authelia/package.json

{
  "name": "authelia",
  "version": "3.12.0",
  "description": "2FA Single Sign-On server for nginx using LDAP, TOTP and U2F",
  "bin": {
    "authelia": "./dist/server/src/index.js"
  },
  "engines": {
    "node": ">=8.0.0 <10.0.0"
  },
  "scripts": {
    "start": "./scripts/authelia-scripts suites start",
    "build": "./scripts/authelia-scripts build",
    "unittest": "./scripts/authelia-scripts unittest",
    "test": "./scripts/authelia-scripts suites test",
    "travis": "./scripts/authelia-scripts travis",
    "cover": "NODE_ENV=test nyc npm t",
    "scripts": "./scripts/authelia-scripts",
    "hash-password": "./scripts/authelia-scripts hash-password"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/clems4ever/authelia"
  },
  "author": "Clement Michaud <clement.michaud34@gmail.com>",
  "license": "MIT",
  "bugs": {
    "url": "https://github.com/clems4ever/authelia/issues"
  },
  "apidoc": {
    "title": "Authelia API documentation"
  },
  "dependencies": {
    "@types/url-parse": "^1.4.2",
    "ajv": "^6.3.0",
    "bluebird": "^3.5.0",
    "body-parser": "^1.15.2",
    "connect-redis": "^3.3.0",
    "crypt3": "^1.0.0",
    "ejs": "^2.5.5",
    "express": "^4.14.0",
    "express-request-id": "^1.4.0",
    "express-session": "^1.14.2",
    "helmet": "^3.12.0",
    "ldapjs": "^1.0.2",
    "mongodb": "^3.0.5",
    "nedb": "^1.8.0",
    "nodemailer": "^4.0.1",
    "nodemailer-direct-transport": "^3.3.2",
    "nodemailer-smtp-transport": "^2.7.4",
    "object-path": "^0.11.3",
    "randomatic": "^3.1.0",
    "randomstring": "^1.1.5",
    "redis": "^2.8.0",
    "speakeasy": "^2.0.0",
    "u2f": "^0.1.2",
    "u2f-api": "^1.0.7",
    "url-parse": "^1.4.4",
    "winston": "^2.3.1",
    "yamljs": "^0.3.0"
  },
  "devDependencies": {
    "@types/bluebird": "^3.5.4",
    "@types/body-parser": "^1.16.3",
    "@types/chokidar": "^1.7.5",
    "@types/commander": "^2.12.2",
    "@types/connect-redis": "0.0.7",
    "@types/ejs": "^2.3.33",
    "@types/express": "^4.0.35",
    "@types/express-session": "1.15.8",
    "@types/helmet": "0.0.37",
    "@types/ldapjs": "^1.0.3",
    "@types/mocha": "^5.2.6",
    "@types/mockdate": "^2.0.0",
    "@types/mongodb": "^3.0.9",
    "@types/nedb": "^1.8.3",
    "@types/node-fetch": "^2.1.4",
    "@types/nodemailer": "^4.6.0",
    "@types/nodemailer-direct-transport": "^1.0.31",
    "@types/nodemailer-smtp-transport": "^2.7.4",
    "@types/object-path": "^0.9.28",
    "@types/query-string": "^5.1.0",
    "@types/randomstring": "^1.1.5",
    "@types/redis": "^2.6.0",
    "@types/request": "^2.0.5",
    "@types/request-promise": "^4.1.38",
    "@types/selenium-webdriver": "^3.0.4",
    "@types/sinon": "^4.3.0",
    "@types/speakeasy": "^2.0.2",
    "@types/tmp": "0.0.33",
    "@types/winston": "^2.3.2",
    "@types/yamljs": "^0.2.30",
    "apidoc": "^0.17.6",
    "chokidar": "^2.0.4",
    "chromedriver": "^2.37.0",
    "commander": "^2.19.0",
    "concurrently": "^4.1.0",
    "grunt": "^1.0.3",
    "grunt-contrib-clean": "^2.0.0",
    "grunt-contrib-copy": "^1.0.0",
    "grunt-run": "^0.8.0",
    "istanbul": "^0.4.5",
    "jquery": "^3.2.1",
    "mocha": "^6.0.2",
    "mockdate": "^2.0.1",
    "node-fetch": "^2.3.0",
    "nodemon": "^1.18.9",
    "nyc": "^13.3.0",
    "query-string": "^6.0.0",
    "readable-stream": "^2.3.3",
    "request": "^2.88.0",
    "request-promise": "^4.2.2",
    "selenium-webdriver": "^4.0.0-alpha.1",
    "should": "^13.2.1",
    "sinon": "^5.0.7",
    "tmp": "0.0.33",
    "tree-kill": "^1.2.1",
    "ts-node": "^6.0.1",
    "tslint": "^5.2.0",
