7663a68a2b
docs: add password regulation fail2ban docs ( #4630 )
...
Adds lines to fail2ban regex to catch password reset attempts and email spam.
2022-12-23 07:39:41 +11:00
9400b1c54d
docs: add gdpr relevant information ( #4624 )
...
* docs: add gdpr relevant information
* docs: add gdpr relevant information
2022-12-22 21:20:36 +11:00
cc1e58e004
feat(configuration): load config from directory ( #4616 )
...
This allows specifying paths to a combination of files and directories with the --config option provided none of the specified file paths reside directly inside one of the specified directory paths. The directory paths are not recursive, and load .yml and .yaml files at this time.
2022-12-22 17:34:20 +11:00
1a849a37bd
docs: fix misc mistakes and adjust placeholders ( #4614 )
2022-12-22 11:39:59 +11:00
e3e31e3cbc
refactor(commands): command context ( #4539 )
...
This moves a lot of machinery for commands into a context.Context with other struct values. This allows for PreRunE's to reliably load the configuration and avoids use of global vars.
2022-12-22 11:21:29 +11:00
d3d87ffe30
feat(configuration): glauth ldap implementation ( #4499 )
...
This adds a GLAuth LDAP implementation which purely adds sane defaults for GLAuth. There are no functional differences just when the implementation option is set to 'glauth' sane defaults which should be sufficient for most use cases are set. See the documentation at https://www.authelia.com/r/ldap#defaults for more details.
2022-12-21 22:14:22 +11:00
5b8b3145ad
feat(configuration): lldap implementation ( #4498 )
...
This adds a lldap LDAP implementation which purely adds sane defaults for lldap. There are no functional differences just when the implementation option is set to 'lldap' sane defaults which should be sufficient for most use cases are set. See the documentation at https://www.authelia.com/r/ldap#defaults for more details.
2022-12-21 21:51:25 +11:00
d67554ab88
feat(authentication): ldap time replacements ( #4483 )
...
This adds and utilizes several time replacements for both specialized LDAP implementations.
Closes #1964 , Closes #1284
2022-12-21 21:31:21 +11:00
d0d80b4f66
feat(configuration): freeipa ldap implementation ( #4482 )
...
This adds a FreeIPA LDAP implementation which purely adds sane defaults for FreeIPA. There are no functional differences just when the implementation option is set to 'freeipa' sane defaults which should be sufficient for most use cases are set. See the documentation at https://www.authelia.com/r/ldap#defaults for more details.
Closes #2177 , Closes #2161
2022-12-21 21:07:00 +11:00
c7f4d5999d
feat(configuration): file filters ( #4515 )
...
This adds experimental file filters which are not guaranteed under our stability policies. These filters take effect after reading the files and before parsing their content.
2022-12-21 20:48:14 +11:00
859b403146
docs: update docs ( #4597 )
2022-12-19 15:04:02 +11:00
8d1f8fcbd7
docs: fix incorrect command doc ( #4579 )
2022-12-16 15:12:04 +11:00
fb62c33129
docs: fix branding svgs and add ai branding ( #4577 )
...
This adds Adobe Illustrator branding files, and fixes the SVG's.
2022-12-15 20:15:29 +11:00
28cd927f88
fix(authentication): msad dlsg excluded from default filter ( #4569 )
...
The groups filter narrowing for Active Directory to purposefully exclude distribution groups (which are not designed to act as security groups) unintentionally removed DLSG's from the filter results. This effectively reverts that allowing both DLSG's and GUSG's to be returned by default.
Fixes #4551 , Fixes #4528
2022-12-14 14:57:32 +11:00
93c0d65830
docs: spelling fix ( #4534 )
...
Corrected spelling of "postgres" in server config example.
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-12-10 10:16:31 +11:00
d9d63ea2b3
docs: storage ref clarity ( #4530 )
2022-12-09 22:38:56 +11:00
2c270a21bf
docs: storage ref clarity ( #4529 )
2022-12-09 21:57:12 +11:00
cfdd036590
docs: improve mariadb upgrade docs ( #4527 )
2022-12-09 19:29:41 +11:00
32b3ce65f2
docs: improve database docs ( #4526 )
...
