pomerium/config
Kenneth Jenkins e448909042
authorize: remove incorrect "valid-client-certificate" reason (#4470)
Fix the logic around when to add the default invalid_client_certificate
rule: this should only be added if mTLS is enabled and the enforcement
mode is not set to "policy". Add a unit test for this logic.
2023-08-17 08:13:57 -07:00
..
envoyconfig envoy: check for nil ssl() in client cert script (#4466) 2023-08-16 12:39:20 -07:00
testdata
autocert.go
autocert_test.go config: update logic for checking overlapping certificates (#4216) 2023-06-01 09:30:46 -06:00
codec_type.go
codec_type_test.go config: default to http2 (#3660) 2022-10-12 14:46:06 -06:00
config.go stub out HPKE public key fetch for self-hosted authenticate (#4360) 2023-07-13 10:04:34 -07:00
config_source.go config: move mTLS settings to new struct (#4442) 2023-08-08 10:22:48 -07:00
config_source_test.go test: use T.TempDir to create temporary test directory (#3725) 2022-11-08 09:16:32 -07:00
constants.go config: add decode hook for the SANMatcher type (#4464) 2023-08-16 11:05:17 -07:00
crypt.go
custom.go config: add decode hook for the SANMatcher type (#4464) 2023-08-16 11:05:17 -07:00
custom_test.go
doc.go
from.go config: add support for wildcard from addresses (#4131) 2023-04-25 13:34:38 -06:00
from_test.go config: add support for wildcard from addresses (#4131) 2023-04-25 13:34:38 -06:00
helpers.go postgres: databroker storage backend (#3370) 2022-05-25 10:23:58 -06:00
helpers_test.go
http.go use tlsClientConfig instead of custom dialer (#3830) 2022-12-27 09:55:36 -07:00
http_test.go httputil/reproxy: fix policy transport (#3322) 2022-05-04 18:32:36 -06:00
identity.go move directory providers (#3633) 2022-11-03 11:33:56 -06:00
layered.go auto tls (#3856) 2023-01-05 16:35:58 -05:00
layered_test.go auto tls (#3856) 2023-01-05 16:35:58 -05:00
log.go config: validate log levels (#4367) 2023-07-17 16:41:48 -06:00
log_level.go config: validate log levels (#4367) 2023-07-17 16:41:48 -06:00
metrics.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
metrics_test.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
mtls.go config: support client certificate SAN match (#4453) 2023-08-11 13:27:12 -07:00
mtls_test.go config: support client certificate SAN match (#4453) 2023-08-11 13:27:12 -07:00
options.go authorize: remove incorrect "valid-client-certificate" reason (#4470) 2023-08-17 08:13:57 -07:00
options_check.go add config option check logging (#3722) 2022-11-05 00:25:09 -04:00
options_test.go authorize: remove incorrect "valid-client-certificate" reason (#4470) 2023-08-17 08:13:57 -07:00
policy.go config: deprecate tls_downstream_client_ca (#4461) 2023-08-15 14:38:36 -07:00
policy_ppl.go authorize: omit client cert rule when not needed (#4386) 2023-07-24 15:27:57 -07:00
policy_ppl_test.go authorize: omit client cert rule when not needed (#4386) 2023-07-24 15:27:57 -07:00
policy_test.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
session.go config: add cookie_same_site option (#4148) 2023-05-03 14:36:42 -06:00
session_test.go config: allow blank identity providers when loading sessions for service account support (#3709) 2022-10-27 08:32:06 -06:00
trace.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
trace_test.go
validate.go config: add cookie_same_site option (#4148) 2023-05-03 14:36:42 -06:00