Bobby DeSimone
e982e72146
Merge pull request #151 from nareddyt/web-socket-support
...
Enable websocket support
2019-06-01 22:23:19 -07:00
Tejasvi Nareddy
f966e5ab19
(proxy, internal/config, internal/log, docs): opt-in websocket support
2019-06-01 22:39:46 -04:00
Bobby DeSimone
cf61c6be3d
Merge pull request #150 from travisgroth/feature/hot-policy
...
Feature/hot policy
2019-06-01 15:54:28 -07:00
Travis Groth
8c2beac6f1
Add automatic configuration reloading and
...
policy handling
2019-06-01 14:52:10 -04:00
Bobby DeSimone
77f3933560
internal/config: change internal-authenticate-addr to url ( #154 )
2019-05-31 17:53:58 -07:00
Bobby DeSimone
1791e3d3f7
Merge pull request #137 from desimone/docs/add-upgrading-guide
...
docs: add upgrade guide
2019-05-31 11:40:40 -07:00
Bobby DeSimone
bd6d1e4745
Merge pull request #1 from travisgroth/docs/add-upgrading-guide
...
Added note for configuration refactor
2019-05-30 20:21:25 -07:00
Travis Groth
1148c3cd9b
Added note for configuration refactor
2019-05-30 21:56:03 -04:00
Bobby DeSimone
7487de94df
authenticate: catch missing required setting ( #149 )
2019-05-30 14:20:28 -07:00
Bobby DeSimone
191015a0ed
Merge pull request #142 from u5surf/issue-135
...
all: fix incorrect http status codes #135
2019-05-28 21:16:16 -07:00
u5surf
c274112ecc
all: fix incorrect http status codes #135
2019-05-29 12:57:02 +09:00
Bobby DeSimone
f68338c888
internal/httputil: add request id to error page ( #144 )
2019-05-28 18:12:49 -07:00
Bobby DeSimone
3d6471c4b3
docs: fix example policy name typo ( #143 )
...
Rename s/config-policy-only.yaml /config.example.policy.only/
Removed POLICY_FILE references
2019-05-27 14:06:10 -07:00
Bobby DeSimone
80612247e3
docs: add versioning ( #141 )
...
docs: make colors and logos consistent
Fixes #109
2019-05-26 21:52:51 -07:00
Bobby DeSimone
794b7996db
Merge pull request #139 from travisgroth/feature/viper-config
...
deployment: expose config file interface in docker images
2019-05-26 20:09:07 -07:00
Travis Groth
02177043aa
Add config handling to dockerfiles and update documentation
2019-05-26 22:28:51 -04:00
Bobby DeSimone
2dc88d44ee
Merge pull request #124 from desimone/docs/update-helm-and-aws-script
...
deployment: remove helm from main repo
2019-05-26 14:59:32 -07:00
Bobby DeSimone
66b4c2d3cd
authenticate/proxy: add user impersonation, refresh, dashboard ( #123 )
...
proxy: Add user dashboard. [GH-123]
proxy/authenticate: Add manual refresh of their session. [GH-73]
authorize: Add administrator (super user) account support. [GH-110]
internal/policy: Allow administrators to impersonate other users. [GH-110]
2019-05-26 12:33:00 -07:00
Travis Groth
af254882e6
Fix some missing coverage
2019-05-26 07:56:52 -04:00
Bobby DeSimone
3ee23e3308
docs: add upgrade guide
2019-05-25 14:08:12 -07:00
Bobby DeSimone
dc2eb9668c
Merge pull request #130 from travisgroth/feature/viper-config
...
deployment: switch to viper for config
2019-05-25 13:44:57 -07:00
Travis Groth
febf9464a4
Switch options parsing to viper
2019-05-25 15:06:32 -04:00
Bobby DeSimone
702cc30b77
Merge pull request #134 from nareddyt/unauthenticated-routes
...
proxy: support for public unauthenticated routes
2019-05-22 20:29:39 -07:00
Tejasvi Nareddy
c5d2e40435
(proxy, internal\policy, docs\reference): define new access control option to bypass authentication
2019-05-22 23:12:30 -04:00
Bobby DeSimone
c53c07c274
Merge pull request #133 from nareddyt/bug-route-config-addresses
...
proxy: fix bug with incorrect addressing causing invalid route configs
2019-05-21 16:30:21 -07:00
Tejasvi Nareddy
9992eebcac
proxy: fix bug with incorrect addressing causing invalid route configs
2019-05-21 17:08:03 -04:00
Bobby DeSimone
409f44a9be
Merge pull request #131 from desimone/feature/share-session-state
...
