techies/authelia
1
0
Fork 0
mirror of https://github.com/0rangebananaspy/authelia.git synced 2024-09-14 22:47:21 +07:00
Code Issues Projects Releases Wiki Activity
1,021 Commits 1 Branch 0 Tags 25 MiB
91d2b75b64
Commit Graph

1021 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Clement Michaud
7a13523004 Fix basic authentication and tests 2018-04-25 23:22:41 +02:00
Clement Michaud
185419e09e Update README to reference kubernetes deployment documentation 2018-04-25 08:51:43 +02:00
Clement Michaud
bc72f5c508 Use x-original-url instead of host to deduce domain to check permissions for 2018-04-25 00:41:41 +02:00
Clement Michaud
4be299d6eb Adapt kube example to work without custom nginx template 2018-04-24 23:59:15 +02:00
Clement Michaud
48d6107b0b Rename redirect query parameter into rd for compatibility with nginx-ingress 2018-04-24 23:03:09 +02:00
Clement Michaud
a9a14f8586 Add original nginx-ingress template to compare with the new one 2018-04-24 22:32:56 +02:00
Clement Michaud
7acb097040 Add the configuration files to deploy Authelia in a Kube cluster 2018-04-24 22:32:56 +02:00
Clement Michaud
02293536f3 Move docker-compose configuration in dedicated directory 2018-04-24 22:32:56 +02:00
Clement Michaud
479d7ddc09 3.7.1 2018-04-24 22:12:27 +02:00
Clément Michaud
c0a055175c
Merge pull request #217 from clems4ever/custom-mail-attribute 
Attribute mail_attribute is not correcty taken into account
 2018-04-24 21:50:11 +02:00
Clement Michaud
bf3705b3e9 Attribute mail_attribute is not correcty taken into account 2018-04-24 21:33:31 +02:00
Clément Michaud
bf11bfbcf8
Merge pull request #212 from clems4ever/local-storage-config 
Fix local storage configuration in config template
 2018-03-30 00:08:52 +02:00
Clement Michaud
3883af0ecc Fix local storage configuration in config template 2018-03-29 23:50:47 +02:00
Clément Michaud
d0954a202a
Merge pull request #215 from clems4ever/update-npm-deps 
Update NPM dependencies
 2018-03-29 23:50:02 +02:00
Clement Michaud
a64462d3da Update chrome driver to fix integration tests 2018-03-29 23:20:16 +02:00
Clement Michaud
ae84b05645 Add changelog to the project 2018-03-29 23:09:31 +02:00
Clement Michaud
0b2f6ace83 Fix unit and integration tests 2018-03-29 23:09:29 +02:00
Clement Michaud
a5592252c7 Bump npm dependencies 2018-03-23 10:13:00 +01:00
Clément Michaud
8a1f38f2f1
Merge pull request #204 from clems4ever/verify-redirect 
Support 'redirect' parameter in /api/verify endpoint to support Traefik
 2017-12-06 13:46:25 +01:00
Clement Michaud
6586402114 Support 'redirect' in /api/verify endpoint to support Traefik 
Traefik handles auth forwarding but does not manage redirections like Nginx.
Therefore, Authelia must redirect the user and Traefik will forward this
request.

To support both Nginx and Traefik, /api/verify is now configurable with the
'redirect' get parameter. If the verification fails and 'redirect' is not
provided the response will be a 401 error as before.
If the parameter is provided and set to any URL, the response will be a
redirection (302) to this URL.
 2017-12-04 22:52:33 +01:00
Clement Michaud
3f6c375446 3.7.0 2017-11-28 22:40:42 +01:00
Clément Michaud
cbd70d076d
Merge pull request #203 from clems4ever/feature/warn-u2f-requirements 
Add links and tooltips at second factor stage to better guide the user
 2017-11-28 22:36:20 +01:00
Clement Michaud
cea92ba7d0 Upgrade npm version in travis 2017-11-28 21:56:50 +01:00
Clement Michaud
515a82eb8d Add links and tooltips at second factor stage to better guide the user 
A link to U2F explains what is a U2F security key and how they are used.

