From 1c1d613ea061dabad6e9baf643a74ab2a7175ce9 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Fri, 1 Dec 2023 11:01:23 +0000 Subject: [PATCH] Update documentation based on 5e30a6fe948fc470108d9e522fe00ea656c94785 --- 404.html | 4 ++-- assets/js/{452b66d6.7b319d26.js => 452b66d6.77359900.js} | 2 +- assets/js/{a916fa41.46b7f38e.js => a916fa41.1fb2b992.js} | 2 +- assets/js/{d4a2a59c.76e984ff.js => d4a2a59c.52319358.js} | 2 +- .../{runtime~main.770b5b36.js => runtime~main.524ad67e.js} | 2 +- docs/6.1.x/behaviour/index.html | 4 ++-- docs/6.1.x/community/security/index.html | 4 ++-- docs/6.1.x/configuration/oauth_provider/index.html | 4 ++-- docs/6.1.x/configuration/overview/index.html | 4 ++-- docs/6.1.x/configuration/session_storage/index.html | 4 ++-- docs/6.1.x/configuration/tls/index.html | 4 ++-- docs/6.1.x/features/endpoints/index.html | 4 ++-- docs/6.1.x/features/request_signatures/index.html | 4 ++-- docs/6.1.x/index.html | 4 ++-- docs/6.1.x/search-index.json | 2 +- docs/7.0.x/behaviour/index.html | 4 ++-- docs/7.0.x/community/security/index.html | 4 ++-- docs/7.0.x/configuration/alpha-config/index.html | 4 ++-- docs/7.0.x/configuration/oauth_provider/index.html | 4 ++-- docs/7.0.x/configuration/overview/index.html | 4 ++-- docs/7.0.x/configuration/session_storage/index.html | 4 ++-- docs/7.0.x/configuration/tls/index.html | 4 ++-- docs/7.0.x/features/endpoints/index.html | 4 ++-- docs/7.0.x/features/request_signatures/index.html | 4 ++-- docs/7.0.x/index.html | 4 ++-- docs/7.0.x/search-index.json | 2 +- docs/7.1.x/behaviour/index.html | 4 ++-- docs/7.1.x/community/security/index.html | 4 ++-- docs/7.1.x/configuration/alpha-config/index.html | 4 ++-- docs/7.1.x/configuration/oauth_provider/index.html | 4 ++-- docs/7.1.x/configuration/overview/index.html | 4 ++-- docs/7.1.x/configuration/session_storage/index.html | 4 ++-- docs/7.1.x/configuration/tls/index.html | 4 ++-- docs/7.1.x/features/endpoints/index.html | 4 ++-- docs/7.1.x/index.html | 4 ++-- docs/7.2.x/behaviour/index.html | 4 ++-- docs/7.2.x/community/security/index.html | 4 ++-- docs/7.2.x/configuration/alpha-config/index.html | 4 ++-- docs/7.2.x/configuration/oauth_provider/index.html | 4 ++-- docs/7.2.x/configuration/overview/index.html | 4 ++-- docs/7.2.x/configuration/session_storage/index.html | 4 ++-- docs/7.2.x/configuration/tls/index.html | 4 ++-- docs/7.2.x/features/endpoints/index.html | 4 ++-- docs/7.2.x/index.html | 4 ++-- docs/7.2.x/search-index.json | 2 +- docs/7.3.x/behaviour/index.html | 4 ++-- docs/7.3.x/community/security/index.html | 4 ++-- docs/7.3.x/configuration/alpha-config/index.html | 4 ++-- docs/7.3.x/configuration/oauth_provider/index.html | 4 ++-- docs/7.3.x/configuration/overview/index.html | 4 ++-- docs/7.3.x/configuration/session_storage/index.html | 4 ++-- docs/7.3.x/configuration/tls/index.html | 4 ++-- docs/7.3.x/features/endpoints/index.html | 6 +++--- docs/7.3.x/index.html | 4 ++-- docs/7.3.x/search-index.json | 2 +- docs/7.4.x/behaviour/index.html | 4 ++-- docs/7.4.x/community/security/index.html | 4 ++-- docs/7.4.x/configuration/alpha-config/index.html | 4 ++-- docs/7.4.x/configuration/oauth_provider/index.html | 4 ++-- docs/7.4.x/configuration/overview/index.html | 4 ++-- docs/7.4.x/configuration/session_storage/index.html | 4 ++-- docs/7.4.x/configuration/tls/index.html | 4 ++-- docs/7.4.x/features/endpoints/index.html | 6 +++--- docs/7.4.x/index.html | 4 ++-- docs/7.4.x/search-index.json | 2 +- docs/behaviour/index.html | 4 ++-- docs/community/contribution/index.html | 4 ++-- docs/community/security/index.html | 4 ++-- docs/configuration/alpha-config/index.html | 4 ++-- docs/configuration/oauth_provider/index.html | 4 ++-- docs/configuration/overview/index.html | 4 ++-- docs/configuration/session_storage/index.html | 4 ++-- docs/configuration/tls/index.html | 4 ++-- docs/features/endpoints/index.html | 6 +++--- docs/index.html | 4 ++-- docs/next/behaviour/index.html | 4 ++-- docs/next/community/contribution/index.html | 4 ++-- docs/next/community/security/index.html | 4 ++-- docs/next/configuration/alpha-config/index.html | 4 ++-- docs/next/configuration/overview/index.html | 4 ++-- docs/next/configuration/providers/adfs/index.html | 4 ++-- docs/next/configuration/providers/azure/index.html | 4 ++-- docs/next/configuration/providers/azure_ad/index.html | 4 ++-- docs/next/configuration/providers/bitbucket/index.html | 4 ++-- docs/next/configuration/providers/digitalocean/index.html | 4 ++-- docs/next/configuration/providers/facebook/index.html | 4 ++-- docs/next/configuration/providers/gitea/index.html | 4 ++-- docs/next/configuration/providers/github/index.html | 4 ++-- docs/next/configuration/providers/gitlab/index.html | 4 ++-- docs/next/configuration/providers/google/index.html | 4 ++-- docs/next/configuration/providers/index.html | 4 ++-- docs/next/configuration/providers/keycloak/index.html | 4 ++-- docs/next/configuration/providers/keycloak_oidc/index.html | 4 ++-- docs/next/configuration/providers/linkedin/index.html | 4 ++-- docs/next/configuration/providers/login_gov/index.html | 4 ++-- docs/next/configuration/providers/nextcloud/index.html | 4 ++-- docs/next/configuration/providers/openid_connect/index.html | 4 ++-- docs/next/configuration/session_storage/index.html | 4 ++-- docs/next/configuration/tls/index.html | 4 ++-- docs/next/features/endpoints/index.html | 4 ++-- docs/next/index.html | 4 ++-- docs/next/search-index.json | 2 +- index.html | 4 ++-- search-index.json | 2 +- search/index.html | 4 ++-- 105 files changed, 202 insertions(+), 202 deletions(-) rename assets/js/{452b66d6.7b319d26.js => 452b66d6.77359900.js} (93%) rename assets/js/{a916fa41.46b7f38e.js => a916fa41.1fb2b992.js} (93%) rename assets/js/{d4a2a59c.76e984ff.js => d4a2a59c.52319358.js} (93%) rename assets/js/{runtime~main.770b5b36.js => runtime~main.524ad67e.js} (97%) diff --git a/404.html b/404.html index 26aedc22..698c5269 100644 --- a/404.html +++ b/404.html @@ -4,13 +4,13 @@ Page Not Found | OAuth2 Proxy - +
Skip to main content

Page Not Found

We could not find what you were looking for.

Please contact the owner of the site that linked you to the original URL and let them know their link is broken.

- + \ No newline at end of file diff --git a/assets/js/452b66d6.7b319d26.js b/assets/js/452b66d6.77359900.js similarity index 93% rename from assets/js/452b66d6.7b319d26.js rename to assets/js/452b66d6.77359900.js index 1781b056..6cfdb955 100644 --- a/assets/js/452b66d6.7b319d26.js +++ b/assets/js/452b66d6.77359900.js @@ -1 +1 @@ -"use strict";(self.webpackChunkdocusaurus=self.webpackChunkdocusaurus||[]).push([[5626],{3905:function(e,t,n){n.d(t,{Zo:function(){return p},kt:function(){return m}});var r=n(7294);function o(e,t,n){return t in e?Object.defineProperty(e,t,{value:n,enumerable:!0,configurable:!0,writable:!0}):e[t]=n,e}function i(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var r=Object.getOwnPropertySymbols(e);t&&(r=r.filter((function(t){return Object.getOwnPropertyDescriptor(e,t).enumerable}))),n.push.apply(n,r)}return n}function a(e){for(var t=1;t=0||(o[n]=e[n]);return o}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(o[n]=e[n])}return o}var l=r.createContext({}),u=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):a(a({},t),e)),n},p=function(e){var t=u(e.components);return r.createElement(l.Provider,{value:t},e.children)},c="mdxType",d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var n=e.components,o=e.mdxType,i=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),c=u(n),h=o,m=c["".concat(l,".").concat(h)]||c[h]||d[h]||i;return n?r.createElement(m,a(a({ref:t},p),{},{components:n})):r.createElement(m,a({ref:t},p))}));function m(e,t){var n=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var i=n.length,a=new Array(i);a[0]=h;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s[c]="string"==typeof e?e:o,a[1]=s;for(var u=2;u=0||(o[n]=e[n]);return o}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(o[n]=e[n])}return o}var l=r.createContext({}),u=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):a(a({},t),e)),n},p=function(e){var t=u(e.components);return r.createElement(l.Provider,{value:t},e.children)},c="mdxType",d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var n=e.components,o=e.mdxType,i=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),c=u(n),h=o,m=c["".concat(l,".").concat(h)]||c[h]||d[h]||i;return n?r.createElement(m,a(a({ref:t},p),{},{components:n})):r.createElement(m,a({ref:t},p))}));function m(e,t){var n=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var i=n.length,a=new Array(i);a[0]=h;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s[c]="string"==typeof e?e:o,a[1]=s;for(var u=2;u=0||(o[n]=e[n]);return o}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(o[n]=e[n])}return o}var l=r.createContext({}),u=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):a(a({},t),e)),n},p=function(e){var t=u(e.components);return r.createElement(l.Provider,{value:t},e.children)},d="mdxType",c={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var n=e.components,o=e.mdxType,i=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),d=u(n),h=o,m=d["".concat(l,".").concat(h)]||d[h]||c[h]||i;return n?r.createElement(m,a(a({ref:t},p),{},{components:n})):r.createElement(m,a({ref:t},p))}));function m(e,t){var n=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var i=n.length,a=new Array(i);a[0]=h;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s[d]="string"==typeof e?e:o,a[1]=s;for(var u=2;u=0||(o[n]=e[n]);return o}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(o[n]=e[n])}return o}var l=r.createContext({}),u=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):a(a({},t),e)),n},p=function(e){var t=u(e.components);return r.createElement(l.Provider,{value:t},e.children)},d="mdxType",c={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var n=e.components,o=e.mdxType,i=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),d=u(n),h=o,m=d["".concat(l,".").concat(h)]||d[h]||c[h]||i;return n?r.createElement(m,a(a({ref:t},p),{},{components:n})):r.createElement(m,a({ref:t},p))}));function m(e,t){var n=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var i=n.length,a=new Array(i);a[0]=h;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s[d]="string"==typeof e?e:o,a[1]=s;for(var u=2;u=0||(o[n]=e[n]);return o}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(o[n]=e[n])}return o}var l=r.createContext({}),u=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):a(a({},t),e)),n},p=function(e){var t=u(e.components);return r.createElement(l.Provider,{value:t},e.children)},c="mdxType",d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var n=e.components,o=e.mdxType,i=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),c=u(n),h=o,m=c["".concat(l,".").concat(h)]||c[h]||d[h]||i;return n?r.createElement(m,a(a({ref:t},p),{},{components:n})):r.createElement(m,a({ref:t},p))}));function m(e,t){var n=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var i=n.length,a=new Array(i);a[0]=h;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s[c]="string"==typeof e?e:o,a[1]=s;for(var u=2;u=0||(o[n]=e[n]);return o}(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(r=0;r=0||Object.prototype.propertyIsEnumerable.call(e,n)&&(o[n]=e[n])}return o}var l=r.createContext({}),u=function(e){var t=r.useContext(l),n=t;return e&&(n="function"==typeof e?e(t):a(a({},t),e)),n},p=function(e){var t=u(e.components);return r.createElement(l.Provider,{value:t},e.children)},c="mdxType",d={inlineCode:"code",wrapper:function(e){var t=e.children;return r.createElement(r.Fragment,{},t)}},h=r.forwardRef((function(e,t){var n=e.components,o=e.mdxType,i=e.originalType,l=e.parentName,p=s(e,["components","mdxType","originalType","parentName"]),c=u(n),h=o,m=c["".concat(l,".").concat(h)]||c[h]||d[h]||i;return n?r.createElement(m,a(a({ref:t},p),{},{components:n})):r.createElement(m,a({ref:t},p))}));function m(e,t){var n=arguments,o=t&&t.mdxType;if("string"==typeof e||o){var i=n.length,a=new Array(i);a[0]=h;var s={};for(var l in t)hasOwnProperty.call(t,l)&&(s[l]=t[l]);s.originalType=e,s[c]="string"==typeof e?e:o,a[1]=s;for(var u=2;u=d)&&Object.keys(n.O).every((function(e){return n.O[e](c[r])}))?c.splice(r--,1):(t=!1,d0&&e[u-1][2]>d;u--)e[u]=e[u-1];e[u]=[c,a,d]},n.n=function(e){var f=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(f,{a:f}),f},c=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__},n.t=function(e,a){if(1&a&&(e=this(e)),8&a)return e;if("object"==typeof e&&e){if(4&a&&e.__esModule)return e;if(16&a&&"function"==typeof e.then)return e}var d=Object.create(null);n.r(d);var b={};f=f||[null,c({}),c([]),c(c)];for(var t=2&a&&e;"object"==typeof t&&!~f.indexOf(t);t=c(t))Object.getOwnPropertyNames(t).forEach((function(f){b[f]=function(){return e[f]}}));return b.default=function(){return e},n.d(d,b),d},n.d=function(e,f){for(var c in f)n.o(f,c)&&!n.o(e,c)&&Object.defineProperty(e,c,{enumerable:!0,get:f[c]})},n.f={},n.e=function(e){return Promise.all(Object.keys(n.f).reduce((function(f,c){return n.f[c](e,f),f}),[]))},n.u=function(e){return"assets/js/"+({53:"935f2afb",74:"4ae90ba0",91:"7d2b4f21",268:"9c6b37b9",406:"eaf53e39",507:"8f68f251",672:"5d715295",707:"76aee1e9",811:"e8c74efb",1124:"4a343286",1169:"a68195a4",1351:"7dcecc8d",1365:"b9702c11",1487:"adcdd4d2",1558:"efec474a",1629:"1a6ad94f",1898:"1999cd7b",2098:"92147208",2114:"6f497b56",2158:"35234f08",2260:"d4a2a59c",2423:"e7cb9657",2439:"cd4a49c1",2506:"03a491a5",2575:"ceef21a3",2593:"300a9996",2598:"5a047177",2599:"2f5003f6",2608:"9ac82b89",2822:"94285305",2844:"f3976560",2871:"a37c03cb",2960:"d319f4c2",3005:"ab02279c",3085:"1f391b9e",3217:"3b8c55ea",3290:"8bde3748",3291:"230aeb34",3358:"be200c4b",3782:"a1bbfb14",3843:"ecc333f0",3938:"65a49553",4024:"f8ffbaca",4042:"08659987",4111:"3b64075b",4189:"3def9002",4193:"f69784af",4431:"001ca130",4472:"f4c9d322",4827:"d32d81db",4963:"121b3f12",4998:"7b04b1d5",5144:"1737cda1",5322:"00691219",5367:"567d20e7",5381:"ecdf535b",5410:"9b9cfcc1",5437:"f98fc388",5597:"5dfb0b41",5626:"452b66d6",5679:"4922efd5",5680:"b312ff36",5809:"f5afe1a5",5845:"243cbd97",5874:"ea7cbf6d",5910:"d62b9139",5971:"dc696e54",5995:"cecf159a",6042:"fb908f49",6119:"efc9be4b",6178:"e6c1c7b3",6298:"45f22930",6482:"7874e99f",6760:"0721a2c0",7163:"cf2016e4",7165:"3b8e2d60",7240:"0f425520",7250:"41de83de",7356:"64f5dfca",7357:"a916fa41",7398:"d0e8d649",7401:"63d69a63",7595:"42326c77",7826:"f5839aac",7918:"17896441",7920:"1a4e3797",8035:"8de6d4d2",8096:"e438b577",8249:"585bdad0",8338:"de718920",8447:"ade45c9a",8500:"acde588d",8555:"cbc8963c",8583:"9f61b932",8676:"15098498",8724:"edfc6e1b",8873:"b89e1cb0",8967:"3fa022c7",9453:"3efb6d59",9464:"674dcd29",9512:"a991188b",9514:"1be78505",9618:"8c1ef0d5",9686:"cbe64e7a",9692:"2c77072c",9834:"735cb06c",9890:"8c826f25"}[e]||e)+"."+{53:"71db9b16",74:"cebae3e6",91:"d075260a",268:"41dab7d7",406:"88c4d5b7",507:"7848ceac",672:"0c317b27",707:"05f16d16",771:"d4df66e7",811:"f64286db",1124:"7c10b6ef",1169:"f24abf12",1351:"0763dc99",1365:"de5d0b80",1487:"3c7def82",1558:"d0e3f62c",1629:"f6258752",1898:"3ecd00cf",2098:"1de08157",2114:"d457a0d1",2158:"cba98723",2260:"76e984ff",2423:"42f19412",2439:"e28e38c5",2506:"11982042",2575:"694477a9",2593:"2e30b5d6",2598:"0bdaacd0",2599:"22df8030",2608:"51751599",2822:"38f228a1",2844:"6a11b22a",2871:"8ad3ae27",2960:"02dee544",3005:"f5623646",3085:"9c591920",3217:"7473a75b",3290:"e7ac2441",3291:"7834131c",3358:"00fa49ec",3782:"6c38b748",3843:"768cfb55",3938:"ca7af809",4024:"f2a4edc7",4042:"641218f9",4111:"88e2f915",4189:"826b0f33",4193:"66444b24",4431:"ea995613",4472:"d507f15b",4827:"db81f4c0",4963:"63726df8",4972:"db9d8288",4998:"375b9d33",5144:"6c512bce",5322:"aa22e2bc",5367:"df5a718b",5381:"9b867be1",5410:"f7c823cc",5437:"8a99036f",5525:"1a6f6533",5597:"4d1fb146",5626:"7b319d26",5679:"61168aee",5680:"77af369f",5809:"9a5f7e82",5845:"ae844494",5874:"c91bc7e7",5910:"3781e0c3",5971:"6ff45307",5995:"e4df0ed9",6042:"37db6e23",6119:"8a9de1a0",6178:"8b94b164",6298:"86bb6079",6482:"028314e8",6760:"ea46b094",7163:"e2db5f49",7165:"3395ef0b",7240:"2df56cc3",7250:"631a4066",7356:"1ea82678",7357:"46b7f38e",7398:"a7878f00",7401:"9a9115aa",7595:"e5ce8b4a",7826:"59ce1315",7918:"7245005b",7920:"47f2376f",8035:"24af249d",8096:"fee8e74d",8249:"19f15217",8338:"bcc5d62d",8443:"5a23e88e",8447:"fbddb8f4",8500:"1a77c011",8555:"7aafd148",8583:"3467cc4b",8676:"cefb25bc",8724:"ced83dc8",8873:"67f13935",8967:"64772e2e",9453:"6681f740",9464:"33fe9b8e",9512:"b91db63a",9514:"723f54d4",9618:"725dab7b",9686:"c1f41be3",9692:"792c4871",9834:"b49f114b",9890:"7f73ac8a"}[e]+".js"},n.miniCssF=function(e){},n.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),n.o=function(e,f){return Object.prototype.hasOwnProperty.call(e,f)},a={},d="docusaurus:",n.l=function(e,f,c,b){if(a[e])a[e].push(f);else{var t,r;if(void 0!==c)for(var o=document.getElementsByTagName("script"),u=0;u=d)&&Object.keys(n.O).every((function(e){return n.O[e](c[r])}))?c.splice(r--,1):(t=!1,d0&&e[u-1][2]>d;u--)e[u]=e[u-1];e[u]=[c,a,d]},n.n=function(e){var f=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(f,{a:f}),f},c=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__},n.t=function(e,a){if(1&a&&(e=this(e)),8&a)return e;if("object"==typeof e&&e){if(4&a&&e.__esModule)return e;if(16&a&&"function"==typeof e.then)return e}var d=Object.create(null);n.r(d);var b={};f=f||[null,c({}),c([]),c(c)];for(var t=2&a&&e;"object"==typeof t&&!~f.indexOf(t);t=c(t))Object.getOwnPropertyNames(t).forEach((function(f){b[f]=function(){return e[f]}}));return b.default=function(){return e},n.d(d,b),d},n.d=function(e,f){for(var c in f)n.o(f,c)&&!n.o(e,c)&&Object.defineProperty(e,c,{enumerable:!0,get:f[c]})},n.f={},n.e=function(e){return Promise.all(Object.keys(n.f).reduce((function(f,c){return n.f[c](e,f),f}),[]))},n.u=function(e){return"assets/js/"+({53:"935f2afb",74:"4ae90ba0",91:"7d2b4f21",268:"9c6b37b9",406:"eaf53e39",507:"8f68f251",672:"5d715295",707:"76aee1e9",811:"e8c74efb",1124:"4a343286",1169:"a68195a4",1351:"7dcecc8d",1365:"b9702c11",1487:"adcdd4d2",1558:"efec474a",1629:"1a6ad94f",1898:"1999cd7b",2098:"92147208",2114:"6f497b56",2158:"35234f08",2260:"d4a2a59c",2423:"e7cb9657",2439:"cd4a49c1",2506:"03a491a5",2575:"ceef21a3",2593:"300a9996",2598:"5a047177",2599:"2f5003f6",2608:"9ac82b89",2822:"94285305",2844:"f3976560",2871:"a37c03cb",2960:"d319f4c2",3005:"ab02279c",3085:"1f391b9e",3217:"3b8c55ea",3290:"8bde3748",3291:"230aeb34",3358:"be200c4b",3782:"a1bbfb14",3843:"ecc333f0",3938:"65a49553",4024:"f8ffbaca",4042:"08659987",4111:"3b64075b",4189:"3def9002",4193:"f69784af",4431:"001ca130",4472:"f4c9d322",4827:"d32d81db",4963:"121b3f12",4998:"7b04b1d5",5144:"1737cda1",5322:"00691219",5367:"567d20e7",5381:"ecdf535b",5410:"9b9cfcc1",5437:"f98fc388",5597:"5dfb0b41",5626:"452b66d6",5679:"4922efd5",5680:"b312ff36",5809:"f5afe1a5",5845:"243cbd97",5874:"ea7cbf6d",5910:"d62b9139",5971:"dc696e54",5995:"cecf159a",6042:"fb908f49",6119:"efc9be4b",6178:"e6c1c7b3",6298:"45f22930",6482:"7874e99f",6760:"0721a2c0",7163:"cf2016e4",7165:"3b8e2d60",7240:"0f425520",7250:"41de83de",7356:"64f5dfca",7357:"a916fa41",7398:"d0e8d649",7401:"63d69a63",7595:"42326c77",7826:"f5839aac",7918:"17896441",7920:"1a4e3797",8035:"8de6d4d2",8096:"e438b577",8249:"585bdad0",8338:"de718920",8447:"ade45c9a",8500:"acde588d",8555:"cbc8963c",8583:"9f61b932",8676:"15098498",8724:"edfc6e1b",8873:"b89e1cb0",8967:"3fa022c7",9453:"3efb6d59",9464:"674dcd29",9512:"a991188b",9514:"1be78505",9618:"8c1ef0d5",9686:"cbe64e7a",9692:"2c77072c",9834:"735cb06c",9890:"8c826f25"}[e]||e)+"."+{53:"71db9b16",74:"cebae3e6",91:"d075260a",268:"41dab7d7",406:"88c4d5b7",507:"7848ceac",672:"0c317b27",707:"05f16d16",771:"d4df66e7",811:"f64286db",1124:"7c10b6ef",1169:"f24abf12",1351:"0763dc99",1365:"de5d0b80",1487:"3c7def82",1558:"d0e3f62c",1629:"f6258752",1898:"3ecd00cf",2098:"1de08157",2114:"d457a0d1",2158:"cba98723",2260:"52319358",2423:"42f19412",2439:"e28e38c5",2506:"11982042",2575:"694477a9",2593:"2e30b5d6",2598:"0bdaacd0",2599:"22df8030",2608:"51751599",2822:"38f228a1",2844:"6a11b22a",2871:"8ad3ae27",2960:"02dee544",3005:"f5623646",3085:"9c591920",3217:"7473a75b",3290:"e7ac2441",3291:"7834131c",3358:"00fa49ec",3782:"6c38b748",3843:"768cfb55",3938:"ca7af809",4024:"f2a4edc7",4042:"641218f9",4111:"88e2f915",4189:"826b0f33",4193:"66444b24",4431:"ea995613",4472:"d507f15b",4827:"db81f4c0",4963:"63726df8",4972:"db9d8288",4998:"375b9d33",5144:"6c512bce",5322:"aa22e2bc",5367:"df5a718b",5381:"9b867be1",5410:"f7c823cc",5437:"8a99036f",5525:"1a6f6533",5597:"4d1fb146",5626:"77359900",5679:"61168aee",5680:"77af369f",5809:"9a5f7e82",5845:"ae844494",5874:"c91bc7e7",5910:"3781e0c3",5971:"6ff45307",5995:"e4df0ed9",6042:"37db6e23",6119:"8a9de1a0",6178:"8b94b164",6298:"86bb6079",6482:"028314e8",6760:"ea46b094",7163:"e2db5f49",7165:"3395ef0b",7240:"2df56cc3",7250:"631a4066",7356:"1ea82678",7357:"1fb2b992",7398:"a7878f00",7401:"9a9115aa",7595:"e5ce8b4a",7826:"59ce1315",7918:"7245005b",7920:"47f2376f",8035:"24af249d",8096:"fee8e74d",8249:"19f15217",8338:"bcc5d62d",8443:"5a23e88e",8447:"fbddb8f4",8500:"1a77c011",8555:"7aafd148",8583:"3467cc4b",8676:"cefb25bc",8724:"ced83dc8",8873:"67f13935",8967:"64772e2e",9453:"6681f740",9464:"33fe9b8e",9512:"b91db63a",9514:"723f54d4",9618:"725dab7b",9686:"c1f41be3",9692:"792c4871",9834:"b49f114b",9890:"7f73ac8a"}[e]+".js"},n.miniCssF=function(e){},n.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||new Function("return this")()}catch(e){if("object"==typeof window)return window}}(),n.o=function(e,f){return Object.prototype.hasOwnProperty.call(e,f)},a={},d="docusaurus:",n.l=function(e,f,c,b){if(a[e])a[e].push(f);else{var t,r;if(void 0!==c)for(var o=document.getElementsByTagName("script"),u=0;u Behaviour | OAuth2 Proxy - +
Version: 6.1.x

Behaviour

  1. Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens).
  2. If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned)
  3. After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set
  4. The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration)

Notice that the proxy also provides a number of useful endpoints.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/6.1.x/community/security/index.html b/docs/6.1.x/community/security/index.html index 4dfa4576..518b2b9e 100644 --- a/docs/6.1.x/community/security/index.html +++ b/docs/6.1.x/community/security/index.html @@ -4,7 +4,7 @@ Security | OAuth2 Proxy - + @@ -28,7 +28,7 @@ If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/6.1.x/configuration/oauth_provider/index.html b/docs/6.1.x/configuration/oauth_provider/index.html index c103f931..473741bc 100644 --- a/docs/6.1.x/configuration/oauth_provider/index.html +++ b/docs/6.1.x/configuration/oauth_provider/index.html @@ -4,7 +4,7 @@ OAuth Provider Configuration | OAuth2 Proxy - + @@ -45,7 +45,7 @@ to setup the client id and client secret. Your "Redirection URI" will Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/6.1.x/configuration/overview/index.html b/docs/6.1.x/configuration/overview/index.html index 9c7fc187..65857514 100644 --- a/docs/6.1.x/configuration/overview/index.html +++ b/docs/6.1.x/configuration/overview/index.html @@ -4,7 +4,7 @@ Overview | OAuth2 Proxy - + @@ -19,7 +19,7 @@ The default format is configured as follows:

{{.Client}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}}

Available variables for request logging:

VariableExampleDescription
Client74.125.224.72The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true.
Hostdomain.comThe value of the Host header.
ProtocolHTTP/1.0The request protocol.
RequestDuration0.001The time in seconds that a request took to process.
RequestMethodGETThe request method.
RequestURI"/oauth2/auth"The URI path of the request.
ResponseSize12The size in bytes of the response.
StatusCode200The HTTP status code of the response.
Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
Upstream-The upstream data of the HTTP request.
UserAgent-The full user agent as reported by the requesting client.
Usernameusername@email.comThe email or username of the auth request.

Standard Log Format​

All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below:

[19/Mar/2015:17:20:19 -0400] [main.go:40] <MESSAGE>

If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows:

[{{.Timestamp}}] [{{.File}}] {{.Message}}

Available variables for standard logging:

VariableExampleDescription
Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
Filemain.go:40The file and line number of the logging statement.
MessageHTTP: listening on 127.0.0.1:4180The details of the log statement.