    "typescript": "^2.9.2",
    "typescript-json-schema": "^0.23.0"
  },
  "nyc": {
    "include": [
      "src/*.ts",
      "src/**/*.ts"
    ],
    "exclude": [
      "doc",
      "src/types",
      "dist",
      "test",
      "src/**/*.d.ts"
    ],
    "extension": [
      ".ts"
    ],
    "require": [
      "ts-node/register"
    ],
    "reporter": [
      "json",
      "html"
    ],
    "all": true
  }
}
First commit with tests 2016-12-10 07:47:58 +07:00			`{`
Adding ApiDoc documentation to the repository 2017-01-29 07:33:48 +07:00			`"name": "authelia",`
3.12.0 2019-03-03 17:35:53 +07:00			`"version": "3.12.0",`
Refactor client to make it responsive and testable 2017-05-25 20:09:29 +07:00			`"description": "2FA Single Sign-On server for nginx using LDAP, TOTP and U2F",`
Add content in the configuration section of the README. Create a npm command called authelia 2017-01-29 22:55:23 +07:00			`"bin": {`
Split client and server Client and server now have their own tsconfig so that the transpilation is only done on the part that is being modified. It also allows faster transpilation since tests are now excluded from tsconfig. They are compiled by ts-node during unit tests execution. 2017-10-07 05:09:42 +07:00			`"authelia": "./dist/server/src/index.js"`
Add content in the configuration section of the README. Create a npm command called authelia 2017-01-29 22:55:23 +07:00			`},`
Authelia can be run locally while communicating with docker environment. 2019-01-27 21:54:29 +07:00			`"engines": {`
			`"node": ">=8.0.0 <10.0.0"`
			`},`
First commit with tests 2016-12-10 07:47:58 +07:00			`"scripts": {`
Fix some npm commands. 2019-03-03 04:20:28 +07:00			`"start": "./scripts/authelia-scripts suites start",`
Authelia can be run locally while communicating with docker environment. 2019-01-27 21:54:29 +07:00			`"build": "./scripts/authelia-scripts build",`
Fix unit tests. 2019-02-22 16:27:54 +07:00			`"unittest": "./scripts/authelia-scripts unittest",`
Fix some npm commands. 2019-03-03 04:20:28 +07:00			`"test": "./scripts/authelia-scripts suites test",`
Use authelia-scripts in travis. 2019-02-24 05:28:33 +07:00			`"travis": "./scripts/authelia-scripts travis",`
Improve authelia-scripts to add suites with Docker-based Authelia server. 2019-03-02 22:19:08 +07:00			`"cover": "NODE_ENV=test nyc npm t",`
Update the documentation to include info about suites and authelia-scripts. 2019-03-03 06:25:40 +07:00			`"scripts": "./scripts/authelia-scripts",`
			`"hash-password": "./scripts/authelia-scripts hash-password"`
First commit with tests 2016-12-10 07:47:58 +07:00			`},`
			`"repository": {`
			`"type": "git",`
Fix url to git repository in package.json 2017-03-17 04:37:30 +07:00			`"url": "git+https://github.com/clems4ever/authelia"`
First commit with tests 2016-12-10 07:47:58 +07:00			`},`
Fix publication in npm 2016-12-18 09:05:13 +07:00			`"author": "Clement Michaud <clement.michaud34@gmail.com>",`
			`"license": "MIT",`
First commit with tests 2016-12-10 07:47:58 +07:00			`"bugs": {`
Fix url to git repository in package.json 2017-03-17 04:37:30 +07:00			`"url": "https://github.com/clems4ever/authelia/issues"`
First commit with tests 2016-12-10 07:47:58 +07:00			`},`
Adding ApiDoc documentation to the repository 2017-01-29 07:33:48 +07:00			`"apidoc": {`
			`"title": "Authelia API documentation"`
			`},`
First commit with tests 2016-12-10 07:47:58 +07:00			`"dependencies": {`
Fix e2e tests for complete configuration. 2019-01-31 04:44:03 +07:00			`"@types/url-parse": "^1.4.2",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"ajv": "^6.3.0",`
