d0d80b4f66
feat(configuration): freeipa ldap implementation ( #4482 )
...
This adds a FreeIPA LDAP implementation which purely adds sane defaults for FreeIPA. There are no functional differences just when the implementation option is set to 'freeipa' sane defaults which should be sufficient for most use cases are set. See the documentation at https://www.authelia.com/r/ldap#defaults for more details.
Closes #2177 , Closes #2161
2022-12-21 21:07:00 +11:00
c7f4d5999d
feat(configuration): file filters ( #4515 )
...
This adds experimental file filters which are not guaranteed under our stability policies. These filters take effect after reading the files and before parsing their content.
2022-12-21 20:48:14 +11:00
859b403146
docs: update docs ( #4597 )
2022-12-19 15:04:02 +11:00
8d1f8fcbd7
docs: fix incorrect command doc ( #4579 )
2022-12-16 15:12:04 +11:00
fb62c33129
docs: fix branding svgs and add ai branding ( #4577 )
...
This adds Adobe Illustrator branding files, and fixes the SVG's.
2022-12-15 20:15:29 +11:00
28cd927f88
fix(authentication): msad dlsg excluded from default filter ( #4569 )
...
The groups filter narrowing for Active Directory to purposefully exclude distribution groups (which are not designed to act as security groups) unintentionally removed DLSG's from the filter results. This effectively reverts that allowing both DLSG's and GUSG's to be returned by default.
Fixes #4551 , Fixes #4528
2022-12-14 14:57:32 +11:00
93c0d65830
docs: spelling fix ( #4534 )
...
Corrected spelling of "postgres" in server config example.
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-12-10 10:16:31 +11:00
d9d63ea2b3
docs: storage ref clarity ( #4530 )
2022-12-09 22:38:56 +11:00
2c270a21bf
docs: storage ref clarity ( #4529 )
2022-12-09 21:57:12 +11:00
cfdd036590
docs: improve mariadb upgrade docs ( #4527 )
2022-12-09 19:29:41 +11:00
32b3ce65f2
docs: improve database docs ( #4526 )
...
* docs: improve database docs
* docs: improve database docs
2022-12-09 18:24:02 +11:00
017be7b4a4
docs: generate ( #4512 )
2022-12-08 22:04:44 +11:00
b4d9e21387
docs: fix misc url issues ( #4503 )
2022-12-07 20:43:02 +11:00
ee50e5580c
docs: fix totp cli examples ( #4467 )
...
Updated the documentation with the missing user keyword
2022-12-04 17:29:05 +11:00
442cb272d9
docs: update proxy docs ( #4449 )
2022-11-30 09:12:50 +11:00
eba63f1359
docs: update index ( #4437 )
2022-11-27 16:07:08 +11:00
1bab80f6b6
docs: update ( #4433 )
2022-11-25 23:55:25 +11:00
3e4ac7821d
refactor: remove pre1 migration path ( #4356 )
...
This removes pre1 migrations and improves a lot of tooling.
2022-11-25 23:44:55 +11:00
203cb19c2f
fix(configuration): missing warning about session domain ( #4417 )
...
This adds some helpful configuration warnings and fixes a few misconfiguration issues.
2022-11-24 10:16:23 +11:00
ef28345f05
docs: fix grammar ( #4334 )
...
A fixed grammatical issue with the docker deployment page.
2022-11-21 06:27:43 +11:00
194d34106e
fix(storage): schema inconsistency ( #4262 )
2022-11-19 16:47:09 +11:00
9aec643bc1
docs: clarify cloudflare docs ( #4373 )
2022-11-14 14:37:34 +11:00
02920c18be
refactor: few misc issues ( #4330 )
2022-11-04 22:24:10 +11:00
e97a848600
refactor: ldap filter ( #4329 )
2022-11-04 13:42:28 +11:00
500410fac3
refactor(commands): include rfc3986 charset ( #4328 )
...
This includes the RFC3986 unreserved charset as an option, and allows the '-upper' and '-lower' suffix for alphabetic inclusive charsets.
2022-11-04 11:32:49 +11:00
95709b7069
docs: update proxy versions ( #4310 )
2022-11-01 10:09:46 +11:00
6b2f713e10
fix(configuration): certificate_chains can't be defined as secrets ( #4302 )
...
