James Elliott
8253b44e5d
docs: update swag docs ( #4979 )
2023-02-22 15:11:11 +11:00
James Elliott
891f1de9f2
refactor(commands): x509 bundling ( #4942 )
...
This adds another bundling mode to the certificate command.
2023-02-17 14:29:07 +11:00
James Hillyerd
ad689275d3
docs: improve gitea oidc guidance ( #4808 )
...
Make the non-obvious relationship between the Gitea `Authentication Name` and the path of the redirect URI explicit.
Signed-off-by: James Hillyerd <james@hillyerd.com>
2023-02-13 07:49:43 +11:00
James Elliott
8e4b660f15
refactor: certs ( #4912 )
...
This refactors the suites to use a Enterprise Root CA PKI signed certificate so the CA public certificate can be trusted. This is particularly useful for webauthn in Chrome.
2023-02-11 14:11:40 +11:00
James Elliott
e9fd4160e4
docs: add important note for implicit consent ( #4901 )
2023-02-08 13:51:23 +11:00
James Elliott
2e6d17ba8a
feat(configuration): rfc2307bis implementation ( #4900 )
...
This adds configuration defaults for RFC2307bis LDAP implementations such as OpenLDAP with the RFC2307bis LDIF which should service most user needs.
2023-02-08 13:35:57 +11:00
James Elliott
d1147f9ac4
docs: refactor oidc config docs ( #4892 )
2023-02-08 01:29:43 +11:00
James Elliott
726850fe43
refactor: add some more useful templating funcs ( #4891 )
2023-02-08 01:28:09 +11:00
James Elliott
a7ccf3652f
docs: fix rfc references and fix misc issues ( #4879 )
2023-02-05 18:11:30 +11:00
James Elliott
64312c644a
docs: fix env values ( #4873 )
2023-02-03 11:27:23 +11:00
James Elliott
d101b2aa51
docs: use go 1.19.5 ( #4872 )
2023-02-03 10:45:50 +11:00
James Elliott
370a3b1e8d
build: update to go 1.20 ( #4866 )
2023-02-02 21:19:28 +11:00
James Elliott
e408cb19b1
test: adjust tests and docs to be similar ( #4856 )
2023-02-02 18:13:18 +11:00
James Elliott
598ea2bb19
feat(configuration): disallow public suffix domains ( #4855 )
...
This adds a check to the domains configuration to ensure the domain value is not part of the public suffix list at https://publicsuffix.org . These domains are special and users cannot write cookies with this domain value, this makes them unusable with Authelia and this more readily makes that apparent.
2023-02-02 16:34:49 +11:00
James Elliott
7e285f461f
docs: add common oidc shortcode and update ( #4862 )
2023-02-02 12:30:06 +11:00
James Elliott
a2965183f7
docs: fix missing yaml example ( #4853 )
2023-01-31 10:28:00 +11:00
Krasimir Nedelchev
9eb9e29b13
docs: fix typo ( #4842 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-01-29 10:01:41 +11:00
Krasimir Nedelchev
b3b24f4479
docs: fix ip addresses ( #4843 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-01-29 09:25:32 +11:00
James Elliott
deb47264d5
docs: gen ( #4833 )
2023-01-26 19:04:46 +11:00
James Elliott
8cd88e83c1
docs: fix typo ( #4832 )
2023-01-26 18:39:56 +11:00
James Elliott
1ac4321013
docs: fix misc issues ( #4831 )
2023-01-26 16:38:08 +11:00
James Elliott
ea9ec80af0
docs: add missing features ( #4830 )
2023-01-26 16:22:56 +11:00
James Elliott
d653bc9c0b
docs: add pre-release / beta info ( #4829 )
2023-01-26 16:14:06 +11:00
James Elliott
a1517f18e5
docs: add version to the docs data misc generator ( #4827 )
2023-01-26 14:17:50 +11:00
James Elliott
b42a84340d
docs: env adjustment ( #4826 )
2023-01-26 13:23:02 +11:00
James Elliott
8319778b5d
docs: adjust key generators ( #4825 )
2023-01-26 11:24:06 +11:00
James Elliott
a33b37a9cd
docs: make several openid connect areas uniform ( #4824 )
2023-01-26 10:59:18 +11:00
James Elliott
65705a646d
feat(server): customizable authz endpoints ( #4296 )
...
This allows users to customize the authz endpoints.
