e0d915cStop shadowing GetEmailAddress errors in redeemCodeNick Meves6 years ago 3371284Remove GetPreferredUsername method from Provider interfaceNick Meves6 years ago 9d59519Add support to ensure user belongs in required groups when using the OIDC providerStefan Sedich6 years ago 29b2479Use X-Forwarded-Host consistentlyNick Meves6 years ago d69fd6aAllow Logging to stdout with separate Error Log Channel (#718)Phil Taprogge6 years ago e88d29fRefactor SignInMessage out of mainNick Meves6 years ago 4522239Attempt to log still on template errorsNick Meves6 years ago ad52587Document GoSec nosec skip commentsNick Meves6 years ago 2bb0160Streamline error page usageNick Meves6 years ago 65c2283Address gosec findingsNick Meves6 years ago 88ef888Preserve query when building redirect (fix for #695) (#696)Andy Voltz6 years ago eb23401Integrate sessions middlewaresJoel Speed6 years ago 5dbcd73Configure OAuth2 Proxy to use new upstreams package and LegacyConfigJoel Speed6 years ago 2981a5eIntegrate HTPasswdValidator into OAuth2 ProxyJoel Speed6 years ago abeb023Strip X-Forwarded auth headers from whitelisted paths (#624)Nick Meves6 years ago 64ae31bImplements --trusted-ip option (#552)Isabelle COWAN-BERGMAN6 years ago 4c10478fix: do not add Cache-Control header to response from auth only endpointMitsuo Heijo6 years ago 5ce9e75Initialise Session Storage in NewOAuthProxy instead of validationJoel Speed6 years ago ee5662eMerge pull request from GHSA-5m6c-jp6f-2vcvJoel Speed6 years ago 788d8ecVerify main v extra JWT bearers differentlyNick Meves6 years ago dc756b9Don't log invalid redirect if redirect is emptyJoel Speed6 years ago 9bbd6adIntegrate HealthCheck middlewareJoel Speed6 years ago 2c851fcAllow a health/ping request to be identified by User-Agent (#567)Christopher Kohnert6 years ago 0c9795arender error page on 502 proxy status (#574)Amnay6 years ago cce2c68Move RealClientIP code to IP packagesJoel Speed6 years ago 44b27e0Move Options and Validation to packageJoel Speed7 years ago 111d17eImplements --real-client-ip-header option. (#503)Isabelle COWAN-BERGMAN6 years ago 4e3dd09Drop fallback to email when user is empty (#537)Joel Speed6 years ago e642daeSupport context in providers (#519)Mitsuo Heijo7 years ago 0d5fa21Merge pull request from GHSA-j7px-6hwj-hpjgJoel Speed7 years ago c5be09cReplace options loading with viperJoel Speed7 years ago 4587101Rename Cookie Options to remove extra 'Cookie'Joel Speed7 years ago 1961424Feature/configurable userid claim minimal (#499)Jakub Holy7 years ago 4d21b8aMake sure websockets respect ssl-upstream-insecure-skip-verify setting. (#494)yaroslavros7 years ago dd05e7fAdd new linters (#486)Mitsuo Heijo7 years ago a659b95Allow multiple cookie domains to be specified (#412)Eric Dahlseng7 years ago b0b8756Add set basic auth param (#413)Moraru Costel7 years ago 7efc162Prevent browser caching during auth flow (#453)Mitsuo Heijo7 years ago bdc6861Allow html in banner message (#462)Siim Tiilen7 years ago 3f7837bAdd logging in case of invalid redirects (#471)Phil Taprogge7 years ago 802754cMigrate to oauth2-proxy/oauth2-proxyJoel Speed7 years ago 8d0149cFix issue with group validation called on every request (#435)Erico Fusco7 years ago 4cd43efSupport the PreferEmailToUser option on PassUserHeadersJordan Crawford7 years ago d934309Add preferred_username support (OIDC provider) (#420)Felix Fontein7 years ago 51f4d88Add option to prefer an Email address to a Username (#401)D. Spindel7 years ago 907de4eUse OAuthProxy.GetRedirect in /sign_in, honoring the 'rd' query parameter (#405)Timo Beckers7 years ago 0198dd6check for /\ redirectsDavid Stark7 years ago 17d9961Merge branch 'master' into pgroudas/add-samesite-cookie-optionsJoel Speed7 years ago 5489d16Merge branch 'master' into kamal/whitelist-redirects-with-portsKamal Nasser7 years ago 5d0827aAdd configuration for cookie 'SameSite' value.Paul Groudas7 years ago