Stavros
c662b9e222
tests: extend tests in utils and server
2025-07-08 00:47:07 +03:00
Stavros
f48bb65d7b
feat: add support for using secret files for basic auth password
2025-07-07 23:31:51 +03:00
Stavros
6dc57ddf0f
refactor: change basic auth label to username instead of user
2025-07-06 01:02:08 +03:00
Stavros
6ec8c9766c
feat: add ldap support ( #232 )
...
* feat: add ldap support
* feat: add insecure option for self-signed certificates
* fix: recognize ldap as a username provider
* test: fix tests
* feat: add configurable search filter
* fix: fix error message in ldap search result
* refactor: bot suggestions
2025-07-05 18:17:39 +03:00
Stavros
1941de1125
refactor: remove init functions from methods ( #228 )
2025-07-04 02:35:09 +03:00
Stavros
c10bff55de
fix: encrypt the cookie in sessions ( #225 )
...
* fix: encrypt the cookie in sessions
* tests: use new auth config in tests
* fix: coderabbit suggestions
2025-07-04 01:43:36 +03:00
Stavros
84d4c84ed2
feat: allow or block an ip/range of ips using labels ( #211 )
...
* feat: allow or block an ip/range of ips using labels
* refactor: redirect to root page when no username or ip is provided in the unauthorized page
2025-06-25 20:35:48 +03:00
Stavros
f3ec4baf3c
feat: add support for logging in to a basic auth protected app ( #203 )
2025-06-20 11:33:06 +03:00
Stavros
aed29d2923
feat: allow user to specify domain in container labels in order to identify it ( #198 )
...
* feat: allow user to specify domain in container labels in order to identify it
* refactor: remove port from domain before getting container
2025-06-15 20:30:52 +03:00
Stavros
3397e2aa8e
refactor: move to traefik paerser for label parsing ( #197 )
...
* refactor: move to traefik paerser for label parsing
* fix: sanitize headers before adding to map
* refactor: use splitn in header parser
* refactor: ignore containers that failed to get inspected in docker
2025-06-15 19:58:23 +03:00
Stavros
bc0a38a857
refactor: only use 302 redirects
2025-06-01 17:16:22 +03:00
Stavros
34c8d16c7d
fix: fix loading states in forms
2025-05-30 18:14:33 +03:00
Stavros
fc73e25d51
feat: allow generic provider to use untrusted SSL certificates ( #164 )
...
* feat: allow generic provider to use untrusted SSL certificates
* chore: fix typo
* chore: bot suggestion
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
---------
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
2025-05-27 16:42:20 +03:00
Stavros
3a7b71ae3e
feat: generate a unique id for the cookie names based on the domain ( #161 )
...
* feat: generate a unique id for the cookie names based on the domain
* tests: fix tests
2025-05-25 12:38:21 +03:00
Stavros
a6aa97bcfa
chore: remove url requirement in background image
2025-05-24 16:02:40 +03:00
Stavros
318f00993e
Feat/new UI ( #153 )
...
* wip
* feat: make forms functional
* feat: finalize pages
* chore: remove unused translations
* feat: app context
* feat: user context
* feat: finalize username login
* fix: use correct tab order in login form
* feat: add oauth logic
* chore: update readme and assets
* chore: rename docs back to assets
* feat: favicons
* feat: custom background image config option
* chore: add acknowledgements for background image
* feat: sanitize redirect URL
* feat: sanitize redirect URL on check
* chore: fix dependabot config
* refactor: bot suggestions
* fix: correctly redirect to app and check for untrusted redirects
* fix: run oauth auto redirect only when there is a redirect URI
* refactor: change select color
* fix: fix dockerfiles
* fix: fix hook rendering
* chore: remove translations cdn
* chore: formatting
* feat: validate api response against zod schema
* fix: use axios error instead of generic error in login page
2025-05-20 17:17:12 +03:00
Stavros
91e3bbc9d9
refactor: store version in constants
2025-05-20 16:39:27 +03:00
Stavros
ff48fa320e
feat: nightly release workflow
2025-05-15 16:41:26 +03:00
Stavros
5a601277ab
refactor: remove www authenticate header
2025-05-06 17:01:46 +03:00
Stavros
58588d6663
fix: allow docker api negotiation
2025-05-03 16:37:37 +00:00
Stavros
2db7795eb7
fix: use email in oauth whitelist check
2025-05-02 15:16:57 +03:00
Stavros
a98a91a394
fix: only use groups in OAuth
2025-05-01 22:01:08 +03:00
Stavros
773942dc3b
feat: add support for auto redirecting to oauth providers
2025-05-01 14:18:26 +03:00
Stavros
83483d6374
fix: disable basic auth on totp users
2025-05-01 13:05:48 +03:00
Stavros
a9e8bf89a9
feat: map info from OIDC claims to headers ( #122 )
...
