c7f4d5999d
feat(configuration): file filters ( #4515 )
...
This adds experimental file filters which are not guaranteed under our stability policies. These filters take effect after reading the files and before parsing their content.
2022-12-21 20:48:14 +11:00
859b403146
docs: update docs ( #4597 )
2022-12-19 15:04:02 +11:00
8d1f8fcbd7
docs: fix incorrect command doc ( #4579 )
2022-12-16 15:12:04 +11:00
93c0d65830
docs: spelling fix ( #4534 )
...
Corrected spelling of "postgres" in server config example.
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-12-10 10:16:31 +11:00
b4d9e21387
docs: fix misc url issues ( #4503 )
2022-12-07 20:43:02 +11:00
ee50e5580c
docs: fix totp cli examples ( #4467 )
...
Updated the documentation with the missing user keyword
2022-12-04 17:29:05 +11:00
1bab80f6b6
docs: update ( #4433 )
2022-11-25 23:55:25 +11:00
203cb19c2f
fix(configuration): missing warning about session domain ( #4417 )
...
This adds some helpful configuration warnings and fixes a few misconfiguration issues.
2022-11-24 10:16:23 +11:00
194d34106e
fix(storage): schema inconsistency ( #4262 )
2022-11-19 16:47:09 +11:00
e97a848600
refactor: ldap filter ( #4329 )
2022-11-04 13:42:28 +11:00
6b2f713e10
fix(configuration): certificate_chains can't be defined as secrets ( #4302 )
...
This fixes an issue where certificate_chain values can't be defined as secrets. While not expressly needed for certificates, it's more convenient and less prone to error than defining a environment variable with the contents.
2022-10-31 11:52:14 +11:00
dfd196460f
refactor: close database connections on shutdown ( #4255 )
...
This explicitly closes the database connection during shutdown.
2022-10-25 16:12:42 +11:00
55a7f8112d
Update a broken link in the docs ( #4250 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-10-24 06:58:11 +11:00
12e3cd56b1
docs: refactor generator guides ( #4244 )
2022-10-23 18:09:19 +11:00
296dc9ecc5
docs: fix missing secret links ( #4242 )
...
* docs: fix missing secret links
* docs: fix missing secret links
* docs: fix missing doc
2022-10-23 14:42:44 +11:00
00ab279336
refactor: csp gen ( #4163 )
...
Generator for CSP.
2022-10-22 22:19:32 +11:00
69c4c02d03
feat(storage): tls connection support ( #4233 )
...
This adds support to PostgreSQL and MySQL to connect via TLS via the standard TLS configuration options.
2022-10-22 19:27:59 +11:00
1ea29cb2c2
feat(storage): unix socket support ( #4231 )
...
Support for unix sockets for MySQL and PostgreSQL.
2022-10-22 16:41:27 +11:00
9532823a99
feat(configuration): mtls clients ( #4221 )
...
This implements mTLS support for LDAP, Redis, and SMTP. Specified via the tls.certificate_chain and tls.private_key options.
Closes #4044
2022-10-21 19:41:33 +11:00
9e29295bdf
docs(oidc): adjust client secret information ( #4211 )
2022-10-20 15:27:09 +11:00
248f1d49d4
feat(oidc): hashed client secrets ( #4026 )
...
Allow use of hashed OpenID Connect client secrets.
2022-10-20 14:21:45 +11:00
3aaca0604f
feat(oidc): implicit consent ( #4080 )
...
This adds multiple consent modes to OpenID Connect clients. Specifically it allows configuration of a new consent mode called implicit which never asks for user consent.
2022-10-20 13:16:36 +11:00
52102eea8c
feat(authorization): query parameter filtering ( #3990 )
...
This allows for advanced filtering of the query parameters in ACL's.
Closes #2708
2022-10-19 14:09:22 +11:00
a0b2e78e5d
feat(authentication): file case-insensitive and email search ( #4194 )
...
This allows both case-insensitive and email searching for the file auth provider.
Closes #3383
2022-10-18 11:57:08 +11:00
84cb457cb0
feat(authentication): file provider hot reload ( #4188 )
...
This adds hot reloading to the file auth provider.
2022-10-17 22:31:23 +11:00
3a70f6739b
feat(authentication): file password algorithms ( #3848 )
...
This adds significant enhancements to the file auth provider including multiple additional algorithms.
2022-10-17 21:51:59 +11:00
8eadf72dc7
docs: rule matching concepts ( #4154 )
...
* docs: rule matching concepts
* docs: add named regex note
* docs: adjust wording
* docs: expand match table
* docs: simplify
* docs: fix link
* docs: fix link
2022-10-16 14:11:43 +11:00
3107e493e7
refactor: adjust defaults ( #4137 )
...
* refactor: adjust defaults
* refactor: adjust level
* refactor: adjust level
* refactor: fix templates
2022-10-07 13:52:01 +11:00
c8fa19e6bd
feat(notification): add disable_starttls option ( #3855 )
...
