Commit Graph

206 Commits (e6ef74fd8e9cd8fcbb2d68d2097c4337696a5f90)

Author SHA1 Message Date
James Elliott e6ef74fd8e
Merge remote-tracking branch 'origin/master' into feat-settings-ui
# Conflicts:
#	go.mod
#	web/package.json
#	web/pnpm-lock.yaml
2023-02-25 13:46:06 +11:00
James Elliott f62b4d4cd3
docs: update ngnix docs (#4980) 2023-02-22 15:26:10 +11:00
James Elliott 8253b44e5d
docs: update swag docs (#4979) 2023-02-22 15:11:11 +11:00
James Elliott a6cc022e5c
Merge remote tracking branch origin/master into feat-settings-ui 2023-02-19 11:53:11 +11:00
James Elliott 891f1de9f2
refactor(commands): x509 bundling (#4942)
This adds another bundling mode to the certificate command.
2023-02-17 14:29:07 +11:00
James Elliott 236fcb1e37
Merge remote-tracking branch 'origin/master' into feat-settings-ui 2023-02-13 18:53:54 +11:00
James Hillyerd ad689275d3
docs: improve gitea oidc guidance (#4808)
Make the non-obvious relationship between the Gitea `Authentication Name` and the path of the redirect URI explicit.

Signed-off-by: James Hillyerd <james@hillyerd.com>
2023-02-13 07:49:43 +11:00
James Elliott 3b6f5482b8
fix: multi-cookie domain webauthn 2023-02-12 02:47:03 +11:00
James Elliott 8e4b660f15
refactor: certs (#4912)
This refactors the suites to use a Enterprise Root CA PKI signed certificate so the CA public certificate can be trusted. This is particularly useful for webauthn in Chrome.
2023-02-11 14:11:40 +11:00
James Elliott e9fd4160e4
docs: add important note for implicit consent (#4901) 2023-02-08 13:51:23 +11:00
James Elliott 2e6d17ba8a
feat(configuration): rfc2307bis implementation (#4900)
This adds configuration defaults for RFC2307bis LDAP implementations such as OpenLDAP with the RFC2307bis LDIF which should service most user needs.
2023-02-08 13:35:57 +11:00
James Elliott d1147f9ac4
docs: refactor oidc config docs (#4892) 2023-02-08 01:29:43 +11:00
James Elliott 726850fe43
refactor: add some more useful templating funcs (#4891) 2023-02-08 01:28:09 +11:00
James Elliott a7ccf3652f
docs: fix rfc references and fix misc issues (#4879) 2023-02-05 18:11:30 +11:00
James Elliott 370a3b1e8d
build: update to go 1.20 (#4866) 2023-02-02 21:19:28 +11:00
James Elliott e408cb19b1
test: adjust tests and docs to be similar (#4856) 2023-02-02 18:13:18 +11:00
James Elliott 598ea2bb19
feat(configuration): disallow public suffix domains (#4855)
This adds a check to the domains configuration to ensure the domain value is not part of the public suffix list at https://publicsuffix.org. These domains are special and users cannot write cookies with this domain value, this makes them unusable with Authelia and this more readily makes that apparent.
2023-02-02 16:34:49 +11:00
James Elliott 7e285f461f
docs: add common oidc shortcode and update (#4862) 2023-02-02 12:30:06 +11:00
James Elliott a2965183f7
docs: fix missing yaml example (#4853) 2023-01-31 10:28:00 +11:00
Krasimir Nedelchev 9eb9e29b13
docs: fix typo (#4842)
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-01-29 10:01:41 +11:00
Krasimir Nedelchev b3b24f4479
docs: fix ip addresses (#4843)
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-01-29 09:25:32 +11:00
James Elliott deb47264d5
docs: gen (#4833) 2023-01-26 19:04:46 +11:00
James Elliott 8cd88e83c1
docs: fix typo (#4832) 2023-01-26 18:39:56 +11:00
James Elliott 1ac4321013
docs: fix misc issues (#4831) 2023-01-26 16:38:08 +11:00
James Elliott ea9ec80af0
docs: add missing features (#4830) 2023-01-26 16:22:56 +11:00
James Elliott d653bc9c0b
docs: add pre-release / beta info (#4829) 2023-01-26 16:14:06 +11:00
James Elliott b42a84340d
docs: env adjustment (#4826) 2023-01-26 13:23:02 +11:00
James Elliott a33b37a9cd
docs: make several openid connect areas uniform (#4824) 2023-01-26 10:59:18 +11:00
James Elliott 65705a646d
feat(server): customizable authz endpoints (#4296)
This allows users to customize the authz endpoints.

