Commit graph

2640 commits

Author SHA1 Message Date
Bobby DeSimone
e9faefea16
docs: update docs for v0.0.5 2019-06-04 15:21:25 -07:00
Bobby DeSimone
4ce4e1e124
proxy: fix internal service url (#163) 2019-06-04 12:56:25 -07:00
Bobby DeSimone
bade9f50e6
internal/httputil: use error structs for http errors (#159)
The existing implementation used a ErrorResponse method to propogate
and create http error messages. Since we added functionality to
troubleshoot, signout, and do other tasks following an http error
it's useful to use Error struct in place of method arguments.

This fixes #157 where a troubleshooting links were appearing on pages
that it didn't make sense on (e.g. pages without valid sessions).
2019-06-03 20:00:37 -07:00
Bobby DeSimone
14403ce388
docs: update examples for v0.0.5 (#147) 2019-06-03 14:05:28 -07:00
Bobby DeSimone
8de453dae3
internal/middleware: validate only top domain (#158) 2019-06-03 08:45:38 -07:00
Bobby DeSimone
e982e72146
Merge pull request #151 from nareddyt/web-socket-support
Enable websocket support
2019-06-01 22:23:19 -07:00
Tejasvi Nareddy
f966e5ab19 (proxy, internal/config, internal/log, docs): opt-in websocket support 2019-06-01 22:39:46 -04:00
Bobby DeSimone
cf61c6be3d
Merge pull request #150 from travisgroth/feature/hot-policy
Feature/hot policy
2019-06-01 15:54:28 -07:00
Travis Groth
8c2beac6f1 Add automatic configuration reloading and
policy handling
2019-06-01 14:52:10 -04:00
Bobby DeSimone
77f3933560
internal/config: change internal-authenticate-addr to url (#154) 2019-05-31 17:53:58 -07:00
Bobby DeSimone
1791e3d3f7
Merge pull request #137 from desimone/docs/add-upgrading-guide
docs: add upgrade guide
2019-05-31 11:40:40 -07:00
Bobby DeSimone
bd6d1e4745
Merge pull request #1 from travisgroth/docs/add-upgrading-guide
Added note for configuration refactor
2019-05-30 20:21:25 -07:00
Travis Groth
1148c3cd9b Added note for configuration refactor 2019-05-30 21:56:03 -04:00
Bobby DeSimone
7487de94df
authenticate: catch missing required setting (#149) 2019-05-30 14:20:28 -07:00
Bobby DeSimone
191015a0ed
Merge pull request #142 from u5surf/issue-135
all: fix incorrect http status codes #135
2019-05-28 21:16:16 -07:00
u5surf
c274112ecc all: fix incorrect http status codes #135 2019-05-29 12:57:02 +09:00
Bobby DeSimone
f68338c888
internal/httputil: add request id to error page (#144) 2019-05-28 18:12:49 -07:00
Bobby DeSimone
3d6471c4b3
docs: fix example policy name typo (#143)
Rename s/config-policy-only.yaml /config.example.policy.only/
Removed POLICY_FILE references
2019-05-27 14:06:10 -07:00
Bobby DeSimone
80612247e3
docs: add versioning (#141)
docs: make colors and logos consistent
Fixes #109
2019-05-26 21:52:51 -07:00
Bobby DeSimone
794b7996db
Merge pull request #139 from travisgroth/feature/viper-config
deployment: expose config file interface in docker images
2019-05-26 20:09:07 -07:00
Travis Groth
02177043aa Add config handling to dockerfiles and update documentation 2019-05-26 22:28:51 -04:00
Bobby DeSimone
2dc88d44ee
Merge pull request #124 from desimone/docs/update-helm-and-aws-script
deployment: remove helm from main repo
2019-05-26 14:59:32 -07:00
Bobby DeSimone
66b4c2d3cd
authenticate/proxy: add user impersonation, refresh, dashboard (#123)
proxy: Add user dashboard. [GH-123]
proxy/authenticate: Add manual refresh of their session. [GH-73]
authorize: Add administrator (super user) account support. [GH-110]
internal/policy: Allow administrators to impersonate other users. [GH-110]
2019-05-26 12:33:00 -07:00
Travis Groth
af254882e6 Fix some missing coverage 2019-05-26 07:56:52 -04:00
Bobby DeSimone
3ee23e3308
docs: add upgrade guide 2019-05-25 14:08:12 -07:00
Bobby DeSimone
dc2eb9668c
Merge pull request #130 from travisgroth/feature/viper-config
deployment: switch to viper for config
2019-05-25 13:44:57 -07:00
