James Elliott
f97474f01b
fix(oidc): show detailed error reasons ( #3175 )
2022-04-12 21:39:15 +10:00
James Elliott
85a88de24d
test(oidc): fix disabled tests ( #3173 )
2022-04-12 13:02:12 +10:00
renovate[bot]
3917ef9dcf
build(deps): update typescript-eslint monorepo to v5.19.0 ( #3167 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-12 08:09:18 +10:00
renovate[bot]
43549993a1
build(deps): update dependency i18next to v21.6.16 ( #3169 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-12 07:54:18 +10:00
renovate[bot]
269675d870
build(deps): update dependency @testing-library/react to v13.0.1 ( #3165 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-12 07:31:29 +10:00
renovate[bot]
3e4715402c
build(deps): update dependency react-i18next to v11.16.5 ( #3163 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-11 07:35:30 +10:00
renovate[bot]
dc2680e2d6
build(deps): update dependency react-i18next to v11.16.4 ( #3162 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-11 07:18:24 +10:00
renovate[bot]
06fd8eacae
build(deps): update dependency i18next to v21.6.15 ( #3159 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-10 21:21:45 +10:00
renovate[bot]
4ac52b546f
build(deps): update dependency react-i18next to v11.16.3 ( #3160 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-10 20:22:54 +10:00
James Elliott
cf93e66391
test(suites): fix backend endpoints ( #3158 )
2022-04-10 08:05:27 +10:00
Manuel Nuñez
086b97d21f
test(suites): revert por binding ( #3155 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-10 07:44:47 +10:00
renovate[bot]
77bca37c62
build(deps): update dependency @types/react to v18.0.1 ( #3157 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-10 07:07:29 +10:00
James Elliott
79935c7e2e
fix(server): locale format incorrect ( #3154 )
...
This fixes an issue where the locale would be formatted as en-en instead of en-US.
2022-04-09 21:38:17 +10:00
James Elliott
5a0a15f377
feat(commands): user opaque identifiers commands ( #3144 )
...
Add commands for handling user opaque identifiers.
2022-04-09 17:13:19 +10:00
James Elliott
e7112bfbd6
feat(oidc): client id claims ( #3150 )
...
Adds the authorized party (azp) and client_id registered claims to ID Tokens.
2022-04-09 16:55:24 +10:00
James Elliott
148ec1e2e0
fix(oidc): missing amr claim supported in discovery ( #3147 )
...
This adds the AMR claim to discovery.
2022-04-09 09:35:13 +10:00
James Elliott
9d5ac4526e
fix(configuration): remove unused password policy option ( #3149 )
...
Removes the min score option from the ZXCVBN policy and adds tests.
2022-04-09 09:21:49 +10:00
James Elliott
f9da940bfc
fix(web): description of profile scope is not accurate ( #3146 )
...
This adjusts the profile scope to be described as "Access your profile information" as it accesses more than the display name now.
2022-04-09 08:47:21 +10:00
renovate[bot]
e0a6d39363
build(deps): update module github.com/knadh/koanf to v1.4.1 ( #3143 )
...
* build(deps): update module github.com/knadh/koanf to v1.4.1
* fix: go.sum
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-08 23:55:02 +10:00
James Elliott
44bd70712c
fix(configuration): sector identifier not parsed correctly ( #3142 )
...
This fixes an issue preventing the sector identifier for OpenID Connect clients from being parsed.
2022-04-08 17:38:38 +10:00
James Elliott
66a450ed38
feat(oidc): pre-configured consent ( #3118 )
...
Allows users to pre-configure consent if enabled by the client configuration by selecting a checkbox during consent.
Closes #2598
2022-04-08 15:35:21 +10:00
James Elliott
4503ac07be
fix(web): lowercase locales are not consistent with localization platforms ( #3141 )
...
This fixes an issue with localization platforms and the docs regarding localization, and the forcing locale names to lowercase.
2022-04-08 14:53:46 +10:00
James Elliott
2da50f6128
docs: add k8s important notes ( #3140 )
...
Add some implementation notes about k8s.
Fixes #2882
2022-04-08 14:15:35 +10:00
James Elliott
ce6bf74c8d
fix(server): incorrect remote ip logged in error handler ( #3139 )
...
This fixes edge cases where the remote IP was not correctly logged. Generally this is not an issue as most errors do not hit this handler, but in instances where a transport error occurs this is important.
2022-04-08 14:13:47 +10:00
James Elliott
90edf11b88
feat(web): add user display name to oidc consent view ( #3138 )
...
This adds the current logged in users display name to the consent page as well as some other minor tweaks.
Closes #2595
2022-04-08 12:50:55 +10:00
Lorenz Schmid
5f51dcdb51
docs: fix missing backtick ( #3136 )
...
Fix formatting error introduced in #3131
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-08 09:33:14 +10:00
renovate[bot]
d47b21b4ec
build(deps): update module github.com/go-ldap/ldap/v3 to v3.4.3 ( #3137 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-08 09:30:59 +10:00
renovate[bot]
89112eb774
build(deps): update dependency @types/react to v18 ( #3134 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-08 09:14:57 +10:00
James Elliott
9b6bcca1ba
feat(totp): secret customization ( #2681 )
...
