authelia/go.mod
James Elliott 365304a684
[FEATURE] Add Optional Check for Session Username on VerifyGet (#1427)
* Adding the Session-Username header to the /api/verify endpoint when using cookie auth will check the value stored in the session store for the username and the header value are the same.
* use strings.EqualFold to compare case insensitively
* add docs
* add unit tests
* invalidate session if it is theoretically hijacked and log it as a warning (can only be determined if the header doesn't match the cookie)
* add example PAM script
* go mod tidy
* go mod bump to 1.15
2020-12-02 10:03:44 +11:00

38 lines
1.3 KiB
Modula-2

module github.com/authelia/authelia
go 1.15
require (
aletheia.icu/broccoli/fs v0.0.0-20200420200651-c5ac961a357a
github.com/DATA-DOG/go-sqlmock v1.4.1
github.com/Gurpartap/logrus-stack v0.0.0-20170710170904-89c00d8a28f4
github.com/Workiva/go-datastructures v1.0.52
github.com/asaskevich/govalidator v0.0.0-20190424111038-f61b66f89f4a
github.com/deckarep/golang-set v1.7.1
github.com/dgrijalva/jwt-go v3.2.0+incompatible
github.com/duosecurity/duo_api_golang v0.0.0-20190308151101-6c680f768e74
github.com/facebookgo/stack v0.0.0-20160209184415-751773369052 // indirect
github.com/fasthttp/router v1.2.4
github.com/fasthttp/session/v2 v2.2.1
github.com/go-ldap/ldap/v3 v3.2.3
github.com/go-sql-driver/mysql v1.5.0
github.com/golang/mock v1.4.4
github.com/jackc/pgx/v4 v4.8.1
github.com/mattn/go-sqlite3 v2.0.3+incompatible
github.com/onsi/ginkgo v1.10.3 // indirect
github.com/onsi/gomega v1.7.1 // indirect
github.com/otiai10/copy v1.2.0
github.com/pelletier/go-toml v1.4.0 // indirect
github.com/pquerna/otp v1.2.0
github.com/simia-tech/crypt v0.4.3
github.com/sirupsen/logrus v1.6.0
github.com/spf13/cobra v0.0.7
github.com/spf13/viper v1.7.1
github.com/stretchr/testify v1.6.1
github.com/tebeka/selenium v0.9.9
github.com/tstranex/u2f v1.0.0
github.com/valyala/fasthttp v1.15.1
golang.org/x/text v0.3.3
gopkg.in/yaml.v2 v2.3.0
)