Kenneth Jenkins
630e2ecc23
lua: add fuzz test for cookie parsing
...
Add a fuzz test comparing the clean-upstream.lua script against a
reference implementation in Go.
2023-12-14 14:42:18 -08:00
Denis Mishin
b66634d1e6
zero: only leave public packages in pkg/zero ( #4854 )
2023-12-12 14:24:37 -05:00
Kenneth Jenkins
a6ae9d3f2d
integration: check for profile cookies ( #4847 )
...
Update the authentication flow integration test to verify that the
pomerium_identity_profile cookies are not present for the stateful
authentication flow.
2023-12-12 10:07:13 -08:00
Kenneth Jenkins
fe46ed33f4
config: no longer stub out HPKE public key fetch ( #4853 )
...
This partially reverts commit a1388592d8
.
Fetching the authenticate service HPKE public key is required only for
the stateless authentication flow. Now that Pomerium will instead use
the older (stateful) authentication flow when configured for a
self-hosted authenticate service, this logic shouldn't be needed at all.
Removing this logic should also make it easier to test against a local
instance of the hosted authenticate service.
2023-12-12 09:57:58 -08:00
Kenneth Jenkins
1dbe4410d7
move events.go out of internal/authenticateflow ( #4852 )
...
Commit b7896b3153
moved events.go from the 'authenticate' package to
'internal/authenticateflow' in order to avoid an import cycle. However
this location is not actually suitable, as the hosted authenticate
service refers to AuthEvent and AuthEventFn.
Move events.go back out from under 'internal', to a new package
'authenticate/events'. This should still avoid an import cycle between
'authenticate' and 'internal/authenticateflow', while also allowing the
hosted authenticate service to use the events types.
2023-12-11 19:42:56 -08:00
Denis Mishin
c5f7519c06
zero/openapi: pin v1.0.0 of a runtime ( #4851 )
2023-12-11 18:24:44 -05:00
Denis Mishin
ea64902a73
zero: merge pomerium/zero-sdk ( #4848 )
2023-12-11 17:31:39 -05:00
Denis Mishin
c4dd965f2d
zero/telemetry: calculate DAU and MAU ( #4810 )
2023-12-11 13:37:01 -05:00
Kenneth Jenkins
e0ac870442
integration: fix multi-stateless configuration ( #4845 )
...
Commit 08c186a
contains a bug in the integration configuration template,
preventing the multi-stateless cluster from actually setting the
DEBUG_FORCE_AUTHENTICATE_FLOW environment variable. As a result this
cluster was not exercising the stateless authentication flow.
Fix the template so that this variable is applied as intended.
Add an integration test case to verify that the intended authentication
flow is in use: for the stateful flow, different routes should share the
same underlying session, but for the stateless flow, different routes
should receive different sessions.
2023-12-08 09:12:15 -08:00
Kenneth Jenkins
08c186a72e
integration: test with both authentication flows ( #4817 )
...
Add an environment variable to allow forcing either the stateful or the
stateless authenticate flow.
Split the existing integration test clusters "single" and "multi" into
four new clusters: "single-stateful", "single-stateless",
"multi-stateful", and "multi-stateless", so that the integration tests
will run for both the stateful and the stateless authenticate flows.
(The "kubernetes" cluster is not currently being run, so I've left it
alone for now.)
2023-12-07 16:06:41 -08:00
dependabot[bot]
a0d5f49c17
chore(deps): bump distroless/base from 46c5b9b
to b31a6e0
in /.github ( #4670 )
...
chore(deps): bump distroless/base in /.github
Bumps distroless/base from `46c5b9b` to `b31a6e0`.
---
updated-dependencies:
- dependency-name: distroless/base
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 16:18:41 -07:00
dependabot[bot]
eb598ccb5e
chore(deps): bump github.com/prometheus/common from 0.44.0 to 0.45.0 ( #4686 )
...
Bumps [github.com/prometheus/common](https://github.com/prometheus/common ) from 0.44.0 to 0.45.0.
