Caleb Doxsey
0cfb1025db
core/proto: update protoc dependencies ( #5218 )
...
* core/proto: update protoc dependencies
* cleanup
* disable unimplemented forward compatibility check
* fix mock
* add generate make command
* add .0
2024-08-15 11:12:05 -06:00
Caleb Doxsey
d225288ab3
core/identity: dynamic authenticator registration ( #5105 )
2024-05-07 16:45:39 -06:00
Caleb Doxsey
1a5b8b606f
core/lint: upgrade golangci-lint, replace interface{} with any ( #5099 )
...
* core/lint: upgrade golangci-lint, replace interface{} with any
* regen proto
2024-05-02 14:33:52 -06:00
Caleb Doxsey
818f3926bf
core/grpc: fix deprecated protobuf package, remove tools ( #4643 )
2023-10-26 11:38:54 -06:00
Caleb Doxsey
23ea48815f
core/authorize: check for expired tokens ( #4543 )
...
* core/authorize: check for expired tokens
* Update pkg/grpc/session/session.go
Co-authored-by: Denis Mishin <dmishin@pomerium.com>
* lint
* fix zero timestamps
* fix
---------
Co-authored-by: Denis Mishin <dmishin@pomerium.com>
2023-09-15 16:06:13 -06:00
Caleb Doxsey
438aecd7bc
config: add customization options for logging ( #4383 )
...
* config: add customization options for logging
* config: validate log fields
* allocate slices once
2023-07-24 13:17:03 -06:00
Caleb Doxsey
be0104b842
config: add cookie_same_site option ( #4148 )
2023-05-03 14:36:42 -06:00
Caleb Doxsey
3f9dfbef76
device: add generic methods for working with user+session devices ( #3710 )
2022-10-28 08:41:12 -06:00
Denis Mishin
2917f07dac
bump protoc to 3.21.7 ( #3646 )
2022-10-03 13:01:42 -04:00
Caleb Doxsey
3c63b6c028
authorize: add policy error details for custom error messages ( #3542 )
...
* authorize: add policy error details for custom error messages
* remove fmt.Println
* fix tests
* add docs
2022-08-09 14:46:31 -06:00
Caleb Doxsey
36f73fa6c7
authorize: track session and service account access date ( #3220 )
...
* session: add accessed at date
* authorize: track session and service account access times
* Revert "databroker: add support for field masks on Put (#3210 )"
This reverts commit 2dc778035d
.
* add test
* fix data race in test
* add deadline for update
* track dropped accesses
2022-03-31 09:19:04 -06:00
Caleb Doxsey
8fc5dbf4c5
grpc: regenerate protobuf code ( #3208 )
2022-03-29 15:18:10 -06:00
Caleb Doxsey
1342523cda
grpc: remove ptypes references ( #3078 )
2022-02-24 08:37:59 -07:00
Caleb Doxsey
ddccbcf631
devices: add device protobuf types ( #2682 )
2021-10-19 07:22:26 -06:00
Nathan Hayfield
1f718e4ce1
add description to service accounts ( #2611 )
2021-09-20 14:10:12 -04:00
Caleb Doxsey
6af0655206
protoutil: add NewAny method for deterministic serialization ( #2462 )
2021-08-09 17:51:57 -06:00
Caleb Doxsey
cef08a1c2d
authorize: remove service account impersonate user id, email and groups ( #2365 )
2021-07-15 09:31:45 -06:00
wasaga
134ca74ec9
proxy: add idle timeout ( #2319 )
2021-07-02 10:29:53 -04:00
Caleb Doxsey
e2ebef44ef
telemetry: add installation id ( #2017 )
...
* telemetry: add installation id
* set installation id globally
* remove unneeded changes
2021-03-24 07:22:54 -06:00
Caleb Doxsey
5d60cff21e
databroker: refactor databroker to sync all changes ( #1879 )
...
* refactor backend, implement encrypted store
* refactor in-memory store
* wip
* wip
* wip
* add syncer test
* fix redis expiry
* fix linting issues
* fix test by skipping non-config records
* fix backoff import
* fix init issues
* fix query
* wait for initial sync before starting directory sync
* add type to SyncLatest
* add more log messages, fix deadlock in in-memory store, always return server version from SyncLatest
* update sync types and tests
* add redis tests
* skip macos in github actions
* add comments to proto
* split getBackend into separate methods
* handle errors in initVersion
* return different error for not found vs other errors in get
* use exponential backoff for redis transaction retry
* rename raw to result
* use context instead of close channel
* store type urls as constants in databroker
* use timestampb instead of ptypes
* fix group merging not waiting
* change locked names
* update GetAll to return latest record version
* add method to grpcutil to get the type url for a protobuf type
2021-02-18 15:24:33 -07:00
Caleb Doxsey
9c34fcbf29
protobuf: upgrade protoc to 3.14 ( #1832 )
2021-01-27 10:06:40 -07:00
Caleb Doxsey
a6bc9f492f
authorize: move impersonation into session/service account ( #1765 )
...
* move impersonation into session/service account
* replace frontend statik
* fix data race
* move JWT filling to separate function, break up functions
* maybe fix data race
* fix code climate issue
2021-01-11 15:40:08 -07:00
Caleb Doxsey
6cc720a1b5
fix error wrapping ( #1737 )
2021-01-05 12:46:14 -07:00
Caleb Doxsey
10b5c5ca0e
fix querying claim data on the dashboard ( #1560 )
2020-10-29 10:49:02 -06:00
Caleb Doxsey
153e438eb6
authorize: implement allowed_idp_claims ( #1542 )
...
* add arbitrary claims to session
* add support for maps
* update flattened claims
* fix eol
* fix trailing whitespace
* fix tests
2020-10-23 14:05:37 -06:00
Caleb Doxsey
0a6796ff71
authorize: add support for service accounts ( #1374 )
2020-09-04 10:37:00 -06:00
Caleb Doxsey
1285a9d91d
databroker: add support for config settings ( #1253 )
2020-08-11 07:50:19 -06:00
Caleb Doxsey
97f85481f8
fix redirect loop, remove user/session services, remove duplicate deleted_at fields ( #1162 )
...
* fix redirect loop, remove user/session services, remove duplicate deleted_at fields
* change loop
* reuse err variable
* wrap errors, use cookie timeout
* wrap error, duplicate if
2020-07-30 09:41:57 -06:00
Caleb Doxsey
73105c0b08
audit: add protobuf definitions ( #1047 )
2020-07-08 07:23:03 -06:00
Caleb Doxsey
091b71f12e
grpc: rename internal/grpc to pkg/grpc ( #1010 )
...
* grpc: rename internal/grpc to pkg/grpc
* don't ignore pkg dir
* remove debug line
2020-06-26 09:17:02 -06:00