Commit graph

3224 commits

Author SHA1 Message Date
Bobby DeSimone
ebee64b70b
internal/frontend : serve static assets (#392)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-22 17:46:01 -08:00
Travis Groth
f20d913abe
proxy: Fix policy reload regression (#396)
* Fix policy reload regression

* Update changelog
2019-11-22 19:28:36 -05:00
Travis Groth
8164cfd85a
config: Update yaml tags (#394)
* Add/update yaml tags for Options and Policy
2019-11-20 22:37:44 -05:00
Bobby DeSimone
6743accd74
lint: bump golangci-lint 1.21.0 (#391)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-19 19:58:11 -08:00
Bobby DeSimone
ec9607d1d5
v0.5.0 (#375) 2019-11-14 20:02:16 -08:00
Bobby DeSimone
00c29f4e77
authenticate: handle XHR redirect flow (#387)
- authenticate: add cors preflight check support for sign_in endpoint
- internal/httputil: indicate responses that originate from pomerium vs the app
- proxy: detect XHR requests and do not redirect on failure.
- authenticate: removed default session duration; should be maintained out of band with rpc.
2019-11-14 19:37:31 -08:00
Bobby DeSimone
9030bd32cb
internal/templates: properly truncate fields (#386) 2019-11-13 11:43:12 -08:00
Bobby DeSimone
e2943b7c80
internal/sessions: fix upgrade path for new sessions (#382)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-12 13:19:08 -08:00
Travis Groth
f3c62c10cc
Rename internal/config to config (#380) 2019-11-09 19:53:11 -05:00
Bobby DeSimone
c6ebd838e0
bug: fix bad callback url for programmatic (#381)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-09 16:43:44 -08:00
Bobby DeSimone
b9ab49c32c
internal/sessions: fix cookie clear session (#376)
CookieStore's ClearSession now properly clears the user session cookie by setting MaxAge to -1.

internal/sessions: move encoder interface to encoding package, and rename to MarshalUnmarshaler.
internal/encoding: move mock to own package
authenticate: use INFO log level for authZ error.

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-09 10:49:24 -08:00
Bobby DeSimone
d3d60d1055 all: support route scoped sessions
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-06 17:54:15 -08:00
Bobby DeSimone
83342112bb
docs: add enterprise contact page (#371)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-20 10:48:08 -07:00
Bobby DeSimone
028434ff4f
v0.4.2 (#370)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-18 08:11:11 -07:00
Bobby DeSimone
64a10c67d8
v0.4.1 (#369)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>

Go 1.13.2

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-17 17:24:39 -07:00
Bobby DeSimone
d4d8f06e21
docs: add k8s dashboard recipe (#365) 2019-10-17 09:03:11 -07:00
Bobby DeSimone
7d7e997e79
proxy: verify endpoint strip added callback params (#368)
- proxy: use distinct host route for forward-auth handlers
- proxy: have auth middleware set pomerium headers for request and response
2019-10-15 15:36:00 -07:00
Bobby DeSimone
0e85b2b1cb
bug: fix forward-auth redirect (#364) 2019-10-13 11:09:30 -07:00
Bobby DeSimone
303e4c34a3
docs: add faq / troubleshooting guide (#361) 2019-10-10 11:03:00 -07:00
Bobby DeSimone
a221a8b531
docs: make authorize service url more clear (#360)
- don't use script include for vscode recipe

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-09 18:23:35 -07:00
Bobby DeSimone
fc3b16d366
docs: add AdGuard recipe (#359)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-09 08:28:12 -07:00
Bobby DeSimone
acc85dbf42 docs: use master for docs again
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-08 17:28:06 -07:00
Bobby DeSimone
28eae36ce1
v0.4.0
deployment: prepare v0.4.0 (#350
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-07 19:53:57 -07:00
Bobby DeSimone
bca5caf77a
httputil: add explicit healthcheck handler (#354)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-07 17:38:28 -07:00
Bobby DeSimone
c0bcab5171
authorize: change http addr if conflict (#355)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-07 17:13:21 -07:00
Bobby DeSimone
badd8d69af
internal/sessions: refactor how sessions loading (#351)
These chagnes standardize how session loading is done for session
cookie, auth bearer token, and query params.

