James Elliott
2f03b02fc9
fix(session): handle redis logging properly ( #2350 )
...
This catches redis logs and displays them via our logging utility.
2021-09-09 13:08:21 +10:00
renovate[bot]
4da10f9cea
build(deps): update haproxy docker tag to v2.4.4 ( #2351 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-08 09:52:49 +10:00
Amir Zarrinkafsh
84f370aa68
fix(suites): prevent dev workflow overriding .healthcheck.env ( #2345 )
2021-09-06 20:51:58 +10:00
renovate[bot]
9de8aafadf
build(deps): update traefik docker tag to v2.5.2 ( #2337 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-09-03 11:59:46 +10:00
renovate[bot]
d2bf1eb4e2
build(deps): update alpine docker tag to v3.14.2 ( #2325 )
2021-08-28 09:13:07 +10:00
James Elliott
8d102ce5d8
refactor(session): remove unencrypted session fallback ( #2314 )
...
This removes a temporary session fallback for unencrypted sessions.
2021-08-26 21:48:14 +10:00
renovate[bot]
ad16f99e6d
build(deps): update traefik docker tag to v2.5.1 ( #2306 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-08-21 11:03:00 +10:00
Amir Zarrinkafsh
aa20dad04b
refactor(configuration): add import commentary for golint ( #2303 )
2021-08-20 11:42:35 +10:00
renovate[bot]
8ac9ce9367
build(deps): update traefik docker tag to v2.5.0 ( #2296 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-08-19 09:28:05 +10:00
renovate[bot]
956db2dbaa
build(deps): update haproxy docker tag to v2.4.3 ( #2295 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-08-18 14:50:49 +10:00
renovate[bot]
0aba819899
build(deps): update golang docker tag ( #2293 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-08-17 13:46:47 +10:00
renovate[bot]
c768144c07
build(deps): update traefik docker tag to v2.4.14 ( #2292 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-08-17 07:30:27 +10:00
James Elliott
b4e570358e
fix: include major in go.mod module directive ( #2278 )
...
* build: include major in go.mod module directive
* fix: xflags
* revert: cobra changes
* fix: mock doc
2021-08-11 11:16:46 +10:00
James Elliott
c0ebe3eb8c
fix(notifier): use sane default connection timeout ( #2273 )
2021-08-10 10:52:41 +10:00
Amir Zarrinkafsh
e2ebdb7e41
fix: oidc issuer path and strip path middleware ( #2272 )
...
* fix: oidc issuer path and strip path middleware
This ensures the server.path requests append the base_url to the oidc well-known issuer information and adjusts server.path configuration to only strip the configured path instead of the first level entirely regardless of its content.
* fix: only log the token error and general refactoring
* refactor: factorize base_url functions
* refactor(server): include all paths in startup logging
* refactor: factorize
* refactor: GetExternalRootURL -> ExternalRootURL
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-08-10 10:31:08 +10:00
renovate[bot]
c593ebc573
build(deps): update mariadb docker tag to v10.6.4 ( #2274 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-08-10 07:30:29 +10:00
James Elliott
997036f9c3
fix(configuration): make notifier logging consistent and more specific ( #2268 )
...
This ensures the notifier logs are more specific to give people a clear picture of if they either have no notifier specified or multiple.
2021-08-07 13:58:08 +10:00
renovate[bot]
cc1ecafc1c
build(deps): update alpine docker tag to v3.14.1 ( #2262 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-08-07 06:48:15 +10:00
James Elliott
9ebad9bec2
fix(storage): set sane default connection timeout ( #2256 )
...
This sets a sane default connection timeout for SQL connections.
2021-08-06 15:35:14 +10:00
James Elliott
9789ad070b
fix(configuration): ldap timeout option not recognized as valid ( #2252 )
...
This is so an unexpected error doesn't occur when someone uses the new ldap timeout key which we missed adding to the list of valid keys in b2a49e1780
2021-08-06 09:28:52 +10:00
James Elliott
655ae98ced
fix(notifier): regression in startup check ( #2248 )
...
The changes in the koanf commit a7e867a699
2021-08-05 20:41:56 +10:00
James Elliott
13ae1b4f26
fix(configuration): missing oidc minimum_parameter_entropy validator key ( #2244 )
...
* fix(oidc): missing validator key
* revert: return removed key
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2021-08-05 17:19:17 +10:00
James Elliott
b2a49e1780
feat(authentication): allow customizable ldap connection timeout ( #2240 )
...
This implements both a connection timeout for LDAP connections, and makes it configurable by administrators. The default is 5s. The reason for this commit is currently if a connection to an LDAP server cannot be established it does not timeout in a reasonable period.
2021-08-05 14:30:00 +10:00
James Elliott
a3b14871ba
perf(authentication): improve ldap dynamic replacement performance ( #2239 )
...
This change means we only check the filters for the existence of placeholders that cannot be replaced at startup. We then utilized cached results of that lookup for subsequent replacements.
2021-08-05 14:17:07 +10:00
James Elliott
c5c6bda8b0
refactor: configuration agnostic healthcheck ( #2231 )
...
This makes the healthcheck simple and configured directly by Authelia's configuration on startup.
2021-08-05 14:02:07 +10:00
Clément Michaud
e693302c75
fix(storage): use lower case in error messages ( #2145 )
...
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2021-08-04 09:36:53 +10:00
Clément Michaud
4a570489d1
fix(server): use lower case in error messages ( #2151 )
...
