pomerium/authorize
Kenneth Jenkins 42be134173 authorize: compute "real" IP from X-Forwarded-For
WIP -- this doesn't work correctly yet

Update the authorize log IP address field to match the access log IP
address field.

Add a new method getIPAddress() to compute the "real" client IP address
based on the contents of the X-Forwarded-For header and the
XffNumTrustedHops and SkipXffAppend configuration option.

This is intended to match downstream_remote_address from the access log:
https://www.envoyproxy.io/docs/envoy/latest/api-v3/data/accesslog/v3/accesslog.proto#envoy-v3-api-field-data-accesslog-v3-accesslogcommon-downstream-remote-address
2023-08-30 17:43:37 -07:00
..
evaluator config: remove set_authorization_header option (#4489) 2023-08-29 09:02:08 -07:00
internal/store authorize: move sign out and jwks urls to route, update issuer for JWT (#4046) 2023-03-08 12:40:15 -07:00
access_tracker.go sets: convert set types to generics (#3519) 2022-07-29 12:32:17 -06:00
access_tracker_test.go databroker: add support for putting multiple records (#3291) 2022-04-26 16:41:38 -06:00
authorize.go authorize: remove incorrect "valid-client-certificate" reason (#4470) 2023-08-17 08:13:57 -07:00
authorize_test.go authorize: remove incorrect "valid-client-certificate" reason (#4470) 2023-08-17 08:13:57 -07:00
check_response.go authorize: add "client-certificate-required" reason (#4389) 2023-07-25 10:03:51 -07:00
check_response_test.go authorize: add "client-certificate-required" reason (#4389) 2023-07-25 10:03:51 -07:00
databroker.go authorize: fix user caching (#3734) 2022-11-08 08:23:41 -07:00
databroker_test.go authorize: fix user caching (#3734) 2022-11-08 08:23:41 -07:00
grpc.go authorize: do not rely on Envoy client cert validation (#4438) 2023-08-03 10:45:55 -07:00
grpc_test.go authorize: do not rely on Envoy client cert validation (#4438) 2023-08-03 10:45:55 -07:00
log.go authorize: compute "real" IP from X-Forwarded-For 2023-08-30 17:43:37 -07:00
log_test.go authorize: compute "real" IP from X-Forwarded-For 2023-08-30 17:43:37 -07:00
state.go authenticate: fix authenticate_internal_service_url for all in one (#4003) 2023-02-22 10:42:27 -05:00