Caleb Doxsey
49604ed458
ci: force docker driver ( #645 )
2020-05-04 07:11:59 -06:00
Travis Groth
b2e3b22f14
Update JWT headers to only be in responses from forward auth endpoint ( #642 )
2020-05-04 07:26:37 -04:00
Bobby DeSimone
f7ee08b05a
session: remove audience check ( #640 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-04-29 15:30:47 -07:00
Caleb Doxsey
b1d3bbaf56
authorize: add support for .pomerium and unauthenticated routes ( #639 )
...
* authorize: add support for .pomerium and unauthenticated routes
integration-tests: add test for forward auth dashboard urls
* proxy: fix ctx error test to return a 200 when authorize allows it
2020-04-29 10:55:46 -06:00
Caleb Doxsey
e5c7c5b27e
Merge pull request #638 from pomerium/cdoxsey/integration-tests
...
integration-tests: add integration test suite
2020-04-28 15:37:24 -06:00
Renovate Bot
2ebb5916e5
chore(deps): update module google.golang.org/api to v0.22.0
2020-04-28 19:30:23 +00:00
Renovate Bot
24bbe4366a
chore(deps): update module golang/protobuf to v1.4.0
2020-04-28 18:17:21 +00:00
Bobby DeSimone
18993c4293
github: fix nil pointer error ( #637 )
...
- fixes an issue where defer clear session would not be called
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-04-28 07:56:42 -07:00
Caleb Doxsey
b6082311fd
Merge pull request #620 from pomerium/renovate/github.com-open-policy-agent-opa-0.x
...
chore(deps): update module open-policy-agent/opa to v0.19.2
2020-04-28 08:30:16 -06:00
Caleb Doxsey
6d2f226a14
mod tidy
2020-04-28 08:19:52 -06:00
Caleb Doxsey
b11a336a33
inegration: fix linting issues
2020-04-28 08:17:22 -06:00
Caleb Doxsey
cb3e78cd01
fix required deployments
2020-04-28 08:03:05 -06:00
Caleb Doxsey
242c64ee97
integration: update test path for integration tests
2020-04-28 07:38:32 -06:00
Caleb Doxsey
33b30a87b1
integration: exclude integration folder from make test
2020-04-28 07:37:39 -06:00
Caleb Doxsey
8fd716e1d8
integration: add cluster setup and configuration and a few tests
2020-04-28 07:33:33 -06:00
Renovate Bot
9860c3ce9f
chore(deps): update golang.org/x/crypto commit hash to 729f1e8
2020-04-28 03:53:53 +00:00
Renovate Bot
b5fcfd3e95
chore(deps): update module open-policy-agent/opa to v0.19.2
2020-04-27 23:35:03 +00:00
Ogundele Olumide
5f0c13767b
improvement: update gitlab api scope ( #630 )
2020-04-23 13:26:25 -07:00
Bobby DeSimone
627a591824
identity: abstract identity providers by type ( #560 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-04-23 10:36:24 -07:00
Bobby DeSimone
f4868dd4dd
docs: fix favicon ( #626 )
...
* docs: fix favicon
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-04-21 14:40:54 -07:00
Ogundele Olumide
75f4dadad6
identity/provider: implement generic revoke method ( #595 )
...
Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-04-21 14:40:33 -07:00
Caleb Doxsey
45c706666c
Merge pull request #615 from pomerium/cdoxsey/policy-path
...
implement path-based route matching
2020-04-21 08:27:50 -06:00
Caleb Doxsey
a05bbd9ba7
authorize: remove trace statements from rego file
2020-04-21 07:19:02 -06:00
Caleb Doxsey
bc8048ff6b
authorize: regenerate statik
2020-04-20 18:25:49 -06:00
Caleb Doxsey
ea1c6efc24
authorize: fix domain check bug, rewrite url for forward auth, add dev script
2020-04-20 18:24:48 -06:00
Caleb Doxsey
170f7f07d3
docs: add upgrading documentation for potentially breaking configuration changes
2020-04-20 18:24:36 -06:00
Caleb Doxsey
2130a58dfb
proxy: fmt code
2020-04-20 18:24:36 -06:00
Caleb Doxsey
5be8265e62
proxy: add test to confirm prefix routing behaves as expected
2020-04-20 18:24:36 -06:00
Caleb Doxsey
9e66471c07
docs: add additional path filtering configuration documentation
2020-04-20 18:24:36 -06:00
Caleb Doxsey
6baf25dae8
ci: add go bin dir to path for test
2020-04-20 18:24:36 -06:00
Caleb Doxsey
f979bae194
ci: specify version number for build dependencies, call build-deps before test
2020-04-20 18:24:36 -06:00
Caleb Doxsey
7aa97dee68
ci: install opa from source
2020-04-20 18:24:36 -06:00
Caleb Doxsey
6cda829ed8
ci: download the proper opa binary
2020-04-20 18:24:36 -06:00
Caleb Doxsey
90af23432c
authorize: run opa test in ci
2020-04-20 18:24:36 -06:00
Caleb Doxsey
a1424a54d0
authorize: more tests
2020-04-20 18:24:36 -06:00
Caleb Doxsey
19053c8f06
proxy: add additional tests for trailing slash
2020-04-20 18:24:36 -06:00
Caleb Doxsey
e1d2501a94
proxy: move warning message to config validation
2020-04-20 18:24:36 -06:00
Caleb Doxsey
c8c307be69
proxy: update warning message
2020-04-20 18:24:36 -06:00
Caleb Doxsey
85a1a6d013
authorize,proxy: remove support for paths within the from parameter
2020-04-20 18:24:36 -06:00
Caleb Doxsey
5ad0e0ebdc
authorize: build full URL from gRPC request
2020-04-20 18:24:26 -06:00
Caleb Doxsey
cd6d686822
authorize: regenerate statik file
2020-04-20 18:24:26 -06:00
Caleb Doxsey
e8c8e7c688
config: use full string url instead of just the hostname for the policy options
2020-04-20 18:24:11 -06:00
Caleb Doxsey
903a2d401f
authorize: fix indentation
2020-04-20 18:24:11 -06:00
Caleb Doxsey
428dee99c4
authorize: update opa rego to support additional policy properties
2020-04-20 18:24:11 -06:00
Caleb Doxsey
5ecfa34361
config: gofmt
2020-04-20 18:23:35 -06:00
Caleb Doxsey
d6591e4109
proxy: add additional tests for route matcher function
2020-04-20 18:23:35 -06:00
Caleb Doxsey
7027f458dd
config: add prefix, path and regex options
...
proxy: support prefix, path and regex options
2020-04-20 18:23:34 -06:00
Bobby DeSimone
15972b9956
v0.7.5 ( #625 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-04-20 14:10:31 -07:00
Caleb Doxsey
d8938db6f3
authorize: fix authorization check for allowed_domains to only match current route ( #624 )
2020-04-20 14:03:21 -07:00
branchmispredictor
0de3c431a6
forward-auth: validate using forwarded uri header ( #600 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
Co-authored-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-04-20 10:56:30 -07:00
