6b43b41Fix tests broken by security advisoryJoel Speed6 years ago ee5662eMerge pull request from GHSA-5m6c-jp6f-2vcvJoel Speed6 years ago c2c1caaSet User = Subject in ExtraJWTBearer sessionsNick Meves6 years ago f7b28cbImprovements to Session State code (#536)Joel Speed6 years ago 276d1c6Always encrypt sessions regardless of configurationTimo Beckers7 years ago 44b27e0Move Options and Validation to packageJoel Speed7 years ago 7e5c8bbFix secretBytes adding unintended padding (#556)Nick Meves6 years ago 4e3dd09Drop fallback to email when user is empty (#537)Joel Speed6 years ago e642daeSupport context in providers (#519)Mitsuo Heijo6 years ago 0d5fa21Merge pull request from GHSA-j7px-6hwj-hpjgJoel Speed6 years ago e49f854Rename Session Options to improve structureJoel Speed7 years ago 4587101Rename Cookie Options to remove extra 'Cookie'Joel Speed7 years ago dd05e7fAdd new linters (#486)Mitsuo Heijo7 years ago a659b95Allow multiple cookie domains to be specified (#412)Eric Dahlseng7 years ago b0b8756Add set basic auth param (#413)Moraru Costel7 years ago 7efc162Prevent browser caching during auth flow (#453)Mitsuo Heijo7 years ago 802754cMigrate to oauth2-proxy/oauth2-proxyJoel Speed7 years ago 8d0149cFix issue with group validation called on every request (#435)Erico Fusco7 years ago 4cd43efSupport the PreferEmailToUser option on PassUserHeadersJordan Crawford7 years ago 51f4d88Add option to prefer an Email address to a Username (#401)D. Spindel7 years ago 5489d16Merge branch 'master' into kamal/whitelist-redirects-with-portsKamal Nasser7 years ago 6d74a42Merge branch 'master' into feat/static-upstreamChristian Groschupp7 years ago 6d1b5fcMerge branch 'master' into kamal/whitelist-redirects-with-portsKamal Nasser7 years ago fef940dAdded userinfo endpoint (#300)Konstantine7 years ago a12bae3update port whitelisting rules, refactor IsValidRedirect testsKamal Nasser7 years ago ae4e915implicit/explicit redirect port matchingKamal Nasser7 years ago bfb2250allow redirects to whitelisted hosts with portsKamal Nasser7 years ago 3d17159replace getRootEndpoint by getEndpointWithCookieChristian Groschupp7 years ago dc36836Add tests for static upstreamChristian Groschupp7 years ago 7134d22New flag "-ssl-upstream-insecure-skip-validation" (#234)jansinger7 years ago 630db37Merge branch 'master' into refactorJoel Speed7 years ago d24aacdFix lint errorsHenry Jenkins7 years ago 3881955Update unit tests for ValidateGroupBrian Van Klaveren7 years ago 058ffd1Update unit tests for usernameBrian Van Klaveren7 years ago 54d91c6Use logger instead of logBrian Van Klaveren7 years ago 10f65e0Add a more realistic test for JWT passthroughBrian Van Klaveren7 years ago 1ff74d3Fix importsBrian Van Klaveren7 years ago 69cb34aAdd unit tests for JWT -> session translationBrian Van Klaveren7 years ago 187960eImprove token pattern matching Unit tests for token discoveryBrian Van Klaveren7 years ago 6366690Fix gofmt for changed filesJoel Speed7 years ago fb96161Move logger to pkg/loggerJoel Speed7 years ago 093f9daMove cipher creation to options and away from oauth2_proxy.goJoel Speed7 years ago 37e31b5Remove dead codeJoel Speed7 years ago c61f3a1Use SessionStore for session in proxyJoel Speed7 years ago 2ab8a7dMove SessionState to its own packageJoel Speed7 years ago 39d2f28Add comment; update changelogPhil Taprogge7 years ago 15f48fbDon't infer username from email local part if username not setPhil Taprogge7 years ago 8ec025fAuth and standard logging with file rollingMisterWil8 years ago f715c93Fixes deletion of splitted cookies - Issue #69 (#70)einfachchr8 years ago c7193b4Merge websocket proxy feature from openshift/oauth-proxy. Original author: Hiram Chirino <hiram@hiramchirino.com>Adam Szalkowski8 years ago