Change the how-to to build Authelia in the README 2017-10-24 05:11:22 +07:00			`"bluebird": "^3.5.0",`
First commit with tests 2016-12-10 07:47:58 +07:00			`"body-parser": "^1.15.2",`
Add redis option to the express-session middleware 2017-06-30 00:41:05 +07:00			`"connect-redis": "^3.3.0",`
Strengthen password in LDAP using SHA512 crypt algorithm Uses the crypt() function to do password encryption. This function handles several schemes such as: MD5, Blowfish, SHA1, SHA2. SHA-512 is used in Authelia for best security. The algorithm is fully described in https://www.akkadia.org/drepper/SHA-crypt.txt The 'crypt3' npm package has been added as a dependency to use the crypt() function. The package needs to be compiled in order to call the c function, that's why python, make and C++ compiler are installed temporarily in the Docker image. 2017-10-20 05:42:33 +07:00			`"crypt3": "^1.0.0",`
First commit with tests 2016-12-10 07:47:58 +07:00			`"ejs": "^2.5.5",`
			`"express": "^4.14.0",`
Improve logging format for clarity Previously, logs were not very friendly and it was hard to track a request because of the lack of request ID. Now every log message comes with a header containing: method, path request ID, session ID, IP of the user, date. Moreover, the configurations displayed in the logs have their secrets hidden from this commit. 2017-10-08 05:46:57 +07:00			`"express-request-id": "^1.4.0",`
Implement FIDO u2f authentication 2017-01-21 23:41:06 +07:00			`"express-session": "^1.14.2",`
Add helmet dependency and add it as express middleware 2018-04-26 04:14:25 +07:00			`"helmet": "^3.12.0",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"ldapjs": "^1.0.2",`
Fix unit and integration tests 2018-03-29 05:04:59 +07:00			`"mongodb": "^3.0.5",`
Use filesystem data store to save u2f meta info 2017-01-22 02:24:35 +07:00			`"nedb": "^1.8.0",`
Upgrade nodemailer, request and assert npm packages 2017-06-29 23:56:41 +07:00			`"nodemailer": "^4.0.1",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"nodemailer-direct-transport": "^3.3.2",`
			`"nodemailer-smtp-transport": "^2.7.4",`
First commit with tests 2016-12-10 07:47:58 +07:00			`"object-path": "^0.11.3",`
Update bootstrap and randomatic dependencies. 2018-10-13 15:16:18 +07:00			`"randomatic": "^3.1.0",`
Registration process sends an email to allow user to register its U2F device 2017-01-22 23:54:45 +07:00			`"randomstring": "^1.1.5",`
Add logs to detect redis connection issues earlier Before this fix, the application was simply crashing during execution when connection to redis was failing. Now, it is correctly handled with failing promises and logs have been enabled to clearly see the problem 2017-09-22 03:07:34 +07:00			`"redis": "^2.8.0",`
Implement FIDO u2f authentication 2017-01-21 23:41:06 +07:00			`"speakeasy": "^2.0.0",`
Refactor client to make it responsive and testable 2017-05-25 20:09:29 +07:00			`"u2f": "^0.1.2",`
Fix U2F authentication by upgrading libraries. 2018-11-04 23:54:40 +07:00			`"u2f-api": "^1.0.7",`
Fix e2e tests for complete configuration. 2019-01-31 04:44:03 +07:00			`"url-parse": "^1.4.4",`
Registration process sends an email to allow user to register its U2F device 2017-01-22 23:54:45 +07:00			`"winston": "^2.3.1",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"yamljs": "^0.3.0"`
First commit with tests 2016-12-10 07:47:58 +07:00			`},`
			`"devDependencies": {`
Move TOTP authenticator to typescript 2017-05-21 17:14:59 +07:00			`"@types/bluebird": "^3.5.4",`
