renovate[bot]
bed85cd5f7
chore(deps): update golang.org/x/oauth2 commit hash to 858c2ad ( #415 )
2019-12-06 11:08:36 -08:00
renovate[bot]
3a32c0e60a
chore(deps): update golang.org/x/crypto commit hash to e9b2fee ( #414 )
2019-12-06 11:08:10 -08:00
Bobby DeSimone
b3d3159185
httputil : wrap handlers for additional context ( #413 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-12-06 11:07:45 -08:00
Bobby DeSimone
487fc655d6
authenticate: make session default match IDP ( #416 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-12-04 22:22:10 -08:00
Bobby DeSimone
59f1838996
deployment: check deps weekly ( #417 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-12-03 20:14:10 -08:00
Bobby DeSimone
12bae5cc43
errors: use %w verb directive ( #419 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-12-03 20:02:43 -08:00
Bobby DeSimone
74cd9eabbb
authenticate: fix impersonation getting cleared ( #411 )
2019-11-30 10:54:32 -08:00
Bobby DeSimone
edba21e0c9
docs: update v0.3.0 regarding all service mode ( #408 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-27 08:36:21 -08:00
Bobby DeSimone
1f567d884d
depedency: regen grpc without /x/net ( #407 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-27 08:36:06 -08:00
renovate[bot]
81093b3f2e
chore(deps): pin dependencies ( #404 )
2019-11-25 23:05:30 -08:00
Bobby DeSimone
773deed761
depedencies: update minor and patch ( #402 )
2019-11-25 20:53:33 -08:00
Bobby DeSimone
03a44de4a1
Merge pull request #389 from desimone/bugs/fix-forward-auth
...
proxy: fix forward auth, request signing
2019-11-25 15:21:53 -08:00
Bobby DeSimone
c8e6277a30
Merge remote-tracking branch 'upstream/master' into bugs/fix-forward-auth
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-25 15:02:25 -08:00
Bobby DeSimone
0f6a9d7f1d
proxy: fix forward auth, request signing
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-25 14:29:52 -08:00
Bobby DeSimone
4fb8c75a27
deployment: add release drafter ( #398 )
2019-11-25 07:47:40 -08:00
Travis Groth
e5b13a9bf6
add yaml tags to all pointers in config ( #397 )
2019-11-24 16:45:21 -05:00
Bobby DeSimone
ebee64b70b
internal/frontend : serve static assets ( #392 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-22 17:46:01 -08:00
Travis Groth
f20d913abe
proxy: Fix policy reload regression ( #396 )
...
* Fix policy reload regression
* Update changelog
2019-11-22 19:28:36 -05:00
Travis Groth
8164cfd85a
config: Update yaml tags ( #394 )
...
* Add/update yaml tags for Options and Policy
2019-11-20 22:37:44 -05:00
Bobby DeSimone
6743accd74
lint: bump golangci-lint 1.21.0 ( #391 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-19 19:58:11 -08:00
Bobby DeSimone
ec9607d1d5
v0.5.0 ( #375 )
2019-11-14 20:02:16 -08:00
Bobby DeSimone
00c29f4e77
authenticate: handle XHR redirect flow ( #387 )
...
- authenticate: add cors preflight check support for sign_in endpoint
- internal/httputil: indicate responses that originate from pomerium vs the app
- proxy: detect XHR requests and do not redirect on failure.
- authenticate: removed default session duration; should be maintained out of band with rpc.
2019-11-14 19:37:31 -08:00
Bobby DeSimone
9030bd32cb
internal/templates: properly truncate fields ( #386 )
2019-11-13 11:43:12 -08:00
Bobby DeSimone
e2943b7c80
internal/sessions: fix upgrade path for new sessions ( #382 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-12 13:19:08 -08:00
Travis Groth
f3c62c10cc
Rename internal/config
to config
( #380 )
2019-11-09 19:53:11 -05:00
Bobby DeSimone
c6ebd838e0
bug: fix bad callback url for programmatic ( #381 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-09 16:43:44 -08:00
Bobby DeSimone
b9ab49c32c
internal/sessions: fix cookie clear session ( #376 )
...
