techies/authelia
1
0
Fork 0
mirror of https://github.com/0rangebananaspy/authelia.git synced 2024-09-14 22:47:21 +07:00
Code Issues Projects Releases Wiki Activity
2,671 Commits 1 Branch 0 Tags 25 MiB
43550b2d92
Commit Graph

525 Commits

Author SHA1 Message Date
renovate[bot]
b18eea039c
build(deps): update node.js to v18 (#3225) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-04-21 18:28:35 +10:00
Amir Zarrinkafsh
daaa16c182
refactor(suites): validate totp inputs (#3218) 
This change validates the inputs for the TOTP code entry.
This was previously discarded and left unvalidated during the move to rod from within the integration tests.
 2022-04-19 14:11:15 +10:00
Amir Zarrinkafsh
92e219b34b
fix(suites): add missing traefik routes (#3217) 
This change includes missing routes for both the Traefik and Traefik2 suites, issues would have manifested running dev mode tests for these suites when attempting to load translations.
 2022-04-19 13:36:49 +10:00
James Elliott
e99fb7a08f
feat(configuration): configurable default second factor method (#3081) 
This allows configuring the default second factor method.
 2022-04-18 09:58:24 +10:00
James Elliott
e56690c2df
refactor(configuration): ensure all keys are validated (#3208) 
This ensures keys that exist in slices are validated.
 2022-04-16 20:48:07 +10:00
James Elliott
dc7ca6f03c
refactor: introduce config key gen (#3206) 
This adjusts the validated keys to utilize a generated code section.
 2022-04-16 19:00:39 +10:00
James Elliott
5aa25ec275
fix(configuration): missing valid keys (#3207) 
This fixes an issue with three missing config keys.
 2022-04-16 17:49:13 +10:00
James Elliott
4710de33a4
refactor(configuration): remove ptr for duoapi and notifier (#3200) 
This adds to the ongoing effort to remove all pointers to structs in the configuration without breaking backwards compatibility.
 2022-04-16 09:34:26 +10:00
James Elliott
92aba8eb0b
feat(server): zxcvbn password policy server side (#3151) 
This is so the zxcvbn ppolicy is checked on the server.
 2022-04-15 19:30:51 +10:00
renovate[bot]
c5cb36c526
build(deps): update dependency golang to v1.17.9 (#3198) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-04-15 15:53:15 +10:00
James Elliott
6e0853a81b
build(deps): update dependency golang (#3180) 2022-04-13 14:28:31 +10:00
James Elliott
f97474f01b
fix(oidc): show detailed error reasons (#3175) 2022-04-12 21:39:15 +10:00
James Elliott
85a88de24d
test(oidc): fix disabled tests (#3173) 2022-04-12 13:02:12 +10:00
James Elliott
cf93e66391
test(suites): fix backend endpoints (#3158) 2022-04-10 08:05:27 +10:00
Manuel Nuñez
086b97d21f
test(suites): revert por binding (#3155) 
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-04-10 07:44:47 +10:00
James Elliott
79935c7e2e
fix(server): locale format incorrect (#3154) 
This fixes an issue where the locale would be formatted as en-en instead of en-US.
 2022-04-09 21:38:17 +10:00
James Elliott
5a0a15f377
feat(commands): user opaque identifiers commands (#3144) 
Add commands for handling user opaque identifiers.
 2022-04-09 17:13:19 +10:00
James Elliott
e7112bfbd6
feat(oidc): client id claims (#3150) 
Adds the authorized party (azp) and client_id registered claims to ID Tokens.
 2022-04-09 16:55:24 +10:00
James Elliott
148ec1e2e0
fix(oidc): missing amr claim supported in discovery (#3147) 
This adds the AMR claim to discovery.
 2022-04-09 09:35:13 +10:00
James Elliott
9d5ac4526e
fix(configuration): remove unused password policy option (#3149) 
Removes the min score option from the ZXCVBN policy and adds tests.
 2022-04-09 09:21:49 +10:00
James Elliott
f9da940bfc
fix(web): description of profile scope is not accurate (#3146) 
This adjusts the profile scope to be described as "Access your profile information" as it accesses more than the display name now.
 2022-04-09 08:47:21 +10:00
James Elliott
44bd70712c
fix(configuration): sector identifier not parsed correctly (#3142) 
This fixes an issue preventing the sector identifier for OpenID Connect clients from being parsed.
 2022-04-08 17:38:38 +10:00
James Elliott
66a450ed38
feat(oidc): pre-configured consent (#3118) 
Allows users to pre-configure consent if enabled by the client configuration by selecting a checkbox during consent.

Closes #2598
 2022-04-08 15:35:21 +10:00
James Elliott
4503ac07be
fix(web): lowercase locales are not consistent with localization platforms (#3141) 
This fixes an issue with localization platforms and the docs regarding localization, and the forcing locale names to lowercase.
 2022-04-08 14:53:46 +10:00
James Elliott
ce6bf74c8d
fix(server): incorrect remote ip logged in error handler (#3139) 
This fixes edge cases where the remote IP was not correctly logged. Generally this is not an issue as most errors do not hit this handler, but in instances where a transport error occurs this is important.
 2022-04-08 14:13:47 +10:00
James Elliott
90edf11b88
feat(web): add user display name to oidc consent view (#3138) 
This adds the current logged in users display name to the consent page as well as some other minor tweaks.

