Commit Graph

  • 07cf8e12b3 feat(cookie): support overriding session cookie name Trong Huu Nguyen 2023-03-01 11:27:14 +01:00
  • 133d3fd855 refactor(middleware/logentry): ignore ping route Trong Huu Nguyen 2023-03-01 10:11:37 +01:00
  • a375ac774d feat(router): add ping route for health probes Trong Huu Nguyen 2023-03-01 09:26:58 +01:00
  • 27bc5aee60 build(deps): bump honnef.co/go/tools from 0.4.0 to 0.4.2 (#72) dependabot[bot] 2023-02-28 08:12:28 +01:00
  • f720842e03 build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#73) dependabot[bot] 2023-02-28 08:04:38 +01:00
  • 7c21af2d58 build: clean up dockerfile and compose setup, use distroless image Trong Huu Nguyen 2023-02-27 14:13:57 +01:00
  • 442e056b26 refactor(handler): inline error handler, remove unnecessary getters Trong Huu Nguyen 2023-02-24 19:16:02 +01:00
  • f346e9e91d refactor(router): use a more apt name for wildcard handler Trong Huu Nguyen 2023-02-24 18:30:10 +01:00
  • 5342913676 refactor: move cookie options to handler constructors Trong Huu Nguyen 2023-02-24 18:21:36 +01:00
  • d5b603c98f feat(router): add cors middleware for sso server Trong Huu Nguyen 2023-02-23 14:30:55 +01:00
  • 08c6e96670 refactor(session): wrap error for decrypt Trong Huu Nguyen 2023-02-23 14:29:49 +01:00
  • b248dd8875 docs: add flags for sso configs Trong Huu Nguyen 2023-02-22 10:24:06 +01:00
  • 3e93423464 refactor(sso/server): redirect requests for wildcard routes to default URL Trong Huu Nguyen 2023-02-22 10:19:26 +01:00
  • 9ecfdb73ef fix(handler): time-to-refresh in session metadata is disabled for sso Trong Huu Nguyen 2023-02-22 10:11:39 +01:00
  • afc8fd6962 style: formatting Trong Huu Nguyen 2023-02-21 15:37:48 +01:00
  • e7d411b5c9 build: add gofumt and Makefile target for formatting Trong Huu Nguyen 2023-02-21 15:36:14 +01:00
  • 2796e1c9bc refactor(session): remove duplicate method, token expiry must be shorter than inactivity timeout Trong Huu Nguyen 2023-02-21 15:34:50 +01:00
  • 9074547163 docs: clarifications for refresh behaviour Trong Huu Nguyen 2023-02-21 15:32:43 +01:00
  • ec572db957 refactor(session): remove internal method from Reader interface Trong Huu Nguyen 2023-02-21 15:12:34 +01:00
  • 925a1c70e7 fix(config): require redis when sso is enabled Trong Huu Nguyen 2023-02-21 14:54:29 +01:00
  • 492e0b5625 feat(sso/proxy): implement upstream reverseproxy with prerequisites Trong Huu Nguyen 2023-02-21 14:47:36 +01:00
  • 94a66fac2a refactor(handler): extract path matcher for reuse Trong Huu Nguyen 2023-02-21 14:45:14 +01:00
  • 59a2e7b7a0 refactor(session): simplify AccessToken method, don't export methods that are only used within package Trong Huu Nguyen 2023-02-21 14:40:27 +01:00
  • 27897dad63 refactor(handler/standalone): use new sessionmanager, remove unneeded methods Trong Huu Nguyen 2023-02-21 14:16:51 +01:00
  • 5b33313ccb feat(session): add GetOrRefresh method Trong Huu Nguyen 2023-02-21 14:12:56 +01:00
  • 7a52b0d1a3 refactor(handler/reverseproxy): require GetAccessToken from source instead of obsolete session handler Trong Huu Nguyen 2023-02-21 13:28:32 +01:00
  • f4ae907a2b refactor(handler/reverseproxy): clean up error handling Trong Huu Nguyen 2023-02-21 13:30:29 +01:00
  • 820fb733e6 refactor(session): separate handler into manager and reader, use session struct to avoid polluting exported methods Trong Huu Nguyen 2023-02-21 13:25:07 +01:00
  • 9d330d8395 deps: bump Trong Huu Nguyen 2023-02-21 13:13:23 +01:00
  • 49a90f3dbf refactor(session/ticket): rename method for clarity, add doc comments, clean up error handling Trong Huu Nguyen 2023-02-21 12:28:21 +01:00
  • db391a9e44 refactor(session/store): consolidate session errors and use multi-error wrapping Trong Huu Nguyen 2023-02-21 10:06:29 +01:00
  • 17f39f8c5f feat(session/data): add more validation methods Trong Huu Nguyen 2023-02-21 09:59:38 +01:00
