Stavros
b62b2932fe
fix: only set trusted proxies if config option is not empty
2025-09-16 15:14:42 +03:00
Stavros
5c866bad1a
feat: multiple oauth providers ( #355 )
...
* feat: add flag decoder (candidate)
* refactor: finalize flags decoder
* feat: add env decoder
* feat: add oauth config parsing logic
* feat: implement backend logic for multiple oauth providers
* feat: implement multiple oauth providers in the frontend
* feat: add some default icons
* chore: add credits for parser
* feat: style oauth auto redirect screen
* fix: bot suggestions
* refactor: rework decoders using simpler and more efficient pattern
* refactor: rework oauth name database migration
2025-09-16 13:28:28 +03:00
Stavros
2d78e6b598
feat: add cookie domain back to context controller
2025-09-10 13:47:48 +03:00
Stavros
e03eaf4f08
feat: add psl check in cookie domain
2025-09-10 13:43:08 +03:00
Stavros
74cb8067a8
tests: add util tests
2025-09-03 17:52:51 +03:00
Stavros
ba46493a7b
tests: add proxy controller tests
2025-09-03 15:30:24 +03:00
Stavros
bb0373758a
tests: add resources controller test
2025-09-03 14:58:24 +03:00
Stavros
f8836fc964
tests: test user context handler with no context
2025-09-03 13:36:11 +03:00
Stavros
53856e0a70
tests: test invalid json in user controller
2025-09-03 13:31:45 +03:00
Stavros
9b7dcfd86f
tests: add user controller tests
2025-09-03 13:28:27 +03:00
Stavros
7afea8b3fc
tests: add tests for context controller
2025-09-03 12:45:23 +03:00
Stavros
f5ac7eff99
refactor: mode label decoder to separate package
2025-09-03 12:23:21 +03:00
Stavros
b024d5ffda
feat: allow for dash substitute in ip filters for environments like kubernetes
2025-09-03 12:16:06 +03:00
Stavros
773cd6d171
feat: add trusted proxies config value
2025-09-03 12:14:13 +03:00
Stavros
f3eb7f69b4
Revert "feat: header based acls ( #337 )" ( #340 )
...
This reverts commit f0d2da281a
2025-09-03 12:12:18 +03:00
Stavros
f0d2da281a
feat: header based acls ( #337 )
...
* feat: add header decoder
* feat: allow for dash substitute over slash for environments like kubernetes
* feat: use decoded headers in proxy controller
* refactor: simplify decode header to node function
* refactor: use stdlib prefix check in header decoder
* fix: lowercase key and filter before comparing
2025-09-02 19:06:52 +03:00
Stavros
9ce16c9652
fix: expire csrf cookie if it's invalid
2025-09-02 18:38:11 +03:00
Stavros
ad4fc7ef5f
refactor: don't export non-needed fields ( #336 )
...
* refactor: don't export non-needed fields
* feat: coderabbit suggestions
* fix: avoid queries panic
2025-09-02 01:27:55 +03:00
Stavros
5184c96e85
feat: add mutex to ldap service
2025-09-02 00:08:19 +03:00
Stavros
b9e35716ac
feat: invalid domain warning ( #332 )
...
* wip
* refactor: update domain warning layout
* i18n: add domain warning translations
* refactor: rework hooks usage
* feat: clear timeouts
* fix: use useeffect to cleanup timeout
* refactor: rework redirects and history storage
* refactor: rename domain to root domain
2025-09-01 18:22:42 +03:00
Stavros
c7c3de4f78
refactor: unify labels ( #329 )
...
* refactor: unify labels
* feat: implement path block and user block
Fixes #313
* fix: fix oauth group check logic
* chore: fix typo
2025-08-29 17:04:34 +03:00
Stavros
03d06cb0a7
feat: add sqlite database for storing sessions ( #326 )
...
* feat: add sqlite database for storing sessions
* refactor: use db instance instead of service in auth service
* fix: coderabbit suggestions
2025-08-29 12:35:11 +03:00
Stavros
504a3b87b4
refactor: rework file structure ( #325 )
...
