mirror of
https://github.com/pomerium/pomerium.git
synced 2025-04-28 18:06:34 +02:00
Pomerium is an identity and context-aware access proxy.
Simplified, and de-duplicated many of the configuration settings. Removed configuration settings that could be deduced from other settings. Added some basic documentation. Removed the (duplicate?) user email domain validation check in proxy. Removed the ClientID middleware check. Added a shared key option to be used as a PSK instead of using the IDPs ClientID and ClientSecret. Removed the CookieSecure setting as we only support secure. Added a letsencrypt script to generate a wildcard certificate. Removed the argument in proxy's constructor that allowed arbitrary fucntions to be passed in as validators. Updated proxy's authenticator client to match the server implementation of just using a PSK. Moved debug-mode logging into the log package. Removed unused approval prompt setting. Fixed a bug where identity provider urls were hardcoded. Removed a bunch of unit tests. There have been so many changes many of these tests don't make sense and will need to be re-thought. |
||
---|---|---|
authenticate | ||
authorize | ||
cmd/pomerium | ||
docs | ||
internal | ||
proxy | ||
scripts | ||
.gitignore | ||
.travis.yml | ||
3RD-PARTY | ||
Dockerfile | ||
env.example | ||
go.mod | ||
go.sum | ||
LICENSE | ||
Makefile | ||
package.json | ||
README.md | ||
VERSION |
Pomerium
Pomerium is a tool for managing secure access to internal applications and resources.
Use Pomerium to:
- provide a unified gateway to internal corporate applications.
- enforce dynamic access policies based on context, identity, and device state.
- deploy mutually TLS (mTLS) encryption.
- aggregate logging and telemetry data.
To learn more about zero-trust / BeyondCorp, check out awesome-zero-trust.
Get started
For instructions on getting started with Pomerium, see our getting started docs.

Start developing
Assuming you have a working Go environment.
$ go get -d github.com/pomerium/pomerium
$ cd $GOPATH/src/github.com/pomerium/pomerium
$ make
$ source ./env # see env.example
$ ./bin/pomerium -debug