Closes #2753 , Fixes #3716
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2023-01-25 20:36:40 +11:00
electrofloat
ce65764948
docs: fix copy paste typo ( #4815 )
...
Fixed a copy-paste bug in the description of the idle server timeout. This change only fixes that bug, but this part of the documentation need better explaining. (Something called "idle" in the "Server Timeouts" section of course configures server idle timeout, but what is server in this context, when happens when the time defined in idle expires, etc.)
2023-01-24 09:58:57 +11:00
James Elliott
a566c16d08
feat(web): privacy policy url ( #4625 )
...
This allows users to customize a privacy policy URL at the bottom of the login view.
Closes #2639
2023-01-22 19:58:07 +11:00
James Elliott
d16f63f01a
docs: blog 4.38 pre-release notes ( #4789 )
2023-01-21 00:18:00 +11:00
James Elliott
96c6a76ea5
docs(deps): bump deps ( #4787 )
2023-01-18 13:08:12 +11:00
James Elliott
d696593d6d
docs: fix incorrect env name ( #4768 )
2023-01-15 12:02:38 +11:00
Dinh Bao Dang
98604dc7eb
docs: fix links and npm install command ( #4755 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-01-12 22:02:13 +11:00
Manuel Nuñez
8b29cf7ee8
feat(session): multiple session cookie domains ( #3754 )
...
This adds support to configure multiple session cookie domains.
Closes #1198
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2023-01-12 21:57:44 +11:00
James Elliott
3182925bef
docs: elaborate on version policy ( #4707 )
2023-01-05 18:51:49 +11:00
James Elliott
adaf069eab
feat(oidc): per-client pkce enforcement policy ( #4692 )
...
This implements a per-client PKCE enforcement policy with the ability to enforce that it's used, and the specific challenge mode.
2023-01-04 02:03:23 +11:00
James Elliott
08cda5d165
refactor: include additional important template funcs ( #4690 )
...
* refactor: include additional important template funcs
* fix: use of interface
* test: improve test cases
2023-01-04 00:11:10 +11:00
James Elliott
9282b0512f
docs: improve server override docs ( #4687 )
2023-01-03 22:44:14 +11:00
James Elliott
1c3219e93f
perf(server): cached openapi document ( #4674 )
...
This should lead to a small performance gain by caching the openapi.yml with etags as well as eliminating the use of nonce crypto generation when not required.
2023-01-03 14:49:02 +11:00
James Elliott
acaadd81cb
docs: adjust image links ( #4680 )
...
* docs: adjust image links
* docs: adjust envoy logo
2023-01-03 12:27:02 +11:00
James Elliott
beda108d86
docs: update caddy logo ( #4679 )
2023-01-03 12:10:40 +11:00
Chris D
8a4c65b548
docs: fix mistakes in swag docs ( #4665 )
...
Co-authored-by: Chris <=>
2022-12-31 10:45:55 +11:00
James Elliott
f685f247cf
feat(notification): important events notifications ( #4644 )
...
This adds important event notifications.
2022-12-27 19:59:08 +11:00
James Elliott
3b699b8604
build(deps): bump docs deps ( #4636 )
2022-12-24 18:10:48 +11:00
James Elliott
55a6794370
feat(templates): templating functions ( #4635 )
...
This adds several functions which are available in most areas that use templates.
2022-12-23 21:58:54 +11:00
James Elliott
0bb657e11c
refactor(notifier): utilize smtp lib ( #4403 )
...
This drops a whole heap of code we were maintaining in favor of a SMTP library.
Closes #2678
2022-12-23 16:06:49 +11:00
James Elliott
38ca5f06d4
docs: update privacy and versioning policy ( #4632 )
2022-12-23 15:37:42 +11:00
James Elliott
d7ab3bb633
feat(commands): storage import/export commands ( #4545 )
...
This adds commands to export and import TOTP configurations and Webauthn devices as YAML.
2022-12-23 15:00:23 +11:00
James Elliott
0130edb870
feat(configuration): env config file discovery ( #4618 )
...
This allows Authelia to discover config files and config options via environment variables.
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-12-23 11:03:50 +11:00
Ohelig
7663a68a2b
docs: add password regulation fail2ban docs ( #4630 )
...
Adds lines to fail2ban regex to catch password reset attempts and email spam.
2022-12-23 07:39:41 +11:00
James Elliott
9400b1c54d
docs: add gdpr relevant information ( #4624 )
...
