git.iko.soy/typeable/oauth2-proxy
on master help sign in
Add docs and record in CHANGELOG
800a369Karel Pokorny
CHANGELOG.md+1
compare with master
unifiedsplit
@@ -31,6 +31,7 @@
31
31
32## Changes since v3.2.0
32## Changes since v3.2.0
33
33
34+- [#226](https://github.com/pusher/oauth2_proxy/pull/227) Add Keycloak provider (@Ofinka)
34- [#178](https://github.com/pusher/outh2_proxy/pull/178) Add Silence Ping Logging and Exclude Logging Paths flags (@kskewes)
35- [#178](https://github.com/pusher/outh2_proxy/pull/178) Add Silence Ping Logging and Exclude Logging Paths flags (@kskewes)
35- [#209](https://github.com/pusher/outh2_proxy/pull/209) Improve docker build caching of layers (@dekimsey)
36- [#209](https://github.com/pusher/outh2_proxy/pull/209) Improve docker build caching of layers (@dekimsey)
36- [#186](https://github.com/pusher/oauth2_proxy/pull/186) Make config consistent (@JoelSpeed)
37- [#186](https://github.com/pusher/oauth2_proxy/pull/186) Make config consistent (@JoelSpeed)
docs/2_auth.md+15
@@ -15,6 +15,7 @@ Valid providers are :
15- [Azure](#azure-auth-provider)
15- [Azure](#azure-auth-provider)
16- [Facebook](#facebook-auth-provider)
16- [Facebook](#facebook-auth-provider)
17- [GitHub](#github-auth-provider)
17- [GitHub](#github-auth-provider)
18+- [Keycloak](#keycloak-auth-provider)
18- [GitLab](#gitlab-auth-provider)
19- [GitLab](#gitlab-auth-provider)
19- [LinkedIn](#linkedin-auth-provider)
20- [LinkedIn](#linkedin-auth-provider)
20- [login.gov](#logingov-provider)
21- [login.gov](#logingov-provider)
@@ -101,6 +102,20 @@ If you are using GitHub enterprise, make sure you set the following to the appro
101 -redeem-url="http(s)://<enterprise github host>/login/oauth/access_token"
102 -redeem-url="http(s)://<enterprise github host>/login/oauth/access_token"
102 -validate-url="http(s)://<enterprise github host>/api/v3"
103 -validate-url="http(s)://<enterprise github host>/api/v3"
103
104
105+### Keycloak Auth Provider
106+
107+1. Create new client in your Keycloak with **Access Type** 'confidental'.
108+2. Create a mapper with **Mapper Type** 'Group Membership'.
109+
110+Make sure you set the following to the appropriate url:
111+
112+ -provider=keycloak
113+ -client-id=<client you have created>
114+ -client-secret=<your client's secret>
115+ -login-url="http(s)://<keycloak host>/realms/<your realm>/protocol/openid-connect/auth"
116+ -redeem-url="http(s)://<keycloak host>/realms/master/<your realm>/openid-connect/auth/token"
117+ -validate-url="http(s)://<keycloak host>/realms/master/<your realm>/openid-connect/userinfo"
118+
104### GitLab Auth Provider
119### GitLab Auth Provider
105
120
106Whether you are using GitLab.com or self-hosting GitLab, follow [these steps to add an application](http://doc.gitlab.com/ce/integration/oauth_provider.html)
121Whether you are using GitLab.com or self-hosting GitLab, follow [these steps to add an application](http://doc.gitlab.com/ce/integration/oauth_provider.html)