generate session secret key randomly each application start,

bump app version 1.0.6
update go.mod
2024-11-15 00:35:57 +00:00 · 2024-11-14 07:26:45 +00:00 · 2024-10-24 18:08:43 +00:00 · 2024-10-23 22:46:43 +00:00 · 2024-10-23 18:58:06 +00:00 · 2024-10-21 19:56:01 +00:00
4 changed files with 21 additions and 28 deletions
--- a/README.md
+++ b/README.md
@@ -30,16 +30,9 @@ ProxmoxAAS LDAP provides a simple API for managing users and groups in a simplif

 1. Download `proxmoxaas-ldap` binary and `template.config.json` file from [releases](https://git.tronnet.net/tronnet/ProxmoxAAS-LDAP/releases)
 2. Rename `template.config.json` to `config.json` and modify:
-    - listenPort: port for PAAS-LDAP to bind and listen on 
    - ldapURL: url to the ldap server ie. `ldap://ldap.domain.net`
-    - startTLS: true if backend LDAP supports StartTLS
-    - basedn: base DN ie. `dc=domain,dc=net`
-    - sessionCookieName: name of the session cookie
-    - sessionCookie: specific cookie properties
-        - path: cookie path
-        - httpOnly: cookie http-only
-        - secure: cookie secure
-        - maxAge: cookie max-age
+    - baseDN: base DN ie. `dc=domain,dc=net`
+    - sessionSecretKey: random value used to randomize cookie values, replace with any sufficiently large random string
 3. Run the binary

 ## Building and Testing from Source
@@ -57,4 +50,4 @@ Building requires the go toolchain. Testing requires the go toolchain, make, and
 1. Clone the repository
 2. Run `go get` to get requirements
 3. Run `make dev-init` to install test requirements including openldap (slapd), ldap-utils, debconf-utils
-4. Run `make test` to run all tests
+4. Run `make tests` to run all tests
--- a/app/app.go
+++ b/app/app.go
@@ -21,7 +21,6 @@ var APIVersion = "1.0.4"

 func Run() {
 	gob.Register(LDAPClient{})
-	gin.SetMode(gin.ReleaseMode)

 	log.Printf("Starting ProxmoxAAS-LDAP version %s\n", APIVersion)

@@ -41,6 +40,7 @@ func Run() {
 	}
 	log.Printf("Generated session secret key of length %d\n", n)

+	gin.SetMode(gin.ReleaseMode)
 	router := gin.Default()
 	store := cookie.NewStore(secretKey)
 	store.Options(sessions.Options{
--- a/go.mod
+++ b/go.mod
@@ -1,27 +1,27 @@
 module proxmoxaas-ldap

-go 1.23.6
+go 1.23.2

 require (
-	github.com/gin-contrib/sessions v1.0.2
+	github.com/gin-contrib/sessions v1.0.1
 	github.com/gin-gonic/gin v1.10.0
-	github.com/go-ldap/ldap/v3 v3.4.10
+	github.com/go-ldap/ldap/v3 v3.4.8
 	github.com/nu7hatch/gouuid v0.0.0-20131221200532-179d4d0c4d8d
 )

 require (
 	github.com/Azure/go-ntlmssp v0.0.0-20221128193559-754e69321358 // indirect
-	github.com/bytedance/sonic v1.12.8 // indirect
-	github.com/bytedance/sonic/loader v0.2.3 // indirect
-	github.com/cloudwego/base64x v0.1.5 // indirect
+	github.com/bytedance/sonic v1.12.4 // indirect
+	github.com/bytedance/sonic/loader v0.2.1 // indirect
+	github.com/cloudwego/base64x v0.1.4 // indirect
 	github.com/cloudwego/iasm v0.2.0 // indirect
-	github.com/gabriel-vasile/mimetype v1.4.8 // indirect
-	github.com/gin-contrib/sse v1.0.0 // indirect
+	github.com/gabriel-vasile/mimetype v1.4.6 // indirect
+	github.com/gin-contrib/sse v0.1.0 // indirect
 	github.com/go-asn1-ber/asn1-ber v1.5.7 // indirect
 	github.com/go-playground/locales v0.14.1 // indirect
 	github.com/go-playground/universal-translator v0.18.1 // indirect
-	github.com/go-playground/validator/v10 v10.24.0 // indirect
-	github.com/goccy/go-json v0.10.5 // indirect
+	github.com/go-playground/validator/v10 v10.22.1 // indirect
+	github.com/goccy/go-json v0.10.3 // indirect
 	github.com/google/go-cmp v0.6.0 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/gorilla/context v1.1.2 // indirect
@@ -37,11 +37,11 @@ require (
 	github.com/pelletier/go-toml/v2 v2.2.3 // indirect
 	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
 	github.com/ugorji/go/codec v1.2.12 // indirect
-	golang.org/x/arch v0.14.0 // indirect
-	golang.org/x/crypto v0.33.0 // indirect
-	golang.org/x/net v0.35.0 // indirect
-	golang.org/x/sys v0.30.0 // indirect
-	golang.org/x/text v0.22.0 // indirect
-	google.golang.org/protobuf v1.36.5 // indirect
+	golang.org/x/arch v0.12.0 // indirect
+	golang.org/x/crypto v0.29.0 // indirect
+	golang.org/x/net v0.31.0 // indirect
+	golang.org/x/sys v0.27.0 // indirect
+	golang.org/x/text v0.20.0 // indirect
+	google.golang.org/protobuf v1.35.1 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
--- a/scripts/Makefile
+++ b/scripts/Makefile
@@ -2,7 +2,7 @@

