2dcfc0b04c
feat(handlers): authz authrequest authelia url ( #5181 )
...
This adjusts the AuthRequest Authz implementation behave similarly to the other implementations in as much as Authelia can return the relevant redirection to the proxy and the proxy just utilizes it if possible. In addition it swaps the HAProxy examples over to the ForwardAuth implementation as that's now supported.
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-04-08 14:48:55 +10:00
3b52ddb137
docs: add adaptation blurbs ( #5163 )
...
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-04-08 10:00:36 +10:00
19d1b1bbcb
docs: fix gitea example ( #5156 )
...
Fixes the gitea example and a few other minor issues.
Signed-off-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-04-02 13:12:01 +10:00
9fe2ed9a46
docs(oidc): firezone integration ( #5125 )
...
This adds a Firezone VPN integration with OpenID Connect 1.0.
2023-03-28 20:29:13 +11:00
154110d4d9
docs: correct the link to the docs ( #5112 )
2023-03-22 13:55:31 +10:00
0bf40f63ea
docs(oidc): minio integration ( #5100 )
...
Add MinIO OpenID Connect 1.0 documentation.
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-03-21 11:21:23 +11:00
b03c1d0be2
docs: include pull request review checklist ( #5094 )
...
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2023-03-20 15:03:52 +11:00
ae719a8e51
docs: include hardening in measures ( #5093 )
2023-03-20 12:30:12 +10:00
0fb5ac78a7
docs: misc improvements ( #5092 )
...
* docs: misc improvements
* docs: misc improvements
2023-03-20 11:25:21 +11:00
d5a4de2d98
docs: misc fixes ( #5088 )
2023-03-19 16:57:26 +10:00
a2b3cbd794
docs: openssf best practices ( #5079 )
...
* docs: openssf best practices
* docs: update csp
* docs: update sponsors and governance
2023-03-19 16:29:12 +10:00
a048c48da7
docs: misago oidc ( #5024 )
...
This adds Misago integration docs for OpenID Connect.
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-03-14 08:51:13 +11:00
482f23b506
docs: gen ( #5054 )
2023-03-12 09:33:40 +11:00
fdd9901361
docs: add accessibility resolution recommendations ( #5046 )
2023-03-09 13:03:39 +11:00
e593ab5916
docs: bump deps ( #5043 )
2023-03-08 12:10:38 +11:00
3306c42cc6
docs: accessibility guidelines ( #5033 )
2023-03-06 20:17:57 +11:00
ff6be40f5e
feat(oidc): pushed authorization requests ( #4546 )
...
This implements RFC9126 OAuth 2.0 Pushed Authorization Requests. See https://datatracker.ietf.org/doc/html/rfc9126 for the specification details.
2023-03-06 14:58:50 +11:00
0565be3db1
docs: faq ( #5032 )
2023-03-06 11:32:06 +11:00
fca8e2130a
docs: update integration docs ( #4986 )
2023-03-04 15:53:48 +11:00
b9a6856ff5
fix(logging): injected time format inconsistent ( #5004 )
...
This fixes an issue where the injected log time format is inconsistent with a normalized time format. This adjusts it to use a RFC3339 format.
2023-02-28 20:40:04 +11:00
f62b4d4cd3
docs: update ngnix docs ( #4980 )
2023-02-22 15:26:10 +11:00
8253b44e5d
docs: update swag docs ( #4979 )
2023-02-22 15:11:11 +11:00
891f1de9f2
refactor(commands): x509 bundling ( #4942 )
...
This adds another bundling mode to the certificate command.
2023-02-17 14:29:07 +11:00
ad689275d3
docs: improve gitea oidc guidance ( #4808 )
...
Make the non-obvious relationship between the Gitea `Authentication Name` and the path of the redirect URI explicit.
Signed-off-by: James Hillyerd <james@hillyerd.com>
2023-02-13 07:49:43 +11:00
8e4b660f15
refactor: certs ( #4912 )
...
This refactors the suites to use a Enterprise Root CA PKI signed certificate so the CA public certificate can be trusted. This is particularly useful for webauthn in Chrome.
