techies/authelia
1
0
Fork 0
mirror of https://github.com/0rangebananaspy/authelia.git synced 2024-09-14 22:47:21 +07:00
Code Issues Projects Releases Wiki Activity
a2258aeb7e
authelia/package.json

143 lines
3.8 KiB
JSON
Raw Normal View History

First commit with tests
2016-12-10 07:47:58 +07:00
{
Adding ApiDoc documentation to the repository
2017-01-29 07:33:48 +07:00
"name": "authelia",
3.16.2
2019-10-29 03:35:43 +07:00
"version": "3.16.2",
Refactor client to make it responsive and testable
2017-05-25 20:09:29 +07:00
"description": "2FA Single Sign-On server for nginx using LDAP, TOTP and U2F",
Add content in the configuration section of the README. Create a npm command called authelia
2017-01-29 22:55:23 +07:00
"bin": {
Split client and server Client and server now have their own tsconfig so that the transpilation is only done on the part that is being modified. It also allows faster transpilation since tests are now excluded from tsconfig. They are compiled by ts-node during unit tests execution.
2017-10-07 05:09:42 +07:00
"authelia": "./dist/server/src/index.js"
Add content in the configuration section of the README. Create a npm command called authelia
2017-01-29 22:55:23 +07:00
},
Authelia can be run locally while communicating with docker environment.
2019-01-27 21:54:29 +07:00
"engines": {
"node": ">=8.0.0 <10.0.0"
},
First commit with tests
2016-12-10 07:47:58 +07:00
"scripts": {
Fix some npm commands.
2019-03-03 04:20:28 +07:00
"start": "./scripts/authelia-scripts suites start",
Authelia can be run locally while communicating with docker environment.
2019-01-27 21:54:29 +07:00
"build": "./scripts/authelia-scripts build",
Fix unit tests.
2019-02-22 16:27:54 +07:00
"unittest": "./scripts/authelia-scripts unittest",
Fix some npm commands.
2019-03-03 04:20:28 +07:00
"test": "./scripts/authelia-scripts suites test",
Use authelia-scripts in travis.
2019-02-24 05:28:33 +07:00
"travis": "./scripts/authelia-scripts travis",
Improve authelia-scripts to add suites with Docker-based Authelia server.
2019-03-02 22:19:08 +07:00
"cover": "NODE_ENV=test nyc npm t",
Update the documentation to include info about suites and authelia-scripts.
2019-03-03 06:25:40 +07:00
"scripts": "./scripts/authelia-scripts",
"hash-password": "./scripts/authelia-scripts hash-password"
First commit with tests
2016-12-10 07:47:58 +07:00
},
"repository": {
"type": "git",
Fix url to git repository in package.json
2017-03-17 04:37:30 +07:00
"url": "git+https://github.com/clems4ever/authelia"
First commit with tests
2016-12-10 07:47:58 +07:00
},
Fix publication in npm
2016-12-18 09:05:13 +07:00
"author": "Clement Michaud <clement.michaud34@gmail.com>",
"license": "MIT",
First commit with tests
2016-12-10 07:47:58 +07:00
"bugs": {
Fix url to git repository in package.json
2017-03-17 04:37:30 +07:00
"url": "https://github.com/clems4ever/authelia/issues"
First commit with tests
2016-12-10 07:47:58 +07:00
},
Adding ApiDoc documentation to the repository
2017-01-29 07:33:48 +07:00
"apidoc": {
"title": "Authelia API documentation"
},
First commit with tests
2016-12-10 07:47:58 +07:00
"dependencies": {
Add Duo Push Notification option as 2FA.
2019-03-24 21:15:49 +07:00
"@duosecurity/duo_api": "^1.2.0",
Bump npm dependencies
2018-03-23 16:13:00 +07:00
"ajv": "^6.3.0",
Change the how-to to build Authelia in the README
2017-10-24 05:11:22 +07:00
"bluebird": "^3.5.0",
First commit with tests
2016-12-10 07:47:58 +07:00
"body-parser": "^1.15.2",
[BREAKING] Create a suite for kubernetes tests. Authelia client uses hash router instead of browser router in order to work with Kubernetes nginx-ingress-controller. This is also better for users having old browsers. This commit is breaking because it requires to change the configuration of the proxy to include the # in the URL of the login portal.
