Commit graph

2120 commits

Author SHA1 Message Date
Renovate Bot
5469caeb6c fix(deps): update golang.org/x/oauth2 commit hash to 2e8d934 2021-04-05 05:08:34 +00:00
Renovate Bot
ecfd29d4f0 fix(deps): update golang.org/x/net commit hash to 0fccb6f 2021-04-05 03:42:02 +00:00
Travis Groth
c7d243d742
proxy: restrict programmatic URLs to localhost (#2049)
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-04-01 10:04:49 -04:00
Travis Groth
0635c838c9
authenticate: validate signature on /.pomerium, /.pomerium/sign_in and /.pomerium/sign_out (#2048)
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-04-01 10:04:16 -04:00
contrun
c96ff595e5
fix not obtaining correct gitlab url because of empty string (#2044) 2021-03-31 11:21:16 -06:00
Caleb Doxsey
d7ab817de7
authorize: add databroker server and record version to result, force sync via polling (#2024)
* authorize: add databroker server and record version to result, force sync via polling

* wrap inmem store to take read lock when grabbing databroker versions

* address code review comments

* reset max to 0
2021-03-31 10:09:06 -06:00
wasaga
8f97b0d6ee
skip redis cluster on non-linux systems (#2045) 2021-03-31 10:42:49 -04:00
contrun
9980206073
change require_proxy_protocol to use_proxy_protocol (#2043)
I set `use_proxy_protocol` to be true in my yaml config. Envoy didn't use proxy protocol albeit. Both the documents and https://github.com/pomerium/pomerium/pull/1777 hint the name should be use_proxy_protocol.
2021-03-31 07:40:31 -06:00
wasaga
c27cd9030d
support host:port in metrics_address (#2042) 2021-03-30 18:54:33 -04:00
Caleb Doxsey
4218f49741
authorize: bypass data in rego for databroker data (#2041) 2021-03-30 14:14:32 -06:00
Caleb Doxsey
76bc7a7e9a
proxy: add nil check for fix-misdirected (#2040)
* proxy: add nil check for fix-misdirected

* fix test
2021-03-30 08:22:38 -06:00
dharmendra kariya
7767992a29
Updating Doc for Pomerium-Dex Exercise (#2018)
* Updating Doc for Pomerium-Dex Exercise

This PR has Documentation for Pomerium-Dex Integration.

Please let me know the changes or do the needful.

I can refactor this.

* Removing Last Two Lines

* Update readme.md
2021-03-30 07:24:58 -06:00
wasaga
80c55dd50c
databroker: return server version in Get (#2039) 2021-03-29 13:18:38 -04:00
renovate[bot]
a44b50f76e
fix(deps): update golang.org/x/crypto commit hash to 0c34fe9 (#2027)
* fix(deps): update golang.org/x/crypto commit hash to 0c34fe9

* fix(deps): update golang.org/x/crypto commit hash to 0c34fe9

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-03-29 09:23:52 -06:00
renovate[bot]
ad514227ee
fix(deps): update golang.org/x/net commit hash to 61e0566 (#2028)
* fix(deps): update golang.org/x/net commit hash to 61e0566

* go mod tidy

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-03-29 09:20:29 -06:00
renovate[bot]
862576eec9
fix(deps): update google.golang.org/genproto commit hash to 679c6ae (#2030)
* fix(deps): update google.golang.org/genproto commit hash to 679c6ae

* fix(deps): update google.golang.org/genproto commit hash to 679c6ae

* go mod tidy

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-03-29 09:18:56 -06:00
renovate[bot]
740a9b81d9
fix(deps): update module github.com/go-redis/redis/v8 to v8.8.0 (#2032)
* fix(deps): update module github.com/go-redis/redis/v8 to v8.8.0

* go mod tidy

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-03-29 09:17:24 -06:00
renovate[bot]
3dcc182749
fix(deps): update module github.com/prometheus/common to v0.20.0 (#2033)
* fix(deps): update module github.com/prometheus/common to v0.20.0

* go mod tidy

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-03-29 09:16:03 -06:00
renovate[bot]
2926e5c82f
fix(deps): update module github.com/rs/zerolog to v1.21.0 (#2034)
* fix(deps): update module github.com/rs/zerolog to v1.21.0

* fix(deps): update module github.com/rs/zerolog to v1.21.0

* go mod tidy

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-03-29 09:15:00 -06:00
renovate[bot]
9ca72ea437
fix(deps): update module google.golang.org/api to v0.43.0 (#2035)
* fix(deps): update module google.golang.org/api to v0.43.0

* go mod tidy

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-03-29 09:13:26 -06:00
renovate[bot]
85ad7d93ed
fix(deps): update module google.golang.org/grpc to v1.36.1 (#2036)
* fix(deps): update module google.golang.org/grpc to v1.36.1