- [Release notes](https://github.com/prometheus/common/releases )
- [Commits](https://github.com/prometheus/common/compare/v0.44.0...v0.45.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/common
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 16:18:15 -07:00
dependabot[bot]
f4b243dc77
chore(deps): bump actions/checkout from 4.1.0 to 4.1.1 ( #4692 )
...
Bumps [actions/checkout](https://github.com/actions/checkout ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8ade135a41...b4ffde65f4
)
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 16:17:56 -07:00
Caleb Doxsey
73c27e88e0
core/redis: remove comment ( #4843 )
2023-12-07 15:55:02 -07:00
Kenneth Jenkins
5ccd7a520a
support both stateful and stateless authenticate ( #4765 )
...
Update the initialization logic for the authenticate, authorize, and
proxy services to automatically select between the stateful
authentication flow and the stateless authentication flow, depending on
whether Pomerium is configured to use the hosted authenticate service.
Add a unit test case to verify that the sign_out handler does not
trigger a sign in redirect.
2023-12-07 14:24:13 -08:00
dependabot[bot]
b9c56074aa
chore(deps): bump github.com/coreos/go-oidc/v3 from 3.6.0 to 3.8.0 ( #4791 )
...
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc ) from 3.6.0 to 3.8.0.
- [Release notes](https://github.com/coreos/go-oidc/releases )
- [Commits](https://github.com/coreos/go-oidc/compare/v3.6.0...v3.8.0 )
---
updated-dependencies:
- dependency-name: github.com/coreos/go-oidc/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 14:45:25 -07:00
dependabot[bot]
a8cf1e9d6f
chore(deps): bump github.com/jackc/pgx/v5 from 5.4.3 to 5.5.0 ( #4803 )
...
Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx ) from 5.4.3 to 5.5.0.
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jackc/pgx/compare/v5.4.3...v5.5.0 )
---
updated-dependencies:
- dependency-name: github.com/jackc/pgx/v5
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 14:41:24 -07:00
dependabot[bot]
7a9272c485
chore(deps): bump github.com/gorilla/websocket from 1.5.0 to 1.5.1 ( #4793 )
...
Bumps [github.com/gorilla/websocket](https://github.com/gorilla/websocket ) from 1.5.0 to 1.5.1.
- [Release notes](https://github.com/gorilla/websocket/releases )
- [Commits](https://github.com/gorilla/websocket/compare/v1.5.0...v1.5.1 )
---
updated-dependencies:
- dependency-name: github.com/gorilla/websocket
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 14:40:49 -07:00
dependabot[bot]
3107496bb8
chore(deps): bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0 ( #4688 )
...
Bumps [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml ) from 1.3.0 to 1.4.0.
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases )
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md )
- [Commits](https://github.com/kubernetes-sigs/yaml/compare/v1.3.0...v1.4.0 )
---
updated-dependencies:
- dependency-name: sigs.k8s.io/yaml
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 14:03:57 -07:00
dependabot[bot]
98c19f924d
chore(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.6 ( #4674 )
...
Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl ) from 1.3.3 to 1.3.6.
- [Release notes](https://github.com/cloudflare/circl/releases )
- [Commits](https://github.com/cloudflare/circl/compare/v1.3.3...v1.3.6 )
---
updated-dependencies:
- dependency-name: github.com/cloudflare/circl
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 14:03:11 -07:00
dependabot[bot]
50a6431245
chore(deps): bump github.com/prometheus/client_model from 0.4.1-0.20230718164431-9a2bf3000d16 to 0.5.0 ( #4672 )
...
chore(deps): bump github.com/prometheus/client_model
Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model ) from 0.4.1-0.20230718164431-9a2bf3000d16 to 0.5.0.
- [Release notes](https://github.com/prometheus/client_model/releases )
- [Commits](https://github.com/prometheus/client_model/commits/v0.5.0 )
---
updated-dependencies:
- dependency-name: github.com/prometheus/client_model
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 14:00:27 -07:00
dependabot[bot]
a8927e8ff8
chore(deps): bump distroless/base-debian12 from d64f548
to 1dfdb5e
in /.github ( #4671 )
...
chore(deps): bump distroless/base-debian12 in /.github
Bumps distroless/base-debian12 from `d64f548` to `1dfdb5e`.
