Commit Graph

  • 5570ac3d84 3.6.0 Clement Michaud 2017-10-16 22:32:55 +0200
  • 19c846a366 Merge pull request #160 from clems4ever/develop Clément Michaud 2017-10-16 22:32:18 +0200
  • 39b3898908 Merge pull request #152 from clems4ever/cookie-theft Clément Michaud 2017-10-16 21:11:58 +0200
  • 056565a968 Add X-Frame-Options header to avoid ability to embed websites in iframes Clement Michaud 2017-10-15 18:03:18 +0200
  • 0b33982701 Add notes on security measures deployed in Authelia in README Clement Michaud 2017-10-15 17:57:12 +0200
  • f523e5335f Use HSTS in example Clement Michaud 2017-10-15 17:18:15 +0200
  • 92b78f7c15 Enable secure and httpOnly option for sessions Clement Michaud 2017-10-15 16:34:39 +0200
  • 6e3a9494ce Merge pull request #158 from clems4ever/anonymous-smtp Clément Michaud 2017-10-16 00:09:55 +0200
  • 35b934ecea Merge branch 'develop' into anonymous-smtp Clément Michaud 2017-10-15 23:25:47 +0200
  • 5bac2b75b0 Merge pull request #159 from clems4ever/publish-develop-to-docker Clément Michaud 2017-10-15 23:24:28 +0200
  • 565fc35f07 Merge branch 'develop' into anonymous-smtp Clément Michaud 2017-10-15 22:50:05 +0200
  • 15615b2741 Merge branch 'develop' into publish-develop-to-docker Clément Michaud 2017-10-15 22:49:58 +0200
  • 3236b97ffd Merge pull request #156 from clems4ever/remove-schema-from-source Clément Michaud 2017-10-15 22:49:23 +0200
  • e8e8c8f7da Publish 'develop' tag to dockerhub Clement Michaud 2017-10-15 22:48:56 +0200
  • d3a2251d4a Allow anonymous user in SMTP notifier Clement Michaud 2017-10-15 22:41:18 +0200
  • b6aca2619b Merge branch 'develop' into remove-schema-from-source Clément Michaud 2017-10-15 22:31:06 +0200
  • 329927b865 Merge pull request #157 from clems4ever/already-logged-username Clément Michaud 2017-10-15 22:30:55 +0200
  • e8a1e7c52c Remove configuration schema from source since it is generated Clement Michaud 2017-10-15 22:08:24 +0200
  • daee042368 Add username to the 'already logged in' page Clement Michaud 2017-10-15 22:15:54 +0200
  • 35b66ba630 Merge pull request #155 from clems4ever/block-logged-in-page Clément Michaud 2017-10-15 22:03:11 +0200
  • f2ae1cd044 Block 'already logged in' page to unauthenticated user Clement Michaud 2017-10-15 21:51:21 +0200
  • 8fa50482df Merge pull request #153 from clems4ever/opt-subdomain-methods Clément Michaud 2017-10-15 21:39:24 +0200
  • 12a8626ef7 Make per_subdomain_methods optional in configuration file Clement Michaud 2017-10-15 20:01:16 +0200
  • b3479c19da Merge pull request #149 from clems4ever/npm-package-fix Clément Michaud 2017-10-15 16:09:50 +0200
  • e599ac78ae Do not include client/ and server/ in npm package Clement Michaud 2017-10-15 15:52:34 +0200
  • 4b51ae30cc Merge pull request #147 from clems4ever/userdn-ldap-filter Clément Michaud 2017-10-15 15:02:46 +0200
  • ce264ff4d3 Add {dn} as an available matcher in LDAP groups filter Clement Michaud 2017-10-15 14:27:20 +0200
  • 15fa6286ad Merge pull request #143 from clems4ever/protect-ldap-injection Clément Michaud 2017-10-15 13:36:38 +0200
  • 2e087f12f4 Fix out of bound access in LDAP results array Clement Michaud 2017-10-15 02:05:15 +0200
  • 9fe202f227 Merge pull request #144 from clems4ever/test-forward-headers Clément Michaud 2017-10-15 01:55:31 +0200
  • 1dd0343860 Add input sanitizer to LDAP client to protect against LDAP injections Clement Michaud 2017-10-14 13:49:25 +0200
  • bf3e71d732 Fix unhandled rejections in unit tests Clement Michaud 2017-10-15 01:34:23 +0200
  • cb139997d2 Merge pull request #142 from clems4ever/test-forward-headers Clément Michaud 2017-10-15 01:13:57 +0200