- Bearer token previously combined with session cookie.
- rearranged cookie-store to put exported methods above unexported
- added header store that implements session loader interface
- added query param store that implements session loader interface

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-06 10:47:53 -07:00
Bobby DeSimone
7aa4621b1b
proxy: update mux to support routing with ports (#353)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-06 10:21:23 -07:00
Bobby DeSimone
a96aec57d5
proxy: add per-route request headers setting (#346)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-04 14:51:52 -07:00
Bobby DeSimone
c95a72e12a
proxy: fix dashboard path prefix (#347)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-04 08:36:36 -07:00
Bobby DeSimone
7016534d87
proxy: use custom 404 handler (#348)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-04 08:36:23 -07:00
Bobby DeSimone
eaa1e7a4fb
proxy: support external access control requests (#324)
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-03 21:22:44 -07:00
Bobby DeSimone
7abcf650e5
Merge pull request #342 from desimone/bug/fix-on-config-change
internal/config: fix on config change
2019-10-03 09:08:41 -07:00
Bobby DeSimone
f73d3a09ac
internal/config: fix on config change
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-02 22:48:41 -07:00
Bobby DeSimone
83a30d80a5
Merge pull request #328 from desimone/feature/support-insecure-mode
all: support insecure transport
2019-10-02 19:18:44 -07:00
Bobby DeSimone
df822a4bae
all: support insecure mode
- pomerium/authenticate: add cookie secure setting
- internal/config: transport security validation moved to options
- internal/config: certificate struct hydrated
- internal/grpcutil: add grpc server mirroring http one
- internal/grpcutil: move grpc middleware
- cmd/pomerium: use run wrapper around main to pass back errors
- cmd/pomerium: add waitgroup (block on) all servers http/grpc

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-02 18:44:19 -07:00
Bobby DeSimone
40920b9092
Merge pull request #341 from desimone/docs/fix-master-branch
docs: use dev for current master branch
2019-10-02 18:02:49 -07:00
Bobby DeSimone
412782658b
docs: use dev for current master branch
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-02 17:16:56 -07:00
Bobby DeSimone
540364c566
Merge pull request #335 from desimone/330
docs: add version dropdown
2019-10-02 16:52:25 -07:00
Bobby DeSimone
0ff244c372
Merge pull request #340 from desimone/github/less-annoying-templates
github: make issue templates less annoying
2019-10-02 16:52:08 -07:00
Bobby DeSimone
7cef246d53
docs: add version dropdown
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-02 15:31:02 -07:00
Bobby DeSimone
9c4bd38624
github: make issue templates less annoying
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-02 15:25:07 -07:00
Bobby DeSimone
1e4496c2b9
Merge pull request #334 from desimone/docs/add-nist-zta
docs: add nist publication to background
2019-10-01 18:50:07 -07:00
Travis Groth
251ab0d527
internal/config: Switch to using struct scoped viper instance (#332)
* Switch to using struct scoped viper instance

* Rename NewXXXOptions

* Handle unchecked errors from viper.BindEnv
2019-10-01 18:16:36 -04:00
Bobby DeSimone
13baa22898
docs: add nist publication to background
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-01 10:24:08 -07:00
Bobby DeSimone
5df0ff500c
Merge pull request #327 from desimone/tests/logs-improve-coverage
internal/log: add unit tests
2019-09-30 22:52:05 -07:00
Bobby DeSimone
ed6e4d3e97
Merge pull request #329 from desimone/bug/fix-url-race
bug: fix potential race condition in unit test
2019-09-29 14:47:09 -07:00
Bobby DeSimone
8bd79903db
bug: fix potential race condition in unit test
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-09-29 14:15:13 -07:00
Bobby DeSimone
aa0182008f
internal/log: add unit tests
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-09-28 13:38:44 -07:00
Bobby DeSimone
1fa45c6ec2
Merge pull request #326 from desimone/feature/log-all-forwarded-for-addr
internal/log: return full `X-Forwarded-For`
2019-09-28 12:57:21 -07:00
Bobby DeSimone
33d4e4843b
internal/log: return full X-Forwarded-For
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-09-28 12:15:13 -07:00