  • 94d4b1a524 refactor(session): extract external ID function to separate file Trong Huu Nguyen 2023-02-20 12:39:46 +01:00
  • c6d3d11072 refactor(url): rename named import Trong Huu Nguyen 2023-02-20 12:39:05 +01:00
  • fb28da7241 refactor: consolidate handlers Trong Huu Nguyen 2023-02-16 10:55:50 +01:00
  • 3274cc5c65 refactor: move redirect package into url, clean up naming Trong Huu Nguyen 2023-02-16 09:23:57 +01:00
  • 2a8386637e deps: bump em Trong Huu Nguyen 2023-02-15 08:47:55 +01:00
  • 2c5d964983 refactor(handler/reverseproxy): reduce log severity for cookie decrypt failures Trong Huu Nguyen 2023-02-15 08:43:25 +01:00
  • c3532d2e60 build: bump to go version 1.20.1 Trong Huu Nguyen 2023-02-14 21:08:27 +01:00
  • 411201b3de refactor(redirect): clean up logging Trong Huu Nguyen 2023-02-14 21:01:46 +01:00
  • 0537c8172f feat(session): use tickets for per-session data encryption Trong Huu Nguyen 2023-02-14 19:35:16 +01:00
  • d17feacc34 refactor(handler/autologin): use sync.Map for cache Trong Huu Nguyen 2023-02-14 14:20:35 +01:00
  • 5a56c24bcc refactor(crypto): replace aes-256-gcm with xchacha20-poly1305 Trong Huu Nguyen 2023-02-13 21:48:23 +01:00
  • ce2698f2bb refactor(cookie): use rawurlencoding for base64 Trong Huu Nguyen 2023-02-13 20:15:12 +01:00
  • 1b2234f875 refactor(session/data): skip unnecessary base64 (un)marshalling Trong Huu Nguyen 2023-02-13 20:14:38 +01:00
  • 66dec32de0 feat(sso/proxy): implement handlers for session routes Trong Huu Nguyen 2023-02-10 14:35:31 +01:00
  • ea0756784d refactor(handler/reverseproxy): use ReverseProxy.Rewrite instead of Director Trong Huu Nguyen 2023-02-10 14:34:53 +01:00
  • 473e4a95a7 refactor: remove loginstatus Trong Huu Nguyen 2023-02-10 11:21:10 +01:00
  • 99e3e7d699 refactor(mock/openid): use redis as session store for integration tests Trong Huu Nguyen 2023-02-10 08:17:35 +01:00
  • c81297c401 build(deps): various bumps, use go-redis v9 Trong Huu Nguyen 2023-02-10 08:17:00 +01:00
  • 9881bf5b44 build: bump to go version 1.20 Trong Huu Nguyen 2023-02-09 13:30:00 +01:00
  • c8f148d892 refactor(handler/error): remove custom redirect Trong Huu Nguyen 2023-02-09 12:29:42 +01:00
  • 42dcba8367 refactor: replace relative canonical redirect with handler Trong Huu Nguyen 2023-02-09 11:56:52 +01:00
  • 54a43d832a feat(redirect): extract package for creating and validating canonical redirects Trong Huu Nguyen 2023-02-08 14:41:51 +01:00
  • 1f60d750f2 fix(mock): correct middleware for request generator Trong Huu Nguyen 2023-02-06 20:07:46 +01:00
  • 5f74ee08bc refactor(url): extract utility functions Trong Huu Nguyen 2023-02-06 20:24:05 +01:00
  • d13525f8a2 fix(handler/error): correct retry url for local logout Trong Huu Nguyen 2023-02-06 20:23:26 +01:00
  • 0e73c9b4d8 refactor(mock): configure relying party ingress before server start Trong Huu Nguyen 2023-02-06 10:51:02 +01:00
  • 1fdbe75c9e feat(sso/proxy): implement login handler Trong Huu Nguyen 2023-02-03 14:01:38 +01:00
  • c3c0c01926 feat(sso): partially implement handlers Trong Huu Nguyen 2023-02-03 08:18:54 +01:00
  • a4e4fc752e refactor(handler): remove provider name getter from handler Trong Huu Nguyen 2023-01-31 15:23:08 +01:00
  • 3d08d0b4b0 feat: initial skeleton setup for SSO mode Trong Huu Nguyen 2023-01-31 14:30:36 +01:00
  • bd748b9cef refactor(openid/provider): use name from config instead of indirection layer Trong Huu Nguyen 2023-01-31 14:19:57 +01:00
  • 2f6a3682d9 fix(all): use url.ParseRequestURI instead of just url.Parse where necessary Trong Huu Nguyen 2023-01-31 10:19:39 +01:00
  • f4bba075a6 refactor(handler/error): reduce log severity for context canceled errors Trong Huu Nguyen 2023-01-10 09:19:15 +01:00
  • 61a7a8f161 refactor: clean up errors and reverseproxy logging Trong Huu Nguyen 2023-01-09 16:04:22 +01:00
  • ce177fb4a5 refactor(handler/url): remove unneeded redirect parameter encoding Trong Huu Nguyen 2023-01-05 09:39:42 +01:00