* go mod tidy

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-03-29 09:10:36 -06:00
Renovate Bot
563f65b916 fix(deps): update module gopkg.in/auth0.v5 to v5.13.0 2021-03-29 15:05:02 +00:00
Renovate Bot
ba7dd8f3c9 chore(deps): update mikefarah/yq action to v4.6.3 2021-03-29 07:21:09 +00:00
Renovate Bot
15aa5f62be fix(deps): update golang.org/x/oauth2 commit hash to 22b0ada 2021-03-29 03:11:11 +00:00
Caleb Doxsey
5a33012950
protoutil: add generic transformer (#2023) 2021-03-26 09:59:38 -06:00
Caleb Doxsey
dda6a9af60
cryptutil: add envelope encryption w/key encryption key and data encryption key (#2020)
* cryptutil: add envelope encryption w/key encryption key and data encryption key

* use randomBytes, derive kek id, add tests

* add comment about lru error
2021-03-26 06:57:35 -06:00
Caleb Doxsey
4cc697ace4
autocert: add metrics for renewal count, total and next expiration (#2019) 2021-03-25 08:03:04 -06:00
Travis Groth
7eac4283ed
deps: bundle all patch upgrades in a single group (#2016) 2021-03-24 10:22:42 -04:00
Caleb Doxsey
e2ebef44ef
telemetry: add installation id (#2017)
* telemetry: add installation id

* set installation id globally

* remove unneeded changes
2021-03-24 07:22:54 -06:00
Caleb Doxsey
853d2dd478
config: use getters for certificates (#2001)
* config: use getters for certificates

* update log message
2021-03-23 08:02:50 -06:00
dharmendra kariya
36eeff296a
docs: update local-oidc.md (#1994) 2021-03-22 16:46:20 -07:00
renovate[bot]
9004d10bbb
fix(deps): update golang.org/x/net commit hash to d523dce (#2005)
* fix(deps): update golang.org/x/net commit hash to d523dce

* go mod tidy

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-03-22 13:20:11 -06:00
renovate[bot]
09dbaf24c6
fix(deps): update google.golang.org/genproto commit hash to 93e7006 (#2006)
* fix(deps): update google.golang.org/genproto commit hash to 93e7006

* go mod tidy

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-03-22 13:18:32 -06:00
renovate[bot]
3bd9df303b
fix(deps): update module github.com/golang/protobuf to v1.5.1 (#2009)
* fix(deps): update module github.com/golang/protobuf to v1.5.1

* go mod tidy

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-03-22 13:17:06 -06:00
Nándor István Krácser
45fb938317
oidc: use groups claim from ID token if present (#1970)
Signed-off-by: Nandor Kracser <bonifaido@gmail.com>
2021-03-22 11:46:01 -06:00
renovate[bot]
b36c074a33
fix(deps): update module github.com/prometheus/client_golang to v1.10.0 (#2011)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-03-22 11:36:25 -06:00
ntoofu
fee4979246
Add xff_num_trusted_hops config option (#2003)
* Add `xff_num_trusted_hops` config option

* Fix code formatting with gofmt

* Update docs for `xff_num_trusted_hops`
2021-03-22 10:30:20 -06:00
renovate[bot]
3e1ae3be0e
fix(deps): update module google.golang.org/protobuf to v1.26.0 (#2012)
* fix(deps): update module google.golang.org/protobuf to v1.26.0

* go mod tidy

Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
2021-03-22 10:05:52 -06:00
Renovate Bot
f3fcaf3de9 fix(deps): update module github.com/envoyproxy/protoc-gen-validate to v0.5.0 2021-03-22 15:49:40 +00:00
Renovate Bot
d3d148afc9 fix(deps): update module google.golang.org/api to v0.42.0 2021-03-22 11:47:31 +00:00
Renovate Bot
2492cc223f fix(deps): update module github.com/google/btree to v1.0.1 2021-03-22 09:29:39 +00:00
Renovate Bot
051a9ed835 chore(deps): update mikefarah/yq action to v4.6.2 2021-03-22 04:31:59 +00:00
Caleb Doxsey
3690a32855
config: use getters for authenticate, signout and forward auth urls (#2000) 2021-03-19 14:49:25 -06:00
Caleb Doxsey
1febaa82ff
envoy: restrict permissions on embedded envoy binary (#1999) 2021-03-19 09:51:14 -06:00
Caleb Doxsey
23bc3f979f
config: add headers to config proto (#1996) 2021-03-19 08:06:01 -06:00
Caleb Doxsey
21d87f8fdc
xds: use ALPN Auto config for upstream protocol when possible (#1995) 2021-03-18 14:25:00 -06:00
Renovate Bot
76016ea67a fix(deps): update golang.org/x/oauth2 commit hash to cd4f82c 2021-03-18 05:34:23 +00:00
Caleb Doxsey
eddabc46c7
envoy: upgrade to v1.17.1 (#1993) 2021-03-17 19:32:58 -06:00
Renovate Bot
4530a0832b fix(deps): update golang.org/x/crypto commit hash to 513c2a4 2021-03-17 21:35:16 +00:00
Caleb Doxsey
77fe37c8c0
redis: add redis cluster support (#1992)
* redis: add redis cluster support

* redis: update docs
2021-03-17 13:48:41 -06:00