techies/authelia
1
0
Fork 0
mirror of https://github.com/0rangebananaspy/authelia.git synced 2024-09-14 22:47:21 +07:00
Code Issues Projects Releases Wiki Activity
2,782 Commits 1 Branch 0 Tags 25 MiB
ad75c6ebb3
Commit Graph

286 Commits

Author SHA1 Message Date
renovate[bot]
1bd862a814
build(deps): update dependency golang to v1.18.2 (#3345) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-05-11 10:23:48 +10:00
James Elliott
bda87db79c
test(suites): caddy (#3305) 2022-05-07 11:55:52 +10:00
Amir Zarrinkafsh
cac8919f97
test: add redis restart test back to traefik2 suite (#3298) 
* test: add redis restart test back to traefik2 suite

* refactor(suites): mustpress -> mustinput for totp

* refactor(suites): rename suites for test ordering
 2022-05-04 11:01:36 +10:00
renovate[bot]
f8bb51da4d
build(deps): update dependency traefik to v2.6.6 (#3296) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-05-04 09:29:51 +10:00
renovate[bot]
f88e7dd242
build(deps): update module github.com/go-rod/rod to v0.106.4 (#3042) 2022-05-03 22:37:56 +10:00
renovate[bot]
e6ad8fe83e
build(deps): update dependency golang to v1.18.1 (#3019) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-05-03 19:35:44 +10:00
Amir Zarrinkafsh
91c0c81818
refactor(suites): stop integration tests on first failure (#3270) 
* refactor(suites): stop integration tests on first failure

* refactor(suites): remove additional nginx instance

* refactor(suites): log relevant containers

* refactor(suites): add traefik2 logs to stdout

* refactor(suites): explicitly enable traefik for tests

* refactor(suites): remove redis restart and duplicate pathprefix tests

* ci(buildkite): allow manual retry on integration tests
 2022-05-02 14:50:37 +10:00
renovate[bot]
8ee92231ba
build(deps): update dependency haproxy to v2.5.6 (#3255) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-04-27 16:12:44 +10:00
James Elliott
06ba312c28
fix(commands): invalid opaque id service name (#3235) 
This fixes the service type being openid_connect instead of openid as expected. This also allows bulk generating opaque identifiers for users.
 2022-04-25 18:49:18 +10:00
renovate[bot]
b18eea039c
build(deps): update node.js to v18 (#3225) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-04-21 18:28:35 +10:00
Amir Zarrinkafsh
daaa16c182
refactor(suites): validate totp inputs (#3218) 
This change validates the inputs for the TOTP code entry.
This was previously discarded and left unvalidated during the move to rod from within the integration tests.
 2022-04-19 14:11:15 +10:00
Amir Zarrinkafsh
92e219b34b
fix(suites): add missing traefik routes (#3217) 
This change includes missing routes for both the Traefik and Traefik2 suites, issues would have manifested running dev mode tests for these suites when attempting to load translations.
 2022-04-19 13:36:49 +10:00
James Elliott
e56690c2df
refactor(configuration): ensure all keys are validated (#3208) 
This ensures keys that exist in slices are validated.
 2022-04-16 20:48:07 +10:00
renovate[bot]
c5cb36c526
build(deps): update dependency golang to v1.17.9 (#3198) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-04-15 15:53:15 +10:00
James Elliott
6e0853a81b
build(deps): update dependency golang (#3180) 2022-04-13 14:28:31 +10:00
James Elliott
cf93e66391
test(suites): fix backend endpoints (#3158) 2022-04-10 08:05:27 +10:00
Manuel Nuñez
086b97d21f
test(suites): revert por binding (#3155) 
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-04-10 07:44:47 +10:00
James Elliott
5a0a15f377
feat(commands): user opaque identifiers commands (#3144) 
Add commands for handling user opaque identifiers.
 2022-04-09 17:13:19 +10:00
James Elliott
0a970aef8a
feat(oidc): persistent storage (#2965) 
This moves the OpenID Connect storage from memory into the SQL storage, making it persistent and allowing it to be used with clustered deployments like the rest of Authelia.
 2022-04-07 15:33:53 +10:00
renovate[bot]
004490c7b1
build(deps): update dependency alpine to v3.15.4 (#3114) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-04-05 11:15:43 +10:00
Clément Michaud
3ca438e3d5
feat: implement mutual tls in the web server (#3065) 
Mutual TLS helps prevent untrusted clients communicating with services like Authelia. This can be utilized to reduce the attack surface.

Fixes #3041
 2022-04-05 09:57:47 +10:00
James Elliott
2502d89682
fix(server): respond with 404/405 appropriately (#3087) 
This adjusts the not found handler to not respond with a 404 on not found endpoints that are part of the /api or /.well-known folders, and respond with a 405 when the method isn't implemented.

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
 2022-04-04 09:58:01 +10:00
Manuel Nuñez
bfd5d66ed8
feat(notification): password reset notification custom templates (#2828) 
Implemented a system to allow overriding email templates, including the remote IP, and sending email notifications when the password was reset successfully.

