mlsmaycon
b16d63643c
Add group-based access control for SSO reverse proxy authentication
...
Implement user group validation during OAuth callback to ensure users
belong to allowed distribution groups before granting access to reverse
proxies. This provides account isolation and fine-grained access control.
Key changes:
- Add ValidateUserGroupAccess to ProxyServiceServer for group membership checks
- Redirect denied users to error page with access_denied parameter
- Handle OAuth error responses in proxy middleware
- Add comprehensive integration tests for auth callback flow
2026-02-10 16:25:00 +01:00
Viktor Liu
6b00bb0a66
Strip session_token on redirect
2026-02-10 18:27:31 +08:00
Viktor Liu
260c46df04
Fix broken auth redirect
2026-02-09 00:02:54 +08:00
Viktor Liu
7b6294b624
Refuse to service a service if auth setup failed
2026-02-08 23:24:43 +08:00
Viktor Liu
5190923c70
Improve logging requests
2026-02-08 17:49:03 +08:00
pascal
b01809f8e3
use logger
2026-02-04 23:10:01 +01:00
pascal
790ef39187
log on debug
2026-02-04 22:43:40 +01:00
pascal
3af16cf333
add trace logs
2026-02-04 22:26:29 +01:00
Alisdair MacLeod
694ae13418
add stateless proxy sessions
2026-02-04 16:52:35 +00:00
Alisdair MacLeod
28f3354ffa
Merge remote-tracking branch 'origin/prototype/reverse-proxy' into prototype/reverse-proxy
...
# Conflicts:
# management/internals/modules/reverseproxy/reverseproxy.go
# management/internals/server/boot.go
# management/internals/shared/grpc/proxy.go
# proxy/internal/auth/middleware.go
# shared/management/proto/proxy_service.pb.go
# shared/management/proto/proxy_service.proto
# shared/management/proto/proxy_service_grpc.pb.go
2026-02-04 11:56:04 +00:00
Alisdair MacLeod
562923c600
management OIDC implementation using pkce
2026-02-04 11:51:46 +00:00
Eduard Gert
733ea77c5c
Add proxy auth ui
2026-02-03 19:05:55 +01:00
Alisdair MacLeod
a73ee47557
ignore ports when performing proxy mapping lookups
2026-02-02 14:39:13 +00:00
Alisdair MacLeod
f882c36e0a
simplify authentication
2026-01-30 14:08:52 +00:00
Alisdair MacLeod
e95cfa1a00
add support for some basic authentication methods
2026-01-29 16:34:52 +00:00
Alisdair MacLeod
1d8390b935
refactor layout and structure
2026-01-26 09:28:46 +00:00
pascal
183619d1e1
cleanup
2026-01-16 12:01:52 +01:00
pascal
ed5f98da5b
cleanup
2026-01-15 14:54:33 +01:00