internal/sessions: make user state domain scoped
2019-05-20 20:51:03 -07:00
Bobby DeSimone
3eff6cce13
internal/sessions: make user state domain scoped
...
internal/sessions: session state is domain scoped
internal/sessions: infer csrf cookie, route scoped
proxy & authenticate: use shared cookie name
proxy & authenticate: prevent resaving unchanged session
proxy & authenticate: redirect instead of error for no session on login
internal/config: merge cookies
proxy: remove favicon specific route
proxy: use mock server for tests
proxy: add tests for failures
2019-05-20 20:44:05 -07:00
Bobby DeSimone
2eb2eb0620
Merge pull request #127 from deltabweb/master
...
deployment: add arm64v8 dockerfile
2019-05-19 20:07:26 -07:00
deltabweb
d1042d8c8b
Create Dockerfile for arm64 - Fixes #125
2019-05-20 14:16:47 +12:00
Bobby DeSimone
382f9de876
Merge pull request #126 from benny-gold/master
...
authenticate: add more verbose errors to authenticate handler
2019-05-19 11:31:27 -07:00
Ben Gould
07bb698bb9
more verbose errors on invalid uri parameter
2019-05-19 19:22:13 +01:00
Bobby DeSimone
af2c41a238
internal/config: centralize options handling
2019-05-18 12:44:32 -07:00
Travis Groth
ebb6df6c3f
Refactor to central options struct and parsing
2019-05-18 08:17:36 -04:00
Bobby DeSimone
950f720660
docs: add amazon helm script to examples
2019-05-16 21:44:33 -07:00
Bobby DeSimone
562317dbf6
deployment: remove helm from main repo
...
- docs: add helm deployment script for aws
2019-05-16 21:35:02 -07:00
Bobby DeSimone
5970d6c766
Merge pull request #121 from banzaicloud/dockerfile-golint
...
docker: add missing golint command
2019-05-15 12:57:40 -07:00
Nandor Kracser
8b86454cb5
docker: add missing golint command
2019-05-15 13:29:16 +02:00
Bobby DeSimone
27d4683662
authenticate: add CSP headers to this service only ( #120 )
2019-05-14 22:29:24 -07:00
Bobby DeSimone
cfac5f10ff
cmd/pomerium: move middleware for all http handlers to global context ( #117 )
2019-05-14 13:23:25 -07:00
Bobby DeSimone
04a653f694
docs: fix typos and reorganize
2019-05-09 23:16:26 -07:00
Bobby DeSimone
5448e3599a
cmd/pomerium : refactor main to more testable ( #112 )
...
- cmd/pomerium: refactor global timeouts to be configurable
- cmd/pomerium: add tests
- cmd/pomerium: remove debug flag, set with env vars only
- cmd/pomerium: global ping now returns version not OK
- proxy: validate shared secret encoding and length
- docs: add timeout to example policy
- docs: document timeouts and cors
- docs: update pomerium logo
- docs: add policy authorization docs
2019-05-09 23:10:19 -07:00
Bobby DeSimone
5e37c29dfe
proxy: make http headers configurable ( #108 )
...
- http headers can be disabled via an env config
- http headers can be configured by k/v map env config
- pomerium/envconfig updated to use original syntax v1.5.0
- go.mod / go.sum patches updated
2019-05-07 12:05:25 -07:00
Bobby DeSimone
0086fa05f8
docs: fix typos in reference
2019-05-03 20:54:21 -07:00
Bobby DeSimone
25d76cd5c0
proxy: make http redirect server configurable ( #105 )
2019-05-03 20:48:26 -07:00
Bobby DeSimone
286aad3b92
internal/httputil: add strip port function ( #106 )
2019-05-03 20:21:38 -07:00
Bobby DeSimone
d235f8ebf2
deployment: just make non amd builds
2019-05-03 13:13:00 -07:00
Bobby DeSimone
bad57938ac
Merge pull request #86 from nitper/cors
...
add cors_allow_preflight option to a route's policy
2019-05-03 12:30:55 -07:00
Bobby DeSimone
7d2af213cc
deployment: add images for arm ( #102 )
2019-05-03 12:28:29 -07:00
nitper
45bb2e0a4d
add cors_allow_preflight option to route policy
2019-05-03 15:16:46 -04:00