* refactor: return all values from body in the providers
* refactor: only accept claims following the OIDC spec
* feat: map info from OIDC claims to headers
* feat: add support for required oauth groups
* fix: bot suggestions
* feat: get claims from github and google
* fix: close body correctly
2025-04-30 19:57:49 +03:00
Stavros
1c738b718a
refactor: log actual errors when an error takes place
2025-04-25 17:03:12 +03:00
Stavros
3436466cff
chore: bump version
2025-04-23 18:56:00 +03:00
Stavros
84f550023a
tests: fix api tests
2025-04-23 15:12:38 +03:00
Stavros
9923eb9b8f
tests: add new var in tests
2025-04-23 14:33:17 +03:00
Stavros
db43f1cb7a
feat: add custom forgot password message
2025-04-23 14:31:38 +03:00
Stavros
85ad0d19c7
feat: add regex support to oauth whitelist
2025-04-18 19:36:50 +03:00
Stavros
dc731cff10
feat: add regex support in user and oauth whitelist
2025-04-18 19:15:59 +03:00
Stavros
e11d14fda0
feat: add trusted URLs
2025-04-15 13:44:23 +03:00
Stavros
02faabf688
feat: add CSRF cookie protection
2025-04-14 20:00:58 +03:00
Stavros
eb36b2211b
chore: cleanup redirect cookie
2025-04-14 19:45:50 +03:00
Stavros
0761c2f5c1
refactor: remove redirect URL from session cookie
2025-04-14 19:42:52 +03:00
Stavros
525f4f3041
chore: bump version
2025-04-10 15:35:43 +03:00
Stavros
8a21345706
fix: handle new lines and spaces in the secret files
2025-04-10 15:34:46 +03:00
Stavros
1169c633cc
refactor: remove tailscale oauth
2025-04-10 15:14:01 +03:00
Stavros
a579cf37ce
fix: allow user if users label is empty
2025-04-09 17:44:59 +03:00
Stavros
38c5cd7b32
fix: tinyauth should allow the user to access a resource if a whitelist is not setup
2025-04-08 16:24:25 +03:00
Stavros
8e84e59c2f
refactor: simplify the get cookie data handling
2025-04-06 20:53:24 +03:00
Stavros
bd7e160e10
refactor: store redirect URI in tinyauth session cookie
2025-04-06 20:37:02 +03:00
Stavros
df849d5a5c
refactor: remove dependency on gin sessions
2025-04-06 19:13:09 +03:00
Stavros
5cf4e208c6
refactor: use centralized config in auth service
2025-04-06 18:55:24 +03:00
Alexander
07ddd4f917
feat: add brute force protection ( #59 )
...
* feat: add brute force protection
* fix: bind flags to env
---------
Co-authored-by: Stavros <steveiliop56@gmail.com >
2025-04-06 18:28:20 +03:00
Stavros
2ed90dfa34
chore: bump version
2025-03-30 15:07:19 +03:00
Stavros
14ce8ecf98
feat: add ability to set custom headers
2025-03-26 18:05:43 +02:00
Stavros
fd32e737a3
feat: add i18n
2025-03-19 19:36:48 +02:00
Stavros
3ccc831a1f
refactor: make error handling simpler ( #55 )
2025-03-19 16:41:19 +02:00
