Commit graph

748 commits

Author SHA1 Message Date
Renovate Bot
9561307de9 Update github.com/pomerium/autocache commit hash to 8c1cd65 2020-05-11 04:59:16 +00:00
Caleb Doxsey
236891329b
integration-tests: add websocket enabled/disabled test (#661)
* integration-tests: add websocket enabled/disabled test

* integration-tests: lint
2020-05-06 16:10:01 -06:00
Bobby DeSimone
bf9a6f5e97
cryptutil: add automatic certificate management (#644)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-05-05 12:50:19 -07:00
Renovate Bot
c29f1932d6 chore(deps): update golang.org/x/net commit hash to 1ed2336 2020-05-05 05:15:54 +00:00
Renovate Bot
e6212ce6e3 chore(deps): update module stretchr/testify to v1.5.1 2020-05-04 21:41:10 +00:00
Renovate Bot
fe89c7dcb3 chore(deps): update module square/go-jose to v2.5.1 2020-05-04 20:39:39 +00:00
Renovate Bot
3390e557c0 chore(deps): update golang.org/x/crypto commit hash to 4b2356b 2020-05-04 19:59:47 +00:00
Renovate Bot
12e0e18944 chore(deps): update module prometheus/client_golang to v1.6.0 2020-05-04 18:40:23 +00:00
Caleb Doxsey
e5c7c5b27e
Merge pull request #638 from pomerium/cdoxsey/integration-tests
integration-tests: add integration test suite
2020-04-28 15:37:24 -06:00
Renovate Bot
2ebb5916e5 chore(deps): update module google.golang.org/api to v0.22.0 2020-04-28 19:30:23 +00:00
Renovate Bot
24bbe4366a chore(deps): update module golang/protobuf to v1.4.0 2020-04-28 18:17:21 +00:00
Caleb Doxsey
b6082311fd
Merge pull request #620 from pomerium/renovate/github.com-open-policy-agent-opa-0.x
chore(deps): update module open-policy-agent/opa to v0.19.2
2020-04-28 08:30:16 -06:00
Caleb Doxsey
8fd716e1d8 integration: add cluster setup and configuration and a few tests 2020-04-28 07:33:33 -06:00
Renovate Bot
9860c3ce9f chore(deps): update golang.org/x/crypto commit hash to 729f1e8 2020-04-28 03:53:53 +00:00
Renovate Bot
b5fcfd3e95
chore(deps): update module open-policy-agent/opa to v0.19.2 2020-04-27 23:35:03 +00:00
Bobby DeSimone
d7daf274c0
pomerium-cli: add service account docs (#613)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-04-16 13:28:42 -07:00
Travis Groth
db9895a274
Bump grpc up to 1.27.1 (#609) 2020-04-13 22:27:02 -04:00
Renovate Bot
e9057c83e8 chore(deps): update module square/go-jose to v2.5.0 2020-04-13 04:45:00 +00:00
Renovate Bot
f964847762 chore(deps): update module spf13/viper to v1.6.3 2020-04-13 03:36:52 +00:00
Renovate Bot
12560f93f4 chore(deps): update golang.org/x/crypto commit hash to baeed62 2020-04-06 01:28:53 +00:00
Renovate Bot
519a79f685 chore(deps): update module fatih/color to v1.9.0 2020-03-30 02:26:26 +00:00
Renovate Bot
ce728c14b8 chore(deps): update golang.org/x/crypto commit hash to 0ec3e99 2020-03-30 01:50:16 +00:00
Bobby DeSimone
9bee6bb648
cmd: add cli to generate service accounts (#552)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-03-24 20:23:07 -07:00
Renovate Bot
acfc880421 chore(deps): update module open-policy-agent/opa to v0.18.0 2020-03-23 05:53:40 +00:00
Renovate Bot
ba96854a4f chore(deps): update module go.etcd.io/bbolt to v1.3.4 2020-03-23 04:19:40 +00:00
Renovate Bot
df606bdff6 chore(deps): update golang.org/x/crypto commit hash to 891825f 2020-03-23 02:16:37 +00:00
Renovate Bot
74637ea4ac chore(deps): update module fsnotify/fsnotify to v1.4.9 2020-03-20 13:18:47 +00:00
Renovate Bot
ed963f9c38 chore(deps): update module prometheus/client_golang to v1.5.1 2020-03-20 02:40:33 +00:00
Renovate Bot
d5d180aa01 chore(deps): update golang.org/x/crypto commit hash to 1b76d66 2020-03-17 17:59:51 +00:00
Renovate Bot
d597af9de4 chore(deps): update module golang/protobuf to v1.3.5 2020-03-17 13:35:07 +00:00
Renovate Bot
8ddb702572 chore(deps): update module golang/mock to v1.4.3 2020-03-17 11:48:19 +00:00
Renovate Bot
1b8db111f5 chore(deps): update github.com/pomerium/autocache commit hash to 227c993 2020-03-16 01:34:39 +00:00
Bobby DeSimone
6f4b26abe2
identity: support oidc UserInfo Response (#529)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-03-12 20:56:40 -07:00
Bobby DeSimone
8d1732582e
authorize: use jwt insead of state struct (#514)
authenticate: unmarshal and verify state from jwt, instead of middleware
authorize: embed opa policy using statik
authorize: have IsAuthorized handle authorization for all routes
authorize: if no signing key is provided, one is generated
authorize: remove IsAdmin grpc endpoint
authorize/client: return authorize decision struct
cmd/pomerium: main logger no longer contains email and group
cryptutil: add ECDSA signing methods
dashboard: have impersonate form show up for all users, but have api gated by authz
docs: fix typo in signed jwt header
encoding/jws: remove unused es256 signer
frontend: namespace static web assets
internal/sessions: remove leeway to match authz policy
proxy:  move signing functionality to authz
proxy: remove jwt attestation from proxy (authZ does now)
proxy: remove non-signed headers from headers
proxy: remove special handling of x-forwarded-host
sessions: do not verify state in middleware
sessions: remove leeway from state to match authz
sessions/{all}: store jwt directly instead of state

