backport-actions-token[bot]
32985aabe6
identity: fix nil reference error when there is no authenticator ( #3932 )
...
identity: fix nil reference error when there is no authenticator (#3930 )
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2023-02-02 08:43:56 -07:00
backport-actions-token[bot]
1761a39fb2
identity: fix expired session deletion ( #3857 )
...
identity: fix expired session deletion (#3855 )
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2023-01-06 08:22:05 -07:00
backport-actions-token[bot]
f68ea66006
autocert: use atomic pointer to allow nil ( #3817 )
...
autocert: use atomic pointer to allow nil (#3816 )
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2022-12-16 13:49:44 -07:00
backport-actions-token[bot]
8924c47392
oidc: fix token revocation ( #3818 )
...
oidc: fix token revocation (#3810 )
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2022-12-16 13:49:30 -07:00
Caleb Doxsey
9413123c0f
config: generate cookie secret if not set in all-in-one mode ( #3742 )
...
* config: generate cookie secret if not set in all-in-one mode
* fix tests
* config: add warning about cookie_secret
* breakup lines
2022-11-11 14:14:30 -07:00
Caleb Doxsey
4d10d36509
controlplane: fix /.well-known/pomerium missing CORS headers ( #3738 )
2022-11-09 12:08:28 -07:00
Eng Zer Jun
45ce6f693a
test: use T.TempDir to create temporary test directory ( #3725 )
...
Prior to this commit, temporary directories in tests were created using
`filepath.Join` and `os.MkdirAll`.
This commit replaces `os.MkdirAll` with `t.TempDir` in tests. The
directory created by `t.TempDir` is automatically removed when the test
and all its subtests complete.
Reference: https://pkg.go.dev/testing#T.TempDir
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
2022-11-08 09:16:32 -07:00
Denis Mishin
a3cfe8fa42
keep trace span context ( #3724 )
2022-11-04 17:52:13 -04:00
Caleb Doxsey
c178819875
move directory providers ( #3633 )
...
* remove directory providers and support for groups
* idp: remove directory providers
* better error messages
* fix errors
* restore postgres
* fix test
2022-11-03 11:33:56 -06:00
Caleb Doxsey
30bdae3d9e
sessions: check idp id to detect provider changes to force session invalidation ( #3707 )
...
* sessions: check idp id to detect provider changes to force session invalidation
* remove dead code
* fix test
2022-10-25 16:20:32 -06:00
Caleb Doxsey
b68dc1ff4f
controlplane: move jwks.json endpoint to control plane ( #3691 )
2022-10-25 08:01:33 -06:00
Caleb Doxsey
63b210e51d
httputil: remove error details ( #3703 )
2022-10-25 08:00:21 -06:00
Caleb Doxsey
75634dfca2
authenticate: remove ecjson ( #3688 )
2022-10-20 10:37:21 -06:00
dependabot[bot]
ec495bb682
chore(deps): bump github.com/golangci/golangci-lint from 1.48.0 to 1.50.0 ( #3667 )
...
* chore(deps): bump github.com/golangci/golangci-lint
Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint ) from 1.48.0 to 1.50.0.
- [Release notes](https://github.com/golangci/golangci-lint/releases )
- [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md )
- [Commits](https://github.com/golangci/golangci-lint/compare/v1.48.0...v1.50.0 )
---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* lint
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2022-10-19 09:36:59 -06:00
Caleb Doxsey
d147846e64
fileutil: update watcher to use fsnotify and polling ( #3663 )
...
* fileutil: update watcher to use fsnotify and polling
* raise timeout
* maybe fix
2022-10-19 09:13:08 -06:00
Caleb Doxsey
daed2d260c
config: disable envoy admin by default, expose stats via envoy route ( #3677 )
2022-10-18 16:25:03 -06:00
Alex
fc21579e4b
Fix typos ( #3575 )
...
typos
2022-08-30 15:51:40 -07:00
Caleb Doxsey
8713108821
autocert: fix flaky test ( #3591 )
2022-08-30 10:02:15 -06:00
Caleb Doxsey
e5ac784cf4
autocert: add support for ACME TLS-ALPN ( #3590 )
...
