0.9.4 (#144) dependabot[bot] 2023-07-31 19:31:46 +00:00
  • 42a4e8fc16 build(deps): bump go.uber.org/automaxprocs from 1.5.2 to 1.5.3 (#143) dependabot[bot] 2023-07-24 19:06:12 +00:00
  • ba394dbaf3 docs: correct copy-pasta error [ci skip] Trong Huu Nguyen 2023-07-21 10:32:17 +02:00
  • 75567f3016 refactor(handler): split up logout and local logout handlers Trong Huu Nguyen 2023-07-20 12:01:21 +02:00
  • 1e485aa0f8 refactor(url): embed validator instead of using proxy struct Trong Huu Nguyen 2023-07-20 11:54:05 +02:00
  • 5729f46542 docs: move to separate directory, major cleanups Trong Huu Nguyen 2023-07-20 10:27:30 +02:00
  • d0c5e91c45 refactor(url): remove unused field for relative validator Trong Huu Nguyen 2023-07-18 14:08:55 +02:00
  • 352fa7187d build(deps): bump golang.org/x/vuln from 0.2.0 to 1.0.0 (#142) dependabot[bot] 2023-07-18 09:26:29 +02:00
  • dc0edaeddd build(deps): bump github.com/go-chi/chi/v5 from 5.0.8 to 5.0.10 (#141) dependabot[bot] 2023-07-17 19:48:25 +00:00
  • cf3a445656 fix(url/redirect): fallback url must be absolute Trong Huu Nguyen 2023-07-13 12:43:24 +02:00
  • c44fb9889b fix(url/redirect): ensure fragments are preserved Trong Huu Nguyen 2023-07-13 12:34:47 +02:00
  • 1843594c31 ci: always use latest go version Trong Huu Nguyen 2023-07-12 15:20:58 +02:00
  • e0dc035cef build: move back to official golang image, ratchet update Trong Huu Nguyen 2023-07-12 15:12:26 +02:00
  • ff1cd3995a ci: bump nais/platform-build-push-sign Trong Huu Nguyen 2023-07-11 09:24:03 +02:00
  • 73ab6aab93 ci: bump actions/setup-go to v4 Trong Huu Nguyen 2023-07-11 09:23:41 +02:00
  • a941c2eb04 build(deps): bump golang.org/x/oauth2 from 0.9.0 to 0.10.0 (#139) dependabot[bot] 2023-07-10 19:38:04 +00:00
  • d431db61c9 build(deps): bump golang.org/x/crypto from 0.10.0 to 0.11.0 (#140) dependabot[bot] 2023-07-10 19:33:33 +00:00
  • 566b9e1a2b ci: enable multi-platform builds Trong Huu Nguyen 2023-07-05 10:07:31 +02:00
  • 39b8ea5d24 ci: use platform-build-push-sign Trong Huu Nguyen 2023-07-05 09:57:31 +02:00
  • a6040b0dba build(deps): bump golang.org/x/vuln from 0.1.0 to 0.2.0 Trong Huu Nguyen 2023-07-05 09:23:27 +02:00
  • 8cc8cd72bb build(deps): bump dependabot/fetch-metadata from 1.5.1 to 1.6.0 (#136) dependabot[bot] 2023-07-03 20:03:12 +00:00
  • f58c45730e build(deps): bump sigstore/cosign-installer from 3.1.0 to 3.1.1 (#135) dependabot[bot] 2023-07-03 20:01:27 +00:00
  • 2a7f1ecc78 build(deps): bump docker/setup-buildx-action from 2.7.0 to 2.8.0 (#134) dependabot[bot] 2023-07-03 19:59:42 +00:00
  • 67086ee7c2 build(deps): bump github.com/prometheus/client_golang (#128) dependabot[bot] 2023-07-03 19:56:58 +00:00
  • 76419ac7d5 build(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 (#130) dependabot[bot] 2023-07-03 19:53:58 +00:00
  • 650a1c234a build(deps): bump github.com/alicebob/miniredis/v2 from 2.30.3 to 2.30.4 (#132) dependabot[bot] 2023-07-03 19:51:12 +00:00
  • f6ac588013 build(deps): bump sigstore/cosign-installer from 3.0.5 to 3.1.0 (#131) dependabot[bot] 2023-06-26 19:59:20 +00:00
  • b7ebcdb04d build(deps): bump docker/setup-buildx-action from 2.6.0 to 2.7.0 (#124) dependabot[bot] 2023-06-19 20:16:24 +00:00
  • e4dfe64235 build(deps): bump docker/login-action from 2.1.0 to 2.2.0 (#127) dependabot[bot] 2023-06-19 20:14:36 +00:00
  • a8b3f08b97 build(deps): bump docker/build-push-action from 4.1.0 to 4.1.1 (#125) dependabot[bot] 2023-06-19 20:05:41 +00:00
  • 6629f52082 build(deps): bump docker/metadata-action from 4.5.0 to 4.6.0 (#126) dependabot[bot] 2023-06-19 19:59:42 +00:00
  • b344fc904b build(deps): bump github.com/lestrrat-go/jwx/v2 from 2.0.9 to 2.0.11 (#123) dependabot[bot] 2023-06-14 17:28:08 +00:00
  • 8e633d6e30 build(deps): bump aquasecurity/trivy-action from 0.11.0 to 0.11.2 (#121) dependabot[bot] 2023-06-12 20:12:14 +00:00
  • c5e08f7725 build(deps): bump docker/setup-buildx-action from 2.5.0 to 2.6.0 (#118) dependabot[bot] 2023-06-12 20:10:24 +00:00
  • 45f63e64bb build(deps): bump docker/metadata-action from 4.4.0 to 4.5.0 (#119) dependabot[bot] 2023-06-12 20:08:35 +00:00
  • 9680fe447f build(deps): bump docker/setup-qemu-action from 2.1.0 to 2.2.0 (#120) dependabot[bot] 2023-06-12 20:06:01 +00:00
  • 606905b98e build(deps): bump docker/build-push-action from 4.0.0 to 4.1.0 (#117) dependabot[bot] 2023-06-12 19:58:46 +00:00
  • cb1392ec97 build: bump to go version 1.20.5 Trong Huu Nguyen 2023-06-09 13:18:15 +02:00
  • 2925ebe9e4 fix(handler/session): return metadata response even if session is inactive Trong Huu Nguyen 2023-06-09 12:20:20 +02:00
  • 9852b0a290 fix(handler/logout): ignore session validation errors; attempt to delete regardless Trong Huu Nguyen 2023-06-09 12:19:09 +02:00
  • 2a8d410425 feat(session/reader): return session on validation error Trong Huu Nguyen 2023-06-09 12:17:16 +02:00
  • cbfa3fe2e2 refactor(session): extract inactive session error Trong Huu Nguyen 2023-06-09 12:16:06 +02:00
  • 248a0fab81 build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#112) dependabot[bot] 2023-06-06 07:56:11 +00:00