Configuring for use with the Nginx auth_request directive​

The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example:

server {
  listen 443 ssl;
  server_name ...;
  include ssl/ssl.conf;

  location /oauth2/ {
    proxy_pass       http://127.0.0.1:4180;
    proxy_set_header Host                    $host;
    proxy_set_header X-Real-IP               $remote_addr;
    proxy_set_header X-Scheme                $scheme;
    proxy_set_header X-Auth-Request-Redirect $request_uri;
    # or, if you are handling multiple domains:
    # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
  }
  location = /oauth2/auth {
    proxy_pass       http://127.0.0.1:4180;
    proxy_set_header Host             $host;
    proxy_set_header X-Real-IP        $remote_addr;
    proxy_set_header X-Scheme         $scheme;
    # nginx auth_request includes headers but not body
    proxy_set_header Content-Length   "";
    proxy_pass_request_body           off;
  }

  location / {
    auth_request /oauth2/auth;
    error_page 401 = /oauth2/sign_in;

    # pass information via X-User and X-Email headers to backend,
    # requires running with --set-xauthrequest flag
    auth_request_set $user   $upstream_http_x_auth_request_user;
    auth_request_set $email  $upstream_http_x_auth_request_email;
    proxy_set_header X-User  $user;
    proxy_set_header X-Email $email;

    # if you enabled --pass-access-token, this will pass the token to the backend
    auth_request_set $token  $upstream_http_x_auth_request_access_token;
    proxy_set_header X-Access-Token $token;

    # if you enabled --cookie-refresh, this is needed for it to work with auth_request
    auth_request_set $auth_cookie $upstream_http_set_cookie;
    add_header Set-Cookie $auth_cookie;

    # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
    # limit and so the OAuth2 Proxy splits these into multiple parts.
    # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
    # so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
    auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;

    # Extract the Cookie attributes from the first Set-Cookie header and append them
    # to the second part ($upstream_cookie_* variables only contain the raw cookie content)
    if ($auth_cookie ~* "(; .*)") {
        set $auth_cookie_name_0 $auth_cookie;
        set $auth_cookie_name_1 "auth_cookie_name_1=$auth_cookie_name_upstream_1$1";
    }

    # Send both Set-Cookie headers now if there was a second part
    if ($auth_cookie_name_upstream_1) {
        add_header Set-Cookie $auth_cookie_name_0;
        add_header Set-Cookie $auth_cookie_name_1;
    }

    proxy_pass http://backend/;
    # or "root /path/to/site;" or "fastcgi_pass ..." etc
  }
}

When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module.

nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
nginx.ingress.kubernetes.io/configuration-snippet: |
  auth_request_set $name_upstream_1 $upstream_cookie_name_1;

  access_by_lua_block {
    if ngx.var.name_upstream_1 ~= "" then
      ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
    end
  }

It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure).

You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be "$upstream_cookie__oauth2_proxy_1" instead of "$upstream_cookie_name_1" and the new cookie-name should be "_oauth2_proxy_1=" instead of "name_1=".

note

If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/6.1.x/configuration/session_storage/index.html b/docs/6.1.x/configuration/session_storage/index.html index abebe3ba..7ac88717 100644 --- a/docs/6.1.x/configuration/session_storage/index.html +++ b/docs/6.1.x/configuration/session_storage/index.html @@ -4,7 +4,7 @@ Session Storage | OAuth2 Proxy - + @@ -25,7 +25,7 @@ disclosure.

Usage--redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately.

Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately.

Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/6.1.x/configuration/tls/index.html b/docs/6.1.x/configuration/tls/index.html index 06781c4a..c0e80646 100644 --- a/docs/6.1.x/configuration/tls/index.html +++ b/docs/6.1.x/configuration/tls/index.html @@ -4,7 +4,7 @@ TLS Configuration | OAuth2 Proxy - + @@ -15,7 +15,7 @@ external load balancer like Amazon ELB or Google Platform Load Balancing) use oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/.

An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS:

server {
    listen 443 default ssl;
    server_name internal.yourcompany.com;
    ssl_certificate /path/to/cert.pem;
    ssl_certificate_key /path/to/cert.key;
    add_header Strict-Transport-Security max-age=2592000;

    location / {
        proxy_pass http://127.0.0.1:4180;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Scheme $scheme;
        proxy_connect_timeout 1;
        proxy_send_timeout 30;
        proxy_read_timeout 30;
    }
}

The command line to run oauth2-proxy in this configuration would look like this:

./oauth2-proxy \
   --email-domain="yourcompany.com"  \
   --upstream=http://127.0.0.1:8080/ \
   --cookie-secret=... \
   --cookie-secure=true \
   --provider=... \
   --reverse-proxy=true \
   --client-id=... \
   --client-secret=...
Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/6.1.x/features/endpoints/index.html b/docs/6.1.x/features/endpoints/index.html index 03ac2c82..bdb1e9d9 100644 --- a/docs/6.1.x/features/endpoints/index.html +++ b/docs/6.1.x/features/endpoints/index.html @@ -4,13 +4,13 @@ Endpoints | OAuth2 Proxy - +
Version: 6.1.x

Endpoints

OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable.

  • /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info
  • /ping - returns a 200 OK response, which is intended for use with health checks
  • /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies)
  • /oauth2/sign_out - this URL is used to clear the session cookie
  • /oauth2/start - a URL that will redirect to start the OAuth cycle
  • /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url.
  • /oauth2/userinfo - the URL is used to return user's email from the session in JSON format.
  • /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive

Sign out​

To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!):

/oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page

Alternatively, include the redirect URL in the X-Auth-Request-Redirect header:

GET /oauth2/sign_out HTTP/1.1
X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page
...

(The "sign_out_page" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.)

BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/6.1.x/features/request_signatures/index.html b/docs/6.1.x/features/request_signatures/index.html index ba324983..ae7f3719 100644 --- a/docs/6.1.x/features/request_signatures/index.html +++ b/docs/6.1.x/features/request_signatures/index.html @@ -4,7 +4,7 @@ Request Signatures | OAuth2 Proxy - + @@ -17,7 +17,7 @@ in oauthproxy.go.

signature_key must be of t following:

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/6.1.x/index.html b/docs/6.1.x/index.html index d7c39d11..8be8af2e 100644 --- a/docs/6.1.x/index.html +++ b/docs/6.1.x/index.html @@ -4,13 +4,13 @@ Installation | OAuth2 Proxy - +
Version: 6.1.x

Installation

  1. Choose how to deploy:

    a. Download Prebuilt Binary (current release is v6.1.1)

    b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy which will put the binary in $GOPATH/bin

    c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available)

Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0.

