Pomerium is an identity and context-aware access proxy.
Find a file
Travis Groth 683c591f14
Backport go 1.15 changes for 0-10-0 (#1334)
* pkg/storage/redis: use SANs cert

Since go1.15, X.509 CommonName is deprecated, switch to a SANs
certificate for test redis TLS.

While at it, add instruction to genearte cert and build test image.

See: https://golang.org/doc/go1.15#commonname

* config: do not test for exact route id

Different go version can genearte different route id, due to the fact
that we are relying on xxhash.

* internal/controlplane: mocking policy name in test

We don't have to test for exact policy name, as it does not make sense
and force us to change test every new go release.

Co-authored-by: Cuong Manh Le <cuong.manhle.vn@gmail.com>
2020-08-25 16:59:36 -04:00
.github deployment: fix brew creation for pomerium-cli (#1192) 2020-08-03 10:15:38 -04:00
authenticate authorize: add databroker url check (#1228) (#1231) 2020-08-07 12:58:17 -07:00
authorize authorize: log users and groups (#1303) 2020-08-19 08:59:24 -07:00
cache authorize: add databroker url check (#1228) (#1231) 2020-08-07 12:58:17 -07:00
cmd cmd/pomerium-cli: do not require terminal with cached creds (#1196) 2020-08-04 08:36:14 -04:00
config Backport go 1.15 changes for 0-10-0 (#1334) 2020-08-25 16:59:36 -04:00
docs docs: v0.10.1 changelog (#1308) 2020-08-20 13:24:58 -04:00
examples docs: rename docs/reference to docs/topics (#1182) 2020-08-01 10:00:14 -07:00
integration integration: add dummy value for idp_service_account (#1009) 2020-06-26 12:32:51 -04:00
internal Backport go 1.15 changes for 0-10-0 (#1334) 2020-08-25 16:59:36 -04:00
pkg Backport go 1.15 changes for 0-10-0 (#1334) 2020-08-25 16:59:36 -04:00
proxy all: update outdated comments about OptionsUpdater interface (#1207) 2020-08-05 21:39:24 +07:00
scripts depedency: bump envoy to 1.15.0 (#1119) 2020-07-21 08:25:37 -07:00
.codecov.yml development: change codecov precision 2019-07-18 16:49:37 -07:00
.dockerignore Update build and release process for envoy embedding (#699) 2020-05-18 17:10:10 -04:00
.gitignore grpc: rename internal/grpc to pkg/grpc (#1010) 2020-06-26 09:17:02 -06:00
.golangci.yml identity: abstract identity providers by type (#560) 2020-04-23 10:36:24 -07:00
.pre-commit-config.yaml grpc: rename internal/grpc to pkg/grpc (#1010) 2020-06-26 09:17:02 -06:00
3RD-PARTY all: refactor handler logic 2019-09-16 18:01:14 -07:00
Dockerfile Update build and release process for envoy embedding (#699) 2020-05-18 17:10:10 -04:00
go.mod chore(deps): update module google.golang.org/grpc to v1.31.0 2020-08-03 15:40:56 +00:00
go.sum authorize: add test for denied response (#1197) 2020-08-04 21:20:30 +07:00
LICENSE initial release 2019-01-02 12:13:36 -08:00
Makefile Allow specify go executable in Makefile (#1008) 2020-06-26 23:53:47 +07:00
package.json docs: prepare for enterprise / oss split (#1238) (#1239) 2020-08-09 21:05:34 -07:00
README.md docs: add visual studio code server 2019-08-08 10:04:56 -07:00
renovate.json Merge remote-tracking branch 'origin/master' into feature/envoy 2020-05-18 17:10:10 -04:00
VERSION v0.10.0 (#1225) 2020-08-06 21:08:19 -07:00

pomerium logo

pomerium chat Travis CI Go Report Card GoDoc LICENSE codecov Docker Pulls

Pomerium is an identity-aware proxy that enables secure access to internal applications. Pomerium provides a standardized interface to add access control to applications regardless of whether the application itself has authorization or authentication baked-in. Pomerium gateways both internal and external requests, and can be used in situations where you'd typically reach for a VPN.

Pomerium can be used to:

  • provide a single-sign-on gateway to internal applications.
  • enforce dynamic access policy based on context, identity, and device state.
  • aggregate access logs and telemetry data.
  • a VPN alternative.

Docs

For comprehensive docs, and tutorials see our documentation.