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-03-10 11:19:26 -07:00
Renovate Bot
a477af9378 chore(deps): update module prometheus/client_golang to v1.5.0 2020-03-10 11:42:23 +00:00
Bobby DeSimone
855860136c
depedency: use go mod versioned redis (#528)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-03-08 10:48:53 -07:00
Renovate Bot
7e1c4fa498 chore(deps): update module google.golang.org/api to v0.20.0 2020-03-07 15:53:20 +00:00
Renovate Bot
9515a48ba0 chore(deps): update golang.org/x/crypto commit hash to 78000ba 2020-03-07 14:44:21 +00:00
Renovate Bot
702f63fea1 chore(deps): update module open-policy-agent/opa to v0.17.3 2020-03-07 13:01:58 +00:00
Renovate Bot
32904cfe36 chore(deps): update module rakyll/statik to v0.1.7 2020-03-07 03:03:35 +00:00
Renovate Bot
3378a5ecf8 chore(deps): update module golang/protobuf to v1.3.4 2020-03-07 01:18:26 +00:00
Renovate Bot
37a50b3a34 chore(deps): update module gorilla/mux to v1.7.4 2020-03-06 23:49:00 +00:00
Renovate Bot
c6281d1f49 chore(deps): update github.com/pomerium/autocache commit hash to 6c66ed5 2020-03-06 23:40:24 +00:00
renovate[bot]
f64edc0914
chore(deps): update module rs/zerolog to v1.18.0 (#507)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2020-03-06 18:03:55 -05:00
renovate[bot]
7c67599efd
chore(deps): update module google.golang.org/grpc to v1.27.1 (#496) 2020-02-12 20:23:29 -05:00
renovate[bot]
23fe11f562
chore(deps): update module prometheus/client_golang to v1.4.1 (#498) 2020-02-10 22:02:08 -05:00
renovate[bot]
b13603c55b
chore(deps): update module open-policy-agent/opa to v0.17.1 (#497)
Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-02-10 08:55:26 -08:00
renovate[bot]
55b50af101
chore(deps): update module go.opencensus.io to v0.22.3 (#483)
Co-authored-by: WhiteSource Renovate <renovatebot@gmail.com>
2020-02-10 08:54:46 -08:00
Travis Groth
1901cb5ca0
Roll back grpc to v1.25.1 (#484) 2020-02-03 06:30:54 -05:00
Bobby DeSimone
2f13488598
authorize: use opa for policy engine (#474)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-02-02 11:18:22 -08:00