Commit Graph

555 Commits (30aaa8a2451cdfe6e570af3f5aee431aa0d2555f)

Author SHA1 Message Date
James Elliott a894e272cb
docs: add synology dsm docs (#4167) 2022-10-18 21:22:13 +11:00
James Elliott a0b2e78e5d
feat(authentication): file case-insensitive and email search (#4194)
This allows both case-insensitive and email searching for the file auth provider.

Closes #3383
2022-10-18 11:57:08 +11:00
James Elliott d610874be4
feat(authentication): disabled users in yaml file (#4193)
Allows setting users as disabled.
2022-10-18 09:10:53 +11:00
James Elliott 84cb457cb0
feat(authentication): file provider hot reload (#4188)
This adds hot reloading to the file auth provider.
2022-10-17 22:31:23 +11:00
James Elliott 3a70f6739b
feat(authentication): file password algorithms (#3848)
This adds significant enhancements to the file auth provider including multiple additional algorithms.
2022-10-17 21:51:59 +11:00
James Elliott 8eadf72dc7
docs: rule matching concepts (#4154)
* docs: rule matching concepts

* docs: add named regex note

* docs: adjust wording

* docs: expand match table

* docs: simplify

* docs: fix link

* docs: fix link
2022-10-16 14:11:43 +11:00
James Elliott 75a3d8a3bc
docs: update misc notes (#4184) 2022-10-16 08:37:31 +11:00
James Elliott b27fd4b7fc
docs: update client secret encoding notes (#4183) 2022-10-16 08:30:02 +11:00
James Elliott ef61acb3a9
docs: misc nginx fixes (#4153) 2022-10-09 12:48:42 +11:00
James Elliott 644616d8b1
docs: npm custom locations (#4152) 2022-10-09 12:09:45 +11:00
James Elliott ab2bcfd677
docs: adjust nginx example (#4134) 2022-10-08 18:45:38 +11:00
James Elliott ef0e4975fd
docs: add nginx proxy manager details (#4147)
Adds NPM docs.
2022-10-08 12:43:26 +11:00
James Elliott 3107e493e7
refactor: adjust defaults (#4137)
* refactor: adjust defaults

* refactor: adjust level

* refactor: adjust level

* refactor: fix templates
2022-10-07 13:52:01 +11:00
James Elliott b21aa73fd4
docs: fix url ref (#4130) 2022-10-05 09:44:21 +11:00
James Elliott f80edd2f4a
docs: fix istio docs and readme (#4120) 2022-10-03 15:57:25 +11:00
James Elliott 21a24ac1e1
docs: fix envoy docs (#4119) 2022-10-03 15:28:31 +11:00
James Elliott 3f39914c8f
refactor: private key decoding and generators (#4116) 2022-10-03 11:52:29 +11:00
James Elliott ab307397e9
docs: adjust guidelines (#4113)
Small adjustments to the guidelines layout and additional guidelines added.
2022-10-02 14:32:16 +11:00
James Elliott 3822286c3b
docs: add envoy docs (#3789)
Adds and adjusts documentation for Envoy.
2022-10-02 13:59:09 +11:00
Manuel Nuñez c8fa19e6bd
feat(notification): add disable_starttls option (#3855)
This adds a boolean option to SMTP which disables StartTLS for SMTP servers that ignore standards.
2022-10-02 13:51:19 +11:00
James Elliott 6810c91d34
feat(oidc): issuer jwk certificates (#3989)
This allows for JWKs to include certificate information, either signed via Global PKI, Enterprise PKI, or self-signed.
2022-10-02 13:07:40 +11:00
James Elliott 66ea374227
feat(authentication): permit feature detection failures (#4061)
This adds a configuration option which permits the failure of feature detection (control type OIDs and extension OIDs).
2022-10-02 07:44:18 +11:00
Constantin Kraft 4d35b7ddf7
docs: fix misc grammar issues (#4062)
Closes #4063 

