fed55be3e1
build(deps): update module github.com/mattn/go-sqlite3 to v1.14.7 ( #1914 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-04-14 21:49:42 +02:00
f087de68f8
build(deps): update module github.com/otiai10/copy to v1.5.1 ( #1894 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-04-08 09:03:53 +10:00
09f5aaec25
build(deps): update module github.com/go-ldap/ldap/v3 to v3.3.0 ( #1890 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-04-06 12:19:20 +10:00
a5cdf54912
build(deps): update module github.com/fasthttp/session/v2 to v2.3.1 ( #1888 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-04-05 20:22:06 +10:00
f646aa5242
build(deps): update module github.com/fasthttp/router to v1.3.11 ( #1887 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-04-05 06:38:09 +10:00
64258f93af
build(deps): update module golang.org/x/text to v0.3.6 ( #1882 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-04-02 08:32:57 +11:00
ef14e3842c
build(deps): update module github.com/go-sql-driver/mysql to v1.6.0 ( #1880 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-04-01 20:53:47 +11:00
122c9126db
build(deps): update module github.com/workiva/go-datastructures to v1.0.53 ( #1868 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-03-30 11:15:30 +11:00
0c893a2880
build(deps): update module github.com/valyala/fasthttp to v1.23.0 ( #1867 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-03-30 10:36:31 +11:00
322592f679
build(deps): update module github.com/fasthttp/router to v1.3.10 ( #1856 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-03-27 09:13:15 +11:00
2b75e98402
build(deps): update module github.com/jackc/pgx/v4 to v4.11.0 ( #1850 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-03-26 09:04:32 +11:00
e3e8df26f2
refactor(session): use github.com/fasthttp/session/v2 instead of github.com/authelia/session/v2 ( #1809 )
...
Reverts to the upstream library instead of our maintenance fork.
2021-03-13 16:06:19 +11:00
5001749b1b
build(deps): update module github.com/sirupsen/logrus to v1.8.1 ( #1792 )
...
* build(deps): update module github.com/sirupsen/logrus to v1.8.1
* fix: go mod tidy (go.sum)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-03-10 11:33:14 +11:00
e041143f87
feat(session): add redis sentinel provider ( #1768 )
...
* feat(session): add redis sentinel provider
* refactor(session): use int for ports as per go standards
* refactor(configuration): adjust tests and validation
* refactor(configuration): add err format consts
* refactor(configuration): explicitly map redis structs
* refactor(session): merge redis/redis sentinel providers
* refactor(session): add additional checks to redis providers
* feat(session): add redis cluster provider
* fix: update config for new values
* fix: provide nil certpool to affected tests/mocks
* test: add additional tests to cover uncovered code
* docs: expand explanation of host and nodes relation for redis
* ci: add redis-sentinel to suite highavailability, add redis-sentinel quorum
* fix(session): sentinel password
* test: use redis alpine library image for redis sentinel, use expose instead of ports, use redis ip, adjust redis ip range, adjust redis config
* test: make entrypoint.sh executable, fix entrypoint.sh if/elif
* test: add redis failover tests
* test: defer docker start, adjust sleep, attempt logout before login, attempt visit before login and tune timeouts, add additional logging
* test: add sentinel integration test
* test: add secondary node failure to tests, fix password usage, bump test timeout, add sleep
* feat: use sentinel failover cluster
* fix: renamed addrs to sentineladdrs upstream
* test(session): sentinel failover
* test: add redis standard back into testing
* test: move redis standalone test to traefik2
* fix/docs: apply suggestions from code review
2021-03-10 10:03:05 +11:00
5cf98de225
build(deps): update module github.com/fasthttp/router to v1.3.9 ( #1775 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-03-02 22:03:47 +11:00
e2f08f568a
build(deps): update module github.com/valyala/fasthttp to v1.22.0 ( #1772 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-03-02 11:27:03 +11:00
abe8e438a2
build(deps): update module github.com/fasthttp/router to v1.3.8 ( #1771 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-03-02 08:58:28 +11:00
4f099b76d7
build(deps): downgrade module github.com/mattn/go-sqlite3 to v1.14.6 ( #1758 )
2021-02-23 14:51:31 +11:00
d000e5dbeb
build(deps): update module github.com/otiai10/copy to v1.5.0 ( #1753 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-23 05:41:51 +11:00
30d45dd3fc
build(deps): update module github.com/sirupsen/logrus to v1.8.0 ( #1747 )
...
