authelia/internal
James Elliott 626f5d2949
[FEATURE] Remember Me Configuration (#813)
* [FEATURE] Remember Me Configuration
* allow users to specify the duration of remember me using remember_me_duration in session config
* setting the duration to 0 disables remember me
* only render the remember me element if remember me is enabled
* prevent malicious users from faking remember me functionality in the backend
* add string to duration helper called ParseDurationString to parse a string into a duration
* added tests to the helper function
* use the SessionProvider to store the time.Duration instead of parsing it over and over again
* add sec doc, adjust month/min, consistency
* renamed internal/utils/constants.go to internal/utils/const.go to be consistent
* added security measure docs
* adjusted default remember me duration to be 1 month instead of 1 year
* utilize default remember me duration in the autheliaCtx mock
* adjust order of keys in session configuration examples
* add notes on session security measures secret only being redis 
* add TODO items for duration notation for both Expiration and Inactivity (will be removed soon)
* fix error text for Inactivity in the validator 
* add session validator tests
* deref check bodyJSON.KeepMeLoggedIn and derive the value based on conf and user input and store it (DRY)
* remove unnecessary regex for the simplified ParseDurationString utility
* ParseDurationString only accepts decimals without leading zeros now
* comprehensively test all unit types
* remove unnecessary type unions in web
* add test to check sanity of time duration consts, this is just so they can't be accidentally changed
* simplify deref check and assignment
* fix reset password padding/margins
* adjust some doc wording
* adjust the handler configuration suite test
* actually run the handler configuration suite test (whoops)
* reduce the number of regex's used by ParseDurationString to 1, thanks to Clement
* adjust some error wording
2020-04-04 10:11:33 +11:00
..
authentication [FEATURE][BREAKING] Allow users to sign in with email. (#792) 2020-03-31 09:36:04 +11:00
authorization [BUGFIX] Skip 2FA step if no ACL rule is two_factor (#684) 2020-03-06 11:31:09 +11:00
commands [FEATURE] Support Argon2id password hasing and improved entropy (#679) 2020-03-06 12:38:02 +11:00
configuration [FEATURE] Remember Me Configuration (#813) 2020-04-04 10:11:33 +11:00
duo [MISC] Add Detailed DUO Push Logging (#664) 2020-03-01 11:51:11 +11:00
handlers [FEATURE] Remember Me Configuration (#813) 2020-04-04 10:11:33 +11:00
logging [FEATURE] [BREAKING] Support writing logs in a file. (#686) 2020-03-09 20:57:53 +01:00
middlewares [MISC] Fail with an error message when X-Forwarded-* headers are missing (#631) 2020-02-13 13:12:37 +11:00
mocks [FEATURE] Remember Me Configuration (#813) 2020-04-04 10:11:33 +11:00
models Move source code into internal directory to follow standard project layout. 2019-11-17 16:30:33 +01:00
notification [FEATURE] SMTPS support (#643) 2020-02-20 12:09:46 +11:00
regulation [FIX] Disable regulation when max_retries set to 0 (#584) 2020-01-27 22:54:24 +11:00
server [FEATURE] TOTP Tuning Configuration Options and Fix Timer Graphic (#773) 2020-03-25 12:48:20 +11:00
session [FEATURE] Remember Me Configuration (#813) 2020-04-04 10:11:33 +11:00
storage [FEATURE] Support MySQL as a storage backend. (#678) 2020-03-05 10:25:52 +11:00
suites [FEATURE] Remember Me Configuration (#813) 2020-04-04 10:11:33 +11:00
templates Force TLS and valid x509 certs in SMTP Notifier by default 2020-01-10 17:37:16 +01:00
utils [FEATURE] Remember Me Configuration (#813) 2020-04-04 10:11:33 +11:00