git.iko.soy/typeable/oauth2-proxy
on ea261ca help sign in
all commits
d3e036dAdd force-json-errors flagLuka Zakrajšek e25158dAdd a test for htpasswd-user-groups in the sessionJan Rotter 88f32aerename Upstreams to UpstreamConfig and its Configs member to Upstreams thenFabian Stelzer 12ab4efMake the Upstreams mux configurableFabian Stelzer ae72bebEnable UseEncodedPath() for frontend muxFabian Stelzer 0b4bc36Upgrade go-oidc to v3 (#1264)Nick Meves 273ab1fIntegrate redirect package with OAuth2 ProxyJoel Speed 7eeaea0Support nonce checks in OIDC Provider (#967)Nick Meves 42475c2Multiple providers in alpha config (#947)yanasega c0654e3Remove unused fields from OAuthProxyJoel Speed 8c91adcRewrite OpenRedirect tests in ginkgoJoel Speed f3bd61bUse pagewriter to render robots txt pageJoel Speed 8d2fc40Integrate new server implementation into main OAuth2 ProxyJoel Speed 6ecbc7bAllow users to choose detailed error messages on error pagesJoel Speed 780ae4fMerge pull request from GHSA-4mf2-f3wh-gvf2Nick Meves b541805Use comma separated multiple values for header (#799)Lida Li fa6a785Improve handler vs helper organization in oauthproxy.goNick Meves 73fc770Figure out final app redirect URL with proxy aware request utilsNick Meves 81bf1efAdapt isAjax to support mimetype listsNikolai Prokoschenko 1d74a51Use X-Forwarded-{Proto,Host,Uri} on redirect as last resort (#957)İlteriş Eroğlu 65e15f2Support only allowed_groups querystringNick Meves 44d83e5Use StatusForbidden to prevent infinite redirectsNick Meves 23b2355Allow group authZ in AuthOnly endpoint via QuerystringNick Meves 5b003a5SecretSource.Value should be plain text in memoryJoel Speed e9f7879Standardize provider interface method namesNick Meves 7407fbdAdd more UserInfo test casesNick Meves 2549b72Add User & Groups to UserinfoNick Meves 1b3b004Streamline ErrMissingCode in provider Redeem methodsNick Meves b92fd4bStreamline Google to use default AuthorizeNick Meves eb58ea2Move AllowedGroups to DefaultProvider for default Authorize usageNick Meves 8059a81Integrate new header injectors with OAuth2 ProxyJoel Speed 2b9e1bbAdd EnrichSessionState as main post-Redeem session updaterNick Meves b6061f0Adds tests for redeemCode and enrichSessionNick Meves b7b7adeImprove AllowedRoute test table formattingNick Meves 89a8ac8Add startup logging for skipped auth routesNick Meves cfd3de8Add tests for skip auth functionalityNick Meves 5c62690Rename test directory to testdataMitsuo Heijo 3fa42edFix import path for v7 (#800)Mitsuo Heijo 9d59519Add support to ensure user belongs in required groups when using the OIDC providerStefan Sedich 88ef888Preserve query when building redirect (fix for #695) (#696)Andy Voltz eb23401Integrate sessions middlewaresJoel Speed 5dbcd73Configure OAuth2 Proxy to use new upstreams package and LegacyConfigJoel Speed abeb023Strip X-Forwarded auth headers from whitelisted paths (#624)Nick Meves a09eeccReduce SessionState size better with MessagePack + LZ4 (#632)Nick Meves 64ae31bImplements --trusted-ip option (#552)Isabelle COWAN-BERGMAN 4c10478fix: do not add Cache-Control header to response from auth only endpointMitsuo Heijo 6e1b3b9Switch to in session store initialisationJoel Speed 5ce9e75Initialise Session Storage in NewOAuthProxy instead of validationJoel Speed 6b43b41Fix tests broken by security advisoryJoel Speed ee5662eMerge pull request from GHSA-5m6c-jp6f-2vcvJoel Speed