Closes #2755, Closes #2756

Co-authored-by: Manuel Nuñez <@mind-ar>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-04-03 22:24:51 +10:00
James Elliott
36cf662458
refactor: misc password policy refactoring (#3102) 
Add tests and makes the password policy a provider so the configuration can be loaded to memory on startup.
 2022-04-03 10:48:26 +10:00
Manuel Nuñez
8659ba394d
feat(authentication): password policy (#2723) 
Implement a password policy with visual feedback in the web portal.

Co-authored-by: Manuel Nuñez <@mind-ar>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-04-03 08:32:57 +10:00
James Elliott
0116506330
feat(oidc): implement amr claim (#2969) 
This adds the amr claim which stores methods used to authenticate with Authelia by the users session.
 2022-04-01 22:18:58 +11:00
renovate[bot]
df9492ca0e
build(deps): update dependency traefik to v2.6.3 (#3075) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-03-31 17:00:08 +11:00
renovate[bot]
56048dd199
build(deps): update dependency alpine to v3.15.3 (#3072) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-03-29 14:08:54 +11:00
renovate[bot]
b86c7b5284
build(deps): update dependency traefik to v2.6.2 (#3059) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-03-26 20:53:04 +11:00
renovate[bot]
2d981f7916
build(deps): update dependency alpine to v3.15.2 (#3051) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-03-26 19:46:15 +11:00
renovate[bot]
9eb23a301b
build(deps): update dependency alpine to v3.15.1 (#3028) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-03-17 15:53:30 +11:00
renovate[bot]
99326c2688
build(deps): update dependency haproxy to v2.5.5 (#3018) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-03-16 13:43:33 +11:00
James Elliott
6d937cf6cc
refactor(model): rename from models (#2968) 2022-03-06 16:47:40 +11:00
James Elliott
8f05846e21
feat: webauthn (#2707) 
This implements Webauthn. Old devices can be used to authenticate via the appid compatibility layer which should be automatic. New devices will be registered via Webauthn, and devices which do not support FIDO2 will no longer be able to be registered. At this time it does not fully support multiple devices (backend does, frontend doesn't allow registration of additional devices). Does not support passwordless.
 2022-03-03 22:20:43 +11:00
James Elliott
1b2af90e5a
feat(commands): totp qr code in png format (#2673) 
This allows exporting the TOTP QR code for easy registration when using `authelia storage totp generate` or `authelia storage totp export`.
 2022-03-02 18:50:36 +11:00
renovate[bot]
f8d9c6eab7
build(deps): update dependency haproxy to v2.5.4 (#2931) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-03-01 15:04:34 +11:00
James Elliott
3c81e75d79
feat(commands): add access-control check-policy command (#2871) 
This adds an access-control command that checks the policy enforcement for a given criteria using a configuration file and refactors the configuration validation command to include all configuration sources.
 2022-02-28 14:15:01 +11:00
renovate[bot]
e286741357
build(deps): update dependency mariadb to v10.8.2 (#2917) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-02-27 10:12:17 +11:00
renovate[bot]
4b1bd01167
build(deps): update dependency traefik to v2.6.1 (#2912) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-02-24 21:13:08 +11:00
renovate[bot]
eb76de6cdc
build(deps): update dependency haproxy to v2.5.3 (#2897) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-02-24 03:12:26 +11:00
Clément Michaud
5d4003c291
refactor: directly return error where sufficient (#2855) 2022-02-10 09:07:53 +11:00
James Elliott
1772a83190
refactor: apply godot recommendations (#2839) 2022-01-31 16:25:15 +11:00
renovate[bot]
d8cf272757
build(deps): update traefik docker tag to v2.5.7 (#2815) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2022-01-21 13:43:06 +11:00
renovate[bot]
535ad2a697
build(deps): update haproxy docker tag to v2.5.1 (#2793) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
 2022-01-12 23:54:50 +11:00
renovate[bot]
2a1e7fc793
build(deps): update traefik docker tag to v2.5.6 (#2738) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-12-23 10:44:39 +11:00
renovate[bot]
93352aa36b
build(deps): update traefik docker tag to v2.5.5 (#2706) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-12-12 14:47:03 +11:00
renovate[bot]
f9586b99a9
build(deps): update traefik docker tag to v1.7.34 (#2705) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2021-12-12 11:15:01 +11:00
James Elliott
104a61ecd6
refactor(web): only fetch totp conf if required (#2663) 
Prevents the TOTP user config from being requested when the user has not registered or is already authenticated 2FA.
 2021-12-02 21:28:16 +11:00
James Elliott
f90ca855e3
feat(storage): postgresql schema and ssl options (#2659) 
Adds the schema name and all ssl options for PostgreSQL. Also a significant refactor of the storage validation process.
 2021-12-02 16:36:03 +11:00
Aram Akhavan
5b3fa1fffb
docs: consistent naming for configuration file (#2626) 
* change all instances (file names and docs) of "config.template.yml" to "configuration.template.yml" so its consistent with the expectations of the Dockerfile

* Keep config.template.yml named as is

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>

* Update index.html

* revert filename changes and add a note about docker

* refactor: apply suggestions from code review

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
 2021-12-02 15:50:05 +11:00