git.iko.soy/typeable/oauth2-proxy
on f8ddc13 help sign in
all commits
b794248Add allowed_emails option to the auth endpoint query string (#1595)zv0n ce750e9PKCE Support (#1541)Braunson 82710a7Fix other packages that rely on verifiersJoel Speed 979c3e8Move internal OIDC package to providers packageJoel Speed 263a5dfMerge pull request #1286 from instadeepai/allowed_email_domains-on-auth_request-endpointJoel Speed 0791aefIntegrate new provider constructor in mainJoel Speed 25371eaimproved audience handling to support client credentials access tokens without aud claims (#1204)Kevin Schu 2b4c8a9Add the allowed_email_domains and the allowed_groups on the auth_request endpoint + support standard wildcard char for validation with sub-domain and email-domain.Valentin Pichard c1b01b5Fix issue with query string allowed group panic on skip methodsAndy Thompson 2c668a5Let authentication fail when session validation fails (fixes #1396) (#1433)Stephan Aßmus d3e036dAdd force-json-errors flagLuka Zakrajšek e25158dAdd a test for htpasswd-user-groups in the sessionJan Rotter 88f32aerename Upstreams to UpstreamConfig and its Configs member to Upstreams thenFabian Stelzer 12ab4efMake the Upstreams mux configurableFabian Stelzer ae72bebEnable UseEncodedPath() for frontend muxFabian Stelzer 0b4bc36Upgrade go-oidc to v3 (#1264)Nick Meves 273ab1fIntegrate redirect package with OAuth2 ProxyJoel Speed 7eeaea0Support nonce checks in OIDC Provider (#967)Nick Meves 42475c2Multiple providers in alpha config (#947)yanasega c0654e3Remove unused fields from OAuthProxyJoel Speed 8c91adcRewrite OpenRedirect tests in ginkgoJoel Speed f3bd61bUse pagewriter to render robots txt pageJoel Speed 8d2fc40Integrate new server implementation into main OAuth2 ProxyJoel Speed 6ecbc7bAllow users to choose detailed error messages on error pagesJoel Speed 780ae4fMerge pull request from GHSA-4mf2-f3wh-gvf2Nick Meves b541805Use comma separated multiple values for header (#799)Lida Li fa6a785Improve handler vs helper organization in oauthproxy.goNick Meves 73fc770Figure out final app redirect URL with proxy aware request utilsNick Meves 81bf1efAdapt isAjax to support mimetype listsNikolai Prokoschenko 1d74a51Use X-Forwarded-{Proto,Host,Uri} on redirect as last resort (#957)İlteriş Eroğlu 65e15f2Support only allowed_groups querystringNick Meves 44d83e5Use StatusForbidden to prevent infinite redirectsNick Meves 23b2355Allow group authZ in AuthOnly endpoint via QuerystringNick Meves 5b003a5SecretSource.Value should be plain text in memoryJoel Speed e9f7879Standardize provider interface method namesNick Meves 7407fbdAdd more UserInfo test casesNick Meves 2549b72Add User & Groups to UserinfoNick Meves 1b3b004Streamline ErrMissingCode in provider Redeem methodsNick Meves b92fd4bStreamline Google to use default AuthorizeNick Meves eb58ea2Move AllowedGroups to DefaultProvider for default Authorize usageNick Meves 8059a81Integrate new header injectors with OAuth2 ProxyJoel Speed 2b9e1bbAdd EnrichSessionState as main post-Redeem session updaterNick Meves b6061f0Adds tests for redeemCode and enrichSessionNick Meves b7b7adeImprove AllowedRoute test table formattingNick Meves 89a8ac8Add startup logging for skipped auth routesNick Meves cfd3de8Add tests for skip auth functionalityNick Meves 5c62690Rename test directory to testdataMitsuo Heijo 3fa42edFix import path for v7 (#800)Mitsuo Heijo 9d59519Add support to ensure user belongs in required groups when using the OIDC providerStefan Sedich 88ef888Preserve query when building redirect (fix for #695) (#696)Andy Voltz