Commit graph

637 commits

Author SHA1 Message Date
Caleb Doxsey
b6082311fd
Merge pull request #620 from pomerium/renovate/github.com-open-policy-agent-opa-0.x
chore(deps): update module open-policy-agent/opa to v0.19.2
2020-04-28 08:30:16 -06:00
Caleb Doxsey
8fd716e1d8 integration: add cluster setup and configuration and a few tests 2020-04-28 07:33:33 -06:00
Renovate Bot
9860c3ce9f chore(deps): update golang.org/x/crypto commit hash to 729f1e8 2020-04-28 03:53:53 +00:00
Renovate Bot
b5fcfd3e95
chore(deps): update module open-policy-agent/opa to v0.19.2 2020-04-27 23:35:03 +00:00
Bobby DeSimone
d7daf274c0
pomerium-cli: add service account docs (#613)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-04-16 13:28:42 -07:00
Travis Groth
db9895a274
Bump grpc up to 1.27.1 (#609) 2020-04-13 22:27:02 -04:00
Renovate Bot
e9057c83e8 chore(deps): update module square/go-jose to v2.5.0 2020-04-13 04:45:00 +00:00
Renovate Bot
f964847762 chore(deps): update module spf13/viper to v1.6.3 2020-04-13 03:36:52 +00:00
Renovate Bot
12560f93f4 chore(deps): update golang.org/x/crypto commit hash to baeed62 2020-04-06 01:28:53 +00:00
Renovate Bot
519a79f685 chore(deps): update module fatih/color to v1.9.0 2020-03-30 02:26:26 +00:00
Renovate Bot
ce728c14b8 chore(deps): update golang.org/x/crypto commit hash to 0ec3e99 2020-03-30 01:50:16 +00:00
Bobby DeSimone
9bee6bb648
cmd: add cli to generate service accounts (#552)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-03-24 20:23:07 -07:00
Renovate Bot
acfc880421 chore(deps): update module open-policy-agent/opa to v0.18.0 2020-03-23 05:53:40 +00:00
Renovate Bot
ba96854a4f chore(deps): update module go.etcd.io/bbolt to v1.3.4 2020-03-23 04:19:40 +00:00
Renovate Bot
df606bdff6 chore(deps): update golang.org/x/crypto commit hash to 891825f 2020-03-23 02:16:37 +00:00
Renovate Bot
74637ea4ac chore(deps): update module fsnotify/fsnotify to v1.4.9 2020-03-20 13:18:47 +00:00
Renovate Bot
ed963f9c38 chore(deps): update module prometheus/client_golang to v1.5.1 2020-03-20 02:40:33 +00:00
Renovate Bot
d5d180aa01 chore(deps): update golang.org/x/crypto commit hash to 1b76d66 2020-03-17 17:59:51 +00:00
Renovate Bot
d597af9de4 chore(deps): update module golang/protobuf to v1.3.5 2020-03-17 13:35:07 +00:00
Renovate Bot
8ddb702572 chore(deps): update module golang/mock to v1.4.3 2020-03-17 11:48:19 +00:00
Renovate Bot
1b8db111f5 chore(deps): update github.com/pomerium/autocache commit hash to 227c993 2020-03-16 01:34:39 +00:00
Bobby DeSimone
6f4b26abe2
identity: support oidc UserInfo Response (#529)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-03-12 20:56:40 -07:00
Bobby DeSimone
8d1732582e
authorize: use jwt insead of state struct (#514)
authenticate: unmarshal and verify state from jwt, instead of middleware
authorize: embed opa policy using statik
authorize: have IsAuthorized handle authorization for all routes
authorize: if no signing key is provided, one is generated
authorize: remove IsAdmin grpc endpoint
authorize/client: return authorize decision struct
cmd/pomerium: main logger no longer contains email and group
cryptutil: add ECDSA signing methods
dashboard: have impersonate form show up for all users, but have api gated by authz
docs: fix typo in signed jwt header
encoding/jws: remove unused es256 signer
frontend: namespace static web assets
internal/sessions: remove leeway to match authz policy
proxy:  move signing functionality to authz
proxy: remove jwt attestation from proxy (authZ does now)
proxy: remove non-signed headers from headers
proxy: remove special handling of x-forwarded-host
sessions: do not verify state in middleware
sessions: remove leeway from state to match authz
sessions/{all}: store jwt directly instead of state

