Pomerium is an identity and context-aware access proxy.
Find a file
Kenneth Jenkins 2e7d1c7f12
authorize: refactor logAuthorizeCheck() (#5576)
Currently, policy evaluation and authorize logging are coupled to the
Envoy CheckRequest proto message (part of the ext_authz API). In the
context of ssh proxy authentication, we won't have a CheckRequest.
Instead, let's make the existing evaluator.Request type the source of
truth for the authorize log fields.

This way, whether we populate the evaluator.Request struct from an
ext_authz request or from an ssh proxy request, we can use the same
logAuthorizeCheck() method for logging.

Add some additional fields to evaluator.RequestHTTP for the authorize
log fields that are not currently represented in this struct.
2025-04-23 09:21:52 -07:00
.github add code of conduct (#5572) 2025-04-14 12:53:28 -06:00
.vscode
authenticate logging: standardize on hyphens in attribute names (#5577) 2025-04-22 10:57:19 -07:00
authorize authorize: refactor logAuthorizeCheck() (#5576) 2025-04-23 09:21:52 -07:00
changelogs add v0.29.0 release notes (#5515) 2025-04-08 11:34:20 -04:00
cmd/pomerium cleanup logs (#5571) 2025-04-14 08:20:10 -06:00
config storage: add sync querier (#5570) 2025-04-23 10:15:48 -06:00
databroker logging: standardize on hyphens in attribute names (#5577) 2025-04-22 10:57:19 -07:00
examples
integration upgrade to go v1.24 (#5562) 2025-04-02 15:53:09 -06:00
internal storage: add sync querier (#5570) 2025-04-23 10:15:48 -06:00
k8s/zero
ospkg
pkg storage: add sync querier (#5570) 2025-04-23 10:15:48 -06:00
proxy multi-domain login redirects (#5564) 2025-04-04 13:14:30 -07:00
scripts
ui chore(deps): bump @babel/runtime from 7.24.4 to 7.26.10 in /ui (#5522) 2025-04-11 08:02:05 -06:00
.codecov.yml
.dockerignore
.fossa.yml
.gitattributes
.gitignore
.golangci.yml upgrade to go v1.24 (#5562) 2025-04-02 15:53:09 -06:00
.pre-commit-config.yaml
3RD-PARTY
DEBUG.MD
Dockerfile chore(deps): bump the docker group with 3 updates (#5558) 2025-04-01 16:56:57 -06:00
Dockerfile.debug chore(deps): bump the docker group with 3 updates (#5558) 2025-04-01 16:56:57 -06:00
go.mod storage: support ip address indexing for the in-memory store (#5568) 2025-04-10 08:21:52 -06:00
go.sum storage: support ip address indexing for the in-memory store (#5568) 2025-04-10 08:21:52 -06:00
LICENSE
Makefile upgrade to go v1.24 (#5562) 2025-04-02 15:53:09 -06:00
pomerium.go
README.md
RELEASING.md
SECURITY.md

pomerium logo

Go Report Card GoDoc LICENSE Docker Pulls

Pomerium builds secure, clientless connections to internal web apps and services without a corporate VPN.

Pomerium is:

Its not a VPN alternative its the trusted, foolproof way to protect your business. Want a hosted control plane and management GUI? Give Pomerium Zero a try today!

Docs

For comprehensive docs, and tutorials see our documentation.

Contributing

See Contributing for information on how you can contribute to Pomerium.