Pomerium is an identity and context-aware access proxy.
Find a file
Travis Groth c51423d03d
[Backport 0-10-0] internal/directory/okta: improve API requests (#1332)
* internal/directory/okta: add limiter to query okta API

Okta only allows 100 requests per minute, so apply the default rate
limit 1 QPS for it.

Fixes #1256

* internal/directory/okta: use okta filter to get updated groups

Okta API supports filter to get updated groups only, we can adopt that
to reduce number of requests to okta API, hence reduce chance that we
reach the rate limit.

Updates #1256

* internal/directory/okta: fix wrong API query filter

Okta uses space " " instead of plus sign "+" in query filter.
See https://developer.okta.com/docs/reference/api-overview/#filtering

* internal/directory: use default QPS setting for backport

Co-authored-by: Cuong Manh Le <cuong.manhle.vn@gmail.com>
2020-08-26 12:31:00 -04:00
.github deployment: fix brew creation for pomerium-cli (#1192) 2020-08-03 10:15:38 -04:00
authenticate authorize: add databroker url check (#1228) (#1231) 2020-08-07 12:58:17 -07:00
authorize authorize: log users and groups (#1303) 2020-08-19 08:59:24 -07:00
cache authorize: add databroker url check (#1228) (#1231) 2020-08-07 12:58:17 -07:00
cmd cmd/pomerium-cli: do not require terminal with cached creds (#1196) 2020-08-04 08:36:14 -04:00
config Backport go 1.15 changes for 0-10-0 (#1334) 2020-08-25 16:59:36 -04:00
docs docs: v0.10.1 changelog (#1308) 2020-08-20 13:24:58 -04:00
examples docs: rename docs/reference to docs/topics (#1182) 2020-08-01 10:00:14 -07:00
integration integration: add dummy value for idp_service_account (#1009) 2020-06-26 12:32:51 -04:00
internal [Backport 0-10-0] internal/directory/okta: improve API requests (#1332) 2020-08-26 12:31:00 -04:00
pkg Backport go 1.15 changes for 0-10-0 (#1334) 2020-08-25 16:59:36 -04:00
proxy all: update outdated comments about OptionsUpdater interface (#1207) 2020-08-05 21:39:24 +07:00
scripts depedency: bump envoy to 1.15.0 (#1119) 2020-07-21 08:25:37 -07:00
.codecov.yml development: change codecov precision 2019-07-18 16:49:37 -07:00
.dockerignore Update build and release process for envoy embedding (#699) 2020-05-18 17:10:10 -04:00
.gitignore grpc: rename internal/grpc to pkg/grpc (#1010) 2020-06-26 09:17:02 -06:00
.golangci.yml identity: abstract identity providers by type (#560) 2020-04-23 10:36:24 -07:00
.pre-commit-config.yaml grpc: rename internal/grpc to pkg/grpc (#1010) 2020-06-26 09:17:02 -06:00
3RD-PARTY all: refactor handler logic 2019-09-16 18:01:14 -07:00
Dockerfile Update build and release process for envoy embedding (#699) 2020-05-18 17:10:10 -04:00
go.mod [Backport 0-10-0] internal/directory/okta: improve API requests (#1332) 2020-08-26 12:31:00 -04:00
go.sum [Backport 0-10-0] internal/directory/okta: improve API requests (#1332) 2020-08-26 12:31:00 -04:00
LICENSE initial release 2019-01-02 12:13:36 -08:00
Makefile Allow specify go executable in Makefile (#1008) 2020-06-26 23:53:47 +07:00
package.json docs: prepare for enterprise / oss split (#1238) (#1239) 2020-08-09 21:05:34 -07:00
README.md docs: add visual studio code server 2019-08-08 10:04:56 -07:00
renovate.json Merge remote-tracking branch 'origin/master' into feature/envoy 2020-05-18 17:10:10 -04:00
VERSION v0.10.0 (#1225) 2020-08-06 21:08:19 -07:00

pomerium logo

pomerium chat Travis CI Go Report Card GoDoc LICENSE codecov Docker Pulls

Pomerium is an identity-aware proxy that enables secure access to internal applications. Pomerium provides a standardized interface to add access control to applications regardless of whether the application itself has authorization or authentication baked-in. Pomerium gateways both internal and external requests, and can be used in situations where you'd typically reach for a VPN.

Pomerium can be used to:

  • provide a single-sign-on gateway to internal applications.
  • enforce dynamic access policy based on context, identity, and device state.
  • aggregate access logs and telemetry data.
  • a VPN alternative.

Docs

For comprehensive docs, and tutorials see our documentation.