11 commits

Author	SHA1	Message	Date
Yuzerion	33e400a17e	security: run in rootless by default and drop unnecessary caps (#101) ... Co-authored-by: yusing <yusing@6uo.me>	2025-04-29 08:42:30 +08:00
yusing	cb2990f6e8	chore: enrich example config	2025-04-26 07:40:55 +08:00
yusing	56c6a9f8fe	chore: add groups scope to default OIDC scopes	2025-04-26 03:31:44 +08:00
yusing	b815c6fd69	feat(oidc): support token refreshing via offline_access scope ... - refactored code - moved api/v1/auth to auth/ - security enhancement - env example update - default jwt ttl changed to 24 hours	2025-04-23 17:50:22 +08:00
yusing	5ea82645ef	examples: add GODOXY_FRONTEND_PORT environment variable	2025-03-28 03:21:34 +08:00
yusing	0d518166ee	api: move prometheus handler inside api handler /v1/metrics	2025-02-01 02:09:43 +08:00
Yuzerion	fb0dc7dea0	Feat/OIDC middleware (#50) ... * implement OIDC middleware * auth code cleanup * allow override allowed_user in middleware, fix typos * fix tests and callbackURL * update next release docs * fix OIDC middleware not working with Authentik * feat: add groups support for OIDC claims (#41) Allow users to specify allowed groups in the env and use it to inspect the claims. This performs a logical AND of users and groups (additive). * merge feat/oidc-middleware (#49) * api: enrich provider statistifcs * fix: docker monitor now uses container status * Feat/auto schemas (#48) * use auto generated schemas * go version bump and dependencies upgrade * clarify some error messages --------- Co-authored-by: yusing <yusing@6uo.me> * cleanup some loadbalancer code * api: cleanup websocket code * api: add /v1/health/ws for health bubbles on dashboard * feat: experimental memory logger and logs api for WebUI --------- Co-authored-by: yusing <yusing@6uo.me> --------- Co-authored-by: yusing <yusing@6uo.me> Co-authored-by: Peter Olds <peter@olds.co>	2025-01-19 13:48:52 +08:00
yusing	81d96394b9	allow customizing OICD scopes	2025-01-13 08:30:46 +08:00
Yuzerion	51f6391ded	feat: Add optional OIDC support (#39) ... This allows the API to trigger an OAuth workflow to create the JWT for authentication. For now the workflow is triggered by manually visiting `/api/login/oidc` on the frontend app until the UI repo is updated to add support. Co-authored-by: Peter Olds <peter@olds.co>	2025-01-13 04:49:46 +08:00
yusing	6712e9b109	initial prometheus metrics support, simplfied some code	2024-11-06 12:24:12 +08:00
yusing	46b4090629	moved env to .env.example, update setup method	2024-11-02 03:36:55 +08:00