 prerequisites:
 	@echo "=================== Installing Prerequisites ==================="
-	apt install debconf-utils slapd ldap-utils sudo gettext gnutls-bin
+	apt install debconf-utils slapd ldap-utils sudo gettext
 	git clone https://git.tronnet.net/tronnet/open-ldap-setup
 	cd open-ldap-setup/; bash gencert.sh < ../gencert.conf;
 	rm -rf open-ldap-setup/
Author	SHA1	Message	Date
Arthur Lu	33566572fb	generate session secret key randomly each application start, bump app version 1.0.6	2024-11-15 00:35:57 +00:00
Arthur Lu	7da5c22313	update go.mod	2024-11-14 07:26:45 +00:00
Arthur Lu	bf80945168	rename make testsd target to test	2024-10-24 18:08:43 +00:00
Arthur Lu	e18737c043	cleanup gitignore	2024-10-23 22:46:43 +00:00
Arthur Lu	162eda70b9	fix make PHONY targets	2024-10-23 18:58:06 +00:00
Arthur Lu	0d1dd540c0	update go.mod	2024-10-21 19:56:01 +00:00
Arthur Lu	b8b0504a70	add unit tests for various utility functions, add integration test for LDAPClient, add aiutomatic openldap configuration for testing through make, add make targets for tests improve make targets for build/clean, update README with build and test instructions	2024-10-19 04:16:17 +00:00
Arthur Lu	99242b70a0	add starttls support, add starttls option to config	2024-10-18 04:38:26 +00:00
Arthur Lu	fd84f9a991	Update README.md	2024-10-16 05:03:58 +00:00
Arthur Lu	0689ee46fd	improve ModGroup to perform NOP	2024-10-15 21:34:34 +00:00
Arthur Lu	ca0832a010	update go mod	2024-10-14 22:21:44 +00:00
Arthur Lu	5d41b605b9	add better ldap response error handling	2024-10-14 22:21:10 +00:00
Arthur Lu	03177eb4d9	add mail attribute to user, bump API version to 1.0.3	2024-10-12 22:33:34 +00:00
Arthur Lu	95ad75b20d	go mod tidy	2024-10-10 20:59:01 +00:00
Arthur Lu	8cefdb0b01	update go version and dependencies	2024-10-10 20:57:29 +00:00
Arthur Lu	eacc349cac	fix critical userPassword bug, improve ldap user/group data handling	2024-10-05 00:08:58 +00:00
Arthur Lu	bf0596d385	add memberOf attribute to users, bump version to 1.0.1	2024-07-26 01:25:46 +00:00
Arthur Lu	f11e5ccc31	fix default session cookie max age, disable cgo in build	2024-07-18 20:22:12 +00:00
Arthur Lu	8f8f6bd1e8	add installation instructions to README	2024-07-06 03:11:30 +00:00
Arthur Lu	d41bca141c	add version route	2024-07-06 02:46:10 +00:00
Arthur Lu	05e0c02fe8	rename config.template,json to template.config.json	2024-06-27 02:40:09 +00:00
alu	eea5b8599e	Merge pull request 'Rewrite API in GO' (#1 ) from go-rewrite into main Reviewed-on: #1	2024-06-21 23:33:29 +00:00