Commits · 198f73943697456abc111ce4382bd4e4d67a9105 · id / go-sso

Jan 27, 2019
- Do not ask for explicit confirmation on logout · 198f7394
  ale authored 6 years ago
  
  Fixes issue #8.
  198f7394
- Redirect the user to a configurable URL when accessing homepage by mistake · 07c9a990
  ale authored 6 years ago
  
  Fixes issue #6.
  07c9a990
- Simplify login handler by isolating session init logic · b1c0a012
  ale authored 6 years ago
  
  And standardize on a single structure for the gorilla session map, using the 'data' key for our gob-encoded objects.
  b1c0a012
Nov 22, 2018
- Make account recovery URL configurable · f0bc2231
  ale authored 6 years ago
  
  f0bc2231
Nov 20, 2018
- Add tracing support to auth-server requests · f144f4dc
  ale authored 6 years ago
  
  f144f4dc
Nov 16, 2018
- Add documentation for keystore_enable_groups · 1724c178
  ale authored 6 years ago
  
  1724c178
- Allow enabling keystore on a group basis · 7fec26e6
  ale authored 6 years ago
  
  Using the new configuration variable 'keystore_enable_groups'.
  7fec26e6
- Log keystore.Open on successful login · 7c359bdb
  ale authored 6 years ago
  
  7c359bdb
Nov 14, 2018
- Set the URL prefix on the logout page · a7e8bbce
  ale authored 6 years ago
  
  a7e8bbce
Nov 03, 2018
- Support deploying the SSO server below a URL path prefix · 86a88695
  ale authored 6 years ago
  
  Likely fixes issue #7 (untested).
  86a88695
- Actually set the u2f AppID from config · e502d9e2
  ale authored 6 years ago
  
  e502d9e2
- Make the U2F AppID configurable · d0ca4be4
  ale authored 6 years ago
  
  d0ca4be4
- Fix a typo in u2f.js · 522bc582
  ale authored 6 years ago
  
  522bc582
Nov 02, 2018
- Add a logout test · c31754c5
  ale authored 6 years ago
  
  c31754c5
- Set the U2F AppID on auth requests · 5e99c3de
  ale authored 6 years ago
  
  Without this field, U2F just isn't working and the accounts with U2F set up are shown an OTP prompt.
  5e99c3de
Oct 30, 2018
- Fix some lint warnings using 'nolint' instead of weird idioms · 9e4b95f8
  ale authored 6 years ago
  
  9e4b95f8
- Failed group membership check should return 403, not 401 · 57f0955d
  ale authored 6 years ago
  
  57f0955d
Oct 29, 2018
- Drop the groups param from the exchange API · 2ddc7cf4
  ale authored 6 years ago
  
  There seems to be no good reason to change group membership when exchanging tokens, let's try just passing the old one over.
  2ddc7cf4
- Improve logging for exchange failures · bef0bea2
  ale authored 6 years ago
  
  bef0bea2
Feb 18, 2018
- Use the right URL for /sso_logout in the logout JS code · d602e3ad
  ale authored 7 years ago
  
  d602e3ad
- Allow connections from the logout page CSP · c49e8adf
  ale authored 7 years ago
  
  c49e8adf
- Encode services JSON as a string · 6577b086
  ale authored 7 years ago
  
  6577b086
- Encode the services JSON in the logout handler · 70cd91e6
  ale authored 7 years ago
  
  70cd91e6
- Forgot to update bindata · 11f62905
  ale authored 7 years ago
  
  11f62905
- Fix a couple of typos · d5135c4f
  ale authored 7 years ago
  
  d5135c4f
- Test Javascript-based logout · 42a7cde1
  ale authored 7 years ago
  
  Using CORS-enabled requests in the background.
  42a7cde1
- Fix the Content-Security-Policy of the logout page · 1712ee81
  ale authored 7 years ago
  
  Allow loading remote images.
  1712ee81
Feb 16, 2018
- Log a message when the keystore client is enabled · bcc3b0e8
  ale authored 7 years ago
  
  bcc3b0e8
Jan 14, 2018
- Move trusted_forwarders code to ai3/go-common · 7a7608f6
  ale authored 7 years ago
  
  Simplifies the device manager code as we don't have to duplicate the IP/network matching logic there.
  7a7608f6
- Refactor Server.Handler method for readability · 009e6615
  ale authored 7 years ago
  
  Should make the subdivision between apps (idp, sso) more obvious.
  009e6615
Dec 17, 2017
- Support partitioned keystore service · db67c6a8
  ale authored 7 years ago
  
  Uses the clientutil.Backend abstraction for the keystore client API.
  db67c6a8
Dec 15, 2017
- Add support for unlocking a remote user key store · 58b44b15
  ale authored 7 years ago
  
  58b44b15
Dec 11, 2017

ale authored 7 years ago

It left the Prometheus instrumentation in server/http.go, while
it is already provided by the ai3/go-common package.

efe1ce96

Dec 09, 2017
- Use ai3/go-common to standardize http servers · 9d388e96
  ale authored 7 years ago
  
  9d388e96
Dec 06, 2017
- Make random value generation safer · 3640a003
  ale authored 7 years ago
  
  Panic on short reads and other errors.
  3640a003
Nov 20, 2017
- Automatically recompute integrity hashes in templates · 1acce89a
  ale authored 7 years ago
  
  Uses 'go generate' to invoke sri.py.
  1acce89a
Nov 19, 2017
- Point the geoip library at the right dataset · 85ff167e
  ale authored 7 years ago
  
  Which would be the GeoLite2-Country.mmdb one.
  85ff167e
- Refactor GeoIP lookups to support multiple dbs · af61f0dc
  ale authored 7 years ago
  
  This enables correct (hopefully) support for IPv6 lookups. Also add support for the special "onion" zone for Tor Hidden Services.
  af61f0dc
- Add logout page · ef9ce4ba
  ale authored 7 years ago
  
  ef9ce4ba
Nov 18, 2017
- Only check group membership if 'g' param is actually set · f430169e
  ale authored 7 years ago
  
  Classic mistake with strings.Split("").
  f430169e