Commit graph

2640 commits

Author SHA1 Message Date
renovate[bot]
bed85cd5f7 chore(deps): update golang.org/x/oauth2 commit hash to 858c2ad (#415) 2019-12-06 11:08:36 -08:00
renovate[bot]
3a32c0e60a chore(deps): update golang.org/x/crypto commit hash to e9b2fee (#414) 2019-12-06 11:08:10 -08:00
Bobby DeSimone
b3d3159185
httputil : wrap handlers for additional context (#413)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-12-06 11:07:45 -08:00
Bobby DeSimone
487fc655d6
authenticate: make session default match IDP (#416)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-12-04 22:22:10 -08:00
Bobby DeSimone
59f1838996
deployment: check deps weekly (#417)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-12-03 20:14:10 -08:00
Bobby DeSimone
12bae5cc43
errors: use %w verb directive (#419)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-12-03 20:02:43 -08:00
Bobby DeSimone
74cd9eabbb
authenticate: fix impersonation getting cleared (#411) 2019-11-30 10:54:32 -08:00
Bobby DeSimone
edba21e0c9
docs: update v0.3.0 regarding all service mode (#408)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-27 08:36:21 -08:00
Bobby DeSimone
1f567d884d
depedency: regen grpc without /x/net (#407)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-27 08:36:06 -08:00
renovate[bot]
81093b3f2e chore(deps): pin dependencies (#404) 2019-11-25 23:05:30 -08:00
Bobby DeSimone
773deed761
depedencies: update minor and patch (#402) 2019-11-25 20:53:33 -08:00
Bobby DeSimone
03a44de4a1
Merge pull request #389 from desimone/bugs/fix-forward-auth
proxy: fix forward auth, request signing
2019-11-25 15:21:53 -08:00
Bobby DeSimone
c8e6277a30
Merge remote-tracking branch 'upstream/master' into bugs/fix-forward-auth
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-25 15:02:25 -08:00
Bobby DeSimone
0f6a9d7f1d
proxy: fix forward auth, request signing
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-25 14:29:52 -08:00
Bobby DeSimone
4fb8c75a27
deployment: add release drafter (#398) 2019-11-25 07:47:40 -08:00
Travis Groth
e5b13a9bf6
add yaml tags to all pointers in config (#397) 2019-11-24 16:45:21 -05:00
Bobby DeSimone
ebee64b70b
internal/frontend : serve static assets (#392)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-22 17:46:01 -08:00
Travis Groth
f20d913abe
proxy: Fix policy reload regression (#396)
* Fix policy reload regression

* Update changelog
2019-11-22 19:28:36 -05:00
Travis Groth
8164cfd85a
config: Update yaml tags (#394)
* Add/update yaml tags for Options and Policy
2019-11-20 22:37:44 -05:00
Bobby DeSimone
6743accd74
lint: bump golangci-lint 1.21.0 (#391)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-19 19:58:11 -08:00
Bobby DeSimone
ec9607d1d5
v0.5.0 (#375) 2019-11-14 20:02:16 -08:00
Bobby DeSimone
00c29f4e77
authenticate: handle XHR redirect flow (#387)
- authenticate: add cors preflight check support for sign_in endpoint
- internal/httputil: indicate responses that originate from pomerium vs the app
- proxy: detect XHR requests and do not redirect on failure.
- authenticate: removed default session duration; should be maintained out of band with rpc.
2019-11-14 19:37:31 -08:00
Bobby DeSimone
9030bd32cb
internal/templates: properly truncate fields (#386) 2019-11-13 11:43:12 -08:00
Bobby DeSimone
e2943b7c80
internal/sessions: fix upgrade path for new sessions (#382)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-12 13:19:08 -08:00
Travis Groth
f3c62c10cc
Rename internal/config to config (#380) 2019-11-09 19:53:11 -05:00
Bobby DeSimone
c6ebd838e0
bug: fix bad callback url for programmatic (#381)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-09 16:43:44 -08:00
Bobby DeSimone
b9ab49c32c
internal/sessions: fix cookie clear session (#376)
CookieStore's ClearSession now properly clears the user session cookie by setting MaxAge to -1.

internal/sessions: move encoder interface to encoding package, and rename to MarshalUnmarshaler.
internal/encoding: move mock to own package
authenticate: use INFO log level for authZ error.

