6d5563db2c
fix: clean request path before acls ( #1055 )
...
Co-authored-by: Claude Fable 5 <noreply@anthropic.com >
2026-07-30 19:35:31 +03:00
Stavros
cbd92a1104
chore: use dependabot 3 day default cooldown
2026-07-30 12:29:05 +03:00
Stavros
2d19d5c3d4
chore: add selfh.st to sponsors section
2026-07-28 12:38:25 +03:00
Stavros
1db1714971
chore: remove unused make commands
2026-07-28 12:23:51 +03:00
Stavros
c7077a7c84
fix: do not allow empty ingresses
2026-07-21 00:37:13 +03:00
Stavros and GitHub
80bc87188e
refactor: rework acl fetching for kubernetes and docker ( #1028 )
2026-07-20 16:39:15 +03:00
Stavros and GitHub
0e7bdf6cd5
feat: experimental option to run tinyauth in oauth bridge mode ( #1027 )
2026-07-20 00:03:26 +03:00
Stavros
4db1b33034
fix: allow for oauth auto redirect in oidc authorization
2026-07-19 13:34:05 +03:00
Stavros
f6637c0f65
fix: don't force login_for=app in continue page
2026-07-19 13:03:55 +03:00
Stavros and GitHub
f43d690320
refactor: rework scheme validation in oauth controller and frontend ( #1026 )
2026-07-19 00:41:28 +03:00
Stavros
50c25e4478
fix: fix domain validator with port but no scheme and https or http
2026-07-18 18:17:24 +03:00
Stavros
d6087dc45e
fix: allow for mismatching protocol in trusted domain check - ui warnings
2026-07-18 18:06:26 +03:00
Stavros
6efb970673
fix: fix lint errors
2026-07-18 17:52:08 +03:00
Stavros
0c1a64d47d
fix: make login_for optional
2026-07-18 17:05:52 +03:00
Stavros
a79438d6ec
fix: fix typo
2026-07-18 16:47:53 +03:00
Stavros
286aad2e08
test: remove obsolete test case
2026-07-18 16:37:52 +03:00
Stavros
5091fc2d7a
fix: suppress irrelevant debugs logs in acls service
2026-07-18 16:30:12 +03:00
Stavros
0fc87ad58f
fix: support for parent trusted domain, fixes #1021
2026-07-18 16:30:12 +03:00
Stavros and GitHub
a7eba59a42
refactor: export cache package ( #1017 )
2026-07-17 02:04:34 +03:00
Stavros
04a06ec5ff
chore: use blue color for totp generate
2026-07-16 17:13:36 +03:00
Stavros
3cf3cc9090
fix: don't fail app on label provider init failure
2026-07-16 14:34:12 +03:00
Stavros
589fe22138
tests: add tests for abstain in oauth whitelist
2026-07-16 14:30:48 +03:00
Stavros
84117ce109
chore: remove star history from readme
2026-07-15 17:10:38 +03:00
Stavros
9eabfe89fd
chore: update screenshot
2026-07-15 16:48:16 +03:00
Stavros and GitHub
dade1e2c8f
refactor: rework rate limit logic ( #1008 )
2026-07-15 15:30:57 +03:00
Stavros and GitHub
6e095fd4f2
refactor: rework the way trusted proxies ip work ( #1007 )
2026-07-15 15:17:55 +03:00
Stavros
2a0d7bd37a
chore: update sponsors section in readme
2026-07-15 01:59:19 +03:00
Stavros and GitHub
c22925c2fb
fix: use constant time in user checks ( #1004 )
2026-07-14 16:49:59 +03:00
Stavros and GitHub
d946926c36
feat: allow existing query params in oidc redirect uri ( #1003 )
2026-07-14 16:36:57 +03:00
Stavros and GitHub
e75605b2c5
refactor: move domain check into small helper util ( #1000 )
2026-07-14 14:20:15 +03:00
Stavros and GitHub
b62bb2d37a
refactor: generate mdx docs with tabs for each config option ( #996 )
2026-07-13 18:07:47 +03:00
Stavros
791adbb54d
fix: remove omitempty suffix from docs gen
2026-07-11 17:18:35 +03:00
Stavros
009ae30b47
Update Crowdin configuration file
...
[ci skip]
2026-07-11 13:05:07 +03:00
Stavros
11b534abc7
chore: add 1 day cooldown for dependabot updates
2026-07-11 00:25:17 +03:00
405d91065e
New Crowdin updates ( #986 )
...