---
updated-dependencies:
- dependency-name: distroless/base-debian12
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:59:24 -07:00
dependabot[bot]
21999f3760
chore(deps): bump stefanzweifel/git-auto-commit-action from 4.16.0 to 5.0.0 ( #4693 )
...
chore(deps): bump stefanzweifel/git-auto-commit-action
Bumps [stefanzweifel/git-auto-commit-action](https://github.com/stefanzweifel/git-auto-commit-action ) from 4.16.0 to 5.0.0.
- [Release notes](https://github.com/stefanzweifel/git-auto-commit-action/releases )
- [Changelog](https://github.com/stefanzweifel/git-auto-commit-action/blob/master/CHANGELOG.md )
- [Commits](3ea6ae190b...8756aa072e
)
---
updated-dependencies:
- dependency-name: stefanzweifel/git-auto-commit-action
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:57:36 -07:00
dependabot[bot]
bdf6d34d8b
chore(deps): bump cloud.google.com/go/storage from 1.33.0 to 1.35.1 ( #4750 )
...
Bumps [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go ) from 1.33.0 to 1.35.1.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases )
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.33.0...storage/v1.35.1 )
---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:57:15 -07:00
dependabot[bot]
5da9f52a5e
chore(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 ( #4680 )
...
Bumps [github.com/fsnotify/fsnotify](https://github.com/fsnotify/fsnotify ) from 1.6.0 to 1.7.0.
- [Release notes](https://github.com/fsnotify/fsnotify/releases )
- [Changelog](https://github.com/fsnotify/fsnotify/blob/main/CHANGELOG.md )
- [Commits](https://github.com/fsnotify/fsnotify/compare/v1.6.0...v1.7.0 )
---
updated-dependencies:
- dependency-name: github.com/fsnotify/fsnotify
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:55:50 -07:00
dependabot[bot]
f186c5b5b4
chore(deps): bump actions/setup-node from 3.8.1 to 4.0.0 ( #4694 )
...
Bumps [actions/setup-node](https://github.com/actions/setup-node ) from 3.8.1 to 4.0.0.
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](5e21ff4d9b...8f152de45c
)
---
updated-dependencies:
- dependency-name: actions/setup-node
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:55:26 -07:00
dependabot[bot]
c92f860a81
chore(deps): bump golang.org/x/oauth2 from 0.12.0 to 0.15.0 ( #4797 )
...
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2 ) from 0.12.0 to 0.15.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.12.0...v0.15.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:54:55 -07:00
dependabot[bot]
29f22ff50a
chore(deps): bump github.com/open-policy-agent/opa from 0.57.0 to 0.59.0 ( #4799 )
...
Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa ) from 0.57.0 to 0.59.0.
- [Release notes](https://github.com/open-policy-agent/opa/releases )
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.57.0...v0.59.0 )
---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:54:24 -07:00
dependabot[bot]
87c3b4a347
chore(deps): bump github.com/klauspost/compress from 1.17.0 to 1.17.4 ( #4798 )
...
Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress ) from 1.17.0 to 1.17.4.
- [Release notes](https://github.com/klauspost/compress/releases )
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml )
- [Commits](https://github.com/klauspost/compress/compare/v1.17.0...v1.17.4 )
---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:53:26 -07:00
dependabot[bot]
3a0ca6726f
chore(deps): bump actions/stale from 8.0.0 to 9.0.0 ( #4825 )
...
Bumps [actions/stale](https://github.com/actions/stale ) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/stale/releases )
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md )
- [Commits](1160a22402...28ca103628
)
---
updated-dependencies:
- dependency-name: actions/stale
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:52:35 -07:00
dependabot[bot]
67002b21be
chore(deps): bump busybox from 3fbc632
to 1ceb872
in /.github ( #4824 )
...