$ sha256sum -c sha256sum.txt 2>&1 | grep OK
oauth2-proxy-x.y.z.linux-amd64: OK
  1. Select a Provider and Register an OAuth Application with a Provider
  2. Configure OAuth2 Proxy using config file, command line options, or environment variables
  3. Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)
Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/6.1.x/search-index.json b/docs/6.1.x/search-index.json index e6e23147..26533fc5 100644 --- a/docs/6.1.x/search-index.json +++ b/docs/6.1.x/search-index.json @@ -1 +1 @@ -[{"documents":[{"i":988,"t":"Behaviour","u":"/oauth2-proxy/docs/6.1.x/behaviour","b":["Docs"]},{"i":990,"t":"Security","u":"/oauth2-proxy/docs/6.1.x/community/security","b":["Docs","Community"]},{"i":996,"t":"Installation","u":"/oauth2-proxy/docs/6.1.x/","b":["Docs"]},{"i":998,"t":"Overview","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","b":["Docs","Configuration"]},{"i":1020,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","b":["Docs","Configuration"]},{"i":1054,"t":"Session Storage","u":"/oauth2-proxy/docs/6.1.x/configuration/session_storage","b":["Docs","Configuration"]},{"i":1060,"t":"TLS Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/tls","b":["Docs","Configuration"]},{"i":1062,"t":"Endpoints","u":"/oauth2-proxy/docs/6.1.x/features/endpoints","b":["Docs","Features"]},{"i":1066,"t":"Request Signatures","u":"/oauth2-proxy/docs/6.1.x/features/request_signatures","b":["Docs","Features"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/988",[0,2.222]],["t/990",[1,2.222]],["t/996",[2,2.222]],["t/998",[3,2.222]],["t/1020",[4,1.375,5,1.375,6,1.005]],["t/1054",[7,1.699,8,1.699]],["t/1060",[6,1.241,9,1.699]],["t/1062",[10,2.222]],["t/1066",[11,1.699,12,1.699]]],"invertedIndex":[["behaviour",{"_index":0,"t":{"988":{"position":[[0,9]]}}}],["configur",{"_index":6,"t":{"1020":{"position":[[15,13]]},"1060":{"position":[[4,13]]}}}],["endpoint",{"_index":10,"t":{"1062":{"position":[[0,9]]}}}],["instal",{"_index":2,"t":{"996":{"position":[[0,12]]}}}],["oauth",{"_index":4,"t":{"1020":{"position":[[0,5]]}}}],["overview",{"_index":3,"t":{"998":{"position":[[0,8]]}}}],["provid",{"_index":5,"t":{"1020":{"position":[[6,8]]}}}],["request",{"_index":11,"t":{"1066":{"position":[[0,7]]}}}],["secur",{"_index":1,"t":{"990":{"position":[[0,8]]}}}],["session",{"_index":7,"t":{"1054":{"position":[[0,7]]}}}],["signatur",{"_index":12,"t":{"1066":{"position":[[8,10]]}}}],["storag",{"_index":8,"t":{"1054":{"position":[[8,7]]}}}],["tl",{"_index":9,"t":{"1060":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":992,"t":"Security Disclosures","u":"/oauth2-proxy/docs/6.1.x/community/security","h":"#security-disclosures","p":990},{"i":994,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/6.1.x/community/security","h":"#how-will-we-respond-to-disclosures","p":990},{"i":1000,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#generating-a-cookie-secret","p":998},{"i":1002,"t":"Config File","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#config-file","p":998},{"i":1004,"t":"Command Line Options","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#command-line-options","p":998},{"i":1006,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#upstreams-configuration","p":998},{"i":1008,"t":"Environment variables","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#environment-variables","p":998},{"i":1010,"t":"Logging Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#logging-configuration","p":998},{"i":1012,"t":"Auth Log Format","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#auth-log-format","p":998},{"i":1014,"t":"Request Log Format","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#request-log-format","p":998},{"i":1016,"t":"Standard Log Format","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#standard-log-format","p":998},{"i":1018,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":998},{"i":1022,"t":"Google Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#google-auth-provider","p":1020},{"i":1024,"t":"Azure Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#azure-auth-provider","p":1020},{"i":1026,"t":"Facebook Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":1020},{"i":1028,"t":"GitHub Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#github-auth-provider","p":1020},{"i":1030,"t":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":1020},{"i":1032,"t":"GitLab Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":1020},{"i":1034,"t":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":1020},{"i":1036,"t":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":1020},{"i":1038,"t":"OpenID Connect Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#openid-connect-provider","p":1020},{"i":1040,"t":"login.gov Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#logingov-provider","p":1020},{"i":1042,"t":"Nextcloud Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#nextcloud-provider","p":1020},{"i":1044,"t":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":1020},{"i":1046,"t":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":1020},{"i":1048,"t":"Gitea Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":1020},{"i":1050,"t":"Email Authentication","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#email-authentication","p":1020},{"i":1052,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":1020},{"i":1056,"t":"Cookie Storage","u":"/oauth2-proxy/docs/6.1.x/configuration/session_storage","h":"#cookie-storage","p":1054},{"i":1058,"t":"Redis Storage","u":"/oauth2-proxy/docs/6.1.x/configuration/session_storage","h":"#redis-storage","p":1054},{"i":1064,"t":"Sign out","u":"/oauth2-proxy/docs/6.1.x/features/endpoints","h":"#sign-out","p":1062}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/992",[0,3.428,1,2.855]],["t/994",[1,2.855,2,3.428]],["t/1000",[3,2.932,4,2.442,5,2.932]],["t/1002",[6,3.428,7,3.428]],["t/1004",[8,2.932,9,2.932,10,2.932]],["t/1006",[11,3.428,12,2.479]],["t/1008",[13,3.428,14,3.428]],["t/1010",[12,2.479,15,2.197]],["t/1012",[15,1.879,16,0.98,17,2.12]],["t/1014",[15,1.879,17,2.12,18,2.932]],["t/1016",[15,1.879,17,2.12,19,2.932]],["t/1018",[12,1.644,20,2.274,21,2.274,22,2.274,23,2.274]],["t/1022",[16,0.98,24,2.932,25,0.694]],["t/1024",[16,0.98,25,0.694,26,2.442]],["t/1026",[16,0.98,25,0.694,27,2.932]],["t/1028",[16,0.98,25,0.694,28,2.932]],["t/1030",[16,0.98,25,0.694,29,2.932]],["t/1032",[16,0.98,25,0.694,30,2.932]],["t/1034",[16,0.98,25,0.694,31,2.932]],["t/1036",[25,0.607,26,2.134,32,2.561,33,2.134]],["t/1038",[25,0.694,34,2.932,35,2.932]],["t/1040",[25,0.812,36,3.428]],["t/1042",[25,0.812,37,3.428]],["t/1044",[16,0.98,25,0.694,38,2.932]],["t/1046",[16,0.98,25,0.694,39,2.932]],["t/1048",[16,0.98,25,0.694,40,2.932]],["t/1050",[41,3.428,42,3.428]],["t/1052",[25,0.694,33,2.442,43,2.932]],["t/1056",[4,2.855,44,2.855]],["t/1058",[44,2.855,45,3.428]],["t/1064",[46,3.428,47,3.428]]],"invertedIndex":[["ad",{"_index":33,"t":{"1036":{"position":[[16,2]]},"1052":{"position":[[0,6]]}}}],["auth",{"_index":16,"t":{"1012":{"position":[[0,4]]},"1022":{"position":[[7,4]]},"1024":{"position":[[6,4]]},"1026":{"position":[[9,4]]},"1028":{"position":[[7,4]]},"1030":{"position":[[9,4]]},"1032":{"position":[[7,4]]},"1034":{"position":[[9,4]]},"1044":{"position":[[13,4]]},"1046":{"position":[[10,4]]},"1048":{"position":[[6,4]]}}}],["auth_request",{"_index":22,"t":{"1018":{"position":[[35,12]]}}}],["authent",{"_index":42,"t":{"1050":{"position":[[6,14]]}}}],["azur",{"_index":26,"t":{"1024":{"position":[[0,5]]},"1036":{"position":[[10,5]]}}}],["bitbucket",{"_index":39,"t":{"1046":{"position":[[0,9]]}}}],["command",{"_index":8,"t":{"1004":{"position":[[0,7]]}}}],["config",{"_index":6,"t":{"1002":{"position":[[0,6]]}}}],["configur",{"_index":12,"t":{"1006":{"position":[[10,13]]},"1010":{"position":[[8,13]]},"1018":{"position":[[0,11]]}}}],["connect",{"_index":35,"t":{"1038":{"position":[[7,7]]}}}],["cooki",{"_index":4,"t":{"1000":{"position":[[13,6]]},"1056":{"position":[[0,6]]}}}],["digitalocean",{"_index":38,"t":{"1044":{"position":[[0,12]]}}}],["direct",{"_index":23,"t":{"1018":{"position":[[48,9]]}}}],["disclosur",{"_index":1,"t":{"992":{"position":[[9,11]]},"994":{"position":[[23,12]]}}}],["email",{"_index":41,"t":{"1050":{"position":[[0,5]]}}}],["environ",{"_index":13,"t":{"1008":{"position":[[0,11]]}}}],["facebook",{"_index":27,"t":{"1026":{"position":[[0,8]]}}}],["file",{"_index":7,"t":{"1002":{"position":[[7,4]]}}}],["format",{"_index":17,"t":{"1012":{"position":[[9,6]]},"1014":{"position":[[12,6]]},"1016":{"position":[[13,6]]}}}],["gener",{"_index":3,"t":{"1000":{"position":[[0,10]]}}}],["gitea",{"_index":40,"t":{"1048":{"position":[[0,5]]}}}],["github",{"_index":28,"t":{"1028":{"position":[[0,6]]}}}],["gitlab",{"_index":30,"t":{"1032":{"position":[[0,6]]}}}],["googl",{"_index":24,"t":{"1022":{"position":[[0,6]]}}}],["keycloak",{"_index":29,"t":{"1030":{"position":[[0,8]]}}}],["line",{"_index":9,"t":{"1004":{"position":[[8,4]]}}}],["linkedin",{"_index":31,"t":{"1034":{"position":[[0,8]]}}}],["log",{"_index":15,"t":{"1010":{"position":[[0,7]]},"1012":{"position":[[5,3]]},"1014":{"position":[[8,3]]},"1016":{"position":[[9,3]]}}}],["login.gov",{"_index":36,"t":{"1040":{"position":[[0,9]]}}}],["microsoft",{"_index":32,"t":{"1036":{"position":[[0,9]]}}}],["new",{"_index":43,"t":{"1052":{"position":[[9,3]]}}}],["nextcloud",{"_index":37,"t":{"1042":{"position":[[0,9]]}}}],["nginx",{"_index":21,"t":{"1018":{"position":[[29,5]]}}}],["openid",{"_index":34,"t":{"1038":{"position":[[0,6]]}}}],["option",{"_index":10,"t":{"1004":{"position":[[13,7]]}}}],["out",{"_index":47,"t":{"1064":{"position":[[5,3]]}}}],["provid",{"_index":25,"t":{"1022":{"position":[[12,8]]},"1024":{"position":[[11,8]]},"1026":{"position":[[14,8]]},"1028":{"position":[[12,8]]},"1030":{"position":[[14,8]]},"1032":{"position":[[12,8]]},"1034":{"position":[[14,8]]},"1036":{"position":[[19,8]]},"1038":{"position":[[15,8]]},"1040":{"position":[[10,8]]},"1042":{"position":[[10,8]]},"1044":{"position":[[18,8]]},"1046":{"position":[[15,8]]},"1048":{"position":[[11,8]]},"1052":{"position":[[13,8]]}}}],["redi",{"_index":45,"t":{"1058":{"position":[[0,5]]}}}],["request",{"_index":18,"t":{"1014":{"position":[[0,7]]}}}],["respond",{"_index":2,"t":{"994":{"position":[[12,7]]}}}],["secret",{"_index":5,"t":{"1000":{"position":[[20,6]]}}}],["secur",{"_index":0,"t":{"992":{"position":[[0,8]]}}}],["sign",{"_index":46,"t":{"1064":{"position":[[0,4]]}}}],["standard",{"_index":19,"t":{"1016":{"position":[[0,8]]}}}],["storag",{"_index":44,"t":{"1056":{"position":[[7,7]]},"1058":{"position":[[6,7]]}}}],["upstream",{"_index":11,"t":{"1006":{"position":[[0,9]]}}}],["us",{"_index":20,"t":{"1018":{"position":[[16,3]]}}}],["variabl",{"_index":14,"t":{"1008":{"position":[[12,9]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":989,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/6.1.x/behaviour","h":"","p":988},{"i":991,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/6.1.x/community/security","h":"","p":990},{"i":993,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/6.1.x/community/security","h":"#security-disclosures","p":990},{"i":995,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/6.1.x/community/security","h":"#how-will-we-respond-to-disclosures","p":990},{"i":997,"t":"Choose how to deploy: a. Download Prebuilt Binary (current release is v6.1.1) b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy which will put the binary in $GOPATH/bin c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. $ sha256sum -c sha256sum.txt 2>&1 | grep OKoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/6.1.x/","h":"","p":996},{"i":999,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"","p":998},{"i":1001,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_'; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#generating-a-cookie-secret","p":998},{"i":1003,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#config-file","p":998},{"i":1005,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --custom-templates-dir string path to custom html templates --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --gcp-healthchecks bool will enable /liveness_check, /readiness_check, and / (with the proper user-agent) endpoints that will make it work well with GCP App Engine and GKE Ingresses false --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -s for SHA encryption --http-address string [http://]: or unix:// to listen on for HTTP clients \"127.0.0.1:4180\" --https-address string : to listen on for HTTPS clients \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping endpoint false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string bypass authentication for requests paths that match (may be given multiple times) --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy for request paths in --skip-auth-regex false --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-key-file string path to private key file --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --user-id-claim string which claim contains the user ID [\"email\"] --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . to allow subdomains (e.g. .example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. [1]: Only these providers support --cookie-refresh: GitLab, Google and OIDC [2]: When using the whitelist-domain option, any domain prefixed with a . will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URL's protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*. See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#command-line-options","p":998},{"i":1007,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#upstreams-configuration","p":998},{"i":1009,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside of a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#environment-variables","p":998},{"i":1011,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) can be disabled with --silence-ping-logging reducing log volume. This flag appends the --ping-path to --exclude-logging-paths.","s":"Logging Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#logging-configuration","p":998},{"i":1013,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details. Message Authenticated via OAuth2 The details of the auth attempt.","s":"Auth Log Format","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#auth-log-format","p":998},{"i":1015,"t":"HTTP request logs will output by default in the below format: - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#request-log-format","p":998},{"i":1017,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#standard-log-format","p":998},{"i":1019,"t":"The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\". note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":998},{"i":1021,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure Facebook GitHub Keycloak GitLab LinkedIn Microsoft Azure AD OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket Gitea The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"","p":1020},{"i":1023,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"API Manager\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account: https://developers.google.com/identity/protocols/OAuth2ServiceAccount and make sure to download the json file. Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ).","s":"Google Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#google-auth-provider","p":1020},{"i":1025,"t":"Add an application: go to https://portal.azure.com, choose \"Azure Active Directory\" in the left menu, select \"App registrations\" and then click on \"New app registration\". Pick a name and choose \"Webapp / API\" as application type. Use https://internal.yourcompany.com as Sign-on URL. Click \"Create\". On the \"Settings\" / \"Properties\" page of the app, pick a logo and select \"Multi-tenanted\" if you want to allow users from multiple organizations to access your app. Note down the application ID. Click \"Save\". On the \"Settings\" / \"Required Permissions\" page of the app, click on \"Windows Azure Active Directory\" and then on \"Access the directory as the signed in user\". Hit \"Save\" and then then on \"Grant permissions\" (you might need another admin to do this). On the \"Settings\" / \"Reply URLs\" page of the app, add https://internal.yourcompanycom/oauth2/callback for each host that you want to protect by the oauth2 proxy. Click \"Save\". On the \"Settings\" / \"Keys\" page of the app, add a new key and note down the value after hitting \"Save\". Configure the proxy with --provider=azure --client-id= --client-secret= Note: When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#azure-auth-provider","p":1020},{"i":1027,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":1020},{"i":1029,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to login even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to login with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#github-auth-provider","p":1020},{"i":1031,"t":"Create new client in your Keycloak with Access Type 'confidental' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: -provider=keycloak-client-id=-client-secret=-login-url=\"http(s):///realms//protocol/openid-connect/auth\"-redeem-url=\"http(s):///realms//protocol/openid-connect/token\"-validate-url=\"http(s):///realms//protocol/openid-connect/userinfo\"-keycloak-group= The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":1020},{"i":1033,"t":"Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\"","s":"GitLab Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":1020},{"i":1035,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":1020},{"i":1037,"t":"For adding an application to the Microsoft Azure AD follow these steps to add an application. Take note of your TenantId if applicable for your situation. The TenantId can be used to override the default common authorization server with a tenant specific server.","s":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":1020},{"i":1039,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex and we will use it as an example. Launch a Dex instance using the getting started guide. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Login with the fixture use in the dex guide and run the oauth2-proxy with the following args: -provider oidc -provider-display-name \"My OIDC Provider\" -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -cookie-secure=false -email-domain example.com The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta. To configure the OIDC provider for Okta, perform the following steps: Configuring the OIDC Provider with Okta​ Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com The client_id and client_secret are configured in the application settings. Generate a unique client_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Configuring the OIDC Provider with Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#openid-connect-provider","p":1020},{"i":1041,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048 bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost', The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"login.gov Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#logingov-provider","p":1020},{"i":1043,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to setup the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"Nextcloud Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#nextcloud-provider","p":1020},{"i":1045,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":1020},{"i":1047,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who has access to one selected repository use --bitbucket-repository=.","s":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":1020},{"i":1049,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1\"","s":"Gitea Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":1020},{"i":1051,"t":"To authorize by email domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#email-authentication","p":1020},{"i":1053,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":1020},{"i":1055,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/6.1.x/configuration/session_storage","h":"","p":1054},{"i":1057,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/6.1.x/configuration/session_storage","h":"#cookie-storage","p":1054},{"i":1059,"t":"The Redis Storage backend stores sessions, encrypted, in redis. Instead sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128 bit random number, hex-encoded The secret is a 128 bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.","s":"Redis Storage","u":"/oauth2-proxy/docs/6.1.x/configuration/session_storage","h":"#redis-storage","p":1054},{"i":1061,"t":"There are two recommended configurations. Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or .... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"TLS Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/tls","h":"","p":1060},{"i":1063,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive","s":"Endpoints","u":"/oauth2-proxy/docs/6.1.x/features/endpoints","h":"","p":1062},{"i":1065,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.","s":"Sign out","u":"/oauth2-proxy/docs/6.1.x/features/endpoints","h":"#sign-out","p":1062},{"i":1067,"t":"If signature_key is defined, proxied requests will be signed with the GAP-Signature header, which is a Hash-based Message Authentication Code (HMAC) of selected request information and the request body see SIGNATURE_HEADERS in oauthproxy.go. signature_key must be of the form algorithm:secretkey, (ie: signature_key = \"sha1:secret0\") For more information about HMAC request signature validation, read the following: Amazon Web Services: Signing and Authenticating REST Requests rc3.org: Using HMAC to authenticate Web service requests","s":"Request Signatures","u":"/oauth2-proxy/docs/6.1.x/features/request_signatures","h":"","p":1066}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/989",[0,2.069,1,1.461,2,2.718,3,0.749,4,3.027,5,3.883,6,1.676,7,3.441,8,2.718,9,2.718,10,1.874,11,1.673,12,1.019,13,1.676,14,1.564,15,3.883,16,2.547,17,2.089,18,3.441,19,1.462,20,1.676,21,4.069,22,1.256,23,4.069,24,1.935,25,1.12,26,1.386,27,4.069,28,4.069,29,2.718,30,1.799,31,2.718,32,4.069,33,2.089,34,3.027,35,3.027,36,3.486,37,1.461,38,2.483,39,1.019,40,2.471,41,0.914,42,3.027,43,2.265,44,1.799,45,2.265,46,2.718,47,1.935,48,2.471,49,3.441,50,2.718,51,0.249,52,1.799]],["t/991",[3,0.726,53,1.392,54,0.726,55,5.059,56,3.856,57,3.763,58,2.816,59,3.763,60,2.236,61,3.763,62,5.059,63,4.278,64,3.379,65,5.059,66,3.763,67,2.816,68,5.059,69,5.059,70,5.059]],["t/993",[3,0.769,30,1.875,33,2.178,46,2.833,48,2.576,51,0.259,54,0.769,57,3.987,64,3.58,66,3.155,71,4.241,72,5.359,73,4.532,74,2.833,75,5.22,76,3.155,77,4.968,78,3.586,79,3.254,80,4.241,81,3.987,82,4.241,83,2.361,84,4.241,85,2.576,86,4.241,87,4.241,88,4.241,89,2.576,90,3.586,91,1.247,92,3.155,93,2.833,94,1.333,95,2.984,96,4.241,97,4.241,98,4.241,99,4.241,100,4.241,101,4.241,102,4.241,103,3.586,104,4.241,105,3.155,106,4.241,107,3.155,108,3.155,109,1.523]],["t/995",[48,2.596,51,0.329,57,3.18,64,2.855,73,4.554,77,4.554,78,3.614,79,3.27,83,3.283,85,2.596,95,2.38,103,5.593,109,1.535,110,5.897,111,5.386,112,5.386,113,1.889,114,3.18,115,4.274,116,1.535,117,4.274,118,4.274,119,4.274,120,4.274,121,4.274,122,4.274,123,3.18,124,4.274,125,4.274,126,5.386,127,1.535,128,1.435,129,4.554,130,1.642,131,4.274,132,4.274,133,4.274,134,4.274,135,4.274,136,4.274,137,4.274,138,4.274,139,4.274]],["t/997",[3,0.86,12,1.103,26,1.441,37,1.404,39,0.993,51,0.311,52,1.729,54,0.561,94,1.777,105,2.909,116,1.404,129,4.302,140,2.909,141,4.302,142,3.307,143,5.655,144,5.655,145,2.909,146,3.91,147,3.91,148,3.307,149,2.612,150,3.91,151,5.087,152,3.91,153,3.91,154,4.302,155,3.307,156,3.307,157,3.91,158,5.087,159,3.91,160,3.91,161,3.91,162,1.729,163,3.307,164,2.909,165,2.375,166,5.087,167,3.91,168,2.375,169,2.375,170,3.91,171,3.91,172,3.91,173,3.91,174,3.91,175,3.91,176,3.307,177,1.729,178,2.909,179,1.313,180,1.503,181,1.61,182,1.61,183,1.15,184,2.375,185,1.503,186,3.398,187,3.307,188,1.503,189,2.177]],["t/999",[3,0.707,29,3.288,39,1.146,41,1.106,54,0.707,94,1.845,180,1.892,181,2.419,182,2.419,183,1.727,184,3.812,185,2.412,190,2.342,191,4.923,192,4.923,193,4.923,194,5.873]],["t/1001",[10,1.44,11,1.103,12,1.342,30,1.773,41,0.901,51,0.245,113,1.773,116,1.44,154,3.391,181,1.651,195,2.678,196,4.01,197,1.032,198,2.233,199,5.171,200,4.01,201,4.372,202,4.01,203,4.01,204,3.391,205,4.01,206,4.01,207,4.01,208,4.01,209,4.01,210,4.01,211,4.01,212,4.839,213,5.723,214,4.01,215,4.01,216,4.257,217,4.01,218,4.01,219,5.723,220,4.01,221,4.01,222,4.01,223,1.907,224,4.01,225,4.01,226,4.01,227,4.372,228,0.965,229,2.678,230,4.01,231,4.01,232,4.01,233,4.01,234,4.01,235,4.01,236,4.01,237,3.391,238,4.01]],["t/1003",[12,1.131,51,0.294,54,0.691,60,2.129,94,1.821,130,1.851,180,2.389,181,1.983,182,1.983,183,1.416,188,1.851,216,3.582,239,4.312,240,3.193,241,4.072,242,4.072,243,4.072,244,4.072,245,4.072,246,3.582,247,5.796,248,4.816,249,3.216,250,4.816]],["t/1005",[0,1.623,1,1.545,3,0.538,4,1.507,5,3.285,6,1.902,7,0.995,8,1.091,10,0.958,11,1.475,12,1.064,13,1.208,14,1.44,15,2.904,16,1.902,17,1.37,18,2.002,19,1.006,20,1.099,22,1.006,24,2.653,25,0.734,26,0.939,30,0.722,31,0.428,33,0.329,37,1.214,38,0.964,39,0.521,40,3.225,41,1.037,42,2.516,43,1.989,44,0.283,45,0.655,46,0.428,47,2.353,48,0.389,50,0.786,51,0.355,52,1.656,54,0.169,58,0.356,60,1.297,79,1.438,83,1.318,85,0.992,89,0.992,91,1.265,93,2.874,94,1.576,105,0.875,107,1.215,108,1.215,109,0.85,113,0.52,114,1.215,116,0.85,127,0.423,130,0.779,145,0.476,149,0.786,164,1.761,165,0.715,179,0.215,180,0.452,182,0.834,183,1.051,186,0.786,187,0.541,189,0.909,190,0.964,197,0.609,198,0.356,212,0.541,223,0.56,228,1.252,229,0.428,240,1.04,246,0.476,251,0.356,252,0.863,253,0.64,254,0.305,255,4.764,256,0.64,257,1.177,258,2.026,259,0.64,260,1.713,261,5.615,262,0.541,263,2.502,264,1.269,265,2.368,266,0.541,267,0.992,268,1.507,269,1.353,270,0.995,271,0.64,272,3.382,273,3.573,274,2.15,275,1.005,276,2.371,277,0.64,278,2.571,279,1.667,280,0.64,281,0.64,282,0.64,283,0.722,284,0.64,285,1.177,286,2.026,287,0.64,288,0.64,289,1.177,290,0.485,291,0.64,292,0.476,293,1.507,294,0.64,295,0.64,296,0.541,297,0.64,298,0.992,299,1.633,300,2.256,301,0.655,302,0.875,303,0.64,304,1.177,305,0.476,306,0.64,307,0.541,308,0.64,309,1.507,310,0.64,311,1.633,312,1.215,313,2.368,314,0.875,315,1.959,316,1.3,317,2.368,318,0.875,319,0.476,320,0.64,321,1.091,322,0.64,323,5.082,324,2.026,325,1.959,326,0.64,327,0.64,328,0.64,329,1.177,330,0.428,331,0.541,332,1.381,333,0.64,334,0.64,335,1.381,336,1.091,337,1.091,338,0.64,339,1.177,340,0.541,341,0.64,342,0.541