Commit Graph

24 Commits (0.4.0)

Author SHA1 Message Date
Jan Dittberner 9f44a00c63 Fix linter warnings 2 months ago
Jan Dittberner 7ef12da4fa Fix subject handling for login requests
This change implements handling for the case that a login request
retrieved from Hydra has a pre-defined subject. The login request is
rejected if the requested subject is not part of the presented client
certificate.
2 months ago
Jan Dittberner bdf37493d0 Debug logging for session 2 months ago
Jan Dittberner 407e9acfcc Remove comment 2 months ago
Jan Dittberner 1e676e8cf1 Switch logging to slog
This commit replaces logrus with slog from the Go standard library.
2 months ago
Jan Dittberner f22f8ff902 Update golangci-lint, fix warnings
- remove copyright years
- mark unused parameter with _
- add missing empty lines before expressions
2 months ago
Jan Dittberner f3dc4d71d1 Update dependencies 2 months ago
Jan Dittberner 56ff01600f Improve consent handling
- hide client logo if there is no logo URI
- hide client information link if there is no client URI
- use buttons instead of a checkbox for consent
- use Markdown for messages
11 months ago
Jan Dittberner 44e18ca3a5 Implement consent management
The primary change in this commit is the introduction of consent management.

A few minor improvements have been made:

- move common header to ui/templates/base.gohtml
- add an I18NService to unify localization
- add a handlers.getLocalizer function
- fix translation extraction and merging in Makefile
- add a new AuthMiddleware to centralize client certificate authentication
- move client certificate handling to internal/handlers/security.go
- improver error handling, allow localization of HTTP error messages
11 months ago
Jan Dittberner 679dcb27ce Adapt to Hydra 2.x
- use new SDK package
- add session to transport user information from login to consent
11 months ago
Jan Dittberner e2de4243a9 Enforce email address selection
This commit makes sure that an email address is selected when the user
presents a client certificate with multiple email addresses.
11 months ago
Jan Dittberner 55530d23e4 Improve login page
- improve formatting of login page
- improve german translation of message that is shown if a certificate with multiple
  email addresses is used
11 months ago
Jan Dittberner 962dd30c6a Fix golangci-lint config 11 months ago
Jan Dittberner 79ab816489 Implement rendering of authorization server errors 11 months ago
Jan Dittberner 63e3333c4d Rename module to match Git repository URL 11 months ago
Jan Dittberner cb7a3a8fa5 Re-order configuration precedence 11 months ago
Jan Dittberner 4618ebfe10 Fix golangci-lint warning 11 months ago
Jan Dittberner 26bfcc225e Improve logging
- switch to structured logging
- use JSON formatter
- support log level and formatter configuration
11 months ago
Jan Dittberner d23290b13b Move default configuration 11 months ago
Jan Dittberner c727bc39d7 Minor documentation and code improvements
- fix name of certificate in README
- avoid unneeded variable declaration in internal/services/i18n.go
11 months ago
Jan Dittberner ab2e3c33b5 Implement logout-successful handler 12 months ago
Jan Dittberner fe1914fd89 Move Markdown parsing to i18n service 12 months ago
Jan Dittberner b0daaf956f Add handling of invalid login challenge 12 months ago
Jan Dittberner 16a3dbedc8 Small IDP refactoring
- move internal code to internal directory
- add translations for texts on missing email in client certificate page
- add error handling for missing login_challenge request parameter
- add Markdown support via goldmark
- use https:// URLs in Apache license headers
12 months ago