git.iko.soy/typeable/oauth2-proxy
on master help sign in
Make insecure-oidc-allow-unverified-email configuration usage consistent
commit9823971b7d9e7e5f24a988b488c8a0955dbafaa8 authorDaryl Finlay <djfinlay@users.noreply.github.com> dateThu 11 Jul 2019, 15:58 (7 years ago) parent776d063
2 files changed+2−2
compare with master
unifiedsplit
docs/configuration/configuration.md+1−1 main.go+1−1
docs/configuration/configuration.md+1−1
@@ -63,7 +63,7 @@ Usage of oauth2_proxy:
6363 -jwt-key string: private key in PEM format used to sign JWT, so that you can say something like -jwt-key="${OAUTH2_PROXY_JWT_KEY}": required by login.gov
6464 -jwt-key-file string: path to the private key file in PEM format used to sign the JWT so that you can say something like -jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov
6565 -login-url string: Authentication endpoint
66− -oidc-allow-unverified-email: don't fail if an email address in an id_token is not verified
66+ -insecure-oidc-allow-unverified-email: don't fail if an email address in an id_token is not verified
6767 -oidc-issuer-url: the OpenID Connect issuer URL. ie: "https://accounts.google.com"
6868 -oidc-jwks-url string: OIDC JWKS URI for token verification; required if OIDC discovery is disabled
6969 -pass-access-token: pass OAuth access_token to upstream via X-Forwarded-Access-Token header
main.go+1−1
@@ -104,7 +104,7 @@ func main() {
104104
105105 flagSet.String("provider", "google", "OAuth provider")
106106 flagSet.String("oidc-issuer-url", "", "OpenID Connect issuer URL (ie: https://accounts.google.com)")
107− flagSet.Bool("oidc-allow-unverified-email", false, "Don't fail if an email address in an id_token is not verified")
107+ flagSet.Bool("insecure-oidc-allow-unverified-email", false, "Don't fail if an email address in an id_token is not verified")
108108 flagSet.Bool("skip-oidc-discovery", false, "Skip OIDC discovery and use manually supplied Endpoints")
109109 flagSet.String("oidc-jwks-url", "", "OpenID Connect JWKS URL (ie: https://www.googleapis.com/oauth2/v3/certs)")
110110 flagSet.String("login-url", "", "Authentication endpoint")