,343,2.117,344,0.64,345,0.64,346,0.64,347,0.64,348,1.633,349,1.633,350,1.177,351,0.64,352,0.715,353,0.64,354,0.64,355,0.64,356,1.23,357,0.305,358,0.356,359,0.64,360,0.64,361,0.541,362,0.995,363,1.438,364,1.23,365,0.541,366,0.875,367,0.476,368,1.215,369,0.541,370,0.541,371,1.393,372,0.541,373,0.541,374,0.875,375,1.23,376,1.959,377,0.715,378,0.541,379,0.389,380,0.541,381,0.786,382,0.715,383,0.875,384,0.476,385,0.64,386,0.64,387,0.64,388,0.428,389,1.62,390,0.64,391,0.64,392,0.786,393,0.476,394,0.64,395,0.875,396,0.995,397,0.875,398,0.64,399,0.995,400,1.177,401,0.995,402,1.381,403,0.995,404,0.64,405,1.215,406,0.541,407,1.633,408,1.381,409,0.541,410,1.177,411,1.177,412,0.64,413,0.875,414,0.64,415,0.64,416,0.64,417,1.883,418,0.995,419,1.04,420,0.715,421,0.541,422,1.215,423,0.541,424,2.026,425,2.459,426,0.64,427,0.995,428,0.541,429,0.64,430,1.177,431,0.356,432,0.541,433,0.541,434,0.64,435,0.389,436,2.254,437,0.64,438,1.713,439,0.283,440,1.215,441,0.64,442,2.571,443,0.995,444,1.126,445,0.64,446,2.368,447,1.126,448,0.64,449,0.64,450,2.026,451,0.875,452,0.541,453,1.177,454,1.713,455,2.026,456,0.541,457,0.995,458,0.428,459,0.786,460,1.985,461,0.995,462,0.541,463,0.64,464,0.356,465,0.64,466,1.177,467,0.541,468,0.64,469,1.485,470,2.371,471,0.64,472,1.782,473,0.64,474,0.655,475,0.64,476,0.541,477,2.256,478,1.633,479,0.715,480,3.424,481,0.541,482,0.452,483,1.177,484,1.177,485,0.428,486,0.305,487,0.64,488,0.476,489,0.655,490,0.64,491,1.633,492,0.64,493,0.389,494,0.389,495,1.215,496,2.026,497,1.381,498,0.541,499,0.541,500,0.541,501,0.64,502,1.633,503,0.64,504,0.64,505,0.541,506,0.64,507,0.64,508,0.329,509,0.64,510,1.507,511,0.64,512,0.995,513,0.541,514,0.64,515,0.995,516,0.64,517,0.541,518,0.428,519,0.786,520,0.389,521,0.64,522,0.64,523,1.381,524,1.177,525,0.875,526,0.875,527,0.64,528,0.64,529,0.541,530,0.64,531,0.64,532,0.64,533,0.64,534,0.64,535,0.64,536,0.64,537,0.64,538,0.64,539,0.541,540,0.64,541,0.428,542,1.507,543,0.64,544,0.64,545,0.428,546,0.64,547,0.541,548,0.541,549,0.64,550,0.64]],["t/1007",[0,1.976,1,1.329,3,0.79,19,0.89,26,1.41,39,1.144,41,0.831,42,3.65,43,3.615,44,2.169,45,2.06,51,0.3,54,0.531,60,1.636,61,2.753,93,3.277,94,2.04,130,2.252,162,2.433,169,2.247,180,1.422,183,1.088,228,1.324,240,1.9,249,2.471,254,1.76,274,2.334,276,2.247,278,3.263,301,2.06,321,2.471,336,2.471,337,2.471,357,1.76,515,4.149,517,3.129,518,2.471,551,3.7,552,3.7,553,4.906,554,3.7,555,3.7,556,4.094,557,3.7,558,3.7,559,3.7,560,4.906,561,3.7,562,2.06,563,4.906,564,3.7,565,3.7,566,3.7,567,4.149,568,2.753]],["t/1009",[11,1.259,12,1.096,38,2.177,39,0.893,51,0.279,60,2.023,91,1.346,94,1.438,130,1.758,181,2.314,182,2.314,184,3.412,185,2.159,188,1.758,197,1.446,216,3.404,239,4.18,240,2.885,241,3.869,242,3.869,243,3.869,244,3.869,245,3.869,246,3.404,279,1.884,290,2.314,293,3.404,569,4.576,570,4.576,571,4.576,572,3.869,573,5.619,574,4.576,575,4.576]],["t/1011",[0,1.996,3,0.542,6,1.555,12,1.153,19,0.908,22,0.908,24,3.315,39,1.085,51,0.304,52,1.669,54,0.542,94,1.747,168,3.02,181,1.555,185,1.451,223,2.365,252,1.462,264,2.365,274,1.796,278,2.768,290,1.555,300,4.205,335,3.193,352,2.293,356,2.293,396,4.205,397,2.809,399,3.193,401,3.193,403,4.701,405,4.395,406,4.205,408,3.193,413,3.699,431,2.103,460,4.395,500,3.193,510,3.699,529,3.193,576,3.321,577,3.776,578,3.776,579,3.776,580,3.776,581,3.776,582,3.193]],["t/1013",[0,2.122,3,0.484,6,2.433,12,0.658,17,1.732,19,1.467,20,1.389,22,1.358,24,2.902,30,1.491,39,0.899,41,0.758,47,2.192,51,0.206,54,0.484,59,2.508,60,1.491,81,3.428,91,1.355,162,1.491,185,1.771,188,1.296,190,1.604,198,2.566,251,1.877,252,1.355,254,1.604,255,2.508,262,3.897,263,2.252,264,2.684,275,1.351,283,2.037,290,1.389,315,3.769,318,2.508,356,2.048,389,2.799,428,2.851,431,1.877,442,1.877,469,1.877,470,2.799,472,2.252,520,2.799,545,3.078,576,2.252,583,3.372,584,2.851,585,2.851,586,3.428,587,3.428,588,4.997,589,3.906,590,3.372,591,4.609,592,3.372,593,3.897,594,3.372,595,3.372,596,3.372,597,3.372,598,3.372,599,0.707,600,3.428,601,2.851,602,2.851,603,2.508,604,2.851,605,2.851,606,2.851,607,2.508,608,2.508,609,2.851,610,2.851,611,2.851,612,2.851]],["t/1015",[0,2.348,3,0.49,6,1.406,12,0.666,20,1.406,22,0.821,24,2.698,39,0.907,41,0.767,43,2.942,47,2.211,51,0.208,59,2.539,60,2.054,91,1.004,162,1.509,185,1.786,188,1.312,198,1.901,227,2.887,251,1.901,252,1.367,254,1.624,263,2.28,264,2.698,274,2.513,275,1.36,278,2.588,283,2.336,290,1.406,315,3.529,343,3.104,356,2.073,389,2.073,413,2.539,431,1.901,439,1.509,442,1.901,469,1.901,470,2.822,472,2.28,493,2.073,545,3.529,576,2.28,584,2.887,585,2.887,586,3.457,587,3.457,588,2.887,593,2.887,599,0.715,600,3.457,601,2.887,602,2.887,603,2.539,604,2.887,605,2.887,606,3.93,607,2.539,608,2.539,609,3.93,610,2.887,611,2.887,613,3.414,614,3.414,615,3.414,616,3.414,617,3.414,618,3.414,619,3.414,620,4.648,621,4.648,622,4.648,623,4.648,624,3.414,625,2.887,626,3.414,627,2.539,628,2.539,629,3.414,630,2.887,631,2.539]],["t/1017",[10,1.494,20,1.714,24,3.165,39,1.136,50,2.779,60,1.839,81,3.095,94,1.83,95,2.317,162,1.839,182,1.714,185,2.035,188,1.599,198,2.317,223,1.979,251,2.317,252,1.557,264,3.011,274,1.979,290,1.714,318,3.095,392,2.779,393,3.095,431,2.317,447,1.979,510,4.332,572,3.519,576,2.779,586,3.939,587,3.939,589,4.332,599,0.872,600,3.939,607,3.095,608,3.095,612,3.519,632,4.161,633,3.095,634,4.161,635,4.161,636,5.295,637,5.295]],["t/1019",[0,1.535,1,1.35,2,1.276,3,0.435,6,1.548,9,1.276,10,0.686,11,1.719,12,1.335,13,1.919,14,0.734,16,2.191,19,0.46,20,0.787,22,1.029,25,0.833,26,0.46,31,1.276,34,2.252,35,1.421,36,1.276,38,0.909,39,0.591,41,1.362,44,0.845,47,2.47,51,0.285,52,0.845,53,0.833,54,0.614,58,1.064,91,1.257,92,1.421,94,0.6,95,2.38,128,0.642,130,1.163,163,2.56,180,0.734,183,0.562,185,1.444,186,1.276,188,0.734,189,2.892,190,2.034,197,0.967,228,0.46,237,1.616,267,1.16,275,0.779,276,1.16,279,0.787,283,1.89,290,1.246,298,1.16,305,1.421,309,1.421,321,2.022,343,2.856,352,1.838,361,3.178,371,1.246,392,1.276,395,1.421,397,1.421,427,1.616,432,1.616,442,3.228,443,1.616,444,0.909,447,0.909,458,1.276,462,1.616,469,1.685,470,1.838,482,1.163,486,0.909,494,1.838,495,3.467,520,1.16,547,1.616,556,1.421,568,1.421,582,1.616,599,0.4,625,2.56,627,2.252,628,2.252,638,1.616,639,1.616,640,1.911,641,1.616,642,1.911,643,3.181,644,3.615,645,2.56,646,4.987,647,2.56,648,3.615,649,1.911,650,1.276,651,1.911,652,1.616,653,2.56,654,1.911,655,1.911,656,1.616,657,5.194,658,1.911,659,1.911,660,1.911,661,4.276,662,1.911,663,3.178,664,1.911,665,3.027,666,1.616,667,1.911,668,3.759,669,1.616,670,1.616,671,2.252,672,1.911,673,1.276,674,1.616,675,3.027,676,1.911,677,1.911,678,1.911,679,3.027,680,3.027,681,1.911,682,1.911,683,1.616,684,1.911,685,1.911,686,1.911,687,1.911,688,1.911,689,3.759,690,3.027,691,3.027,692,1.911,693,1.911,694,1.911,695,1.911,696,1.911,697,1.911,698,1.911,699,1.911,700,3.027,701,1.911,702,3.027,703,1.911,704,3.027,705,1.911,706,1.616,707,1.421,708,1.616,709,1.616,710,1.911,711,1.911,712,1.421,713,1.421,714,1.911,715,1.911,716,1.911,717,1.616]],["t/1021",[3,0.626,12,0.851,25,1.199,26,1.598,37,1.565,39,1.064,45,2.427,51,0.266,53,1.199,54,0.626,75,3.686,79,3.311,116,1.565,145,3.242,177,1.927,178,3.242,179,1.464,252,1.282,254,2.073,267,3.311,279,1.795,301,3.035,374,3.242,376,3.642,422,3.242,435,3.311,436,3.035,482,1.675,486,2.073,519,3.642,718,3.242,719,4.359,720,3.686,721,4.359,722,3.686,723,3.686,724,3.686,725,3.686,726,4.359,727,3.686,728,3.686,729,4.359]],["t/1023",[1,0.904,3,0.537,6,1.54,8,2.498,10,0.904,11,0.693,12,0.871,13,1.54,16,1.113,17,1.293,19,0.606,22,1.074,25,0.693,26,0.606,37,1.603,41,1.003,53,1.36,54,0.537,56,3.207,60,1.113,67,1.402,76,1.873,91,1.553,93,1.681,94,1.553,109,1.774,116,0.904,123,1.873,127,1.896,128,1.499,130,0.967,140,4.677,142,3.163,165,2.272,177,1.113,179,1.256,183,0.74,197,0.648,269,1.681,275,1.424,278,1.402,279,1.838,290,2.035,298,2.711,302,1.873,340,2.129,352,2.272,357,2.123,363,1.529,364,1.529,371,1.037,375,3.36,376,3.527,377,3.001,378,2.129,379,3.207,380,2.129,381,2.498,382,2.711,383,3.321,384,3.321,389,1.529,420,1.529,431,1.402,439,1.113,444,2.123,464,1.402,489,1.402,508,2.942,526,1.873,541,1.681,599,0.935,603,2.783,643,1.873,707,1.873,718,1.873,730,1.873,731,2.517,732,2.129,733,2.517,734,2.517,735,2.129,736,4.464,737,4.942,738,2.129,739,2.517,740,2.517,741,2.517,742,3.163,743,1.681,744,2.129,745,2.517,746,2.129,747,1.873,748,2.517,749,3.163,750,1.873,751,2.517,752,1.529,753,2.517,754,2.129,755,3.741,756,1.873,757,2.129,758,1.529,759,2.517,760,2.517,761,2.517,762,2.129,763,2.517,764,1.529,765,2.129,766,1.873,767,3.741,768,2.517,769,2.517,770,2.517,771,2.517,772,2.517,773,2.517,774,2.129,775,2.517,776,2.129,777,2.517,778,2.517,779,2.517,780,1.681,781,2.129,782,1.873,783,1.681,784,2.517,785,2.517,786,2.517]],["t/1025",[1,1.171,2,2.179,3,0.647,6,1.343,10,1.618,11,1.24,12,1.14,13,1.343,14,1.254,20,1.343,22,1.084,26,0.785,38,1.552,39,0.637,40,1.981,41,1.25,51,0.275,53,1.42,54,0.468,109,1.618,113,2.281,127,1.171,128,1.513,130,1.254,140,3.351,149,2.179,168,1.981,177,1.991,179,1.733,189,2.508,223,1.552,228,1.084,249,3.447,254,1.552,267,3.134,268,2.427,275,1.159,283,1.442,358,3.446,371,1.855,377,1.981,379,1.981,417,2.508,419,2.313,433,2.759,459,3.717,479,1.981,482,1.254,485,2.179,508,2.313,562,2.508,709,2.759,718,2.427,730,3.351,738,2.759,746,3.81,747,4.14,749,3.81,756,2.427,766,4.344,782,3.351,787,3.262,788,4.505,789,3.262,790,3.81,791,3.262,792,3.262,793,3.262,794,2.759,795,3.262,796,2.759,797,3.262,798,3.262,799,3.262,800,3.262,801,3.262,802,3.262,803,3.262,804,2.759,805,3.262,806,3.262,807,3.262,808,3.262,809,2.427,810,3.262]],["t/1027",[25,1.438,37,1.877,41,1.174,116,1.877,127,1.877,128,1.755,316,2.009,358,2.91,439,2.31,464,2.91,758,3.174,811,6.084,812,5.227]],["t/1029",[6,1.247,14,2.071,16,2.382,19,0.729,22,1.459,26,1.029,41,0.961,51,0.261,53,0.833,56,1.839,74,2.023,79,3.957,85,1.839,89,3.582,91,0.891,95,2.382,114,4.388,116,1.088,127,1.536,128,1.017,164,2.253,183,1.258,228,1.193,240,2.547,264,1.441,269,2.023,279,1.247,290,1.762,301,1.687,315,2.857,316,2.33,319,2.253,336,3.312,337,3.312,357,1.441,362,4.556,363,3.76,364,2.598,365,2.561,366,2.253,367,2.253,368,4.606,369,2.561,370,2.561,371,2.497,372,3.617,373,3.617,444,1.441,464,1.687,474,1.687,482,1.164,489,1.687,599,1.039,633,2.253,669,2.561,673,2.857,752,1.839,758,1.839,764,1.839,783,2.023,794,4.194,813,3.029,814,1.839,815,2.023,816,2.253,817,2.561,818,2.561,819,3.029,820,2.561,821,3.617,822,3.029,823,3.029,824,3.029,825,3.029,826,4.959,827,3.029,828,3.029,829,3.029]],["t/1031",[13,2.154,16,1.805,25,1.124,41,0.918,51,0.249,53,1.124,67,2.274,116,1.879,127,2.186,128,1.372,197,1.347,223,2.489,228,0.983,254,1.943,275,1.567,316,1.569,357,1.943,371,1.682,375,3.822,377,3.177,384,3.038,439,1.805,474,2.274,519,2.728,541,2.728,599,0.856,722,5.322,742,3.454,752,2.48,758,2.48,764,2.48,830,4.084,831,5.232,832,3.038,833,4.084,834,3.038,835,4.084,836,4.084,837,5.773,838,5.773,839,5.773,840,4.084,841,4.084,842,4.084,843,4.084,844,4.084,845,3.038]],["t/1033",[11,1.416,12,0.777,25,1.569,37,1.429,41,1.281,51,0.314,58,2.216,66,2.961,91,1.171,113,1.76,179,1.915,180,1.53,183,1.171,197,1.025,228,1.502,275,1.325,276,2.417,283,2.275,316,1.53,325,2.659,336,2.659,337,2.659,352,2.417,357,2.448,363,3.125,364,2.417,366,2.961,374,4.645,375,3.125,425,2.417,435,2.417,451,2.961,488,2.961,489,2.216,508,2.643,599,1.308,752,2.417,764,3.125,832,2.961,846,3.981,847,4.352,848,3.981,849,3.366,850,3.981,851,3.981,852,3.981,853,3.981,854,3.981,855,3.981,856,3.981,857,3.981,858,3.366]],["t/1035",[12,1.111,20,1.924,22,1.124,25,1.286,37,2.044,53,1.286,56,2.838,67,2.602,127,1.678,128,1.569,177,2.066,197,1.465,228,1.124,252,1.374,330,3.121,379,2.838,417,3.417,489,2.602,508,2.399,723,3.951,730,3.476,743,3.121,747,3.476,758,2.838,815,3.121,859,4.673,860,4.673,861,3.951,862,4.673,863,4.673,864,3.951,865,4.673,866,4.813]],["t/1037",[44,2.617,45,3.296,51,0.305,53,1.373,67,2.778,113,2.206,179,2.12,252,1.467,267,3.03,268,3.712,269,3.333,270,4.22,444,2.374,457,4.22,508,2.562,599,1.046,724,4.22,867,5.921,868,4.99]],["t/1039",[1,0.666,3,0.765,11,0.814,12,1.282,13,1.732,14,1.137,16,1.307,17,0.953,20,0.764,22,0.447,24,0.883,25,1.157,26,1.449,37,0.666,39,1.04,41,1.1,44,2.031,51,0.314,53,1.157,54,0.737,56,1.127,58,1.647,61,2.2,67,1.033,74,1.24,76,1.381,83,1.033,91,0.546,94,0.929,109,1.324,113,1.63,127,1.324,128,0.623,130,0.713,162,0.82,165,1.127,168,1.127,169,2.239,177,2.031,179,1.966,180,1.417,183,1.084,188,1.765,195,1.976,197,0.949,223,1.407,228,1.012,251,1.033,252,1.351,263,1.976,275,1.26,276,1.127,279,0.764,298,1.796,309,1.381,312,1.381,316,1.417,325,2.463,330,1.24,357,1.407,358,2.053,371,1.518,375,1.796,379,1.127,382,1.796,388,1.24,420,1.127,425,3.118,435,2.239,436,2.342,439,2.031,444,2.614,447,0.883,456,1.57,464,1.647,482,0.713,485,1.976,486,0.883,489,1.033,508,1.893,518,1.976,519,1.24,520,1.127,525,1.381,526,1.381,542,1.381,562,1.033,599,0.881,631,2.2,666,1.57,671,1.381,673,1.24,743,1.976,750,2.743,754,1.57,765,1.57,766,2.2,774,1.57,776,2.501,780,1.24,790,2.501,796,2.501,809,1.381,814,1.127,816,1.381,864,1.57,869,1.856,870,2.501,871,1.856,872,1.856,873,1.856,874,1.856,875,1.856,876,3.688,877,1.856,878,1.856,879,2.501,880,1.57,881,1.856,882,1.856,883,1.57,884,1.57,885,1.57,886,5.495,887,1.856,888,1.856,889,1.856,890,1.856,891,1.856,892,3.557,893,1.57,894,2.958,895,1.856,896,1.976,897,1.856,898,1.856,899,2.958,900,1.856,901,1.57,902,1.381,903,1.57,904,1.856,905,1.57,906,2.958,907,1.856,908,1.856,909,1.856,910,1.856,911,1.856,912,1.856,913,2.958,914,1.856,915,1.856,916,1.856,917,1.57,918,1.856,919,2.501,920,2.501,921,1.57,922,1.856,923,2.958,924,1.856,925,1.57,926,1.856,927,3.688,928,1.856,929,2.501,930,1.57,931,1.856,932,1.57,933,1.856,934,2.958,935,1.856,936,1.856,937,1.856,938,1.856,939,1.856,940,1.856,941,1.856,942,1.57,943,1.856,944,1.856]],["t/1041",[1,0.779,2,1.45,3,0.828,5,3.409,11,1.261,12,1.187,14,0.834,15,2.487,16,0.959,19,0.522,20,0.894,25,1.122,26,1.19,30,0.959,33,1.114,36,1.45,41,1.029,44,0.959,51,0.204,52,1.478,54,0.586,58,1.208,83,1.862,85,1.318,89,1.318,91,1.199,94,1.44,109,0.779,123,1.615,127,1.201,141,1.835,148,2.827,149,1.45,155,3.449,156,1.835,162,0.959,169,2.03,177,0.959,178,2.487,179,1.662,183,1.199,184,3.005,185,1.761,190,1.032,195,1.45,197,0.559,201,1.835,204,1.835,228,1.31,249,1.45,255,1.615,264,1.59,275,1.05,279,0.894,301,1.208,305,1.615,316,0.834,319,1.615,325,3.06,357,2.18,358,1.208,367,1.615,371,1.679,382,2.03,402,1.835,409,1.835,417,2.551,418,3.449,419,1.114,420,1.318,421,1.835,422,3.889,423,1.835,425,3.503,435,2.03,436,1.862,438,2.827,439,1.478,440,3.409,444,1.032,447,1.032,451,1.615,454,1.835,458,1.45,467,1.835,469,1.862,474,1.208,481,1.835,482,0.834,486,1.94,493,1.318,520,1.318,525,1.615,539,1.835,545,1.45,548,1.835,562,1.208,567,1.835,568,2.487,599,0.455,627,1.615,650,1.45,653,1.835,670,1.835,671,1.615,674,1.835,683,1.835,732,1.835,735,2.827,744,1.835,764,1.318,804,1.835,818,1.835,820,1.835,821,1.835,847,1.835,870,1.835,879,1.835,883,1.835,884,1.835,885,2.827,896,1.45,917,1.835,925,1.835,929,3.449,930,1.835,942,1.835,945,3.344,946,3.344,947,3.344,948,2.17,949,2.17,950,2.17,951,2.17,952,2.17,953,2.17,954,2.17,955,2.17,956,3.344,957,3.344,958,2.827,959,2.827,960,2.17,961,2.17,962,2.17,963,2.17,964,2.17,965,2.17,966,2.17,967,2.17,968,2.17,969,3.344,970,2.17,971,2.17,972,2.17,973,2.17,974,2.17,975,2.17,976,2.17,977,2.17,978,2.17,979,2.17,980,2.17,981,2.17,982,2.17,983,2.17,984,2.17,985,2.17,986,2.17,987,2.17,988,2.17,989,2.17,990,3.344,991,1.835,992,2.17,993,2.17,994,2.17,995,2.17,996,2.17,997,2.17,998,1.615,999,2.17,1000,2.17,1001,1.835,1002,2.17,1003,2.17,1004,2.17]],["t/1043",[14,1.593,19,0.997,22,0.997,25,1.141,26,1.399,33,2.129,39,0.809,48,2.517,51,0.323,53,1.141,54,0.595,109,1.897,116,1.897,165,2.517,181,1.707,182,1.707,184,2.517,185,1.593,190,1.972,197,1.359,228,1.473,239,3.084,240,2.129,275,1.575,314,3.084,316,1.593,377,3.208,439,1.833,474,2.308,476,3.506,488,3.084,725,5.722,780,3.528,858,4.916,880,3.506,901,3.506,959,3.506,1005,4.146,1006,4.146,1007,4.146,1008,4.146,1009,4.146,1010,4.146,1011,4.146]],["t/1045",[1,1.494,3,0.76,4,3.095,9,2.779,13,1.714,25,1.602,26,1.001,37,1.494,39,0.812,41,0.935,51,0.323,53,1.145,54,0.836,94,1.308,109,1.901,127,1.494,128,1.397,179,1.778,180,1.599,181,1.714,182,1.714,183,1.712,197,1.363,228,1.523,251,2.317,252,1.224,275,1.578,283,1.839,292,3.095,330,2.779,482,1.599,486,1.979,599,0.872,712,3.095,713,3.095,743,2.779,814,2.527,815,2.779,834,3.095,892,3.519,998,3.095,1012,4.161,1013,4.161,1014,4.161,1015,4.161,1016,3.519,1017,3.519,1018,4.161,1019,4.161,1020,4.161]],["t/1047",[1,1.45,3,0.746,12,1.121,13,2.139,14,1.552,19,0.972,22,0.972,26,0.972,30,1.786,37,1.45,39,1.014,51,0.37,53,1.111,54,0.746,89,3.155,91,1.188,109,1.865,113,1.786,128,1.356,177,2.296,183,1.528,197,1.337,228,0.972,252,1.188,275,1.56,363,3.155,364,2.453,368,3.865,371,2.365,382,3.155,486,1.921,599,0.846,673,2.698,712,3.005,713,3.005,727,4.856,782,3.005,783,3.47,814,2.453,832,3.005,834,3.005,861,3.416,866,3.416,932,3.416,998,3.005,1016,3.416,1021,4.039,1022,4.039,1023,4.039,1024,4.039,1025,4.039]],["t/1049",[1,1.547,3,0.618,12,1.056,25,1.489,26,1.036,29,2.877,53,1.185,109,1.943,116,1.547,127,1.547,128,1.447,179,1.447,183,1.267,195,3.615,197,1.393,228,1.036,274,2.049,275,1.598,283,2.744,312,3.204,316,1.655,439,1.904,464,2.398,474,2.398,599,0.903,728,5.52,815,2.877,816,3.204,919,3.642,920,3.642,1026,4.308,1027,4.308,1028,5.412,1029,4.308,1030,4.308,1031,4.308,1032,5.918,1033,4.308,1034,4.308,1035,4.308]],["t/1051",[19,1.2,30,2.206,51,0.386,91,2.008,182,2.055,266,4.22,279,2.438,389,3.595,444,3.003,1036,4.99,1037,4.99,1038,4.99]],["t/1053",[3,0.736,14,1.971,26,1.536,33,2.634,51,0.313,54,0.736,113,2.267,128,2.145,188,1.971,599,1.075,780,3.426,845,3.816,1039,5.129,1040,5.129]],["t/1055",[0,1.707,1,1.707,3,0.682,10,2.362,11,1.582,14,1.827,19,1.143,22,1.143,30,2.101,38,2.735,40,2.886,51,0.29,54,0.682,107,3.536,130,1.827,162,2.542,223,2.261,252,1.398,274,2.261,342,4.019,381,3.175,479,2.886,493,2.886,494,3.492,1041,4.019,1042,5.751]],["t/1057",[0,1.879,3,0.829,10,2.186,11,1.772,19,0.983,22,0.983,38,2.489,41,0.918,44,1.805,51,0.32,54,0.829,74,2.728,130,1.569,168,2.48,197,1.051,252,1.201,260,3.454,275,1.486,298,2.48,388,2.728,419,2.097,447,1.943,479,3.506,493,3.177,494,3.697,599,0.856,717,3.454,781,3.454,809,4.294,849,3.454,1043,4.084,1044,6.088,1045,4.084,1046,4.084,1047,4.084,1048,4.084,1049,4.084,1050,4.084,1051,4.084,1052,4.084,1053,4.084,1054,4.084,1055,4.084,1056,4.084,1057,3.454]],["t/1059",[10,2.207,11,1.4,13,1.822,16,1.405,22,0.764,33,1.632,38,2.981,39,0.993,40,4.09,41,0.714,50,3.399,51,0.366,53,0.874,54,0.456,64,2.122,90,2.687,92,2.364,108,2.364,162,1.405,181,1.309,190,2.104,197,1.31,228,1.224,229,3.399,240,1.632,252,0.934,254,1.511,275,0.818,290,2.382,296,2.687,321,2.955,331,2.687,332,4.303,388,3.399,417,1.769,436,3.064,447,1.511,477,3.741,479,3.09,480,4.303,482,1.221,485,2.122,494,2.686,562,1.769,599,0.666,650,2.122,708,2.687,752,2.686,921,3.741,958,3.741,1058,4.424,1059,5.089,1060,3.178,1061,5.089,1062,3.178,1063,4.424,1064,4.424,1065,4.424,1066,3.178,1067,3.178,1068,3.178,1069,3.178,1070,3.178,1071,3.178,1072,3.178,1073,3.178,1074,3.178,1075,4.424,1076,3.178,1077,4.424,1078,3.178,1079,3.178]],["t/1061",[0,1.446,3,0.886,11,1.427,12,1.323,19,0.67,26,1.138,39,1.074,43,1.55,44,1.231,47,1.324,51,0.289,52,1.231,53,0.766,54,0.869,83,2.242,91,1.184,109,1.446,179,0.935,180,1.548,181,1.659,182,1.659,186,3.675,188,1.818,189,2.635,190,1.324,197,1.335,198,1.55,252,1.184,274,1.916,275,1.335,283,1.78,302,2.071,307,3.406,376,2.69,392,3.464,393,2.071,395,2.996,405,2.071,417,2.242,436,1.55,442,2.242,469,1.55,470,1.691,472,1.86,482,1.07,486,1.916,512,4.385,513,3.406,542,2.996,599,0.583,633,2.071,641,2.354,643,2.071,644,2.354,645,2.354,646,4.002,647,2.354,648,3.406,650,1.86,663,2.354,707,2.071,756,2.071,903,3.406,991,2.354,1080,4.028,1081,4.028,1082,4.028,1083,4.028,1084,4.028,1085,4.028,1086,4.028,1087,3.406,1088,4.028,1089,4.732,1090,4.732,1091,2.784,1092,4.028,1093,2.784,1094,2.784,1095,2.784,1096,4.028,1097,2.784,1098,2.784,1099,2.784,1100,2.784,1101,2.784,1102,2.784,1103,2.784,1104,2.784,1105,2.784,1106,2.784,1107,4.028,1108,2.784,1109,2.784]],["t/1063",[3,0.802,8,2.548,10,1.798,11,1.378,17,1.959,19,0.918,22,0.918,25,1.05,31,2.548,34,2.838,35,2.838,36,3.962,37,2.006,39,0.745,43,2.124,46,2.548,51,0.376,52,2.213,54,0.719,63,3.226,91,1.122,169,2.317,176,4.233,180,1.466,185,1.466,189,2.124,228,1.482,264,1.815,278,2.124,292,2.838,293,3.724,316,1.466,343,3.962,356,2.317,358,2.124,383,2.838,419,1.959,459,3.344,460,2.838,461,3.226,495,2.838,505,3.226,599,0.799,628,2.838,630,4.233,638,3.226,639,3.226,656,3.226,706,3.226,720,3.226,757,3.226,814,2.317,896,2.548,902,2.838,1041,3.226,1110,3.816,1111,3.816,1112,3.816,1113,3.816,1114,5.006,1115,3.226,1116,3.816,1117,5.006,1118,3.816]],["t/1065",[0,1.823,6,2.09,9,2.603,10,1.399,11,1.072,19,1.221,22,1.439,24,1.853,25,1.807,26,1.221,29,3.39,39,0.76,45,2.169,47,1.853,49,3.295,51,0.238,52,1.722,54,0.559,95,2.169,179,1.308,183,1.146,188,1.497,228,1.221,229,2.603,279,2.09,301,2.169,316,1.497,371,1.605,419,2.606,420,2.366,425,3.632,440,2.899,442,2.169,452,3.295,458,2.603,459,2.603,482,1.497,523,3.295,541,2.603,556,2.899,562,2.169,762,3.295,893,3.295,896,3.39,1001,3.295,1017,3.295,1057,3.295,1115,4.292,1119,3.897,1120,3.897,1121,3.897,1122,3.897,1123,3.897,1124,3.897,1125,3.897,1126,3.897,1127,3.897,1128,3.897,1129,3.897,1130,3.897,1131,3.897,1132,3.897,1133,3.897]],["t/1067",[0,2.363,3,0.638,12,0.868,17,2.283,19,1.444,47,2.115,51,0.272,116,1.597,177,1.966,314,3.308,381,3.687,419,2.835,447,2.626,497,4.668,498,3.76,499,3.76,518,2.97,589,3.308,599,0.932,631,3.308,652,3.76,750,4.106,783,2.97,817,3.76,845,3.308,902,3.308,905,3.76,1087,3.76,1134,6.004,1135,4.447,1136,6.004,1137,4.447,1138,4.447,1139,4.447,1140,4.447]]],"invertedIndex":[["",{"_index":12,"t":{"989":{"position":[[119,1],[559,4]]},"997":{"position":[[92,1],[459,1],[493,1]]},"1001":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[312,1],[320,4],[325,1],[330,1],[570,1],[697,1],[706,1],[728,1],[730,1]]},"1003":{"position":[[83,1],[85,1]]},"1005":{"position":[[71,2],[796,1],[1237,1],[1360,3],[1711,4],[1716,2],[1825,1],[1906,1],[1994,1],[2456,2],[2673,1],[2675,1],[2753,1],[2755,1],[2859,1],[3380,1],[3519,1],[4332,2],[6580,2],[6649,1],[7095,2],[7737,1],[8393,1],[10239,1],[10270,1],[11299,1],[11637,1],[11719,1],[11785,1],[12438,1],[12790,2]]},"1009":{"position":[[147,1],[149,1]]},"1011":{"position":[[215,1],[241,1],[278,1],[343,1]]},"1013":{"position":[[895,1]]},"1015":{"position":[[750,1]]},"1019":{"position":[[242,1],[272,4],[317,1],[513,1],[557,1],[629,1],[640,1],[655,1],[796,1],[879,3],[912,1],[923,1],[925,1],[969,1],[988,1],[1050,1],[1282,1],[1468,1],[1644,1],[1737,1],[1803,1],[1901,1],[2080,1],[2161,1],[2266,2],[2269,3],[2273,5],[2279,1],[2396,1],[2398,1],[2494,1],[2582,1],[2612,1],[2656,4],[2665,2],[3338,1],[3419,1],[3448,2],[3451,2],[3484,1],[3496,2],[3523,2],[3556,5],[3566,1]]},"1021":{"position":[[209,1]]},"1023":{"position":[[1269,1],[2550,1],[2571,2]]},"1025":{"position":[[202,1],[317,1],[526,1],[777,1],[953,1]]},"1033":{"position":[[448,2]]},"1035":{"position":[[366,1],[396,1]]},"1039":{"position":[[39,1],[2366,1],[2387,1],[2447,1],[2498,1],[2500,1],[2543,1],[2545,1],[2568,1],[2591,1],[2618,1],[2638,1],[2668,1],[3726,1],[3747,1],[3804,1],[3860,1],[3862,1],[3900,1],[3902,1],[3918,1],[3939,1],[3964,1],[3984,1],[4005,1],[4033,1],[4110,1]]},"1041":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"1047":{"position":[[213,1],[238,1],[259,1]]},"1049":{"position":[[400,2],[458,2]]},"1061":{"position":[[269,1],[304,1],[340,1],[376,1],[411,1],[433,1],[456,1],[473,1],[491,1],[627,4],[1264,1],[1465,1],[1467,1],[1679,2],[1778,1],[1813,1],[1849,1],[1871,1],[1894,1],[1911,1],[1934,1],[1952,1]]},"1067":{"position":[[316,1]]}}}],["0",{"_index":299,"t":{"1005":{"position":[[1430,1],[4592,1],[4605,1]]}}}],["0.0.0.0:4180",{"_index":944,"t":{"1039":{"position":[[4112,14]]}}}],["0.001",{"_index":624,"t":{"1015":{"position":[[884,5]]}}}],["0400",{"_index":587,"t":{"1013":{"position":[[241,5],[1083,4]]},"1015":{"position":[[122,5],[1171,4]]},"1017":{"position":[[267,5],[593,4]]}}}],["1",{"_index":302,"t":{"1005":{"position":[[1475,3],[12290,4]]},"1023":{"position":[[2289,1]]},"1061":{"position":[[1630,2]]}}}],["100",{"_index":416,"t":{"1005":{"position":[[4688,3]]}}}],["12",{"_index":629,"t":{"1015":{"position":[[1048,2]]}}}],["123456.apps.googleusercontent.com",{"_index":277,"t":{"1005":{"position":[[592,35]]}}}],["127.0.0.1:4180",{"_index":393,"t":{"1005":{"position":[[4092,16]]},"1017":{"position":[[732,14]]},"1061":{"position":[[664,14]]}}}],["128",{"_index":1064,"t":{"1059":{"position":[[383,3],[434,3]]}}}],["168h0m0",{"_index":288,"t":{"1005":{"position":[[1039,8]]}}}],["19/mar/2015:17:20:19",{"_index":586,"t":{"1013":{"position":[[218,21],[1061,20]]},"1015":{"position":[[99,21],[1149,20]]},"1017":{"position":[[244,21],[571,20]]}}}],["192",{"_index":233,"t":{"1001":{"position":[[644,3]]}}}],["1h",{"_index":761,"t":{"1023":{"position":[[919,4]]}}}],["1s",{"_index":346,"t":{"1005":{"position":[[2571,4]]}}}],["2",{"_index":526,"t":{"1005":{"position":[[11761,3],[12366,4]]},"1023":{"position":[[1510,1]]},"1039":{"position":[[2765,2]]}}}],["2.0",{"_index":864,"t":{"1035":{"position":[[213,3]]},"1039":{"position":[[35,3]]}}}],["200",{"_index":630,"t":{"1015":{"position":[[1097,3]]},"1063":{"position":[[223,3],[336,3]]}}}],["202",{"_index":639,"t":{"1019":{"position":[[131,3]]},"1063":{"position":[[868,3]]}}}],["2048",{"_index":961,"t":{"1041":{"position":[[1052,4]]}}}],["24",{"_index":231,"t":{"1001":{"position":[[630,2]]}}}],["2>&1",{"_index":172,"t":{"997":{"position":[[488,4]]}}}],["2>/dev/nul",{"_index":211,"t":{"1001":{"position":[[227,11]]}}}],["3",{"_index":801,"t":{"1025":{"position":[[1119,2]]}}}],["3/4",{"_index":532,"t":{"1005":{"position":[[12063,3]]}}}],["30",{"_index":1107,"t":{"1061":{"position":[[1652,3],[1675,3]]}}}],["32",{"_index":219,"t":{"1001":{"position":[[309,2],[578,2],[708,2]]}}}],["3650",{"_index":971,"t":{"1041":{"position":[[1175,4]]}}}],["401",{"_index":34,"t":{"989":{"position":[[403,3]]},"1019":{"position":[[158,3],[965,3]]},"1063":{"position":[[895,3]]}}}],["4180",{"_index":1095,"t":{"1061":{"position":[[979,5]]}}}],["443",{"_index":395,"t":{"1005":{"position":[[4177,6],[12637,3]]},"1019":{"position":[[251,3]]},"1061":{"position":[[909,3],[1273,3]]}}}],["4kb",{"_index":665,"t":{"1019":{"position":[[1733,3],[1938,4]]}}}],["5",{"_index":778,"t":{"1023":{"position":[[1988,1]]}}}],["6",{"_index":803,"t":{"1025":{"position":[[1155,2]]}}}],["7",{"_index":412,"t":{"1005":{"position":[[4521,1]]}}}],["74.125.224.72",{"_index":601,"t":{"1013":{"position":[[808,13]]},"1015":{"position":[[663,13]]}}}],["80",{"_index":546,"t":{"1005":{"position":[[12623,3]]}}}],["_",{"_index":216,"t":{"1001":{"position