  • 07fc0e24dd perf(handler/autologin): cache NeedsLogin results Trong Huu Nguyen 2023-01-04 15:46:08 +01:00
  • bd53417f8b refactor(handler): move handler tests to separate files Trong Huu Nguyen 2023-01-04 13:35:26 +01:00
  • f51fe97b23 refactor(handler): flatten handler modules Trong Huu Nguyen 2023-01-04 13:23:54 +01:00
  • 6a142cf5a5 refactor(handler): use session cookie for frontchannel logout if available, clean up logout handlers Trong Huu Nguyen 2023-01-04 11:00:33 +01:00
  • 67d3977cc1 refactor(handler/sessionrefresh): use found session key instead of looking up key again Trong Huu Nguyen 2023-01-03 14:29:39 +01:00
  • ae31267fd1 refactor: simplify returning boolean expressions Trong Huu Nguyen 2023-01-03 14:00:33 +01:00
  • a682f08715 ci: add staticcheck and govulncheck Trong Huu Nguyen 2023-01-03 13:59:11 +01:00
  • c3a5033968 test(handler): add test for authorization headers, ensure upstream validates token Trong Huu Nguyen 2023-01-03 13:50:35 +01:00
  • d1b810a317 Add support for Apple Silicon (linux/arm64) platform. (#69)Fixes https://github.com/nais/wonderwall/issues/67 Michal J. Sladek 2023-02-10 13:05:25 +01:00
  • da54f4fcc5 build(deps): bump github.com/spf13/viper from 1.14.0 to 1.15.0 (#65) dependabot[bot] 2023-01-31 09:16:41 +01:00
  • d8493e1e7b build(deps): bump github.com/alicebob/miniredis/v2 from 2.23.1 to 2.30.0 (#62) dependabot[bot] 2023-01-10 08:42:51 +00:00
  • fb8a4edb71 build(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0 (#63) dependabot[bot] 2023-01-10 09:40:57 +01:00
  • a925a3f112 build(deps): bump github.com/bmatcuk/doublestar/v4 from 4.4.0 to 4.6.0 (#64) dependabot[bot] 2023-01-10 09:36:21 +01:00
  • 4291de3afc ci: re-run workflow for 0cb51a3 Trong Huu Nguyen 2022-12-19 15:36:19 +01:00
  • 0cb51a32ba build(deps): bump github.com/alicebob/miniredis/v2 from 2.23.0 to 2.23.1 (#60) dependabot[bot] 2022-12-19 14:29:25 +00:00
  • af78c91c09 ci: prefix sha-tags with date Trong Huu Nguyen 2022-12-19 15:13:06 +01:00
  • 9cf982fd6a ci: add write permission to allow publishing to ghcr Trong Huu Nguyen 2022-12-19 15:02:54 +01:00
  • b3c50acb76 docs: use mermaid for diagrams Trong Huu Nguyen 2022-12-19 13:04:12 +01:00
  • 4896f9aa41 deps: more bumps Trong Huu Nguyen 2022-12-19 09:45:16 +01:00
  • 55c615f095 ci: set up jobs for publishing to GAR Trong Huu Nguyen 2022-12-16 15:06:29 +01:00
  • f65f7a695b build: use latest go version, 1.19.4 Trong Huu Nguyen 2022-12-16 14:55:08 +01:00
  • 0485074829 refactor(handler/reverseproxy): reduce log severity for invalid auth state Trong Huu Nguyen 2022-12-16 14:18:07 +01:00
  • 1d754baabe feat(handler/reverseproxy): preserve incoming authorization for unauthenticated sessions Trong Huu Nguyen 2022-12-16 14:17:51 +01:00
  • 4ee771856a deps: bump em Trong Huu Nguyen 2022-12-02 13:49:27 +01:00
  • 2f6dc9c779 refactor(session/handler): reduce log severity for lock release, adjust lock duration and timeout Trong Huu Nguyen 2022-11-02 11:57:41 +01:00
  • 185485a6fe feat(handler/autologin): use doublestar library for nested path matching Trong Huu Nguyen 2022-11-01 13:51:35 +01:00
  • e76bb5c369 perf: use automaxprocs to prevent cpu throttling under cgroup quotas Trong Huu Nguyen 2022-10-28 12:05:45 +02:00
  • 16fa07921f chore: bump dependencies Trong Huu Nguyen 2022-10-26 10:58:48 +02:00
  • e7244df4d5 feat: add local logout endpoint Trong Huu Nguyen 2022-10-26 10:57:25 +02:00
  • 30f155a644 Add CodeQL Code Scanning (#58) Hans Kristian Flaatten 2022-11-10 09:22:14 +01:00
  • 0b381bbb00 test(session/data): fix flaky expire test Trong Huu Nguyen 2022-10-17 12:06:03 +02:00
  • 82743f76bb test(session/data): fix flaky timeout test Trong Huu Nguyen 2022-10-17 12:00:44 +02:00
  • 002e4ac8ea feat(handler/error): automatically retry errors before displaying error page Trong Huu Nguyen 2022-10-03 10:28:34 +02:00