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-09-27 12:13:06 +10:00
James Elliott 931f963cc8
docs: fix bug report and feature request links (#4079) 2022-09-26 11:57:51 +10:00
James Elliott a7a217a036
docs: fix grammar and og proto (#4078) 2022-09-26 09:16:22 +10:00
James Elliott 841bf6d42f
docs: fix blog wording to match the actual feature (#4077) 2022-09-26 09:00:47 +10:00
James Elliott edae3e0699
docs: add blog pre-release notes (#4076) 2022-09-26 06:55:09 +10:00
James Elliott 5a28c05b57
docs(deps): update most dependencies (#4074) 2022-09-26 05:21:23 +10:00
James Elliott d67659a4f9
docs: fix ldap section (#4075) 2022-09-26 05:19:11 +10:00
James Elliott f04596b8e0
docs: misc roadmap adjustments and fixes (#4073) 2022-09-26 05:02:51 +10:00
boomam 3a65d9af54
docs: ldap integration guides (#3920) 2022-09-26 04:50:54 +10:00
stanthewizzard 3390dda59b
docs: fix komga integration guide (#4045)
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-09-25 07:44:00 +10:00
Hugo Wehbe 1d16a0c516
docs: fix typo in storage introduction file (#4068) 2022-09-25 07:40:48 +10:00
James Elliott a0b3d32774
docs: update oidc roadmap (#4027) 2022-09-19 14:19:51 +10:00
James Elliott 2fc1e4a90d
docs: fix shortcode issue (#4022) 2022-09-16 18:19:10 +10:00
James Elliott 995a474038
docs: update oidc roadmap (#4021) 2022-09-16 16:09:12 +10:00
James Elliott c756c7b67b
i18n: update translations (#3972) 2022-09-16 15:01:22 +10:00
James Elliott 9c72bc8977
ci: gen github tmpl locales and commitlint (#3759)
This adds several automatic generators for Authelia docs etc.
2022-09-16 14:21:05 +10:00
James Elliott 5baa69064b
docs: adjust traefik k8s example (#3971) 2022-09-06 12:19:48 +10:00
Brennan Kinney 97faa0beea
docs: fix reference info to smtps (#3950)
This PR aligns some information missed in a previous update.
2022-09-06 12:01:46 +10:00
Brennan Kinney fbda31f897
docs: clarify chromes deprecation of u2f in favor of webauthn (#3949) 2022-09-03 17:04:33 +10:00
James Elliott b034048d7d
docs: update nginx example (#3795)
This updates the nginx example to use set_escape_uri from the http_set_misc module.
2022-09-01 21:59:02 +10:00
James Elliott ea4e0663f7
docs: fix default timeouts (#3938) 2022-09-01 12:31:59 +10:00
James Elliott f17268ee80
docs: remove cobra auto gen tags (#3937) 2022-09-01 12:24:47 +10:00
James Elliott 426ac3c3af
docs: bump deps (#3936) 2022-09-01 10:21:07 +10:00
James Elliott 730e47df92
docs: cloudflare zt fixes (#3931) 2022-08-31 21:03:21 +10:00
James Elliott f18585bcd8
docs: nextcloud missing oidc scope (#3926) 2022-08-30 19:52:00 +10:00
James Elliott ee540aa8e7
docs: add offline_access to outline (#3914) 2022-08-27 08:43:55 +10:00
James Elliott 319a8cf9d4
fix(notification): text emails not encoded properly (#3854)
This fixes an issue where the plain text portion of emails is not encoded with quoted printable encoding.
2022-08-27 07:39:20 +10:00
James Elliott 4d3ac31051
docs: update k8s integration (#3908) 2022-08-26 21:03:12 +10:00
James Elliott 21929d6508
docs: update get started (#3907) 2022-08-26 20:46:47 +10:00
James Elliott 020b43af85
docs: update csp template (#3905) 2022-08-26 16:16:15 +10:00
James Elliott aad43d4acc
docs: har reference guide (#3900) 2022-08-26 13:50:51 +10:00
James Elliott a8849f1b9e
docs: misc consistency adjustments (#3904) 2022-08-26 13:26:58 +10:00
Northguy ca423cd1d5
docs: add reference docs for oidc userinfo sig (#3875)
Documenting details userinfo_signing_algorithm. Related to #3869.

