Stavros
0227af6d2b
refactor: rework decoders logic for cleaner code ( #431 )
...
* refactor: rework decoders logic for cleaner code
* refactor: use strcase lib to handle text case conversions
2025-10-26 12:01:19 +02:00
Scott McKendry
f628d1f0b3
fix(redirect): allow root cookie domain host redirects ( #409 )
...
Previously IsRedirectSafe rejected redirects to the exact cookie domain
when AppURL had multiple subdomain levels, because it stripped the first
label twice.
2025-10-13 11:55:43 +03:00
Stavros
adffb4ac0a
fix: names in oauth broker
2025-10-08 15:15:30 +03:00
Stavros
085f6257c5
fix: fix oauth group provider check
2025-09-25 22:35:44 +03:00
Stavros
5dd8526833
fix: fix key normalization function handing more cases than it needs to
2025-09-22 19:29:55 +03:00
Stavros
c9867ccb76
chore: fix typo
2025-09-20 11:08:57 +03:00
Stavros
50105e4e9d
feat: version info analytics ( #363 )
...
* feat: version info analytics
* refactor: don't create new client everytime
2025-09-19 14:44:22 +03:00
Stavros
5c866bad1a
feat: multiple oauth providers ( #355 )
...
* feat: add flag decoder (candidate)
* refactor: finalize flags decoder
* feat: add env decoder
* feat: add oauth config parsing logic
* feat: implement backend logic for multiple oauth providers
* feat: implement multiple oauth providers in the frontend
* feat: add some default icons
* chore: add credits for parser
* feat: style oauth auto redirect screen
* fix: bot suggestions
* refactor: rework decoders using simpler and more efficient pattern
* refactor: rework oauth name database migration
2025-09-16 13:28:28 +03:00
Stavros
e03eaf4f08
feat: add psl check in cookie domain
2025-09-10 13:43:08 +03:00
Stavros
74cb8067a8
tests: add util tests
2025-09-03 17:52:51 +03:00
Stavros
f5ac7eff99
refactor: mode label decoder to separate package
2025-09-03 12:23:21 +03:00
Stavros
b024d5ffda
feat: allow for dash substitute in ip filters for environments like kubernetes
2025-09-03 12:16:06 +03:00
Stavros
f3eb7f69b4
Revert "feat: header based acls ( #337 )" ( #340 )
...
This reverts commit f0d2da281a
2025-09-03 12:12:18 +03:00
Stavros
f0d2da281a
feat: header based acls ( #337 )
...
* feat: add header decoder
* feat: allow for dash substitute over slash for environments like kubernetes
* feat: use decoded headers in proxy controller
* refactor: simplify decode header to node function
* refactor: use stdlib prefix check in header decoder
* fix: lowercase key and filter before comparing
2025-09-02 19:06:52 +03:00
Stavros
b9e35716ac
feat: invalid domain warning ( #332 )
...
* wip
* refactor: update domain warning layout
* i18n: add domain warning translations
* refactor: rework hooks usage
* feat: clear timeouts
* fix: use useeffect to cleanup timeout
* refactor: rework redirects and history storage
* refactor: rename domain to root domain
2025-09-01 18:22:42 +03:00
Stavros
c7c3de4f78
refactor: unify labels ( #329 )
...
* refactor: unify labels
* feat: implement path block and user block
Fixes #313
* fix: fix oauth group check logic
* chore: fix typo
2025-08-29 17:04:34 +03:00
Stavros
03d06cb0a7
feat: add sqlite database for storing sessions ( #326 )
...
* feat: add sqlite database for storing sessions
* refactor: use db instance instead of service in auth service
* fix: coderabbit suggestions
2025-08-29 12:35:11 +03:00
Stavros
504a3b87b4
refactor: rework file structure ( #325 )
...
* wip: add middlewares
* refactor: use context fom middleware in handlers
* refactor: use controller approach in handlers
* refactor: move oauth providers into services (non-working)
* feat: create oauth broker service
* refactor: use a boostrap service to bootstrap the app
* refactor: split utils into smaller files
* refactor: use more clear name for frontend assets
* feat: allow customizability of resources dir
* fix: fix typo in ui middleware
* fix: validate resource file paths in ui middleware
* refactor: move resource handling to a controller
* feat: add some logging
* fix: configure middlewares before groups
* fix: use correct api path in login mutation
* fix: coderabbit suggestions
* fix: further coderabbit suggestions
2025-08-26 15:05:03 +03:00
Stavros
19eb8f3064
refactor: handle oauth groups response as an any array of any
2025-07-17 00:31:24 +03:00
Stavros
6519644fc1
fix: handle type string for oauth groups
2025-07-15 00:17:41 +03:00
Stavros
8ebed0ac9a
chore: remove meaningless comments
2025-07-12 13:17:06 +03:00
Stavros
476ed6964d
fix: fix docker label matching logic
2025-07-10 00:34:04 +03:00
Stavros
9f02710114
feat: add support for comma list in label domain check
2025-07-09 17:49:13 +03:00
Stavros
0f4a6b5924
tests: fix parse header tests
2025-07-08 00:54:36 +03:00
Stavros
c662b9e222
tests: extend tests in utils and server
2025-07-08 00:47:07 +03:00
Stavros
c10bff55de
fix: encrypt the cookie in sessions ( #225 )
...
