ba65a3db82
feat(handlers): authorization header switch via query param to /api/verify ( #1563 )
...
* [FEATURE] Add auth query param to /api/verify (#1353 )
When `/api/verify` is called with `?auth=basic`, use the standard
Authorization header instead of Proxy-Authorization.
* [FIX] Better basic auth error reporting
* [FIX] Return 401 when using basic auth instead of redirecting
* [TESTS] Add tests for auth=basic query param
* [DOCS] Mention auth=basic argument and provide nginx example
* docs: add/adjust basic auth query arg docs for proxies
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2021-02-24 10:35:04 +11:00
4f099b76d7
build(deps): downgrade module github.com/mattn/go-sqlite3 to v1.14.6 ( #1758 )
2021-02-23 14:51:31 +11:00
64b01b2811
build(deps): update mariadb docker tag to v10.5.9 ( #1757 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-23 12:49:16 +11:00
40099edc45
build(deps): update dependency react-scripts to v4.0.3 ( #1756 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-23 10:54:38 +11:00
dc341a3894
build(deps): update dependency eslint-config-prettier to v8 ( #1750 )
...
* build(deps): update dependency eslint-config-prettier to v8
* fix(web): update eslint/prettier config to v8.0
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2021-02-23 10:26:57 +11:00
d000e5dbeb
build(deps): update module github.com/otiai10/copy to v1.5.0 ( #1753 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-23 05:41:51 +11:00
17bf3f860b
build(deps): update osixia/openldap docker tag to v1.5.0 ( #1749 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-22 22:08:23 +11:00
30d45dd3fc
build(deps): update module github.com/sirupsen/logrus to v1.8.0 ( #1747 )
...
* build(deps): update module github.com/sirupsen/logrus to v1.8.0
* go mod tidy
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-02-22 21:52:08 +11:00
b10adf6cf4
build(deps): update module github.com/golang/mock to v1.5.0 ( #1746 )
...
* build(deps): update module github.com/golang/mock to v1.5.0
* build(deps): go mod tidy
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2021-02-22 20:33:17 +11:00
68af1fdfca
build(deps): update module github.com/authelia/session/v2 to v2.4.1 ( #1745 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-22 17:48:10 +11:00
a8f83568c0
build(deps): update dependency query-string to v6.14.0 ( #1744 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-22 17:23:58 +11:00
19a5e28930
build(deps): update dependency eslint-import-resolver-typescript to v2.4.0 ( #1743 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-22 17:05:37 +11:00
0f7891a823
build(deps): update module github.com/valyala/fasthttp to v1.21.0 ( #1755 )
2021-02-22 16:37:40 +11:00
36d02f9cf5
build(deps): update traefik docker tag to v2.4.5 ( #1742 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-22 16:21:43 +11:00
e77ef2d1dc
build(deps): update module github.com/spf13/cobra to v1.1.3 ( #1741 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-22 15:47:07 +11:00
59b3c2cbd8
build(deps): update haproxy docker tag to v2.3.5 ( #1737 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-22 15:06:10 +11:00
582ca4cbb1
ci(buildkite): optimise job to agent assignment ( #1754 )
...
Split out unit-testing jobs to ensure that the workloads are evenly spread.
2021-02-22 14:24:01 +11:00
49aa5e0eb8
ci(buildkite): change to concurrency gates ( #1752 )
...
* ci(buildkite): change to concurrency gates
Continuation of #1751 .
* ci(buildkite): optimise concurrency gates
2021-02-22 12:48:20 +11:00
6daeaf4e47
ci(buildkite): add concurrency limits to build and test steps ( #1751 )
...
Due to the unpredictability of changes that Renovate can submit this PR will allow us to control the number of jobs that will run simultaneously per step.
2021-02-22 11:13:51 +11:00
74721a9f41
feat: go:embed static assets ( #1733 )
...
* feat: go:embed static assets
Go 1.16 introduced the ability to embed files within a generated binary directly with the go tool chain. This simplifies our dependencies and the significantly improves the development workflow for future developers.
Key points to note:
Due to the inability to embed files that do not reside within the local package we need to duplicate our `config.template.yml` within `internal/configuration`.
To avoid issues with the development workflow empty mock files have been included within `internal/server/public_html`. These are substituted with the respective generated files during the CI/CD and build workflows.
* fix(suites): increase ldap suite test timeout
* fix(server): fix swagger asset CSP
2021-02-22 10:07:06 +11:00
8bc7ef5d8f
release: v4.26.2 ( #1736 )
2021-02-22 09:02:15 +11:00
c343e53dd6
build(deps): update dependency @types/node to v14.14.31 ( #1734 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-20 14:55:11 +11:00
afc2af86ed
build(deps): update dependency @types/node to v14.14.30 ( #1732 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-19 14:34:29 +11:00
f411abac1b
build(deps): update dependency @types/node to v14.14.29 ( #1731 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-19 14:13:22 +11:00
1f16f0945a
build(deps): update arm64v8/alpine docker tag to v3.13.2 ( #1727 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-18 14:09:39 +11:00
e8e030ad2f
build(deps): update arm32v7/alpine docker tag to v3.13.2 ( #1729 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-18 12:52:08 +11:00
79b2b742a8
build(deps): update alpine docker tag to v3.13.2 ( #1728 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-18 10:49:39 +11:00
a6215c03b7
build(deps): update dependency @types/node to v14.14.28 ( #1725 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-15 09:45:42 +11:00
2502b40cd6
fix(web): fix otp input box with themes ( #1723 )
...
