27 Commits

Author SHA1 Message Date
Ivar Conradi Østhus 3bf01b803a fix: add support for basic auth with simple-auth (#659) 2020-12-03 21:29:01 +01:00
Ivar Conradi Østhus cd25078792 fix: upgrade cookie-session library 2020-10-02 16:38:51 +02:00
Ivar Conradi Østhus ce0c66d127 fix: add TTL to sessions 2020-10-02 16:32:05 +02:00
Ivar Conradi Østhus 5a58c2ea3f fix: use secure proxy to session cookie 2020-10-01 21:53:37 +02:00
Ivar Conradi Østhus 51f26be759 fix: add secureHeaders option for HSTS 2020-10-01 21:47:40 +02:00
Ivar Conradi Østhus 6f41332055 fix: update helmet config 2020-09-18 11:52:54 +02:00
Ivar Conradi Østhus 7ac134312f fix: helmet wap csp in quotes 2020-09-07 09:52:49 +02:00
Ivar Conradi Østhus bf42fa135d fix: lax helmet csp config for styles.
Required to support react-selct, see
https://github.com/JedWatson/react-select/issues/2917
2020-09-07 09:23:59 +02:00
Ivar Conradi Østhus a870c12138 fix: add optional helmet security headers
Allow users to enable the helmet middleware to enable
security headers by default.

https://github.com/helmetjs/helmet
2020-09-01 21:21:26 +02:00
Ivar Conradi Østhus 7599553a90 fix: stop measure responsetime for unknown paths (#591) 2020-04-30 23:04:06 +02:00
Ivar Conradi Østhus d01c9d2dac fix: use airbnb lint rules directly (#583)
This drops usage of finn-eslint rules as they are no
longer maintained.
2020-04-14 22:29:11 +02:00
Ivar Conradi Østhus 8cb93920d9 chore: remove console.log in test 2020-02-20 08:34:25 +01:00
Ivar Conradi Østhus 62b97ca828 fix: none authentication should have a mock user (#449)
This also fix the bug introduces where authentication mode triggers readOnly mode in the UI.
2020-02-20 08:34:25 +01:00
ivaosthu ccaab0c47b fix: LogProvider as option injected to unleash.
Instead of instructing users to do static calls
in to Unleash, she should instead be allwed to
specify the log provider as an option to Unleash.

This commit introduces the "getLogger" option,
a function responsible for creating a logger.
2020-02-20 08:34:24 +01:00
ivaosthu 09a9212dca fix: Session cookie should set path to baseUriPath 2020-02-20 08:34:23 +01:00
ivaosthu e14d7fc5f0 fix: SimpleAuthentication should work with custom basePaths 2020-02-20 08:34:21 +01:00
Benjamin Ludewig 175208c105 Refactored controllers, moved checkPermission to permission-checker.js middleware 2020-02-20 08:34:19 +01:00
ivaosthu 62e6d1075a chore(modernize): remove express-validator 2020-02-20 08:34:18 +01:00
Ivar Conradi Østhus 3a2771bd75 chore: fix lint 2020-02-20 08:34:15 +01:00
Ivar Conradi Østhus c0a6ae64e0 chore: fix linting 2020-02-20 08:34:15 +01:00
Simen Bekkhus 0bf834a4f2 chore: upgrade prettier
Closes #345
2020-02-20 08:34:13 +01:00
ivaosthu 77482bd7a7 Fix typo in simple-authentication.js 2020-02-20 08:34:06 +01:00
ivaosthu f4feab89f3 Implement authentication support for Unleash UI.
Closes: #261, #233, #232, #231
2020-02-20 08:34:06 +01:00
ivaosthu 57df35f6a5 Fix pathname reporting in middlewares 2020-02-20 08:34:06 +01:00
ivaosthu 089268825f Fix typo in custom validator 2020-02-20 08:34:04 +01:00
ivaosthu 37f9ed9570 Implement cookie-session support.
Sessions will be required to solve admin-auth.

I also refactored a few middlewares into seperate
files to make the code easier to read.

closes #262
2020-02-20 08:34:04 +01:00
ivaosthu 5711c46cbf Add cookie-session dependency 2020-02-20 08:34:04 +01:00