Closes #2753, Fixes #3716

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2023-01-25 20:36:40 +11:00
electrofloat ce65764948
docs: fix copy paste typo (#4815)
Fixed a copy-paste bug in the description of the idle server timeout. This change only fixes that bug, but this part of the documentation need better explaining. (Something called "idle" in the "Server Timeouts" section of course configures server idle timeout, but what is server in this context, when happens when the time defined in idle expires, etc.)
2023-01-24 09:58:57 +11:00
James Elliott a566c16d08
feat(web): privacy policy url (#4625)
This allows users to customize a privacy policy URL at the bottom of the login view.

Closes #2639
2023-01-22 19:58:07 +11:00
James Elliott d16f63f01a
docs: blog 4.38 pre-release notes (#4789) 2023-01-21 00:18:00 +11:00
James Elliott d696593d6d
docs: fix incorrect env name (#4768) 2023-01-15 12:02:38 +11:00
Dinh Bao Dang 98604dc7eb
docs: fix links and npm install command (#4755)
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2023-01-12 22:02:13 +11:00
Manuel Nuñez 8b29cf7ee8
feat(session): multiple session cookie domains (#3754)
This adds support to configure multiple session cookie domains.

Closes #1198

Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2023-01-12 21:57:44 +11:00
James Elliott 3182925bef
docs: elaborate on version policy (#4707) 2023-01-05 18:51:49 +11:00
James Elliott adaf069eab
feat(oidc): per-client pkce enforcement policy (#4692)
This implements a per-client PKCE enforcement policy with the ability to enforce that it's used, and the specific challenge mode.
2023-01-04 02:03:23 +11:00
James Elliott 08cda5d165
refactor: include additional important template funcs (#4690)
* refactor: include additional important template funcs

* fix: use of interface

* test: improve test cases
2023-01-04 00:11:10 +11:00
James Elliott 9282b0512f
docs: improve server override docs (#4687) 2023-01-03 22:44:14 +11:00
James Elliott 1c3219e93f
perf(server): cached openapi document (#4674)
This should lead to a small performance gain by caching the openapi.yml with etags as well as eliminating the use of nonce crypto generation when not required.
2023-01-03 14:49:02 +11:00
Chris D 8a4c65b548
docs: fix mistakes in swag docs (#4665)
Co-authored-by: Chris <=>
2022-12-31 10:45:55 +11:00
James Elliott f685f247cf
feat(notification): important events notifications (#4644)
This adds important event notifications.
2022-12-27 19:59:08 +11:00
James Elliott 55a6794370
feat(templates): templating functions (#4635)
This adds several functions which are available in most areas that use templates.
2022-12-23 21:58:54 +11:00
James Elliott 0bb657e11c
refactor(notifier): utilize smtp lib (#4403)
This drops a whole heap of code we were maintaining in favor of a SMTP library.

Closes #2678
2022-12-23 16:06:49 +11:00
James Elliott 38ca5f06d4
docs: update privacy and versioning policy (#4632) 2022-12-23 15:37:42 +11:00
James Elliott d7ab3bb633
feat(commands): storage import/export commands (#4545)
This adds commands to export and import TOTP configurations and Webauthn devices as YAML.
2022-12-23 15:00:23 +11:00
James Elliott 0130edb870
feat(configuration): env config file discovery (#4618)
This allows Authelia to discover config files and config options via environment variables.

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-12-23 11:03:50 +11:00
Ohelig 7663a68a2b
docs: add password regulation fail2ban docs (#4630)
Adds lines to fail2ban regex to catch password reset attempts and email spam.
2022-12-23 07:39:41 +11:00
James Elliott 9400b1c54d
docs: add gdpr relevant information (#4624)
* docs: add gdpr relevant information

* docs: add gdpr relevant information
2022-12-22 21:20:36 +11:00
James Elliott cc1e58e004
feat(configuration): load config from directory (#4616)
This allows specifying paths to a combination of files and directories with the --config option provided none of the specified file paths reside directly inside one of the specified directory paths. The directory paths are not recursive, and load .yml and .yaml files at this time.
2022-12-22 17:34:20 +11:00