  • 3a88ca95b8 Check TOTP token with window of 1 Clement Michaud 2017-10-14 15:23:00 +0200
  • c02d9b4a6e Display current URL when redirection step fails in integration tests Clement Michaud 2017-10-14 15:16:14 +0200
  • 8cf58d7b31 Add tests on headers forwarded to backend Clement Michaud 2017-10-14 15:04:43 +0200
  • f041b946d9 Merge pull request #140 from clems4ever/improve-endpoint-errors Clément Michaud 2017-10-14 12:22:24 +0200
  • 56fdc40290 Every public endpoints return 200 with harmonized error messages or 401 Clement Michaud 2017-10-10 23:03:30 +0200
  • 3bea8a290a Merge pull request #137 from clems4ever/mail-sender Clément Michaud 2017-10-10 23:08:55 +0200
  • ab8aaeda25 Add configuration schema validation before starting Authelia Clement Michaud 2017-10-10 21:59:20 +0200
  • 2a3fde5ee7 Add a schema validator to check user configuration Clement Michaud 2017-10-10 01:14:36 +0200
  • 1ab09b71d4 Specify the sender email in Gmail and Smtp notifier configuration Clement Michaud 2017-10-10 00:07:12 +0200
  • d5035b8704 Merge pull request #131 from clems4ever/disable-second-factor Clément Michaud 2017-10-09 23:27:36 +0200
  • 9624aa6311 Adapt authentication methods configuration to be backward compatible Clement Michaud 2017-10-09 23:13:57 +0200
  • bc8fe623df Use minified version of Authelia in npm package Clement Michaud 2017-10-09 01:57:32 +0200
  • 9559bff5de Remove artifacts of only_basic_auth query param Clement Michaud 2017-10-09 01:55:51 +0200
  • 2641fb1620 Merge pull request #130 from clems4ever/revert-filesystem-notifier Clément Michaud 2017-10-09 01:58:06 +0200
  • 46deb765bb 3.5.0 Clement Michaud 2017-10-09 01:15:40 +0200
  • a0aab77449 Add a section dealing with basic auth in README Clement Michaud 2017-10-09 01:14:19 +0200
  • 9ddc0949b6 Add a way to logout at second factor stage Clement Michaud 2017-10-09 00:41:44 +0200
  • 1cf4e57bb1 Redirect user when he has already validated some factors Clement Michaud 2017-10-09 00:28:46 +0200
  • c061dbfda4 Customize the authentication method to be used by a sub-domain Clement Michaud 2017-10-07 18:37:08 +0200
  • e4274fbe1b Add a note about filesystem notifier option Clement Michaud 2017-10-08 22:58:56 +0200
  • 6940e15ffa Merge pull request #125 from clems4ever/improve-logs Clément Michaud 2017-10-08 22:49:50 +0200
  • 83348f49c2 Merge pull request #129 from clems4ever/dockerhub-deployment Clément Michaud 2017-10-08 22:49:41 +0200
  • 346c559141 Make file system an available notifier option for testing purpose Clement Michaud 2017-10-08 22:48:20 +0200
  • 78f6028c1b Improve logging format for clarity Clement Michaud 2017-10-08 00:46:57 +0200
  • 09b4bcadd4 Deploy latest along with release tag Clement Michaud 2017-10-08 18:56:18 +0200
  • 26418278bc Merge pull request #127 from clems4ever/adapt-acl-config Clément Michaud 2017-10-08 17:31:19 +0200
  • b7a180af9b Fix randomness in integration tests Clement Michaud 2017-10-08 17:13:29 +0200
  • 54c93fc945 Fix randomness with integration tests Clement Michaud 2017-10-08 16:28:10 +0200
  • d86a3f8393 3.4.2 Clement Michaud 2017-10-08 16:11:16 +0200
  • bf56e378e0 Fail docker publication when login to docker fails Clement Michaud 2017-10-08 16:11:05 +0200
  • 267cf2921d Adapt ACL configuration to make it more flexible Clement Michaud 2017-10-08 15:34:58 +0200
  • f3f61d4e13 3.4.1 Clement Michaud 2017-10-08 14:48:46 +0200
  • 15374f39d1 Merge pull request #122 from clems4ever/disable-autocomplete Clément Michaud 2017-10-07 23:44:33 +0200