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-08-26 11:55:48 +10:00
boomam 50c12f573c
docs: oidc grafana env update (#3847)
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-08-26 11:42:12 +10:00
Northguy 657463a3e6
docs: oidc kogma (#3893)
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-08-26 11:39:00 +10:00
James Elliott 0ddeae4a60
docs: seafile header sso (#3888) 2022-08-26 11:34:56 +10:00
Jerry Jean-Baptiste 240ec60dac
docs: fix helm chart link (#3843)
* Update introduction.md
2022-08-16 13:03:04 +10:00
James Elliott 7cb43d2ce8
docs: add outline oidc docs (#3829) 2022-08-12 09:11:42 +10:00
James Elliott 342497a869
refactor(server): use errgroup to supervise services (#3755)
Uses the errgroup package and pattern for supervising services like servers etc.
2022-08-09 07:50:12 +10:00
James Elliott 77f60a90e0
fix: lints (#3802) 2022-08-07 19:08:37 +10:00
James Elliott 8140c5007f
docs: fix gitea oidc (#3800) 2022-08-07 14:56:33 +10:00
boomam c585e19499
docs: update gitea integration (#3724)
Added full redirect_uris path, note on pre-creating user.

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-08-07 08:25:28 +10:00
James Elliott ff4d98b488
docs: bump deps (#3797) 2022-08-07 08:20:52 +10:00
James Elliott 20b3b6873f
docs: adjust open graph (#3709) 2022-08-04 11:11:49 +10:00
Clément Radenac bdb65318f2
docs: update oidc docs for gitea (#3777)
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-08-02 10:27:23 +10:00
Will Scargill 8753998e17
docs: update grafana oidc integration (#3769)
Changed OIDC configuration for Grafana

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-07-31 13:25:53 +10:00
James Elliott 937237ea1d
docs: add oidc guacamole integration (#3772) 2022-07-31 13:09:05 +10:00
James Elliott 21d790bdeb
docs: update branding (#3764) 2022-07-29 15:29:58 +10:00
Jonas Geiregat 36c680afc5
docs: fix contributing introduction link (#3760)
correct documentation link

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-07-29 13:05:49 +10:00
James Elliott 60307c8235
docs(oidc): update synapse config (#3762) 2022-07-29 11:03:10 +10:00
James Elliott efe1facc35
docs: misc fixes (#3745) 2022-07-26 15:26:38 +10:00
EDIflyer 019b6c9820
docs: tiny typo fix for (#3718)
Small typo fix.
2022-07-18 20:15:11 +10:00
James Elliott df016be29e
fix(notification): incorrect date header format (#3684)
* fix(notification): incorrect date header format

The date header in the email envelopes was incorrectly formatted missing a space between the `Date:` header and the value of this header. This also refactors the notification templates system allowing people to manually override the envelope itself.