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-03-10 11:19:26 -07:00
Renovate Bot
a477af9378 chore(deps): update module prometheus/client_golang to v1.5.0 2020-03-10 11:42:23 +00:00
Bobby DeSimone
855860136c
depedency: use go mod versioned redis (#528)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-03-08 10:48:53 -07:00
Renovate Bot
7e1c4fa498 chore(deps): update module google.golang.org/api to v0.20.0 2020-03-07 15:53:20 +00:00
Renovate Bot
9515a48ba0 chore(deps): update golang.org/x/crypto commit hash to 78000ba 2020-03-07 14:44:21 +00:00
Renovate Bot
702f63fea1 chore(deps): update module open-policy-agent/opa to v0.17.3 2020-03-07 13:01:58 +00:00
Renovate Bot
32904cfe36 chore(deps): update module rakyll/statik to v0.1.7 2020-03-07 03:03:35 +00:00
Renovate Bot
3378a5ecf8 chore(deps): update module golang/protobuf to v1.3.4 2020-03-07 01:18:26 +00:00
Renovate Bot
37a50b3a34 chore(deps): update module gorilla/mux to v1.7.4 2020-03-06 23:49:00 +00:00
Renovate Bot
c6281d1f49 chore(deps): update github.com/pomerium/autocache commit hash to 6c66ed5 2020-03-06 23:40:24 +00:00
renovate[bot]
f64edc0914
chore(deps): update module rs/zerolog to v1.18.0 (#507)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-03-06 18:03:55 -05:00
renovate[bot]
7c67599efd
chore(deps): update module google.golang.org/grpc to v1.27.1 (#496) 2020-02-12 20:23:29 -05:00
renovate[bot]
23fe11f562
chore(deps): update module prometheus/client_golang to v1.4.1 (#498) 2020-02-10 22:02:08 -05:00
renovate[bot]
b13603c55b
chore(deps): update module open-policy-agent/opa to v0.17.1 (#497)
Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-02-10 08:55:26 -08:00
renovate[bot]
55b50af101
chore(deps): update module go.opencensus.io to v0.22.3 (#483)
Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-02-10 08:54:46 -08:00
Travis Groth
1901cb5ca0
Roll back grpc to v1.25.1 (#484) 2020-02-03 06:30:54 -05:00
Bobby DeSimone
2f13488598
authorize: use opa for policy engine (#474)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-02-02 11:18:22 -08:00
renovate[bot]
36abc9fd65 chore(deps): update module golang/mock to v1.4.0 (#470)
Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-27 11:58:43 -08:00
renovate[bot]
78c396ea9d chore(deps): update module yaml to v2.2.8 (#471)
Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-27 11:58:31 -08:00
Bobby DeSimone
1db1a75a8b
chore(deps): update bolt and autocache (#465)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-01-21 09:00:54 -08:00
Bobby DeSimone
dccc7cd2ff
cache : add cache service (#457)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-01-20 18:25:34 -08:00
renovate[bot]
8a9cb0f803 chore(deps): update golang.org/x/crypto commit hash to 530e935 (#458)
Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-20 12:04:46 -08:00
renovate[bot]
3c414c37d8 chore(deps): update module spf13/viper to v1.6.2 (#459)
Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-20 12:32:13 -05:00
renovate[bot]
2f6142eb35 chore(deps): update golang.org/x/crypto commit hash to 61a8779 (#452)
Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-14 14:01:37 -08:00
renovate[bot]
4779c83013 chore(deps): update golang.org/x/oauth2 commit hash to bf48bf1 (#453)
Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-14 14:01:26 -08:00
renovate[bot]
4c8320f064 chore(deps): update module google/go-cmp to v0.4.0 (#454)
Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-01-14 14:01:16 -08:00
renovate[bot]
0d9d90b3af chore(deps): update module google.golang.org/grpc to v1.26.0 (#433) 2019-12-30 10:49:48 -08:00
renovate[bot]
ca824c6161 chore(deps): update golang.org/x/crypto commit hash to 53104e6 (#431) 2019-12-30 10:48:51 -08:00