":[[279,3],[327,2],[732,3]]},"1003":{"position":[[104,4]]},"1009":{"position":[[168,4]]}}}],["__host",{"_index":294,"t":{"1005":{"position":[[1216,7]]}}}],["__secur",{"_index":295,"t":{"1005":{"position":[[1228,8]]}}}],["_oauth2_proxi",{"_index":296,"t":{"1005":{"position":[[1266,15]]},"1059":{"position":[[338,14]]}}}],["_oauth2_proxy_1",{"_index":715,"t":{"1019":{"position":[[3951,18]]}}}],["abov",{"_index":612,"t":{"1013":{"position":[[1324,5]]},"1017":{"position":[[45,5]]}}}],["accept",{"_index":31,"t":{"989":{"position":[[363,7]]},"1005":{"position":[[9089,8]]},"1019":{"position":[[135,8]]},"1063":{"position":[[872,8]]}}}],["access",{"_index":371,"t":{"1005":{"position":[[3333,6],[5560,6],[5630,6],[5714,6],[6496,6],[7324,6],[9542,6],[9571,6],[11543,6]]},"1019":{"position":[[1306,6],[1447,6]]},"1023":{"position":[[1746,7]]},"1025":{"position":[[447,6],[622,7]]},"1029":{"position":[[296,7],[924,6],[999,6],[1036,6],[1186,6],[1217,6],[1306,6]]},"1031":{"position":[[40,6]]},"1039":{"position":[[1651,6],[1710,7],[2284,6]]},"1041":{"position":[[305,7],[2650,6],[3170,10]]},"1047":{"position":[[528,6],[638,6],[673,6]]},"1065":{"position":[[214,9]]}}}],["access_by_lua_block",{"_index":701,"t":{"1019":{"position":[[3399,19]]}}}],["access_token",{"_index":441,"t":{"1005":{"position":[[5589,12]]}}}],["accompani",{"_index":819,"t":{"1029":{"position":[[382,11]]}}}],["account",{"_index":382,"t":{"1005":{"position":[[3797,7],[3841,7]]},"1023":{"position":[[977,7],[1091,8],[2388,7]]},"1039":{"position":[[948,8],[3087,8]]},"1041":{"position":[[260,8],[737,7]]},"1047":{"position":[[204,7],[487,7]]}}}],["acr",{"_index":253,"t":{"1005":{"position":[[34,3]]}}}],["activ",{"_index":788,"t":{"1025":{"position":[[66,6],[592,6]]}}}],["actual",{"_index":713,"t":{"1019":{"position":[[3721,6]]},"1045":{"position":[[221,6]]},"1047":{"position":[[124,6]]}}}],["ad",{"_index":45,"t":{"989":{"position":[[637,5]]},"1005":{"position":[[8976,2],[9587,5]]},"1007":{"position":[[750,6]]},"1021":{"position":[[289,2]]},"1037":{"position":[[4,6],[49,2]]},"1065":{"position":[[939,5]]}}}],["add",{"_index":113,"t":{"995":{"position":[[148,3]]},"1001":{"position":[[332,3]]},"1005":{"position":[[5690,4],[12715,3]]},"1025":{"position":[[0,3],[809,3],[979,3]]},"1033":{"position":[[79,3]]},"1037":{"position":[[74,3]]},"1039":{"position":[[1296,3],[1643,3],[1874,3]]},"1047":{"position":[[0,3]]},"1053":{"position":[[80,3]]}}}],["add_head",{"_index":663,"t":{"1019":{"position":[[1608,10],[2496,10],[2539,10]]},"1061":{"position":[[1402,10]]}}}],["addit",{"_index":673,"t":{"1019":{"position":[[1968,10]]},"1029":{"position":[[206,10],[775,8]]},"1039":{"position":[[1373,10]]},"1047":{"position":[[559,10]]}}}],["addition",{"_index":385,"t":{"1005":{"position":[[3889,12]]}}}],["addr>:/oauth2/callback",{"_index":1020,"t":{"1045":{"position":[[611,24]]}}}],["health",{"_index":461,"t":{"1005":{"position":[[6994,6],[7081,6]]},"1063":{"position":[[384,6]]}}}],["healthcheck",{"_index":351,"t":{"1005":{"position":[[2790,12]]}}}],["here",{"_index":950,"t":{"1041":{"position":[[344,5]]}}}],["hex",{"_index":1066,"t":{"1059":{"position":[[406,3]]}}}],["histor",{"_index":1043,"t":{"1057":{"position":[[103,13]]}}}],["hit",{"_index":746,"t":{"1023":{"position":[[404,3]]},"1025":{"position":[[668,3],[1023,7]]}}}],["hmac",{"_index":1136,"t":{"1067":{"position":[[142,6],[361,4],[493,4]]}}}],["homepag",{"_index":1012,"t":{"1045":{"position":[[57,9]]}}}],["host",{"_index":283,"t":{"1005":{"position":[[914,4],[6274,4],[6308,4]]},"1013":{"position":[[927,4],[960,4]]},"1015":{"position":[[443,9],[782,4],[815,4]]},"1019":{"position":[[370,4],[375,6],[708,4],[713,6]]},"1025":{"position":[[870,4]]},"1033":{"position":[[41,7],[827,6]]},"1045":{"position":[[606,4]]},"1049":{"position":[[47,4],[495,4],[560,4],[630,4]]},"1061":{"position":[[1520,4],[1525,6]]}}}],["host>/api/v3",{"_index":829,"t":{"1029":{"position":[[1953,13]]}}}],["host>/login/oauth/access_token",{"_index":828,"t":{"1029":{"position":[[1878,31]]}}}],["host>/login/oauth/author",{"_index":827,"t":{"1029":{"position":[[1808,28]]}}}],["host>/oauth2/callback",{"_index":1028,"t":{"1049":{"position":[[144,21],[298,22]]}}}],["host>/realms/:/sign_in",{"_index":465,"t":{"1005":{"position":[[7208,18]]}}}],["oauth2_proxy_",{"_index":569,"t":{"1009":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":574,"t":{"1009":{"position":[[425,27]]}}}],["oauth2_proxy_email_domain",{"_index":575,"t":{"1009":{"position":[[489,27]]}}}],["oauth2_proxy_jwt_key",{"_index":975,"t":{"1041":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":995,"t":{"1041":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":291,"t":{"1005":{"position":[[1154,11]]}}}],["oauthproxy.go",{"_index":1138,"t":{"1067":{"position":[[227,14]]}}}],["obtain",{"_index":538,"t":{"1005":{"position":[[12150,9]]}}}],["occur",{"_index":635,"t":{"1017":{"position":[[187,5]]}}}],["oidc",{"_index":425,"t":{"1005":{"position":[[5097,4],[5209,4],[5254,4],[5364,4],[5455,4],[5476,4],[5526,4],[5794,4],[6528,4],[10572,4],[10599,4],[10656,4],[12361,4]]},"1033":{"position":[[900,4]]},"1039":{"position":[[463,4],[495,4],[608,4],[721,6],[815,4],[884,4],[3029,4]]},"1041":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"1065":{"position":[[481,4],[667,4],[780,4],[889,4]]}}}],["oidc\"redirect_url",{"_index":906,"t":{"1039":{"position":[[2368,18],[3728,18]]}}}],["oidc_issuer_url",{"_index":915,"t":{"1039":{"position":[[2679,15]]}}}],["ok",{"_index":176,"t":{"997":{"position":[[534,2]]},"1063":{"position":[[227,2],[340,2]]}}}],["okoauth2",{"_index":174,"t":{"997":{"position":[[500,8]]}}}],["okta",{"_index":886,"t":{"1039":{"position":[[792,5],[833,5],[903,5],[919,4],[1772,4],[3048,4],[3174,4],[3649,4],[3822,4]]}}}],["old",{"_index":411,"t":{"1005":{"position":[[4507,3],[4567,3]]}}}],["omit",{"_index":549,"t":{"1005":{"position":[[12673,4]]}}}],["on",{"_index":30,"t":{"989":{"position":[[354,3]]},"993":{"position":[[674,4]]},"1001":{"position":[[39,3]]},"1005":{"position":[[347,4],[7481,4],[10517,3]]},"1013":{"position":[[298,3]]},"1041":{"position":[[2206,3]]},"1047":{"position":[[683,3]]},"1051":{"position":[[156,3]]},"1055":{"position":[[187,3]]}}}],["onc",{"_index":123,"t":{"995":{"position":[[421,4]]},"1023":{"position":[[2558,4]]},"1041":{"position":[[2843,4]]}}}],["open",{"_index":76,"t":{"993":{"position":[[113,4]]},"1023":{"position":[[460,4]]},"1039":{"position":[[106,4]]}}}],["openid",{"_index":435,"t":{"1005":{"position":[[5391,6]]},"1021":{"position":[[292,6],[544,6]]},"1033":{"position":[[132,7]]},"1039":{"position":[[0,6],[697,6],[1935,6]]},"1041":{"position":[[862,6],[906,6]]}}}],["openssl",{"_index":201,"t":{"1001":{"position":[[78,7],[288,7]]},"1041":{"position":[[1104,7]]}}}],["option",{"_index":183,"t":{"997":{"position":[[660,8]]},"999":{"position":[[48,8],[148,7]]},"1003":{"position":[[169,6]]},"1005":{"position":[[0,6],[52,9],[803,8],[1306,8],[1537,11],[10059,7],[11923,10],[12226,6],[12403,7],[12840,7]]},"1007":{"position":[[61,6]]},"1019":{"position":[[4097,6]]},"1023":{"position":[[1062,11]]},"1029":{"position":[[276,8],[362,7]]},"1033":{"position":[[679,7]]},"1039":{"position":[[1028,10],[1330,6],[1759,8]]},"1041":{"position":[[1540,8],[2132,7],[3495,7]]},"1045":{"position":[[407,8],[530,7],[706,7]]},"1047":{"position":[[344,8],[584,7]]},"1049":{"position":[[223,7]]},"1065":{"position":[[985,6]]}}}],["order",{"_index":192,"t":{"999":{"position":[[109,5]]}}}],["org",{"_index":362,"t":{"1005":{"position":[[2981,3],[3467,3]]},"1029":{"position":[[534,3],[635,7],[795,4],[1559,3]]}}}],["organ",{"_index":794,"t":{"1025":{"position":[[430,13]]},"1029":{"position":[[259,12],[580,12],[713,12]]}}}],["organis",{"_index":365,"t":{"1005":{"position":[[3027,12]]},"1029":{"position":[[678,12]]}}}],["orgname/repo",{"_index":369,"t":{"1005":{"position":[[3225,12]]},"1029":{"position":[[1150,12]]}}}],["origin",{"_index":754,"t":{"1023":{"position":[[628,7]]},"1039":{"position":[[146,10]]}}}],["os,base64",{"_index":205,"t":{"1001":{"position":[[125,10]]}}}],["otherwis",{"_index":893,"t":{"1039":{"position":[[1210,10]]},"1065":{"position":[[992,9]]}}}],["out",{"_index":896,"t":{"1039":{"position":[[1432,3],[1625,3]]},"1041":{"position":[[1156,3]]},"1063":{"position":[[461,3]]},"1065":{"position":[[17,4],[325,3]]}}}],["output",{"_index":576,"t":{"1011":{"position":[[34,6],[81,6]]},"1013":{"position":[[142,6]]},"1015":{"position":[[23,6]]},"1017":{"position":[[80,6]]}}}],["outsid",{"_index":572,"t":{"1009":{"position":[[326,7]]},"1017":{"position":[[193,7]]}}}],["overrid",{"_index":457,"t":{"1005":{"position":[[6830,8],[8044,8]]},"1037":{"position":[[183,8]]}}}],["override_speci",{"_index":238,"t":{"1001":{"position":[[711,16]]}}}],["overwrit",{"_index":194,"t":{"999":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":1039,"t":{"1053":{"position":[[37,7]]}}}],["pad",{"_index":1068,"t":{"1059":{"position":[[479,9]]}}}],["page",{"_index":459,"t":{"1005":{"position":[[6903,4],[10754,4]]},"1025":{"position":[[332,4],[551,4],[792,4],[962,4]]},"1063":{"position":[[426,5],[465,4]]},"1065":{"position":[[329,4]]}}}],["pair",{"_index":331,"t":{"1005":{"position":[[2256,5]]},"1059":{"position":[[533,4]]}}}],["pane",{"_index":737,"t":{"1023":{"position":[[237,5],[280,5],[321,5],[428,5]]}}}],["paramet",{"_index":556,"t":{"1007":{"position":[[258,10],[1096,10],[1121,9]]},"1019":{"position":[[3773,10]]},"1065":{"position":[[364,10]]}}}],["part",{"_index":668,"t":{"1019":{"position":[[1796,6],[2177,4],[2455,4]]}}}],["particularli",{"_index":571,"t":{"1009":{"position":[[286,12]]}}}],["pass",{"_index":1,"t":{"989":{"position":[[12,7]]},"1005":{"position":[[512,7],[5555,4],[5578,4],[5758,4],[5789,4],[5859,4],[5880,4],[6083,7],[6221,4],[6243,4],[6269,4],[6291,4],[6339,4],[6362,4],[9537,4]]},"1007":{"position":[[71,4]]},"1019":{"position":[[990,4],[1301,4],[1330,4]]},"1023":{"position":[[2104,4]]},"1025":{"position":[[1292,6]]},"1039":{"position":[[1102,6]]},"1041":{"position":[[2283,4]]},"1045":{"position":[[388,4]]},"1047":{"position":[[325,4]]},"1049":{"position":[[204,4]]},"1055":{"position":[[276,6]]}}}],["password",{"_index":273,"t":{"1005":{"position":[[471,8],[491,8],[1827,8],[7966,8],[7988,9],[8057,8],[8113,8],[8144,9],[8204,9],[8234,8]]}}}],["patch",{"_index":135,"t":{"995":{"position":[[601,7]]}}}],["path",{"_index":278,"t":{"1005":{"position":[[753,4],[1291,4],[1322,4],[1749,4],[2369,4],[2405,5],[2463,5],[3821,4],[4869,4],[6656,5],[6937,4],[7158,4],[10142,5],[10342,5],[11209,4],[11256,4],[11356,5],[11450,4]]},"1007":{"position":[[501,5],[703,4],[852,4],[1256,4]]},"1011":{"position":[[854,4],[880,6]]},"1015":{"position":[[162,8],[1014,4]]},"1023":{"position":[[2349,4]]},"1063":{"position":[[279,6]]}}}],["path/to/cert.key",{"_index":1103,"t":{"1061":{"position":[[1383,18]]}}}],["path/to/cert.pem",{"_index":1101,"t":{"1061":{"position":[[1344,18]]}}}],["path/to/sit",{"_index":685,"t":{"1019":{"position":[[2623,15]]}}}],["pem",{"_index":418,"t":{"1005":{"position":[[4724,3],[4901,3]]},"1041":{"position":[[1023,4],[2383,3],[2528,3]]}}}],["per",{"_index":266,"t":{"1005":{"position":[[352,3]]},"1051":{"position":[[166,3]]}}}],["perform",{"_index":887,"t":{"1039":{"position":[[839,7]]}}}],["period",{"_index":341,"t":{"1005":{"position":[[2505,6]]}}}],["permiss",{"_index":782,"t":{"1023":{"position":[[2239,11]]},"1025":{"position":[[538,12],[703,12]]},"1047":{"position":[[176,11]]}}}],["pick",{"_index":790,"t":{"1025":{"position":[[171,4],[349,4]]},"1039":{"position":[[1542,4],[1967,4]]}}}],["pin",{"_index":1097,"t":{"1061":{"position":[[1227,3]]}}}],["ping",{"_index":460,"t":{"1005":{"position":[[6932,4],[6953,4],[7008,7],[7018,4],[9934,4],[9983,4]]},"1011":{"position":[[716,5],[743,4],[791,4],[849,4]]},"1063":{"position":[[318,5]]}}}],["ping,/path2",{"_index":338,"t":{"1005":{"position":[[2441,14]]}}}],["plain",{"_index":692,"t":{"1019":{"position":[[2894,5]]}}}],["platform",{"_index":903,"t":{"1039":{"position":[[1910,8]]},"1061":{"position":[[599,8],[790,8]]}}}],["pleas",{"_index":75,"t":{"993":{"position":[[99,6],[144,6],[346,6],[434,6]]},"1021":{"position":[[425,6]]}}}],["plural",{"_index":244,"t":{"1003":{"position":[[186,6]]},"1009":{"position":[[257,6]]}}}],["poc",{"_index":297,"t":{"1005":{"position":[[1353,6]]}}}],["polici",{"_index":900,"t":{"1039":{"position":[[1658,8]]}}}],["port",{"_index":542,"t":{"1005":{"position":[[12537,5],[12596,4],[12709,5],[12780,5]]},"1039":{"position":[[338,5]]},"1061":{"position":[[904,4],[974,4]]}}}],["possibl",{"_index":66,"t":{"991":{"position":[[165,9]]},"993":{"position":[[467,9]]},"1033":{"position":[[651,8]]}}}],["post",{"_index":80,"t":{"993":{"position":[[158,4]]}}}],["potenti",{"_index":102,"t":{"993":{"position":[[622,9]]}}}],["powershel",{"_index":202,"t":{"1001":{"position":[[86,10]]}}}],["pr",{"_index":78,"t":{"993":{"position":[[130,2]]},"995":{"position":[[373,3]]}}}],["prebuilt",{"_index":143,"t":{"997":{"position":[[34,8],[192,8],[288,8]]}}}],["preced",{"_index":193,"t":{"999":{"position":[[118,11]]}}}],["prefer",{"_index":446,"t":{"1005":{"position":[[5954,9],[6004,6],[6030,6],[6419,9],[9447,9]]}}}],["preferred_usernam",{"_index":729,"t":{"1021":{"position":[[484,18]]}}}],["prefix",{"_index":293,"t":{"1005":{"position":[[1209,6],[7131,6],[11698,6],[12422,8]]},"1009":{"position":[[75,9]]},"1063":{"position":[[136,6],[175,6]]}}}],["preflight",{"_index":501,"t":{"1005":{"position":[[10015,9]]}}}],["present",{"_index":107,"t":{"993":{"position":[[705,7]]},"1005":{"position":[[6544,8],[10874,9],[10990,9]]},"1055":{"position":[[237,7]]}}}],["pretti",{"_index":1005,"t":{"1043":{"position":[[282,6]]}}}],["prevent",{"_index":1051,"t":{"1057":{"position":[[460,7]]}}}],["preview",{"_index":890,"t":{"1039":{"position":[[989,7]]}}}],["previou",{"_index":138,"t":{"995":{"position":[[652,8]]}}}],["previous",{"_index":119,"t":{"995":{"position":[[287,10]]}}}],["print",{"_index":522,"t":{"1005":{"position":[[11590,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":206,"t":{"1001":{"position":[[136,57]]}}}],["privat",{"_index":85,"t":{"993":{"position":[[222,8]]},"995":{"position":[[37,9]]},"1005":{"position":[[4709,7],[4881,7],[11264,7]]},"1029":{"position":[[1048,7]]},"1041":{"position":[[1065,7]]}}}],["process",{"_index":627,"t":{"1015":{"position":[[933,8]]},"1019":{"position":[[2934,9],[2980,9]]},"1041":{"position":[[2587,7]]}}}],["product",{"_index":744,"t":{"1023":{"position":[[370,8]]},"1041":{"position":[[294,10]]}}}],["profil",{"_index":451,"t":{"1005":{"position":[[6469,7],[6488,7]]},"1033":{"position":[[140,7]]},"1041":{"position":[[1992,7]]}}}],["project",{"_index":56,"t":{"991":{"position":[[33,8],[74,7],[204,8]]},"1023":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"1029":{"position":[[13,8]]},"1035":{"position":[[55,8]]},"1039":{"position":[[118,9]]}}}],["prompt",{"_index":258,"t":{"1005":{"position":[[85,6],[6514,6],[6533,7],[6562,6]]}}}],["proper",{"_index":355,"t":{"1005":{"position":[[2871,6]]}}}],["properli",{"_index":850,"t":{"1033":{"position":[[325,9]]}}}],["properti",{"_index":792,"t":{"1025":{"position":[[319,12]]}}}],["propos",{"_index":117,"t":{"995":{"position":[[257,8]]}}}],["protect",{"_index":485,"t":{"1005":{"position":[[8959,9]]},"1025":{"position":[[892,7]]},"1039":{"position":[[1496,11],[1586,8]]},"1059":{"position":[[774,8]]}}}],["protocol",{"_index":545,"t":{"1005":{"position":[[12614,8]]},"1013":{"position":[[973,8],[1003,9]]},"1015":{"position":[[502,13],[828,8],[858,9]]},"1041":{"position":[[842,9]]}}}],["provid",{"_index":26,"t":{"989":{"position":[[309,8],[473,9],[740,8]]},"997":{"position":[[403,8],[546,8],[596,8],[749,8]]},"1005":{"position":[[1465,9],[1870,8],[6585,8],[6607,8],[6625,8],[6724,9],[6801,8],[6920,9],[10715,8],[10901,9],[12306,9],[12822,8]]},"1007":{"position":[[194,9],[353,7],[691,7],[1149,9]]},"1019":{"position":[[4023,8]]},"1021":{"position":[[54,8],[90,10],[195,9],[360,8],[395,8],[450,9],[559,9]]},"1023":{"position":[[2208,8]]},"1025":{"position":[[1190,8]]},"1029":{"position":[[184,8],[1264,7]]},"1039":{"position":[[84,9],[133,8],[307,8],[454,8],[469,8],[500,9],[712,8],[774,9],[820,8],[889,8],[1225,8],[2357,8],[3034,8],[3717,8]]},"1041":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"1043":{"position":[[14,8],[125,9],[528,8]]},"1045":{"position":[[378,9]]},"1047":{"position":[[315,9]]},"1049":{"position":[[323,8]]},"1053":{"position":[[27,9],[61,8],[151,9]]},"1061":{"position":[[89,9],[460,12],[1898,12]]},"1065":{"position":[[169,8],[785,8]]}}}],["provider'",{"_index":458,"t":{"1005":{"position":[[6843,10]]},"1019":{"position":[[1699,10]]},"1041":{"position":[[3422,10]]},"1065":{"position":[[309,10]]}}}],["provider.example.com",{"_index":1133,"t":{"1065":{"position":[[894,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":1126,"t":{"1065":{"position":[[486,36]]}}}],["provider/sign_out_pag",{"_index":1129,"t":{"1065":{"position":[[672,25]]}}}],["provider=\"github",{"_index":1029,"t":{"1049":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":851,"t":{"1033":{"position":[[379,17]]}}}],["provider=azur",{"_index":799,"t":{"1025":{"position":[[1066,14]]}}}],["provider=bitbucket",{"_index":1023,"t":{"1047":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":1015,"t":{"1045":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":833,"t":{"1031":{"position":[[341,17]]}}}],["providers.new",{"_index":1040,"t":{"1053":{"position":[[98,15]]}}}],["proxi",{"_index":3,"t":{"989":{"position":[[32,5],[729,5]]},"991":{"position":[[12,5]]},"993":{"position":[[65,5],[339,6]]},"997":{"position":[[132,5],[242,5],[509,5],[622,5]]},"999":{"position":[[7,5]]},"1005":{"position":[[7125,5],[7173,5],[7239,5],[7279,8],[7465,5],[8995,5],[9038,6],[10324,5],[11913,5],[12035,5],[12204,5]]},"1007":{"position":[[7,5],[623,5],[978,5]]},"1011":{"position":[[19,5]]},"1013":{"position":[[905,5]]},"1015":{"position":[[760,5]]},"1019":{"position":[[192,8],[1763,5]]},"1021":{"position":[[179,5]]},"1023":{"position":[[2306,5],[2422,6]]},"1025":{"position":[[914,6],[1053,5]]},"1039":{"position":[[284,5],[422,5],[528,5],[549,5],[2961,5],[2981,5],[4157,5],[4177,5]]},"1041":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"1045":{"position":[[206,5],[249,5]]},"1047":{"position":[[108,6],[152,5]]},"1049":{"position":[[238,6]]},"1053":{"position":[[130,5]]},"1055":{"position":[[109,5]]},"1057":{"position":[[97,5],[396,5],[655,6]]},"1061":{"position":[[80,5],[204,5],[263,5],[647,5],[946,8],[965,5],[992,5],[1713,5],[1772,5]]},"1063":{"position":[[7,5],[87,7],[169,5]]},"1067":{"position":[[29,7]]}}}],["proxy'",{"_index":9,"t":{"989":{"position":[[96,7]]},"1019":{"position":[[86,7]]},"1045":{"position":[[296,7]]},"1065":{"position":[[91,7]]}}}],["proxy.cfg",{"_index":247,"t":{"1003":{"position":[[225,9],[326,9]]}}}],["proxy/oauth2",{"_index":151,"t":{"997":{"position":[[119,12],[229,12]]}}}],["proxy/oauth2/callback",{"_index":1014,"t":{"1045":{"position":[[163,22]]}}}],["proxy=tru",{"_index":1109,"t":{"1061":{"position":[[1923,10]]}}}],["proxy>/oauth2/callback",{"_index":1022,"t":{"1047":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":808,"t":{"1025":{"position":[[1333,17]]}}}],["proxy_connect_timeout",{"_index":1105,"t":{"1061":{"position":[[1608,21]]}}}],["proxy_pass",{"_index":644,"t":{"1019":{"position":[[319,10],[657,10],[2584,10],[2948,10]]},"1061":{"position":[[1469,10]]}}}],["proxy_pass_request_bodi",{"_index":654,"t":{"1019":{"position":[[883,23]]}}}],["proxy_read_timeout",{"_index":1108,"t":{"1061":{"position":[[1656,18]]}}}],["proxy_send_timeout",{"_index":1106,"t":{"1061":{"position":[[1633,18]]}}}],["proxy_set_head",{"_index":646,"t":{"1019":{"position":[[353,16],[382,16],[423,16],[458,16],[559,16],[691,16],[720,16],[761,16],[847,16],[1218,16],[1249,16],[1428,16]]},"1061":{"position":[[1503,16],[1532,16],[1573,16]]}}}],["proxyus",{"_index":473,"t":{"1005":{"position":[[7523,9]]}}}],["pubjwk",{"_index":467,"t":{"1005":{"position":[[7295,6]]},"1041":{"position":[[1917,6]]}}}],["pubkey",{"_index":468,"t":{"1005":{"position":[[7317,6]]}}}],["public",{"_index":821,"t":{"1029":{"position":[[1011,6],[1229,6]]},"1041":{"position":[[974,6]]}}}],["public_repo",{"_index":824,"t":{"1029":{"position":[[1376,11]]}}}],["publicli",{"_index":82,"t":{"993":{"position":[[175,9]]}}}],["push",{"_index":370,"t":{"1005":{"position":[[3328,4]]},"1029":{"position":[[994,4]]}}}],["put",{"_index":152,"t":{"997":{"position":[[149,3]]}}}],["python",{"_index":199,"t":{"1001":{"position":[[66,6],[107,6]]}}}],["quay.io/oauth2",{"_index":157,"t":{"997":{"position":[[214,14]]}}}],["queri",{"_index":1124,"t":{"1065":{"position":[[358,5]]}}}],["quick",{"_index":963,"t":{"1041":{"position":[[1080,5]]}}}],["quickli",{"_index":65,"t":{"991":{"position":[[154,7]]}}}],["r_basicprofil",{"_index":862,"t":{"1035":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":863,"t":{"1035":{"position":[[187,15]]}}}],["rand",{"_index":218,"t":{"1001":{"position":[[296,4]]}}}],["random",{"_index":1065,"t":{"1059":{"position":[[391,6],[442,6]]}}}],["random_password",{"_index":235,"t":{"1001":{"position":[[663,17]]}}}],["rang",{"_index":528,"t":{"1005":{"position":[[11812,6]]}}}],["raw",{"_index":678,"t":{"1019":{"position":[[2229,3]]}}}],["rc3.org",{"_index":1140,"t":{"1067":{"position":[[478,8]]}}}],["rd",{"_index":1123,"t":{"1065":{"position":[[355,2]]}}}],["re",{"_index":1057,"t":{"1057":{"position":[[799,2]]},"1065":{"position":[[200,2]]}}}],["reach",{"_index":506,"t":{"1005":{"position":[[10771,5]]}}}],["read",{"_index":783,"t":{"1023":{"position":[[2323,4]]},"1029":{"position":[[1207,4]]},"1047":{"position":[[240,4],[261,4]]},"1067":{"position":[[396,4]]}}}],["readi",{"_index":136,"t":{"995":{"position":[[613,6]]}}}],["readiness_check",{"_index":354,"t":{"1005":{"position":[[2837,17]]}}}],["real",{"_index":469,"t":{"1005":{"position":[[7365,4],[7423,4],[7509,4],[7539,4],[9077,4],[11936,4]]},"1013":{"position":[[867,4]]},"1015":{"position":[[722,4]]},"1019":{"position":[[401,4],[739,4]]},"1041":{"position":[[3070,4],[3215,4]]},"1061":{"position":[[1551,4]]}}}],["realm>/protocol/openid",{"_index":839,"t":{"1031":{"position":[[482,22],[570,22],[661,22]]}}}],["reason",{"_index":779,"t":{"1023":{"position":[[1998,6]]}}}],["recommend",{"_index":707,"t":{"1019":{"position":[[3574,11]]},"1023":{"position":[[867,11]]},"1061":{"position":[[14,11]]}}}],["redeem",{"_index":474,"t":{"1005":{"position":[[7549,6],[10639,6]]},"1029":{"position":[[1837,6]]},"1031":{"position":[[519,6]]},"1041":{"position":[[3765,6]]},"1043":{"position":[[686,6]]},"1049":{"position":[[527,6]]}}}],["redempt",{"_index":475,"t":{"1005":{"position":[[7573,10]]}}}],["redi",{"_index":40,"t":{"989":{"position":[[552,6]]},"1005":{"position":[[7700,5],[7752,5],[7837,5],[7857,5],[7892,5],[7909,5],[7960,5],[7982,5],[8017,5],[8075,5],[8098,5],[8129,5],[8193,5],[8228,5],[8245,5],[8279,5],[8334,5],[8355,5],[8408,5],[8494,5],[8515,5],[8549,5],[8575,5],[8633,5],[8668,5],[8700,5],[8733,5],[9335,5]]},"1025":{"position":[[1380,5]]},"1055":{"position":[[326,5]]},"1059":{"position":[[4,5],[57,6],[606,5],[711,5],[873,5],[936,5],[964,5],[1055,5],[1112,5],[1175,5],[1208,5],[1254,5],[1357,5],[1412,5],[1475,5],[1505,5]]}}}],["redirect",{"_index":25,"t":{"989":{"position":[[276,10]]},"1005":{"position":[[2048,9],[2609,8],[7595,8],[7625,8],[11664,11],[12500,8]]},"1019":{"position":[[490,8],[591,8]]},"1021":{"position":[[123,8]]},"1023":{"position":[[699,8]]},"1027":{"position":[[95,8]]},"1031":{"position":[[76,8]]},"1033":{"position":[[178,8],[399,8],[477,8]]},"1035":{"position":[[217,8]]},"1039":{"position":[[556,8],[2027,8],[3309,8],[3369,8]]},"1041":{"position":[[1379,8],[1619,8],[3610,8]]},"1043":{"position":[[448,12]]},"1045":{"position":[[315,8],[562,8],[680,8]]},"1049":{"position":[[87,8],[267,8]]},"1063":{"position":[[586,8]]},"1065":{"position":[[22,8],[269,8],[380,8],[550,8],[585,8],[646,9],[873,8],[1006,8]]}}}],["redis://host[:port",{"_index":478,"t":{"1005":{"position":[[7788,21],[7937,20],[8445,21]]}}}],["reduc",{"_index":580,"t":{"1011":{"position":[[804,8]]}}}],["refer",{"_index":959,"t":{"1041":{"position":[[930,5],[1284,8]]},"1043":{"position":[[367,5]]}}}],["refresh",{"_index":298,"t":{"1005":{"position":[[1373,7],[1390,7],[12333,8]]},"1019":{"position":[[1494,8]]},"1023":{"position":[[882,7],[936,7],[2540,9]]},"1039":{"position":[[2137,7],[3478,7]]},"1057":{"position":[[734,10]]}}}],["refresh/access/id",{"_index":1072,"t":{"1059":{"position":[[787,17]]}}}],["regex",{"_index":7,"t":{"989":{"position":[[70,6]]},"1005":{"position":[[10094,5],[10363,5]]}}}],["regist",{"_index":178,"t":{"997":{"position":[[559,8]]},"1021":{"position":[[17,8]]},"1041":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":730,"t":{"1023":{"position":[[16,12]]},"1025":{"position":[[114,14],[156,14]]},"1035":{"position":[[18,12]]}}}],["regular",{"_index":121,"t":{"995":{"position":[[365,7]]}}}],["releas",{"_index":129,"t":{"995":{"position":[[493,8],[661,9]]},"997":{"position":[[59,7],[421,7]]}}}],["reload",{"_index":716,"t":{"1019":{"position":[[4107,6]]}}}],["remain",{"_index":865,"t":{"1035":{"position":[[300,9]]}}}],["remot",{"_index":533,"t":{"1005":{"position":[[12067,6]]}}}],["remote_addr",{"_index":647,"t":{"1019":{"position":[[409,13],[747,13]]},"1061":{"position":[[1559,13]]}}}],["remote_address",{"_index":584,"t":{"1013":{"position":[[181,16]]},"1015":{"position":[[62,16]]}}}],["remov",{"_index":1119,"t":{"1065":{"position":[[76,7]]}}}],["replac",{"_index":241,"t":{"1003":{"position":[[65,9]]},"1009":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":226,"t":{"1001":{"position":[[550,19]]}}}],["repli",{"_index":797,"t":{"1025":{"position":[[779,6]]}}}],["repo",{"_index":367,"t":{"1005":{"position":[[3148,4]]},"1029":{"position":[[1076,8]]},"1041":{"position":[[2497,4]]}}}],["report",{"_index":610,"t":{"1013":{"position":[[1163,8]]},"1015":{"position":[[1301,8]]}}}],["repositori",{"_index":368,"t":{"1005":{"position":[[3201,10],[3292,10],[3347,11]]},"1029":{"position":[[329,11],[953,11],[1018,10],[1056,11],[1126,10],[1236,10],[1320,11],[1445,10]]},"1047":{"position":[[245,12],[696,10]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":1009,"t":{"1043":{"position":[[714,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":1008,"t":{"1043":{"position":[[647,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":1010,"t":{"1043":{"position":[[786,39]]}}}],["url]/stat",{"_index":566,"t":{"1007":{"position":[[984,13]]}}}],["url]/var/www/stat",{"_index":561,"t":{"1007":{"position":[[629,21]]}}}],["us",{"_index":51,"t":{"989":{"position":[[761,6]]},"993":{"position":[[550,4]]},"995":{"position":[[3,3],[361,3]]},"997":{"position":[[182,5],[628,5]]},"1001":{"position":[[35,3]]},"1003":{"position":