Closes #2595
 2022-04-08 12:50:55 +10:00
James Elliott
9b6bcca1ba
feat(totp): secret customization (#2681) 
Allow customizing the shared secrets size specifically for apps which don't support 256bit shared secrets.
 2022-04-08 09:01:01 +10:00
James Elliott
8bb8207808
feat(oidc): pairwise subject identifiers (#3116) 
Allows configuring clients with a sector identifier to allow pairwise subject types.
 2022-04-07 16:13:01 +10:00
James Elliott
0a970aef8a
feat(oidc): persistent storage (#2965) 
This moves the OpenID Connect storage from memory into the SQL storage, making it persistent and allowing it to be used with clustered deployments like the rest of Authelia.
 2022-04-07 15:33:53 +10:00
James Elliott
06fd7105ea
refactor(templates): utilize more accurate naming (#3125) 2022-04-07 13:05:20 +10:00
James Elliott
4ebd8fdf4e
feat(oidc): provide cors config including options handlers (#3005) 
This adjusts the CORS headers appropriately for OpenID Connect. This includes responding to OPTIONS requests appropriately. Currently this is only configured to operate when the Origin scheme is HTTPS; but can easily be expanded in the future to include additional Origins.
 2022-04-07 10:58:51 +10:00
renovate[bot]
d96c93ef2b
build(deps): update module github.com/valyala/fasthttp to v1.35.0 (#3120) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-04-06 07:57:23 +10:00
renovate[bot]
004490c7b1
build(deps): update dependency alpine to v3.15.4 (#3114) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-04-05 11:15:43 +10:00
Clément Michaud
3ca438e3d5
feat: implement mutual tls in the web server (#3065) 
Mutual TLS helps prevent untrusted clients communicating with services like Authelia. This can be utilized to reduce the attack surface.

Fixes #3041
 2022-04-05 09:57:47 +10:00
James Elliott
a2eb0316c8
feat(web): password reset custom url (#3111) 
This allows providing a custom URL for password resets. If provided the disable_reset_password option is ignored, the password reset API is disabled, and the button provided in the UI to reset the password redirects users to the configured endpoint.

Closes #1934, Closes #2854

Co-authored-by: you1996 <youssri@flyweight.tech>
 2022-04-04 17:46:55 +10:00
James Elliott
aac4c4772c
feat(web): i18n asset overrides (#3040) 
This allows overriding translation files in folders with lowercase RFC5646 / BCP47 Format language codes. This also fixes an issues where languages which don't expressly match the language code specified due to having a variant will also match the existing codes.

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
 2022-04-04 12:15:26 +10:00
James Elliott
2502d89682
fix(server): respond with 404/405 appropriately (#3087) 
This adjusts the not found handler to not respond with a 404 on not found endpoints that are part of the /api or /.well-known folders, and respond with a 405 when the method isn't implemented.

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
 2022-04-04 09:58:01 +10:00
James Elliott
7230db7cea
refactor(configuration): decode_hooks blackbox and better testing (#3097) 2022-04-03 22:44:52 +10:00
Manuel Nuñez
bfd5d66ed8
feat(notification): password reset notification custom templates (#2828) 
Implemented a system to allow overriding email templates, including the remote IP, and sending email notifications when the password was reset successfully.

Closes #2755, Closes #2756

Co-authored-by: Manuel Nuñez <@mind-ar>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-04-03 22:24:51 +10:00
James Elliott
9e05066097
refactor(handlers): ppolicy (#3103) 
Add tests and makes the password policy a provider so the configuration can be loaded to memory on startup.
 2022-04-03 21:58:27 +10:00
James Elliott
36cf662458
refactor: misc password policy refactoring (#3102) 
Add tests and makes the password policy a provider so the configuration can be loaded to memory on startup.
 2022-04-03 10:48:26 +10:00
Manuel Nuñez
8659ba394d
feat(authentication): password policy (#2723) 
Implement a password policy with visual feedback in the web portal.

Co-authored-by: Manuel Nuñez <@mind-ar>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-04-03 08:32:57 +10:00
James Elliott
4d7f930e74
docs: fix regex examples (#3094) 2022-04-02 16:41:16 +11:00
yossbg
1bae65ad33
feat(templates): display link in mails sent by authelia (#2785) 
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-04-01 23:34:17 +11:00
James Elliott
3c1bb3ec19
feat(authorization): domain regex match with named groups (#2789) 
This adds an option to match domains by regex including two special named matching groups. User matches the username of the user, and Group matches the groups a user is a member of. These are both case-insensitive and you can see examples in the docs.
 2022-04-01 22:38:49 +11:00
James Elliott
0116506330
feat(oidc): implement amr claim (#2969) 
This adds the amr claim which stores methods used to authenticate with Authelia by the users session.
 2022-04-01 22:18:58 +11:00
James Elliott
b2d35d88ec
feat(configuration): allow rfc4918 http verbs in acl (#2988) 
This allows the HTTP Method verbs from RFC4918 to be used. See https://datatracker.ietf.org/doc/html/rfc4918 for more information.
 2022-04-01 21:53:10 +11:00
renovate[bot]
df9492ca0e
build(deps): update dependency traefik to v2.6.3 (#3075) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-03-31 17:00:08 +11:00
renovate[bot]
56048dd199
build(deps): update dependency alpine to v3.15.3 (#3072) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-03-29 14:08:54 +11:00
James Elliott
a0bffe39fc
fix(configuration): expvars and pprof mapped incorrectly (#3068) 
This fixes the configuration mapping of the server enable_pprof and enable_expvars values.
 2022-03-28 13:06:31 +11:00