Commit Graph

2460 Commits

Author SHA1 Message Date
Anderson Valério 72f89818fa
add doc for new env 2024-12-27 10:19:59 -03:00
Anderson Valério 92e7960b6c
fix lint bodyclose 2024-12-27 10:10:38 -03:00
Anderson Valério 8bf8b0ecc2
fix userID lint 2024-12-27 09:57:35 -03:00
Anderson Valério 1da13b0eff
fix userID lint 2024-12-27 09:50:43 -03:00
Anderson Valério 6cf267d368
clear session when refresh token fail to generate a new acess token 2024-12-27 08:38:23 -03:00
Anderson Valério 2851483446
add sign_out_all_sessions endpoint 2024-12-27 08:38:10 -03:00
Anderson Valério fb64fad321
add BackendLogoutAllSessionsURL configuration 2024-12-27 08:37:43 -03:00
Sailinder Harpal a9ac8d5496
Add audit log (#59)
<!--- Provide a general summary of your changes in the Title above -->

## Description

<!--- Describe your changes in detail -->
For Story AB#1618387

Adding function to audit log 'logout for all session'.

Reference documentation:
https://hl7.org/fhir/valueset-audit-event-type.html
https://hl7.org/fhir/R4/codesystem-dicom-dcim.html#dicom-dcim-110114

## Motivation and Context

<!--- Why is this change required? What problem does it solve? -->
<!--- If it fixes an open issue, please link to the issue here. -->

## How Has This Been Tested?

Tested locally with webhook.

Build a new docker image in wsl with `docker buildx build -t
oauth-local:v0.0.3 .`
Update the docker-compose.yml file to 
Updated the environment variable for .env.oauth2-proxy.us-east
Adding =>
`OAUTH2_PROXY_AUDIT_URL=https://webhook.site/0d7939ba-13f3-4cbc-ac2c-b814a3add0ca`

The audit logging is posted to the webhook =>
`
{
    "resourceType": "AuditEvent",
    "event": {
        "type": {
            "system": "http://hl7.org/fhir/ValueSet/audit-event-type",
            "version": "1",
            "code": "110123",
            "display": "Logout",
            "userSelected": "All Sessions"
        },
        "action": "E",
        "dateTime": "2024-12-19T12:44:30Z",
        "outcome": "0",
        "outcomeDesc": "Success"
    },
    "participant": [
        {
            "userId": {
                "value": "SECRET"
            },
            "altId": "SECRET",
            "requestor": true
        }
    ],
    "source": {
        "identifier": {
            "type": {
"system": "http://hl7.org/fhir/ValueSet/audit-source-type",
                "code": "4",
                "display": "Application Server"
            },
            "value": "admin_fthv@philips.com"
        },
        "type": [
            {
                "system": "http://hl7.org/fhir/security-source-type",
                "code": "1",
                "display": "End-user display device, diagnostic device."
            }
        ],
        "extension": [
            {
                "url": "/worklist",
                "extension": [
                    {
                        "url": "applicationName",
                        "valueString": "ReportingTest"
                    },
                    {
                        "url": "applicationVersion",
                        "valueString": "1"
                    },
                    {
                        "url": "serverName",
                        "valueString": "oauth2proxy"
                    },
                    {
                        "url": "componentName",
                        "valueString": "oauth2proxy"
                    },
                    {
                        "url": "productKey",
                        "valueString": "SECRET"
                    },
                    {
                        "url": "tenant",
                        "valueString": "SECRET"
                    }
                ]
            }
        ]
    }
}
`
## Checklist:

<!--- Go over all the following points, and put an `x` in all the boxes
that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're
here to help! -->

- [ ] My change requires a change to the documentation or CHANGELOG.
- [ ] I have updated the documentation/CHANGELOG accordingly.
- [ ] I have created a feature (non-master) branch for my PR.
- [ ] I have written tests for my code changes.
2024-12-20 13:05:34 +01:00
Harpal, Sailinder 2f165d5eab
Change text 2024-12-19 15:52:54 +01:00
Harpal, Sailinder b1bfa56d0e
Add audit log 2024-12-19 14:31:01 +01:00
Anderson Valério 9ce484ba03
Merge 7.7.1 (#58)
## Description

Merge from Upstream/Release/7.7.1

AB#1611455

## Motivation and Context

Keeping OAuth2-Proxy up-to-date with the upstream

## How Has This Been Tested?

Created a local container image of the oauth-proxy from this PR and
integrated it with Reporting locally.
- run in the root of this repo
  - docker buildx build -t oauth-local .
- Updated FROM statement in pics/src/services/Oauth2Proxy/Dockerfile to 
  - FROM oauth-local

The following flows were checked:
- Login
- Audit logs
- Logout 


## Checklist:

- [x] Merge from Upstream/Release/7.7.1
2024-12-11 08:42:13 -03:00
Anderson Valério f321907ee7
update lint in pics/audit 2024-12-09 22:09:52 -03:00
Anderson Valério 67b8fd0061
bump golanci-lint 2024-12-09 22:00:53 -03:00
Anderson Valério c0c59bdcbc
The linter 'exportloopref' is deprecated (since v1.60.2) due to: Since Go1.22 (loopvar) this linter is no longer relevant. Replaced by copyloopvar 2024-12-09 21:30:51 -03:00
Anderson Valério c41b56e1f4
fix go mod 2024-12-09 21:25:15 -03:00
Anderson Valério d8e977c923
fix alpha_config doc 2024-12-09 21:16:55 -03:00
Anderson Valério 262f01e313
Merge remote-tracking branch 'upstream/release/v7.7.1' into merge_7.7.1 2024-12-09 21:03:44 -03:00
Anderson Valério fb0723e5bb
Isolating some PICS custom changes (#57)
## Description