[[286,4]]},"1005":{"position":[[927,4],[1196,3],[1990,3],[2669,3],[2749,3],[3273,3],[4247,5],[4370,3],[4735,4],[4912,4],[5656,4],[6040,3],[6126,3],[6194,4],[6696,4],[6785,4],[6882,4],[6979,4],[7066,4],[7401,4],[7810,4],[7843,3],[8154,4],[8222,3],[8307,4],[8340,3],[8467,4],[8500,3],[8521,3],[8608,3],[8639,3],[8767,3],[9483,7],[9525,4],[9693,7],[9801,7],[10889,5],[11005,5],[12217,3],[12376,5],[12786,3]]},"1007":{"position":[[830,4],[1214,4]]},"1009":{"position":[[299,6]]},"1011":{"position":[[111,5],[735,5]]},"1013":{"position":[[857,3]]},"1015":{"position":[[712,3]]},"1019":{"position":[[1651,5],[2677,3],[2719,3],[3589,3],[4070,3]]},"1021":{"position":[[385,5]]},"1025":{"position":[[230,3],[1169,5]]},"1029":{"position":[[1426,3],[1686,5]]},"1031":{"position":[[766,5]]},"1033":{"position":[[16,5],[816,5]]},"1037":{"position":[[175,4]]},"1039":{"position":[[194,3],[238,5],[320,5],[382,3],[740,4],[924,5],[4047,3]]},"1041":{"position":[[2172,3],[3211,3]]},"1043":{"position":[[105,5],[276,5]]},"1045":{"position":[[370,3],[670,3]]},"1047":{"position":[[43,3],[307,3],[555,3],[707,3]]},"1051":{"position":[[29,3],[105,3],[209,3]]},"1053":{"position":[[139,3]]},"1055":{"position":[[115,4]]},"1057":{"position":[[78,4],[287,5]]},"1059":{"position":[[863,5],[1102,3],[1118,3],[1363,3],[1481,3],[1511,3]]},"1061":{"position":[[732,5],[815,3],[1184,3]]},"1063":{"position":[[375,3],[521,4],[647,4],[777,4],[926,3]]},"1065":{"position":[[345,5]]},"1067":{"position":[[487,5]]}}}],["usag",{"_index":1073,"t":{"1059":{"position":[[851,6]]}}}],["user",{"_index":22,"t":{"989":{"position":[[248,4],[643,4]]},"1005":{"position":[[2878,4],[3368,4],[3396,5],[5914,5],[6020,4],[6248,4],[6344,4],[6379,5],[7023,4],[7043,4],[7111,4],[9401,5],[11457,4],[11503,4]]},"1011":{"position":[[748,4]]},"1013":{"position":[[94,4],[341,4],[410,4],[1149,4]]},"1015":{"position":[[1287,4]]},"1019":{"position":[[1013,4],[1115,5],[1237,4],[1242,6]]},"1023":{"position":[[393,6],[2171,4],[2439,4]]},"1025":{"position":[[410,5],[661,6]]},"1029":{"position":[[436,4],[463,5],[971,5],[1196,5],[1286,4],[1481,4],[1619,8]]},"1035":{"position":[[119,4]]},"1039":{"position":[[2256,5]]},"1043":{"position":[[58,5]]},"1047":{"position":[[659,5]]},"1055":{"position":[[138,4]]},"1057":{"position":[[790,5]]},"1059":{"position":[[184,4]]},"1063":{"position":[[258,4]]},"1065":{"position":[[12,4],[121,4],[282,4],[393,4]]}}}],["user'",{"_index":1041,"t":{"1055":{"position":[[17,6]]},"1063":{"position":[[792,6]]}}}],["user/settings/appl",{"_index":1026,"t":{"1049":{"position":[[52,28]]}}}],["user@domain.com",{"_index":585,"t":{"1013":{"position":[[200,17]]},"1015":{"position":[[81,17]]}}}],["user_ag",{"_index":616,"t":{"1015":{"position":[[180,14]]}}}],["userag",{"_index":609,"t":{"1013":{"position":[[1128,9]]},"1015":{"position":[[516,14],[1266,9]]}}}],["usernam",{"_index":315,"t":{"1005":{"position":[[1816,8],[3414,8],[5964,8],[6069,8],[6130,8],[6429,8],[9457,8]]},"1013":{"position":[[63,8],[676,13],[1198,8],[1239,8]]},"1015":{"position":[[412,13],[1336,8],[1377,8]]},"1029":{"position":[[1506,8],[1644,9]]}}}],["username@email.com",{"_index":611,"t":{"1013":{"position":[[1207,18]]},"1015":{"position":[[1345,18]]}}}],["utc",{"_index":404,"t":{"1005":{"position":[[4430,3]]}}}],["v3.0.0",{"_index":170,"t":{"997":{"position":[[451,7]]}}}],["v6.1.1",{"_index":146,"t":{"997":{"position":[[70,7]]}}}],["valid",{"_index":116,"t":{"995":{"position":[[231,8]]},"997":{"position":[[313,9]]},"1001":{"position":[[572,5]]},"1005":{"position":[[10847,10],[10963,10],[11523,8],[11556,10],[12494,5]]},"1021":{"position":[[189,5]]},"1023":{"position":[[958,9]]},"1027":{"position":[[83,5]]},"1029":{"position":[[1910,8]]},"1031":{"position":[[70,5],[608,8]]},"1043":{"position":[[756,8],[849,8]]},"1049":{"position":[[595,8]]},"1067":{"position":[[384,11]]}}}],["valu",{"_index":254,"t":{"1005":{"position":[[38,6]]},"1007":{"position":[[795,5]]},"1013":{"position":[[947,5]]},"1015":{"position":[[802,5]]},"1021":{"position":[[418,6]]},"1025":{"position":[[1011,5]]},"1031":{"position":[[865,5]]},"1059":{"position":[[203,5]]}}}],["var/www/stat",{"_index":565,"t":{"1007":{"position":[[933,16]]}}}],["variabl",{"_index":185,"t":{"997":{"position":[[684,9]]},"999":{"position":[[69,9],[183,9],[209,9]]},"1009":{"position":[[63,8],[238,8]]},"1011":{"position":[[613,10]]},"1013":{"position":[[744,9],[772,8]]},"1015":{"position":[[596,9],[627,8]]},"1017":{"position":[[500,9],[532,8]]},"1019":{"position":[[2202,9],[2838,9],[3826,8]]},"1041":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"1043":{"position":[[192,9]]},"1063":{"position":[[189,9]]}}}],["verif",{"_index":430,"t":{"1005":{"position":[[5226,12],[5500,13]]}}}],["verifi",{"_index":164,"t":{"997":{"position":[[350,9]]},"1005":{"position":[[3282,9],[5183,8],[10434,8],[10830,6],[10946,6]]},"1029":{"position":[[1435,9]]}}}],["version",{"_index":105,"t":{"993":{"position":[[679,8]]},"997":{"position":[[443,7]]},"1005":{"position":[[11578,7],[11596,7]]}}}],["via",{"_index":190,"t":{"999":{"position":[[31,3]]},"1005":{"position":[[338,3],[5614,3],[5819,3],[8674,3]]},"1013":{"position":[[1365,3]]},"1019":{"position":[[71,3],[1007,3],[2944,3],[3755,3]]},"1041":{"position":[[3308,3]]},"1043":{"position":[[161,3]]},"1059":{"position":[[717,3],[958,3]]},"1061":{"position":[[1247,3]]}}}],["volum",{"_index":581,"t":{"1011":{"position":[[817,7]]}}}],["vulner",{"_index":73,"t":{"993":{"position":[[37,13],[606,13]]},"995":{"position":[[75,16],[308,15]]}}}],["want",{"_index":562,"t":{"1007":{"position":[[677,5]]},"1025":{"position":[[396,4],[884,4]]},"1039":{"position":[[1046,4]]},"1041":{"position":[[580,4]]},"1059":{"position":[[1094,4]]},"1065":{"position":[[865,4]]}}}],["warn",{"_index":534,"t":{"1005":{"position":[[12083,8]]}}}],["way",{"_index":818,"t":{"1029":{"position":[[217,4]]},"1041":{"position":[[1086,3]]}}}],["web",{"_index":750,"t":{"1023":{"position":[[529,4]]},"1039":{"position":[[1898,3],[3142,3],[3261,3]]},"1067":{"position":[[423,3],[514,3]]}}}],["webapp",{"_index":791,"t":{"1025":{"position":[[194,7]]}}}],["websocket",{"_index":466,"t":{"1005":{"position":[[7245,10],[7269,9]]}}}],["well",{"_index":332,"t":{"1005":{"position":[[2290,5],[2328,5],[2923,4]]},"1059":{"position":[[924,4],[1145,4],[1308,5]]}}}],["whether",{"_index":488,"t":{"1005":{"position":[[9054,7]]},"1033":{"position":[[0,7]]},"1043":{"position":[[241,7]]}}}],["whitelist",{"_index":523,"t":{"1005":{"position":[[11613,9],[12386,9],[12729,11]]},"1065":{"position":[[954,9]]}}}],["wide_authority_to_your_service_account",{"_index":770,"t":{"1023":{"position":[[1438,38]]}}}],["window",{"_index":795,"t":{"1025":{"position":[[577,8]]}}}],["wish",{"_index":892,"t":{"1039":{"position":[[1146,4],[1578,4],[1671,4],[2276,4]]},"1045":{"position":[[95,5]]}}}],["within",{"_index":74,"t":{"993":{"position":[[51,6]]},"1029":{"position":[[703,6]]},"1039":{"position":[[4077,6]]},"1057":{"position":[[568,6]]}}}],["without",{"_index":640,"t":{"1019":{"position":[[184,7]]}}}],["work",{"_index":58,"t":{"991":{"position":[[61,4]]},"1005":{"position":[[2918,4]]},"1019":{"position":[[1528,4]]},"1033":{"position":[[320,4]]},"1039":{"position":[[1247,5],[1744,4]]},"1041":{"position":[[210,4]]}}}],["write",{"_index":823,"t":{"1029":{"position":[[1300,5]]}}}],["x",{"_index":442,"t":{"1005":{"position":[[5618,1],[5699,1],[5902,1],[5920,1],[5942,1],[6367,1],[6385,1],[6407,1],[7490,1],[7507,1],[7521,1],[7537,1],[9075,1],[9386,1],[9407,1],[9432,1],[9556,1],[10227,1]]},"1013":{"position":[[865,1]]},"1015":{"position":[[720,1]]},"1019":{"position":[[399,1],[440,1],[475,1],[576,1],[737,1],[778,1],[1011,1],[1022,1],[1235,1],[1266,1],[1445,1]]},"1061":{"position":[[1549,1],[1590,1]]},"1065":{"position":[[570,1]]}}}],["x.y.z.linux",{"_index":175,"t":{"997":{"position":[[515,11]]}}}],["x509",{"_index":965,"t":{"1041":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":443,"t":{"1005":{"position":[[5672,12],[9364,12]]},"1019":{"position":[[1080,12]]}}}],["xxx\"client_secret",{"_index":938,"t":{"1039":{"position":[[3920,18]]}}}],["xxxxx\"client_secret",{"_index":911,"t":{"1039":{"position":[[2570,20]]}}}],["you'd",{"_index":822,"t":{"1029":{"position":[[1166,5]]}}}],["yourcompany.com",{"_index":280,"t":{"1005":{"position":[[853,18]]}}}],["yyy\"pass_access_token",{"_index":939,"t":{"1039":{"position":[[3941,22]]}}}],["yyyyy\"pass_access_token",{"_index":912,"t":{"1039":{"position":[[2593,24]]}}}],["zzz\"cookie_secur",{"_index":940,"t":{"1039":{"position":[[3986,18]]}}}],["zzzzz\"skip_provider_button",{"_index":914,"t":{"1039":{"position":[[2640,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file +[{"documents":[{"i":988,"t":"Behaviour","u":"/oauth2-proxy/docs/6.1.x/behaviour","b":["Docs"]},{"i":990,"t":"Security","u":"/oauth2-proxy/docs/6.1.x/community/security","b":["Docs","Community"]},{"i":996,"t":"Session Storage","u":"/oauth2-proxy/docs/6.1.x/configuration/session_storage","b":["Docs","Configuration"]},{"i":1002,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","b":["Docs","Configuration"]},{"i":1036,"t":"Overview","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","b":["Docs","Configuration"]},{"i":1058,"t":"TLS Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/tls","b":["Docs","Configuration"]},{"i":1060,"t":"Request Signatures","u":"/oauth2-proxy/docs/6.1.x/features/request_signatures","b":["Docs","Features"]},{"i":1062,"t":"Endpoints","u":"/oauth2-proxy/docs/6.1.x/features/endpoints","b":["Docs","Features"]},{"i":1066,"t":"Installation","u":"/oauth2-proxy/docs/6.1.x/","b":["Docs"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/988",[0,2.222]],["t/990",[1,2.222]],["t/996",[2,1.699,3,1.699]],["t/1002",[4,1.375,5,1.375,6,1.005]],["t/1036",[7,2.222]],["t/1058",[6,1.241,8,1.699]],["t/1060",[9,1.699,10,1.699]],["t/1062",[11,2.222]],["t/1066",[12,2.222]]],"invertedIndex":[["behaviour",{"_index":0,"t":{"988":{"position":[[0,9]]}}}],["configur",{"_index":6,"t":{"1002":{"position":[[15,13]]},"1058":{"position":[[4,13]]}}}],["endpoint",{"_index":11,"t":{"1062":{"position":[[0,9]]}}}],["instal",{"_index":12,"t":{"1066":{"position":[[0,12]]}}}],["oauth",{"_index":4,"t":{"1002":{"position":[[0,5]]}}}],["overview",{"_index":7,"t":{"1036":{"position":[[0,8]]}}}],["provid",{"_index":5,"t":{"1002":{"position":[[6,8]]}}}],["request",{"_index":9,"t":{"1060":{"position":[[0,7]]}}}],["secur",{"_index":1,"t":{"990":{"position":[[0,8]]}}}],["session",{"_index":2,"t":{"996":{"position":[[0,7]]}}}],["signatur",{"_index":10,"t":{"1060":{"position":[[8,10]]}}}],["storag",{"_index":3,"t":{"996":{"position":[[8,7]]}}}],["tl",{"_index":8,"t":{"1058":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":992,"t":"Security Disclosures","u":"/oauth2-proxy/docs/6.1.x/community/security","h":"#security-disclosures","p":990},{"i":994,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/6.1.x/community/security","h":"#how-will-we-respond-to-disclosures","p":990},{"i":998,"t":"Cookie Storage","u":"/oauth2-proxy/docs/6.1.x/configuration/session_storage","h":"#cookie-storage","p":996},{"i":1000,"t":"Redis Storage","u":"/oauth2-proxy/docs/6.1.x/configuration/session_storage","h":"#redis-storage","p":996},{"i":1004,"t":"Google Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#google-auth-provider","p":1002},{"i":1006,"t":"Azure Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#azure-auth-provider","p":1002},{"i":1008,"t":"Facebook Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":1002},{"i":1010,"t":"GitHub Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#github-auth-provider","p":1002},{"i":1012,"t":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":1002},{"i":1014,"t":"GitLab Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":1002},{"i":1016,"t":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":1002},{"i":1018,"t":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":1002},{"i":1020,"t":"OpenID Connect Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#openid-connect-provider","p":1002},{"i":1022,"t":"login.gov Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#logingov-provider","p":1002},{"i":1024,"t":"Nextcloud Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#nextcloud-provider","p":1002},{"i":1026,"t":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":1002},{"i":1028,"t":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":1002},{"i":1030,"t":"Gitea Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":1002},{"i":1032,"t":"Email Authentication","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#email-authentication","p":1002},{"i":1034,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":1002},{"i":1038,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#generating-a-cookie-secret","p":1036},{"i":1040,"t":"Config File","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#config-file","p":1036},{"i":1042,"t":"Command Line Options","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#command-line-options","p":1036},{"i":1044,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#upstreams-configuration","p":1036},{"i":1046,"t":"Environment variables","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#environment-variables","p":1036},{"i":1048,"t":"Logging Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#logging-configuration","p":1036},{"i":1050,"t":"Auth Log Format","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#auth-log-format","p":1036},{"i":1052,"t":"Request Log Format","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#request-log-format","p":1036},{"i":1054,"t":"Standard Log Format","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#standard-log-format","p":1036},{"i":1056,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":1036},{"i":1064,"t":"Sign out","u":"/oauth2-proxy/docs/6.1.x/features/endpoints","h":"#sign-out","p":1062}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/992",[0,3.428,1,2.855]],["t/994",[1,2.855,2,3.428]],["t/998",[3,2.855,4,2.855]],["t/1000",[4,2.855,5,3.428]],["t/1004",[6,2.932,7,0.98,8,0.694]],["t/1006",[7,0.98,8,0.694,9,2.442]],["t/1008",[7,0.98,8,0.694,10,2.932]],["t/1010",[7,0.98,8,0.694,11,2.932]],["t/1012",[7,0.98,8,0.694,12,2.932]],["t/1014",[7,0.98,8,0.694,13,2.932]],["t/1016",[7,0.98,8,0.694,14,2.932]],["t/1018",[8,0.607,9,2.134,15,2.561,16,2.134]],["t/1020",[8,0.694,17,2.932,18,2.932]],["t/1022",[8,0.812,19,3.428]],["t/1024",[8,0.812,20,3.428]],["t/1026",[7,0.98,8,0.694,21,2.932]],["t/1028",[7,0.98,8,0.694,22,2.932]],["t/1030",[7,0.98,8,0.694,23,2.932]],["t/1032",[24,3.428,25,3.428]],["t/1034",[8,0.694,16,2.442,26,2.932]],["t/1038",[3,2.442,27,2.932,28,2.932]],["t/1040",[29,3.428,30,3.428]],["t/1042",[31,2.932,32,2.932,33,2.932]],["t/1044",[34,3.428,35,2.479]],["t/1046",[36,3.428,37,3.428]],["t/1048",[35,2.479,38,2.197]],["t/1050",[7,0.98,38,1.879,39,2.12]],["t/1052",[38,1.879,39,2.12,40,2.932]],["t/1054",[38,1.879,39,2.12,41,2.932]],["t/1056",[35,1.644,42,2.274,43,2.274,44,2.274,45,2.274]],["t/1064",[46,3.428,47,3.428]]],"invertedIndex":[["ad",{"_index":16,"t":{"1018":{"position":[[16,2]]},"1034":{"position":[[0,6]]}}}],["auth",{"_index":7,"t":{"1004":{"position":[[7,4]]},"1006":{"position":[[6,4]]},"1008":{"position":[[9,4]]},"1010":{"position":[[7,4]]},"1012":{"position":[[9,4]]},"1014":{"position":[[7,4]]},"1016":{"position":[[9,4]]},"1026":{"position":[[13,4]]},"1028":{"position":[[10,4]]},"1030":{"position":[[6,4]]},"1050":{"position":[[0,4]]}}}],["auth_request",{"_index":44,"t":{"1056":{"position":[[35,12]]}}}],["authent",{"_index":25,"t":{"1032":{"position":[[6,14]]}}}],["azur",{"_index":9,"t":{"1006":{"position":[[0,5]]},"1018":{"position":[[10,5]]}}}],["bitbucket",{"_index":22,"t":{"1028":{"position":[[0,9]]}}}],["command",{"_index":31,"t":{"1042":{"position":[[0,7]]}}}],["config",{"_index":29,"t":{"1040":{"position":[[0,6]]}}}],["configur",{"_index":35,"t":{"1044":{"position":[[10,13]]},"1048":{"position":[[8,13]]},"1056":{"position":[[0,11]]}}}],["connect",{"_index":18,"t":{"1020":{"position":[[7,7]]}}}],["cooki",{"_index":3,"t":{"998":{"position":[[0,6]]},"1038":{"position":[[13,6]]}}}],["digitalocean",{"_index":21,"t":{"1026":{"position":[[0,12]]}}}],["direct",{"_index":45,"t":{"1056":{"position":[[48,9]]}}}],["disclosur",{"_index":1,"t":{"992":{"position":[[9,11]]},"994":{"position":[[23,12]]}}}],["email",{"_index":24,"t":{"1032":{"position":[[0,5]]}}}],["environ",{"_index":36,"t":{"1046":{"position":[[0,11]]}}}],["facebook",{"_index":10,"t":{"1008":{"position":[[0,8]]}}}],["file",{"_index":30,"t":{"1040":{"position":[[7,4]]}}}],["format",{"_index":39,"t":{"1050":{"position":[[9,6]]},"1052":{"position":[[12,6]]},"1054":{"position":[[13,6]]}}}],["gener",{"_index":27,"t":{"1038":{"position":[[0,10]]}}}],["gitea",{"_index":23,"t":{"1030":{"position":[[0,5]]}}}],["github",{"_index":11,"t":{"1010":{"position":[[0,6]]}}}],["gitlab",{"_index":13,"t":{"1014":{"position":[[0,6]]}}}],["googl",{"_index":6,"t":{"1004":{"position":[[0,6]]}}}],["keycloak",{"_index":12,"t":{"1012":{"position":[[0,8]]}}}],["line",{"_index":32,"t":{"1042":{"position":[[8,4]]}}}],["linkedin",{"_index":14,"t":{"1016":{"position":[[0,8]]}}}],["log",{"_index":38,"t":{"1048":{"position":[[0,7]]},"1050":{"position":[[5,3]]},"1052":{"position":[[8,3]]},"1054":{"position":[[9,3]]}}}],["login.gov",{"_index":19,"t":{"1022":{"position":[[0,9]]}}}],["microsoft",{"_index":15,"t":{"1018":{"position":[[0,9]]}}}],["new",{"_index":26,"t":{"1034":{"position":[[9,3]]}}}],["nextcloud",{"_index":20,"t":{"1024":{"position":[[0,9]]}}}],["nginx",{"_index":43,"t":{"1056":{"position":[[29,5]]}}}],["openid",{"_index":17,"t":{"1020":{"position":[[0,6]]}}}],["option",{"_index":33,"t":{"1042":{"position":[[13,7]]}}}],["out",{"_index":47,"t":{"1064":{"position":[[5,3]]}}}],["provid",{"_index":8,"t":{"1004":{"position":[[12,8]]},"1006":{"position":[[11,8]]},"1008":{"position":[[14,8]]},"1010":{"position":[[12,8]]},"1012":{"position":[[14,8]]},"1014":{"position":[[12,8]]},"1016":{"position":[[14,8]]},"1018":{"position":[[19,8]]},"1020":{"position":[[15,8]]},"1022":{"position":[[10,8]]},"1024":{"position":[[10,8]]},"1026":{"position":[[18,8]]},"1028":{"position":[[15,8]]},"1030":{"position":[[11,8]]},"1034":{"position":[[13,8]]}}}],["redi",{"_index":5,"t":{"1000":{"position":[[0,5]]}}}],["request",{"_index":40,"t":{"1052":{"position":[[0,7]]}}}],["respond",{"_index":2,"t":{"994":{"position":[[12,7]]}}}],["secret",{"_index":28,"t":{"1038":{"position":[[20,6]]}}}],["secur",{"_index":0,"t":{"992":{"position":[[0,8]]}}}],["sign",{"_index":46,"t":{"1064":{"position":[[0,4]]}}}],["standard",{"_index":41,"t":{"1054":{"position":[[0,8]]}}}],["storag",{"_index":4,"t":{"998":{"position":[[7,7]]},"1000":{"position":[[6,7]]}}}],["upstream",{"_index":34,"t":{"1044":{"position":[[0,9]]}}}],["us",{"_index":42,"t":{"1056":{"position":[[16,3]]}}}],["variabl",{"_index":37,"t":{"1046":{"position":[[12,9]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":989,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/6.1.x/behaviour","h":"","p":988},{"i":991,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/6.1.x/community/security","h":"","p":990},{"i":993,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/6.1.x/community/security","h":"#security-disclosures","p":990},{"i":995,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/6.1.x/community/security","h":"#how-will-we-respond-to-disclosures","p":990},{"i":997,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/6.1.x/configuration/session_storage","h":"","p":996},{"i":999,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/6.1.x/configuration/session_storage","h":"#cookie-storage","p":996},{"i":1001,"t":"The Redis Storage backend stores sessions, encrypted, in redis. Instead sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128 bit random number, hex-encoded The secret is a 128 bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.","s":"Redis Storage","u":"/oauth2-proxy/docs/6.1.x/configuration/session_storage","h":"#redis-storage","p":996},{"i":1003,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure Facebook GitHub Keycloak GitLab LinkedIn Microsoft Azure AD OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket Gitea The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"","p":1002},{"i":1005,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"API Manager\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account: https://developers.google.com/identity/protocols/OAuth2ServiceAccount and make sure to download the json file. Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ).","s":"Google Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#google-auth-provider","p":1002},{"i":1007,"t":"Add an application: go to https://portal.azure.com, choose \"Azure Active Directory\" in the left menu, select \"App registrations\" and then click on \"New app registration\". Pick a name and choose \"Webapp / API\" as application type. Use https://internal.yourcompany.com as Sign-on URL. Click \"Create\". On the \"Settings\" / \"Properties\" page of the app, pick a logo and select \"Multi-tenanted\" if you want to allow users from multiple organizations to access your app. Note down the application ID. Click \"Save\". On the \"Settings\" / \"Required Permissions\" page of the app, click on \"Windows Azure Active Directory\" and then on \"Access the directory as the signed in user\". Hit \"Save\" and then then on \"Grant permissions\" (you might need another admin to do this). On the \"Settings\" / \"Reply URLs\" page of the app, add https://internal.yourcompanycom/oauth2/callback for each host that you want to protect by the oauth2 proxy. Click \"Save\". On the \"Settings\" / \"Keys\" page of the app, add a new key and note down the value after hitting \"Save\". Configure the proxy with --provider=azure --client-id= --client-secret= Note: When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#azure-auth-provider","p":1002},{"i":1009,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":1002},{"i":1011,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to login even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to login with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#github-auth-provider","p":1002},{"i":1013,"t":"Create new client in your Keycloak with Access Type 'confidental' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: -provider=keycloak-client-id=-client-secret=-login-url=\"http(s):///realms//protocol/openid-connect/auth\"-redeem-url=\"http(s):///realms//protocol/openid-connect/token\"-validate-url=\"http(s):///realms//protocol/openid-connect/userinfo\"-keycloak-group= The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":1002},{"i":1015,"t":"Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\"","s":"GitLab Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":1002},{"i":1017,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":1002},{"i":1019,"t":"For adding an application to the Microsoft Azure AD follow these steps to add an application. Take note of your TenantId if applicable for your situation. The TenantId can be used to override the default common authorization server with a tenant specific server.","s":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":1002},{"i":1021,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex and we will use it as an example. Launch a Dex instance using the getting started guide. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Login with the fixture use in the dex guide and run the oauth2-proxy with the following args: -provider oidc -provider-display-name \"My OIDC Provider\" -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -cookie-secure=false -email-domain example.com The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta. To configure the OIDC provider for Okta, perform the following steps: Configuring the OIDC Provider with Okta​ Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com The client_id and client_secret are configured in the application settings. Generate a unique client_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Configuring the OIDC Provider with Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#openid-connect-provider","p":1002},{"i":1023,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048 bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost', The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"login.gov Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#logingov-provider","p":1002},{"i":1025,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to setup the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"Nextcloud Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#nextcloud-provider","p":1002},{"i":1027,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":1002},{"i":1029,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who has access to one selected repository use --bitbucket-repository=.","s":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":1002},{"i":1031,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1\"","s":"Gitea Auth Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":1002},{"i":1033,"t":"To authorize by email domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#email-authentication","p":1002},{"i":1035,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/6.1.