ef3c2faeb5
fix(authorization): configuration reports 2fa disabled with 2fa oidc clients ( #2089 )
...
This resolves an issue where if you have zero two_factor ACL rules but enabled two_factor OIDC clients, 2FA is reported as disabled.
2021-06-18 11:38:01 +10:00
4dce8f9496
perf(authorizer): preload access control lists ( #1640 )
...
* adjust session refresh to always occur (for disabled users)
* feat: adds filtering option for Request Method in ACL's
* simplify flow of internal/authorization/authorizer.go's methods
* implement query string checking
* utilize authorizer.Object fully
* make matchers uniform
* add tests
* add missing request methods
* add frontend enhancements to handle request method
* add request method to 1FA Handler Suite
* add internal ACL representations (preparsing)
* expand on access_control next
* add docs
* remove unnecessary slice for network names and instead just use a plain string
* add warning for ineffectual bypass policy (due to subjects)
* add user/group wildcard support
* fix(authorization): allow subject rules to match anonymous users
* feat(api): add new params
* docs(api): wording adjustments
* test: add request method into testing and proxy docs
* test: add several checks and refactor schema validation for ACL
* test: add integration test for methods acl
* refactor: apply suggestions from code review
* docs(authorization): update description
2021-03-05 15:18:31 +11:00
5c4edf2f4d
[FEATURE] Support for subject combinations in ACLs ( #1142 )
2020-06-25 18:22:42 +10:00
aebcb38f90
[MISC] Fix goimports ordering for repo ( #947 )
2020-05-01 16:56:42 +10:00
951dc71325
[FEATURE] Support multiple domains and multiple subjects in ACLs ( #869 )
...
* added support for listing multiple domains and multiple subjects
* updated documentation to show use of multiple domains and subjects
* updated config.template.yml to display multiple domains as a list
* updated config.template.yml to display multiple subjects as a list
* updated docs/configuration/access-control.md to display multiple domains as a list
* updated docs/configuration/access-control.md to display multiple subjects as a list
* removed redundant check that always returned true
* Commentary definition for `weak`
2020-04-16 10:18:11 +10:00
de2c5836fd
[Buildkite] Introduce CI linting with golangci-lint and reviewdog ( #832 )
...
* [Buildkite] Introduce CI linting with golangci-lint and reviewdog
* Initial pass of golangci-lint
* Add gosimple (megacheck) recommendations
* Add golint recommendations
* [BUGFIX] Migrate authentication traces from v3 mongodb
* Add deadcode recommendations
* [BUGFIX] Fix ShortTimeouts suite when run in dev workflow
* Add unused recommendations
* Add unparam recommendations
* Disable linting on unfixable errors instead of skipping files
* Adjust nolint notation for unparam
* Fix ineffectual assignment to err raised by linter.
* Export environment variable in agent hook
* Add ineffassign recommendations
* Add staticcheck recommendations
* Add gocyclo recommendations
* Adjust ineffassign recommendations
Co-authored-by: Clement Michaud <clement.michaud34@gmail.com>
2020-04-09 11:05:17 +10:00
c578c8651d
[MISC] Add unit tests to authorization module and trace logs. ( #638 )
...
This aims to help debug #637 .
2020-02-19 09:15:09 +11:00
d1d02d9eae
[FIX] Redirect to default URL after 1FA when default policy is one_factor. ( #611 )
...
* Redirect to default URL after 1FA when default policy is one_factor.
User is now redirected to the default redirection URL after 1FA if
the default policy is set to one_factor and there is no target URL
or if the target URL is unsafe.
Also, if the default policy is set to one_factor and the user is already
authenticated, if she visits the login portal, the 'already authenticated'
view is displayed with a logout button.
This fixes #581 .
* Update users.yml
* Fix permissions issue causing suite test failure
2020-02-05 08:18:02 +11:00
fabb76754e
Rename org from clems4ever to authelia
...
Also fix references from config.yml to configuration.yml
2019-12-24 13:14:52 +11:00
3b2d733367
Move source code into internal directory to follow standard project layout.
...
https://github.com/golang-standards/project-layout
2019-11-17 16:30:33 +01:00
James Elliott
Philipp Staiger
Amir Zarrinkafsh
Dustin Sweigart
Clément Michaud