* build(deps): update module github.com/sirupsen/logrus to v1.8.0
* go mod tidy
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-02-22 21:52:08 +11:00
b10adf6cf4
build(deps): update module github.com/golang/mock to v1.5.0 ( #1746 )
...
* build(deps): update module github.com/golang/mock to v1.5.0
* build(deps): go mod tidy
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2021-02-22 20:33:17 +11:00
68af1fdfca
build(deps): update module github.com/authelia/session/v2 to v2.4.1 ( #1745 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-22 17:48:10 +11:00
0f7891a823
build(deps): update module github.com/valyala/fasthttp to v1.21.0 ( #1755 )
2021-02-22 16:37:40 +11:00
e77ef2d1dc
build(deps): update module github.com/spf13/cobra to v1.1.3 ( #1741 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-22 15:47:07 +11:00
74721a9f41
feat: go:embed static assets ( #1733 )
...
* feat: go:embed static assets
Go 1.16 introduced the ability to embed files within a generated binary directly with the go tool chain. This simplifies our dependencies and the significantly improves the development workflow for future developers.
Key points to note:
Due to the inability to embed files that do not reside within the local package we need to duplicate our `config.template.yml` within `internal/configuration`.
To avoid issues with the development workflow empty mock files have been included within `internal/server/public_html`. These are substituted with the respective generated files during the CI/CD and build workflows.
* fix(suites): increase ldap suite test timeout
* fix(server): fix swagger asset CSP
2021-02-22 10:07:06 +11:00
f1664fea00
build(deps): update module spf13/cobra to v1 ( #1676 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-31 20:27:06 +11:00
d2c1e6afa5
build(deps): update module yaml to v2.4.0 ( #1671 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-31 14:18:46 +11:00
895b69d871
build(deps): update module sirupsen/logrus to v1.7.0 ( #1667 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-31 14:00:57 +11:00
cfb1ee020e
build(deps): update module pquerna/otp to v1.3.0 ( #1665 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-31 13:44:15 +11:00
6a0ed57196
build(deps): update module otiai10/copy to v1.4.2 ( #1664 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-31 13:30:22 +11:00
c53e590585
build(deps): update module jackc/pgx/v4 to v4.10.1 ( #1663 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-31 13:12:26 +11:00
0baf8b808a
build(deps): update module fasthttp/router to v1.3.5 ( #1662 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-31 12:57:08 +11:00
158c70a24c
build(deps): update module data-dog/go-sqlmock to v1.5.0 ( #1661 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-31 12:43:08 +11:00
6b1d9d14e7
build(deps): update module golang.org/x/text to v0.3.5 ( #1654 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-31 10:27:33 +11:00
ccb7e7e955
build(deps): update module go-ldap/ldap/v3 to v3.2.4 ( #1653 )
2021-01-31 09:50:01 +11:00
a089c03fa3
build(deps): update module valyala/fasthttp to v1.19.0 ( #1670 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-30 21:02:31 +11:00
bce802621b
build(deps): update module stretchr/testify to v1.7.0 ( #1669 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-30 20:44:07 +11:00
a35d9de242
build(deps): update github.com/duosecurity/duo_api_golang commit hash to 0e07e9f ( #1646 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-30 19:49:12 +11:00
1448908e40
build(deps): update github.com/asaskevich/govalidator commit hash to 7a23bdc ( #1645 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-30 18:06:58 +11:00
2763aefe81
[BUGFIX] Static Session Expiration Key ( #1564 )
...
* [BUGFIX] Static Session Expiration Key
* keys for session expiration are random for each instance of Authelia
* this is caused by upstream setting it to a random value
* using a temporary bugfix fork of github.com/fasthttp/session to resolve locally
* add some misc doc additions
2020-12-29 12:44:47 +11:00
365304a684
[FEATURE] Add Optional Check for Session Username on VerifyGet ( #1427 )
...
* Adding the Session-Username header to the /api/verify endpoint when using cookie auth will check the value stored in the session store for the username and the header value are the same.
* use strings.EqualFold to compare case insensitively
* add docs
* add unit tests
* invalidate session if it is theoretically hijacked and log it as a warning (can only be determined if the header doesn't match the cookie)
* add example PAM script
* go mod tidy
* go mod bump to 1.15
2020-12-02 10:03:44 +11:00
f1968343c3
[MISC] (deps): Bump github.com/spf13/viper from 1.7.0 to 1.7.1 ( #1251 )
...