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":1002},{"i":1037,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"","p":1036},{"i":1039,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_'; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#generating-a-cookie-secret","p":1036},{"i":1041,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#config-file","p":1036},{"i":1043,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --custom-templates-dir string path to custom html templates --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --gcp-healthchecks bool will enable /liveness_check, /readiness_check, and / (with the proper user-agent) endpoints that will make it work well with GCP App Engine and GKE Ingresses false --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -s for SHA encryption --http-address string [http://]: or unix:// to listen on for HTTP clients \"127.0.0.1:4180\" --https-address string : to listen on for HTTPS clients \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping endpoint false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string bypass authentication for requests paths that match (may be given multiple times) --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy for request paths in --skip-auth-regex false --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-key-file string path to private key file --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --user-id-claim string which claim contains the user ID [\"email\"] --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . to allow subdomains (e.g. .example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. [1]: Only these providers support --cookie-refresh: GitLab, Google and OIDC [2]: When using the whitelist-domain option, any domain prefixed with a . will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URL's protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*. See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#command-line-options","p":1036},{"i":1045,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#upstreams-configuration","p":1036},{"i":1047,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside of a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#environment-variables","p":1036},{"i":1049,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) can be disabled with --silence-ping-logging reducing log volume. This flag appends the --ping-path to --exclude-logging-paths.","s":"Logging Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#logging-configuration","p":1036},{"i":1051,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details. Message Authenticated via OAuth2 The details of the auth attempt.","s":"Auth Log Format","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#auth-log-format","p":1036},{"i":1053,"t":"HTTP request logs will output by default in the below format: - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#request-log-format","p":1036},{"i":1055,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#standard-log-format","p":1036},{"i":1057,"t":"The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\". note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/6.1.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":1036},{"i":1059,"t":"There are two recommended configurations. Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or .... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"TLS Configuration","u":"/oauth2-proxy/docs/6.1.x/configuration/tls","h":"","p":1058},{"i":1061,"t":"If signature_key is defined, proxied requests will be signed with the GAP-Signature header, which is a Hash-based Message Authentication Code (HMAC) of selected request information and the request body see SIGNATURE_HEADERS in oauthproxy.go. signature_key must be of the form algorithm:secretkey, (ie: signature_key = \"sha1:secret0\") For more information about HMAC request signature validation, read the following: Amazon Web Services: Signing and Authenticating REST Requests rc3.org: Using HMAC to authenticate Web service requests","s":"Request Signatures","u":"/oauth2-proxy/docs/6.1.x/features/request_signatures","h":"","p":1060},{"i":1063,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive","s":"Endpoints","u":"/oauth2-proxy/docs/6.1.x/features/endpoints","h":"","p":1062},{"i":1065,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.","s":"Sign out","u":"/oauth2-proxy/docs/6.1.x/features/endpoints","h":"#sign-out","p":1062},{"i":1067,"t":"Choose how to deploy: a. Download Prebuilt Binary (current release is v6.1.1) b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy which will put the binary in $GOPATH/bin c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. $ sha256sum -c sha256sum.txt 2>&1 | grep OKoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/6.1.x/","h":"","p":1066}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/989",[0,2.069,1,1.461,2,2.718,3,0.749,4,3.027,5,3.883,6,1.676,7,3.441,8,2.718,9,2.718,10,1.874,11,1.673,12,1.019,13,1.676,14,1.564,15,3.883,16,2.547,17,2.089,18,3.441,19,1.462,20,1.676,21,4.069,22,1.256,23,4.069,24,1.935,25,1.12,26,1.386,27,4.069,28,4.069,29,2.718,30,1.799,31,2.718,32,4.069,33,2.089,34,3.027,35,3.027,36,3.486,37,1.461,38,2.483,39,1.019,40,2.471,41,0.914,42,3.027,43,2.265,44,1.799,45,2.265,46,2.718,47,1.935,48,2.471,49,3.441,50,2.718,51,0.249,52,1.799]],["t/991",[3,0.726,53,1.392,54,0.726,55,5.059,56,3.856,57,3.763,58,2.816,59,3.763,60,2.236,61,3.763,62,5.059,63,4.278,64,3.379,65,5.059,66,3.763,67,2.816,68,5.059,69,5.059,70,5.059]],["t/993",[3,0.769,30,1.875,33,2.178,46,2.833,48,2.576,51,0.259,54,0.769,57,3.987,64,3.58,66,3.155,71,4.241,72,5.359,73,4.532,74,2.833,75,5.22,76,3.155,77,4.968,78,3.586,79,3.254,80,4.241,81,3.987,82,4.241,83,2.361,84,4.241,85,2.576,86,4.241,87,4.241,88,4.241,89,2.576,90,3.586,91,1.247,92,3.155,93,2.833,94,1.333,95,2.984,96,4.241,97,4.241,98,4.241,99,4.241,100,4.241,101,4.241,102,4.241,103,3.586,104,4.241,105,3.155,106,4.241,107,3.155,108,3.155,109,1.523]],["t/995",[48,2.596,51,0.329,57,3.18,64,2.855,73,4.554,77,4.554,78,3.614,79,3.27,83,3.283,85,2.596,95,2.38,103,5.593,109,1.535,110,5.897,111,5.386,112,5.386,113,1.889,114,3.18,115,4.274,116,1.535,117,4.274,118,4.274,119,4.274,120,4.274,121,4.274,122,4.274,123,3.18,124,4.274,125,4.274,126,5.386,127,1.535,128,1.435,129,4.554,130,1.642,131,4.274,132,4.274,133,4.274,134,4.274,135,4.274,136,4.274,137,4.274,138,4.274,139,4.274]],["t/997",[0,1.707,1,1.707,3,0.682,10,2.362,11,1.582,14,1.827,19,1.143,22,1.143,30,2.101,38,2.735,40,2.886,51,0.29,54,0.682,107,3.536,130,1.827,140,4.019,141,5.751,142,4.019,143,2.261,144,3.175,145,2.886,146,2.542,147,2.886,148,3.492,149,2.261,150,1.398]],["t/999",[0,1.879,3,0.829,10,2.186,11,1.772,19,0.983,22,0.983,38,2.489,41,0.918,44,1.805,51,0.32,54,0.829,74,2.728,130,1.569,145,3.177,147,3.506,148,3.697,150,1.201,151,4.294,152,4.084,153,1.943,154,1.486,155,6.088,156,4.084,157,2.48,158,0.856,159,4.084,160,4.084,161,4.084,162,4.084,163,4.084,164,2.097,165,4.084,166,4.084,167,4.084,168,1.051,169,3.454,170,2.728,171,4.084,172,4.084,173,3.454,174,3.454,175,2.48,176,4.084,177,3.454,178,3.454]],["t/1001",[10,2.207,11,1.4,13,1.822,16,1.405,22,0.764,33,1.632,38,2.981,39,0.993,40,4.09,41,0.714,50,3.399,51,0.366,53,0.874,54,0.456,64,2.122,90,2.687,92,2.364,108,2.364,146,1.405,147,3.09,148,2.686,150,0.934,153,1.511,154,0.818,158,0.666,168,1.31,170,3.399,179,2.955,180,4.424,181,5.089,182,3.178,183,1.511,184,5.089,185,3.178,186,2.687,187,4.424,188,4.424,189,3.741,190,4.424,191,3.178,192,3.399,193,3.178,194,3.178,195,3.741,196,2.687,197,3.178,198,2.122,199,3.178,200,1.769,201,2.104,202,3.178,203,1.309,204,2.122,205,3.178,206,3.178,207,1.632,208,2.687,209,4.303,210,3.064,211,1.224,212,3.178,213,4.303,214,1.769,215,4.424,216,2.382,217,2.686,218,3.741,219,3.178,220,1.221,221,4.424,222,3.178,223,3.178]],["t/1003",[3,0.626,12,0.851,25,1.199,26,1.598,37,1.565,39,1.064,45,2.427,51,0.266,53,1.199,54,0.626,75,3.686,79,3.311,116,1.565,150,1.282,183,2.073,210,3.035,220,1.675,224,3.242,225,1.464,226,3.642,227,3.242,228,4.359,229,1.795,230,3.686,231,2.073,232,3.311,233,4.359,234,3.686,235,3.242,236,3.686,237,3.686,238,3.311,239,3.242,240,3.686,241,4.359,242,3.686,243,3.686,244,1.927,245,3.035,246,3.642,247,4.359,248,3.242]],["t/1005",[1,0.904,3,0.537,6,1.54,8,2.498,10,0.904,11,0.693,12,0.871,13,1.54,16,1.113,17,1.293,19,0.606,22,1.074,25,0.693,26,0.606,37,1.603,41,1.003,53,1.36,54,0.537,56,3.207,60,1.113,67,1.402,76,1.873,91,1.553,93,1.681,94,1.553,109,1.774,116,0.904,123,1.873,127,1.896,128,1.499,130,0.967,144,2.498,154,1.424,158,0.935,168,0.648,173,2.129,175,2.711,216,2.035,217,1.529,225,1.256,226,3.527,227,1.873,229,1.838,244,1.113,249,1.873,250,2.942,251,2.517,252,4.677,253,2.129,254,2.517,255,2.517,256,2.129,257,4.464,258,4.942,259,3.207,260,1.681,261,2.129,262,2.517,263,3.321,264,2.517,265,2.517,266,3.163,267,1.681,268,2.129,269,2.517,270,2.129,271,1.873,272,2.517,273,3.163,274,1.873,275,2.517,276,1.529,277,2.123,278,2.517,279,2.129,280,3.741,281,1.873,282,1.113,283,1.873,284,2.129,285,1.529,286,2.517,287,1.873,288,2.517,289,2.129,290,2.517,291,2.711,292,2.129,293,1.529,294,1.681,295,3.36,296,0.74,297,2.517,298,2.123,299,1.529,300,3.163,301,3.321,302,2.129,303,1.402,304,1.873,305,3.001,306,3.741,307,2.272,308,2.517,309,2.517,310,2.517,311,2.517,312,1.873,313,1.402,314,2.517,315,2.517,316,1.037,317,2.783,318,2.129,319,1.529,320,2.517,321,2.129,322,2.129,323,2.129,324,2.517,325,2.517,326,2.517,327,1.681,328,1.402,329,2.272,330,1.873,331,1.873,332,1.681,333,1.402,334,2.517,335,1.529,336,2.517,337,2.517]],["t/1007",[1,1.171,2,2.179,3,0.647,6,1.343,10,1.618,11,1.24,12,1.14,13,1.343,14,1.254,20,1.343,22,1.084,26,0.785,38,1.552,39,0.637,40,1.981,41,1.25,51,0.275,53,1.42,54,0.468,109,1.618,113,2.281,127,1.171,128,1.513,130,1.254,147,1.981,149,1.552,151,2.427,154,1.159,157,1.981,164,2.313,183,1.552,200,2.508,204,2.179,211,1.084,214,2.508,220,1.254,225,1.733,227,2.427,232,3.134,244,1.991,249,3.351,250,2.313,252,3.351,259,1.981,261,2.759,270,3.81,271,4.14,273,3.81,281,2.427,304,4.344,305,1.981,316,1.855,330,3.351,338,2.179,339,3.262,340,4.505,341,3.447,342,3.262,343,3.446,344,3.81,345,3.262,346,3.262,347,3.717,348,3.262,349,2.759,350,2.427,351,2.759,352,3.262,353,2.759,354,3.262,355,3.262,356,1.442,357,3.262,358,3.262,359,3.262,360,3.262,361,3.262,362,2.508,363,2.759,364,2.759,365,3.262,366,3.262,367,3.262,368,3.262,369,3.262]],["t/1009",[25,1.438,37,1.877,41,1.174,116,1.877,127,1.877,128,1.755,282,2.31,285,3.174,303,2.91,343,2.91,370,6.084,371,5.227,372,2.009]],["t/1011",[6,1.247,14,2.071,16,2.382,19,0.729,22,1.459,26,1.029,41,0.961,51,0.261,53,0.833,56,1.839,74,2.023,79,3.957,85,1.839,89,3.582,91,0.891,95,2.382,114,4.388,116,1.088,127,1.536,128,1.017,158,1.039,207,2.547,211,1.193,216,1.762,217,1.839,220,1.164,229,1.247,245,1.687,277,1.441,285,1.839,293,3.76,294,2.023,296,1.258,298,1.441,299,1.839,303,1.687,313,1.687,316,2.497,332,2.023,335,2.598,351,4.194,372,2.33,373,3.029,374,1.839,375,2.023,376,2.253,377,2.561,378,2.253,379,2.857,380,2.561,381,2.253,382,4.606,383,2.561,384,3.029,385,3.617,386,3.617,387,4.556,388,2.561,389,2.253,390,3.312,391,3.312,392,2.561,393,2.561,394,3.617,395,2.253,396,1.441,397,2.561,398,3.029,399,3.029,400,3.029,401,2.253,402,2.857,403,3.029,404,4.959,405,3.029,406,1.687,407,3.029,408,3.029]],["t/1013",[13,2.154,16,1.805,25,1.124,41,0.918,51,0.249,53,1.124,67,2.274,116,1.879,127,2.186,128,1.372,149,2.489,154,1.567,158,0.856,168,1.347,183,1.943,211,0.983,217,2.48,234,5.322,246,2.728,260,2.728,263,3.038,266,3.454,282,1.805,285,2.48,295,3.822,298,1.943,299,2.48,305,3.177,316,1.682,372,1.569,406,2.274,409,4.084,410,5.232,411,3.038,412,4.084,413,3.038,414,4.084,415,4.084,416,5.773,417,5.773,418,5.773,419,4.084,420,4.084,421,4.084,422,4.084,423,4.084,424,3.038]],["t/1015",[11,1.416,12,0.777,25,1.569,37,1.429,41,1.281,51,0.314,58,2.216,66,2.961,91,1.171,113,1.76,154,1.325,158,1.308,168,1.025,169,3.366,211,1.502,217,2.417,225,1.915,235,4.645,238,2.417,250,2.643,293,3.125,295,3.125,296,1.171,298,2.448,299,3.125,307,2.417,313,2.216,335,2.417,356,2.275,372,1.53,389,2.961,390,2.659,391,2.659,411,2.961,425,2.961,426,3.981,427,4.352,428,2.961,429,2.417,430,3.981,431,1.53,432,3.981,433,3.981,434,3.981,435,3.981,436,3.981,437,3.981,438,3.981,439,3.981,440,2.417,441,2.659,442,3.366]],["t/1017",[12,1.111,20,1.924,22,1.124,25,1.286,37,2.044,53,1.286,56,2.838,67,2.602,127,1.678,128,1.569,150,1.374,168,1.465,200,3.417,211,1.124,236,3.951,244,2.066,249,3.476,250,2.399,259,2.838,267,3.121,271,3.476,285,2.838,313,2.602,375,3.121,443,4.673,444,4.673,445,3.951,446,4.673,447,4.673,448,3.951,449,4.673,450,3.121,451,4.813]],["t/1019",[44,2.617,45,3.296,51,0.305,53,1.373,67,2.778,113,2.206,150,1.467,158,1.046,225,2.12,232,3.03,237,4.22,250,2.562,277,2.374,294,3.333,350,3.712,452,5.921,453,4.99,454,4.22,455,4.22]],["t/1021",[1,0.666,3,0.765,11,0.814,12,1.282,13,1.732,14,1.137,16,1.307,17,0.953,20,0.764,22,0.447,24,0.883,25,1.157,26,1.449,37,0.666,39,1.04,41,1.1,44,2.031,51,0.314,53,1.157,54,0.737,56,1.127,58,1.647,61,2.2,67,1.033,74,1.24,76,1.381,83,1.033,91,0.546,94,0.929,109,1.324,113,1.63,127,1.324,128,0.623,130,0.713,146,0.82,149,1.407,150,1.351,151,1.381,153,0.883,154,1.26,157,1.127,158,0.881,168,0.949,170,1.24,175,1.796,195,1.57,204,1.976,210,2.342,211,1.012,214,1.033,220,0.713,225,1.966,229,0.764,231,0.883,238,2.239,244,2.031,246,1.24,250,1.893,259,1.127,267,1.976,274,2.743,276,1.127,277,2.614,279,1.57,282,2.031,291,1.796,295,1.796,296,1.084,298,1.407,302,1.57,303,1.647,304,2.2,312,1.381,313,1.033,316,1.518,318,1.57,321,2.501,327,1.24,329,1.127,343,2.053,344,2.501,353,2.501,372,1.417,374,1.127,376,1.381,379,1.24,429,1.127,431,1.417,440,3.118,441,2.463,448,1.57,450,1.24,456,1.856,457,2.501,458,1.856,459,1.856,460,1.856,461,1.57,462,1.856,463,1.856,464,3.688,465,1.765,466,1.856,467,1.856,468,2.239,469,2.501,470,1.57,471,1.381,472,1.856,473,1.856,474,1.381,475,1.57,476,1.57,477,1.57,478,1.381,479,5.495,480,1.856,481,1.856,482,1.856,483,1.856,484,1.381,485,1.856,486,3.557,487,1.57,488,2.958,489,1.856,490,1.381,491,1.976,492,1.856,493,1.856,494,2.958,495,1.033,496,1.856,497,1.57,498,1.57,499,1.381,500,1.57,501,1.976,502,2.2,503,1.856,504,1.57,505,2.958,506,1.856,507,1.856,508,1.856,509,1.856,510,1.856,511,1.856,512,2.958,513,1.856,514,1.976,515,1.856,516,1.976,517,1.856,518,1.57,519,1.856,520,2.501,521,2.501,522,1.856,523,2.958,524,1.856,525,1.57,526,1.856,527,3.688,528,1.856,529,2.501,530,1.57,531,1.856,532,1.57,533,1.856,534,2.958,535,1.856,536,1.856,537,1.856,538,1.856,539,1.856,540,1.856,541,1.856,542,1.57,543,1.127,544,1.856,545,1.856]],["t/1023",[1,0.779,2,1.45,3,0.828,5,3.409,11,1.261,12,1.187,14,0.834,15,2.487,16,0.959,19,0.522,20,0.894,25,1.122,26,1.19,30,0.959,33,1.114,36,1.45,41,1.029,44,0.959,51,0.204,52,1.478,54,0.586,58,1.208,83,1.862,85,1.318,89,1.318,91,1.199,94,1.44,109,0.779,123,1.615,127,1.201,145,1.318,146,0.959,153,1.032,154,1.05,158,0.455,164,1.114,168,0.559,189,2.827,198,1.45,200,2.551,201,1.032,210,1.862,211,1.31,214,1.208,220,0.834,224,2.487,225,1.662,229,0.894,231,1.94,238,2.03,239,3.889,244,0.959,245,1.208,253,1.835,256,2.827,268,1.835,276,1.318,277,1.032,282,1.478,291,2.03,296,1.199,298,2.18,299,1.318,316,1.679,338,1.45,341,1.45,343,1.208,363,1.835,372,0.834,380,1.835,381,1.615,392,1.835,394,1.835,395,1.615,396,1.59,406,1.208,427,1.835,428,1.615,440,3.503,441,3.06,457,1.835,468,2.03,469,1.835,475,1.835,476,1.835,477,2.827,478,1.615,484,1.615,491,1.45,501,1.45,518,1.835,525,1.835,529,3.449,530,1.835,542,1.835,543,1.318,546,3.344,547,3.344,548,3.344,549,2.17,550,1.835,551,2.17,552,2.17,553,2.17,554,2.17,555,2.17,556,2.17,557,2.17,558,1.835,559,3.344,560,2.487,561,3.344,562,1.835,563,1.45,564,2.827,565,1.615,566,2.17,567,1.835,568,3.449,569,2.17,570,2.17,571,2.17,572,1.835,573,2.17,574,2.17,575,2.17,576,2.17,577,2.17,578,3.344,579,2.17,580,1.835,581,2.17,582,1.835,583,2.17,584,2.17,585,1.835,586,2.17,587,2.17,588,1.615,589,2.17,590,1.835,591,2.17,592,2.17,593,2.17,594,2.17,595,2.17,596,2.17,597,2.17,598,2.17,599,1.835,600,2.17,601,2.17,602,1.835,603,3.005,604,1.761,605,2.17,606,2.17,607,2.17,608,3.344,609,1.835,610,3.449,611,2.17,612,2.17,613,2.17,614,2.827,615,1.615,616,1.835,617,1.835,618,2.17,619,1.835,620,2.17,621,1.835,622,1.862,623,1.835,624,2.17,625,1.615,626,2.17,627,3.409,628,2.17,629,2.827,630,1.45,631,1.835,632,1.835,633,1.835,634,2.17,635,2.17,636,2.17]],["t/1025",[14,1.593,19,0.997,22,0.997,25,1.141,26,1.399,33,2.129,39,0.809,48,2.517,51,0.323,53,1.141,54,0.595,109,1.897,116,1.897,154,1.575,168,1.359,201,1.972,203,1.707,207,2.129,211,1.473,240,5.722,282,1.833,305,3.208,327,3.528,329,2.517,372,1.593,406,2.308,425,3.084,442,4.916,470,3.506,498,3.506,564,3.506,603,2.517,604,1.593,637,1.707,638,3.084,639,4.146,640,3.084,641,4.146,642,4.146,643,3.506,644,4.146,645,4.146,646,4.146,647,4.146]],["t/1027",[1,1.494,3,0.76,4,3.095,9,2.779,13,1.714,25,1.602,26,1.001,37,1.494,39,0.812,41,0.935,51,0.323,53,1.145,54,0.836,94,1.308,109,1.901,127,1.494,128,1.397,150,1.224,154,1.578,158,0.872,168,1.363,203,1.714,211,1.523,220,1.599,225,1.778,231,1.979,267,2.779,296,1.712,356,1.839,374,2.527,375,2.779,413,3.095,431,1.599,450,2.779,486,3.519,495,2.317,625,3.095,637,1.714,648,4.161,649,4.161,650,4.161,651,3.095,652,3.095,653,4.161,654,3.519,655,3.519,656,4.161,657,4.161,658,4.161,659,3.095]],["t/1029",[1,1.45,3,0.746,12,1.121,13,2.139,14,1.552,19,0.972,22,0.972,26,0.972,30,1.786,37,1.45,39,1.014,51,0.37,53,1.111,54,0.746,89,3.155,91,1.188,109,1.865,113,1.786,128,1.356,150,1.188,154,1.56,158,0.846,168,1.337,211,0.972,231,1.921,242,4.856,244,2.296,291,3.155,293,3.155,296,1.528,316,2.365,330,3.005,332,3.47,335,2.453,374,2.453,379,2.698,382,3.865,411,3.005,413,3.005,445,3.416,451,3.416,532,3.416,625,3.005,651,3.005,652,3.005,654,3.416,660,4.039,661,4.039,662,4.039,663,4.039,664,4.039]],["t/1031",[1,1.547,3,0.618,12,1.056,25,1.489,26,1.036,29,2.877,53,1.185,109,1.943,116,1.547,127,1.547,128,1.447,143,2.049,154,1.598,158,0.903,168,1.393,211,1.036,225,1.447,243,5.52,282,1.904,296,1.267,303,2.398,356,2.744,372,1.655,375,2.877,376,3.204,406,2.398,474,3.204,501,3.615,520,3.642,521,3.642,665,4.308,666,4.308,667,5.412,668,4.308,669,4.308,670,4.308,671,5.918,672,4.308,673,4.308,674,4.308]],["t/1033",[19,1.2,30,2.206,51,0.386,91,2.008,229,2.438,277,3.003,319,3.595,637,2.055,675,4.99,676,4.99,677,4.99,678,4.22]],["t/1035",[3,0.736,14,1.971,26,1.536,33,2.634,51,0.313,54,0.736,113,2.267,128,2.145,158,1.075,327,3.426,424,3.816,465,1.971,679,5.129,680,5.129]],["t/1037",[3,0.707,29,3.288,39,1.146,41,1.106,54,0.707,94,1.845,201,2.342,203,2.419,296,1.727,431,1.892,603,3.812,604,2.412,637,2.419,681,4.923,682,4.923,683,4.923,684,5.873]],["t/1039",[10,1.44,11,1.103,12,1.342,30,1.773,41,0.901,51,0.245,113,1.773,116,1.44,149,1.907,168,1.032,192,2.678,203,1.651,211,0.965,501,2.678,562,3.391,572,4.372,685,4.01,686,2.233,687,5.171,688,4.01,689,4.01,690,4.01,691,3.391,692,4.01,693,4.01,694,4.01,695,4.01,696,4.01,697,4.01,698,4.01,699,4.839,700,5.723,701,4.01,702,4.01,703,4.257,704,4.01,705,4.01,706,5.723,707,4.01,708,4.01,709,4.01,710,4.01,711,4.01,712,4.01,713,4.372,714,4.01,715,4.01,716,4.01,717,4.01,718,4.01,719,4.01,720,4.01,721,3.391,722,4.01]],["t/1041",[12,1.131,51,0.294,54,0.691,60,2.129,94,1.821,130,1.851,203,1.983,207,3.193,296,1.416,341,3.216,431,2.389,465,1.851,637,1.983,638,4.312,703,3.582,723,4.072,724,4.072,725,4.072,726,4.072,727,4.072,728,3.582,729,5.796,730,4.816,731,4.816]],["t/1043",[0,1.623,1,1.545,3,0.538,4,1.507,5,3.285,6,1.902,7,0.995,8,1.091,10,0.958,11,1.475,12,1.064,13,1.208,14,1.44,15,2.904,16,1.902,17,1.37,18,2.002,19,1.006,20,1.099,22,1.006,24,2.653,25,0.734,26,0.939,30,0.722,31,0.428,33,0.329,37,1.214,38,0.964,39,0.521,40,3.225,41,1.037,42,2.516,43,1.989,44,0.283,45,0.655,46,0.428,47,2.353,48,0.389,50,0.786,51,0.355,52,1.656,54,0.169,58,0.356,60,1.297,79,1.438,83,1.318,85,0.992,89,0.992,91,1.265,93,2.874,94,1.576,105,0.875,107,1.215,108,1.215,109,0.85,113,0.52,114,1.215,116,0.85,127,0.423,130,0.779,142,0.541,143,2.15,144,0.786,145,0.389,147,0.715,148,0.389,149,0.56,150,0.863,153,1.126,154,1.005,164,1.04,168,0.609,170,0.428,175,0.992,177,1.713,179,1.091,183,0.305,186,0.541,192,0.428,196,0.541,200,1.883,201,0.964,204,0.428,207,1.04,209,1.381,210,2.254,211,1.252,213,3.424,216,0.485,218,2.256,220,0.452,225,0.215,226,1.959,229,1.667,231,0.305,232,0.992,235,0.875,238,0.389,239,1.215,245,0.655,246,0.786,248,0.476,250,0.329,259,0.389,260,0.428,263,0.476,276,0.715,277,1.126,282,0.283,289,0.541,291,0.715,293,1.438,294,1.353,295,1.23,296,1.051,298,0.305,301,0.875,303,0.356,305,0.715,307,0.715,312,0.875,313,0.655,316,1.393,319,1.62,322,0.541,323,0.541,328,0.356,329,0.715,331,0.875,333,2.571,335,1.23,338,0.786,343,0.356,347,0.786,349,0.541,350,1.507,356,0.722,362,0.909,372,1.3,381,0.476,382,1.215,385,0.541,386,0.541,387,0.995,388,0.541,389,0.875,390,1.091,391,1.091,393,0.541,395,0.476,396,1.269,397,0.541,401,1.761,402,1.959,406,0.655,425,0.476,428,0.875,429,2.371,431,0.452,440,2.459,441,1.959,450,0.428,454,0.995,455,0.995,461,0.541,471,1.507,474,1.215,478,0.875,490,1.507,495,0.356,514,2.502,516,0.428,543,0.389,550,0.541,558,1.381,563,0.428,565,4.764,567,1.713,568,0.995,580,0.541,582,0.541,588,0.476,599,0.541,602,0.541,619,0.541,621,0.541,622,1.485,627,1.215,629,1.713,630,0.428,637,0.834,640,0.875,643,0.541,659,0.476,678,0.541,686,0.356,699,0.541,728,0.476,732,0.64,733,0.64,734,1.177,735,2.026,736,0.64,737,5.615,738,0.541,739,2.368,740,0.64,741,3.382,742,3.573,743,0.64,744,0.64,745,0.64,746,0.64,747,0.64,748,1.177,749,2.026,750,0.64,751,0.64,752,1.177,753,0.64,754,1.507,755,0.64,756,0.64,757,0.64,758,1.633,759,2.256,760,0.64,761,1.177,762,0.64,763,0.541,764,0.64,765,0.64,766,1.633,767,2.368,768,2.368,769,0.875,770,0.64,771,0.64,772,5.082,773,2.026,774,0.64,775,0.64,776,0.64,777,1.177,778,0.64,779,0.64,780,1.381,781,0.64,782,1.177,783,0.64,784,2.117,785,0.64,786,0.64,787,0.64,788,0.64,789,1.633,790,1.633,791,1.177,792,0.64,793,0.64,794,0.64,795,0.64,796,1.23,797,0.64,798,0.64,799,0.541,800,0.64,801,0.64,802,0.64,803,0.64,804,0.64,805,0.786,806,0.476,807,0.64,808,0.875,809,0.995,810,0.875,811,0.64,812,0.995,813,1.177,814,0.995,815,0.995,816,0.64,817,1.215,818,0.541,819,1.633,820,1.381,821,1.177,822,1.177,823,0.64,824,0.875,825,0.64,826,0.64,827,0.64,828,2.026,829,0.64,830,0.995,831,0.541,832,0.64,833,1.177,834,0.541,835,0.64,836,0.64,837,0.64,838,2.571,839,0.995,840,0.64,841,2.368,842,0.64,843,0.64,844,2.026,845,0.541,846,1.177,847,2.026,848,1.985,849,0.995,850,0.541,851,0.64,852,0.64,853,1.177,854,0.64,855,2.371,856,0.64,857,1.782,858,0.64,859,0.64,860,1.633,861,1.177,862,1.177,863,0.541,864,0.64,865,0.64,866,1.633,867,0.64,868,1.215,869,2.026,870,1.381,871,0.541,872,0.541,873,0.541,874,0.64,875,1.633,876,0.64,877,0.64,878,0.541,879,0.64,880,0.64,881,0.64,882,0.786,883,1.507,884,0.64,885,0.995,886,0.541,887,0.64,888,0.995,889,0.64,890,0.541,891,0.64,892,0.64,893,1.381,894,1.177,895,0.64,896,0.64,897,0.541,898,0.64,899,0.64,900,0.64,901,0.64,902,0.64,903,0.64,904,0.64,905,0.64,906,0.64,907,0.64,908,0.64,909,0.64,910,0.64,911,0.541,912,0.64,913,0.64]],["t/1045",[0,1.976,1,1.329,3,0.79,19,0.89,26,1.41,39,1.144,41,0.831,42,3.65,43,3.615,44,2.169,45,2.06,51,0.3,54,0.531,60,1.636,61,2.753,93,3.277,94,2.04,130,2.252,143,2.334,146,2.433,179,2.471,183,1.76,207,1.9,211,1.324,214,2.06,245,2.06,296,1.088,298,1.76,333,3.263,341,2.471,390,2.471,391,2.471,429,2.247,431,1.422,468,2.247,516,2.471,560,2.753,632,4.149,888,4.149,890,3.129,914,3.7,915,3.7,916,4.906,917,3.7,918,3.7,919,4.094,920,3.7,921,3.7,922,3.7,923,4.906,924,3.7,925,4.906,926,3.7,927,3.7,928,3.7]],["t/1047",[11,1.259,12,1.096,38,2.177,39,0.893,51,0.279,60,2.023,91,1.346,94,1.438,130,1.758,168,1.446,203,2.314,207,2.885,216,2.314,229,1.884,465,1.758,603,3.412,604,2.159,637,2.314,638,4.18,703,3.404,723,3.869,724,3.869,725,3.869,726,3.869,727,3.869,728,3.404,754,3.404,929,4.576,930,4.576,931,4.576,932,3.869,933,5.619,934,4.576,935,4.576]],["t/1049",[0,1.996,3,0.542,6,1.555,12,1.153,19,0.908,22,0.908,24,3.315,39,1.085,51,0.304,52,1.669,54,0.542,94,1.747,143,1.796,149,2.365,150,1.462,157,3.02,203,1.555,216,1.555,307,2.293,328,2.103,333,2.768,396,2.365,604,1.451,759,4.205,780,3.193,796,2.293,809,4.205,810,2.809,812,3.193,814,3.193,815,4.701,817,4.395,818,4.205,820,3.193,824,3.699,848,4.395,873,3.193,883,3.699,897,3.193,936,3.321,937,3.776,938,3.776,939,3.776,940,3.776,941,3.776,942,3.193]],["t/1051",[0,2.122,3,0.484,6,2.433,12,0.658,17,1.732,19,1.467,20,1.389,22,1.358,24,2.902,30,1.491,39,0.899,41,0.758,47,2.192,51,0.206,54,0.484,59,2.508,60,1.491,81,3.428,91,1.355,146,1.491,150,1.355,154,1.351,158,0.707,183,1.604,201,1.604,216,1.389,317,2.508,319,2.799,328,1.877,356,2.037,396,2.684,402,3.769,465,1.296,495,1.877,514,2.252,543,2.799,563,3.078,565,2.508,604,1.771,622,1.877,686,2.566,738,3.897,769,2.508,796,2.048,831,2.851,838,1.877,855,2.799,857,2.252,936,2.252,943,3.372,944,2.851,945,2.851,946,3.428,947,3.428,948,4.997,949,3.906,950,3.372,951,4.609,952,3.372,953,3.897,954,3.372,955,3.372,956,3.372,957,3.372,958,3.372,959,3.428,960,2.851,961,2.851,962,2.851,963,2.851,964,2.851,965,2.508,966,2.508,967,2.851,968,2.851,969,2.851,970,2.851]],["t/1053",[0,2.348,3,0.49,6,1.406,12,0.666,20,1.406,22,0.821,24,2.698,39,0.907,41,0.767,43,2.942,47,2.211,51,0.208,59,2.539,60,2.054,91,1.004,143,2.513,145,2.073,146,1.509,150,1.367,154,1.36,158,0.715,183,1.624,216,1.406,282,1.509,317,2.539,319,2.073,328,1.901,333,2.588,356,2.336,396,2.698,402,3.529,465,1.312,495,1.901,502,2.539,514,2.28,563,3.529,604,1.786,615,2.539,622,1.901,686,1.901,713,2.887,784,3.104,796,2.073,824,2.539,838,1.901,855,2.822,857,2.28,936,2.28,944,2.887,945,2.887,946,3.457,947,3.457,948,2.887,953,2.887,959,3.457,960,2.887,961,2.887,962,2.887,963,2.887,964,3.93,965,2.539,966,2.539,967,3.93,968,2.887,969,2.887,971,3.414,972,3.414,973,3.414,974,3.414,975,3.414,976,3.414,977,3.414,978,4.648,979,4.648,980,4.648,981,4.648,982,3.414,983,2.887,984,3.414,985,2.539,986,3.414,987,2.887]],["t/1055",[10,1.494,20,1.714,24,3.165,39,1.136,50,2.779,60,1.839,81,3.095,94,1.83,95,2.317,143,1.979,146,1.839,149,1.979,150,1.557,153,1.979,158,0.872,216,1.714,328,2.317,378,3.095,396,3.011,465,1.599,495,2.317,604,2.035,637,1.714,686,2.317,769,3.095,805,2.779,806,3.095,883,4.332,932,3.519,936,2.779,946,3.939,947,3.939,949,4.332,959,3.939,965,3.095,966,3.095,970,3.519,988,4.161,989,4.161,990,4.161,991,5.295,992,5.295]],["t/1057",[0,1.535,1,1.35,2,1.276,3,0.435,6,1.548,9,1.276,10,0.686,11,1.719,12,1.335,13,1.919,14,0.734,16,2.191,19,0.46,20,0.787,22,1.029,25,0.833,26,0.46,31,1.276,34,2.252,35,1.421,36,1.276,38,0.909,39,0.591,41,1.362,44,0.845,47,2.47,51,0.285,52,0.845,53,0.833,54,0.614,58,1.064,91,1.257,92,1.421,94,0.6,95,2.38,128,0.642,130,1.163,148,1.838,153,0.909,154,0.779,158,0.4,168,0.967,174,1.616,175,1.16,179,2.022,198,1.276,201,2.034,208,1.616,211,0.46,216,1.246,220,1.163,229,0.787,231,0.909,232,1.16,277,0.909,283,3.181,287,1.421,296,0.562,307,1.838,316,1.246,356,1.89,362,2.892,364,1.616,379,1.276,383,1.616,429,1.16,431,0.734,465,0.734,484,2.252,490,1.421,497,1.616,543,1.16,560,1.421,585,2.56,588,1.421,590,1.616,604,1.444,615,2.252,616,1.616,622,1.685,630,1.276,633,1.616,651,1.421,652,1.421,721,1.616,784,2.856,799,3.178,805,1.276,808,1.421,810,1.421,830,1.616,834,1.616,838,3.228,839,1.616,850,1.616,855,1.838,868,3.467,882,1.276,911,1.616,919,1.421,942,1.616,983,2.56,985,2.252,993,1.616,994,1.616,995,1.911,996,1.616,997,1.911,998,3.615,999,2.56,1000,4.987,1001,2.56,1002,3.615,1003,1.911,1004,1.911,1005,1.616,1006,1.911,1007,1.911,1008,1.616,1009,5.194,1010,1.911,1011,1.911,1012,1.911,1013,4.276,1014,1.911,1015,3.178,1016,1.911,1017,3.027,1018,1.911,1019,3.759,1020,1.911,1021,2.56,1022,3.027,1023,1.911,1024,1.911,1025,1.911,1026,3.027,1027,3.027,1028,1.911,1029,1.911,1030,1.911,1031,1.911,1032,1.911,1033,1.911,1034,1.911,1035,3.759,1036,3.027,1037,3.027,1038,1.911,1039,1.911,1040,1.911,1041,1.911,1042,1.911,1043,1.911,1044,1.911,1045,1.911,1046,3.027,1047,1.911,1048,3.027,1049,1.911,1050,3.027,1051,1.911,1052,1.616,1053,1.911,1054,1.911,1055,1.911,1056,1.911,1057,1.911]],["t/1059",[0,1.446,3,0.886,11