* docs: improve database docs
* docs: improve database docs
2022-12-09 18:24:02 +11:00
017be7b4a4
docs: generate ( #4512 )
2022-12-08 22:04:44 +11:00
b4d9e21387
docs: fix misc url issues ( #4503 )
2022-12-07 20:43:02 +11:00
ee50e5580c
docs: fix totp cli examples ( #4467 )
...
Updated the documentation with the missing user keyword
2022-12-04 17:29:05 +11:00
442cb272d9
docs: update proxy docs ( #4449 )
2022-11-30 09:12:50 +11:00
eba63f1359
docs: update index ( #4437 )
2022-11-27 16:07:08 +11:00
1bab80f6b6
docs: update ( #4433 )
2022-11-25 23:55:25 +11:00
3e4ac7821d
refactor: remove pre1 migration path ( #4356 )
...
This removes pre1 migrations and improves a lot of tooling.
2022-11-25 23:44:55 +11:00
203cb19c2f
fix(configuration): missing warning about session domain ( #4417 )
...
This adds some helpful configuration warnings and fixes a few misconfiguration issues.
2022-11-24 10:16:23 +11:00
ef28345f05
docs: fix grammar ( #4334 )
...
A fixed grammatical issue with the docker deployment page.
2022-11-21 06:27:43 +11:00
194d34106e
fix(storage): schema inconsistency ( #4262 )
2022-11-19 16:47:09 +11:00
9aec643bc1
docs: clarify cloudflare docs ( #4373 )
2022-11-14 14:37:34 +11:00
02920c18be
refactor: few misc issues ( #4330 )
2022-11-04 22:24:10 +11:00
e97a848600
refactor: ldap filter ( #4329 )
2022-11-04 13:42:28 +11:00
500410fac3
refactor(commands): include rfc3986 charset ( #4328 )
...
This includes the RFC3986 unreserved charset as an option, and allows the '-upper' and '-lower' suffix for alphabetic inclusive charsets.
2022-11-04 11:32:49 +11:00
95709b7069
docs: update proxy versions ( #4310 )
2022-11-01 10:09:46 +11:00
6b2f713e10
fix(configuration): certificate_chains can't be defined as secrets ( #4302 )
...
This fixes an issue where certificate_chain values can't be defined as secrets. While not expressly needed for certificates, it's more convenient and less prone to error than defining a environment variable with the contents.
2022-10-31 11:52:14 +11:00
c16456bd6d
docs: gen ( #4293 )
2022-10-28 22:47:34 +11:00
dfd196460f
refactor: close database connections on shutdown ( #4255 )
...
This explicitly closes the database connection during shutdown.
2022-10-25 16:12:42 +11:00
55a7f8112d
Update a broken link in the docs ( #4250 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-10-24 06:58:11 +11:00
12e3cd56b1
docs: refactor generator guides ( #4244 )
2022-10-23 18:09:19 +11:00
296dc9ecc5
docs: fix missing secret links ( #4242 )
...
* docs: fix missing secret links
* docs: fix missing secret links
* docs: fix missing doc
2022-10-23 14:42:44 +11:00
6654fd6130
refactor: update users_database examples ( #4240 )
2022-10-23 08:12:16 +11:00
a6268e3c11
docs: grammar fixes for forwarded headers ( #4237 )
...
There were minor typos, and a phrase with no ending.
2022-10-23 07:19:11 +11:00
00ab279336
refactor: csp gen ( #4163 )
...
Generator for CSP.
2022-10-22 22:19:32 +11:00
69c4c02d03
feat(storage): tls connection support ( #4233 )
...
This adds support to PostgreSQL and MySQL to connect via TLS via the standard TLS configuration options.
2022-10-22 19:27:59 +11:00
1ea29cb2c2
feat(storage): unix socket support ( #4231 )
...
Support for unix sockets for MySQL and PostgreSQL.