Bumps [github.com/spf13/viper](https://github.com/spf13/viper ) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/spf13/viper/releases )
- [Commits](https://github.com/spf13/viper/compare/v1.7.0...v1.7.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-08-04 09:07:38 +10:00
b9eb94f658
[MISC] (deps): Bump github.com/jackc/pgx/v4 from 4.8.0 to 4.8.1 ( #1244 )
...
Bumps [github.com/jackc/pgx/v4](https://github.com/jackc/pgx ) from 4.8.0 to 4.8.1.
- [Release notes](https://github.com/jackc/pgx/releases )
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jackc/pgx/compare/v4.8.0...v4.8.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-07-31 12:10:51 +10:00
07c4e96927
[MISC] (deps): Bump github.com/golang/mock from 1.4.3 to 1.4.4 ( #1242 )
...
Bumps [github.com/golang/mock](https://github.com/golang/mock ) from 1.4.3 to 1.4.4.
- [Release notes](https://github.com/golang/mock/releases )
- [Changelog](https://github.com/golang/mock/blob/master/.goreleaser.yml )
- [Commits](https://github.com/golang/mock/compare/v1.4.3...v1.4.4 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-07-30 09:44:38 +02:00
e0774d1524
[MISC] (deps): Bump github.com/fasthttp/router from 1.2.3 to 1.2.4 ( #1223 )
...
Bumps [github.com/fasthttp/router](https://github.com/fasthttp/router ) from 1.2.3 to 1.2.4.
- [Release notes](https://github.com/fasthttp/router/releases )
- [Commits](https://github.com/fasthttp/router/compare/v1.2.3...v1.2.4 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Co-authored-by: Clément Michaud <clement.michaud34@gmail.com>
2020-07-25 11:29:01 +02:00
fd0de434c4
[MISC] (deps): Bump github.com/jackc/pgx/v4 from 4.7.2 to 4.8.0 ( #1221 )
...
Bumps [github.com/jackc/pgx/v4](https://github.com/jackc/pgx ) from 4.7.2 to 4.8.0.
- [Release notes](https://github.com/jackc/pgx/releases )
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md )
- [Commits](https://github.com/jackc/pgx/compare/v4.7.2...v4.8.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
Co-authored-by: Clément Michaud <clement.michaud34@gmail.com>
2020-07-25 00:26:03 +02:00
ebd391d67a
[MISC] (deps): Bump github.com/fasthttp/session/v2 from 2.2.0 to 2.2.1 ( #1219 )
...
Bumps [github.com/fasthttp/session/v2](https://github.com/fasthttp/session ) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/fasthttp/session/releases )
- [Commits](https://github.com/fasthttp/session/compare/v2.2.0...v2.2.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-07-24 23:43:11 +02:00
3ae95e6bf0
[MISC] (deps): Bump github.com/fasthttp/session/v2 from 2.1.1 to 2.2.0 ( #1217 )
...
Bumps [github.com/fasthttp/session/v2](https://github.com/fasthttp/session ) from 2.1.1 to 2.2.0.
- [Release notes](https://github.com/fasthttp/session/releases )
- [Commits](https://github.com/fasthttp/session/compare/v2.1.1...v2.2.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-07-21 12:11:12 +10:00
9134b0aa8e
[MISC] (deps): Bump github.com/fasthttp/router from 1.2.2 to 1.2.3 ( #1216 )
...
Bumps [github.com/fasthttp/router](https://github.com/fasthttp/router ) from 1.2.2 to 1.2.3.
- [Release notes](https://github.com/fasthttp/router/releases )
- [Commits](https://github.com/fasthttp/router/compare/v1.2.2...v1.2.3 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-07-21 11:37:22 +10:00
0b18d08f01
[MISC] (deps): Bump github.com/go-ldap/ldap/v3 from 3.2.2 to 3.2.3 ( #1213 )
...
Bumps [github.com/go-ldap/ldap/v3](https://github.com/go-ldap/ldap ) from 3.2.2 to 3.2.3.
- [Release notes](https://github.com/go-ldap/ldap/releases )
- [Commits](https://github.com/go-ldap/ldap/compare/v3.2.2...v3.2.3 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Co-authored-by: dependabot-preview[bot] <27856297+dependabot-preview[bot]@users.noreply.github.com>
2020-07-20 12:05:19 +10:00
renovate[bot]
James Elliott
Amir Zarrinkafsh
dependabot-preview[bot]