Caleb Doxsey
|
5be322e2ef
|
config: add support for $pomerium.id_token and $pomerium.access_token in set_request_headers (#4219)
* config: add support for $pomerium.id_token and $pomerium.access_token in set_request_headers
* lint
* Update authorize/evaluator/headers_evaluator_test.go
Co-authored-by: Denis Mishin <dmishin@pomerium.com>
* fix spelling
---------
Co-authored-by: Denis Mishin <dmishin@pomerium.com>
|
2023-06-01 16:00:02 -06:00 |
|
Kenneth Jenkins
|
6df4fba832
|
authorize: populate issuer even when policy is nil (#4211)
|
2023-05-30 17:07:27 -07:00 |
|
Caleb Doxsey
|
d315e68335
|
Merge pull request from GHSA-pvrc-wvj2-f59p
* authorize: use route id from envoy for policy evaluation
* authorize: normalize URL query params
* config: enable envoy normalize_path option
* fix tests
---------
Co-authored-by: Kenneth Jenkins <51246568+kenjenkins@users.noreply.github.com>
|
2023-05-26 13:34:21 -07:00 |
|
Caleb Doxsey
|
18bc86d632
|
config: add support for wildcard from addresses (#4131)
* config: add support for wildcards
* update policy matching, header generation
* remove deprecated field
* fix test
|
2023-04-25 13:34:38 -06:00 |
|
Caleb Doxsey
|
1dee325b72
|
authorize: move sign out and jwks urls to route, update issuer for JWT (#4046)
* authorize: move sign out and jwks urls to route, update issuer for JWT
* fix test
|
2023-03-08 12:40:15 -07:00 |
|
Denis Mishin
|
a3cfe8fa42
|
keep trace span context (#3724)
|
2022-11-04 17:52:13 -04:00 |
|
Caleb Doxsey
|
c19048649a
|
authorize: add support for cidr lookups (#3277)
|
2022-04-19 16:18:34 -06:00 |
|
Caleb Doxsey
|
99b9a3ee12
|
authorize: add support for passing access or id token upstream (#3047)
* authorize: add support for passing access or id token upstream
* use an enum
|
2022-02-17 09:28:31 -07:00 |
|
Caleb Doxsey
|
c97dcf7e0f
|
envoy: add hash policy and routing key for hash-based load balancers (#2791)
* envoy: add hash policy and routing key for hash-based load balancers
* fix integration test
* fix nginx
|
2021-12-01 13:42:12 -07:00 |
|
Caleb Doxsey
|
de1ed61b9a
|
authorize: fix google cloudrun header audience (#2558)
|
2021-09-02 09:55:06 -06:00 |
|
Caleb Doxsey
|
c7a8f11d9a
|
authorize: add additional tracing for rego evaluation (#2381)
|
2021-07-21 15:37:51 -06:00 |
|
Caleb Doxsey
|
dad35bcfb0
|
ppl: refactor authorize to evaluate PPL (#2224)
* ppl: refactor authorize to evaluate PPL
* remove opa test step
* add log statement
* simplify assignment
* deny with forbidden if logged in
* add safeEval function
* create evaluator-specific config and options
* embed the headers rego file directly
|
2021-05-21 09:50:18 -06:00 |
|