2022-10-22 16:41:27 +11:00
9532823a99
feat(configuration): mtls clients ( #4221 )
...
This implements mTLS support for LDAP, Redis, and SMTP. Specified via the tls.certificate_chain and tls.private_key options.
Closes #4044
2022-10-21 19:41:33 +11:00
3113ec2b80
feat(commands): random character generator ( #4213 )
...
This improves all random character generator command usages to be nearly identical and reuse a large block of code. It also improves several functions to give more options when randomly generating outputs.
2022-10-21 07:41:46 +11:00
3f8958d1b1
docs(oidc): fix missing link ( #4212 )
2022-10-20 15:42:22 +11:00
9e29295bdf
docs(oidc): adjust client secret information ( #4211 )
2022-10-20 15:27:09 +11:00
248f1d49d4
feat(oidc): hashed client secrets ( #4026 )
...
Allow use of hashed OpenID Connect client secrets.
2022-10-20 14:21:45 +11:00
3aaca0604f
feat(oidc): implicit consent ( #4080 )
...
This adds multiple consent modes to OpenID Connect clients. Specifically it allows configuration of a new consent mode called implicit which never asks for user consent.
2022-10-20 13:16:36 +11:00
24e41aed84
feat(commands): add webauthn device commands ( #3671 )
2022-10-19 18:17:55 +11:00
52102eea8c
feat(authorization): query parameter filtering ( #3990 )
...
This allows for advanced filtering of the query parameters in ACL's.
Closes #2708
2022-10-19 14:09:22 +11:00
d0c1b32125
docs: fix proxmox and misc links ( #4145 )
...
* docs: fix proxmox and misc links
* docs: adjust
2022-10-18 21:29:48 +11:00
a471c31d74
docs: update seafile docs ( #4151 )
...
This fixes an issue with the Seafile OIDC integration docs.
2022-10-18 21:27:38 +11:00
a894e272cb
docs: add synology dsm docs ( #4167 )
2022-10-18 21:22:13 +11:00
a0b2e78e5d
feat(authentication): file case-insensitive and email search ( #4194 )
...
This allows both case-insensitive and email searching for the file auth provider.
Closes #3383
2022-10-18 11:57:08 +11:00
d610874be4
feat(authentication): disabled users in yaml file ( #4193 )
...
Allows setting users as disabled.
2022-10-18 09:10:53 +11:00
84cb457cb0
feat(authentication): file provider hot reload ( #4188 )
...
This adds hot reloading to the file auth provider.
2022-10-17 22:31:23 +11:00
3a70f6739b
feat(authentication): file password algorithms ( #3848 )
...
This adds significant enhancements to the file auth provider including multiple additional algorithms.
2022-10-17 21:51:59 +11:00
8eadf72dc7
docs: rule matching concepts ( #4154 )
...
* docs: rule matching concepts
* docs: add named regex note
* docs: adjust wording
* docs: expand match table
* docs: simplify
* docs: fix link
* docs: fix link
2022-10-16 14:11:43 +11:00
75a3d8a3bc
docs: update misc notes ( #4184 )
2022-10-16 08:37:31 +11:00
b27fd4b7fc
docs: update client secret encoding notes ( #4183 )
2022-10-16 08:30:02 +11:00
ef61acb3a9
docs: misc nginx fixes ( #4153 )
2022-10-09 12:48:42 +11:00
644616d8b1
docs: npm custom locations ( #4152 )
2022-10-09 12:09:45 +11:00
ab2bcfd677
docs: adjust nginx example ( #4134 )
2022-10-08 18:45:38 +11:00
ef0e4975fd
docs: add nginx proxy manager details ( #4147 )
...
Adds NPM docs.
2022-10-08 12:43:26 +11:00
3107e493e7
refactor: adjust defaults ( #4137 )
...