CookieStore's ClearSession now properly clears the user session cookie by setting MaxAge to -1.
internal/sessions: move encoder interface to encoding package, and rename to MarshalUnmarshaler.
internal/encoding: move mock to own package
authenticate: use INFO log level for authZ error.
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-09 10:49:24 -08:00
Bobby DeSimone
d3d60d1055
all: support route scoped sessions
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-06 17:54:15 -08:00
Bobby DeSimone
83342112bb
docs: add enterprise contact page ( #371 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-20 10:48:08 -07:00
Bobby DeSimone
028434ff4f
v0.4.2 ( #370 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-18 08:11:11 -07:00
Bobby DeSimone
64a10c67d8
v0.4.1 ( #369 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
Go 1.13.2
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-17 17:24:39 -07:00
Bobby DeSimone
d4d8f06e21
docs: add k8s dashboard recipe ( #365 )
2019-10-17 09:03:11 -07:00
Bobby DeSimone
7d7e997e79
proxy: verify endpoint strip added callback params ( #368 )
...
- proxy: use distinct host route for forward-auth handlers
- proxy: have auth middleware set pomerium headers for request and response
2019-10-15 15:36:00 -07:00
Bobby DeSimone
0e85b2b1cb
bug: fix forward-auth redirect ( #364 )
2019-10-13 11:09:30 -07:00
Bobby DeSimone
303e4c34a3
docs: add faq / troubleshooting guide ( #361 )
2019-10-10 11:03:00 -07:00
Bobby DeSimone
a221a8b531
docs: make authorize service url more clear ( #360 )
...
- don't use script include for vscode recipe
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-09 18:23:35 -07:00
Bobby DeSimone
fc3b16d366
docs: add AdGuard recipe ( #359 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-09 08:28:12 -07:00
Bobby DeSimone
acc85dbf42
docs: use master for docs again
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-08 17:28:06 -07:00
Bobby DeSimone
28eae36ce1
v0.4.0
...
deployment: prepare v0.4.0 (#350
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-07 19:53:57 -07:00
Bobby DeSimone
bca5caf77a
httputil: add explicit healthcheck handler ( #354 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-07 17:38:28 -07:00
Bobby DeSimone
c0bcab5171
authorize: change http addr if conflict ( #355 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-07 17:13:21 -07:00
Bobby DeSimone
badd8d69af
internal/sessions: refactor how sessions loading ( #351 )
...
These chagnes standardize how session loading is done for session
cookie, auth bearer token, and query params.
- Bearer token previously combined with session cookie.
- rearranged cookie-store to put exported methods above unexported
- added header store that implements session loader interface
- added query param store that implements session loader interface
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-06 10:47:53 -07:00
Bobby DeSimone
7aa4621b1b
proxy: update mux to support routing with ports ( #353 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-06 10:21:23 -07:00
Bobby DeSimone
a96aec57d5
proxy: add per-route request headers setting ( #346 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-04 14:51:52 -07:00
Bobby DeSimone
c95a72e12a
proxy: fix dashboard path prefix ( #347 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-04 08:36:36 -07:00
Bobby DeSimone
7016534d87
proxy: use custom 404 handler ( #348 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-04 08:36:23 -07:00
Bobby DeSimone
eaa1e7a4fb
proxy: support external access control requests ( #324 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-03 21:22:44 -07:00
Bobby DeSimone
7abcf650e5
Merge pull request #342 from desimone/bug/fix-on-config-change
...
internal/config: fix on config change
2019-10-03 09:08:41 -07:00
Bobby DeSimone
f73d3a09ac
internal/config: fix on config change
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-02 22:48:41 -07:00
Bobby DeSimone
83a30d80a5
Merge pull request #328 from desimone/feature/support-insecure-mode
...
all: support insecure transport
2019-10-02 19:18:44 -07:00