@@ -38,7 +38,7 @@ An example [oauth2_proxy.cfg]({{ site.gitweb }}/contrib/oauth2_proxy.cfg.example
3838| `-cookie-path` | string | an optional cookie path to force cookies to (ie: `/poc/`) | `"/"` |
3939| `-cookie-refresh` | duration | refresh the cookie after this duration; `0` to disable | |
4040| `-cookie-secret` | string | the seed string for secure cookies (optionally base64 encoded) | |
41−| `-cookie-secure` | bool | set secure (HTTPS) cookie flag | true |
41+| `-cookie-secure` | bool | set [secure (HTTPS only) cookie flag](https://owasp.org/www-community/controls/SecureFlag) | true |
4242| `-cookie-samesite` | string | set SameSite cookie attribute (ie: `"lax"`, `"strict"`, `"none"`, or `""`). | `""` |
4343| `-custom-templates-dir` | string | path to custom html templates | |
4444| `-display-htpasswd-form` | bool | display username / password login form if an htpasswd file is provided | true |
@@ -94,9 +94,9 @@ An example [oauth2_proxy.cfg]({{ site.gitweb }}/contrib/oauth2_proxy.cfg.example
9494| `-request-logging` | bool | Log requests | true |
9595| `-request-logging-format` | string | Template for request log lines | see [Logging Configuration](#logging-configuration) |
9696| `-resource` | string | The resource that is protected (Azure AD only) | |
97−| `-reverse-proxy` | bool | are we running behind a reverse proxy, controls whether headers like X-Real-Ip are accepted | false |
97+| `-reverse-proxy` | bool | are we running behind a reverse proxy, controls whether headers like X-Real-Ip are accepted | false |
9898| `-scope` | string | OAuth scope specification | |
99−| `-session-store-type` | string | Session data storage backend | cookie |
99+| `-session-store-type` | string | [Session data storage backend](sessions); redis or cookie | cookie |
100100| `-set-xauthrequest` | bool | set X-Auth-Request-User and X-Auth-Request-Email response headers (useful in Nginx auth_request mode) | false |
101101| `-set-authorization-header` | bool | set Authorization Bearer response header (useful in Nginx auth_request mode) | false |
102102| `-signature-key` | string | GAP-Signature request signature key (algorithm:secretkey) | |