* refactor: adjust defaults
* refactor: adjust level
* refactor: adjust level
* refactor: fix templates
2022-10-07 13:52:01 +11:00
b21aa73fd4
docs: fix url ref ( #4130 )
2022-10-05 09:44:21 +11:00
f80edd2f4a
docs: fix istio docs and readme ( #4120 )
2022-10-03 15:57:25 +11:00
21a24ac1e1
docs: fix envoy docs ( #4119 )
2022-10-03 15:28:31 +11:00
3f39914c8f
refactor: private key decoding and generators ( #4116 )
2022-10-03 11:52:29 +11:00
ab307397e9
docs: adjust guidelines ( #4113 )
...
Small adjustments to the guidelines layout and additional guidelines added.
2022-10-02 14:32:16 +11:00
3822286c3b
docs: add envoy docs ( #3789 )
...
Adds and adjusts documentation for Envoy.
2022-10-02 13:59:09 +11:00
c8fa19e6bd
feat(notification): add disable_starttls option ( #3855 )
...
This adds a boolean option to SMTP which disables StartTLS for SMTP servers that ignore standards.
2022-10-02 13:51:19 +11:00
6810c91d34
feat(oidc): issuer jwk certificates ( #3989 )
...
This allows for JWKs to include certificate information, either signed via Global PKI, Enterprise PKI, or self-signed.
2022-10-02 13:07:40 +11:00
66ea374227
feat(authentication): permit feature detection failures ( #4061 )
...
This adds a configuration option which permits the failure of feature detection (control type OIDs and extension OIDs).
2022-10-02 07:44:18 +11:00
4d35b7ddf7
docs: fix misc grammar issues ( #4062 )
...
Closes #4063
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-09-27 12:13:06 +10:00
a7a217a036
docs: fix grammar and og proto ( #4078 )
2022-09-26 09:16:22 +10:00
841bf6d42f
docs: fix blog wording to match the actual feature ( #4077 )
2022-09-26 09:00:47 +10:00
edae3e0699
docs: add blog pre-release notes ( #4076 )
2022-09-26 06:55:09 +10:00
d67659a4f9
docs: fix ldap section ( #4075 )
2022-09-26 05:19:11 +10:00
f04596b8e0
docs: misc roadmap adjustments and fixes ( #4073 )
2022-09-26 05:02:51 +10:00
3a65d9af54
docs: ldap integration guides ( #3920 )
2022-09-26 04:50:54 +10:00
3390dda59b
docs: fix komga integration guide ( #4045 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-09-25 07:44:00 +10:00
1d16a0c516
docs: fix typo in storage introduction file ( #4068 )
2022-09-25 07:40:48 +10:00
a0b3d32774
docs: update oidc roadmap ( #4027 )
2022-09-19 14:19:51 +10:00
2fc1e4a90d
docs: fix shortcode issue ( #4022 )
2022-09-16 18:19:10 +10:00
995a474038
docs: update oidc roadmap ( #4021 )
2022-09-16 16:09:12 +10:00
c756c7b67b
i18n: update translations ( #3972 )
2022-09-16 15:01:22 +10:00
9c72bc8977
ci: gen github tmpl locales and commitlint ( #3759 )
...
This adds several automatic generators for Authelia docs etc.
2022-09-16 14:21:05 +10:00
5baa69064b
docs: adjust traefik k8s example ( #3971 )
2022-09-06 12:19:48 +10:00
97faa0beea
docs: fix reference info to smtps ( #3950 )
...
This PR aligns some information missed in a previous update.
2022-09-06 12:01:46 +10:00
fbda31f897
docs: clarify chromes deprecation of u2f in favor of webauthn ( #3949 )
2022-09-03 17:04:33 +10:00
b034048d7d
docs: update nginx example ( #3795 )
...
This updates the nginx example to use set_escape_uri from the http_set_misc module.
2022-09-01 21:59:02 +10:00
ea4e0663f7
docs: fix default timeouts ( #3938 )
2022-09-01 12:31:59 +10:00
f17268ee80
docs: remove cobra auto gen tags ( #3937 )
2022-09-01 12:24:47 +10:00
730e47df92
docs: cloudflare zt fixes ( #3931 )
2022-08-31 21:03:21 +10:00
f18585bcd8
docs: nextcloud missing oidc scope ( #3926 )
2022-08-30 19:52:00 +10:00
ee540aa8e7
docs: add offline_access to outline ( #3914 )
2022-08-27 08:43:55 +10:00
319a8cf9d4
fix(notification): text emails not encoded properly ( #3854 )
...
