git.iko.soy/typeable/oauth2-proxy
on 597ffeb help sign in
all commits
1d74a51Use X-Forwarded-{Proto,Host,Uri} on redirect as last resort (#957)İlteriş Eroğlu 65e15f2Support only allowed_groups querystringNick Meves 44d83e5Use StatusForbidden to prevent infinite redirectsNick Meves 23b2355Allow group authZ in AuthOnly endpoint via QuerystringNick Meves 5b003a5SecretSource.Value should be plain text in memoryJoel Speed e9f7879Standardize provider interface method namesNick Meves 7407fbdAdd more UserInfo test casesNick Meves 2549b72Add User & Groups to UserinfoNick Meves 1b3b004Streamline ErrMissingCode in provider Redeem methodsNick Meves b92fd4bStreamline Google to use default AuthorizeNick Meves eb58ea2Move AllowedGroups to DefaultProvider for default Authorize usageNick Meves 8059a81Integrate new header injectors with OAuth2 ProxyJoel Speed 2b9e1bbAdd EnrichSessionState as main post-Redeem session updaterNick Meves b6061f0Adds tests for redeemCode and enrichSessionNick Meves b7b7adeImprove AllowedRoute test table formattingNick Meves 89a8ac8Add startup logging for skipped auth routesNick Meves cfd3de8Add tests for skip auth functionalityNick Meves 5c62690Rename test directory to testdataMitsuo Heijo 3fa42edFix import path for v7 (#800)Mitsuo Heijo 9d59519Add support to ensure user belongs in required groups when using the OIDC providerStefan Sedich 88ef888Preserve query when building redirect (fix for #695) (#696)Andy Voltz eb23401Integrate sessions middlewaresJoel Speed 5dbcd73Configure OAuth2 Proxy to use new upstreams package and LegacyConfigJoel Speed abeb023Strip X-Forwarded auth headers from whitelisted paths (#624)Nick Meves a09eeccReduce SessionState size better with MessagePack + LZ4 (#632)Nick Meves 64ae31bImplements --trusted-ip option (#552)Isabelle COWAN-BERGMAN 4c10478fix: do not add Cache-Control header to response from auth only endpointMitsuo Heijo 6e1b3b9Switch to in session store initialisationJoel Speed 5ce9e75Initialise Session Storage in NewOAuthProxy instead of validationJoel Speed 6b43b41Fix tests broken by security advisoryJoel Speed ee5662eMerge pull request from GHSA-5m6c-jp6f-2vcvJoel Speed c2c1caaSet User = Subject in ExtraJWTBearer sessionsNick Meves f7b28cbImprovements to Session State code (#536)Joel Speed 276d1c6Always encrypt sessions regardless of configurationTimo Beckers 44b27e0Move Options and Validation to packageJoel Speed 7e5c8bbFix secretBytes adding unintended padding (#556)Nick Meves 4e3dd09Drop fallback to email when user is empty (#537)Joel Speed e642daeSupport context in providers (#519)Mitsuo Heijo 0d5fa21Merge pull request from GHSA-j7px-6hwj-hpjgJoel Speed e49f854Rename Session Options to improve structureJoel Speed 4587101Rename Cookie Options to remove extra 'Cookie'Joel Speed dd05e7fAdd new linters (#486)Mitsuo Heijo a659b95Allow multiple cookie domains to be specified (#412)Eric Dahlseng b0b8756Add set basic auth param (#413)Moraru Costel 7efc162Prevent browser caching during auth flow (#453)Mitsuo Heijo 802754cMigrate to oauth2-proxy/oauth2-proxyJoel Speed 8d0149cFix issue with group validation called on every request (#435)Erico Fusco 4cd43efSupport the PreferEmailToUser option on PassUserHeadersJordan Crawford 51f4d88Add option to prefer an Email address to a Username (#401)D. Spindel 5489d16Merge branch 'master' into kamal/whitelist-redirects-with-portsKamal Nasser