Commit graph

3735 commits

Author SHA1 Message Date
Bobby DeSimone
e982e72146
Merge pull request #151 from nareddyt/web-socket-support
Enable websocket support
2019-06-01 22:23:19 -07:00
Tejasvi Nareddy
f966e5ab19 (proxy, internal/config, internal/log, docs): opt-in websocket support 2019-06-01 22:39:46 -04:00
Bobby DeSimone
cf61c6be3d
Merge pull request #150 from travisgroth/feature/hot-policy
Feature/hot policy
2019-06-01 15:54:28 -07:00
Travis Groth
8c2beac6f1 Add automatic configuration reloading and
policy handling
2019-06-01 14:52:10 -04:00
Bobby DeSimone
77f3933560
internal/config: change internal-authenticate-addr to url (#154) 2019-05-31 17:53:58 -07:00
Bobby DeSimone
1791e3d3f7
Merge pull request #137 from desimone/docs/add-upgrading-guide
docs: add upgrade guide
2019-05-31 11:40:40 -07:00
Bobby DeSimone
bd6d1e4745
Merge pull request #1 from travisgroth/docs/add-upgrading-guide
Added note for configuration refactor
2019-05-30 20:21:25 -07:00
Travis Groth
1148c3cd9b Added note for configuration refactor 2019-05-30 21:56:03 -04:00
Bobby DeSimone
7487de94df
authenticate: catch missing required setting (#149) 2019-05-30 14:20:28 -07:00
Bobby DeSimone
191015a0ed
Merge pull request #142 from u5surf/issue-135
all: fix incorrect http status codes #135
2019-05-28 21:16:16 -07:00
u5surf
c274112ecc all: fix incorrect http status codes #135 2019-05-29 12:57:02 +09:00
Bobby DeSimone
f68338c888
internal/httputil: add request id to error page (#144) 2019-05-28 18:12:49 -07:00
Bobby DeSimone
3d6471c4b3
docs: fix example policy name typo (#143)
Rename s/config-policy-only.yaml /config.example.policy.only/
Removed POLICY_FILE references
2019-05-27 14:06:10 -07:00
Bobby DeSimone
80612247e3
docs: add versioning (#141)
docs: make colors and logos consistent
Fixes #109
2019-05-26 21:52:51 -07:00
Bobby DeSimone
794b7996db
Merge pull request #139 from travisgroth/feature/viper-config
deployment: expose config file interface in docker images
2019-05-26 20:09:07 -07:00
Travis Groth
02177043aa Add config handling to dockerfiles and update documentation 2019-05-26 22:28:51 -04:00
Bobby DeSimone
2dc88d44ee
Merge pull request #124 from desimone/docs/update-helm-and-aws-script
deployment: remove helm from main repo
2019-05-26 14:59:32 -07:00
Bobby DeSimone
66b4c2d3cd
authenticate/proxy: add user impersonation, refresh, dashboard (#123)
proxy: Add user dashboard. [GH-123]
proxy/authenticate: Add manual refresh of their session. [GH-73]
authorize: Add administrator (super user) account support. [GH-110]
internal/policy: Allow administrators to impersonate other users. [GH-110]
2019-05-26 12:33:00 -07:00
Travis Groth
af254882e6 Fix some missing coverage 2019-05-26 07:56:52 -04:00
Bobby DeSimone
3ee23e3308
docs: add upgrade guide 2019-05-25 14:08:12 -07:00
Bobby DeSimone
dc2eb9668c
Merge pull request #130 from travisgroth/feature/viper-config
deployment: switch to viper for config
2019-05-25 13:44:57 -07:00
Travis Groth
febf9464a4 Switch options parsing to viper 2019-05-25 15:06:32 -04:00
Bobby DeSimone
702cc30b77
Merge pull request #134 from nareddyt/unauthenticated-routes
proxy: support for public unauthenticated routes
2019-05-22 20:29:39 -07:00
Tejasvi Nareddy
c5d2e40435 (proxy, internal\policy, docs\reference): define new access control option to bypass authentication 2019-05-22 23:12:30 -04:00
Bobby DeSimone
c53c07c274
Merge pull request #133 from nareddyt/bug-route-config-addresses
proxy: fix bug with incorrect addressing causing invalid route configs
2019-05-21 16:30:21 -07:00
Tejasvi Nareddy
9992eebcac proxy: fix bug with incorrect addressing causing invalid route configs 2019-05-21 17:08:03 -04:00