* autocert: add support for ACME TLS-ALPN
* always re-create acme tls server
2022-08-29 16:19:20 -06:00
Caleb Doxsey
46703b9419
config: add branding settings ( #3558 )
2022-08-16 14:51:47 -06:00
Caleb Doxsey
6140ee1d88
controlplane: add well-known endpoint to the controlplane http handler ( #3555 )
...
* controlplane: add well-known endpoint to the controlplane http handler
* add support for trailing /
* remove redundant test
2022-08-16 09:59:39 -06:00
Caleb Doxsey
3c63b6c028
authorize: add policy error details for custom error messages ( #3542 )
...
* authorize: add policy error details for custom error messages
* remove fmt.Println
* fix tests
* add docs
2022-08-09 14:46:31 -06:00
dependabot[bot]
60b9f3d92d
chore(deps): bump github.com/golangci/golangci-lint from 1.47.3 to 1.48.0 ( #3541 )
...
* chore(deps): bump github.com/golangci/golangci-lint
Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint ) from 1.47.3 to 1.48.0.
- [Release notes](https://github.com/golangci/golangci-lint/releases )
- [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md )
- [Commits](https://github.com/golangci/golangci-lint/compare/v1.47.3...v1.48.0 )
---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* fix linting issues
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2022-08-09 08:25:57 -06:00
dependabot[bot]
f253365470
chore(deps): bump github.com/golangci/golangci-lint from 1.47.2 to 1.47.3 ( #3522 )
...
* chore(deps): bump github.com/golangci/golangci-lint
Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint ) from 1.47.2 to 1.47.3.
- [Release notes](https://github.com/golangci/golangci-lint/releases )
- [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md )
- [Commits](https://github.com/golangci/golangci-lint/compare/v1.47.2...v1.47.3 )
---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* fix linting issues
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2022-08-05 13:45:12 -06:00
Caleb Doxsey
b5ac7dbc76
sets: convert set types to generics ( #3519 )
...
* sets: convert set types to generics
* sets: use internal sets package
2022-07-29 12:32:17 -06:00
Caleb Doxsey
0ac7e45a21
atomicutil: use atomicutil.Value wherever possible ( #3517 )
...
* atomicutil: use atomicutil.Value wherever possible
* fix test
* fix mux router
2022-07-28 15:38:38 -06:00
Caleb Doxsey
89a105c8e6
authorize: add request id to context ( #3497 )
...
* authorize: add request id to context
* fix context keys
2022-07-26 14:34:48 -06:00
Caleb Doxsey
0b48da1e2f
databroker: support rotating shared secret ( #3502 )
...
* databroker: support rotating shared secret
* fix test
* run tests on linux
* fix tests
* fix typo
* increase timeout
2022-07-26 10:59:54 -06:00
Caleb Doxsey
bc078f8bd2
authorize: fix x-forwarded-uri ( #3479 )
...
* authorize: fix x-forwarded-uri
* fix raw path
2022-07-14 09:32:48 -06:00
Caleb Doxsey
24a9d627cd
postgres: registry support ( #3454 )
2022-07-13 09:14:47 -06:00
Caleb Doxsey
d9274f0d19
autocert: continue on error ( #3476 )
2022-07-12 14:05:27 -06:00
Caleb Doxsey
b4cbecc4fd
Revert "userinfo: embed assets as data URLs for forward auth" ( #3474 )
...