2023-02-11 14:11:40 +11:00
e9fd4160e4
docs: add important note for implicit consent ( #4901 )
2023-02-08 13:51:23 +11:00
2e6d17ba8a
feat(configuration): rfc2307bis implementation ( #4900 )
...
This adds configuration defaults for RFC2307bis LDAP implementations such as OpenLDAP with the RFC2307bis LDIF which should service most user needs.
2023-02-08 13:35:57 +11:00
d1147f9ac4
docs: refactor oidc config docs ( #4892 )
2023-02-08 01:29:43 +11:00
726850fe43
refactor: add some more useful templating funcs ( #4891 )
2023-02-08 01:28:09 +11:00
a7ccf3652f
docs: fix rfc references and fix misc issues ( #4879 )
2023-02-05 18:11:30 +11:00
64312c644a
docs: fix env values ( #4873 )
2023-02-03 11:27:23 +11:00
d101b2aa51
docs: use go 1.19.5 ( #4872 )
2023-02-03 10:45:50 +11:00
370a3b1e8d
build: update to go 1.20 ( #4866 )
2023-02-02 21:19:28 +11:00
e408cb19b1
test: adjust tests and docs to be similar ( #4856 )
2023-02-02 18:13:18 +11:00
598ea2bb19
feat(configuration): disallow public suffix domains ( #4855 )
...
This adds a check to the domains configuration to ensure the domain value is not part of the public suffix list at https://publicsuffix.org . These domains are special and users cannot write cookies with this domain value, this makes them unusable with Authelia and this more readily makes that apparent.
2023-02-02 16:34:49 +11:00
7e285f461f
docs: add common oidc shortcode and update ( #4862 )
2023-02-02 12:30:06 +11:00
a2965183f7
docs: fix missing yaml example ( #4853 )
2023-01-31 10:28:00 +11:00
9eb9e29b13
docs: fix typo ( #4842 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-01-29 10:01:41 +11:00
b3b24f4479
docs: fix ip addresses ( #4843 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-01-29 09:25:32 +11:00
deb47264d5
docs: gen ( #4833 )
2023-01-26 19:04:46 +11:00
8cd88e83c1
docs: fix typo ( #4832 )
2023-01-26 18:39:56 +11:00
1ac4321013
docs: fix misc issues ( #4831 )
2023-01-26 16:38:08 +11:00
ea9ec80af0
docs: add missing features ( #4830 )
2023-01-26 16:22:56 +11:00
d653bc9c0b
docs: add pre-release / beta info ( #4829 )
2023-01-26 16:14:06 +11:00
a1517f18e5
docs: add version to the docs data misc generator ( #4827 )
2023-01-26 14:17:50 +11:00
b42a84340d
docs: env adjustment ( #4826 )
2023-01-26 13:23:02 +11:00
8319778b5d
docs: adjust key generators ( #4825 )
2023-01-26 11:24:06 +11:00
a33b37a9cd
docs: make several openid connect areas uniform ( #4824 )
2023-01-26 10:59:18 +11:00
65705a646d
feat(server): customizable authz endpoints ( #4296 )
...
This allows users to customize the authz endpoints.
Closes #2753 , Fixes #3716
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2023-01-25 20:36:40 +11:00
ce65764948
docs: fix copy paste typo ( #4815 )
...
Fixed a copy-paste bug in the description of the idle server timeout. This change only fixes that bug, but this part of the documentation need better explaining. (Something called "idle" in the "Server Timeouts" section of course configures server idle timeout, but what is server in this context, when happens when the time defined in idle expires, etc.)
2023-01-24 09:58:57 +11:00
a566c16d08
feat(web): privacy policy url ( #4625 )
...
This allows users to customize a privacy policy URL at the bottom of the login view.
Closes #2639
2023-01-22 19:58:07 +11:00
d16f63f01a
docs: blog 4.38 pre-release notes ( #4789 )
2023-01-21 00:18:00 +11:00
96c6a76ea5
docs(deps): bump deps ( #4787 )
2023-01-18 13:08:12 +11:00
d696593d6d
docs: fix incorrect env name ( #4768 )
2023-01-15 12:02:38 +11:00
98604dc7eb
docs: fix links and npm install command ( #4755 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-01-12 22:02:13 +11:00
8b29cf7ee8
feat(session): multiple session cookie domains ( #3754 )
...
