Commit Graph

1826 Commits

Author SHA1 Message Date
Leandro Lafin fc89630760
Protect htpasswd user list from race condition 2024-07-10 17:35:41 -03:00
Eduardo Vozniak 8f7537a6e9
add HSP IAM audit capabilities (#52)
<!--- Provide a general summary of your changes in the Title above -->

## Description

Add HSDP IAM audit capabilities to oauth2 proxy

## Motivation and Context

HSDP IAM does not provide important audit capabilities out of the box
such as successful login and some key auth errors.

## How Has This Been Tested?

Tested locally with:

```sh
export OAUTH2_PROXY_ENABLE_AUDIT='true'
export OAUTH2_PROXY_AUDIT_URL='url'
export OAUTH2_PROXY_AUDIT_PRODUCT_NAME='Reporting'
export OAUTH2_PROXY_AUDIT_PRODUCT_KEY='product key'
export OAUTH2_PROXY_AUDIT_SHARED_KEY='shared key'
export OAUTH2_PROXY_AUDIT_SECRET_KEY='secret'
```

## Checklist:

<!--- Go over all the following points, and put an `x` in all the boxes
that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're
here to help! -->

- [ ] My change requires a change to the documentation or CHANGELOG.
- [ ] I have updated the documentation/CHANGELOG accordingly.
- [ ] I have created a feature (non-master) branch for my PR.
2024-07-03 10:11:30 -03:00
Erikson Bahr ab969ac2bd
fix valueset and improve error handling 2024-07-03 09:34:44 -03:00
Erikson Bahr a00969ab06
fix lint 2024-07-01 15:28:38 -03:00
Erikson Bahr 8e832221bb
no longer break pipeline if cookie refresher fail 2024-07-01 15:22:04 -03:00
Erikson Bahr ce668ef7f6
add HSP IAM audit capabilities 2024-07-01 15:21:22 -03:00
Eduardo Vozniak f7de8bbb22
use introspect url from discovery (#51)
<!--- Provide a general summary of your changes in the Title above -->

## Description

<!--- Describe your changes in detail -->

## Motivation and Context

<!--- Why is this change required? What problem does it solve? -->
<!--- If it fixes an open issue, please link to the issue here. -->

## How Has This Been Tested?

<!--- Please describe in detail how you tested your changes. -->
<!--- Include details of your testing environment, and the tests you ran
to -->
<!--- see how your change affects other areas of the code, etc. -->

## Checklist:

<!--- Go over all the following points, and put an `x` in all the boxes
that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're
here to help! -->

- [ ] My change requires a change to the documentation or CHANGELOG.
- [ ] I have updated the documentation/CHANGELOG accordingly.
- [ ] I have created a feature (non-master) branch for my PR.
2024-04-23 12:48:03 -03:00
Erikson Bahr 0ee3758b01
use introspect url from discovery 2024-04-23 12:43:42 -03:00
Eduardo Vozniak 0bf401c2d1
allow setting arbitrary cookie refresh url (#50)
<!--- Provide a general summary of your changes in the Title above -->

## Description

<!--- Describe your changes in detail -->

Allow setting arbitrary URLs for oauth2 proxy cookie refresh mechanism.
#49

## Motivation and Context

<!--- Why is this change required? What problem does it solve? -->
<!--- If it fixes an open issue, please link to the issue here. -->

## How Has This Been Tested?

<!--- Please describe in detail how you tested your changes. -->
<!--- Include details of your testing environment, and the tests you ran
to -->
<!--- see how your change affects other areas of the code, etc. -->

## Checklist:

<!--- Go over all the following points, and put an `x` in all the boxes
that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're
here to help! -->

- [ ] My change requires a change to the documentation or CHANGELOG.
- [ ] I have updated the documentation/CHANGELOG accordingly.
- [ ] I have created a feature (non-master) branch for my PR.
2024-02-02 09:45:08 -03:00
Erikson Bahr 946f277f47
pass legacy url to actual one 2024-02-02 08:57:07 -03:00
Erikson Bahr 153743e952
update docs 2024-02-02 08:46:24 -03:00
Erikson Bahr 23cf172dd6
allow setting arbitrary cookie refresh url 2024-02-02 08:42:37 -03:00
Leandro Lafin 5de6ce45d0
SSO - Refresh hsdpamcookie to allow signle sign on between other Philips products (#49)
<!--- Provide a general summary of your changes in the Title above -->

## Description

Users with different tabs, applications etc will now have their cookie
refreshed so when they open other tabs that have other applications,
these applications will now be authenticated.