Travis Groth
febf9464a4 Switch options parsing to viper 2019-05-25 15:06:32 -04:00
Bobby DeSimone
702cc30b77
Merge pull request #134 from nareddyt/unauthenticated-routes
proxy: support for public unauthenticated routes
2019-05-22 20:29:39 -07:00
Tejasvi Nareddy
c5d2e40435 (proxy, internal\policy, docs\reference): define new access control option to bypass authentication 2019-05-22 23:12:30 -04:00
Bobby DeSimone
c53c07c274
Merge pull request #133 from nareddyt/bug-route-config-addresses
proxy: fix bug with incorrect addressing causing invalid route configs
2019-05-21 16:30:21 -07:00
Tejasvi Nareddy
9992eebcac proxy: fix bug with incorrect addressing causing invalid route configs 2019-05-21 17:08:03 -04:00
Bobby DeSimone
409f44a9be
Merge pull request #131 from desimone/feature/share-session-state
internal/sessions: make user state domain scoped
2019-05-20 20:51:03 -07:00
Bobby DeSimone
3eff6cce13
internal/sessions: make user state domain scoped
internal/sessions: session state is domain scoped
internal/sessions: infer csrf cookie, route scoped
proxy & authenticate: use shared cookie name
proxy & authenticate: prevent resaving unchanged session
proxy & authenticate: redirect instead of error for no session on login
internal/config: merge cookies
proxy: remove favicon specific route
proxy: use mock server for tests
proxy: add tests for failures
2019-05-20 20:44:05 -07:00
Bobby DeSimone
2eb2eb0620
Merge pull request #127 from deltabweb/master
deployment: add arm64v8 dockerfile
2019-05-19 20:07:26 -07:00
deltabweb
d1042d8c8b
Create Dockerfile for arm64 - Fixes #125 2019-05-20 14:16:47 +12:00
Bobby DeSimone
382f9de876
Merge pull request #126 from benny-gold/master
authenticate: add more verbose errors to authenticate handler
2019-05-19 11:31:27 -07:00
Ben Gould
07bb698bb9 more verbose errors on invalid uri parameter 2019-05-19 19:22:13 +01:00
Bobby DeSimone
af2c41a238
internal/config: centralize options handling 2019-05-18 12:44:32 -07:00
Travis Groth
ebb6df6c3f Refactor to central options struct and parsing 2019-05-18 08:17:36 -04:00
Bobby DeSimone
950f720660
docs: add amazon helm script to examples 2019-05-16 21:44:33 -07:00
Bobby DeSimone
562317dbf6
deployment: remove helm from main repo
- docs: add helm deployment script for aws
2019-05-16 21:35:02 -07:00
Bobby DeSimone
5970d6c766
Merge pull request #121 from banzaicloud/dockerfile-golint
docker: add missing golint command
2019-05-15 12:57:40 -07:00
Nandor Kracser
8b86454cb5 docker: add missing golint command 2019-05-15 13:29:16 +02:00
Bobby DeSimone
27d4683662
authenticate: add CSP headers to this service only (#120) 2019-05-14 22:29:24 -07:00
Bobby DeSimone
cfac5f10ff
cmd/pomerium: move middleware for all http handlers to global context (#117) 2019-05-14 13:23:25 -07:00
Bobby DeSimone
04a653f694
docs: fix typos and reorganize 2019-05-09 23:16:26 -07:00
Bobby DeSimone
5448e3599a
cmd/pomerium : refactor main to more testable (#112)
- cmd/pomerium: refactor global timeouts to be configurable
- cmd/pomerium: add tests
- cmd/pomerium: remove debug flag, set with env vars only
- cmd/pomerium: global ping now returns version not OK
- proxy: validate shared secret encoding and length
- docs: add timeout to example policy
- docs: document timeouts and cors
- docs: update pomerium logo
- docs: add policy authorization docs
2019-05-09 23:10:19 -07:00
Bobby DeSimone
5e37c29dfe
proxy: make http headers configurable (#108)
- http headers can be disabled via an env config
- http headers can be configured by k/v map env config
- pomerium/envconfig updated to use original syntax v1.5.0
- go.mod / go.sum patches updated
2019-05-07 12:05:25 -07:00
Bobby DeSimone
0086fa05f8
docs: fix typos in reference 2019-05-03 20:54:21 -07:00
Bobby DeSimone
25d76cd5c0
proxy: make http redirect server configurable (#105) 2019-05-03 20:48:26 -07:00