Commit Graph

54 Commits

Author SHA1 Message Date
Quentin Gliech
5e8a529374 better CSRF form handling 2021-07-31 14:47:54 +02:00
Quentin Gliech
ea5563b0df better logging and http handling 2021-07-30 23:07:29 +02:00
Quentin Gliech
844ada50bb better enforcement of auth and csrf protection 2021-07-30 18:02:05 +02:00
Quentin Gliech
a0562533c1 fix clippy errors 2021-07-30 15:36:01 +02:00
Quentin Gliech
14a59fc985 move the CSRF save filter to crate::filters::csrf 2021-07-30 15:31:34 +02:00
Quentin Gliech
068e4738dc update dependencies 2021-07-30 15:21:11 +02:00
Quentin Gliech
59b2cfde33 migrate to warp, last part 2021-07-30 15:19:30 +02:00
Quentin Gliech
cebfcad58d WIP: migrate to warp, part 3 2021-07-29 16:58:26 +02:00
Quentin Gliech
c8090d8ed4 WIP: migrate to warp, part 2 2021-07-29 14:56:33 +02:00
Quentin Gliech
7566b28041 WIP: migrate to warp 2021-07-27 19:20:24 +02:00
Quentin Gliech
a7852390de reimplement CSRF logic 2021-07-27 14:25:15 +02:00
Quentin Gliech
8188172ef0 oauth2-types: PKCE-related types 2021-07-25 20:11:09 +02:00
Quentin Gliech
e0d25808a6 properly save session with multiple auth
This will help knowing when the user last authed, support MFA & other
login types, support acr_values & max_time, etc.
2021-07-25 14:42:48 +02:00
Quentin Gliech
002f1027db rework OIDC metadata endpoint 2021-07-22 16:01:55 +02:00
Quentin Gliech
51539019aa replace custom serde types with serde_with in oauth2-types 2021-07-22 14:38:14 +02:00
Quentin Gliech
05f13f94f8 enable std feature in password-hash to avoid manually building errors 2021-07-17 11:21:58 +02:00
Quentin Gliech
eaafdf432f store users in database 2021-07-17 00:49:25 +02:00
Quentin Gliech
d6453d4d4f fix CI by removing the --offline flag from rustfmt 2021-07-16 23:22:17 +02:00
Quentin Gliech
7de1b0a60a fix dependencies fetching in CI 2021-07-16 23:19:03 +02:00
Quentin Gliech
9dd302d0a7 cache Cargo dependencies per OS in CI 2021-07-16 23:16:21 +02:00
Quentin Gliech
ebab5085f4 run Cargo in offline mode in CI 2021-07-16 23:04:13 +02:00
Quentin Gliech
be59f910b9 Retry downloading dependencies twice in CI 2021-07-16 22:55:26 +02:00
Quentin Gliech
d882eb43d8 better caching and dependencies fetching in CI 2021-07-16 22:52:00 +02:00
Quentin Gliech
c441ed75e7 add a subcommand to generate a config file 2021-07-16 18:55:33 +02:00
Quentin Gliech
b0f89cdef5 make client storage read-only 2021-07-16 18:04:43 +02:00
Quentin Gliech
a15e786ece fix some license headers 2021-07-16 18:04:04 +02:00
Quentin Gliech
08375f49cf reorganize dependencies and upgrade them 2021-07-16 17:47:44 +02:00
Quentin Gliech
cb72d29695 partial config load & tests 2021-07-16 17:33:16 +02:00
Quentin Gliech
58b16511db split CLI in multiple commands
- `config` to view & check config files
 - `database` for DB-related ops
 - `server` to run the server
2021-07-16 14:34:18 +02:00
Quentin Gliech
ad136e757d initial config schema 2021-07-16 11:19:03 +02:00
Quentin Gliech
555b659df9 ci: tweak cache keys 2021-07-10 00:10:22 +02:00
Quentin Gliech
155e74cffb ci: disable fail-fast on test job 2021-07-10 00:05:34 +02:00
Quentin Gliech
cea37d4736 Also setup cache on rustfmt job in CI 2021-07-10 00:01:39 +02:00
Quentin Gliech
706bea34a4 Cache dependencies in CI 2021-07-09 23:56:35 +02:00
Quentin Gliech
adb2234b31 save sessions in database 2021-07-09 22:49:23 +02:00
Quentin Gliech
8bbc8c809a upgrade dependencies 2021-07-09 17:17:42 +02:00
Quentin Gliech
226bab1e43 Use stable toolchain for clippy check in CI 2021-07-09 16:56:09 +02:00
Quentin Gliech
4519b5251b Setup GitHub Actions 2021-07-09 16:44:58 +02:00
Quentin Gliech
b7d0ac20b5 Configure rustfmt & clippy lints 2021-07-09 16:03:39 +02:00
Quentin Gliech
c569c56e58 proper CSRF config 2021-07-09 14:53:53 +02:00
Quentin Gliech
453544b755 setup sqlx with migrations 2021-07-09 10:50:51 +02:00
Quentin Gliech
0c3139f046 Add README and LICENSE 2021-07-08 14:41:54 +02:00
Quentin Gliech
7975ffe3f6 Split storage and handlers in multiple modules 2021-07-08 14:23:41 +02:00
Quentin Gliech
e2910b35c2 Logout route 2021-07-08 12:06:47 +02:00
Quentin Gliech
78bc6b22b3 Simple error middleware 2021-07-08 11:54:50 +02:00
Quentin Gliech
53a6e14a73 simplify csrf middleware, cors middleware 2021-07-02 13:34:51 +02:00
Quentin Gliech
4676ba0e7f better file structure 2021-07-01 16:26:02 +02:00
Quentin Gliech
0e30a1fb0c static oauth2 client from config 2021-07-01 14:56:27 +02:00
Quentin Gliech
4422b63dfd better CSRF handling in forms 2021-07-01 10:12:02 +02:00
Quentin Gliech
cca18d3d79 CSRF protection 2021-06-25 15:11:38 +02:00