Allow customizing the shared secrets size specifically for apps which don't support 256bit shared secrets.
2022-04-08 09:01:01 +10:00
renovate[bot]
fe08bf56b0
build(deps): update dependency @types/react-dom to v18 ( #3135 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-08 08:22:27 +10:00
renovate[bot]
acff4a6b68
build(deps): update github.com/duosecurity/duo_api_golang digest to 46fb282 ( #3130 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-08 08:02:55 +10:00
Lorenz Schmid
efccf77c10
docs(oidc): seafile integration example ( #3131 )
...
- Adds description and callback URL for the Seafile file server.
- Orders the entries in the two OIDC integration tables by name.
2022-04-08 07:11:43 +10:00
James Elliott
ad84c8c33e
feat(oidc): opaque subject identifiers ( #3129 )
...
This is a meta commit for a feature originally implemented in 0a970aef8ahttps://openid.net/specs/openid-connect-core-1_0.html#SubjectIDTypes . Relying parties which utilize the subject identifier / sub claim may need manual intervention in order to relink accounts. Users who have issues will have to consult with the documentation of their individual relying parties in order to relink accounts. Users who utilized the subject identifier as a means to provision their users are also encouraged to utilize the preferred_username claim from the profile scope.
2022-04-07 17:35:54 +10:00
James Elliott
8bb8207808
feat(oidc): pairwise subject identifiers ( #3116 )
...
Allows configuring clients with a sector identifier to allow pairwise subject types.
2022-04-07 16:13:01 +10:00
James Elliott
0a970aef8a
feat(oidc): persistent storage ( #2965 )
...
This moves the OpenID Connect storage from memory into the SQL storage, making it persistent and allowing it to be used with clustered deployments like the rest of Authelia.
2022-04-07 15:33:53 +10:00
James Elliott
06fd7105ea
refactor(templates): utilize more accurate naming ( #3125 )
2022-04-07 13:05:20 +10:00
James Elliott
4ebd8fdf4e
feat(oidc): provide cors config including options handlers ( #3005 )
...
This adjusts the CORS headers appropriately for OpenID Connect. This includes responding to OPTIONS requests appropriately. Currently this is only configured to operate when the Origin scheme is HTTPS; but can easily be expanded in the future to include additional Origins.
2022-04-07 10:58:51 +10:00
renovate[bot]
a694cf851f
build(deps): update module github.com/fasthttp/router to v1.4.8 ( #3126 )
...
* build(deps): update module github.com/fasthttp/router to v1.4.8
* fix: go.sum
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-06 21:42:17 +10:00
renovate[bot]
6dde133cc1
build(deps): update module github.com/fasthttp/session/v2 to v2.4.9 ( #3127 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-06 20:58:13 +10:00
James Elliott
b325965a55
build(deps): update module github.com/go-webauthn/webauthn to v0.3.0 ( #3123 )
2022-04-06 14:45:01 +10:00
renovate[bot]
a6a924cf79
build(deps): update dependency eslint-plugin-import to v2.26.0 ( #3121 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-06 09:34:20 +10:00
renovate[bot]
5f4ce14615
build(deps): update dependency @testing-library/jest-dom to v5.16.4 ( #3119 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-06 08:22:27 +10:00
renovate[bot]
d96c93ef2b
build(deps): update module github.com/valyala/fasthttp to v1.35.0 ( #3120 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2022-04-06 07:57:23 +10:00
renovate[bot]
89b78f0ad3
build(deps): update dependency vite to v2.9.1 ( #3079 )
...
* build(deps): update dependency vite to v2.9.1
* fix(web): load correct vite env vars
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2022-04-05 15:43:52 +10:00
renovate[bot]
004490c7b1
build(deps): update dependency alpine to v3.15.4 ( #3114 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-05 11:15:43 +10:00
renovate[bot]
3ea41edbaa
build(deps): update typescript-eslint monorepo to v5.18.0 ( #3113 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-05 10:55:29 +10:00
Clément Michaud
3ca438e3d5
feat: implement mutual tls in the web server ( #3065 )
...
Mutual TLS helps prevent untrusted clients communicating with services like Authelia. This can be utilized to reduce the attack surface.
Fixes #3041
2022-04-05 09:57:47 +10:00
James Elliott
a2eb0316c8
feat(web): password reset custom url ( #3111 )
...
This allows providing a custom URL for password resets. If provided the disable_reset_password option is ignored, the password reset API is disabled, and the button provided in the UI to reset the password redirects users to the configured endpoint.
Closes #1934 , Closes #2854
Co-authored-by: you1996 <youssri@flyweight.tech>
2022-04-04 17:46:55 +10:00
James Elliott
b8280dfed6
build(deps): update dependency swagger-ui to 4.10.3 ( #3110 )
2022-04-04 14:59:27 +10:00
James Elliott
73212671fc
build(web): remove unused types ( #3109 )
2022-04-04 13:19:07 +10:00