* test: fix tests and linting issues

* fix: misc issues

* refactor: misc refactoring

* docs: add example for envelope with message id

* refactor: organize smtp notifier

* refactor: move subject interpolation

* refactor: include additional placeholders

* docs: fix missing link

* docs: gravity

* fix: rcpt to command

* refactor: remove mid

* refactor: apply suggestions

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>

* refactor: include pid

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-07-18 10:56:09 +10:00
Jonas Geiregat 58e10f1dd6
docs: correct link to get-started page (#3710) 2022-07-15 18:16:24 +10:00
James Elliott c101a836be
docs: upgrade to doks 0.5.0 (#3689) 2022-07-14 14:29:54 +10:00
Andreas Brenk 6729200251
docs: add offline_access scope to argocd cli (#3704)
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-07-14 10:15:30 +10:00
James Elliott 7d170f09b4
fix(commands): acl check panic on decode failure (#3697)
This fixes an issue with the authelia access-control check-policy command which potentially panics when a decode hook fails to parse an item.
2022-07-13 17:22:42 +10:00
Archef2000 a714190eec
docs: misc grammar fix (#3655)
Corrected gramma in redirection_uris of clients.
2022-07-13 13:44:22 +10:00
James Elliott 38cd35668f
docs: fix example (#3694) 2022-07-13 04:37:23 +10:00
James Elliott 0dd7d6941f
docs: fix dates (#3693) 2022-07-13 04:29:52 +10:00
James Elliott 66a4e412ea
docs: add argocd oidc integration (#3691) 2022-07-13 04:27:30 +10:00
James Elliott 55e03e2e32
docs: fix ntp inconsistency (#3686) 2022-07-11 23:29:10 +10:00
James Elliott 3225ecf537
docs: doks 0.5.0 preparation work (#3672) 2022-07-08 14:54:00 +10:00
James Elliott 290a38e424
fix(configuration): address parsing failure (#3653)
This fixes an issue with parsing address types from strings.
2022-07-05 14:43:12 +10:00
James Elliott 7324ed0c1e
docs: add gitea oidc integration (#3645) 2022-07-01 13:07:02 +10:00
James Elliott 1327ec81fc
docs: add yaml validation info (#3650) 2022-07-01 12:32:29 +10:00
James Elliott d9cfc401ce
docs: use details shortcode (#3586)
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-06-30 14:02:00 +10:00
James Elliott b5111a9e5c
docs: fix discord bridge note (#3639) 2022-06-30 08:12:55 +10:00
James Elliott b8a50cfdd7
docs: remove hsts preload (#3632) 2022-06-29 22:10:00 +10:00
James Elliott d2db318553
docs: update contact docs (#3630) 2022-06-29 21:34:13 +10:00
James Elliott 3e0785e7a5
docs: fix email links (#3624) 2022-06-29 09:39:01 +10:00
James Elliott 352b360a50
docs: update dates (#3615) 2022-06-28 15:27:14 +10:00
James Elliott 2b6b6ef1f0
docs: roadmap permalinks (#3614) 2022-06-28 13:55:50 +10:00
James Elliott d2f1e5d36d
feat(configuration): automatically map old keys (#3199)
This performs automatic remapping of deprecated configuration keys in most situations.
2022-06-28 13:15:50 +10:00
James Elliott ab1d0c51d3
feat(authorization): acl resource regex named groups (#3597)
This adds the named group functionality from domain_regex to the resource criteria.
2022-06-28 12:51:05 +10:00
James Elliott 19a543289b
docs: remove link whitespace (#3612) 2022-06-28 10:52:06 +10:00
James Elliott 0c0e19c138
docs: add openid offline_access scope (#3611)
Adds this scope to the docs.

Closes #3607
2022-06-28 10:25:36 +10:00
James Elliott fcac438637
feat(commands): enhance crypto generation capabilities (#2842)
This expands the functionality of the certificates and rsa commands and merges them into one command called cypto which can either use the cert or pair subcommands to generate certificates or key-pairs respectively. The rsa, ecdsa, and ed25519 subcommands exist for both the cert and pair commands. A new --ca-path argument for the cert subcommand allows Authelia to sign other certs with CA certs.

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-06-27 18:27:57 +10:00
James Elliott d6e58933e9
docs: fix frame-src (#3593)
* docs: fix frame-src

* docs: fix frame-src
2022-06-25 20:58:04 +10:00
James Elliott ee86aad0ec
docs: fix skipper docs (#3585) 2022-06-24 12:42:27 +10:00
James Elliott 2ccdf6933c
docs: fix k8s yaml (#3575) 2022-06-22 23:25:10 +10:00
James Elliott e2e1d6d30b
docs: update integration guides to reference get started (#3573) 2022-06-22 22:58:23 +10:00
James Elliott 1dbca52cab
docs: fix clipboard (#3568) 2022-06-22 07:57:51 +10:00
James Elliott 095ebae7a0
docs: update caddy example (#3566) 2022-06-21 21:27:48 +10:00
James Elliott b102ebb6bb
docs: improve secrets documentation (#3565)
Improve documentation around secrets.
2022-06-21 19:45:08 +10:00
James Elliott bcaaec834b
docs: adjust branding usage (#3550) 2022-06-20 18:13:49 +10:00
James Elliott 3d027ba1e0
docs(deps): sync (#3551) 2022-06-20 14:40:40 +10:00
James Elliott fcf40b134d
docs: add branding reference guide (#3549)
This adds official branding in PSD/SVG/PNG format and a guide on requested usage.