Example: I'm doing logging for 1 hour, when I open reporting, hsp
reporting will ask for login due to expired cookie. Now this is no
longer happer


https://www.hsdp.io/documentation/identity-and-access-management-iam/api-documents/resource-reference-api/oauth2-api#/Session%20Refresh/refreshSessionUsingGET

New settings introduced:

`OAUTH2_PROXY_OIDC_ENABLE_COOKIE_REFRESH` default false
`OAUTH2_PROXY_OIDC_COOKIE_REFRESH_NAME` default 'hsdpamcookie'

## Motivation and Context

<!--- Why is this change required? What problem does it solve? -->
<!--- If it fixes an open issue, please link to the issue here. -->

## How Has This Been Tested?

<!--- Please describe in detail how you tested your changes. -->
<!--- Include details of your testing environment, and the tests you ran
to -->
<!--- see how your change affects other areas of the code, etc. -->

Tested locally

## Checklist:

<!--- Go over all the following points, and put an `x` in all the boxes
that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're
here to help! -->

- [ ] My change requires a change to the documentation or CHANGELOG.
- [ ] I have updated the documentation/CHANGELOG accordingly.
- [ ] I have created a feature (non-master) branch for my PR.
2024-02-01 14:26:15 -03:00
Erikson Bahr e09053e3c3
fix unit tests 2024-02-01 13:59:16 -03:00
Erikson Bahr d6734336dc
remove deadcode 2024-02-01 13:38:54 -03:00
Erikson Bahr 4b00a44fcf
fix unit tests 2024-02-01 11:55:09 -03:00
Erikson Bahr 71512442de
fix unit tests 2024-02-01 11:26:05 -03:00
Erikson Bahr e18e301a86
add local-debug-build to make 2024-02-01 11:19:47 -03:00
Erikson Bahr 7ca98f24c8
fix unit tests 2024-02-01 11:15:02 -03:00
Erikson Bahr 1140950b9c
update docs 2024-02-01 11:00:15 -03:00
Erikson Bahr df015b5123
add 'OAUTH2_PROXY_OIDC_ENABLE_COOKIE_REFRESH' and 'OAUTH2_PROXY_OIDC_COOKIE_REFRESH_NAME' options 2024-02-01 10:38:06 -03:00
Erikson Bahr 0c8b7f9e33
fix lint 2024-02-01 09:56:38 -03:00
Erikson Bahr ac2d04686f
implement oidc singl sign on cookie refresher 2024-02-01 08:53:16 -03:00
Lucas Fraguas fe7fb31f05
Remove unused dependency 2024-01-09 11:24:03 -03:00
Lucas Fraguas 5f47af88e7
Rollback Go version to 1.19 2024-01-09 11:07:56 -03:00
Lucas Fraguas 87aaa79008
Update Docker and Go versions 2024-01-08 15:53:57 -03:00
Eduardo Vozniak 91ddd6bd5e
Fixing introspect 2023-10-02 19:50:48 -03:00
Eduardo Vozniak 05c8b59f67
Updating docker secrets 2023-10-02 15:56:22 -03:00
Eduardo Vozniak 8c7518ec0e
Fixing publish 2023-10-02 15:46:46 -03:00
Eduardo Vozniak c595c79980
Updating publish 2023-10-02 15:41:01 -03:00
Eduardo Vozniak 8d0d71473a
Adding publish pipeline 2023-10-02 15:24:50 -03:00
Eduardo Vozniak a1b3f3ca3f
Finishing CI 2023-10-02 15:16:02 -03:00
Eduardo Vozniak b4cc192cd6
Adding checkout 2023-10-02 14:41:22 -03:00
Eduardo Vozniak 01681cf194
Moving bump version to local code 2023-10-02 14:31:05 -03:00
Eduardo Vozniak 863c126067
Updating image tag and login 2023-10-02 14:04:25 -03:00
Eduardo Vozniak 792d7cd0b8
Bumping version and building the image 2023-10-02 13:35:03 -03:00
Eduardo Vozniak f16d64ee67
Removing lint from make test, running in parallel 2023-10-02 12:09:25 -03:00
Eduardo Vozniak 8ab7b0b164
Adding lint as a separeted job 2023-10-02 12:02:01 -03:00
Eduardo Vozniak 62a9586a9d
Bumping golang 2023-10-02 11:53:11 -03:00
Eduardo Vozniak dee0cf77c6
Downloading mods 2023-10-02 11:45:37 -03:00
Eduardo Vozniak b18295e200
Removing philips runners 2023-10-02 11:40:49 -03:00
Eduardo Vozniak d0e6e71f59
Testing CI pipeline 2023-10-02 11:37:14 -03:00
Eduardo Vozniak 572ba89813
Adding editor config 2023-10-02 11:31:50 -03:00
Eduardo Vozniak c755920715
Removing unused variables 2023-10-02 11:31:32 -03:00
Eduardo Vozniak 9546f84203
Removing tests for the old platform requirements 2023-10-02 10:56:52 -03:00
Eduardo Vozniak aaf290193e
Removing hardcode 2023-10-02 10:48:00 -03:00
Eduardo Vozniak cbc7360195
100% passing tests 2023-10-02 10:27:46 -03:00
Eduardo Vozniak dcfda9e25b
Fixing certificate test 2023-09-27 09:03:47 -03:00
Eduardo Vozniak 6061f28914
Merging 7.4.0 (#47)
Making PICS the base branch for the work in progress.
We can push to this branch only via Pull request.
2023-09-26 08:35:28 -03:00
Eduardo Vozniak 2c7543f38f
Merging 7.4.0 2023-09-01 08:09:44 -03:00