5b8b3145ad
feat(configuration): lldap implementation ( #4498 )
...
This adds a lldap LDAP implementation which purely adds sane defaults for lldap. There are no functional differences just when the implementation option is set to 'lldap' sane defaults which should be sufficient for most use cases are set. See the documentation at https://www.authelia.com/r/ldap#defaults for more details.
2022-12-21 21:51:25 +11:00
d67554ab88
feat(authentication): ldap time replacements ( #4483 )
...
This adds and utilizes several time replacements for both specialized LDAP implementations.
Closes #1964 , Closes #1284
2022-12-21 21:31:21 +11:00
d0d80b4f66
feat(configuration): freeipa ldap implementation ( #4482 )
...
This adds a FreeIPA LDAP implementation which purely adds sane defaults for FreeIPA. There are no functional differences just when the implementation option is set to 'freeipa' sane defaults which should be sufficient for most use cases are set. See the documentation at https://www.authelia.com/r/ldap#defaults for more details.
Closes #2177 , Closes #2161
2022-12-21 21:07:00 +11:00
c7f4d5999d
feat(configuration): file filters ( #4515 )
...
This adds experimental file filters which are not guaranteed under our stability policies. These filters take effect after reading the files and before parsing their content.
2022-12-21 20:48:14 +11:00
3ba2eae20e
fix(server): verify endpoint 405ing non-get/head reqs ( #4607 )
...
Fixes an issue specific to envoy that prevents the verify endpoint working with requests not using the GET or HEAD methods.
2022-12-21 18:47:20 +11:00
728902335b
refactor: const int type stringers ( #4588 )
2022-12-17 23:39:24 +11:00
d13247ce43
refactor(server): simplify templating and url derivation ( #4547 )
...
This refactors a few areas of the server templating and related functions.
2022-12-17 11:49:05 +11:00
28cd927f88
fix(authentication): msad dlsg excluded from default filter ( #4569 )
...
The groups filter narrowing for Active Directory to purposefully exclude distribution groups (which are not designed to act as security groups) unintentionally removed DLSG's from the filter results. This effectively reverts that allowing both DLSG's and GUSG's to be returned by default.
Fixes #4551 , Fixes #4528
2022-12-14 14:57:32 +11:00
1e5304b280
build(deps): update redis and mariadb docker tags for k8s ( #4570 )
2022-12-14 12:18:46 +11:00
59287f4e18
build(deps): update osixia/openldap docker tag to v1.5.0 ( #4559 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-12-13 07:34:16 +00:00
3320900d8b
build(deps): update mariadb docker tag to v10.4.27 ( #4557 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-12-13 02:18:43 +00:00
505a7e90b3
refactor(suites): replace kind with k3d ( #4553 )
...
This change replaces Kind with a might lighter K8s variation K3D.
Many of our manifests have also been consolidated.
Other key changes have been highlighted below:
* Utilise K3D Traefik Ingress
* Automatically provision all manifests, removing the abundance of shell scripts
* Expose Traefik and K8s dashboards through the Ingress
2022-12-13 10:15:32 +11:00
785332a124
build(deps): update traefik docker tag to v2.9.6 ( #4513 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-12-08 21:56:31 +11:00
0fd8d044bf
build(deps): update module github.com/ory/fosite to v0.44.0 ( #4506 )
2022-12-08 08:48:50 +11:00
77afa2d726
build(deps): update golang docker tag to v1.19.4 ( #4494 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-12-07 23:15:41 +11:00
99f965ae25
test(suites): refactor flaky tests ( #4502 )
2022-12-07 20:22:03 +11:00
c5387460c7
build(deps): bump qs in /internal/suites/example/compose/duo-api ( #4492 )
...
Bumps [qs](https://github.com/ljharb/qs ) from 6.5.2 to 6.11.0.
- [Release notes](https://github.com/ljharb/qs/releases )
- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md )
- [Commits](https://github.com/ljharb/qs/compare/v6.5.2...v6.11.0 )
---
updated-dependencies:
- dependency-name: qs
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-12-07 18:07:55 +11:00
c9bc3c8b1e
build(deps): update envoyproxy/envoy docker tag to v1.24.1 ( #4487 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-12-07 10:24:34 +11:00
07e32ca734
i18n: update translation for portal.json (Finnish) ( #4460 )
2022-12-05 12:20:23 +11:00
0aa6745059
build(deps): update module github.com/go-crypt/crypt to v0.2.2 ( #4452 )
2022-12-05 09:37:08 +11:00
59c11581b8
test: use testing tempdir tooling ( #4468 )
...
This commit replaces `os.MkdirTemp` with `t.TempDir` in tests. The
directory created by `t.TempDir` is automatically removed when the test
and all its subtests complete.
Prior to this commit, temporary directory created using `os.MkdirTemp`
needs to be removed manually by calling `os.RemoveAll`, which is omitted
in some tests. The error handling boilerplate e.g.
defer func() {
if err := os.RemoveAll(dir); err != nil {
t.Fatal(err)
}
}
is also tedious, but `t.TempDir` handles this for us nicely.