This adds a boolean option to SMTP which disables StartTLS for SMTP servers that ignore standards.
2022-10-02 13:51:19 +11:00
6810c91d34
feat(oidc): issuer jwk certificates ( #3989 )
...
This allows for JWKs to include certificate information, either signed via Global PKI, Enterprise PKI, or self-signed.
2022-10-02 13:07:40 +11:00
1d16a0c516
docs: fix typo in storage introduction file ( #4068 )
2022-09-25 07:40:48 +10:00
9c72bc8977
ci: gen github tmpl locales and commitlint ( #3759 )
...
This adds several automatic generators for Authelia docs etc.
2022-09-16 14:21:05 +10:00
97faa0beea
docs: fix reference info to smtps ( #3950 )
...
This PR aligns some information missed in a previous update.
2022-09-06 12:01:46 +10:00
ea4e0663f7
docs: fix default timeouts ( #3938 )
2022-09-01 12:31:59 +10:00
020b43af85
docs: update csp template ( #3905 )
2022-08-26 16:16:15 +10:00
a8849f1b9e
docs: misc consistency adjustments ( #3904 )
2022-08-26 13:26:58 +10:00
ca423cd1d5
docs: add reference docs for oidc userinfo sig ( #3875 )
...
Documenting details userinfo_signing_algorithm. Related to #3869 .
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-08-26 11:55:48 +10:00
342497a869
refactor(server): use errgroup to supervise services ( #3755 )
...
Uses the errgroup package and pattern for supervising services like servers etc.
2022-08-09 07:50:12 +10:00
efe1facc35
docs: misc fixes ( #3745 )
2022-07-26 15:26:38 +10:00
019b6c9820
docs: tiny typo fix for ( #3718 )
...
Small typo fix.
2022-07-18 20:15:11 +10:00
df016be29e
fix(notification): incorrect date header format ( #3684 )
...
* fix(notification): incorrect date header format
The date header in the email envelopes was incorrectly formatted missing a space between the `Date:` header and the value of this header. This also refactors the notification templates system allowing people to manually override the envelope itself.
* test: fix tests and linting issues
* fix: misc issues
* refactor: misc refactoring
* docs: add example for envelope with message id
* refactor: organize smtp notifier
* refactor: move subject interpolation
* refactor: include additional placeholders
* docs: fix missing link
* docs: gravity
* fix: rcpt to command
* refactor: remove mid
* refactor: apply suggestions
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
* refactor: include pid
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-07-18 10:56:09 +10:00
a714190eec
docs: misc grammar fix ( #3655 )
...
Corrected gramma in redirection_uris of clients.
2022-07-13 13:44:22 +10:00
55e03e2e32
docs: fix ntp inconsistency ( #3686 )
2022-07-11 23:29:10 +10:00
290a38e424
fix(configuration): address parsing failure ( #3653 )
...
This fixes an issue with parsing address types from strings.
2022-07-05 14:43:12 +10:00
1327ec81fc
docs: add yaml validation info ( #3650 )
2022-07-01 12:32:29 +10:00
352b360a50
docs: update dates ( #3615 )
2022-06-28 15:27:14 +10:00
d2f1e5d36d
feat(configuration): automatically map old keys ( #3199 )
...
This performs automatic remapping of deprecated configuration keys in most situations.
2022-06-28 13:15:50 +10:00
ab1d0c51d3
feat(authorization): acl resource regex named groups ( #3597 )
...
This adds the named group functionality from domain_regex to the resource criteria.
2022-06-28 12:51:05 +10:00
fcac438637
feat(commands): enhance crypto generation capabilities ( #2842 )
...
This expands the functionality of the certificates and rsa commands and merges them into one command called cypto which can either use the cert or pair subcommands to generate certificates or key-pairs respectively. The rsa, ecdsa, and ed25519 subcommands exist for both the cert and pair commands. A new --ca-path argument for the cert subcommand allows Authelia to sign other certs with CA certs.
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-06-27 18:27:57 +10:00
e2e1d6d30b
docs: update integration guides to reference get started ( #3573 )
2022-06-22 22:58:23 +10:00
b102ebb6bb
docs: improve secrets documentation ( #3565 )
...
Improve documentation around secrets.
2022-06-21 19:45:08 +10:00
25b5c1ee2e
feat(authentication): unauthenticated ldap bind ( #3291 )
...
This allows configuring unauthenticated LDAP binding.
2022-06-17 21:03:47 +10:00
b2c60ef898
feat: major documentation refresh ( #3475 )
...
This marks the launch of the new documentation website.
2022-06-15 17:51:47 +10:00
James Elliott
Austin Alvarado
boomam
Jonas Lewin
matvey00z
Manuel Nuñez
Hugo Wehbe
Brennan Kinney
Northguy
EDIflyer
Archef2000