55 Commits

Author	SHA1	Message	Date
Michael Quigley	893a03c8fa	skip interstitial for HTTP 'OPTIONS' method (#777)	2024-10-24 11:00:00 -04:00
Michael Quigley	2a1e39e1e6	Dial(shr) -> DialWithOptions(shr, ...) (#772)	2024-10-18 11:36:13 -04:00
dovholuknf	5d3d085341	point directly to the interstitial page doc	2024-09-03 08:24:45 -04:00
Michael Quigley	ba32e4c401	external html path configuration for interstitial (#716)	2024-08-06 12:00:09 -04:00
Michael Quigley	1f08ca43ea	initial user-agent driven interstitial implementation (#715)	2024-07-31 13:10:04 -04:00
Michael Quigley	2cb3c1428a	fix for chrome-based browsers and setting the client-side interstitial cookie	2024-07-29 13:50:35 -04:00
Michael Quigley	c3cf0f8668	responsive, updated interstitial layout (#704)	2024-07-25 11:02:03 -04:00
Michael Quigley	607ba8b69e	samesite; expiration; path (#704)	2024-07-24 14:23:18 -04:00
Michael Quigley	23a9be0a40	interim interstitial page layout (#704)	2024-07-24 14:09:06 -04:00
Michael Quigley	2755422a29	iteration (#704)	2024-07-24 10:47:12 -04:00
Michael Quigley	2e3d6a627f	frontend config for interstitial enable/disable; zrok.proxy.v1 support for interstitial enablement (#704)	2024-07-24 10:43:22 -04:00
Michael Quigley	b7423ca59e	minimum viable interstitial (#704)	2024-07-23 13:39:17 -04:00
Michael Quigley	ed1b30aa2c	proxy components naming (#704)	2024-07-22 12:34:42 -04:00
Michael Quigley	0c38ab0f43	improvements to public proxy glob implementation (#413)	2024-02-16 11:54:06 -05:00
Cam	2411a29d3e	remove panic in proxy. Add glob check in command	2024-02-07 15:16:09 -06:00
Cam	a1c9f24869	small change to enable glob matching	2024-02-07 13:39:34 -06:00
Cam Otts	53940d51ab	Tls supprt (#540) ... * added tls support to controller and access proxies * few pr comments	2024-01-17 15:37:46 -06:00
Kenneth Bingham	5e0cc3ce53	correct logical operator	2024-01-09 16:46:22 -05:00
Kenneth Bingham	8674edc23e	correctly filter the pkce cookie by name	2024-01-09 16:34:41 -05:00
Kenneth Bingham	df829bf225	optimize cookie handling loops	2024-01-09 16:30:47 -05:00
Kenneth Bingham	ee3bcbbbdb	delete cookie from request instead of setting max age because cookie is never seen by client at this stage before it's passed to backend	2024-01-09 15:34:37 -05:00
Kenneth Bingham	b5f6fd3f55	normalize function names	2024-01-09 13:08:37 -05:00
Kenneth Bingham	25ac8a76f4	delete the zrok-access cookie if not oauth	2024-01-09 13:05:37 -05:00
Kenneth Bingham	7be46bfd40	normalize some existing log messages	2023-12-15 12:15:40 -05:00
Kenneth Bingham	ece79f28d9	set and check zrok-access JWT audience matches share host	2023-12-15 12:13:30 -05:00
Cam	30558a454b	move the go sdk into subdir	2023-11-21 13:27:17 -06:00
Michael Quigley	509bea7fc2	improved oauth frontend configuration; better separation of concerns (#411)	2023-10-18 11:47:26 -04:00
Michael Quigley	62719c13ad	fix redirect issue for oauth frontend	2023-10-17 16:08:18 -04:00
Michael Quigley	2f8b711fb9	public frontend configuration structure now versioned; starts with 'v: 2' (#406)	2023-10-16 21:18:28 -04:00
Michael Quigley	72b80bac94	docs; tweaks (#404)	2023-10-05 13:34:27 -04:00
Michael Quigley	c4f9cecd99	redundant oauth configuration cleanup (#404)	2023-10-03 17:11:52 -04:00
Michael Quigley	483c599c93	use MD5 hash to get reliable 16-byte key (#404)	2023-09-28 14:39:31 -04:00
Michael Quigley	957e50412e	separate out the OAuth host config from HostMatch (#404)	2023-09-28 13:01:36 -04:00
Michael Quigley	7f6f2de5e8	elide client_secret in cf.Dump (#404)	2023-09-26 13:43:42 -04:00
Michael Quigley	adbe4e78c0	lint and cleanup; oauthLoginRequired (#404)	2023-09-26 13:42:41 -04:00
Michael Quigley	b63b1fc145	present basic auth realm as share token	2023-09-26 11:36:11 -04:00
Cam	b951ea152d	Remove old hardcoded domain	2023-09-13 12:41:10 -05:00
Cam	ec73d03078	small verification log	2023-09-13 11:07:15 -05:00
Cam	4be9089cfe	fixed redirect to respect intended route, added additional logging around token swapping	2023-09-13 10:37:38 -05:00
Cam	67a981980b	set the cookie jar domain handler to the root domain	2023-09-12 16:16:49 -05:00
Cam	42e67ce079	can't bleieve I missed these ports. Updated.	2023-09-12 14:19:52 -05:00
Cam	1345990ede	actually plumbed the oauth port through to the server	2023-09-12 14:04:55 -05:00
Ziti-Ci	a07552f0c4	fixed up auth check interval	2023-09-05 11:50:41 -05:00
Ziti-Ci	8e63548552	Merge branch 'main' into oauth-testing	2023-09-05 10:10:25 -05:00
Ziti-Ci	2b0dc71f93	updates to the oauth work	2023-09-05 09:55:55 -05:00
Michael Quigley	c26d325f61	generalized implementation of public/private share (#34)	2023-07-17 16:45:20 -04:00
Michael Quigley	141c9ae685	even better names for the common identities in the 'environment' (#34, #369)	2023-07-17 13:51:51 -04:00
Cam Otts	a8c76b2877	initial testing for oauth protecting shares	2023-07-17 09:44:05 -05:00
Michael Quigley	4713243e2c	further ziti identity naming cleanup (#369)	2023-07-14 10:14:32 -04:00
Michael Quigley	04b0b64ebf	migrated all usages to the new package (#369)	2023-07-13 14:26:35 -04:00