Revert "userinfo: embed assets as data URLs for forward auth (#3460 )"
This reverts commit 6c573282ee
2022-07-12 09:38:53 -06:00
Caleb Doxsey
6c573282ee
userinfo: embed assets as data URLs for forward auth ( #3460 )
2022-07-11 08:04:24 -06:00
Denis Mishin
f67b33484b
add metrics aggregation ( #3452 )
2022-06-30 10:52:45 -04:00
Caleb Doxsey
a938a23ea2
device enrollment: fix ip address ( #3430 )
2022-06-16 11:30:38 -06:00
Denis Mishin
d1037d784a
allow pomerium to be embedded as a library ( #3415 )
2022-06-15 20:29:19 -04:00
Denis Mishin
db426072b0
eliminate global events manager ( #3422 )
2022-06-14 15:05:16 -04:00
bobby
ebbb6a7ff2
docs: update references, remove docs dir ( #3420 )
...
* docs: update references, remove docs dir
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
* Update README.md
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
* Update Docs Paths
* precommit
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
* remove spellcheck
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
* spell the check
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2022-06-13 16:52:52 -07:00
Caleb Doxsey
45a29ea879
databroker: add support for syncing by type ( #3412 )
...
* databroker: add support for syncing by type
* add type url, fix query
2022-06-13 09:52:13 -06:00
Caleb Doxsey
a7bd284b52
identity: batch directory updates ( #3411 )
...
* identity: batch directory updates
* add batch details to log message
2022-06-08 16:48:15 -06:00
Denis Mishin
f7b6ed0ad4
use generic version of btree ( #3404 )
2022-06-06 14:31:05 -04:00
Caleb Doxsey
fd82cc7870
authenticate: allow changing the authenticate service URL at runtime ( #3378 )
...
* config: better change detection
* wip
* fix middleware
* add middleware before handlers
* use ctx
2022-05-31 13:24:40 -06:00
Denis Mishin
9baaea5e85
do not require idp set in the bootstrap config, as it may be later configured via the databroker ( #3386 )
2022-05-31 11:42:19 -04:00
Caleb Doxsey
1c2aad2de6
postgres: databroker storage backend ( #3370 )
...
* wip
* storage: add filtering to SyncLatest
* don't increment the record version, so intermediate changes are requested
* databroker: add support for query filtering
* fill server and record version
* postgres: databroker storage backend
* wip
* serialize puts
* add test
* skip tests for macos
* add test
* return error from protojson
* set data
* exclude postgres from cover tests
2022-05-25 10:23:58 -06:00
Caleb Doxsey
994faba0c8
databroker: add support for query filtering ( #3369 )
...
* wip
* storage: add filtering to SyncLatest
* don't increment the record version, so intermediate changes are requested
* databroker: add support for query filtering
* fill server and record version
* add test checks
* add explanation to query filter error
2022-05-19 09:07:32 -06:00
Caleb Doxsey
1669b601ea
storage: add filtering to SyncLatest ( #3368 )
...
* wip
* storage: add filtering to SyncLatest
* don't increment the record version, so intermediate changes are requested
* fix stream filter
2022-05-17 16:00:23 -06:00
Caleb Doxsey
f73c5c615f
databroker: add support for putting multiple records ( #3291 )
...
* databroker: add support for putting multiple records
* add OptimumPutRequestsFromRecords function
* replace GetAll with SyncLatest
* fix stream when there are no records
2022-04-26 16:41:38 -06:00
Caleb Doxsey
74310b3de3
authorize: pass idp id for webauthn url, allow unauthenticated access to static files ( #3282 )
2022-04-20 11:07:09 -06:00
Caleb Doxsey
761c17b8ac
grpc: wait for connect to be ready before making calls ( #3253 )
...
* grpc: wait for connect to be ready before making calls
* make sure to stop the ticker
2022-04-08 12:18:52 -06:00
Caleb Doxsey
b79f1e379f
config: add support for downstream TLS server name ( #3243 )
...
* config: add support for downstream TLS server name
* fix whitespace
* fix whitespace
* add docs
* add tls_upstream_server_name and tls_downstream_server_name to config
* Update docs/reference/settings.yaml
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
* Update docs/reference/readme.md
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
* add deprecation notice
Co-authored-by: Alex Fornuto <afornuto@pomerium.com>
2022-04-06 06:48:45 -07:00