This fixes an issue where certificate_chain values can't be defined as secrets. While not expressly needed for certificates, it's more convenient and less prone to error than defining a environment variable with the contents.
2022-10-31 11:52:14 +11:00
c16456bd6d
docs: gen ( #4293 )
2022-10-28 22:47:34 +11:00
dfd196460f
refactor: close database connections on shutdown ( #4255 )
...
This explicitly closes the database connection during shutdown.
2022-10-25 16:12:42 +11:00
55a7f8112d
Update a broken link in the docs ( #4250 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-10-24 06:58:11 +11:00
12e3cd56b1
docs: refactor generator guides ( #4244 )
2022-10-23 18:09:19 +11:00
296dc9ecc5
docs: fix missing secret links ( #4242 )
...
* docs: fix missing secret links
* docs: fix missing secret links
* docs: fix missing doc
2022-10-23 14:42:44 +11:00
6654fd6130
refactor: update users_database examples ( #4240 )
2022-10-23 08:12:16 +11:00
a6268e3c11
docs: grammar fixes for forwarded headers ( #4237 )
...
There were minor typos, and a phrase with no ending.
2022-10-23 07:19:11 +11:00
00ab279336
refactor: csp gen ( #4163 )
...
Generator for CSP.
2022-10-22 22:19:32 +11:00
69c4c02d03
feat(storage): tls connection support ( #4233 )
...
This adds support to PostgreSQL and MySQL to connect via TLS via the standard TLS configuration options.
2022-10-22 19:27:59 +11:00
1ea29cb2c2
feat(storage): unix socket support ( #4231 )
...
Support for unix sockets for MySQL and PostgreSQL.
2022-10-22 16:41:27 +11:00
9532823a99
feat(configuration): mtls clients ( #4221 )
...
This implements mTLS support for LDAP, Redis, and SMTP. Specified via the tls.certificate_chain and tls.private_key options.
Closes #4044
2022-10-21 19:41:33 +11:00
3113ec2b80
feat(commands): random character generator ( #4213 )
...
This improves all random character generator command usages to be nearly identical and reuse a large block of code. It also improves several functions to give more options when randomly generating outputs.
2022-10-21 07:41:46 +11:00
3f8958d1b1
docs(oidc): fix missing link ( #4212 )
2022-10-20 15:42:22 +11:00
9e29295bdf
docs(oidc): adjust client secret information ( #4211 )
2022-10-20 15:27:09 +11:00
248f1d49d4
feat(oidc): hashed client secrets ( #4026 )
...
Allow use of hashed OpenID Connect client secrets.
2022-10-20 14:21:45 +11:00
3aaca0604f
feat(oidc): implicit consent ( #4080 )
...
This adds multiple consent modes to OpenID Connect clients. Specifically it allows configuration of a new consent mode called implicit which never asks for user consent.
2022-10-20 13:16:36 +11:00
24e41aed84
feat(commands): add webauthn device commands ( #3671 )
2022-10-19 18:17:55 +11:00
52102eea8c
feat(authorization): query parameter filtering ( #3990 )
...
This allows for advanced filtering of the query parameters in ACL's.
Closes #2708
2022-10-19 14:09:22 +11:00
d0c1b32125
docs: fix proxmox and misc links ( #4145 )
...
* docs: fix proxmox and misc links
* docs: adjust
2022-10-18 21:29:48 +11:00
a471c31d74
docs: update seafile docs ( #4151 )
...
This fixes an issue with the Seafile OIDC integration docs.
2022-10-18 21:27:38 +11:00
a894e272cb
docs: add synology dsm docs ( #4167 )
2022-10-18 21:22:13 +11:00
a0b2e78e5d
feat(authentication): file case-insensitive and email search ( #4194 )
...
This allows both case-insensitive and email searching for the file auth provider.
Closes #3383
2022-10-18 11:57:08 +11:00
d610874be4
feat(authentication): disabled users in yaml file ( #4193 )
...
Allows setting users as disabled.
2022-10-18 09:10:53 +11:00
James Elliott
Austin Alvarado
boomam
Jonas Lewin
Jacob Gee-Clarke
matvey00z
Paul Ohl
Philipp