Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Merge from jordemort/traefik-forward-auth #5

Merged
merged 30 commits into from
Aug 22, 2023
Merged

Merge from jordemort/traefik-forward-auth #5

merged 30 commits into from
Aug 22, 2023

Conversation

mkska
Copy link
Owner

@mkska mkska commented Aug 22, 2023

jordemort and others added 29 commits November 5, 2022 15:54
@jordemort @maxisme
Allow custom key to be used for whitelist and X-Forwarded-User instea…
2425768 
…d of the hardcoded email (#1)

* init commit

* add github workflow

* fix naming

* fix missing param

* upgrade Go version to 1.14

* tmp remove of tests
update error message

* add more specific error message

* put back tests

* rename User ID Key to User ID Path

* upgrade dependencies

* Revert "upgrade dependencies"

This reverts commit 40bd110

It prevents GO 1.12 from working 1.13 + 1.14 still work however.

* Revert "upgrade dependencies"

This reverts commit 40bd110

* mention the user that is not authorized

* mention the user that is not authorized

* tidy error message

* tidy error message

* remove actions

* rename UserIDPath to UserID
remove UserID type
rename comma delimited to comma separated

* rename GetUsedID function to GetUser

* revert docker golang version to 1.13

* change whitelist comment to indicate userIDs instead of explicitly emails

* revert go version

* fix conflicts

* add tests

* push to docker for testing

Co-authored-by: Maximilian Mitchell <max@max.me.uk>
Co-authored-by: Max Mitchell <max.mitchell@ly.st>
Co-authored-by: Maximilian Mitchell <max@maxis.me>
@jordemort @snikch
Domain matching should be case insensitive (#2)
f66cb9a 
* Domain matching should be case insensitive

* s/ValidateEmail/ValidateUser/

Co-authored-by: Mal Curtis <mal@mal.co.nz>
@jordemort @orvice
fix too many forward_auth cookies (#3)
0b3b8f8 
* fix too many forward_auth cookies

* fix missing csrf cookie

Co-authored-by: orvice <orvice@gmail.com>
@jordemort @halimath
feature: trusted ip address ranges skip authentication (#4)
74b0194 
Co-authored-by: Alexander Metzner <alexander.metzner@nortal.com>
@jordemort
Use Go 1.19 in CI (#5)
e8ab996
@jordemort
Update dependencies (#6)
f3d1473 
* Update dependencies

* Stop testing with ancient Go versions
@jordemort
Redo Dockerfile with Go 1.19 and distroless (#7)
d476ec0
@jordemort
Create dependabot.yml
a280dd5
@dependabot
Bump github/codeql-action from 1 to 2 (#8)
3480fa8 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 1 to 2.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@v1...v2)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/setup-go from 2 to 3 (#9)
3d568c1 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 2 to 3.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v2...v3)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/checkout from 2 to 3 (#10)
c7be07a 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/stretchr/testify from 1.8.0 to 1.8.1 (#11)
c7b6e99 
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.0 to 1.8.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.8.0...v1.8.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@jordemort
Fix most of the issues CodeQL dislikes (#12)
4cea39d 
* Fix most of the issues CodeQL dislikes

* Escape ipAddr closer to source
@jordemort @thomseddon
Validate redirect domain (#13)
7a01be9 
* Validate redirect domain

This change introduces a validation step prior to redirect as
discussed in thomseddon#77

* Fix tests

* Try harder to make CodeQL happy

* Fix tests

* Try just a little bit harder to appease CodeQL

Co-authored-by: Thom Seddon <thom@seddonmedia.co.uk>
@jordemort
Workflow update: build container, rename master to main (#14)
744d0af
@jordemort
Run tests as part of container build (#15)
8bd0c35
@jordemort
Update README (#16)
68ca6b1 
* Update README

* Further README tweaks
@jordemort
Update README.md
999bfe8
@dependabot
Bump docker/setup-buildx-action from 2.0.0 to 2.2.1 (#17)
c5805c2 
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2.0.0 to 2.2.1.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@v2.0.0...v2.2.1)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/traefik/traefik/v2 from 2.9.4 to 2.9.6 (#21)
d2b0f9f 
Bumps [github.com/traefik/traefik/v2](https://github.com/traefik/traefik) from 2.9.4 to 2.9.6.
- [Release notes](https://github.com/traefik/traefik/releases)
- [Changelog](https://github.com/traefik/traefik/blob/master/CHANGELOG.md)
- [Commits](traefik/traefik@v2.9.4...v2.9.6)

---
updated-dependencies:
- dependency-name: github.com/traefik/traefik/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump golang.org/x/oauth2 from 0.1.0 to 0.4.0 (#22)
d793555 
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.1.0 to 0.4.0.
- [Release notes](https://github.com/golang/oauth2/releases)
- [Commits](golang/oauth2@v0.1.0...v0.4.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@ciffelia @mkska
Add .github to .dockerignore
8002ac0
@ciffelia @mkska
Add actions workflow to build and push docker image
27517ce 
This workflow builds multi-arch docker image on every push and pull request.
Also, this workflow pushes image to docker hub with appropriate semver tags on tag push.
@Beanow @mkska
Publish to ghcr
f3ee200
@mkska
chore(ci): use own registry
6f3d8d7
@heralight @mkska
Add SameSite option
61fdff0
@mkska
docs: updates readme
355b680
@mkska
Update README.md
5cb0ea8
@mkska
Merge branch 'master' into jordemort-main
8c246d0
@mkska mkska mentioned this pull request Aug 22, 2023
Closed
@mkska mkska merged commit 05eb52c into master Aug 22, 2023
2 checks passed
@mkska mkska deleted the jordemort-main branch November 30, 2023 16:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
5 participants
@mkska @jordemort @ciffelia @Beanow @heralight