@@ -79,18 +79,18 @@ type Options struct {
7979
8080 // These options allow for other providers besides Google, with
8181 // potential overrides.
82− Provider string `flag:"provider" cfg:"provider" env:"OAUTH2_PROXY_PROVIDER"`
83− OIDCIssuerURL string `flag:"oidc-issuer-url" cfg:"oidc_issuer_url" env:"OAUTH2_PROXY_OIDC_ISSUER_URL"`
84− OIDCAllowUnverifiedEmail bool `flag:"oidc-allow-unverified-email" cfg:"oidc_allow_unverified_email" env:"OAUTH2_PROXY_OIDC_ALLOW_UNVERIFIED_EMAIL"`
85− SkipOIDCDiscovery bool `flag:"skip-oidc-discovery" cfg:"skip_oidc_discovery" env:"OAUTH2_SKIP_OIDC_DISCOVERY"`
86− OIDCJwksURL string `flag:"oidc-jwks-url" cfg:"oidc_jwks_url" env:"OAUTH2_OIDC_JWKS_URL"`
87− LoginURL string `flag:"login-url" cfg:"login_url" env:"OAUTH2_PROXY_LOGIN_URL"`
88− RedeemURL string `flag:"redeem-url" cfg:"redeem_url" env:"OAUTH2_PROXY_REDEEM_URL"`
89− ProfileURL string `flag:"profile-url" cfg:"profile_url" env:"OAUTH2_PROXY_PROFILE_URL"`
90− ProtectedResource string `flag:"resource" cfg:"resource" env:"OAUTH2_PROXY_RESOURCE"`
91− ValidateURL string `flag:"validate-url" cfg:"validate_url" env:"OAUTH2_PROXY_VALIDATE_URL"`
92− Scope string `flag:"scope" cfg:"scope" env:"OAUTH2_PROXY_SCOPE"`
93− ApprovalPrompt string `flag:"approval-prompt" cfg:"approval_prompt" env:"OAUTH2_PROXY_APPROVAL_PROMPT"`
82+ Provider string `flag:"provider" cfg:"provider" env:"OAUTH2_PROXY_PROVIDER"`
83+ OIDCIssuerURL string `flag:"oidc-issuer-url" cfg:"oidc_issuer_url" env:"OAUTH2_PROXY_OIDC_ISSUER_URL"`
84+ InsecureOIDCAllowUnverifiedEmail bool `flag:"insecure-oidc-allow-unverified-email" cfg:"insecure_oidc_allow_unverified_email" env:"OAUTH2_PROXY_INSECURE_OIDC_ALLOW_UNVERIFIED_EMAIL"`
85+ SkipOIDCDiscovery bool `flag:"skip-oidc-discovery" cfg:"skip_oidc_discovery" env:"OAUTH2_SKIP_OIDC_DISCOVERY"`
86+ OIDCJwksURL string `flag:"oidc-jwks-url" cfg:"oidc_jwks_url" env:"OAUTH2_OIDC_JWKS_URL"`
87+ LoginURL string `flag:"login-url" cfg:"login_url" env:"OAUTH2_PROXY_LOGIN_URL"`
88+ RedeemURL string `flag:"redeem-url" cfg:"redeem_url" env:"OAUTH2_PROXY_REDEEM_URL"`
89+ ProfileURL string `flag:"profile-url" cfg:"profile_url" env:"OAUTH2_PROXY_PROFILE_URL"`
90+ ProtectedResource string `flag:"resource" cfg:"resource" env:"OAUTH2_PROXY_RESOURCE"`
91+ ValidateURL string `flag:"validate-url" cfg:"validate_url" env:"OAUTH2_PROXY_VALIDATE_URL"`
92+ Scope string `flag:"scope" cfg:"scope" env:"OAUTH2_PROXY_SCOPE"`
93+ ApprovalPrompt string `flag:"approval-prompt" cfg:"approval_prompt" env:"OAUTH2_PROXY_APPROVAL_PROMPT"`
9494
9595 // Configuration values for logging
9696 LoggingFilename string `flag:"logging-filename" cfg:"logging_filename" env:"OAUTH2_LOGGING_FILENAME"`
@@ -148,29 +148,29 @@ func NewOptions() *Options {
148148 SessionOptions: options.SessionOptions{
149149 Type: "cookie",
150150 },
151− SetXAuthRequest: false,
152− SkipAuthPreflight: false,
153− PassBasicAuth: true,
154− PassUserHeaders: true,
155− PassAccessToken: false,
156− PassHostHeader: true,
157− SetAuthorization: false,
158− PassAuthorization: false,
159− ApprovalPrompt: "force",
160− OIDCAllowUnverifiedEmail: false,
161− SkipOIDCDiscovery: false,
162− LoggingFilename: "",
163− LoggingMaxSize: 100,
164− LoggingMaxAge: 7,
165− LoggingMaxBackups: 0,
166− LoggingLocalTime: true,
167− LoggingCompress: false,
168− StandardLogging: true,
169− StandardLoggingFormat: logger.DefaultStandardLoggingFormat,
170− RequestLogging: true,
171− RequestLoggingFormat: logger.DefaultRequestLoggingFormat,
172− AuthLogging: true,
173− AuthLoggingFormat: logger.DefaultAuthLoggingFormat,
151+ SetXAuthRequest: false,
152+ SkipAuthPreflight: false,
153+ PassBasicAuth: true,
154+ PassUserHeaders: true,
155+ PassAccessToken: false,
156+ PassHostHeader: true,
157+ SetAuthorization: false,
158+ PassAuthorization: false,
159+ ApprovalPrompt: "force",
160+ InsecureOIDCAllowUnverifiedEmail: false,
161+ SkipOIDCDiscovery: false,
162+ LoggingFilename: "",
163+ LoggingMaxSize: 100,
164+ LoggingMaxAge: 7,
165+ LoggingMaxBackups: 0,
166+ LoggingLocalTime: true,
167+ LoggingCompress: false,
168+ StandardLogging: true,
169+ StandardLoggingFormat: logger.DefaultStandardLoggingFormat,
170+ RequestLogging: true,
171+ RequestLoggingFormat: logger.DefaultRequestLoggingFormat,
172+ AuthLogging: true,
173+ AuthLoggingFormat: logger.DefaultAuthLoggingFormat,
174174 }
175175}
176176
@@ -399,7 +399,7 @@ func parseProviderInfo(o *Options, msgs []string) []string {
399399 }
400400 }
401401 case *providers.OIDCProvider:
402− p.AllowUnverifiedEmail = o.OIDCAllowUnverifiedEmail
402+ p.AllowUnverifiedEmail = o.InsecureOIDCAllowUnverifiedEmail
403403 if o.oidcVerifier == nil {
404404 msgs = append(msgs, "oidc provider requires an oidc issuer URL")
405405 } else {