This fixes an issue where the plain text portion of emails is not encoded with quoted printable encoding.
2022-08-27 07:39:20 +10:00
4d3ac31051
docs: update k8s integration ( #3908 )
2022-08-26 21:03:12 +10:00
21929d6508
docs: update get started ( #3907 )
2022-08-26 20:46:47 +10:00
020b43af85
docs: update csp template ( #3905 )
2022-08-26 16:16:15 +10:00
aad43d4acc
docs: har reference guide ( #3900 )
2022-08-26 13:50:51 +10:00
a8849f1b9e
docs: misc consistency adjustments ( #3904 )
2022-08-26 13:26:58 +10:00
ca423cd1d5
docs: add reference docs for oidc userinfo sig ( #3875 )
...
Documenting details userinfo_signing_algorithm. Related to #3869 .
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-08-26 11:55:48 +10:00
50c12f573c
docs: oidc grafana env update ( #3847 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-08-26 11:42:12 +10:00
657463a3e6
docs: oidc kogma ( #3893 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-08-26 11:39:00 +10:00
0ddeae4a60
docs: seafile header sso ( #3888 )
2022-08-26 11:34:56 +10:00
240ec60dac
docs: fix helm chart link ( #3843 )
...
* Update introduction.md
2022-08-16 13:03:04 +10:00
7cb43d2ce8
docs: add outline oidc docs ( #3829 )
2022-08-12 09:11:42 +10:00
342497a869
refactor(server): use errgroup to supervise services ( #3755 )
...
Uses the errgroup package and pattern for supervising services like servers etc.
2022-08-09 07:50:12 +10:00
8140c5007f
docs: fix gitea oidc ( #3800 )
2022-08-07 14:56:33 +10:00
c585e19499
docs: update gitea integration ( #3724 )
...
Added full redirect_uris path, note on pre-creating user.
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-08-07 08:25:28 +10:00
bdb65318f2
docs: update oidc docs for gitea ( #3777 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-08-02 10:27:23 +10:00
8753998e17
docs: update grafana oidc integration ( #3769 )
...
Changed OIDC configuration for Grafana
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-07-31 13:25:53 +10:00
937237ea1d
docs: add oidc guacamole integration ( #3772 )
2022-07-31 13:09:05 +10:00
21d790bdeb
docs: update branding ( #3764 )
2022-07-29 15:29:58 +10:00
36c680afc5
docs: fix contributing introduction link ( #3760 )
...
correct documentation link
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-07-29 13:05:49 +10:00
60307c8235
docs(oidc): update synapse config ( #3762 )
2022-07-29 11:03:10 +10:00
efe1facc35
docs: misc fixes ( #3745 )
2022-07-26 15:26:38 +10:00
019b6c9820
docs: tiny typo fix for ( #3718 )
...
Small typo fix.
2022-07-18 20:15:11 +10:00
df016be29e
fix(notification): incorrect date header format ( #3684 )
...
* fix(notification): incorrect date header format
The date header in the email envelopes was incorrectly formatted missing a space between the `Date:` header and the value of this header. This also refactors the notification templates system allowing people to manually override the envelope itself.
* test: fix tests and linting issues
* fix: misc issues
* refactor: misc refactoring
* docs: add example for envelope with message id
* refactor: organize smtp notifier
* refactor: move subject interpolation
* refactor: include additional placeholders
* docs: fix missing link
* docs: gravity
* fix: rcpt to command
* refactor: remove mid
* refactor: apply suggestions
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
* refactor: include pid
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-07-18 10:56:09 +10:00
58e10f1dd6
docs: correct link to get-started page ( #3710 )
2022-07-15 18:16:24 +10:00
c101a836be
docs: upgrade to doks 0.5.0 ( #3689 )
2022-07-14 14:29:54 +10:00
6729200251
docs: add offline_access scope to argocd cli ( #3704 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-07-14 10:15:30 +10:00
7d170f09b4
fix(commands): acl check panic on decode failure ( #3697 )
...