Migrate server to typescript 2017-05-17 04:17:46 +07:00			`"@types/body-parser": "^1.16.3",`
Improve authelia-scripts to add suites with Docker-based Authelia server. 2019-03-02 22:19:08 +07:00			`"@types/chokidar": "^1.7.5",`
			`"@types/commander": "^2.12.2",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"@types/connect-redis": "0.0.7",`
Move notifiers to typescript 2017-05-20 14:49:05 +07:00			`"@types/ejs": "^2.3.33",`
First step to typescript transformation 2017-05-13 23:12:26 +07:00			`"@types/express": "^4.0.35",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"@types/express-session": "1.15.8",`
Add helmet dependency and add it as express middleware 2018-04-26 04:14:25 +07:00			`"@types/helmet": "0.0.37",`
Fix ECONNRESET when LDAP queries fail. (#261) This commit should fix #225. In order to avoid stalling LDAP connections, Authelia creates new sessions for each set of queries bound to one authentication, i.e., one session for authentication, emails retrieval and groups retrieval. Before this commit, a failing query was preventing the session to be closed (unbind was not called). Now, unbind is always called whatever the outcome of the query. I took the opportunity of this commit to refactor LDAP client in order to prepare the work on users database stored in a file. (#233) 2018-08-26 00:22:48 +07:00			`"@types/ldapjs": "^1.0.3",`
Fix unit tests. 2019-02-22 16:27:54 +07:00			`"@types/mocha": "^5.2.6",`
Migrate server to typescript 2017-05-17 04:17:46 +07:00			`"@types/mockdate": "^2.0.0",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"@types/mongodb": "^3.0.9",`
First step to typescript transformation 2017-05-13 23:12:26 +07:00			`"@types/nedb": "^1.8.3",`
Migrate some tests to mocha. 2019-02-10 05:20:37 +07:00			`"@types/node-fetch": "^2.1.4",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"@types/nodemailer": "^4.6.0",`
			`"@types/nodemailer-direct-transport": "^1.0.31",`
			`"@types/nodemailer-smtp-transport": "^2.7.4",`
First step to typescript transformation 2017-05-13 23:12:26 +07:00			`"@types/object-path": "^0.9.28",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"@types/query-string": "^5.1.0",`
Finish migration to typescript 2017-05-22 03:45:54 +07:00			`"@types/randomstring": "^1.1.5",`
Add logs to detect redis connection issues earlier Before this fix, the application was simply crashing during execution when connection to redis was failing. Now, it is correctly handled with failing promises and logs have been enabled to clearly see the problem 2017-09-22 03:07:34 +07:00			`"@types/redis": "^2.6.0",`
Every public endpoints return 200 with harmonized error messages or 401 Now, /verify can return 401 or 403 depending on the user authentication. Every public API endpoints and pages return 200 with error message in JSON body or 401 if the user is not authorized. This policy makes it complicated for an attacker to know what is the source of the failure and hide server-side bugs (not returning 500), bugs being potential threats. 2017-10-11 04:03:30 +07:00			`"@types/request": "^2.0.5",`
			`"@types/request-promise": "^4.1.38",`
Replace mocha integration tests by cucumber tests 2017-07-27 04:45:26 +07:00			`"@types/selenium-webdriver": "^3.0.4",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"@types/sinon": "^4.3.0",`
Bump all dependencies 2018-04-27 04:20:10 +07:00			`"@types/speakeasy": "^2.0.2",`
Migrate server to typescript 2017-05-17 04:17:46 +07:00			`"@types/tmp": "0.0.33",`
First step to typescript transformation 2017-05-13 23:12:26 +07:00			`"@types/winston": "^2.3.2",`
			`"@types/yamljs": "^0.2.30",`