Closes #3484.
2022-06-20 10:05:55 +10:00
James Elliott 25b5c1ee2e
feat(authentication): unauthenticated ldap bind (#3291)
This allows configuring unauthenticated LDAP binding.
2022-06-17 21:03:47 +10:00
James Elliott 4fb0f289d4
docs: fix open collective links (#3532)
* docs: restructure sponsors

* docs: fix misc issues

* docs: fix naming
2022-06-17 10:55:42 +10:00
James Elliott dd1949b6e6
docs: make financial sponsors consistent (#3530) 2022-06-17 09:56:00 +10:00
James Elliott 43f03ad89a
docs: set blog date (#3522) 2022-06-15 18:14:43 +10:00
James Elliott b2c60ef898
feat: major documentation refresh (#3475)
This marks the launch of the new documentation website.
2022-06-15 17:51:47 +10:00
James Elliott 46d84e46b0
feat(logging): allow time replacement in log file name (#3330)
* feat(logging): allow time replacement in log file name

This allows replacing `%d` with a date time format in the log `file_name` option.

Closes #3210.
2022-06-06 09:50:10 +10:00
James Elliott 11543fd0bf
docs: escape handlebars (#3462) 2022-06-02 19:29:15 +10:00
James Elliott 2037a0ee4f
fix(commands): hash-password usage instructions (#3437)
This fixes the hash-password usage instructions and ensures it uses mostly a configuration source based config. In addition it updates our recommended argon2id parameters with the RFC recommendations.
2022-06-02 09:18:45 +10:00
dependabot[bot] e1d52d57e0
build(deps): bump nokogiri from 1.13.4 to 1.13.6 in /docs (#3404)
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.13.4 to 1.13.6.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/main/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.13.4...v1.13.6)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-05-20 09:28:26 +10:00
James Elliott 2800e1436c
docs: add crowdin (#3381) 2022-05-16 13:42:58 +10:00
James Elliott 28626113b7
ci: crowdin commit lint etc (#3372) 2022-05-16 10:54:31 +10:00
Zhao Xiang Lim ee7b304f66
docs: fix missing backtick in file authentication docs (#3348)
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-05-12 09:44:37 +10:00
James Elliott 0f9c79e80a
docs: add sql supported version info (#3334) 2022-05-10 13:41:07 +10:00
James Elliott 45df1ec7d0
docs: fix missing format char (#3318) 2022-05-07 14:24:28 +10:00
James Elliott 1060bcee06
docs: caddy integration (#3307)
This adds docs on integration with Caddy.

Closes #1241
2022-05-07 09:18:28 +10:00
Amir Zarrinkafsh dde80dda29
docs: update portainer missing scopes (#3313) 2022-05-06 23:16:08 +10:00
James Elliott 0855ea2f71
fix(server): missing cache and xss headers (#3289)
Addresses documentation and a couple of headers which were missed.
2022-05-04 14:47:23 +10:00
James Elliott c7d992f341
fix(authentication): follow ldap referrals (#3251)
This ensures we are able to follow referrals for LDAP password modify operations when permit_referrals is true.

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-05-02 11:51:38 +10:00
James Elliott 555746e771
refactor: exclude id from sqlite3 migration (#3242)
* refactor: exclude id from sqlite3 table recreate

* docs: add migration docs
2022-04-25 21:11:56 +10:00
dependabot[bot] 52727f9d2c
build(deps): bump nokogiri from 1.13.3 to 1.13.4 in /docs (#3168)
Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.13.3 to 1.13.4.
- [Release notes](https://github.com/sparklemotion/nokogiri/releases)
- [Changelog](https://github.com/sparklemotion/nokogiri/blob/v1.13.4/CHANGELOG.md)
- [Commits](https://github.com/sparklemotion/nokogiri/compare/v1.13.3...v1.13.4)

---
updated-dependencies:
- dependency-name: nokogiri
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-04-19 16:33:11 +10:00
James Elliott e99fb7a08f
feat(configuration): configurable default second factor method (#3081)
This allows configuring the default second factor method.
2022-04-18 09:58:24 +10:00
Helvio Pedreschi de6d1698be
docs: update portainer ce and ee (#3202)
This adds some additional docs to Portainer docs specifically around Portainer EE.

Closes #3203

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-16 13:35:01 +10:00
James Elliott 4710de33a4
refactor(configuration): remove ptr for duoapi and notifier (#3200)
This adds to the ongoing effort to remove all pointers to structs in the configuration without breaking backwards compatibility.
2022-04-16 09:34:26 +10:00
James Elliott 92aba8eb0b
feat(server): zxcvbn password policy server side (#3151)
This is so the zxcvbn ppolicy is checked on the server.
2022-04-15 19:30:51 +10:00
Helvio Pedreschi 71511a5c4f
docs: fix typo (#3191)
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-15 10:43:04 +10:00
James Elliott e7112bfbd6
feat(oidc): client id claims (#3150)
Adds the authorized party (azp) and client_id registered claims to ID Tokens.
2022-04-09 16:55:24 +10:00
James Elliott 66a450ed38
feat(oidc): pre-configured consent (#3118)
Allows users to pre-configure consent if enabled by the client configuration by selecting a checkbox during consent.

