Bobby DeSimone
ebee64b70b
internal/frontend : serve static assets ( #392 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-22 17:46:01 -08:00
Travis Groth
f20d913abe
proxy: Fix policy reload regression ( #396 )
...
* Fix policy reload regression
* Update changelog
2019-11-22 19:28:36 -05:00
Travis Groth
8164cfd85a
config: Update yaml tags ( #394 )
...
* Add/update yaml tags for Options and Policy
2019-11-20 22:37:44 -05:00
Bobby DeSimone
6743accd74
lint: bump golangci-lint 1.21.0 ( #391 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-19 19:58:11 -08:00
Bobby DeSimone
ec9607d1d5
v0.5.0 ( #375 )
2019-11-14 20:02:16 -08:00
Bobby DeSimone
00c29f4e77
authenticate: handle XHR redirect flow ( #387 )
...
- authenticate: add cors preflight check support for sign_in endpoint
- internal/httputil: indicate responses that originate from pomerium vs the app
- proxy: detect XHR requests and do not redirect on failure.
- authenticate: removed default session duration; should be maintained out of band with rpc.
2019-11-14 19:37:31 -08:00
Bobby DeSimone
9030bd32cb
internal/templates: properly truncate fields ( #386 )
2019-11-13 11:43:12 -08:00
Bobby DeSimone
e2943b7c80
internal/sessions: fix upgrade path for new sessions ( #382 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-12 13:19:08 -08:00
Travis Groth
f3c62c10cc
Rename internal/config
to config
( #380 )
2019-11-09 19:53:11 -05:00
Bobby DeSimone
c6ebd838e0
bug: fix bad callback url for programmatic ( #381 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-09 16:43:44 -08:00
Bobby DeSimone
b9ab49c32c
internal/sessions: fix cookie clear session ( #376 )
...
CookieStore's ClearSession now properly clears the user session cookie by setting MaxAge to -1.
internal/sessions: move encoder interface to encoding package, and rename to MarshalUnmarshaler.
internal/encoding: move mock to own package
authenticate: use INFO log level for authZ error.
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-09 10:49:24 -08:00
Bobby DeSimone
d3d60d1055
all: support route scoped sessions
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-06 17:54:15 -08:00
Bobby DeSimone
83342112bb
docs: add enterprise contact page ( #371 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-20 10:48:08 -07:00
Bobby DeSimone
028434ff4f
v0.4.2 ( #370 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-18 08:11:11 -07:00
Bobby DeSimone
64a10c67d8
v0.4.1 ( #369 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
Go 1.13.2
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-17 17:24:39 -07:00
Bobby DeSimone
d4d8f06e21
docs: add k8s dashboard recipe ( #365 )
2019-10-17 09:03:11 -07:00
Bobby DeSimone
7d7e997e79
proxy: verify endpoint strip added callback params ( #368 )
...
- proxy: use distinct host route for forward-auth handlers
- proxy: have auth middleware set pomerium headers for request and response
2019-10-15 15:36:00 -07:00
Bobby DeSimone
0e85b2b1cb
bug: fix forward-auth redirect ( #364 )
2019-10-13 11:09:30 -07:00
Bobby DeSimone
303e4c34a3
docs: add faq / troubleshooting guide ( #361 )
2019-10-10 11:03:00 -07:00
Bobby DeSimone
a221a8b531
docs: make authorize service url more clear ( #360 )
...
- don't use script include for vscode recipe
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-09 18:23:35 -07:00
Bobby DeSimone
fc3b16d366
docs: add AdGuard recipe ( #359 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-09 08:28:12 -07:00
Bobby DeSimone
acc85dbf42
docs: use master for docs again
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-08 17:28:06 -07:00
Bobby DeSimone
28eae36ce1
v0.4.0
...
deployment: prepare v0.4.0 (#350
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-07 19:53:57 -07:00
Bobby DeSimone
bca5caf77a
httputil: add explicit healthcheck handler ( #354 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-07 17:38:28 -07:00
Bobby DeSimone
c0bcab5171
authorize: change http addr if conflict ( #355 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-07 17:13:21 -07:00
Bobby DeSimone
badd8d69af
internal/sessions: refactor how sessions loading ( #351 )
...
These chagnes standardize how session loading is done for session
cookie, auth bearer token, and query params.