Bobby DeSimone
409f44a9be
Merge pull request #131 from desimone/feature/share-session-state
internal/sessions: make user state domain scoped
2019-05-20 20:51:03 -07:00
Bobby DeSimone
3eff6cce13
internal/sessions: make user state domain scoped
internal/sessions: session state is domain scoped
internal/sessions: infer csrf cookie, route scoped
proxy & authenticate: use shared cookie name
proxy & authenticate: prevent resaving unchanged session
proxy & authenticate: redirect instead of error for no session on login
internal/config: merge cookies
proxy: remove favicon specific route
proxy: use mock server for tests
proxy: add tests for failures
2019-05-20 20:44:05 -07:00
Bobby DeSimone
2eb2eb0620
Merge pull request #127 from deltabweb/master
deployment: add arm64v8 dockerfile
2019-05-19 20:07:26 -07:00
deltabweb
d1042d8c8b
Create Dockerfile for arm64 - Fixes #125 2019-05-20 14:16:47 +12:00
Bobby DeSimone
382f9de876
Merge pull request #126 from benny-gold/master
authenticate: add more verbose errors to authenticate handler
2019-05-19 11:31:27 -07:00
Ben Gould
07bb698bb9 more verbose errors on invalid uri parameter 2019-05-19 19:22:13 +01:00
Bobby DeSimone
af2c41a238
internal/config: centralize options handling 2019-05-18 12:44:32 -07:00
Travis Groth
ebb6df6c3f Refactor to central options struct and parsing 2019-05-18 08:17:36 -04:00
Bobby DeSimone
950f720660
docs: add amazon helm script to examples 2019-05-16 21:44:33 -07:00
Bobby DeSimone
562317dbf6
deployment: remove helm from main repo
- docs: add helm deployment script for aws
2019-05-16 21:35:02 -07:00
Bobby DeSimone
5970d6c766
Merge pull request #121 from banzaicloud/dockerfile-golint
docker: add missing golint command
2019-05-15 12:57:40 -07:00
Nandor Kracser
8b86454cb5 docker: add missing golint command 2019-05-15 13:29:16 +02:00
Bobby DeSimone
27d4683662
authenticate: add CSP headers to this service only (#120) 2019-05-14 22:29:24 -07:00
Bobby DeSimone
cfac5f10ff
cmd/pomerium: move middleware for all http handlers to global context (#117) 2019-05-14 13:23:25 -07:00
Bobby DeSimone
04a653f694
docs: fix typos and reorganize 2019-05-09 23:16:26 -07:00
Bobby DeSimone
5448e3599a
cmd/pomerium : refactor main to more testable (#112)
- cmd/pomerium: refactor global timeouts to be configurable
- cmd/pomerium: add tests
- cmd/pomerium: remove debug flag, set with env vars only
- cmd/pomerium: global ping now returns version not OK
- proxy: validate shared secret encoding and length
- docs: add timeout to example policy
- docs: document timeouts and cors
- docs: update pomerium logo
- docs: add policy authorization docs
2019-05-09 23:10:19 -07:00
Bobby DeSimone
5e37c29dfe
proxy: make http headers configurable (#108)
- http headers can be disabled via an env config
- http headers can be configured by k/v map env config
- pomerium/envconfig updated to use original syntax v1.5.0
- go.mod / go.sum patches updated
2019-05-07 12:05:25 -07:00
Bobby DeSimone
0086fa05f8
docs: fix typos in reference 2019-05-03 20:54:21 -07:00
Bobby DeSimone
25d76cd5c0
proxy: make http redirect server configurable (#105) 2019-05-03 20:48:26 -07:00
Bobby DeSimone
286aad3b92
internal/httputil: add strip port function (#106) 2019-05-03 20:21:38 -07:00
Bobby DeSimone
d235f8ebf2
deployment: just make non amd builds 2019-05-03 13:13:00 -07:00
Bobby DeSimone
bad57938ac
Merge pull request #86 from nitper/cors
add cors_allow_preflight option to a route's policy
2019-05-03 12:30:55 -07:00
Bobby DeSimone
7d2af213cc
deployment: add images for arm (#102) 2019-05-03 12:28:29 -07:00
nitper
45bb2e0a4d
add cors_allow_preflight option to route policy 2019-05-03 15:16:46 -04:00