Closes #2598
2022-04-08 15:35:21 +10:00
James Elliott 4503ac07be
fix(web): lowercase locales are not consistent with localization platforms (#3141)
This fixes an issue with localization platforms and the docs regarding localization, and the forcing locale names to lowercase.
2022-04-08 14:53:46 +10:00
James Elliott 2da50f6128
docs: add k8s important notes (#3140)
Add some implementation notes about k8s.

Fixes #2882
2022-04-08 14:15:35 +10:00
Lorenz Schmid 5f51dcdb51
docs: fix missing backtick (#3136)
Fix formatting error introduced in #3131

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-08 09:33:14 +10:00
James Elliott 9b6bcca1ba
feat(totp): secret customization (#2681)
Allow customizing the shared secrets size specifically for apps which don't support 256bit shared secrets.
2022-04-08 09:01:01 +10:00
Lorenz Schmid efccf77c10
docs(oidc): seafile integration example (#3131)
- Adds description and callback URL for the Seafile file server.
- Orders the entries in the two OIDC integration tables by name.
2022-04-08 07:11:43 +10:00
James Elliott ad84c8c33e
feat(oidc): opaque subject identifiers (#3129)
This is a meta commit for a feature originally implemented in 0a970aef8a documenting the change from using the username as a subject identifier to a specification compliant subject identifier in the form of RFC4122 UUID V4 subject identifiers. This is a required change in order to be compliant with the specification as per https://openid.net/specs/openid-connect-core-1_0.html#SubjectIDTypes. Relying parties which utilize the subject identifier / sub claim may need manual intervention in order to relink accounts. Users who have issues will have to consult with the documentation of their individual relying parties in order to relink accounts. Users who utilized the subject identifier as a means to provision their users are also encouraged to utilize the preferred_username claim from the profile scope.
2022-04-07 17:35:54 +10:00
James Elliott 8bb8207808
feat(oidc): pairwise subject identifiers (#3116)
Allows configuring clients with a sector identifier to allow pairwise subject types.
2022-04-07 16:13:01 +10:00
James Elliott 0a970aef8a
feat(oidc): persistent storage (#2965)
This moves the OpenID Connect storage from memory into the SQL storage, making it persistent and allowing it to be used with clustered deployments like the rest of Authelia.
2022-04-07 15:33:53 +10:00
James Elliott 06fd7105ea
refactor(templates): utilize more accurate naming (#3125) 2022-04-07 13:05:20 +10:00
James Elliott 4ebd8fdf4e
feat(oidc): provide cors config including options handlers (#3005)
This adjusts the CORS headers appropriately for OpenID Connect. This includes responding to OPTIONS requests appropriately. Currently this is only configured to operate when the Origin scheme is HTTPS; but can easily be expanded in the future to include additional Origins.
2022-04-07 10:58:51 +10:00
Clément Michaud 3ca438e3d5
feat: implement mutual tls in the web server (#3065)
Mutual TLS helps prevent untrusted clients communicating with services like Authelia. This can be utilized to reduce the attack surface.

Fixes #3041
2022-04-05 09:57:47 +10:00
James Elliott a2eb0316c8
feat(web): password reset custom url (#3111)
This allows providing a custom URL for password resets. If provided the disable_reset_password option is ignored, the password reset API is disabled, and the button provided in the UI to reset the password redirects users to the configured endpoint.

Closes #1934, Closes #2854

Co-authored-by: you1996 <youssri@flyweight.tech>
2022-04-04 17:46:55 +10:00
James Elliott aac4c4772c
feat(web): i18n asset overrides (#3040)
This allows overriding translation files in folders with lowercase RFC5646 / BCP47 Format language codes. This also fixes an issues where languages which don't expressly match the language code specified due to having a variant will also match the existing codes.

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-04-04 12:15:26 +10:00