* wip: add middlewares
* refactor: use context fom middleware in handlers
* refactor: use controller approach in handlers
* refactor: move oauth providers into services (non-working)
* feat: create oauth broker service
* refactor: use a boostrap service to bootstrap the app
* refactor: split utils into smaller files
* refactor: use more clear name for frontend assets
* feat: allow customizability of resources dir
* fix: fix typo in ui middleware
* fix: validate resource file paths in ui middleware
* refactor: move resource handling to a controller
* feat: add some logging
* fix: configure middlewares before groups
* fix: use correct api path in login mutation
* fix: coderabbit suggestions
* fix: further coderabbit suggestions
2025-08-26 15:05:03 +03:00
Stavros
5f7f88421e
refactor: move user logging to oauth callback handler
2025-07-17 15:07:05 +03:00
Stavros
bc941cb248
refactor: make reconnect operation return connection
2025-07-17 15:06:06 +03:00
Stavros
6867667de6
chore: format server package
2025-07-17 00:46:28 +03:00
ElevenNotes
079886b54c
feat: better health check and less log noise ( #274 )
...
* feat: better health check and less log noise
* feat: better health check and less log noise
2025-07-17 00:44:05 +03:00
Stavros
19eb8f3064
refactor: handle oauth groups response as an any array of any
2025-07-17 00:31:24 +03:00
Stavros
1a13936693
refactor: log parsed user in generic provider
2025-07-16 01:38:54 +03:00
Stavros
4a87af4463
refactor: make ldap user not found errors be warnings
2025-07-15 13:18:37 +03:00
Stavros
f25ab72747
refactor: check cookie prior to basiv auth in context hook
2025-07-15 02:10:16 +03:00
Stavros
2233557990
tests: move handlers test to handlers package
2025-07-15 01:38:01 +03:00
Stavros
d3bec635f8
fix: make tinyauth not "eat" the authorization header
2025-07-15 01:34:25 +03:00
Stavros
6519644fc1
fix: handle type string for oauth groups
2025-07-15 00:17:41 +03:00
Stavros
736f65b7b2
refactor: close connection before trying to reconnect
2025-07-14 20:10:15 +03:00
Stavros
63d39b5500
feat: try to reconnect to ldap server if heartbeat fails
2025-07-14 20:02:16 +03:00
Stavros
52b12abeb2
refactor: make heartbeat log message only appear in debug logs
2025-07-12 13:31:53 +03:00
Stavros
48b4d78a7c
refactor: split handlers into smaller purpose specific files
2025-07-12 13:23:25 +03:00
Stavros
8ebed0ac9a
chore: remove meaningless comments
2025-07-12 13:17:06 +03:00
Stavros
e742603c15
fix: add logging to user parse failure
2025-07-12 11:49:37 +03:00
Stavros
3215bb6baa
refactor: simplify ldap heartbeat
2025-07-12 00:21:22 +03:00
Stavros
a11aba72d8
feat: add heartbeat to keep ldap connection alive
2025-07-11 23:16:09 +03:00
Stavros
f73eb9571f
fix: fix password reset message translations
2025-07-11 16:16:49 +03:00
Stavros
0ace88a877
feat: add support for bypassing authentication for specific IPs
2025-07-10 00:53:22 +03:00
Stavros
476ed6964d
fix: fix docker label matching logic
2025-07-10 00:34:04 +03:00
Stavros
9f02710114
feat: add support for comma list in label domain check
2025-07-09 17:49:13 +03:00
Stavros
0f4a6b5924
tests: fix parse header tests
2025-07-08 00:54:36 +03:00
Stavros
c662b9e222
tests: extend tests in utils and server
2025-07-08 00:47:07 +03:00
Stavros
f48bb65d7b
feat: add support for using secret files for basic auth password
2025-07-07 23:31:51 +03:00
Stavros
6dc57ddf0f
refactor: change basic auth label to username instead of user
2025-07-06 01:02:08 +03:00
