git.iko.soy/typeable/oauth2-proxy
on master help sign in
Add note on subdomain behaviour
commit81f77a55deeb7969288cd307123072fc83b8a90a authorJoel Speed <Joel.speed@hotmail.co.uk> dateWed 20 Jun 2018, 12:05 (8 years ago) parentbc4d594
2 files changed+4−1
compare with master
unifiedsplit
README.md+3 main.go+1−1
README.md+3
@@ -237,8 +237,11 @@ Usage of oauth2_proxy:
237237 -upstream value: the http url(s) of the upstream endpoint or file:// paths for static files. Routing is based on the path
238238 -validate-url string: Access token validation endpoint
239239 -version: print version string
240+ -whitelist-domain: allowed domains for redirection after authentication. Prefix domain with a . to allow subdomains (eg .example.com)
240241```
241242
243+Note, when using the `whitelist-domain` option, any domain prefixed with a `.` will allow any subdomain of the specified domain as a valid redirect URL.
244+
242245See below for provider specific options
243246
244247### Upstreams Configuration
main.go+1−1
@@ -46,7 +46,7 @@ func main() {
4646 flagSet.Bool("ssl-insecure-skip-verify", false, "skip validation of certificates presented when using HTTPS")
4747
4848 flagSet.Var(&emailDomains, "email-domain", "authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email")
49− flagSet.Var(&whitelistDomains, "whitelist-domain", "allowed domains for redirection after authentication")
49+ flagSet.Var(&whitelistDomains, "whitelist-domain", "allowed domains for redirection after authentication. Prefix domain with a . to allow subdomains (eg .example.com)")
5050 flagSet.String("azure-tenant", "common", "go to a tenant-specific or common (tenant-independent) endpoint.")
5151 flagSet.String("github-org", "", "restrict logins to members of this organisation")
5252 flagSet.String("github-team", "", "restrict logins to members of this team")