authelia/internal/authentication
James Elliott 3f374534ab
[FEATURE] Automatic Profile Refresh - LDAP (#912)
* [FIX] LDAP Not Checking for Updated Groups

* refactor handlers verifyFromSessionCookie
* refactor authorizer selectMatchingObjectRules
* refactor authorizer isDomainMatching
* add authorizer URLHasGroupSubjects method
* add user provider ProviderType method
* update tests
* check for new LDAP groups and update session when:
  * user provider type is LDAP
  * authorization is forbidden
  * URL has rule with group subjects

* Implement Refresh Interval

* add default values for LDAP user provider
* add default for refresh interval
* add schema validator for refresh interval
* add various tests
* rename hasUserBeenInactiveLongEnough to hasUserBeenInactiveTooLong
* use Authelia ctx clock
* add check to determine if user is deleted, if so destroy the
* make ldap user not found error a const
* implement GetRefreshSettings in mock

* Use user not found const with FileProvider
* comment exports

* use ctx.Clock instead of time pkg

* add debug logging

* use ptr to reference userSession so we don't have to retrieve it again

* add documenation
* add check for 0 refresh interval to reduce CPU cost
* remove badly copied debug msg

* add group change delta message

* add SliceStringDelta
* refactor ldap refresh to use the new func

* improve delta add/remove log message

* fix incorrect logic in SliceStringDelta
* add tests to SliceStringDelta

* add always config option
* add tests for always config option
* update docs

* apply suggestions from code review

Co-Authored-By: Amir Zarrinkafsh <nightah@me.com>

* complete mocks and fix an old one
* show warning when LDAP details failed to update for an unknown reason

* golint fix

* actually fix existing mocks

* use mocks for LDAP refresh testing

* use mocks for LDAP refresh testing for both added and removed groups

* use test mock to verify disabled refresh behaviour
* add information to threat model
* add time const for default Unix() value

* misc adjustments to mocks

* Suggestions from code review

* requested changes
* update emails
* docs updates
* test updates
* misc

* golint fix

* set debug for dev testing

* misc docs and logging updates

* misc grammar/spelling

* use built function for VerifyGet

* fix reviewdog suggestions

* requested changes

* Apply suggestions from code review

Co-authored-by: Amir Zarrinkafsh <nightah@me.com>
Co-authored-by: Clément Michaud <clement.michaud34@gmail.com>
2020-05-04 21:39:25 +02:00
..
const.go [FEATURE] Automatic Profile Refresh - LDAP (#912) 2020-05-04 21:39:25 +02:00
file_user_provider_test.go [CI] Add godot linter (#958) 2020-05-02 15:06:39 +10:00
file_user_provider.go [MISC] Introduce CryptAlgo type. (#960) 2020-05-03 14:06:09 +10:00
ldap_connection_factory_mock.go [MISC] Update durations to notation format and housekeeping (#824) 2020-04-05 22:37:21 +10:00
ldap_connection_factory.go [CI] Add godot linter (#958) 2020-05-02 15:06:39 +10:00
ldap_user_provider_test.go [FEATURE] Automatic Profile Refresh - LDAP (#912) 2020-05-04 21:39:25 +02:00
ldap_user_provider.go [FEATURE] Automatic Profile Refresh - LDAP (#912) 2020-05-04 21:39:25 +02:00
password_hash_test.go [CI] Add goconst linter (#961) 2020-05-02 18:20:40 +02:00
password_hash.go [MISC] Introduce CryptAlgo type. (#960) 2020-05-03 14:06:09 +10:00
types.go [BUGFIX] [BREAKING] Set username retrieved from authentication backend in session. (#687) 2020-03-15 18:10:25 +11:00
user_provider.go Move source code into internal directory to follow standard project layout. 2019-11-17 16:30:33 +01:00