- Bearer token previously combined with session cookie.
- rearranged cookie-store to put exported methods above unexported
- added header store that implements session loader interface
- added query param store that implements session loader interface
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-06 10:47:53 -07:00
Bobby DeSimone
7aa4621b1b
proxy: update mux to support routing with ports ( #353 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-06 10:21:23 -07:00
Bobby DeSimone
a96aec57d5
proxy: add per-route request headers setting ( #346 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-04 14:51:52 -07:00
Bobby DeSimone
c95a72e12a
proxy: fix dashboard path prefix ( #347 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-04 08:36:36 -07:00
Bobby DeSimone
7016534d87
proxy: use custom 404 handler ( #348 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-04 08:36:23 -07:00
Bobby DeSimone
eaa1e7a4fb
proxy: support external access control requests ( #324 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-03 21:22:44 -07:00
Bobby DeSimone
7abcf650e5
Merge pull request #342 from desimone/bug/fix-on-config-change
...
internal/config: fix on config change
2019-10-03 09:08:41 -07:00
Bobby DeSimone
f73d3a09ac
internal/config: fix on config change
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-02 22:48:41 -07:00
Bobby DeSimone
83a30d80a5
Merge pull request #328 from desimone/feature/support-insecure-mode
...
all: support insecure transport
2019-10-02 19:18:44 -07:00
Bobby DeSimone
df822a4bae
all: support insecure mode
...
- pomerium/authenticate: add cookie secure setting
- internal/config: transport security validation moved to options
- internal/config: certificate struct hydrated
- internal/grpcutil: add grpc server mirroring http one
- internal/grpcutil: move grpc middleware
- cmd/pomerium: use run wrapper around main to pass back errors
- cmd/pomerium: add waitgroup (block on) all servers http/grpc
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-02 18:44:19 -07:00
Bobby DeSimone
40920b9092
Merge pull request #341 from desimone/docs/fix-master-branch
...
docs: use dev for current master branch
2019-10-02 18:02:49 -07:00
Bobby DeSimone
412782658b
docs: use dev for current master branch
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-02 17:16:56 -07:00
Bobby DeSimone
540364c566
Merge pull request #335 from desimone/330
...
docs: add version dropdown
2019-10-02 16:52:25 -07:00
Bobby DeSimone
0ff244c372
Merge pull request #340 from desimone/github/less-annoying-templates
...
github: make issue templates less annoying
2019-10-02 16:52:08 -07:00
Bobby DeSimone
7cef246d53
docs: add version dropdown
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-02 15:31:02 -07:00
Bobby DeSimone
9c4bd38624
github: make issue templates less annoying
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-02 15:25:07 -07:00
Bobby DeSimone
1e4496c2b9
Merge pull request #334 from desimone/docs/add-nist-zta
...
docs: add nist publication to background
2019-10-01 18:50:07 -07:00
Travis Groth
251ab0d527
internal/config: Switch to using struct scoped viper instance ( #332 )
...
* Switch to using struct scoped viper instance
* Rename NewXXXOptions
* Handle unchecked errors from viper.BindEnv
2019-10-01 18:16:36 -04:00
Bobby DeSimone
13baa22898
docs: add nist publication to background
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-10-01 10:24:08 -07:00
Bobby DeSimone
5df0ff500c
Merge pull request #327 from desimone/tests/logs-improve-coverage
...
internal/log: add unit tests
2019-09-30 22:52:05 -07:00
Bobby DeSimone
ed6e4d3e97
Merge pull request #329 from desimone/bug/fix-url-race
...
bug: fix potential race condition in unit test
2019-09-29 14:47:09 -07:00
Bobby DeSimone
8bd79903db
bug: fix potential race condition in unit test
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-09-29 14:15:13 -07:00
Bobby DeSimone
aa0182008f
internal/log: add unit tests
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-09-28 13:38:44 -07:00
Bobby DeSimone
1fa45c6ec2
Merge pull request #326 from desimone/feature/log-all-forwarded-for-addr
...
internal/log: return full `X-Forwarded-For`
2019-09-28 12:57:21 -07:00
Bobby DeSimone
33d4e4843b
internal/log: return full X-Forwarded-For
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-09-28 12:15:13 -07:00