111 Commits

Author	SHA1	Message	Date
Stavros	91e3bbc9d9	refactor: store version in constants	2025-05-20 16:39:27 +03:00
Stavros	ff48fa320e	feat: nightly release workflow	2025-05-15 16:41:26 +03:00
Stavros	5a601277ab	refactor: remove www authenticate header	2025-05-06 17:01:46 +03:00
Stavros	58588d6663	fix: allow docker api negotiation	2025-05-03 16:37:37 +00:00
Stavros	2db7795eb7	fix: use email in oauth whitelist check	2025-05-02 15:16:57 +03:00
Stavros	a98a91a394	fix: only use groups in OAuth	2025-05-01 22:01:08 +03:00
Stavros	773942dc3b	feat: add support for auto redirecting to oauth providers	2025-05-01 14:18:26 +03:00
Stavros	83483d6374	fix: disable basic auth on totp users	2025-05-01 13:05:48 +03:00
Stavros	a9e8bf89a9	feat: map info from OIDC claims to headers (#122) ... * refactor: return all values from body in the providers * refactor: only accept claims following the OIDC spec * feat: map info from OIDC claims to headers * feat: add support for required oauth groups * fix: bot suggestions * feat: get claims from github and google * fix: close body correctly	2025-04-30 19:57:49 +03:00
Stavros	1c738b718a	refactor: log actual errors when an error takes place	2025-04-25 17:03:12 +03:00
Stavros	3436466cff	chore: bump version	2025-04-23 18:56:00 +03:00
Stavros	84f550023a	tests: fix api tests	2025-04-23 15:12:38 +03:00
Stavros	9923eb9b8f	tests: add new var in tests	2025-04-23 14:33:17 +03:00
Stavros	db43f1cb7a	feat: add custom forgot password message	2025-04-23 14:31:38 +03:00
Stavros	85ad0d19c7	feat: add regex support to oauth whitelist	2025-04-18 19:36:50 +03:00
Stavros	dc731cff10	feat: add regex support in user and oauth whitelist	2025-04-18 19:15:59 +03:00
Stavros	e11d14fda0	feat: add trusted URLs	2025-04-15 13:44:23 +03:00
Stavros	02faabf688	feat: add CSRF cookie protection	2025-04-14 20:00:58 +03:00
Stavros	eb36b2211b	chore: cleanup redirect cookie	2025-04-14 19:45:50 +03:00
Stavros	0761c2f5c1	refactor: remove redirect URL from session cookie	2025-04-14 19:42:52 +03:00
Stavros	525f4f3041	chore: bump version	2025-04-10 15:35:43 +03:00
Stavros	8a21345706	fix: handle new lines and spaces in the secret files	2025-04-10 15:34:46 +03:00
Stavros	1169c633cc	refactor: remove tailscale oauth	2025-04-10 15:14:01 +03:00
Stavros	a579cf37ce	fix: allow user if users label is empty	2025-04-09 17:44:59 +03:00
Stavros	38c5cd7b32	fix: tinyauth should allow the user to access a resource if a whitelist is not setup	2025-04-08 16:24:25 +03:00
Stavros	8e84e59c2f	refactor: simplify the get cookie data handling	2025-04-06 20:53:24 +03:00
Stavros	bd7e160e10	refactor: store redirect URI in tinyauth session cookie	2025-04-06 20:37:02 +03:00
Stavros	df849d5a5c	refactor: remove dependency on gin sessions	2025-04-06 19:13:09 +03:00
Stavros	5cf4e208c6	refactor: use centralized config in auth service	2025-04-06 18:55:24 +03:00
Alexander	07ddd4f917	feat: add brute force protection (#59) ... * feat: add brute force protection * fix: bind flags to env --------- Co-authored-by: Stavros <steveiliop56@gmail.com>	2025-04-06 18:28:20 +03:00
Stavros	2ed90dfa34	chore: bump version	2025-03-30 15:07:19 +03:00
Stavros	14ce8ecf98	feat: add ability to set custom headers	2025-03-26 18:05:43 +02:00
Stavros	fd32e737a3	feat: add i18n	2025-03-19 19:36:48 +02:00
Stavros	3ccc831a1f	refactor: make error handling simpler (#55)	2025-03-19 16:41:19 +02:00
Stavros	f3471880ee	refactor/handlers (#51) ... * wip * refactor: use prefix instead of patern in docker meta * tests: fix tests	2025-03-19 15:48:16 +02:00
Stavros	52f189563b	refactor: split app context and user context (#48) ... * refactor: split app context and user context * tests: fix api tests * chore: rename dockerfiles * fix: use correct forwardauth address	2025-03-14 20:38:09 +02:00
Stavros	ec67ea3807	refactor: detect if using browser or headless client for better responses	2025-03-10 17:02:23 +02:00
Stavros	3649d0d84e	fix: allow oauth resource when oauth whitelist is empty	2025-03-10 16:22:32 +02:00
Stavros	8cc0f8b31b	chore: bump version	2025-03-09 18:44:45 +02:00
Stavros	631059be69	refactor: rename x-tinyauth-user to remote-user	2025-03-09 18:41:20 +02:00
Stavros	5188089673	Feat/totp (#45) ... * wip * feat: finalize totp gen code * refactor: split login screen and forms * feat: add totp logic and ui * refactor: make totp pending expiry time fixed * refactor: skip all checks when disable continue is enabled * fix: fix cli not exiting on invalid input	2025-03-09 18:39:25 +02:00
Stavros	33904f7f86	refactor: rename remote user to x tinyauth user	2025-03-04 16:00:28 +02:00
WilliamB78	7e0bc84b0f	feat: add Remote-User header	2025-03-04 09:59:42 +01:00
Stavros	fc3f8b5036	refactor: rename the run function to runCheck in the docker helper	2025-02-26 19:31:37 +02:00
Stavros	3030fc5fcf	refactor: change error to 500 when there is an error	2025-02-26 19:27:43 +02:00
Stavros	e4379cf3ed	feat: allowed paths label	2025-02-26 19:25:54 +02:00
Stavros	30aab17f06	feat: allow custom app and generic oauth title	2025-02-23 20:51:56 +02:00
Stavros	7ee0b645e6	chore: bump version	2025-02-19 17:41:23 +02:00
Stavros	d1c6ae1ba1	fix: redirect to frontend when no redirect uri is present in oauth callback	2025-02-16 22:48:04 +02:00
Stavros	f9ab9a6406	fix: filter oauth whitelist to remove empty strings	2025-02-15 17:23:24 +02:00