Reference: https://pkg.go.dev/testing#T.TempDir
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-12-04 20:57:28 +11:00
9adf30b7e3
build(deps): update haproxy docker tag to v2.7.0 ( #4459 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-12-02 00:59:33 +00:00
3e4ac7821d
refactor: remove pre1 migration path ( #4356 )
...
This removes pre1 migrations and improves a lot of tooling.
2022-11-25 23:44:55 +11:00
e1f9718e17
fix(configuration): max tls ver not correctly derived ( #4428 )
...
This fixes an issue where the maximum version if unset is derived from the minimum version erroneously.
Fixes #4425
2022-11-24 20:32:57 +11:00
203cb19c2f
fix(configuration): missing warning about session domain ( #4417 )
...
This adds some helpful configuration warnings and fixes a few misconfiguration issues.
2022-11-24 10:16:23 +11:00
66807b5a8c
build(deps): update alpine docker tag to v3.17.0 ( #4422 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-11-23 00:58:19 +00:00
c481ac86bb
fix(configuration): valid oidc redirect uris not accepted ( #4410 )
...
This fixes an issue where redirect URIs which may be valid are rejected by the configuration validator. This will instead allow the OpenID Connect 1.0 flows to validate them individually.
2022-11-21 11:52:27 +11:00
194d34106e
fix(storage): schema inconsistency ( #4262 )
2022-11-19 16:47:09 +11:00
47b78f2272
build(deps): update mariadb docker tag to v10.10.2 ( #4399 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-11-18 10:50:47 +00:00
a4d9d488b1
build(deps): update traefik docker tag to v2.9.5 ( #4398 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-11-18 01:29:38 +00:00
36dbc96b14
refactor: sql formatting ( #4371 )
...
* refactor: sql spacing
* refactor editor config
2022-11-14 12:54:30 +11:00
3574d8ab17
build(deps): update alpine docker tag to v3.16.3 ( #4362 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-11-13 12:26:20 +00:00
ad68f33aeb
build(deps): update module github.com/ory/fosite to v0.43.0 ( #4269 )
...
This updates fosite and refactors our usage out of compose.
2022-11-13 14:26:10 +11:00
909deafeba
build(deps): update mariadb docker tag to v10.9.4 ( #4355 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-11-11 07:20:15 +00:00
02920c18be
refactor: few misc issues ( #4330 )
2022-11-04 22:24:10 +11:00
e97a848600
refactor: ldap filter ( #4329 )
2022-11-04 13:42:28 +11:00
500410fac3
refactor(commands): include rfc3986 charset ( #4328 )
...
This includes the RFC3986 unreserved charset as an option, and allows the '-upper' and '-lower' suffix for alphabetic inclusive charsets.
2022-11-04 11:32:49 +11:00
1e057819f2
build(deps): update golang docker tag to v1.19.3 ( #4316 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2022-11-02 03:42:08 +00:00
5a23df4544
refactor: uuid parse bytes ( #4311 )
...
Use ParseBytes instead since it supports a byte encoded string.
2022-11-01 10:31:13 +11:00
6b2f713e10
fix(configuration): certificate_chains can't be defined as secrets ( #4302 )
...
This fixes an issue where certificate_chain values can't be defined as secrets. While not expressly needed for certificates, it's more convenient and less prone to error than defining a environment variable with the contents.
2022-10-31 11:52:14 +11:00
db9de7b5a4
build(deps): update traefik docker tag to v2.9.4 ( #4286 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-10-29 17:00:46 +11:00
a048ab6d47
fix(authentication): erroneously escaped group base dn ( #4288 )
...
The BaseDN for groups was escaped improperly and failed on any BaseDN with special characters. This fixes the issue.
2022-10-28 20:21:43 +11:00
a283fda6d6
fix(oidc): handle authorization post requests ( #4270 )
...
This fixes an issue where the authorization endpoint was not handling post requests as per the specification. It also fixes the missing CORS middleware on the authorization endpoint.
2022-10-26 19:14:43 +11:00
dfd196460f
refactor: close database connections on shutdown ( #4255 )
...
This explicitly closes the database connection during shutdown.
2022-10-25 16:12:42 +11:00
53c1b645ee
fix(storage): postgresql default port incorrect ( #4251 )
...
This fixes a typo with the default port for PostgreSQL in 4.37.
Fixes #4249
2022-10-24 06:09:38 +11:00
6654fd6130
refactor: update users_database examples ( #4240 )
2022-10-23 08:12:16 +11:00
e3d82bcfa0
refactor: fix misc alignment issues and gen ( #4239 )
2022-10-23 07:42:19 +11:00
00ab279336
refactor: csp gen ( #4163 )
...
Generator for CSP.
2022-10-22 22:19:32 +11:00
69c4c02d03
feat(storage): tls connection support ( #4233 )
...
This adds support to PostgreSQL and MySQL to connect via TLS via the standard TLS configuration options.
2022-10-22 19:27:59 +11:00
1ea29cb2c2
feat(storage): unix socket support ( #4231 )
...
Support for unix sockets for MySQL and PostgreSQL.
2022-10-22 16:41:27 +11:00
James Elliott
Amir Zarrinkafsh
renovate[bot]
dependabot[bot]
Eng Zer Jun