git.iko.soy/typeable/oauth2-proxy
on master help sign in
Document bcrypt encryption for htpasswd
e14d6abLennart Jern
CHANGELOG.md+2
compare with master
unifiedsplit
@@ -8,6 +8,8 @@
8
8
9## Changes since v6.1.1
9## Changes since v6.1.1
10
10
11+- [#764](https://github.com/oauth2-proxy/oauth2-proxy/pull/764) Document bcrypt encryption for htpasswd (and hide SHA) (@lentzi90)
12+
11# v6.1.1
13# v6.1.1
12
14
13## Release Highlights
15## Release Highlights
contrib/oauth2-proxy.cfg.example+1−1
@@ -59,7 +59,7 @@
59# authenticated_emails_file = ""
59# authenticated_emails_file = ""
60
60
61## Htpasswd File (optional)
61## Htpasswd File (optional)
62−## Additionally authenticate against a htpasswd file. Entries must be created with "htpasswd -s" for SHA encryption
62+## Additionally authenticate against a htpasswd file. Entries must be created with "htpasswd -B" for bcrypt encryption
63## enabling exposes a username/login signin form
63## enabling exposes a username/login signin form
64# htpasswd_file = ""
64# htpasswd_file = ""
65
65
docs/configuration/configuration.md+1−1
@@ -62,7 +62,7 @@ An example [oauth2-proxy.cfg]({{ site.gitweb }}/contrib/oauth2-proxy.cfg.example
62| `--google-admin-email` | string | the google admin to impersonate for api calls | |
62| `--google-admin-email` | string | the google admin to impersonate for api calls | |
63| `--google-group` | string | restrict logins to members of this google group (may be given multiple times). | |
63| `--google-group` | string | restrict logins to members of this google group (may be given multiple times). | |
64| `--google-service-account-json` | string | the path to the service account json credentials | |
64| `--google-service-account-json` | string | the path to the service account json credentials | |
65−| `--htpasswd-file` | string | additionally authenticate against a htpasswd file. Entries must be created with `htpasswd -s` for SHA encryption | |
65+| `--htpasswd-file` | string | additionally authenticate against a htpasswd file. Entries must be created with `htpasswd -B` for bcrypt encryption | |
66| `--http-address` | string | `[http://]<addr>:<port>` or `unix://<path>` to listen on for HTTP clients | `"127.0.0.1:4180"` |
66| `--http-address` | string | `[http://]<addr>:<port>` or `unix://<path>` to listen on for HTTP clients | `"127.0.0.1:4180"` |
67| `--https-address` | string | `<addr>:<port>` to listen on for HTTPS clients | `":443"` |
67| `--https-address` | string | `<addr>:<port>` to listen on for HTTPS clients | `":443"` |
68| `--logging-compress` | bool | Should rotated log files be compressed using gzip | false |
68| `--logging-compress` | bool | Should rotated log files be compressed using gzip | false |
pkg/apis/options/options.go+1−1
@@ -219,7 +219,7 @@ func NewFlagSet() *pflag.FlagSet {
219 flagSet.String("client-secret", "", "the OAuth Client Secret")
219 flagSet.String("client-secret", "", "the OAuth Client Secret")
220 flagSet.String("client-secret-file", "", "the file with OAuth Client Secret")
220 flagSet.String("client-secret-file", "", "the file with OAuth Client Secret")
221 flagSet.String("authenticated-emails-file", "", "authenticate against emails via file (one per line)")
221 flagSet.String("authenticated-emails-file", "", "authenticate against emails via file (one per line)")
222− flagSet.String("htpasswd-file", "", "additionally authenticate against a htpasswd file. Entries must be created with \"htpasswd -s\" for SHA encryption or \"htpasswd -B\" for bcrypt encryption")
222+ flagSet.String("htpasswd-file", "", "additionally authenticate against a htpasswd file. Entries must be created with \"htpasswd -B\" for bcrypt encryption")
223 flagSet.Bool("display-htpasswd-form", true, "display username / password login form if an htpasswd file is provided")
223 flagSet.Bool("display-htpasswd-form", true, "display username / password login form if an htpasswd file is provided")
224 flagSet.String("custom-templates-dir", "", "path to custom html templates")
224 flagSet.String("custom-templates-dir", "", "path to custom html templates")
225 flagSet.String("banner", "", "custom banner string. Use \"-\" to disable default banner.")
225 flagSet.String("banner", "", "custom banner string. Use \"-\" to disable default banner.")