git.iko.soy/typeable/oauth2-proxy
on v5.1.1 help sign in
history ofoauthproxy.go
all commits
f5f1348Merge pull request from GHSA-j7px-6hwj-hpjgJoel Speed 8d0149cFix issue with group validation called on every request (#435)Erico Fusco 4cd43efSupport the PreferEmailToUser option on PassUserHeadersJordan Crawford d934309Add preferred_username support (OIDC provider) (#420)Felix Fontein 51f4d88Add option to prefer an Email address to a Username (#401)D. Spindel 907de4eUse OAuthProxy.GetRedirect in /sign_in, honoring the 'rd' query parameter (#405)Timo Beckers 0198dd6check for /\ redirectsDavid Stark 17d9961Merge branch 'master' into pgroudas/add-samesite-cookie-optionsJoel Speed 5489d16Merge branch 'master' into kamal/whitelist-redirects-with-portsKamal Nasser 5d0827aAdd configuration for cookie 'SameSite' value.Paul Groudas 90f8117Fix typos in doc strings.Paul Groudas 11205c7Allow to change provider's name (#296)Felix Fontein ca0b837Add redirect capability to sign_out (#314)Moraru Costel 6d74a42Merge branch 'master' into feat/static-upstreamChristian Groschupp 6d1b5fcMerge branch 'master' into kamal/whitelist-redirects-with-portsKamal Nasser 898b6b8remove unnecessary if conditionalKamal Nasser fef940dAdded userinfo endpoint (#300)Konstantine a12bae3update port whitelisting rules, refactor IsValidRedirect testsKamal Nasser ae4e915implicit/explicit redirect port matchingKamal Nasser bfb2250allow redirects to whitelisted hosts with portsKamal Nasser a46ee95Move responceCode out of HandleFunc.Christian Groschupp dc36836Add tests for static upstreamChristian Groschupp 1295f87Add static upstreamChristian Groschupp e64e6faSome code improvementsKirill Motkov a209a52More fully support X-Auth-Request-Redirect header Docs showed that the X-Auth-Request-Redirect header can specify a redirect URI, but only the rd POST parameter was being honored This fixes that.Ian Hunter d5d4878Made setting of proxied headers deterministic based on configuration aloneAdam Eijdenberg fb52bdbFix some typosferhat elmas 7134d22New flag "-ssl-upstream-insecure-skip-validation" (#234)jansinger 4e10cc7Add silence ping logging flag using ExcludePathKarl Skewes 630db37Merge branch 'master' into refactorJoel Speed aa37564Merge branch 'master' into banner-flagHenry Jenkins 924eab6Adds banner flagHenry Jenkins d24aacdFix lint errorsHenry Jenkins bd651dfEnsure groups in JWT Bearer tokens are also validated Fix a minor auth logging bugBrian Van Klaveren 5a50f62Do not infer username from emailBrian Van Klaveren 2f6dcf3Move refreshing code to block acquiring cookied sessionBrian Van Klaveren 58b06ceFall back to using sub if email is none (as in PR #57)Brian Van Klaveren 187960eImprove token pattern matching Unit tests for token discoveryBrian Van Klaveren 8083501Support JWT Bearer Token and Pass throughBrian Van Klaveren 6366690Fix gofmt for changed filesJoel Speed fb96161Move logger to pkg/loggerJoel Speed d1ef14bMove cookie to pkg/encryptionJoel Speed d69560dNo need for case when only 2 conditionsAdam Eijdenberg f35c82bThe AuthOnly path also needs the response headers setAdam Eijdenberg 9e59b4fRestructure so that serving data from upstream is only done when explicity allowed, rather than as implicit dangling elseAdam Eijdenberg 093f9daMove cipher creation to options and away from oauth2_proxy.goJoel Speed 37e31b5Remove dead codeJoel Speed c61f3a1Use SessionStore for session in proxyJoel Speed fbee5eaInitialise SessionStore in OptionsJoel Speed 2ab8a7dMove SessionState to its own packageJoel Speed