pomerium/integration
Kenneth Jenkins 363b2d8033 authorize: do not redirect if invalid client cert
If an authorization policy requires a client certificate, but an
incoming request does not include a valid certificate, we should serve a
deny error page right away, regardless of whether the user is
authenticated via the identity provider or not. Do not redirect to the
identity provider login page in this case.

Update the existing integration tests accordingly.
2023-07-06 10:24:37 -07:00
..
clusters add downstream mTLS integration test cases (#4234) 2023-06-13 10:25:21 -07:00
cmd/pomerium-integration-tests config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
flows config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
forms config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
tpl add downstream mTLS integration test cases (#4234) 2023-06-13 10:25:21 -07:00
authorization_test.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
benchmark_test.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
control_plane_test.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
main_test.go add downstream mTLS integration test cases (#4234) 2023-06-13 10:25:21 -07:00
policy_test.go authorize: do not redirect if invalid client cert 2023-07-06 10:24:37 -07:00
stats.go envoy: add hash policy and routing key for hash-based load balancers (#2791) 2021-12-01 13:42:12 -07:00