2019-03-04 05:51:52 +07:00
"connect-redis": "^3.4.1",
Strengthen password in LDAP using SHA512 crypt algorithm Uses the crypt() function to do password encryption. This function handles several schemes such as: MD5, Blowfish, SHA1, SHA2. SHA-512 is used in Authelia for best security. The algorithm is fully described in https://www.akkadia.org/drepper/SHA-crypt.txt The 'crypt3' npm package has been added as a dependency to use the crypt() function. The package needs to be compiled in order to call the c function, that's why python, make and C++ compiler are installed temporarily in the Docker image.
2017-10-20 05:42:33 +07:00
"crypt3": "^1.0.0",
First commit with tests
2016-12-10 07:47:58 +07:00
"ejs": "^2.5.5",
"express": "^4.14.0",
Improve logging format for clarity Previously, logs were not very friendly and it was hard to track a request because of the lack of request ID. Now every log message comes with a header containing: method, path request ID, session ID, IP of the user, date. Moreover, the configurations displayed in the logs have their secrets hidden from this commit.
2017-10-08 05:46:57 +07:00
"express-request-id": "^1.4.0",
Implement FIDO u2f authentication
2017-01-21 23:41:06 +07:00
"express-session": "^1.14.2",
fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-HELMETCSP-469436
2019-09-30 14:50:58 +07:00
"helmet": "^3.21.1",
Add network criteria in ACLs to specify policy based on network subnet.
2019-03-28 05:09:01 +07:00
"ip-range-check": "0.0.2",
Bump npm dependencies
2018-03-23 16:13:00 +07:00
"ldapjs": "^1.0.2",
fix: package.json & package-lock.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-MONGODB-473855
2019-10-19 14:51:01 +07:00
"mongodb": "^3.1.13",
Use filesystem data store to save u2f meta info
2017-01-22 02:24:35 +07:00
"nedb": "^1.8.0",
Upgrade nodemailer, request and assert npm packages
2017-06-29 23:56:41 +07:00
"nodemailer": "^4.0.1",
Bump npm dependencies
2018-03-23 16:13:00 +07:00
"nodemailer-direct-transport": "^3.3.2",
"nodemailer-smtp-transport": "^2.7.4",
First commit with tests
2016-12-10 07:47:58 +07:00
"object-path": "^0.11.3",
Update bootstrap and randomatic dependencies.
2018-10-13 15:16:18 +07:00
"randomatic": "^3.1.0",
Registration process sends an email to allow user to register its U2F device
2017-01-22 23:54:45 +07:00
"randomstring": "^1.1.5",
Implement FIDO u2f authentication
2017-01-21 23:41:06 +07:00
"speakeasy": "^2.0.0",
Refactor client to make it responsive and testable
2017-05-25 20:09:29 +07:00
"u2f": "^0.1.2",
Fix U2F authentication by upgrading libraries.
2018-11-04 23:54:40 +07:00
"u2f-api": "^1.0.7",
Fix e2e tests for complete configuration.
2019-01-31 04:44:03 +07:00
"url-parse": "^1.4.4",
Registration process sends an email to allow user to register its U2F device
2017-01-22 23:54:45 +07:00
"winston": "^2.3.1",
Bump npm dependencies
2018-03-23 16:13:00 +07:00
"yamljs": "^0.3.0"
First commit with tests
2016-12-10 07:47:58 +07:00
},
"devDependencies": {
Move TOTP authenticator to typescript
2017-05-21 17:14:59 +07:00
"@types/bluebird": "^3.5.4",
Migrate server to typescript
2017-05-17 04:17:46 +07:00
"@types/body-parser": "^1.16.3",
Improve authelia-scripts to add suites with Docker-based Authelia server.