This adds support to configure multiple session cookie domains.
Closes #1198
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2023-01-12 21:57:44 +11:00
3182925bef
docs: elaborate on version policy ( #4707 )
2023-01-05 18:51:49 +11:00
adaf069eab
feat(oidc): per-client pkce enforcement policy ( #4692 )
...
This implements a per-client PKCE enforcement policy with the ability to enforce that it's used, and the specific challenge mode.
2023-01-04 02:03:23 +11:00
08cda5d165
refactor: include additional important template funcs ( #4690 )
...
* refactor: include additional important template funcs
* fix: use of interface
* test: improve test cases
2023-01-04 00:11:10 +11:00
9282b0512f
docs: improve server override docs ( #4687 )
2023-01-03 22:44:14 +11:00
1c3219e93f
perf(server): cached openapi document ( #4674 )
...
This should lead to a small performance gain by caching the openapi.yml with etags as well as eliminating the use of nonce crypto generation when not required.
2023-01-03 14:49:02 +11:00
acaadd81cb
docs: adjust image links ( #4680 )
...
* docs: adjust image links
* docs: adjust envoy logo
2023-01-03 12:27:02 +11:00
beda108d86
docs: update caddy logo ( #4679 )
2023-01-03 12:10:40 +11:00
8a4c65b548
docs: fix mistakes in swag docs ( #4665 )
...
Co-authored-by: Chris <=>
2022-12-31 10:45:55 +11:00
f685f247cf
feat(notification): important events notifications ( #4644 )
...
This adds important event notifications.
2022-12-27 19:59:08 +11:00
3b699b8604
build(deps): bump docs deps ( #4636 )
2022-12-24 18:10:48 +11:00
55a6794370
feat(templates): templating functions ( #4635 )
...
This adds several functions which are available in most areas that use templates.
2022-12-23 21:58:54 +11:00
0bb657e11c
refactor(notifier): utilize smtp lib ( #4403 )
...
This drops a whole heap of code we were maintaining in favor of a SMTP library.
Closes #2678
2022-12-23 16:06:49 +11:00
38ca5f06d4
docs: update privacy and versioning policy ( #4632 )
2022-12-23 15:37:42 +11:00
d7ab3bb633
feat(commands): storage import/export commands ( #4545 )
...
This adds commands to export and import TOTP configurations and Webauthn devices as YAML.
2022-12-23 15:00:23 +11:00
0130edb870
feat(configuration): env config file discovery ( #4618 )
...
This allows Authelia to discover config files and config options via environment variables.
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-12-23 11:03:50 +11:00
7663a68a2b
docs: add password regulation fail2ban docs ( #4630 )
...
Adds lines to fail2ban regex to catch password reset attempts and email spam.
2022-12-23 07:39:41 +11:00
9400b1c54d
docs: add gdpr relevant information ( #4624 )
...
* docs: add gdpr relevant information
* docs: add gdpr relevant information
2022-12-22 21:20:36 +11:00
cc1e58e004
feat(configuration): load config from directory ( #4616 )
...
This allows specifying paths to a combination of files and directories with the --config option provided none of the specified file paths reside directly inside one of the specified directory paths. The directory paths are not recursive, and load .yml and .yaml files at this time.
2022-12-22 17:34:20 +11:00
1a849a37bd
docs: fix misc mistakes and adjust placeholders ( #4614 )
2022-12-22 11:39:59 +11:00
e3e31e3cbc
refactor(commands): command context ( #4539 )
...
This moves a lot of machinery for commands into a context.Context with other struct values. This allows for PreRunE's to reliably load the configuration and avoids use of global vars.
2022-12-22 11:21:29 +11:00
d3d87ffe30
feat(configuration): glauth ldap implementation ( #4499 )
...
This adds a GLAuth LDAP implementation which purely adds sane defaults for GLAuth. There are no functional differences just when the implementation option is set to 'glauth' sane defaults which should be sufficient for most use cases are set. See the documentation at https://www.authelia.com/r/ldap#defaults for more details.
2022-12-21 22:14:22 +11:00
5b8b3145ad
feat(configuration): lldap implementation ( #4498 )
...