* docs: add gdpr relevant information
* docs: add gdpr relevant information
2022-12-22 21:20:36 +11:00
James Elliott
cc1e58e004
feat(configuration): load config from directory ( #4616 )
...
This allows specifying paths to a combination of files and directories with the --config option provided none of the specified file paths reside directly inside one of the specified directory paths. The directory paths are not recursive, and load .yml and .yaml files at this time.
2022-12-22 17:34:20 +11:00
James Elliott
1a849a37bd
docs: fix misc mistakes and adjust placeholders ( #4614 )
2022-12-22 11:39:59 +11:00
James Elliott
e3e31e3cbc
refactor(commands): command context ( #4539 )
...
This moves a lot of machinery for commands into a context.Context with other struct values. This allows for PreRunE's to reliably load the configuration and avoids use of global vars.
2022-12-22 11:21:29 +11:00
James Elliott
d3d87ffe30
feat(configuration): glauth ldap implementation ( #4499 )
...
This adds a GLAuth LDAP implementation which purely adds sane defaults for GLAuth. There are no functional differences just when the implementation option is set to 'glauth' sane defaults which should be sufficient for most use cases are set. See the documentation at https://www.authelia.com/r/ldap#defaults for more details.
2022-12-21 22:14:22 +11:00
James Elliott
5b8b3145ad
feat(configuration): lldap implementation ( #4498 )
...
This adds a lldap LDAP implementation which purely adds sane defaults for lldap. There are no functional differences just when the implementation option is set to 'lldap' sane defaults which should be sufficient for most use cases are set. See the documentation at https://www.authelia.com/r/ldap#defaults for more details.
2022-12-21 21:51:25 +11:00
James Elliott
d67554ab88
feat(authentication): ldap time replacements ( #4483 )
...
This adds and utilizes several time replacements for both specialized LDAP implementations.
Closes #1964 , Closes #1284
2022-12-21 21:31:21 +11:00
James Elliott
d0d80b4f66
feat(configuration): freeipa ldap implementation ( #4482 )
...
This adds a FreeIPA LDAP implementation which purely adds sane defaults for FreeIPA. There are no functional differences just when the implementation option is set to 'freeipa' sane defaults which should be sufficient for most use cases are set. See the documentation at https://www.authelia.com/r/ldap#defaults for more details.
Closes #2177 , Closes #2161
2022-12-21 21:07:00 +11:00
James Elliott
c7f4d5999d
feat(configuration): file filters ( #4515 )
...
This adds experimental file filters which are not guaranteed under our stability policies. These filters take effect after reading the files and before parsing their content.
2022-12-21 20:48:14 +11:00
James Elliott
6a2dff7d6a
docs: fix link style ( #4598 )
2022-12-19 15:19:46 +11:00
James Elliott
859b403146
docs: update docs ( #4597 )
2022-12-19 15:04:02 +11:00
Austin Alvarado
8d1f8fcbd7
docs: fix incorrect command doc ( #4579 )
2022-12-16 15:12:04 +11:00
James Elliott
aa61058ca9
docs: improve svg color accuracy ( #4578 )
...
This improves the color accuracy of the Illustrator files and SVG's.
2022-12-15 21:36:26 +11:00
James Elliott
fb62c33129
docs: fix branding svgs and add ai branding ( #4577 )
...
This adds Adobe Illustrator branding files, and fixes the SVG's.
2022-12-15 20:15:29 +11:00
James Elliott
28cd927f88
fix(authentication): msad dlsg excluded from default filter ( #4569 )
...
The groups filter narrowing for Active Directory to purposefully exclude distribution groups (which are not designed to act as security groups) unintentionally removed DLSG's from the filter results. This effectively reverts that allowing both DLSG's and GUSG's to be returned by default.
Fixes #4551 , Fixes #4528
2022-12-14 14:57:32 +11:00
boomam
93c0d65830
docs: spelling fix ( #4534 )
...
Corrected spelling of "postgres" in server config example.
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-12-10 10:16:31 +11:00
James Elliott
d9d63ea2b3
docs: storage ref clarity ( #4530 )
2022-12-09 22:38:56 +11:00
James Elliott
2c270a21bf
docs: storage ref clarity ( #4529 )
2022-12-09 21:57:12 +11:00
James Elliott
cfdd036590
docs: improve mariadb upgrade docs ( #4527 )
2022-12-09 19:29:41 +11:00
James Elliott
32b3ce65f2
docs: improve database docs ( #4526 )
...