Isolating PICS custom changes

## Motivation and Context

It's hard to understand what are our custom changes and what is from
OAuth2-Proxy main repo

## How Has This Been Tested?

Created a local container image of the oauth-proxy from this PR and
integrated it with Reporting locally.
- run in the root of this repo
  - docker buildx build -t oauth-local .
- Updated FROM statement in pics/src/services/Oauth2Proxy/Dockerfile to 
  - FROM oauth-local

The following flows were checked:
- Login
- Audit logs
- Logout 


## Checklist:

- [x] Isolating some dunction in separated files
- [x] Creating a folder for Pics packages
2024-12-09 09:15:36 -03:00
Anderson Valério 519a415ad1
revert test change 2024-12-06 12:06:04 -03:00
Anderson Valério 0961bc3fda
revert test change 2024-12-06 12:04:44 -03:00
Anderson Valério 6f656ad5c6
revert test change 2024-12-06 12:02:32 -03:00
Anderson Valério 76fb7074f1
comment unused function 2024-12-05 15:36:06 -03:00
Anderson Valério 4f04b856e5
pics legacy options 2024-12-05 14:51:24 -03:00
Anderson Valério 125e2f0ab6
pics cookie refresh 2024-12-05 14:51:06 -03:00
Anderson Valério 6e288ec2b6
moving audit to pics folder 2024-12-04 09:02:21 -03:00
Anderson Valério b71c2f8857
pics_oidc 2024-12-04 09:01:16 -03:00
Anderson Valério 2a34c871d4
Minimizing changes with upstream (#56)
Removing blank lines/spaces/tabs differences with upstream

## Motivation and Context

Minimize conflicts when merging a new version

## How Has This Been Tested?


## Checklist:

- [x] Reverted formatting changes to minimize conflicts
2024-12-04 08:57:31 -03:00
Anderson Valério 8053bfe399
Revert "isolating changes on oidc provider"
This reverts commit c053cb8d0a.
2024-12-04 08:38:46 -03:00
Anderson Valério b5ebcb2a13
Revert "moving audit to pics folder"
This reverts commit 59f46e6c9f.
2024-12-04 08:32:15 -03:00
Anderson Valério e6e7c91352
reverting formatting changes 2024-12-02 14:54:27 -03:00
Anderson Valério 8600d79ff5
reverting formatting changes 2024-12-02 14:39:15 -03:00
Anderson Valério 8b5b97c399
reverting formatting changes 2024-12-02 12:00:49 -03:00
Anderson Valério fd6f9c0c63
reverting formatting changes 2024-12-02 10:51:28 -03:00
Anderson Valério 9db036e422
revert html formatting 2024-12-02 10:36:58 -03:00
Anderson Valério f0c2b53784
reverting changes that only cause conflicts 2024-11-29 15:15:55 -03:00
Anderson Valério c053cb8d0a
isolating changes on oidc provider 2024-11-29 15:14:58 -03:00
Anderson Valério 59f46e6c9f
moving audit to pics folder 2024-11-29 15:14:10 -03:00
github-actions[bot] 055a63432c
update to release version v7.7.1 2024-10-08 14:41:41 +02:00
Nuno Miguel Micaelo Borges ff761d2523
fix: runtime error: index out of range (0) with length 0 (#2328)
* Issue 2311: runtime error: index out of range [0] with length 0 while extracting state of of the csrf

---------

Co-authored-by: tuunit <jan@larwig.com>
2024-10-08 14:40:41 +02:00
rd-danny-fleer 642ba174d4
fix: unable to use hyphen in JSON path for oidc-groups-claim option (#2619) 2024-10-07 20:08:44 +02:00
Joel Speed d68336dcf4
Merge pull request #2803 from tuunit/bugfix/self-signed-certificate-handling
fix: self signed certificate handling in v7.7.0
2024-10-07 11:54:22 +01:00
tuunit 4bd920b208
add changelog entry 2024-10-06 21:55:45 +02:00
tuunit bae168f06a
better handling of default transport modification 2024-10-06 21:43:38 +02:00
tuunit 8fd7312a90
fix: self signed certificate handling 2024-10-05 17:29:37 +02:00
Joel Speed cda641473f
Merge pull request #2798 from oauth2-proxy/release/v7.7.0
fix(ci): testing full release cycle before release branches can be merged
2024-10-02 15:17:25 +01:00
tuunit 07230ead91
fix(ci): testing full release cycle before release branches can be merged 2024-10-02 16:03:13 +02:00
Joel Speed f5d36705fa
Merge pull request #2792 from oauth2-proxy/release/v7.7.0
release v7.7.0
2024-10-02 13:52:47 +01:00
tuunit 1dd4a412b0
add new loop var linter for go1.22 and remove unnecessary exportloopref linter 2024-10-01 11:15:48 +02:00
tuunit 3c7dadcbd2
add v7.7.0 release highlights 2024-10-01 11:15:48 +02:00
tuunit 6e32bd6e38
fix missing 'changes since' section logic 2024-10-01 11:15:47 +02:00