git.iko.soy/typeable/oauth2-proxy
on 597ffeb help sign in
history ofoauthproxy.go
all commits
1d74a51Use X-Forwarded-{Proto,Host,Uri} on redirect as last resort (#957)İlteriş Eroğlu 753f6c5Add a detailed allowed_groups example to Important NotesNick Meves 65e15f2Support only allowed_groups querystringNick Meves 025056cMove AuthOnly authorize logic to a dedicated methodNick Meves 44d83e5Use StatusForbidden to prevent infinite redirectsNick Meves 23b2355Allow group authZ in AuthOnly endpoint via QuerystringNick Meves 22f60e9Generalize and extend default CreateSessionFromTokenNick Meves 3e9717dDecouple TokenToSession from OIDC & add a generic VerifyFuncNick Meves e9f7879Standardize provider interface method namesNick Meves 2549b72Add User & Groups to UserinfoNick Meves b9661cbReturn 401 Unauthorized if Authorize failsNick Meves f21b3b8Authorize in Redeem callback flowNick Meves 1b3b004Streamline ErrMissingCode in provider Redeem methodsNick Meves eb58ea2Move AllowedGroups to DefaultProvider for default Authorize usageNick Meves e7ac793Replace ValidateGroup with Authorize for ProviderNick Meves cc6532aUse display-htpasswd-form flag (#778)ofir-amir 8059a81Integrate new header injectors with OAuth2 ProxyJoel Speed d9c141aRemove GetUserName method from ProviderNick Meves 2b9e1bbAdd EnrichSessionState as main post-Redeem session updaterNick Meves 0bd8eb3Setup provider.ErrNotImplemented sentinel errorNick Meves add45c3Split session enrichment from code redemptionNick Meves b7b7adeImprove AllowedRoute test table formattingNick Meves 89a8ac8Add startup logging for skipped auth routesNick Meves cfd3de8Add tests for skip auth functionalityNick Meves 183cb12Support HTTP method based allowlistsNick Meves 3fa42edFix import path for v7 (#800)Mitsuo Heijo e0d915cStop shadowing GetEmailAddress errors in redeemCodeNick Meves 3371284Remove GetPreferredUsername method from Provider interfaceNick Meves 9d59519Add support to ensure user belongs in required groups when using the OIDC providerStefan Sedich 29b2479Use X-Forwarded-Host consistentlyNick Meves d69fd6aAllow Logging to stdout with separate Error Log Channel (#718)Phil Taprogge e88d29fRefactor SignInMessage out of mainNick Meves 4522239Attempt to log still on template errorsNick Meves ad52587Document GoSec nosec skip commentsNick Meves 2bb0160Streamline error page usageNick Meves 65c2283Address gosec findingsNick Meves 88ef888Preserve query when building redirect (fix for #695) (#696)Andy Voltz eb23401Integrate sessions middlewaresJoel Speed 5dbcd73Configure OAuth2 Proxy to use new upstreams package and LegacyConfigJoel Speed 2981a5eIntegrate HTPasswdValidator into OAuth2 ProxyJoel Speed abeb023Strip X-Forwarded auth headers from whitelisted paths (#624)Nick Meves 64ae31bImplements --trusted-ip option (#552)Isabelle COWAN-BERGMAN 4c10478fix: do not add Cache-Control header to response from auth only endpointMitsuo Heijo 5ce9e75Initialise Session Storage in NewOAuthProxy instead of validationJoel Speed ee5662eMerge pull request from GHSA-5m6c-jp6f-2vcvJoel Speed 788d8ecVerify main v extra JWT bearers differentlyNick Meves dc756b9Don't log invalid redirect if redirect is emptyJoel Speed 9bbd6adIntegrate HealthCheck middlewareJoel Speed 2c851fcAllow a health/ping request to be identified by User-Agent (#567)Christopher Kohnert 0c9795arender error page on 502 proxy status (#574)Amnay