* fix: encrypt the cookie in sessions
* tests: use new auth config in tests
* fix: coderabbit suggestions
2025-07-04 01:43:36 +03:00
Stavros
84d4c84ed2
feat: allow or block an ip/range of ips using labels ( #211 )
...
* feat: allow or block an ip/range of ips using labels
* refactor: redirect to root page when no username or ip is provided in the unauthorized page
2025-06-25 20:35:48 +03:00
Stavros
f3ec4baf3c
feat: add support for logging in to a basic auth protected app ( #203 )
2025-06-20 11:33:06 +03:00
Stavros
aed29d2923
feat: allow user to specify domain in container labels in order to identify it ( #198 )
...
* feat: allow user to specify domain in container labels in order to identify it
* refactor: remove port from domain before getting container
2025-06-15 20:30:52 +03:00
Stavros
3397e2aa8e
refactor: move to traefik paerser for label parsing ( #197 )
...
* refactor: move to traefik paerser for label parsing
* fix: sanitize headers before adding to map
* refactor: use splitn in header parser
* refactor: ignore containers that failed to get inspected in docker
2025-06-15 19:58:23 +03:00
Stavros
34c8d16c7d
fix: fix loading states in forms
2025-05-30 18:14:33 +03:00
Stavros
3a7b71ae3e
feat: generate a unique id for the cookie names based on the domain ( #161 )
...
* feat: generate a unique id for the cookie names based on the domain
* tests: fix tests
2025-05-25 12:38:21 +03:00
Stavros
a9e8bf89a9
feat: map info from OIDC claims to headers ( #122 )
...
* refactor: return all values from body in the providers
* refactor: only accept claims following the OIDC spec
* feat: map info from OIDC claims to headers
* feat: add support for required oauth groups
* fix: bot suggestions
* feat: get claims from github and google
* fix: close body correctly
2025-04-30 19:57:49 +03:00
Stavros
85ad0d19c7
feat: add regex support to oauth whitelist
2025-04-18 19:36:50 +03:00
Stavros
dc731cff10
feat: add regex support in user and oauth whitelist
2025-04-18 19:15:59 +03:00
Stavros
8a21345706
fix: handle new lines and spaces in the secret files
2025-04-10 15:34:46 +03:00
Stavros
1169c633cc
refactor: remove tailscale oauth
2025-04-10 15:14:01 +03:00
Stavros
14ce8ecf98
feat: add ability to set custom headers
2025-03-26 18:05:43 +02:00
Stavros
3ccc831a1f
refactor: make error handling simpler ( #55 )
2025-03-19 16:41:19 +02:00
Stavros
f3471880ee
refactor/handlers ( #51 )
...
* wip
* refactor: use prefix instead of patern in docker meta
* tests: fix tests
2025-03-19 15:48:16 +02:00
Stavros
5188089673
Feat/totp ( #45 )
...
* wip
* feat: finalize totp gen code
* refactor: split login screen and forms
* feat: add totp logic and ui
* refactor: make totp pending expiry time fixed
* refactor: skip all checks when disable continue is enabled
* fix: fix cli not exiting on invalid input
2025-03-09 18:39:25 +02:00
Stavros
e4379cf3ed
feat: allowed paths label
2025-02-26 19:25:54 +02:00
Stavros
f9ab9a6406
fix: filter oauth whitelist to remove empty strings
2025-02-15 17:23:24 +02:00
Stavros
d8d347b45f
tests: add basic tests for utilities
2025-02-10 18:22:46 +02:00
Stavros
7a3a463489
chore: add comments to code
2025-02-08 12:33:58 +02:00
Stavros
e09f241364
fix: handle user parse errors correctly
2025-02-07 20:11:16 +02:00
Stavros
8a8ba18ded
refactor: remove label value from logging
2025-01-30 17:13:38 +02:00
Stavros
6602e8140b
wip
2025-01-29 22:06:52 +02:00
Stavros
2385599c80
fix: omit port from cookie domain configuration
2025-01-29 17:55:21 +02:00
Stavros
3efcb26db1
refactor: remove sensitive info logging even in debug mode
2025-01-28 17:36:06 +02:00
