4 Commits

Author	SHA1	Message	Date
Matthias Penner	a393ea3ca0	pkg/cookies: use 'Max-Age' instead of 'Expires' for cookie expiration	2025-02-24 11:14:51 +01:00
Koen van Zuijlen	343bd61ebb	chore(deps): Updated to ginkgo v2 (#2459) ... * chore(deps): Updated to ginkgo v2 * fix basic auth test suite cleanup * fix redis store tests * add changelog entry --------- Co-authored-by: Jan Larwig <jan@larwig.com>	2024-07-18 22:41:02 +02:00
t-katsumura	d107d885e4	Session-Cookie Support (#1713) ... * Create session cookie when cookie-expire set 0 * Fix format * add test * fix lint error * fix test code * fix conflicted test case * update test case of cookie expiration * update tests of csrf cookies * update docs * Update docs/docs/configuration/overview.md Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk> --------- Co-authored-by: tanuki884 <morkazuk@fsi.co.jp> Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>	2023-08-16 12:23:02 +01:00
Nick Meves	7eeaea0b3f	Support nonce checks in OIDC Provider (#967) ... * Set and verify a nonce with OIDC * Create a CSRF object to manage nonces & cookies * Add missing generic cookie unit tests * Add config flag to control OIDC SkipNonce * Send hashed nonces in authentication requests * Encrypt the CSRF cookie * Add clarity to naming & add more helper methods * Make CSRF an interface and keep underlying nonces private * Add ReverseProxy scope to cookie tests * Align to new 1.16 SameSite cookie default * Perform SecretBytes conversion on CSRF cookie crypto * Make state encoding signatures consistent * Mock time in CSRF struct via Clock * Improve InsecureSkipNonce docstring	2021-04-21 10:33:27 +01:00