James Elliott 365304a684 [FEATURE] Add Optional Check for Session Username on VerifyGet (#1427) ... * Adding the Session-Username header to the /api/verify endpoint when using cookie auth will check the value stored in the session store for the username and the header value are the same. * use strings.EqualFold to compare case insensitively * add docs * add unit tests * invalidate session if it is theoretically hijacked and log it as a warning (can only be determined if the header doesn't match the cookie) * add example PAM script * go mod tidy * go mod bump to 1.15		2020-12-02 10:03:44 +11:00
..
2fa	[DOCS] Fix Docs Links (#674)	2020-03-01 16:58:26 +11:00
access-control.md	[DOCS] Fix Docs Links (#674)	2020-03-01 16:58:26 +11:00
first-factor.md	Document future possibility to use alternative 1FA methods. (#1000)	2020-05-10 07:46:28 +10:00
index.md	[DOCS] Bootstrap new documentation website based on just-the-docs (#659)	2020-02-29 01:43:59 +01:00
password-reset.md	[DOCS] Adjust yaml snippets and misc adjustments (#855)	2020-04-11 14:46:07 +10:00
regulation.md	[DOCS] Review all docs and adjust since the initial refactoring (#698)	2020-03-10 09:37:46 +11:00
single-factor.md	[FEATURE] Add Optional Check for Session Username on VerifyGet (#1427)	2020-12-02 10:03:44 +11:00