2019-03-02 22:19:08 +07:00
"@types/chokidar": "^1.7.5",
"@types/commander": "^2.12.2",
[BREAKING] Create a suite for kubernetes tests. Authelia client uses hash router instead of browser router in order to work with Kubernetes nginx-ingress-controller. This is also better for users having old browsers. This commit is breaking because it requires to change the configuration of the proxy to include the # in the URL of the login portal.
2019-03-04 05:51:52 +07:00
"@types/connect-redis": "0.0.9",
Move notifiers to typescript
2017-05-20 14:49:05 +07:00
"@types/ejs": "^2.3.33",
First step to typescript transformation
2017-05-13 23:12:26 +07:00
"@types/express": "^4.0.35",
Bump npm dependencies
2018-03-23 16:13:00 +07:00
"@types/express-session": "1.15.8",
Add helmet dependency and add it as express middleware
2018-04-26 04:14:25 +07:00
"@types/helmet": "0.0.37",
Fix ECONNRESET when LDAP queries fail. (#261) This commit should fix #225. In order to avoid stalling LDAP connections, Authelia creates new sessions for each set of queries bound to one authentication, i.e., one session for authentication, emails retrieval and groups retrieval. Before this commit, a failing query was preventing the session to be closed (unbind was not called). Now, unbind is always called whatever the outcome of the query. I took the opportunity of this commit to refactor LDAP client in order to prepare the work on users database stored in a file. (#233)
2018-08-26 00:22:48 +07:00
"@types/ldapjs": "^1.0.3",
Fix unit tests.
2019-02-22 16:27:54 +07:00
"@types/mocha": "^5.2.6",
Migrate server to typescript
2017-05-17 04:17:46 +07:00
"@types/mockdate": "^2.0.0",
Bump npm dependencies
2018-03-23 16:13:00 +07:00
"@types/mongodb": "^3.0.9",
First step to typescript transformation
2017-05-13 23:12:26 +07:00
"@types/nedb": "^1.8.3",
Migrate some tests to mocha.
2019-02-10 05:20:37 +07:00
"@types/node-fetch": "^2.1.4",
Bump npm dependencies
2018-03-23 16:13:00 +07:00
"@types/nodemailer": "^4.6.0",
"@types/nodemailer-direct-transport": "^1.0.31",
"@types/nodemailer-smtp-transport": "^2.7.4",
First step to typescript transformation
2017-05-13 23:12:26 +07:00
"@types/object-path": "^0.9.28",
Bump npm dependencies
2018-03-23 16:13:00 +07:00
"@types/query-string": "^5.1.0",
Finish migration to typescript
2017-05-22 03:45:54 +07:00
"@types/randomstring": "^1.1.5",
Every public endpoints return 200 with harmonized error messages or 401 Now, /verify can return 401 or 403 depending on the user authentication. Every public API endpoints and pages return 200 with error message in JSON body or 401 if the user is not authorized. This policy makes it complicated for an attacker to know what is the source of the failure and hide server-side bugs (not returning 500), bugs being potential threats.
2017-10-11 04:03:30 +07:00
"@types/request": "^2.0.5",
"@types/request-promise": "^4.1.38",
Replace mocha integration tests by cucumber tests
2017-07-27 04:45:26 +07:00
"@types/selenium-webdriver": "^3.0.4",
Bump npm dependencies
2018-03-23 16:13:00 +07:00
"@types/sinon": "^4.3.0",
Bump all dependencies
2018-04-27 04:20:10 +07:00
"@types/speakeasy": "^2.0.2",
Migrate server to typescript
2017-05-17 04:17:46 +07:00
"@types/tmp": "0.0.33",
[BREAKING] Create a suite for kubernetes tests. Authelia client uses hash router instead of browser router in order to work with Kubernetes nginx-ingress-controller. This is also better for users having old browsers. This commit is breaking because it requires to change the configuration of the proxy to include the # in the URL of the login portal.