This adds a lldap LDAP implementation which purely adds sane defaults for lldap. There are no functional differences just when the implementation option is set to 'lldap' sane defaults which should be sufficient for most use cases are set. See the documentation at https://www.authelia.com/r/ldap#defaults for more details.
2022-12-21 21:51:25 +11:00
d67554ab88
feat(authentication): ldap time replacements ( #4483 )
...
This adds and utilizes several time replacements for both specialized LDAP implementations.
Closes #1964 , Closes #1284
2022-12-21 21:31:21 +11:00
d0d80b4f66
feat(configuration): freeipa ldap implementation ( #4482 )
...
This adds a FreeIPA LDAP implementation which purely adds sane defaults for FreeIPA. There are no functional differences just when the implementation option is set to 'freeipa' sane defaults which should be sufficient for most use cases are set. See the documentation at https://www.authelia.com/r/ldap#defaults for more details.
Closes #2177 , Closes #2161
2022-12-21 21:07:00 +11:00
c7f4d5999d
feat(configuration): file filters ( #4515 )
...
This adds experimental file filters which are not guaranteed under our stability policies. These filters take effect after reading the files and before parsing their content.
2022-12-21 20:48:14 +11:00
6a2dff7d6a
docs: fix link style ( #4598 )
2022-12-19 15:19:46 +11:00
859b403146
docs: update docs ( #4597 )
2022-12-19 15:04:02 +11:00
8d1f8fcbd7
docs: fix incorrect command doc ( #4579 )
2022-12-16 15:12:04 +11:00
aa61058ca9
docs: improve svg color accuracy ( #4578 )
...
This improves the color accuracy of the Illustrator files and SVG's.
2022-12-15 21:36:26 +11:00
fb62c33129
docs: fix branding svgs and add ai branding ( #4577 )
...
This adds Adobe Illustrator branding files, and fixes the SVG's.
2022-12-15 20:15:29 +11:00
28cd927f88
fix(authentication): msad dlsg excluded from default filter ( #4569 )
...
The groups filter narrowing for Active Directory to purposefully exclude distribution groups (which are not designed to act as security groups) unintentionally removed DLSG's from the filter results. This effectively reverts that allowing both DLSG's and GUSG's to be returned by default.
Fixes #4551 , Fixes #4528
2022-12-14 14:57:32 +11:00
93c0d65830
docs: spelling fix ( #4534 )
...
Corrected spelling of "postgres" in server config example.
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-12-10 10:16:31 +11:00
d9d63ea2b3
docs: storage ref clarity ( #4530 )
2022-12-09 22:38:56 +11:00
2c270a21bf
docs: storage ref clarity ( #4529 )
2022-12-09 21:57:12 +11:00
cfdd036590
docs: improve mariadb upgrade docs ( #4527 )
2022-12-09 19:29:41 +11:00
32b3ce65f2
docs: improve database docs ( #4526 )
...
* docs: improve database docs
* docs: improve database docs
2022-12-09 18:24:02 +11:00
df63f08980
docs: bump versions ( #4524 )
2022-12-09 10:42:29 +11:00
017be7b4a4
docs: generate ( #4512 )
2022-12-08 22:04:44 +11:00
b10a0ae6b7
docs: update deps ( #4505 )
2022-12-07 23:55:16 +11:00
b4d9e21387
docs: fix misc url issues ( #4503 )
2022-12-07 20:43:02 +11:00
ee50e5580c
docs: fix totp cli examples ( #4467 )
...
Updated the documentation with the missing user keyword
2022-12-04 17:29:05 +11:00
442cb272d9
docs: update proxy docs ( #4449 )
2022-11-30 09:12:50 +11:00
fbe42a91c3
docs: bump dependencies ( #4441 )
2022-11-28 16:02:40 +11:00
6f21a0d1cd
docs: update index ( #4438 )
2022-11-27 16:19:47 +11:00
James Elliott
Joakim Pettersen
Trung Le
boomam
tetricky
James Hillyerd
Krasimir Nedelchev
electrofloat
Dinh Bao Dang
Manuel Nuñez
Chris D
Ohelig
Austin Alvarado
Jonas Lewin