git.iko.soy/typeable/oauth2-proxy
on master help sign in
all commits
9a14186chore(goconsts): use proper constants for http methodsJan Larwig bdfde72Merge commit from forkJan Larwig cc0e033Merge commit from forkJan Larwig aff369dMerge commit from forkJan Larwig 0337a95Merge commit from forkJan Larwig a4d8903fix: handle Unix socket RemoteAddr in IP resolution (#3374)H1net 3085309feat: possibility to inject id_token in redirect url during sign out (#3278)Alban Fonrouge e59f7c1feat: allow arbitrary claims from the IDToken and IdentityProvider UserInfo endpoint to be added to the session state (#2685)af su 75ff537fix: backend logout URL call on sign out (#3172) (#3352)Vivek S Sejpal cf5d34arevert: "fix: skip provider button auth only redirect (#3309)" (#3314)Stefan Markmann 9c61c49fix: skip provider button auth only redirect (#3309)Stefan Markmann 0eec65erefactor: ptr.Ptr to ptr.ToJan Larwig 9d70e04feat: migrate all alpha config booleans to pointersJan Larwig 810f629revert: secrets as []byte instead of stringJan Larwig 7c20001introduce mapstructure decoder for yaml parsingtuunit fcf4e79fix: hmacauth dependency licensing issue (#3253)Jan Larwig fcc2db0feat: add allowed_* constraint option to proxy endpoint query string (#2841)Jacob Alberty 343bd61chore(deps): Updated to ginkgo v2 (#2459)Koen van Zuijlen bc022fbAdd possibility to encode the state param as UrlEncodedBase64 (#2312)Jan Brezina 5e8956bImprove the Nginx `auth_request` example (#2278)Charley Wu 48247d3Merge pull request #2283 from kvanzuijlen/golintJoel Speed 601477aFeature: Allowing relative redirect url though an option (#2183)axel7083 e13a504Updated linterskvanzuijlen 7fe6384Fix Linting Errors (#1835)Andrew Hamade 965fab4Add API route config (#1760)Segfault16 f537548Support negating for skip auth routesIan Serpa 52cf162added tests for basic auth alert message featureAlexandru Ciobanu 743c344Change error type for redirect parsing errors (#1649)Nik Skoufis b794248Add allowed_emails option to the auth endpoint query string (#1595)zv0n ce750e9PKCE Support (#1541)Braunson 82710a7Fix other packages that rely on verifiersJoel Speed 979c3e8Move internal OIDC package to providers packageJoel Speed 263a5dfMerge pull request #1286 from instadeepai/allowed_email_domains-on-auth_request-endpointJoel Speed 0791aefIntegrate new provider constructor in mainJoel Speed 25371eaimproved audience handling to support client credentials access tokens without aud claims (#1204)Kevin Schu 2b4c8a9Add the allowed_email_domains and the allowed_groups on the auth_request endpoint + support standard wildcard char for validation with sub-domain and email-domain.Valentin Pichard c1b01b5Fix issue with query string allowed group panic on skip methodsAndy Thompson 2c668a5Let authentication fail when session validation fails (fixes #1396) (#1433)Stephan Aßmus d3e036dAdd force-json-errors flagLuka Zakrajšek e25158dAdd a test for htpasswd-user-groups in the sessionJan Rotter 88f32aerename Upstreams to UpstreamConfig and its Configs member to Upstreams thenFabian Stelzer 12ab4efMake the Upstreams mux configurableFabian Stelzer ae72bebEnable UseEncodedPath() for frontend muxFabian Stelzer 0b4bc36Upgrade go-oidc to v3 (#1264)Nick Meves 273ab1fIntegrate redirect package with OAuth2 ProxyJoel Speed 7eeaea0Support nonce checks in OIDC Provider (#967)Nick Meves 42475c2Multiple providers in alpha config (#947)yanasega c0654e3Remove unused fields from OAuthProxyJoel Speed 8c91adcRewrite OpenRedirect tests in ginkgoJoel Speed f3bd61bUse pagewriter to render robots txt pageJoel Speed