2019-03-04 05:51:52 +07:00
"@types/url-parse": "^1.4.2",
First step to typescript transformation
2017-05-13 23:12:26 +07:00
"@types/winston": "^2.3.2",
"@types/yamljs": "^0.2.30",
Refactor client to make it responsive and testable
2017-05-25 20:09:29 +07:00
"apidoc": "^0.17.6",
Introduce the concept of suite in authelia-scripts.
2019-02-05 05:23:59 +07:00
"chokidar": "^2.0.4",
Update chrome driver to fix integration tests
2018-03-30 04:20:16 +07:00
"chromedriver": "^2.37.0",
Introduce authelia-cli to ease development cycle.
2019-01-26 23:15:35 +07:00
"commander": "^2.19.0",
Refactor client to make it responsive and testable
2017-05-25 20:09:29 +07:00
"istanbul": "^0.4.5",
Remove useless packages from server package.json.
2019-04-25 00:33:51 +07:00
"mocha": "^6.1.4",
Registration process sends an email to allow user to register its U2F device
2017-01-22 23:54:45 +07:00
"mockdate": "^2.0.1",
Migrate some tests to mocha.
2019-02-10 05:20:37 +07:00
"node-fetch": "^2.3.0",
Backend and frontend are reloaded on code change.
2019-01-12 04:11:54 +07:00
"nodemon": "^1.18.9",
Remove useless packages from server package.json.
2019-04-25 00:33:51 +07:00
"nyc": "^14.0.0",
Bump npm dependencies
2018-03-23 16:13:00 +07:00
"query-string": "^6.0.0",
Change the how-to to build Authelia in the README
2017-10-24 05:11:22 +07:00
"readable-stream": "^2.3.3",
Bump request package.
2018-10-13 16:52:25 +07:00
"request": "^2.88.0",
Add SMTP notifier as an available option in configuration One can now plug its own SMTP server to send notifications for identity validation and password reset requests. Filesystem has been removed from the template configuration file since even tests now use mail catcher (the fake webmail) to retrieve the email and the confirmation link.
2017-09-24 19:49:03 +07:00
"request-promise": "^4.2.2",
Bump npm dependencies
2018-03-23 16:13:00 +07:00
"selenium-webdriver": "^4.0.0-alpha.1",
"should": "^13.2.1",
Bump all dependencies
2018-04-27 04:20:10 +07:00
"sinon": "^5.0.7",
Bump npm dependencies
2018-03-23 16:13:00 +07:00
"tmp": "0.0.33",
Migrate more tests to mocha.
2019-02-14 05:04:57 +07:00
"tree-kill": "^1.2.1",
Fix the bypass strategy. Before this fix an anonymous user was not able to access a resource that were configured with a bypass policy. This was due to a useless check of the userid in the auth session. Moreover, in the case of an anonymous user, we should not check the inactivity period since there is no session. Also refactor /verify endpoint for better testability and add tests in a new suite.
2019-03-22 22:54:27 +07:00
"ts-mock-imports": "^1.2.3",
Bump all dependencies
2018-04-27 04:20:10 +07:00
"ts-node": "^6.0.1",
Fix packaging in travis
2017-05-13 23:32:25 +07:00
"tslint": "^5.2.0",
Fix e2e test with minimal configuration.
2019-01-30 22:47:03 +07:00
"typescript": "^2.9.2",
Introduce authelia-cli to ease development cycle.
2019-01-26 23:15:35 +07:00
"typescript-json-schema": "^0.23.0"
Refactor client to make it responsive and testable
2017-05-25 20:09:29 +07:00
},
"nyc": {
"include": [
"src/*.ts",
"src/**/*.ts"
],
"exclude": [
"doc",
"src/types",
"dist",
Add Mongo as scalable and resilient storage backend
2017-07-20 02:06:12 +07:00
"test",
"src/**/*.d.ts"
Refactor client to make it responsive and testable
2017-05-25 20:09:29 +07:00
],
"extension": [
".ts"
],
"require": [
"ts-node/register"
],
"reporter": [
"json",
"html"
],
"all": true
First commit with tests
2016-12-10 07:47:58 +07:00
}
}
Reference in New Issue Copy Permalink