git.iko.soy/typeable/oauth2-proxy
on master help sign in
Update documentation and changelog
commit0925b88d17527dc11ce1ff57ae29b59ca430d33a authorJoel Speed <Joel.speed@hotmail.co.uk> dateTue 22 Jan 2019, 11:36 (8 years ago) parentcac2c97
2 files changed+7
compare with master
unifiedsplit
CHANGELOG.md+5 README.md+2
CHANGELOG.md+5
@@ -2,6 +2,11 @@
22
33## Changes since v3.0.0
44
5+- [#14](https://github.com/pusher/oauth2_proxy/pull/14) OIDC ID Token, Authorization Headers, Refreshing and Verification (@joelspeed)
6+ - Implement `pass-authorization-header` and `set-authorization-header` flags
7+ - Implement token refreshing in OIDC provider
8+ - Split cookies larger than 4k limit into multiple cookies
9+ - Implement token validation in OIDC provider
510- [#21](https://github.com/pusher/oauth2_proxy/pull/21) Docker Improvement (@yaegashi)
611 - Move Docker base image from debian to alpine
712 - Install ca-certificates in docker image
README.md+2
@@ -212,6 +212,7 @@ Usage of oauth2_proxy:
212212 -https-address string: <addr>:<port> to listen on for HTTPS clients (default ":443")
213213 -login-url string: Authentication endpoint
214214 -pass-access-token: pass OAuth access_token to upstream via X-Forwarded-Access-Token header
215+ -pass-authorization-header: pass OIDC IDToken to upstream via Authorization Bearer header
215216 -pass-basic-auth: pass HTTP Basic Auth, X-Forwarded-User and X-Forwarded-Email information to upstream (default true)
216217 -pass-host-header: pass the request Host Header to upstream (default true)
217218 -pass-user-headers: pass X-Forwarded-User and X-Forwarded-Email information to upstream (default true)
@@ -225,6 +226,7 @@ Usage of oauth2_proxy:
225226 -resource string: The resource that is protected (Azure AD only)
226227 -scope string: OAuth scope specification
227228 -set-xauthrequest: set X-Auth-Request-User and X-Auth-Request-Email response headers (useful in Nginx auth_request mode)
229+ -set-authorization-header: set Authorization Bearer response header (useful in Nginx auth_request mode)
228230 -signature-key string: GAP-Signature request signature key (algorithm:secretkey)
229231 -skip-auth-preflight: will skip authentication for OPTIONS requests
230232 -skip-auth-regex value: bypass authentication for requests path's that match (may be given multiple times)