3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-08-13 17:28:27 +02:00
Code Issues Projects Releases Packages Wiki Activity
2284 commits 178 branches 133 tags 112 MiB
Commit graph

16 commits

Author SHA1 Message Date
Caleb Doxsey
a8b76bd623
 		authorize: support X-Pomerium-Authorization in addition to Authorization () 
* authorize: support X-Pomerium-Authorization in addition to Authorization

* tangentental correction

Co-authored-by: alexfornuto <alex@fornuto.com>
 2021-11-29 12:19:14 -07:00
Caleb Doxsey
63ee30d69c
 		options: remove refresh_cooldown, add allow_spdy to proto () 2021-08-06 10:06:57 -06:00
bobby
51655a5502
 		Revert "authenticate,proxy: add same site lax to cookies ()" () 
This reverts commit d9cc26a2e0.
 2021-05-14 15:36:05 -07:00
Caleb Doxsey
d9cc26a2e0
 		authenticate,proxy: add same site lax to cookies () 2021-04-30 10:24:47 -06:00
Caleb Doxsey
b1d62bb541
 		config: remove validate side effects () 
* config: default shared key

* handle additional errors

* update grpc addr and grpc insecure

* update google cloud service authentication service account

* fix set response headers

* fix qps

* fix test
 2021-04-22 15:10:50 -06:00
Caleb Doxsey
6d1d2bec54
 		crypto: use actual bytes of shared secret, not the base64 encoded representation () 
* crypto: use actual bytes of shared secret, not the base64 encoded representation

* return errors

* return errors
 2021-04-08 20:04:01 -06:00
Caleb Doxsey
a51c7140ea
 		cryptutil: use bytes for hmac () 2021-04-07 14:57:24 -06:00
Travis Groth
c7d243d742
 		proxy: restrict programmatic URLs to localhost () 
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
 2021-04-01 10:04:49 -04:00
Travis Groth
0635c838c9
 		authenticate: validate signature on /.pomerium, /.pomerium/sign_in and /.pomerium/sign_out () 
Co-authored-by: Caleb Doxsey <cdoxsey@pomerium.com>
 2021-04-01 10:04:16 -04:00
Caleb Doxsey
3690a32855
 		config: use getters for authenticate, signout and forward auth urls () 2021-03-19 14:49:25 -06:00
Caleb Doxsey
4f2bb60adb
 		proxy: redirect to dashboard for logout () 2021-02-24 11:52:38 -07:00
Caleb Doxsey
1a1cc30c67
 		config: support map of jwt claim headers () 
* config: support map of jwt claim headers

* fix array handling, add test

* update docs

* use separate hook, add tests
 2021-02-17 13:43:18 -07:00
Caleb Doxsey
b16236496b
 		jws: remove issuer () 2021-01-11 07:57:54 -07:00
bobby
f837c92741
 		dev: update linter () 
- gofumpt everything
- fix TLS MinVersion to be at least 1.2
- add octal syntax
- remove newlines
- fix potential decompression bomb in ecjson
- remove implicit memory aliasing in for loops.

Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
 2020-12-30 09:02:57 -08:00
bobby
9b39deabd8
 		forward-auth: use envoy's ext_authz check () 
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
 2020-10-04 20:01:06 -07:00
Caleb Doxsey
d9a224a5e8
 		proxy: move properties to atomically updated state () 
* authenticate: remove cookie options

* authenticate: remove shared key field

* authenticate: remove shared cipher property

* authenticate: move properties to separate state struct

* proxy: allow local state to be updated on configuration changes

* fix test

* return new connection

* use warn, collapse to single line

* address concerns, fix tests
 2020-08-14 11:44:58 -06:00