Refactor client to make it responsive and testable 2017-05-25 20:09:29 +07:00			`"apidoc": "^0.17.6",`
Introduce the concept of suite in authelia-scripts. 2019-02-05 05:23:59 +07:00			`"chokidar": "^2.0.4",`
Update chrome driver to fix integration tests 2018-03-30 04:20:16 +07:00			`"chromedriver": "^2.37.0",`
Introduce authelia-cli to ease development cycle. 2019-01-26 23:15:35 +07:00			`"commander": "^2.19.0",`
Authelia can be run locally while communicating with docker environment. 2019-01-27 21:54:29 +07:00			`"concurrently": "^4.1.0",`
Bump grunt and grunt-contrib-watch. 2018-11-03 21:36:18 +07:00			`"grunt": "^1.0.3",`
Added cleaning of dist folder before build, by adding grunt-clean, fixed css concat 2018-12-18 05:27:58 +07:00			`"grunt-contrib-clean": "^2.0.0",`
First step to typescript transformation 2017-05-13 23:12:26 +07:00			`"grunt-contrib-copy": "^1.0.0",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"grunt-run": "^0.8.0",`
Refactor client to make it responsive and testable 2017-05-25 20:09:29 +07:00			`"istanbul": "^0.4.5",`
			`"jquery": "^3.2.1",`
Bump mocha to use forbidOnly and forbidPending options. 2019-03-03 04:05:50 +07:00			`"mocha": "^6.0.2",`
Registration process sends an email to allow user to register its U2F device 2017-01-22 23:54:45 +07:00			`"mockdate": "^2.0.1",`
Migrate some tests to mocha. 2019-02-10 05:20:37 +07:00			`"node-fetch": "^2.3.0",`
Backend and frontend are reloaded on code change. 2019-01-12 04:11:54 +07:00			`"nodemon": "^1.18.9",`
Fix unit tests. 2019-02-22 16:27:54 +07:00			`"nyc": "^13.3.0",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"query-string": "^6.0.0",`
Change the how-to to build Authelia in the README 2017-10-24 05:11:22 +07:00			`"readable-stream": "^2.3.3",`
Bump request package. 2018-10-13 16:52:25 +07:00			`"request": "^2.88.0",`
Add SMTP notifier as an available option in configuration One can now plug its own SMTP server to send notifications for identity validation and password reset requests. Filesystem has been removed from the template configuration file since even tests now use mail catcher (the fake webmail) to retrieve the email and the confirmation link. 2017-09-24 19:49:03 +07:00			`"request-promise": "^4.2.2",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"selenium-webdriver": "^4.0.0-alpha.1",`
			`"should": "^13.2.1",`
Bump all dependencies 2018-04-27 04:20:10 +07:00			`"sinon": "^5.0.7",`
Bump npm dependencies 2018-03-23 16:13:00 +07:00			`"tmp": "0.0.33",`
Migrate more tests to mocha. 2019-02-14 05:04:57 +07:00			`"tree-kill": "^1.2.1",`
Bump all dependencies 2018-04-27 04:20:10 +07:00			`"ts-node": "^6.0.1",`
Fix packaging in travis 2017-05-13 23:32:25 +07:00			`"tslint": "^5.2.0",`
Fix e2e test with minimal configuration. 2019-01-30 22:47:03 +07:00			`"typescript": "^2.9.2",`
Introduce authelia-cli to ease development cycle. 2019-01-26 23:15:35 +07:00			`"typescript-json-schema": "^0.23.0"`
Refactor client to make it responsive and testable 2017-05-25 20:09:29 +07:00			`},`
			`"nyc": {`
			`"include": [`
			`"src/*.ts",`
			`"src/*/.ts"`
			`],`
			`"exclude": [`
			`"doc",`
			`"src/types",`
			`"dist",`
Add Mongo as scalable and resilient storage backend 2017-07-20 02:06:12 +07:00			`"test",`
			`"src/*/.d.ts"`
Refactor client to make it responsive and testable 2017-05-25 20:09:29 +07:00			`],`
			`"extension": [`
			`".ts"`
			`],`
			`"require": [`
			`"ts-node/register"`
			`],`
			`"reporter": [`
			`"json",`
			`"html"`
			`],`
			`"all": true`
First commit with tests 2016-12-10 07:47:58 +07:00			`}`
			`}`