  • 7aa458e306 Merge pull request #121 from clems4ever/disable-express-powered-by Clément Michaud 2017-10-07 22:46:07 +0200
  • e05d1c9c0f Disable autocomplete for TOTP field Clement Michaud 2017-10-07 22:23:22 +0200
  • 2349de6698 Disable x-powered-by header sent by express Clement Michaud 2017-10-07 22:18:40 +0200
  • 0fee64ed88 Merge pull request #120 from clems4ever/fix-missing-images Clément Michaud 2017-10-07 22:13:35 +0200
  • b74cf5fd77 Merge pull request #119 from clems4ever/remove-smtp-logs Clément Michaud 2017-10-07 22:10:11 +0200
  • ae720c5230 Fix missing images in notification messages Clement Michaud 2017-10-07 21:58:41 +0200
  • a4d7ade791 Remove useless logs displaying smtp credentials Clement Michaud 2017-10-07 21:48:43 +0200
  • 9933900395 Merge pull request #106 from clems4ever/username-in-group-filter Clément Michaud 2017-10-07 14:22:13 +0200
  • 66449eedb0 Use username matcher instead of user dn in group filter Clement Michaud 2017-10-07 13:46:19 +0200
  • be81f04248 Merge pull request #105 from clems4ever/split-client-server Clément Michaud 2017-10-07 11:36:05 +0200
  • d8ff186303 Split client and server Clement Michaud 2017-10-07 00:09:42 +0200
  • 444d278a1e 3.4.0 Clement Michaud 2017-10-04 21:53:19 +0200
  • 89de19bb35 Merge pull request #98 from clems4ever/disable-second-factor Clément Michaud 2017-09-26 23:25:07 +0200
  • 4cbf6efa42 Disable second factor for certain subdomain Clement Michaud 2017-09-24 23:19:03 +0200
  • 1636fc27e5 Fix bad merge on README.md Clément Michaud 2017-09-25 13:32:25 +0200
  • 92ef190202 Merge pull request #97 from clems4ever/smtp-notifier Clément Michaud 2017-09-24 23:56:44 +0200
  • f564174998 Remove FileSystem notifier completely Clement Michaud 2017-09-24 20:55:11 +0200
  • 4cd78f3f83 Add SMTP notifier as an available option in configuration Clement Michaud 2017-09-24 14:49:03 +0200
  • 7a2b45a66f Merge pull request #95 from clems4ever/acl-by-resources Clément Michaud 2017-09-24 21:54:18 +0200
  • cf16272a73 Refine access control with per resource ACLs Clement Michaud 2017-09-03 15:22:09 +0200
  • 59d0a06a95 Merge pull request #94 from clems4ever/nginx-abort-connection Clément Michaud 2017-09-23 19:01:29 +0200
  • e48b196f38 Add Content-Length header to the forwarded request to Authelia Clement Michaud 2017-09-23 18:02:21 +0200
  • 72612e00aa Merge pull request #92 from clems4ever/header-vars Clément Michaud 2017-09-22 21:42:11 +0200
  • d005b83365 Set headers values Remote-User and Remote-Groups in /verify response Clement Michaud 2017-09-22 21:18:38 +0200
  • ae5b647d23 Merge pull request #89 from clems4ever/redis-connection-issue-logs Clément Michaud 2017-09-22 21:05:33 +0200
  • 0a33b2d5ee Add logs to detect redis connection issues earlier Clement Michaud 2017-09-21 22:07:34 +0200
  • 36962cfc2c Merge pull request #91 from clems4ever/redirect-url Clément Michaud 2017-09-22 18:59:44 +0200
  • 7128970a53 Add redirection URL as a query parameter during authentication Clement Michaud 2017-09-22 17:53:18 +0200
  • 83f5302615 Merge pull request #90 from clems4ever/hotfix-nedb-memflag Clément Michaud 2017-09-21 23:38:01 +0200
  • e9a4ebca38 [Hotfix] Fix bug while reading Nedb option inMemoryOnly Clement Michaud 2017-09-21 22:17:55 +0200
  • 9ac2c808ec Merge pull request #64 from FrozenDragoon/feature-dockercompose Clément Michaud 2017-09-17 13:56:10 +0200
  • 489dbf9e30 Merge branch 'master' into feature-dockercompose FrozenDragoon 2017-09-11 13:28:39 -0500
  • 1643f4779c 3.3.19 Clement Michaud 2017-09-09 01:36:36 +0200
  • b59f03d315 Merge pull request #80 from clems4ever/fix-npm-install Clément Michaud 2017-09-09 01:36:00 +0200