52 Commits

Author	SHA1	Message	Date
Stavros	a9e8bf89a9	feat: map info from OIDC claims to headers (#122) ... * refactor: return all values from body in the providers * refactor: only accept claims following the OIDC spec * feat: map info from OIDC claims to headers * feat: add support for required oauth groups * fix: bot suggestions * feat: get claims from github and google * fix: close body correctly	2025-04-30 19:57:49 +03:00
Stavros	84f550023a	tests: fix api tests	2025-04-23 15:12:38 +03:00
Stavros	9923eb9b8f	tests: add new var in tests	2025-04-23 14:33:17 +03:00
Stavros	85ad0d19c7	feat: add regex support to oauth whitelist	2025-04-18 19:36:50 +03:00
Stavros	bd7e160e10	refactor: store redirect URI in tinyauth session cookie	2025-04-06 20:37:02 +03:00
Stavros	df849d5a5c	refactor: remove dependency on gin sessions	2025-04-06 19:13:09 +03:00
Stavros	5cf4e208c6	refactor: use centralized config in auth service	2025-04-06 18:55:24 +03:00
Alexander	07ddd4f917	feat: add brute force protection (#59) ... * feat: add brute force protection * fix: bind flags to env --------- Co-authored-by: Stavros <steveiliop56@gmail.com>	2025-04-06 18:28:20 +03:00
Stavros	14ce8ecf98	feat: add ability to set custom headers	2025-03-26 18:05:43 +02:00
Stavros	fd32e737a3	feat: add i18n	2025-03-19 19:36:48 +02:00
Stavros	3ccc831a1f	refactor: make error handling simpler (#55)	2025-03-19 16:41:19 +02:00
Stavros	f3471880ee	refactor/handlers (#51) ... * wip * refactor: use prefix instead of patern in docker meta * tests: fix tests	2025-03-19 15:48:16 +02:00
Stavros	52f189563b	refactor: split app context and user context (#48) ... * refactor: split app context and user context * tests: fix api tests * chore: rename dockerfiles * fix: use correct forwardauth address	2025-03-14 20:38:09 +02:00
Stavros	ec67ea3807	refactor: detect if using browser or headless client for better responses	2025-03-10 17:02:23 +02:00
Stavros	631059be69	refactor: rename x-tinyauth-user to remote-user	2025-03-09 18:41:20 +02:00
Stavros	5188089673	Feat/totp (#45) ... * wip * feat: finalize totp gen code * refactor: split login screen and forms * feat: add totp logic and ui * refactor: make totp pending expiry time fixed * refactor: skip all checks when disable continue is enabled * fix: fix cli not exiting on invalid input	2025-03-09 18:39:25 +02:00
Stavros	33904f7f86	refactor: rename remote user to x tinyauth user	2025-03-04 16:00:28 +02:00
WilliamB78	7e0bc84b0f	feat: add Remote-User header	2025-03-04 09:59:42 +01:00
Stavros	3030fc5fcf	refactor: change error to 500 when there is an error	2025-02-26 19:27:43 +02:00
Stavros	e4379cf3ed	feat: allowed paths label	2025-02-26 19:25:54 +02:00
Stavros	30aab17f06	feat: allow custom app and generic oauth title	2025-02-23 20:51:56 +02:00
Stavros	d1c6ae1ba1	fix: redirect to frontend when no redirect uri is present in oauth callback	2025-02-16 22:48:04 +02:00
Stavros	cfe2a1967a	refactor: use go's builtin basic auth parser	2025-02-10 21:42:27 +02:00
Stavros	38412e1962	tests: add api tests	2025-02-10 19:05:50 +02:00
Stavros	7a3a463489	chore: add comments to code	2025-02-08 12:33:58 +02:00
Stavros	d2ee382f92	fix: return json errors when authorization header is present	2025-02-07 20:03:24 +02:00
Stavros	ce567ae3de	feat: add support for nginx/nginx proxy manager (breaking)	2025-02-07 16:36:47 +02:00
Stavros	fe594d2755	fix: do not crash when docker is not connected	2025-02-02 19:34:02 +02:00
Stavros	6e5f882e0b	feat: tailscale oauth	2025-02-01 16:28:39 +02:00
Stavros	29f0a94faf	feat: finalize logic	2025-01-30 17:11:31 +02:00
Stavros	3efcb26db1	refactor: remove sensitive info logging even in debug mode	2025-01-28 17:36:06 +02:00
Stavros	a243f22ac8	refactor: users are not a requirement when using oauth	2025-01-26 20:45:34 +02:00
Stavros	08d382c981	feat: add debug log level	2025-01-26 20:23:09 +02:00
Stavros	3b50d9303b	refactor: use cookie store correctly	2025-01-26 19:51:58 +02:00
Stavros	989ea8f229	refactor: rename email back to username	2025-01-26 19:51:58 +02:00
Stavros	682a918812	refactor: don't store oauth token in cookie	2025-01-26 11:05:11 +02:00
Stavros	2c7a3fc801	refactor: simplify cookie secure logic	2025-01-25 16:29:18 +02:00
Stavros	cc480085c5	feat: custom cookie age	2025-01-25 15:29:17 +02:00
Stavros	96a373a794	feat: internal server error page	2025-01-24 20:31:10 +02:00
Stavros	c5a8639822	feat: oauth email whitelist	2025-01-24 20:17:08 +02:00
Stavros	f61b6dbad4	refactor: log errors	2025-01-24 18:24:20 +02:00
Stavros	c59aaa5600	feat: add option to disable continue screen	2025-01-24 18:16:23 +02:00
Stavros	433e71bd50	feat: persist sessions and auto redirect to app	2025-01-24 15:29:46 +02:00
Stavros	80d25551e0	wip	2025-01-23 19:16:35 +02:00
Stavros	5e73d06fcc	refactor: use dependency injection	2025-01-21 18:41:06 +02:00
Stavros	2988b5f22f	feat: add option to make cookie secure	2025-01-21 18:13:18 +02:00
Stavros	a28e55ae4c	fix: split domain correctly	2025-01-21 18:09:22 +02:00
Stavros	e2f97d1fbe	refactor: remove root url	2025-01-20 18:22:17 +02:00
Stavros	d0c1aae1e7	refactor: use a hook for checking sign in status in the backend	2025-01-19 23:00:27 +02:00
Stavros	0becda9e2f	feat: add healthcheck	2025-01-19 16:41:04 +02:00