A tooltip on U2F device registration link is telling the user he needs a
security key to register.
 2017-11-28 21:56:50 +01:00
Clément Michaud
8f88f45cb2
Merge pull request #202 from clems4ever/feature/reset-password-enum 
Reset password form sends 200 status when user does not exist
 2017-11-18 23:32:47 +01:00
Clement Michaud
f47d3c2b0b Reset password form sends 200 status when user does not exist 
Reset password sends 200 status codes to avoid user enumeration.
 2017-11-18 21:27:07 +01:00
Clément Michaud
792afbc476
Merge pull request #198 from clems4ever/bugfix/firefox-u2f-api 
Fix not working u2f when using Firefox
 2017-11-09 00:51:21 +01:00
Clement Michaud
ca885e4b15 Fix not working u2f when using Firefox 
The u2f-api package does not use the official u2f script provided by Yubikey.
Unfortunately, it was blocked by Firefox.  This change reintroduces the
official u2f script.
 2017-11-09 00:21:24 +01:00
Clément Michaud
899246c374
Merge pull request #197 from clems4ever/feature/split-authelia-backend 
Create a more real world example with multiple reverse proxies
 2017-11-03 00:47:16 +01:00
Clement Michaud
a8974a9d8e Change domain from test.local to example.com 
Warning: you will need to update your /etc/hosts to take this change into
account for the example environment to work.
 2017-11-03 00:20:10 +01:00
Clement Michaud
bbbffaa3ae Split nginx service into portal, backend and authelia services 
This setup is closer to real production infrastructure.
 2017-11-03 00:20:10 +01:00
Clement Michaud
b8c8c3bd75 Move docker-compose files to the example directory 2017-11-03 00:20:10 +01:00
Clément Michaud
40a4fd0918
Merge pull request #196 from clems4ever/update-contributors 
Add contributors to source and documentation to CONTRIBUTORS.md
 2017-11-01 22:44:50 +01:00
Clement Michaud
cfaf5d3562 Add contributors to source and documentation to CONTRIBUTORS.md 2017-11-01 22:13:17 +01:00
Clément Michaud
c734effb84
Merge pull request #195 from clems4ever/feature/reduce-title 
Reduce font size and height of header
 2017-11-01 22:04:55 +01:00
Clement Michaud
28f9c52355 Reduce font size and height of the header 2017-11-01 21:42:12 +01:00
Clément Michaud
a5da5d790b
Merge pull request #194 from clems4ever/feature/fix-redirection 
Fix bad redirection when no default_redirection_url is provided
 2017-11-01 21:41:08 +01:00
Clement Michaud
d1f0543ac6 Fix bad redirection when no default_redirection_url is provided 2017-11-01 21:17:43 +01:00
Clément Michaud
b37c0293b8
Merge pull request #193 from clems4ever/feature/support-basic-auth 
Add support of basic auth for single-factor protected endpoints
 2017-11-01 20:33:09 +01:00
Clement Michaud
009e7c2b78 Add basic authorization support for single-factor protected endpoints 
One can now access a service using the basic authorization mechanism. Note the
service must not be protected by 2 factors.

The Remote-User and Remote-Groups are forwarded from Authelia like any browser
authentication.
 2017-11-01 19:38:05 +01:00
Clement Michaud
e3e1235755 Fix unhandled error exception thrown by Bluebirds in tests 2017-11-01 16:30:51 +01:00
Clement Michaud
e93b98c1ec Remove unused AuthenticationValidator 2017-11-01 15:35:55 +01:00
Clément Michaud
17a5e2ad6e
Merge pull request #187 from clems4ever/feature/fix-endpoints-restrictions 
Fix endpoints redirection on errors
 2017-11-01 15:01:23 +01:00
Clement Michaud
6b78240d39 Fix endpoints redirection on errors 
From this commit on, api endpoints reply with a 401 error code and non api
endpoints redirect to /error/40X.

This commit also fixes missing restrictions on /loggedin (the "already logged
in page). This was not a security issue, though.

The change also makes error pages automatically redirect the user after few
seconds based on the referrer or the default_redirection_url if provided in the
configuration.

Warning: The old /verify endpoint of the REST API has moved to /api/verify.
You will need to update your nginx configuration to take this change into
account.
 2017-11-01 14:46:23 +01:00
Clément Michaud
837884ef0d
Merge pull request #177 from clems4ever/fix-deployment-script 
Fix deployment commands using npm and provided in README
 2017-10-31 22:33:25 +01:00
Clement Michaud
6d11801d56 Change the how-to to build Authelia in the README 2017-10-31 22:11:01 +01:00
Clément Michaud
c1afde83f6
Merge pull request #185 from clems4ever/totp-issuer-and-label 
Use issuer and label when generating otpauthURL for TOTP
 2017-10-31 22:10:04 +01:00
Clement Michaud
54854bacb1 Use issuer and label when generating otpauthURL for TOTP 
Issuer is customizable in configuration so that a company can set its own name
or website. If not provided, default value is 'authelia.com'.

The username is used as label.
 2017-10-31 21:36:47 +01:00
Clement Michaud
87056c14e2 Fix npm package versions with package-lock.json 2017-10-31 07:37:15 +01:00
Clement Michaud
608b20a736 Add shared/ directory in .npmignore 2017-10-31 07:37:15 +01:00