#1584 introduced a regression due to the way layouts are addressed with [CSS normalization](https://material-ui.com/components/css-baseline/#layout ).
This PR ensures that the OTP input box will remain a `content-box` to avoid any text display and box sizing issues caused by padding.
The OTP input has also been changed to only accept numbers.
Fixes #1720 .
2021-02-13 15:31:57 +11:00
361705738a
build(deps): update dependency @types/react-dom to v17.0.1 ( #1722 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-13 12:26:56 +11:00
056faf8857
build(deps): update dependency @types/react to v17.0.2 ( #1721 )
2021-02-13 11:57:32 +11:00
53c5529d28
build(deps): update dependency @types/node to v14.14.27 ( #1719 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-13 00:30:19 +11:00
2c32343885
release: v4.26.1 ( #1718 )
2021-02-12 22:15:01 +11:00
59fa332088
build(deps): update swagger-ui to v3.43.0 ( #1717 )
2021-02-12 21:16:46 +11:00
683c4a70bf
fix(web): improve 2fa enrollment process ( #1706 )
...
* refactor(web): improve 2fa enrollment process
This PR will change some of the wording and colours for the 2FA processes in order to provide more clarity and address some accessibility issues for end users.
The following is a summary of the changes:
* One-Time Password ⭢ Time-based One-Time Password
* Security Key ⭢ Security Key - U2F
* QRCode ⭢ QR Code
* `Not registered yet?` text to display `Lost device?` if a user has already registered a device of said type
* Change button and text colour in e-mails that Authelia generates
* Change Authelia email footer to be more security conscious
The docs have also been updated to clarify the 2fa device enrollment limitation which only allows users to register one of each device type concurrently.
Closes #1560 .
2021-02-12 16:59:42 +11:00
f188bfb1dc
build(deps): update dependency @types/node to v14.14.26 ( #1716 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-12 14:32:41 +11:00
8c79e6beca
ci(buildkite): utilise conventional-changelog for release notes ( #1714 )
...
Instead of generating our changelog based on crude modifications utilising git log we now utilise conventional-changelog.
conventional-changelog utilises the angular commit structure to categorise and display the changelog for 3 types (fix,feat,perf) and each of the change scopes are identified in the changelog too.
An example of the output for v4.26.0 can be found below:
# [4.26.0](https://github.com/authelia/authelia/compare/v4.25.2...v4.26.0 ) (2021-02-02)
### Bug Fixes
* **handlers:** refresh user details on all domains ([#1642 ](https://github.com/authelia/authelia/issues/1642 )) ([60ff16b60ff16b518
2021-02-12 14:00:36 +11:00
371d252ff6
build(deps): update dependency typescript to v4.1.5 ( #1713 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-11 09:56:47 +11:00
de3a67d300
build(deps): update dependency @types/chai to v4.2.15 ( #1712 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-11 09:33:21 +11:00
7b328e729d
build(deps): update dependency typescript to v4.1.4 ( #1710 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-10 14:11:41 +11:00
2d978f6032
build(deps): update dependency @craco/craco to v6.1.1 ( #1705 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-07 12:55:54 +11:00
1733762f68
docs: add knnnrd as a contributor ( #1703 )
...
* docs: update README.md [skip ci]
* docs: update .all-contributorsrc [skip ci]
Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-02-05 14:41:39 +11:00
b963e3c9a0
docs: add laurivosandi as a contributor ( #1702 )
...
* docs: update README.md [skip ci]
* docs: update .all-contributorsrc [skip ci]
Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-02-05 14:37:34 +11:00
eec6a626af
docs: add TheCatLady as a contributor ( #1701 )
...
* docs: update README.md [skip ci]
* docs: update .all-contributorsrc [skip ci]
* fix skipCi option
Co-authored-by: allcontributors[bot] <46447321+allcontributors[bot]@users.noreply.github.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-02-05 14:30:44 +11:00
9e1b6ba82e
ci: consider .all-contributorsrc a docs file for the pipeline ( #1704 )
...
* ci: consider .all-contributorsrc a docs file for the pipeline
This change prevents the unit/integration testing and image deployment similar to other docs only changes.
2021-02-05 14:26:16 +11:00
f60af69187
build(deps): update swagger-ui to v3.42.0 ( #1700 )
2021-02-05 10:21:18 +11:00
a1eb547620
build(deps): update dependency @types/node to v14.14.25 ( #1697 )
2021-02-05 07:50:25 +11:00
6ec73901db
build(deps): update dependency chai to v4.3.0 ( #1698 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-05 06:36:08 +11:00
aac5170ddc
ci: remove dependabot ( #1696 )
...
da5892faad
2021-02-04 13:06:23 +11:00
0b4f54081e
build(deps): update dependency @types/node to v14.14.24 ( #1695 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-04 12:19:50 +11:00
ThinkChaos
Amir Zarrinkafsh
renovate[bot]
James Elliott
allcontributors[bot]