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
Co-authored-by: CodeRabbit <noreply@coderabbit.ai >
2026-07-09 20:16:17 +03:00
Stavros
82993624ba
chore: remove dup i18n key
2026-07-09 18:40:37 +03:00
Stavros
0812bc3869
fix: truncate forgot password text if it's too big
2026-07-09 16:18:28 +03:00
Stavros and GitHub
0bd2821a9b
refactor: use tailscale api for user checking instead of tsnet ( #978 )
2026-07-09 01:56:09 +03:00
Stavros and GitHub
73cc4808bc
feat: improve binary size with build tags ( #976 )
2026-07-06 23:49:55 +03:00
Stavros
6ab9c0a0c5
feat: log warning when experimental features are enabled
2026-07-03 16:57:53 +03:00
Stavros and GitHub
4aa05aeb79
refactor: use some colors in CLI output ( #962 )
2026-07-03 16:40:22 +03:00
Stavros and GitHub
440a3a3ef5
chore: cleanup codegen ( #965 )
2026-07-02 23:35:34 +03:00
Stavros and GitHub
a3c4d6ac83
chore: move tailscale to experimental config ( #964 )
2026-07-02 23:17:03 +03:00
Stavros
c8b31c54a0
chore: remove prettier from frontend
2026-07-02 22:23:52 +03:00
Stavros
04b93fa107
fix: remove shutdown from serve error path
2026-07-02 15:07:04 +03:00
Stavros and GitHub
a6c716c4e2
fix: ensure data paths are set correctly in docker, fixes #958 ( #959 )
2026-07-01 16:12:46 +03:00
Stavros and GitHub
ffafb5bff5
feat: add a reconnect to the initial ldap connection ( #928 )
2026-06-30 15:57:41 +03:00
Stavros
bb867ea5f4
docs: update readme with openid certification badge
2026-06-29 01:35:06 +03:00
Stavros and GitHub
09ec40cb76
feat: show provider in quick actions ( #955 )
2026-06-28 17:58:11 +03:00
Stavros
08af4557fd
fix: use client ip instead of remote addr in tailscale whois lookups
2026-06-23 21:06:55 +03:00
Stavros
89ffdf7e22
chore: update example env
2026-06-23 13:39:31 +03:00
Stavros and GitHub
69f4206f65
refactor: remove concurrent listeners and rework cookie logic ( #950 )
2026-06-23 13:35:29 +03:00
Stavros
ea1baaa9ac
docs: add hosting partners section
2026-06-22 13:19:23 +03:00
Stavros and GitHub
efe373084f
feat: support for oidc max age ( #949 )
2026-06-20 00:21:22 +03:00
Stavros and GitHub
7f18b45e21
feat: support for the prompt parameter in the oidc flow ( #948 )
2026-06-20 00:04:41 +03:00
Stavros and GitHub
6ccc894570
tests: improve test coverage for controllers ( #946 )
2026-06-19 11:59:16 +03:00
Stavros and GitHub
53af1b99c0
tests: don't use _test suffix in service and controller tests ( #944 )
2026-06-17 17:03:30 +03:00
Stavros and GitHub
654b5cc436
fix: use better limits in lockdown to limit dos attack window ( #943 )
2026-06-17 13:10:58 +03:00
Stavros
f7d7f1c4f0
feat: add psl checks to the oauth controller is safe redirect check
2026-06-17 13:05:42 +03:00
Stavros
e7d26f497d
fix: use runtime trusted uris in oauth controller
2026-06-17 12:33:09 +03:00
Stavros
a9face749d
chore: remove leftover debug log line from tailscale service
2026-06-17 12:15:51 +03:00
Stavros
905f67292c
fix: use scoped caches for each image
2026-06-16 15:41:44 +03:00
Stavros
6ed5c2d0a0
fix: remove quotes from release action ldflags
2026-06-16 15:16:44 +03:00
Stavros and GitHub
c825d81b2d
feat: add support for webfinger ( #941 )
2026-06-16 15:05:11 +03:00
Stavros and GitHub
f404c2ef16
feat: use dig for di in services and controllers ( #936 )
2026-06-16 13:00:48 +03:00
a0e74cd5f2
refactor: move oidc handling to backend and add support for oidc post ( #923 )
...