Bumps busybox from `3fbc632` to `1ceb872`.
---
updated-dependencies:
- dependency-name: busybox
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:51:59 -07:00
dependabot[bot]
58fddfe6e2
chore(deps): bump github.com/gorilla/mux from 1.8.0 to 1.8.1 ( #4790 )
...
Bumps [github.com/gorilla/mux](https://github.com/gorilla/mux ) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/gorilla/mux/releases )
- [Commits](https://github.com/gorilla/mux/compare/v1.8.0...v1.8.1 )
---
updated-dependencies:
- dependency-name: github.com/gorilla/mux
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:51:32 -07:00
dependabot[bot]
b2d0b454c9
chore(deps): bump github.com/shirou/gopsutil/v3 from 3.23.9 to 3.23.11 ( #4794 )
...
Bumps [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil ) from 3.23.9 to 3.23.11.
- [Release notes](https://github.com/shirou/gopsutil/releases )
- [Commits](https://github.com/shirou/gopsutil/compare/v3.23.9...v3.23.11 )
---
updated-dependencies:
- dependency-name: github.com/shirou/gopsutil/v3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:51:00 -07:00
dependabot[bot]
7004698966
chore(deps): bump github.com/VictoriaMetrics/fastcache from 1.12.1 to 1.12.2 ( #4802 )
...
chore(deps): bump github.com/VictoriaMetrics/fastcache
Bumps [github.com/VictoriaMetrics/fastcache](https://github.com/VictoriaMetrics/fastcache ) from 1.12.1 to 1.12.2.
- [Commits](https://github.com/VictoriaMetrics/fastcache/compare/v1.12.1...v1.12.2 )
---
updated-dependencies:
- dependency-name: github.com/VictoriaMetrics/fastcache
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:50:27 -07:00
dependabot[bot]
a02d879b37
chore(deps): bump actions/setup-python from 4.7.0 to 5.0.0 ( #4827 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4.7.0 to 5.0.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](61a6322f88...0a5c615913
)
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:49:47 -07:00
dependabot[bot]
3e851cadc2
chore(deps): bump docker/metadata-action from 5.0.0 to 5.3.0 ( #4826 )
...
Bumps [docker/metadata-action](https://github.com/docker/metadata-action ) from 5.0.0 to 5.3.0.
- [Release notes](https://github.com/docker/metadata-action/releases )
- [Commits](96383f4557...31cebacef4
)
---
updated-dependencies:
- dependency-name: docker/metadata-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:49:24 -07:00
dependabot[bot]
479d8ac5e7
chore(deps): bump github.com/yuin/gopher-lua from 1.1.0 to 1.1.1 ( #4832 )
...
Bumps [github.com/yuin/gopher-lua](https://github.com/yuin/gopher-lua ) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/yuin/gopher-lua/releases )
- [Commits](https://github.com/yuin/gopher-lua/compare/v1.1.0...v1.1.1 )
---
updated-dependencies:
- dependency-name: github.com/yuin/gopher-lua
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:48:34 -07:00
dependabot[bot]
ce145414b4
chore(deps): bump github.com/caddyserver/certmagic from 0.19.2 to 0.20.0 ( #4836 )
...
Bumps [github.com/caddyserver/certmagic](https://github.com/caddyserver/certmagic ) from 0.19.2 to 0.20.0.
- [Release notes](https://github.com/caddyserver/certmagic/releases )
- [Commits](https://github.com/caddyserver/certmagic/compare/v0.19.2...v0.20.0 )
---
updated-dependencies:
- dependency-name: github.com/caddyserver/certmagic
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 13:48:09 -07:00
Kenneth Jenkins
a771b82a72
storage/inmemory: fix Patch() error handling ( #4838 )
...
The Patch() method was intended to skip any records that do not
currently exist. However, currently inmemory.Backend.Patch() will return
ErrNotFound if the last record in the records slice is not found (it
will ignore any other previous records that are not found).
