@@ -1,5 +1,5 @@
1−## Google Auth Proxy Config File
2−## https://github.com/bitly/google_auth_proxy
1+## OAuth2 Proxy Config File
2+## https://github.com/bitly/oauth2_proxy
33
44## <addr>:<port> to listen on for HTTP clients
55# http_address = "127.0.0.1:4180"
@@ -22,16 +22,18 @@
2222## when disabled the upstream Host is used as the Host Header
2323# pass_host_header = true
2424
25−## Google Apps Domains to allow authentication for
25+## Email Domains to allow authentication for (this whitelists any email on this domain)
2626# google_apps_domains = [
2727# "yourcompany.com"
2828# ]
2929
30−
31−## The Google OAuth Client ID, Secret
30+## The OAuth Client ID, Secret
3231# client_id = "123456.apps.googleusercontent.com"
3332# client_secret = ""
3433
34+## Pass OAuth Access token to upstream via "X-Forwarded-Access-Token"
35+# pass_access_token = false
36+
3537## Authenticated Email Addresses File (one email per line)
3638# authenticated_emails_file = ""
3739
@@ -44,19 +46,20 @@
4446## optional directory with custom sign_in.html and error.html
4547# custom_templates_dir = ""
4648
47−
4849## Cookie Settings
4950## Secret - the seed string for secure cookies; should be 16, 24, or 32 bytes
50−## for use with an AES cipher when cookie_refresh or pass_access_code
51+## for use with an AES cipher when cookie_refresh or pass_access_token
5152## is set
52−## Domain - optional cookie domain to force cookies to (ie: .yourcompany.com)
53−## Expire - expire timeframe for cookie
54−## Refresh - refresh the cookie when less than this much time remains before
55−## expiration; should be less than cookie_expire; set to 0 to disable
53+## Domain - (optional) cookie domain to force cookies to (ie: .yourcompany.com)
54+## Expire - (duration) expire timeframe for cookie
55+## Refresh - (duration) refresh the cookie when less than this much time remains before
56+## expiration; should be less than cookie_expire; set to 0 to disable.
57+## Refresh revalidated the OAuth token to ensure it is still valid. ie: 24h
58+## Secure - secure cookies are only sent by the browser of a HTTPS connection (recommended)
59+## HttpOnly - httponly cookies are not readable by javascript (recommended)
5660# cookie_secret = ""
5761# cookie_domain = ""
5862# cookie_expire = "168h"
59−# cookie_refresh = "144h"
63+# cookie_refresh = ""
6064# cookie_secure = true
6165# cookie_httponly = true
62−# pass_access_code = true