4dce8f9496
perf(authorizer): preload access control lists ( #1640 )
...
* adjust session refresh to always occur (for disabled users)
* feat: adds filtering option for Request Method in ACL's
* simplify flow of internal/authorization/authorizer.go's methods
* implement query string checking
* utilize authorizer.Object fully
* make matchers uniform
* add tests
* add missing request methods
* add frontend enhancements to handle request method
* add request method to 1FA Handler Suite
* add internal ACL representations (preparsing)
* expand on access_control next
* add docs
* remove unnecessary slice for network names and instead just use a plain string
* add warning for ineffectual bypass policy (due to subjects)
* add user/group wildcard support
* fix(authorization): allow subject rules to match anonymous users
* feat(api): add new params
* docs(api): wording adjustments
* test: add request method into testing and proxy docs
* test: add several checks and refactor schema validation for ACL
* test: add integration test for methods acl
* refactor: apply suggestions from code review
* docs(authorization): update description
2021-03-05 15:18:31 +11:00
ba65a3db82
feat(handlers): authorization header switch via query param to /api/verify ( #1563 )
...
* [FEATURE] Add auth query param to /api/verify (#1353 )
When `/api/verify` is called with `?auth=basic`, use the standard
Authorization header instead of Proxy-Authorization.
* [FIX] Better basic auth error reporting
* [FIX] Return 401 when using basic auth instead of redirecting
* [TESTS] Add tests for auth=basic query param
* [DOCS] Mention auth=basic argument and provide nginx example
* docs: add/adjust basic auth query arg docs for proxies
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2021-02-24 10:35:04 +11:00
b20f62b015
Update example to set correct internal trusted ranges. ( #1575 )
2021-01-02 07:36:12 +11:00
a83ccd7188
[FEATURE] Add Remote-Name and Remote-Email headers ( #1402 )
2020-10-26 22:38:08 +11:00
561a3f551c
[DOCS] Fix typos in proxy examples ( #1015 )
...
Also include global http -> https redirection in Traefik 2.x example.
2020-05-14 13:26:52 +10:00
310c5dc09b
[DOCS] Harmonize Remote-User and Remote-Groups headers in nginx example ( #963 )
...
Fixes #957 .
Co-authored-by: Clément Michaud <clement.michaud34@gmail.com>
2020-05-02 17:10:26 +02:00
3c8babbd4f
[DOCS] Proxy documentation not available anymore. ( #692 )
2020-03-08 16:29:16 +01:00
adf7bbaf5b
[DOCS] Bootstrap new documentation website based on just-the-docs ( #659 )
2020-02-29 01:43:59 +01:00
James Elliott
ThinkChaos
Kristof Mattei
Amir Zarrinkafsh
Clément Michaud