Update the error handling logic here to be consistent with the postgres
backend, and add a unit test to exercise this case.
2023-12-07 12:21:10 -08:00
Kenneth Jenkins
c01d0e045d
authenticateflow: add stateful flow ( #4822 )
...
Add a new Stateful type implementing the stateful authentication flow
from Pomerium v0.20 and earlier.
This consists mainly of logic from authenticate/handlers.go prior to
commits 57217af
and 539fd51
.
One significant change is to set the default IdP ID when an IdP ID is
not provided in the request URL (e.g. when signing in directly at the
authenticate service domain). Otherwise, if session state is stored with
an empty IdP ID, it won't be valid for any route.
2023-12-07 09:54:42 -08:00
dependabot[bot]
0e9a07eac9
chore(deps): bump mikefarah/yq from 4.40.3 to 4.40.4 ( #4829 )
...
Bumps [mikefarah/yq](https://github.com/mikefarah/yq ) from 4.40.3 to 4.40.4.
- [Release notes](https://github.com/mikefarah/yq/releases )
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt )
- [Commits](c11a53322b...1c3d551060
)
---
updated-dependencies:
- dependency-name: mikefarah/yq
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 12:31:53 -05:00
dependabot[bot]
806a901fa1
chore(deps): bump golang from 1.21.4-bookworm to 1.21.5-bookworm ( #4828 )
...
Bumps golang from 1.21.4-bookworm to 1.21.5-bookworm.
---
updated-dependencies:
- dependency-name: golang
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 12:30:31 -05:00
dependabot[bot]
68aeebe0b8
chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 ( #4830 )
...
Bumps [actions/setup-go](https://github.com/actions/setup-go ) from 4.1.0 to 5.0.0.
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](93397bea11...0c52d547c9
)
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 11:59:54 -05:00
dependabot[bot]
aabe235cc6
chore(deps): bump google.golang.org/api from 0.143.0 to 0.153.0 ( #4835 )
...
Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client ) from 0.143.0 to 0.153.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases )
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-api-go-client/compare/v0.143.0...v0.153.0 )
---
updated-dependencies:
- dependency-name: google.golang.org/api
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 11:58:45 -05:00
dependabot[bot]
d4aa96ac28
chore(deps): bump node from 42a4d97
to 5f21943
( #4659 )
...
Bumps node from `42a4d97` to `5f21943`.
---
updated-dependencies:
- dependency-name: node
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 09:48:56 -07:00
dependabot[bot]
17eb5d8fd9
chore(deps): bump google-github-actions/auth from 1.1.1 to 2.0.0 ( #4778 )
...
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth ) from 1.1.1 to 2.0.0.
- [Release notes](https://github.com/google-github-actions/auth/releases )
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md )
- [Commits](35b0e87d16...67e9c72af6
)
---
updated-dependencies:
- dependency-name: google-github-actions/auth
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-07 09:44:08 -07:00
Caleb Doxsey
98c6603f3b
core/ci: disable dependabot for npm ( #4823 )
2023-12-07 09:41:09 -07:00
Caleb Doxsey
ce8abde236
core/go: use max procs ( #4766 )
...
* core/go: use max procs
* update test
* logging
2023-12-07 09:14:57 -07:00
Kenneth Jenkins
9db828ffd4
authenticateflow: move logAuthenticateEvent ( #4821 )
...
Move the Stateless.logAuthenticateEvent() method into the main
stateless.go file.
(This was in events.go temporarily so that Git would track the file
history as a rename from authenticate/events.go.)
2023-12-06 17:14:20 -08:00
Kenneth Jenkins
b7896b3153
authenticateflow: move stateless flow logic ( #4820 )
...
Consolidate all logic specific to the stateless authenticate flow into a
a new Stateless type in a new package internal/authenticateflow. This is
in preparation for adding a new Stateful type implementing the older
stateful authenticate flow (from Pomerium v0.20 and previous).
This change is intended as a pure refactoring of existing logic, with no
changes in functionality.
2023-12-06 16:55:57 -08:00