initial commit

.editorconfig

@@ -0,0 +1,10 @@
+root = true
+
+[*]
+indent_style = space
+insert_final_newline = true
+charset = utf-8
+trim_trailing_whitespace = true
+
+[*.py]
+max_line_length = 120

.github/workflows/ci.yaml

@@ -0,0 +1,62 @@
+name: CI
+
+env:
+  CGO: 0
+
+on:
+  workflow_dispatch:
+  pull_request:
+  push:
+    tags:
+      - 'v*'
+    branches:
+      - main
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    name: Build
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-python@v4
+        with:
+          python-version: '3.10'
+
+      - run: go build
+
+  lint:
+    name: lint
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v3
+      - uses: actions/setup-go@v3
+        with:
+          go-version-file: 'go.mod'
+      - name: golangci-lint
+        uses: golangci/golangci-lint-action@v3
+
+  publish:
+    name: Publish package
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+    needs:
+      - build
+      - lint
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v3
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-go@v3
+        with:
+          go-version-file: 'go.mod'
+      - name: Run GoReleaser
+        uses: goreleaser/goreleaser-action@v4
+        with:
+          version: latest
+          args: release --clean
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/stale.yaml

@@ -0,0 +1,21 @@
+---
+name: 'Close stale issues and PRs'
+on:
+  schedule:
+    - cron: '30 1 * * *'
+
+permissions:
+  issues: write
+  pull-requests: write
+
+jobs:
+  stale:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/stale@v5
+        with:
+          stale-issue-message: 'This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.'
+          days-before-stale: 30
+          days-before-close: 5
+          enable-statistics: true
+          exempt-issue-labels: 'keep'

.gitignore

@@ -0,0 +1,65 @@
+*.iml
+.idea
+
+tests/*
+!tests/docker-compose.yaml
+!tests/Dockerfile
+!tests/.dockerignore
+
+/openvpn-auth-azure-ad
+dist/
+
+### macOS template
+# General
+.DS_Store
+.AppleDouble
+.LSOverride
+
+# Icon must end with two \r
+Icon
+
+# Thumbnails
+._*
+
+# Files that might appear in the root of a volume
+.DocumentRevisions-V100
+.fseventsd
+.Spotlight-V100
+.TemporaryItems
+.Trashes
+.VolumeIcon.icns
+.com.apple.timemachine.donotpresent
+
+# Directories potentially created on remote AFP share
+.AppleDB
+.AppleDesktop
+Network Trash Folder
+Temporary Items
+.apdisk
+
+### Windows template
+# Windows thumbnail cache files
+Thumbs.db
+Thumbs.db:encryptable
+ehthumbs.db
+ehthumbs_vista.db
+
+# Dump file
+*.stackdump
+
+# Folder config file
+[Dd]esktop.ini
+
+# Recycle Bin used on file shares
+$RECYCLE.BIN/
+
+# Windows Installer files
+*.cab
+*.msi
+*.msix
+*.msm
+*.msp
+
+# Windows shortcuts
+*.lnk
+

.goreleaser.yaml

@@ -0,0 +1,8 @@
+builds:
+  - env:
+      - CGO_ENABLED=0
+    goos:
+      - linux
+    goarch:
+      - amd64
+      - arm64

CHANGELOG.md

@@ -0,0 +1,129 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [3.0.0]
+### Changed
+
+- Changed source code language from Python to Go
+- Not longer using OpenVPN management interface. openvpn-auth-azure-ad is not longer a daemon.
+
+### Removed
+
+- Resource Owner Password Credentials grant flow
+
+## [2.1.0]
+
+### Added
+- Support for WebAuth SSO (not supported by Tunnelblick)
+
+### Changed
+
+- Fix ModuleNotFoundError: No module named 'configargparse'
+
+## [2.0.1]
+
+### Added
+
+- Automatic docker build in CI
+
+## [2.0.0]
+
+### Added
+
+- Support management-hold
+- Added `--verify-openvpn-client-id-token-claim`
+- Better handling in reconnection scenarios
+- Better logging
+
+### Changed
+
+- Change `--verify-common-name` to `--verify-openvpn-client`
+- Refactor project to PEP-517 standard
+
+### Removed
+
+## [1.2.0] - 2020-09-20
+
+### Added
+
+- Add validation between client certificate and id_token
+
+### Changed
+
+### Removed
+
+## [1.1.3] - 2020-08-17
+
+### Changed
+
+- Fixed auth_token behavior
+
+## [1.1.2] - 2020-08-17
+
+### Added
+
+- Added reconnect mechanism
+
+## [1.1.1] - 2020-08-16
+
+### Added
+
+- Update documentation
+
+## [1.1.0] - 2020-08-16
+
+### Added
+
+- Multi-Thread support
+- Terminate program if connection to OpenVPN closed.
+
+## [1.0.1] - 2020-08-16
+
+- Fixed release automation
+
+## [1.0.0] - 2020-08-16
+
+- First official release
+
+## [0.0.5] - 2020-08-16
+
+- fixed version
+
+## [0.0.4] - 2020-08-16
+
+- move package into subdir
+
+## [0.0.3] - 2020-08-16
+
+- fixed pip release
+
+## [0.0.2] - 2020-08-16
+
+- add auth-token support
+
+## [0.0.1] - 2020-08-14
+
+- First release
+
+[Unreleased]: https://github.com/jkroepke/openvpn-auth-azure-ad/compare/v3.0.0...HEAD
+[3.0.0]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v3.0.0
+[2.1.0]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v2.1.0
+[2.0.3]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v2.0.3
+[2.0.1]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v2.0.1
+[2.0.0]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v2.0.0
+[1.2.0]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v1.2.0
+[1.1.3]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v1.1.3
+[1.1.2]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v1.1.2
+[1.1.1]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v1.1.1
+[1.1.0]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v1.1.0
+[1.0.1]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v1.0.1
+[1.0.0]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v1.0.0
+[0.0.5]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v0.0.5
+[0.0.4]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v0.0.4
+[0.0.3]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v0.0.3
+[0.0.2]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v0.0.2
+[0.0.1]: https://github.com/jkroepke/openvpn-auth-azure-ad/releases/tag/v0.0.1

LICENSE.txt

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2020 Jan-Otto Kröpke
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

Makefile

@@ -0,0 +1,2 @@
+build:
+	go build -o openvpn-auth-oauth2 .