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
2021-08-04 09:18:20 +10:00
Amir Zarrinkafsh
28991dd71a
fix(oidc): do not lower case in log messages ( #2236 )
2021-08-04 08:54:45 +10:00
James Elliott
f7b358e72a
build(deps): update module github.com/golang-jwt/jwt to v4 ( #2235 )
2021-08-04 07:38:07 +10:00
James Elliott
a7e867a699
feat(configuration): replace viper with koanf ( #2053 )
...
This commit replaces github.com/spf13/viper with github.com/knadh/koanf. Koanf is very similar library to viper, with less dependencies and several quality of life differences. This also allows most config options to be defined by ENV. Lastly it also enables the use of split configuration files which can be configured by setting the --config flag multiple times.
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2021-08-03 19:55:21 +10:00
James Elliott
942fd69776
docs(logging): fix invalid key log_file ( #2226 )
...
A small fix to the documentation regarding migrating configuration.
2021-08-03 10:44:21 +10:00
James Elliott
158783a9d4
feat(configuration): replace several configuration options ( #2209 )
...
This change adjusts several global options moving them into the server block. It additionally notes other breaking changes in the configuration.
BREAKING CHANGE: Several configuration options have been changed and moved into other sections. Migration instructions are documented here: https://authelia.com/docs/configuration/migration.html#4.30.0
2021-08-02 21:55:30 +10:00
James Elliott
ac17841721
fix(handlers): make user banned message consistent ( #2223 )
...
This is so the user banned API message is consistent with other authentication failed messages, even in the API.
2021-08-02 16:54:20 +10:00
Clément Michaud
bc983ce9f5
fix: user is now redirected when authenticated ( #2082 )
...
* fix(handlers,web): user is now redirected when authenticated
Fix : #1788
* remove dead code and fix ci issues
* fix infinite loop in frontend
* fix issue with integration tests
* handle bot recommendation
* fix integration test & add dot to comment
* fix last integration test
* Update api/openapi.yml
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
* Update web/src/services/SafeRedirection.ts
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
* Update web/src/services/SafeRedirection.ts
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
* Update api/openapi.yml
* Update openapi.yml
* refactor: valid -> safe
* refactor: adjust merge conflicts
* Apply suggestions from code review
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
* fix: adjust test return messaging
Co-authored-by: James Elliott <james-d-elliott@users.noreply.github.com>
Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
2021-08-02 16:15:38 +10:00
renovate[bot]
77a51d5c2f
build(deps): update traefik docker tag to v2.4.13 ( #2217 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-07-31 09:53:41 +10:00
Georg Lauterbach
5ed0636f77
fix(notifier): remove SMTPS warning ( #2200 )
...
Removes a warning about SMTPS when using port 465 and replaces it with info about SUBMISSIONS.
2021-07-30 13:15:12 +10:00
renovate[bot]
c98b2a7d59
build(deps): update traefik docker tag to v2.4.12 ( #2203 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-07-27 10:29:31 +10:00
James Elliott
911d71204f
fix(handlers): handle xhr requests to /api/verify with 401 ( #2189 )
...
This changes the way XML HTTP requests are handled on the verify endpoint so that they are redirected using a 401 instead of a 302/303.
2021-07-22 13:52:37 +10:00
James Elliott
ddeb46b262
fix(handlers): send status 303 auth requests that are not get/head ( #2184 )
...
When a request occurs, if the browser is not performing a HTTP GET/HEAD request, the 302 status code is not valid. This commit resolves this. MDN: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/302 .
2021-07-16 13:43:48 +10:00
renovate[bot]
596346de1e
build(deps): update traefik docker tag to v2.4.11 ( #2187 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-07-16 06:42:05 +10:00
James Elliott
8342a46ba1
feat(oidc): implement client type public ( #2171 )
...
This implements the public option for clients which allows using Authelia as an OpenID Connect Provider for cli applications and SPA's where the client secret cannot be considered secure.
2021-07-15 21:02:03 +10:00
James Elliott
c794d57afc
perf(authentication): improve active directory default users filter ( #2181 )
...
This adds a performance change to the default Active Directory users filter. Basically as per TechNet the (sAMAccountType=805306368) filter is the same as (&(objectCategory=person)(objectClass=user)) except the performance is better.
2021-07-14 20:30:25 +10:00
renovate[bot]
3537cce660
build(deps): update mariadb docker tag to v10.6.3 ( #2180 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-07-13 22:46:04 +02:00
James Elliott
f292050822
fix(authentication): ldap connection left open ( #2179 )
...
The recent ldap changes in cb71df5
2021-07-13 21:12:50 +10:00
James Elliott
143db66445
feat(oidc): userinfo endpoint ( #2146 )
...
This is a required endpoint for OIDC and is one we missed in our initial implementation. Also adds some rudamentary documentaiton about the implemented endpoints.
2021-07-10 14:56:33 +10:00
renovate[bot]
d2422e9965
build(deps): update haproxy docker tag to v2.4.2 ( #2168 )
...
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-07-09 08:49:30 +10:00
Clément Michaud
21f9056c00
fix(oidc): use lower case in log messages ( #2153 )
2021-07-08 12:44:43 +10:00
Clément Michaud
98d9cad62e
fix(regulation): use lower case in error messages ( #2152 )
2021-07-08 12:04:43 +10:00
Clément Michaud
2d634e9b20
fix(session): use lower case in error messages ( #2150 )
2021-07-08 11:33:22 +10:00
Arsenović Arsen
8ee0597486
feat(authentication): use the passwordmodify exop for pwd resets with ldap ( #2124 )
...
Implement the LDAP password modify extended operation for LDAP providers that advertise they support it.
2021-07-06 19:13:17 +10:00