* docs: improve database docs
* docs: improve database docs
2022-12-09 18:24:02 +11:00
James Elliott
df63f08980
docs: bump versions ( #4524 )
2022-12-09 10:42:29 +11:00
James Elliott
017be7b4a4
docs: generate ( #4512 )
2022-12-08 22:04:44 +11:00
James Elliott
b10a0ae6b7
docs: update deps ( #4505 )
2022-12-07 23:55:16 +11:00
James Elliott
b4d9e21387
docs: fix misc url issues ( #4503 )
2022-12-07 20:43:02 +11:00
Jonas Lewin
ee50e5580c
docs: fix totp cli examples ( #4467 )
...
Updated the documentation with the missing user keyword
2022-12-04 17:29:05 +11:00
James Elliott
442cb272d9
docs: update proxy docs ( #4449 )
2022-11-30 09:12:50 +11:00
James Elliott
fbe42a91c3
docs: bump dependencies ( #4441 )
2022-11-28 16:02:40 +11:00
James Elliott
6f21a0d1cd
docs: update index ( #4438 )
2022-11-27 16:19:47 +11:00
James Elliott
eba63f1359
docs: update index ( #4437 )
2022-11-27 16:07:08 +11:00
James Elliott
1bab80f6b6
docs: update ( #4433 )
2022-11-25 23:55:25 +11:00
James Elliott
3e4ac7821d
refactor: remove pre1 migration path ( #4356 )
...
This removes pre1 migrations and improves a lot of tooling.
2022-11-25 23:44:55 +11:00
James Elliott
203cb19c2f
fix(configuration): missing warning about session domain ( #4417 )
...
This adds some helpful configuration warnings and fixes a few misconfiguration issues.
2022-11-24 10:16:23 +11:00
Jacob Gee-Clarke
ef28345f05
docs: fix grammar ( #4334 )
...
A fixed grammatical issue with the docker deployment page.
2022-11-21 06:27:43 +11:00
James Elliott
194d34106e
fix(storage): schema inconsistency ( #4262 )
2022-11-19 16:47:09 +11:00
James Elliott
9aec643bc1
docs: clarify cloudflare docs ( #4373 )
2022-11-14 14:37:34 +11:00
James Elliott
c7a668c897
docs: adjust csp ( #4361 )
...
* docs: adjust csp
* docs: bump deps
2022-11-12 09:58:10 +11:00
James Elliott
02920c18be
refactor: few misc issues ( #4330 )
2022-11-04 22:24:10 +11:00
James Elliott
e97a848600
refactor: ldap filter ( #4329 )
2022-11-04 13:42:28 +11:00
James Elliott
500410fac3
refactor(commands): include rfc3986 charset ( #4328 )
...
This includes the RFC3986 unreserved charset as an option, and allows the '-upper' and '-lower' suffix for alphabetic inclusive charsets.
2022-11-04 11:32:49 +11:00
James Elliott
95709b7069
docs: update proxy versions ( #4310 )
2022-11-01 10:09:46 +11:00
James Elliott
6b2f713e10
fix(configuration): certificate_chains can't be defined as secrets ( #4302 )
...
This fixes an issue where certificate_chain values can't be defined as secrets. While not expressly needed for certificates, it's more convenient and less prone to error than defining a environment variable with the contents.
2022-10-31 11:52:14 +11:00
James Elliott
7f247ca633
docs(deps): bump all deps ( #4303 )
2022-10-31 10:19:04 +11:00
James Elliott
c16456bd6d
docs: gen ( #4293 )
2022-10-28 22:47:34 +11:00
James Elliott
dfd196460f
refactor: close database connections on shutdown ( #4255 )
...
This explicitly closes the database connection during shutdown.
2022-10-25 16:12:42 +11:00
matvey00z
55a7f8112d
Update a broken link in the docs ( #4250 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-10-24 06:58:11 +11:00
James Elliott
12e3cd56b1
docs: refactor generator guides ( #4244 )
2022-10-23 18:09:19 +11:00
James Elliott
296dc9ecc5
docs: fix missing secret links ( #4242 )
...
* docs: fix missing secret links
* docs: fix missing secret links
* docs: fix missing doc
2022-10-23 14:42:44 +11:00
James Elliott
6654fd6130
refactor: update users_database examples ( #4240 )
2022-10-23 08:12:16 +11:00
James Elliott
e3d82bcfa0
refactor: fix misc alignment issues and gen ( #4239 )
2022-10-23 07:42:19 +11:00