Nicola Murino
|
f30a9a2095
|
OIDC cookie: use a cryptographically secure random string
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-11-21 07:52:36 +01:00 |
|
Nicola Murino
|
433d45ed87
|
WebUI: add a token validation mode that allows checking the signature
Code scanning - action / CodeQL-Build (push) Has been cancelled
CI / Test and deploy (1.22, macos-latest, true) (push) Has been cancelled
CI / Test and deploy (1.22, ubuntu-latest, true) (push) Has been cancelled
CI / Test and deploy (1.22, windows-latest, false) (push) Has been cancelled
CI / Test build flags (push) Has been cancelled
CI / Test with PgSQL/MySQL/Cockroach (push) Has been cancelled
CI / Build Linux packages (aarch64, ubuntu18.04, go1.22.7, arm64) (push) Has been cancelled
CI / Build Linux packages (amd64, ubuntu:18.04, go1.22.7, amd64) (push) Has been cancelled
CI / Build Linux packages (armv7, ubuntu18.04, go1.22.7, arm7) (push) Has been cancelled
CI / Build Linux packages (ppc64le, ubuntu18.04, go1.22.7, ppc64le) (push) Has been cancelled
CI / golangci-lint (push) Has been cancelled
Docker / Build (alpine, false, ubuntu-latest) (push) Has been cancelled
Docker / Build (alpine, true, ubuntu-latest) (push) Has been cancelled
Docker / Build (debian, false, ubuntu-latest) (push) Has been cancelled
Docker / Build (debian, true, ubuntu-latest) (push) Has been cancelled
Docker / Build (debian-plugins, true, ubuntu-latest) (push) Has been cancelled
Docker / Build (distroless, false, ubuntu-latest) (push) Has been cancelled
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-09-21 14:06:25 +02:00 |
|
Nicola Murino
|
64a2f7aa4f
|
oidc refresh token: validate nonce only if set
As clarified in OpenID core spec errata 2, section 12.2
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-07-01 19:06:11 +02:00 |
|
Nicola Murino
|
8294952474
|
WebUIs: refactor CSRF
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-06-14 18:09:32 +02:00 |
|
Nicola Murino
|
784b7585c1
|
remove end year from Copyright notice in files
so we don't have to update all the files every year
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2024-01-01 11:31:45 +01:00 |
|
Nicola Murino
|
c71f0426ae
|
WebClient WIP: add support for localizations
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-12-10 16:40:13 +01:00 |
|
Nicola Murino
|
6175acb572
|
add support for reading more secrets from files
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-11-24 20:43:50 +01:00 |
|
Nicola Murino
|
ba9df51b2e
|
fix or suppress lint warnings detected by golangci-lint 1.55.0
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-10-20 20:31:17 +02:00 |
|
Nicola Murino
|
52ec36dbd6
|
update pwd reset template. Update deps and use new features from the OIDC library
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-05-17 18:10:57 +02:00 |
|
Nicola Murino
|
354fc9b3d6
|
OIDC: allow to extract custom fields from sub-structs
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-03-23 18:15:07 +01:00 |
|
Nicola Murino
|
e29f6857db
|
EventManager: add IDP login trigger and check account action
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-03-22 19:02:54 +01:00 |
|
Nicola Murino
|
fad6af11e5
|
don't expose error messages from pre-actions and post connect hooks
always return a generic error instead to avoid leaking internal info
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-02-28 18:01:09 +01:00 |
|
Nicola Murino
|
c0fe08b597
|
defender: allow to set a different score for "no auth tried" events
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-01-25 18:49:03 +01:00 |
|
Nicola Murino
|
0190d0b849
|
update Copyright year
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2023-01-03 10:18:30 +01:00 |
|
Nicola Murino
|
1f9cf194fe
|
add role to events
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2022-12-03 11:45:27 +01:00 |
|
Nicola Murino
|
5a222807b7
|
add roles
Fixes #837
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2022-11-16 19:04:50 +01:00 |
|
Nicola Murino
|
6c7b3ac5bb
|
oidc: update user after token refresh
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2022-09-22 08:30:22 +02:00 |
|
Nicola Murino
|
a61211d32c
|
OIDC: allow to get the role field from a sub-struct
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2022-08-10 21:42:58 +02:00 |
|
Nicola Murino
|
2a827544ef
|
allow to edit profile to users logged in via OIDC
Fixes #942
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2022-08-01 19:41:18 +02:00 |
|
Nicola Murino
|
c8158e14e0
|
move SFTPGo package to the internal folder
SFTPGo is a daemon and command line tool, not a library.
The public API are provided by the SDK
Signed-off-by: Nicola Murino <nicola.murino@gmail.com>
|
2022-07-24 16:18:54 +02:00 |
|