This fixes an issue with the authelia access-control check-policy command which potentially panics when a decode hook fails to parse an item.
2022-07-13 17:22:42 +10:00
a714190eec
docs: misc grammar fix ( #3655 )
...
Corrected gramma in redirection_uris of clients.
2022-07-13 13:44:22 +10:00
38cd35668f
docs: fix example ( #3694 )
2022-07-13 04:37:23 +10:00
0dd7d6941f
docs: fix dates ( #3693 )
2022-07-13 04:29:52 +10:00
66a4e412ea
docs: add argocd oidc integration ( #3691 )
2022-07-13 04:27:30 +10:00
55e03e2e32
docs: fix ntp inconsistency ( #3686 )
2022-07-11 23:29:10 +10:00
3225ecf537
docs: doks 0.5.0 preparation work ( #3672 )
2022-07-08 14:54:00 +10:00
290a38e424
fix(configuration): address parsing failure ( #3653 )
...
This fixes an issue with parsing address types from strings.
2022-07-05 14:43:12 +10:00
7324ed0c1e
docs: add gitea oidc integration ( #3645 )
2022-07-01 13:07:02 +10:00
1327ec81fc
docs: add yaml validation info ( #3650 )
2022-07-01 12:32:29 +10:00
d9cfc401ce
docs: use details shortcode ( #3586 )
...
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-06-30 14:02:00 +10:00
b5111a9e5c
docs: fix discord bridge note ( #3639 )
2022-06-30 08:12:55 +10:00
d2db318553
docs: update contact docs ( #3630 )
2022-06-29 21:34:13 +10:00
3e0785e7a5
docs: fix email links ( #3624 )
2022-06-29 09:39:01 +10:00
352b360a50
docs: update dates ( #3615 )
2022-06-28 15:27:14 +10:00
2b6b6ef1f0
docs: roadmap permalinks ( #3614 )
2022-06-28 13:55:50 +10:00
d2f1e5d36d
feat(configuration): automatically map old keys ( #3199 )
...
This performs automatic remapping of deprecated configuration keys in most situations.
2022-06-28 13:15:50 +10:00
ab1d0c51d3
feat(authorization): acl resource regex named groups ( #3597 )
...
This adds the named group functionality from domain_regex to the resource criteria.
2022-06-28 12:51:05 +10:00
0c0e19c138
docs: add openid offline_access scope ( #3611 )
...
Adds this scope to the docs.
Closes #3607
2022-06-28 10:25:36 +10:00
fcac438637
feat(commands): enhance crypto generation capabilities ( #2842 )
...
This expands the functionality of the certificates and rsa commands and merges them into one command called cypto which can either use the cert or pair subcommands to generate certificates or key-pairs respectively. The rsa, ecdsa, and ed25519 subcommands exist for both the cert and pair commands. A new --ca-path argument for the cert subcommand allows Authelia to sign other certs with CA certs.
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-06-27 18:27:57 +10:00
ee86aad0ec
docs: fix skipper docs ( #3585 )
2022-06-24 12:42:27 +10:00
2ccdf6933c
docs: fix k8s yaml ( #3575 )
2022-06-22 23:25:10 +10:00
e2e1d6d30b
docs: update integration guides to reference get started ( #3573 )
2022-06-22 22:58:23 +10:00
Ohelig
James Elliott
Austin Alvarado
boomam
Jonas Lewin
Jacob Gee-Clarke
matvey00z
Paul Ohl
Philipp
Manuel Nuñez
Constantin Kraft
stanthewizzard
Hugo Wehbe
Brennan Kinney
Northguy
Jerry Jean-Baptiste
Clément Radenac
Will Scargill
Jonas Geiregat
EDIflyer
Andreas Brenk
Archef2000