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-09 10:49:24 -08:00
Bobby DeSimone
d3d60d1055 all: support route scoped sessions
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-06 17:54:15 -08:00
Bobby DeSimone
83342112bb
docs: add enterprise contact page (#371)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-20 10:48:08 -07:00
Bobby DeSimone
028434ff4f
v0.4.2 (#370)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-18 08:11:11 -07:00
Bobby DeSimone
64a10c67d8
v0.4.1 (#369)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

Go 1.13.2

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-17 17:24:39 -07:00
Bobby DeSimone
d4d8f06e21
docs: add k8s dashboard recipe (#365) 2019-10-17 09:03:11 -07:00
Bobby DeSimone
7d7e997e79
proxy: verify endpoint strip added callback params (#368)
- proxy: use distinct host route for forward-auth handlers
- proxy: have auth middleware set pomerium headers for request and response
2019-10-15 15:36:00 -07:00
Bobby DeSimone
0e85b2b1cb
bug: fix forward-auth redirect (#364) 2019-10-13 11:09:30 -07:00
Bobby DeSimone
303e4c34a3
docs: add faq / troubleshooting guide (#361) 2019-10-10 11:03:00 -07:00
Bobby DeSimone
a221a8b531
docs: make authorize service url more clear (#360)
- don't use script include for vscode recipe

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-09 18:23:35 -07:00
Bobby DeSimone
fc3b16d366
docs: add AdGuard recipe (#359)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-09 08:28:12 -07:00
Bobby DeSimone
acc85dbf42 docs: use master for docs again
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-08 17:28:06 -07:00
Bobby DeSimone
28eae36ce1
v0.4.0
deployment: prepare v0.4.0 (#350
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-07 19:53:57 -07:00
Bobby DeSimone
bca5caf77a
httputil: add explicit healthcheck handler (#354)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-07 17:38:28 -07:00
Bobby DeSimone
c0bcab5171
authorize: change http addr if conflict (#355)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-07 17:13:21 -07:00
Bobby DeSimone
badd8d69af
internal/sessions: refactor how sessions loading (#351)
These chagnes standardize how session loading is done for session
cookie, auth bearer token, and query params.

- Bearer token previously combined with session cookie.
- rearranged cookie-store to put exported methods above unexported
- added header store that implements session loader interface
- added query param store that implements session loader interface

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-06 10:47:53 -07:00
Bobby DeSimone
7aa4621b1b
proxy: update mux to support routing with ports (#353)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-06 10:21:23 -07:00
Bobby DeSimone
a96aec57d5
proxy: add per-route request headers setting (#346)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-04 14:51:52 -07:00
Bobby DeSimone
c95a72e12a
proxy: fix dashboard path prefix (#347)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-04 08:36:36 -07:00
Bobby DeSimone
7016534d87
proxy: use custom 404 handler (#348)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-04 08:36:23 -07:00
Bobby DeSimone
eaa1e7a4fb
proxy: support external access control requests (#324)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-03 21:22:44 -07:00
Bobby DeSimone
7abcf650e5
Merge pull request #342 from desimone/bug/fix-on-config-change
internal/config: fix on config change
2019-10-03 09:08:41 -07:00
Bobby DeSimone
f73d3a09ac
internal/config: fix on config change
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-02 22:48:41 -07:00
Bobby DeSimone
83a30d80a5
Merge pull request #328 from desimone/feature/support-insecure-mode
all: support insecure transport
2019-10-02 19:18:44 -07:00