Kenneth Jenkins
c848c225e8
multi-domain login redirects ( #5564 )
...
Add a new 'depends_on' route configuration option taking a list of
additional hosts to redirect through on login. Update the authorize
service and proxy service to support a chain of /.pomerium/callback
redirects. Add an integration test for this feature.
2025-04-04 13:14:30 -07:00
Joe Kralicky
396c35b6b4
New tracing system ( #5388 )
...
* update tracing config definitions
* new tracing system
* performance improvements
* only configure tracing in envoy if it is enabled in pomerium
* [tracing] refactor to use custom extension for trace id editing (#5420 )
refactor to use custom extension for trace id editing
* set default tracing sample rate to 1.0
* fix proxy service http middleware
* improve some existing auth related traces
* test fixes
* bump envoyproxy/go-control-plane
* code cleanup
* test fixes
* Fix missing spans for well-known endpoints
* import extension apis from pomerium/envoy-custom
2025-01-21 13:26:32 -05:00
Denis Mishin
0ab2057714
authenticate: add events ( #4051 )
2023-05-01 15:11:30 -04:00
Caleb Doxsey
2b8d51def5
urlutil: add version to query string ( #4028 )
2023-02-28 14:01:13 -07:00
Caleb Doxsey
090601873f
urlutil: add time validation functions ( #3776 )
2022-12-02 11:42:56 -07:00
Caleb Doxsey
fa26587f19
remove forward auth ( #3628 )
2022-11-23 15:59:28 -07:00
Caleb Doxsey
f9b95a276b
authenticate: support for per-route client id and client secret ( #3030 )
...
* implement dynamic provider support
* authenticate: support per-route client id and secret
2022-02-16 12:31:55 -07:00
Caleb Doxsey
838c9e3a3d
dashboard: improve display of device credentials, allow deletion ( #2829 )
...
* dashboard: improve display of device credentials, allow deletion
* fix test
2021-12-20 12:19:54 -07:00
Caleb Doxsey
1162585471
authenticate: add support for webauthn ( #2688 )
...
* authenticate: add support for webauthn
* remove rfc4648 library due to missing LICENSE
* fix test
* put state function in separate function
2021-10-20 13:18:34 -06:00
Caleb Doxsey
ab4a68f56f
remove user impersonation and service account cli ( #1768 )
...
* remove user impersonation and service account cli
* update doc
* remove user impersonation url query params
* fix flaky test
2021-01-12 09:28:29 -07:00
bobby
f719d885b7
authenticate: remove unused paths, generate cipher at startup, remove qp store ( #1495 )
...
* authenticate: remove unused paths, generate cipher on boot
- internal/httputil: add JSON renderer
- internal/httputil: remove unused query param store and references
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-10-19 08:09:53 -07:00
bobby
9b39deabd8
forward-auth: use envoy's ext_authz check ( #1482 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-10-04 20:01:06 -07:00
Cuong Manh Le
ffaceadfdd
internal/urlutil: remove un-used constants ( #1326 )
2020-08-25 02:07:56 +07:00
bobby
c1b3b45d12
proxy: remove unused handlers ( #1317 )
...
proxy: remove unused handlers
authenticate: remove unused references to refresh_token
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-08-22 10:02:12 -07:00
Bobby DeSimone
666fd6aa35
authenticate: save oauth2 tokens to cache ( #698 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-05-18 17:10:10 -04:00
Caleb Doxsey
af649d3eb0
envoy: implement header and query param session loading ( #684 )
...
* authorize: refactor session loading, implement headers and query params
* authorize: fix http recorder header, use constant for pomerium authorization header
* fix compile
* remove dead code
2020-05-18 17:10:10 -04:00
Bobby DeSimone
ba14ea246d
*: remove import path comments ( #545 )
...
- import path comments are obsoleted by the go.mod file's module statement
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-03-16 10:13:47 -07:00
Bobby DeSimone
dccc7cd2ff
cache : add cache service ( #457 )
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2020-01-20 18:25:34 -08:00
Bobby DeSimone
74cd9eabbb
authenticate: fix impersonation getting cleared ( #411 )
2019-11-30 10:54:32 -08:00
Bobby DeSimone
0f6a9d7f1d
proxy: fix forward auth, request signing
...
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
2019-11-25 14:29:52 -08:00