Co-authored-by: Claude <noreply@anthropic.com >
2026-06-13 16:45:12 +03:00
Stavros
57c573502d
chore: bump go to 1.26.4
2026-06-09 11:44:03 +03:00
Stavros and GitHub
426eac2d0b
refactor: rework oidc session storage ( #913 )
2026-06-06 16:26:08 +03:00
Stavros and GitHub
dac844595d
refactor: use new cache store in services ( #912 )
2026-05-31 18:55:06 +03:00
Stavros
940ba6dff7
fix: don't allow tagged devices in tailscale integration
2026-05-31 12:42:00 +03:00
Stavros and GitHub
faee58ca8e
feat: use ding for ordered go routine shutdown order ( #896 )
2026-05-27 12:46:28 +03:00
Stavros
e9b8ca3cf8
fix: cleanup acl logic to match stable one
2026-05-27 12:11:17 +03:00
Stavros and GitHub
f2c4e7932d
chore: include debug symbols in nightly images ( #908 )
2026-05-27 11:43:43 +03:00
Stavros and GitHub
4538922caf
refactor: simplify error handling in oidc authorize handler ( #907 )
2026-05-27 11:27:10 +03:00
Stavros and GitHub
672db84200
feat: make config file a stable feature ( #897 )
2026-05-27 11:26:09 +03:00
Stavros and GitHub
0a3e7bf265
fix: use policy engine in oauth whitelist check ( #904 )
2026-05-26 00:07:46 +03:00
Stavros and GitHub
3f584ca741
New Crowdin updates ( #798 )
2026-05-24 19:16:29 +03:00
Stavros
2737a25227
fix: don't point to nil local users in bootstrap app
2026-05-23 20:24:54 +03:00
Stavros and GitHub
55bef72639
fix: ensure domain defined in acls is included in host rules ( #884 )
2026-05-23 17:13:41 +03:00
Stavros
ae17bd3b66
fix: do not log user context not found errors in proxy controller
2026-05-23 16:43:03 +03:00
Stavros and GitHub
c9e90547d4
chore: change project license to AGPL ( #876 )
2026-05-21 12:16:57 +03:00
Stavros
3194f4b987
chore: remove stale error from tailscale service
2026-05-20 23:04:38 +03:00
Stavros
9b50670925
fix: handle panics in tailscale service
2026-05-20 23:01:14 +03:00
Stavros and GitHub
1166a15aa7
feat: tailscale integration ( #847 )
2026-05-20 20:10:38 +03:00
Stavros and GitHub
c855f9b8ac
feat: add support for deny by default access controls ( #852 )
2026-05-19 18:07:55 +03:00
Stavros
8b4ba23328
chore: remove stale bot
2026-05-18 14:32:50 +03:00
Stavros
8932f2ad46
feat: ensure public key pairs with private key in oidc service
2026-05-16 20:43:50 +03:00
Stavros
482ba9d99f
fix: use yml instead of yaml files for issue templates
2026-05-16 20:27:48 +03:00
Stavros
1bcd1bb59a
fix: fix feature request template and allow blank issues
2026-05-16 20:24:11 +03:00
Stavros
5349f21212
fix: use loaded public key in oidc service, fixes #860
2026-05-16 17:09:21 +03:00
Stavros
ca06099466
tests: fix tests for proxy controller
2026-05-15 18:43:18 +03:00
Stavros
d4b4245017
chore: revert 4c741a5 and use 403 for acl errors
2026-05-15 18:39:12 +03:00
Stavros
4c741a5990
fix: use 401 errors instead of 403 for nginx responses
2026-05-15 18:12:15 +03:00
Stavros and GitHub
def539a40f
refactor: replace bun with pnpm ( #870 )
2026-05-15 14:43:51 +03:00
Stavros
086e3af4e2
chore: add deepsec to gitignore
2026-05-13 19:11:39 +03:00
Stavros and GitHub
4f7335ed73
refactor: rework app logging, dependency injection and cancellation ( #844 )
...
* feat: add new logger
* refactor: use one struct for context handling and cancellation
* refactor: rework logging and config in controllers
* refactor: rework logging and config in middlewares
* refactor: rework logging and cancellation in services
* refactor: rework cli logging
* fix: improve logging in routines
* feat: use sync groups for better cancellation
* refactor: simplify middleware, controller and service init
* tests: fix controller tests
* tests: use require instead of assert where previous step is required
* tests: fix middleware tests
* tests: fix service tests
* tests: fix context tests
* fix: fix typos
* feat: add option to enable or disable concurrent listeners
* fix: assign public key correctly in oidc server
* tests: fix don't try to test logger with char size
* fix: coderabbit comments
* tests: use filepath join instead of path join
* fix: ensure unix socket shutdown doesn't run twice
* chore: remove temp lint file
2026-05-10 16:10:36 +03:00
Stavros and GitHub
1382ab41e7
refactor: rework user context handling throughout tinyauth ( #829 )
...
* wip
* fix: fix util imports
* fix: fix bootstrap import issues
* fix: fix cli imports
* fix: context controller
* fix: use new context in user controller
* fix: fix imports and context in proxy controller
* fix: fix oauth and oidc controller imports and context
* feat: finalize context functionality
* refactor: simplify acls checking logic by passing the entire acl struct
* chore: rename get basic auth to encode basic auth for clarity
* fix: fix controller tests
* tests: fix service tests
* tests: fix utils tests
* tests: move to testify for testing in utils
* fix: fix config reference generator
* tests: add tests for context parsing
* tests: add tests for context middleware
* tests: remove error wrapper from context tests
* tests: fix log wrapper tests
* fix: fix verion setting in cd and dockerfiles
* fix: review comments batch 1
* fix: review comments batch 2
* fix: review comments batch 3
* fix: delete totp pending session cookie on totp success
* tests: fix user controller tests
* fix: don't audit login too early
* fix: own comments
2026-05-07 15:41:07 +03:00
Stavros
5e822d99e1
chore: fix typos in oidc service
2026-04-29 16:08:21 +03:00
Stavros
373ee8806e
chore: prefer errors.is instead of comparison
2026-04-29 16:04:27 +03:00
Stavros
a14d64c8ba
chore: remove exp slices package and use stdlib
2026-04-29 15:56:35 +03:00
