Caleb Doxsey
0d9a372182
envoy: implement refresh session ( #674 )
...
* authorize: refresh session WIP
* remove upstream cookie with lua
* only refresh session on expired
* authorize: handle session expiration
* authorize: add refresh test, fix isExpired check
* proxy: implement preserve host header option
* authorize: allow CORS preflight requests
* proxy: add request headers
* authenticate: use id token expiry
2020-05-18 17:10:10 -04:00
Caleb Doxsey
02615b8b6c
Merge remote-tracking branch 'origin/master' into feature/envoy
2020-05-18 17:10:10 -04:00
Travis Groth
99e788a9b4
envoy: Initial changes
2020-05-18 17:10:10 -04:00
Caleb Doxsey
49067c8f06
integration-tests: TLS policy configuration options ( #708 )
...
* integration-tests: switch to go for backends to support TLS scenarios
* fix apply order
* generate additional tls certs
* integration-tests: tls_skip_verify option
* integration-tests: wait for openid to come up before starting authenticate
* add tls_server_name test
* add test for tls_custom_ca
* increase setup timeout to 15 minutes
* fix secret name reference
* mtls wip
* mtls wip
* add test for client_cert
2020-05-15 16:37:09 -06:00
Caleb Doxsey
397d4a9f51
integration-tests: switch to go for backends to support TLS scenarios ( #707 )
...
* integration-tests: switch to go for backends to support TLS scenarios
* fix apply order
* fix duplicate port value
2020-05-15 09:25:27 -06:00
Caleb Doxsey
cbc6374efd
integration-tests: set_request_headers and preserve_host_header options ( #668 )
...
* integration-tests: rename to policy_test
* integration-tests: add request header test
* integration-tests: add test for preserve_host_header
2020-05-07 10:52:55 -06:00
Caleb Doxsey
3f4a22a10d
integration-tests: add CORS test ( #662 )
2020-05-06 17:31:40 -06:00
Caleb Doxsey
236891329b
integration-tests: add websocket enabled/disabled test ( #661 )
...
* integration-tests: add websocket enabled/disabled test
* integration-tests: lint
2020-05-06 16:10:01 -06:00
Caleb Doxsey
b1d3bbaf56
authorize: add support for .pomerium and unauthenticated routes ( #639 )
...
* authorize: add support for .pomerium and unauthenticated routes
integration-tests: add test for forward auth dashboard urls
* proxy: fix ctx error test to return a 200 when authorize allows it
2020-04-29 10:55:46 -06:00
Caleb Doxsey
b11a336a33
inegration: fix linting issues
2020-04-28 08:17:22 -06:00
Caleb Doxsey
cb3e78cd01
fix required deployments
2020-04-28 08:03:05 -06:00
Caleb Doxsey
8fd716e1d8
integration: add cluster setup and configuration and a few tests
2020-04-28 07:33:33 -06:00