,1.427,12,1.323,19,0.67,26,1.138,39,1.074,43,1.55,44,1.231,47,1.324,51,0.289,52,1.231,53,0.766,54,0.869,83,2.242,91,1.184,109,1.446,143,1.916,150,1.184,154,1.335,158,0.583,168,1.335,198,1.86,200,2.242,201,1.324,203,1.659,210,1.55,220,1.07,225,0.935,226,2.69,231,1.916,281,2.071,283,2.071,287,2.071,331,2.071,356,1.78,362,2.635,378,2.071,431,1.548,465,1.818,471,2.996,500,3.406,609,2.354,622,1.55,637,1.659,686,1.55,763,3.406,805,3.464,806,2.071,808,2.996,817,2.071,838,2.242,855,1.691,857,1.86,882,3.675,885,4.385,886,3.406,996,2.354,998,2.354,999,2.354,1000,4.002,1001,2.354,1002,3.406,1015,2.354,1058,4.028,1059,4.028,1060,4.028,1061,4.028,1062,4.028,1063,4.028,1064,4.028,1065,3.406,1066,4.028,1067,4.732,1068,4.732,1069,2.784,1070,4.028,1071,2.784,1072,2.784,1073,2.784,1074,4.028,1075,2.784,1076,2.784,1077,2.784,1078,2.784,1079,2.784,1080,2.784,1081,2.784,1082,2.784,1083,2.784,1084,2.784,1085,4.028,1086,2.784,1087,2.784]],["t/1061",[0,2.363,3,0.638,12,0.868,17,2.283,19,1.444,47,2.115,51,0.272,116,1.597,144,3.687,153,2.626,158,0.932,164,2.835,244,1.966,274,4.106,332,2.97,377,3.76,424,3.308,499,3.308,502,3.308,504,3.76,516,2.97,640,3.308,870,4.668,871,3.76,872,3.76,949,3.308,1005,3.76,1065,3.76,1088,6.004,1089,4.447,1090,6.004,1091,4.447,1092,4.447,1093,4.447,1094,4.447]],["t/1063",[3,0.802,8,2.548,10,1.798,11,1.378,17,1.959,19,0.918,22,0.918,25,1.05,31,2.548,34,2.838,35,2.838,36,3.962,37,2.006,39,0.745,43,2.124,46,2.548,51,0.376,52,2.213,54,0.719,63,3.226,91,1.122,140,3.226,158,0.799,164,1.959,211,1.482,230,3.226,284,3.226,301,2.838,333,2.124,343,2.124,347,3.344,362,2.124,372,1.466,374,2.317,396,1.815,431,1.466,468,2.317,491,2.548,499,2.838,604,1.466,659,2.838,754,3.724,784,3.962,796,2.317,848,2.838,849,3.226,868,2.838,878,3.226,985,2.838,987,4.233,993,3.226,994,3.226,1008,3.226,1052,3.226,1095,3.816,1096,4.233,1097,3.816,1098,3.816,1099,3.816,1100,5.006,1101,3.226,1102,3.816,1103,5.006,1104,3.816]],["t/1065",[0,1.823,6,2.09,9,2.603,10,1.399,11,1.072,19,1.221,22,1.439,24,1.853,25,1.807,26,1.221,29,3.39,39,0.76,45,2.169,47,1.853,49,3.295,51,0.238,52,1.722,54,0.559,95,2.169,164,2.606,178,3.295,192,2.603,211,1.221,214,2.169,220,1.497,225,1.308,229,2.09,245,2.169,260,2.603,276,2.366,292,3.295,296,1.146,316,1.605,347,2.603,372,1.497,440,3.632,465,1.497,487,3.295,491,3.39,627,2.899,630,2.603,631,3.295,655,3.295,838,2.169,845,3.295,893,3.295,919,2.899,1101,4.292,1105,3.897,1106,3.897,1107,3.897,1108,3.897,1109,3.897,1110,3.897,1111,3.897,1112,3.897,1113,3.897,1114,3.897,1115,3.897,1116,3.897,1117,3.897,1118,3.897,1119,3.897]],["t/1067",[3,0.86,12,1.103,26,1.441,37,1.404,39,0.993,51,0.311,52,1.729,54,0.561,94,1.777,105,2.909,116,1.404,129,4.302,146,1.729,157,2.375,203,1.61,224,2.909,225,1.313,244,1.729,248,2.909,252,2.909,296,1.15,300,3.307,329,2.375,338,2.612,362,2.177,401,2.909,431,1.503,465,1.503,468,2.375,603,2.375,604,1.503,610,3.307,614,3.307,617,3.307,623,4.302,637,1.61,691,4.302,863,3.307,882,3.398,1021,3.307,1096,3.307,1120,5.655,1121,5.655,1122,3.91,1123,3.91,1124,3.91,1125,5.087,1126,3.91,1127,3.91,1128,3.91,1129,5.087,1130,3.91,1131,3.91,1132,3.91,1133,5.087,1134,3.91,1135,3.91,1136,3.91,1137,3.91,1138,3.91,1139,3.91,1140,3.91]]],"invertedIndex":[["",{"_index":12,"t":{"989":{"position":[[119,1],[559,4]]},"1003":{"position":[[209,1]]},"1005":{"position":[[1269,1],[2550,1],[2571,2]]},"1007":{"position":[[202,1],[317,1],[526,1],[777,1],[953,1]]},"1015":{"position":[[448,2]]},"1017":{"position":[[366,1],[396,1]]},"1021":{"position":[[39,1],[2366,1],[2387,1],[2447,1],[2498,1],[2500,1],[2543,1],[2545,1],[2568,1],[2591,1],[2618,1],[2638,1],[2668,1],[3726,1],[3747,1],[3804,1],[3860,1],[3862,1],[3900,1],[3902,1],[3918,1],[3939,1],[3964,1],[3984,1],[4005,1],[4033,1],[4110,1]]},"1023":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"1029":{"position":[[213,1],[238,1],[259,1]]},"1031":{"position":[[400,2],[458,2]]},"1039":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[312,1],[320,4],[325,1],[330,1],[570,1],[697,1],[706,1],[728,1],[730,1]]},"1041":{"position":[[83,1],[85,1]]},"1043":{"position":[[71,2],[796,1],[1237,1],[1360,3],[1711,4],[1716,2],[1825,1],[1906,1],[1994,1],[2456,2],[2673,1],[2675,1],[2753,1],[2755,1],[2859,1],[3380,1],[3519,1],[4332,2],[6580,2],[6649,1],[7095,2],[7737,1],[8393,1],[10239,1],[10270,1],[11299,1],[11637,1],[11719,1],[11785,1],[12438,1],[12790,2]]},"1047":{"position":[[147,1],[149,1]]},"1049":{"position":[[215,1],[241,1],[278,1],[343,1]]},"1051":{"position":[[895,1]]},"1053":{"position":[[750,1]]},"1057":{"position":[[242,1],[272,4],[317,1],[513,1],[557,1],[629,1],[640,1],[655,1],[796,1],[879,3],[912,1],[923,1],[925,1],[969,1],[988,1],[1050,1],[1282,1],[1468,1],[1644,1],[1737,1],[1803,1],[1901,1],[2080,1],[2161,1],[2266,2],[2269,3],[2273,5],[2279,1],[2396,1],[2398,1],[2494,1],[2582,1],[2612,1],[2656,4],[2665,2],[3338,1],[3419,1],[3448,2],[3451,2],[3484,1],[3496,2],[3523,2],[3556,5],[3566,1]]},"1059":{"position":[[269,1],[304,1],[340,1],[376,1],[411,1],[433,1],[456,1],[473,1],[491,1],[627,4],[1264,1],[1465,1],[1467,1],[1679,2],[1778,1],[1813,1],[1849,1],[1871,1],[1894,1],[1911,1],[1934,1],[1952,1]]},"1061":{"position":[[316,1]]},"1067":{"position":[[92,1],[459,1],[493,1]]}}}],["0",{"_index":758,"t":{"1043":{"position":[[1430,1],[4592,1],[4605,1]]}}}],["0.0.0.0:4180",{"_index":545,"t":{"1021":{"position":[[4112,14]]}}}],["0.001",{"_index":982,"t":{"1053":{"position":[[884,5]]}}}],["0400",{"_index":947,"t":{"1051":{"position":[[241,5],[1083,4]]},"1053":{"position":[[122,5],[1171,4]]},"1055":{"position":[[267,5],[593,4]]}}}],["1",{"_index":331,"t":{"1005":{"position":[[2289,1]]},"1043":{"position":[[1475,3],[12290,4]]},"1059":{"position":[[1630,2]]}}}],["100",{"_index":827,"t":{"1043":{"position":[[4688,3]]}}}],["12",{"_index":986,"t":{"1053":{"position":[[1048,2]]}}}],["123456.apps.googleusercontent.com",{"_index":743,"t":{"1043":{"position":[[592,35]]}}}],["127.0.0.1:4180",{"_index":806,"t":{"1043":{"position":[[4092,16]]},"1055":{"position":[[732,14]]},"1059":{"position":[[664,14]]}}}],["128",{"_index":188,"t":{"1001":{"position":[[383,3],[434,3]]}}}],["168h0m0",{"_index":751,"t":{"1043":{"position":[[1039,8]]}}}],["19/mar/2015:17:20:19",{"_index":946,"t":{"1051":{"position":[[218,21],[1061,20]]},"1053":{"position":[[99,21],[1149,20]]},"1055":{"position":[[244,21],[571,20]]}}}],["192",{"_index":717,"t":{"1039":{"position":[[644,3]]}}}],["1h",{"_index":290,"t":{"1005":{"position":[[919,4]]}}}],["1s",{"_index":787,"t":{"1043":{"position":[[2571,4]]}}}],["2",{"_index":312,"t":{"1005":{"position":[[1510,1]]},"1021":{"position":[[2765,2]]},"1043":{"position":[[11761,3],[12366,4]]}}}],["2.0",{"_index":448,"t":{"1017":{"position":[[213,3]]},"1021":{"position":[[35,3]]}}}],["200",{"_index":987,"t":{"1053":{"position":[[1097,3]]},"1063":{"position":[[223,3],[336,3]]}}}],["202",{"_index":994,"t":{"1057":{"position":[[131,3]]},"1063":{"position":[[868,3]]}}}],["2048",{"_index":569,"t":{"1023":{"position":[[1052,4]]}}}],["24",{"_index":715,"t":{"1039":{"position":[[630,2]]}}}],["2>&1",{"_index":1137,"t":{"1067":{"position":[[488,4]]}}}],["2>/dev/nul",{"_index":698,"t":{"1039":{"position":[[227,11]]}}}],["3",{"_index":359,"t":{"1007":{"position":[[1119,2]]}}}],["3/4",{"_index":900,"t":{"1043":{"position":[[12063,3]]}}}],["30",{"_index":1085,"t":{"1059":{"position":[[1652,3],[1675,3]]}}}],["32",{"_index":706,"t":{"1039":{"position":[[309,2],[578,2],[708,2]]}}}],["3650",{"_index":581,"t":{"1023":{"position":[[1175,4]]}}}],["401",{"_index":34,"t":{"989":{"position":[[403,3]]},"1057":{"position":[[158,3],[965,3]]},"1063":{"position":[[895,3]]}}}],["4180",{"_index":1073,"t":{"1059":{"position":[[979,5]]}}}],["443",{"_index":808,"t":{"1043":{"position":[[4177,6],[12637,3]]},"1057":{"position":[[251,3]]},"1059":{"position":[[909,3],[1273,3]]}}}],["4kb",{"_index":1017,"t":{"1057":{"position":[[1733,3],[1938,4]]}}}],["5",{"_index":325,"t":{"1005":{"position":[[1988,1]]}}}],["6",{"_index":361,"t":{"1007":{"position":[[1155,2]]}}}],["7",{"_index":823,"t":{"1043":{"position":[[4521,1]]}}}],["74.125.224.72",{"_index":960,"t":{"1051":{"position":[[808,13]]},"1053":{"position":[[663,13]]}}}],["80",{"_index":910,"t":{"1043":{"position":[[12623,3]]}}}],["_",{"_index":703,"t":{"1039":{"position":[[279,3],[327,2],[732,3]]},"1041":{"position":[[104,4]]},"1047":{"position":[[168,4]]}}}],["__host",{"_index":755,"t":{"1043":{"position":[[1216,7]]}}}],["__secur",{"_index":756,"t":{"1043":{"position":[[1228,8]]}}}],["_oauth2_proxi",{"_index":186,"t":{"1001":{"position":[[338,14]]},"1043":{"position":[[1266,15]]}}}],["_oauth2_proxy_1",{"_index":1056,"t":{"1057":{"position":[[3951,18]]}}}],["abov",{"_index":970,"t":{"1051":{"position":[[1324,5]]},"1055":{"position":[[45,5]]}}}],["accept",{"_index":31,"t":{"989":{"position":[[363,7]]},"1043":{"position":[[9089,8]]},"1057":{"position":[[135,8]]},"1063":{"position":[[872,8]]}}}],["access",{"_index":316,"t":{"1005":{"position":[[1746,7]]},"1007":{"position":[[447,6],[622,7]]},"1011":{"position":[[296,7],[924,6],[999,6],[1036,6],[1186,6],[1217,6],[1306,6]]},"1013":{"position":[[40,6]]},"1021":{"position":[[1651,6],[1710,7],[2284,6]]},"1023":{"position":[[305,7],[2650,6],[3170,10]]},"1029":{"position":[[528,6],[638,6],[673,6]]},"1043":{"position":[[3333,6],[5560,6],[5630,6],[5714,6],[6496,6],[7324,6],[9542,6],[9571,6],[11543,6]]},"1057":{"position":[[1306,6],[1447,6]]},"1065":{"position":[[214,9]]}}}],["access_by_lua_block",{"_index":1047,"t":{"1057":{"position":[[3399,19]]}}}],["access_token",{"_index":837,"t":{"1043":{"position":[[5589,12]]}}}],["accompani",{"_index":384,"t":{"1011":{"position":[[382,11]]}}}],["account",{"_index":291,"t":{"1005":{"position":[[977,7],[1091,8],[2388,7]]},"1021":{"position":[[948,8],[3087,8]]},"1023":{"position":[[260,8],[737,7]]},"1029":{"position":[[204,7],[487,7]]},"1043":{"position":[[3797,7],[3841,7]]}}}],["acr",{"_index":732,"t":{"1043":{"position":[[34,3]]}}}],["activ",{"_index":340,"t":{"1007":{"position":[[66,6],[592,6]]}}}],["actual",{"_index":652,"t":{"1027":{"position":[[221,6]]},"1029":{"position":[[124,6]]},"1057":{"position":[[3721,6]]}}}],["ad",{"_index":45,"t":{"989":{"position":[[637,5]]},"1003":{"position":[[289,2]]},"1019":{"position":[[4,6],[49,2]]},"1043":{"position":[[8976,2],[9587,5]]},"1045":{"position":[[750,6]]},"1065":{"position":[[939,5]]}}}],["add",{"_index":113,"t":{"995":{"position":[[148,3]]},"1007":{"position":[[0,3],[809,3],[979,3]]},"1015":{"position":[[79,3]]},"1019":{"position":[[74,3]]},"1021":{"position":[[1296,3],[1643,3],[1874,3]]},"1029":{"position":[[0,3]]},"1035":{"position":[[80,3]]},"1039":{"position":[[332,3]]},"1043":{"position":[[5690,4],[12715,3]]}}}],["add_head",{"_index":1015,"t":{"1057":{"position":[[1608,10],[2496,10],[2539,10]]},"1059":{"position":[[1402,10]]}}}],["addit",{"_index":379,"t":{"1011":{"position":[[206,10],[775,8]]},"1021":{"position":[[1373,10]]},"1029":{"position":[[559,10]]},"1057":{"position":[[1968,10]]}}}],["addition",{"_index":800,"t":{"1043":{"position":[[3889,12]]}}}],["addr>:/oauth2/callback",{"_index":658,"t":{"1027":{"position":[[611,24]]}}}],["health",{"_index":849,"t":{"1043":{"position":[[6994,6],[7081,6]]},"1063":{"position":[[384,6]]}}}],["healthcheck",{"_index":792,"t":{"1043":{"position":[[2790,12]]}}}],["here",{"_index":552,"t":{"1023":{"position":[[344,5]]}}}],["hex",{"_index":191,"t":{"1001":{"position":[[406,3]]}}}],["histor",{"_index":152,"t":{"999":{"position":[[103,13]]}}}],["hit",{"_index":270,"t":{"1005":{"position":[[404,3]]},"1007":{"position":[[668,3],[1023,7]]}}}],["hmac",{"_index":1090,"t":{"1061":{"position":[[142,6],[361,4],[493,4]]}}}],["homepag",{"_index":648,"t":{"1027":{"position":[[57,9]]}}}],["host",{"_index":356,"t":{"1007":{"position":[[870,4]]},"1015":{"position":[[41,7],[827,6]]},"1027":{"position":[[606,4]]},"1031":{"position":[[47,4],[495,4],[560,4],[630,4]]},"1043":{"position":[[914,4],[6274,4],[6308,4]]},"1051":{"position":[[927,4],[960,4]]},"1053":{"position":[[443,9],[782,4],[815,4]]},"1057":{"position":[[370,4],[375,6],[708,4],[713,6]]},"1059":{"position":[[1520,4],[1525,6]]}}}],["host>/api/v3",{"_index":408,"t":{"1011":{"position":[[1953,13]]}}}],["host>/login/oauth/access_token",{"_index":407,"t":{"1011":{"position":[[1878,31]]}}}],["host>/login/oauth/author",{"_index":405,"t":{"1011":{"position":[[1808,28]]}}}],["host>/oauth2/callback",{"_index":667,"t":{"1031":{"position":[[144,21],[298,22]]}}}],["host>/realms/:/sign_in",{"_index":852,"t":{"1043":{"position":[[7208,18]]}}}],["oauth2_proxy_",{"_index":929,"t":{"1047":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":934,"t":{"1047":{"position":[[425,27]]}}}],["oauth2_proxy_email_domain",{"_index":935,"t":{"1047":{"position":[[489,27]]}}}],["oauth2_proxy_jwt_key",{"_index":587,"t":{"1023":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":618,"t":{"1023":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":753,"t":{"1043":{"position":[[1154,11]]}}}],["oauthproxy.go",{"_index":1092,"t":{"1061":{"position":[[227,14]]}}}],["obtain",{"_index":906,"t":{"1043":{"position":[[12150,9]]}}}],["occur",{"_index":990,"t":{"1055":{"position":[[187,5]]}}}],["oidc",{"_index":440,"t":{"1015":{"position":[[900,4]]},"1021":{"position":[[463,4],[495,4],[608,4],[721,6],[815,4],[884,4],[3029,4]]},"1023":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"1043":{"position":[[5097,4],[5209,4],[5254,4],[5364,4],[5455,4],[5476,4],[5526,4],[5794,4],[6528,4],[10572,4],[10599,4],[10656,4],[12361,4]]},"1065":{"position":[[481,4],[667,4],[780,4],[889,4]]}}}],["oidc\"redirect_url",{"_index":505,"t":{"1021":{"position":[[2368,18],[3728,18]]}}}],["oidc_issuer_url",{"_index":515,"t":{"1021":{"position":[[2679,15]]}}}],["ok",{"_index":1096,"t":{"1063":{"position":[[227,2],[340,2]]},"1067":{"position":[[534,2]]}}}],["okoauth2",{"_index":1139,"t":{"1067":{"position":[[500,8]]}}}],["okta",{"_index":479,"t":{"1021":{"position":[[792,5],[833,5],[903,5],[919,4],[1772,4],[3048,4],[3174,4],[3649,4],[3822,4]]}}}],["old",{"_index":822,"t":{"1043":{"position":[[4507,3],[4567,3]]}}}],["omit",{"_index":912,"t":{"1043":{"position":[[12673,4]]}}}],["on",{"_index":30,"t":{"989":{"position":[[354,3]]},"993":{"position":[[674,4]]},"997":{"position":[[187,3]]},"1023":{"position":[[2206,3]]},"1029":{"position":[[683,3]]},"1033":{"position":[[156,3]]},"1039":{"position":[[39,3]]},"1043":{"position":[[347,4],[7481,4],[10517,3]]},"1051":{"position":[[298,3]]}}}],["onc",{"_index":123,"t":{"995":{"position":[[421,4]]},"1005":{"position":[[2558,4]]},"1023":{"position":[[2843,4]]}}}],["open",{"_index":76,"t":{"993":{"position":[[113,4]]},"1005":{"position":[[460,4]]},"1021":{"position":[[106,4]]}}}],["openid",{"_index":238,"t":{"1003":{"position":[[292,6],[544,6]]},"1015":{"position":[[132,7]]},"1021":{"position":[[0,6],[697,6],[1935,6]]},"1023":{"position":[[862,6],[906,6]]},"1043":{"position":[[5391,6]]}}}],["openssl",{"_index":572,"t":{"1023":{"position":[[1104,7]]},"1039":{"position":[[78,7],[288,7]]}}}],["option",{"_index":296,"t":{"1005":{"position":[[1062,11]]},"1011":{"position":[[276,8],[362,7]]},"1015":{"position":[[679,7]]},"1021":{"position":[[1028,10],[1330,6],[1759,8]]},"1023":{"position":[[1540,8],[2132,7],[3495,7]]},"1027":{"position":[[407,8],[530,7],[706,7]]},"1029":{"position":[[344,8],[584,7]]},"1031":{"position":[[223,7]]},"1037":{"position":[[48,8],[148,7]]},"1041":{"position":[[169,6]]},"1043":{"position":[[0,6],[52,9],[803,8],[1306,8],[1537,11],[10059,7],[11923,10],[12226,6],[12403,7],[12840,7]]},"1045":{"position":[[61,6]]},"1057":{"position":[[4097,6]]},"1065":{"position":[[985,6]]},"1067":{"position":[[660,8]]}}}],["order",{"_index":682,"t":{"1037":{"position":[[109,5]]}}}],["org",{"_index":387,"t":{"1011":{"position":[[534,3],[635,7],[795,4],[1559,3]]},"1043":{"position":[[2981,3],[3467,3]]}}}],["organ",{"_index":351,"t":{"1007":{"position":[[430,13]]},"1011":{"position":[[259,12],[580,12],[713,12]]}}}],["organis",{"_index":388,"t":{"1011":{"position":[[678,12]]},"1043":{"position":[[3027,12]]}}}],["orgname/repo",{"_index":397,"t":{"1011":{"position":[[1150,12]]},"1043":{"position":[[3225,12]]}}}],["origin",{"_index":279,"t":{"1005":{"position":[[628,7]]},"1021":{"position":[[146,10]]}}}],["os,base64",{"_index":692,"t":{"1039":{"position":[[125,10]]}}}],["otherwis",{"_index":487,"t":{"1021":{"position":[[1210,10]]},"1065":{"position":[[992,9]]}}}],["out",{"_index":491,"t":{"1021":{"position":[[1432,3],[1625,3]]},"1023":{"position":[[1156,3]]},"1063":{"position":[[461,3]]},"1065":{"position":[[17,4],[325,3]]}}}],["output",{"_index":936,"t":{"1049":{"position":[[34,6],[81,6]]},"1051":{"position":[[142,6]]},"1053":{"position":[[23,6]]},"1055":{"position":[[80,6]]}}}],["outsid",{"_index":932,"t":{"1047":{"position":[[326,7]]},"1055":{"position":[[193,7]]}}}],["overrid",{"_index":454,"t":{"1019":{"position":[[183,8]]},"1043":{"position":[[6830,8],[8044,8]]}}}],["override_speci",{"_index":722,"t":{"1039":{"position":[[711,16]]}}}],["overwrit",{"_index":684,"t":{"1037":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":679,"t":{"1035":{"position":[[37,7]]}}}],["pad",{"_index":194,"t":{"1001":{"position":[[479,9]]}}}],["page",{"_index":347,"t":{"1007":{"position":[[332,4],[551,4],[792,4],[962,4]]},"1043":{"position":[[6903,4],[10754,4]]},"1063":{"position":[[426,5],[465,4]]},"1065":{"position":[[329,4]]}}}],["pair",{"_index":196,"t":{"1001":{"position":[[533,4]]},"1043":{"position":[[2256,5]]}}}],["pane",{"_index":258,"t":{"1005":{"position":[[237,5],[280,5],[321,5],[428,5]]}}}],["paramet",{"_index":919,"t":{"1045":{"position":[[258,10],[1096,10],[1121,9]]},"1057":{"position":[[3773,10]]},"1065":{"position":[[364,10]]}}}],["part",{"_index":1019,"t":{"1057":{"position":[[1796,6],[2177,4],[2455,4]]}}}],["particularli",{"_index":931,"t":{"1047":{"position":[[286,12]]}}}],["pass",{"_index":1,"t":{"989":{"position":[[12,7]]},"997":{"position":[[276,6]]},"1005":{"position":[[2104,4]]},"1007":{"position":[[1292,6]]},"1021":{"position":[[1102,6]]},"1023":{"position":[[2283,4]]},"1027":{"position":[[388,4]]},"1029":{"position":[[325,4]]},"1031":{"position":[[204,4]]},"1043":{"position":[[512,7],[5555,4],[5578,4],[5758,4],[5789,4],[5859,4],[5880,4],[6083,7],[6221,4],[6243,4],[6269,4],[6291,4],[6339,4],[6362,4],[9537,4]]},"1045":{"position":[[71,4]]},"1057":{"position":[[990,4],[1301,4],[1330,4]]}}}],["password",{"_index":742,"t":{"1043":{"position":[[471,8],[491,8],[1827,8],[7966,8],[7988,9],[8057,8],[8113,8],[8144,9],[8204,9],[8234,8]]}}}],["patch",{"_index":135,"t":{"995":{"position":[[601,7]]}}}],["path",{"_index":333,"t":{"1005":{"position":[[2349,4]]},"1043":{"position":[[753,4],[1291,4],[1322,4],[1749,4],[2369,4],[2405,5],[2463,5],[3821,4],[4869,4],[6656,5],[6937,4],[7158,4],[10142,5],[10342,5],[11209,4],[11256,4],[11356,5],[11450,4]]},"1045":{"position":[[501,5],[703,4],[852,4],[1256,4]]},"1049":{"position":[[854,4],[880,6]]},"1053":{"position":[[162,8],[1014,4]]},"1063":{"position":[[279,6]]}}}],["path/to/cert.key",{"_index":1081,"t":{"1059":{"position":[[1383,18]]}}}],["path/to/cert.pem",{"_index":1079,"t":{"1059":{"position":[[1344,18]]}}}],["path/to/sit",{"_index":1031,"t":{"1057":{"position":[[2623,15]]}}}],["pem",{"_index":568,"t":{"1023":{"position":[[1023,4],[2383,3],[2528,3]]},"1043":{"position":[[4724,3],[4901,3]]}}}],["per",{"_index":678,"t":{"1033":{"position":[[166,3]]},"1043":{"position":[[352,3]]}}}],["perform",{"_index":480,"t":{"1021":{"position":[[839,7]]}}}],["period",{"_index":783,"t":{"1043":{"position":[[2505,6]]}}}],["permiss",{"_index":330,"t":{"1005":{"position":[[2239,11]]},"1007":{"position":[[538,12],[703,12]]},"1029":{"position":[[176,11]]}}}],["pick",{"_index":344,"t":{"1007":{"position":[[171,4],[349,4]]},"1021":{"position":[[1542,4],[1967,4]]}}}],["pin",{"_index":1075,"t":{"1059":{"position":[[1227,3]]}}}],["ping",{"_index":848,"t":{"1043":{"position":[[6932,4],[6953,4],[7008,7],[7018,4],[9934,4],[9983,4]]},"1049":{"position":[[716,5],[743,4],[791,4],[849,4]]},"1063":{"position":[[318,5]]}}}],["ping,/path2",{"_index":781,"t":{"1043":{"position":[[2441,14]]}}}],["plain",{"_index":1038,"t":{"1057":{"position":[[2894,5]]}}}],["platform",{"_index":500,"t":{"1021":{"position":[[1910,8]]},"1059":{"position":[[599,8],[790,8]]}}}],["pleas",{"_index":75,"t":{"993":{"position":[[99,6],[144,6],[346,6],[434,6]]},"1003":{"position":[[425,6]]}}}],["plural",{"_index":726,"t":{"1041":{"position":[[186,6]]},"1047":{"position":[[257,6]]}}}],["poc",{"_index":757,"t":{"1043":{"position":[[1353,6]]}}}],["polici",{"_index":496,"t":{"1021":{"position":[[1658,8]]}}}],["port",{"_index":471,"t":{"1021":{"position":[[338,5]]},"1043":{"position":[[12537,5],[12596,4],[12709,5],[12780,5]]},"1059":{"position":[[904,4],[974,4]]}}}],["possibl",{"_index":66,"t":{"991":{"position":[[165,9]]},"993":{"position":[[467,9]]},"1015":{"position":[[651,8]]}}}],["post",{"_index":80,"t":{"993":{"position":[[158,4]]}}}],["potenti",{"_index":102,"t":{"993":{"position":[[622,9]]}}}],["powershel",{"_index":689,"t":{"1039":{"position":[[86,10]]}}}],["pr",{"_index":78,"t":{"993":{"position":[[130,2]]},"995":{"position":[[373,3]]}}}],["prebuilt",{"_index":1120,"t":{"1067":{"position":[[34,8],[192,8],[288,8]]}}}],["preced",{"_index":683,"t":{"1037":{"position":[[118,11]]}}}],["prefer",{"_index":841,"t":{"1043":{"position":[[5954,9],[6004,6],[6030,6],[6419,9],[9447,9]]}}}],["preferred_usernam",{"_index":247,"t":{"1003":{"position":[[484,18]]}}}],["prefix",{"_index":754,"t":{"1043":{"position":[[1209,6],[7131,6],[11698,6],[12422,8]]},"1047":{"position":[[75,9]]},"1063":{"position":[[136,6],[175,6]]}}}],["preflight",{"_index":874,"t":{"1043":{"position":[[10015,9]]}}}],["present",{"_index":107,"t":{"993":{"position":[[705,7]]},"997":{"position":[[237,7]]},"1043":{"position":[[6544,8],[10874,9],[10990,9]]}}}],["pretti",{"_index":639,"t":{"1025":{"position":[[282,6]]}}}],["prevent",{"_index":165,"t":{"999":{"position":[[460,7]]}}}],["preview",{"_index":483,"t":{"1021":{"position":[[989,7]]}}}],["previou",{"_index":138,"t":{"995":{"position":[[652,8]]}}}],["previous",{"_index":119,"t":{"995":{"position":[[287,10]]}}}],["print",{"_index":892,"t":{"1043":{"position":[[11590,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":693,"t":{"1039":{"position":[[136,57]]}}}],["privat",{"_index":85,"t":{"993":{"position":[[222,8]]},"995":{"position":[[37,9]]},"1011":{"position":[[1048,7]]},"1023":{"position":[[1065,7]]},"1043":{"position":[[4709,7],[4881,7],[11264,7]]}}}],["process",{"_index":615,"t":{"1023":{"position":[[2587,7]]},"1053":{"position":[[933,8]]},"1057":{"position":[[2934,9],[2980,9]]}}}],["product",{"_index":268,"t":{"1005":{"position":[[370,8]]},"1023":{"position":[[294,10]]}}}],["profil",{"_index":428,"t":{"1015":{"position":[[140,7]]},"1023":{"position":[[1992,7]]},"1043":{"position":[[6469,7],[6488,7]]}}}],["project",{"_index":56,"t":{"991":{"position":[[33,8],[74,7],[204,8]]},"1005":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"1011":{"position":[[13,8]]},"1017":{"position":[[55,8]]},"1021":{"position":[[118,9]]}}}],["prompt",{"_index":735,"t":{"1043":{"position":[[85,6],[6514,6],[6533,7],[6562,6]]}}}],["proper",{"_index":795,"t":{"1043":{"position":[[2871,6]]}}}],["properli",{"_index":432,"t":{"1015":{"position":[[325,9]]}}}],["properti",{"_index":346,"t":{"1007":{"position":[[319,12]]}}}],["propos",{"_index":117,"t":{"995":{"position":[[257,8]]}}}],["protect",{"_index":204,"t":{"1001":{"position":[[774,8]]},"1007":{"position":[[892,7]]},"1021":{"position":[[1496,11],[1586,8]]},"1043":{"position":[[8959,9]]}}}],["protocol",{"_index":563,"t":{"1023":{"position":[[842,9]]},"1043":{"position":[[12614,8]]},"1051":{"position":[[973,8],[1003,9]]},"1053":{"position":[[502,13],[828,8],[858,9]]}}}],["provid",{"_index":26,"t":{"989":{"position":[[309,8],[473,9],[740,8]]},"1003":{"position":[[54,8],[90,10],[195,9],[360,8],[395,8],[450,9],[559,9]]},"1005":{"position":[[2208,8]]},"1007":{"position":[[1190,8]]},"1011":{"position":[[184,8],[1264,7]]},"1021":{"position":[[84,9],[133,8],[307,8],[454,8],[469,8],[500,9],[712,8],[774,9],[820,8],[889,8],[1225,8],[2357,8],[3034,8],[3717,8]]},"1023":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"1025":{"position":[[14,8],[125,9],[528,8]]},"1027":{"position":[[378,9]]},"1029":{"position":[[315,9]]},"1031":{"position":[[323,8]]},"1035":{"position":[[27,9],[61,8],[151,9]]},"1043":{"position":[[1465,9],[1870,8],[6585,8],[6607,8],[6625,8],[6724,9],[6801,8],[6920,9],[10715,8],[10901,9],[12306,9],[12822,8]]},"1045":{"position":[[194,9],[353,7],[691,7],[1149,9]]},"1057":{"position":[[4023,8]]},"1059":{"position":[[89,9],[460,12],[1898,12]]},"1065":{"position":[[169,8],[785,8]]},"1067":{"position":[[403,8],[546,8],[596,8],[749,8]]}}}],["provider'",{"_index":630,"t":{"1023":{"position":[[3422,10]]},"1043":{"position":[[6843,10]]},"1057":{"position":[[1699,10]]},"1065":{"position":[[309,10]]}}}],["provider.example.com",{"_index":1119,"t":{"1065":{"position":[[894,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":1112,"t":{"1065":{"position":[[486,36]]}}}],["provider/sign_out_pag",{"_index":1115,"t":{"1065":{"position":[[672,25]]}}}],["provider=\"github",{"_index":668,"t":{"1031":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":433,"t":{"1015":{"position":[[379,17]]}}}],["provider=azur",{"_index":357,"t":{"1007":{"position":[[1066,14]]}}}],["provider=bitbucket",{"_index":662,"t":{"1029":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":653,"t":{"1027":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":412,"t":{"1013":{"position":[[341,17]]}}}],["providers.new",{"_index":680,"t":{"1035":{"position":[[98,15]]}}}],["proxi",{"_index":3,"t":{"989":{"position":[[32,5],[729,5]]},"991":{"position":[[12,5]]},"993":{"position":[[65,5],[339,6]]},"997":{"position":[[109,5]]},"999":{"position":[[97,5],[396,5],[655,6]]},"1003":{"position":[[179,5]]},"1005":{"position":[[2306,5],[2422,6]]},"1007":{"position":[[914,6],[1053,5]]},"1021":{"position":[[284,5],[422,5],[528,5],[549,5],[2961,5],[2981,5],[4157,5],[4177,5]]},"1023":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"1027":{"position":[[206,5],[249,5]]},"1029":{"position":[[108,6],[152,5]]},"1031":{"position":[[238,6]]},"1035":{"position":[[130,5]]},"1037":{"position":[[7,5]]},"1043":{"position":[[7125,5],[7173,5],[7239,5],[7279,8],[7465,5],[8995,5],[9038,6],[10324,5],[11913,5],[12035,5],[12204,5]]},"1045":{"position":[[7,5],[623,5],[978,5]]},"1049":{"position":[[19,5]]},"1051":{"position":[[905,5]]},"1053":{"position":[[760,5]]},"1057":{"position":[[192,8],[1763,5]]},"1059":{"position":[[80,5],[204,5],[263,5],[647,5],[946,8],[965,5],[992,5],[1713,5],[1772,5]]},"1061":{"position":[[29,7]]},"1063":{"position":[[7,5],[87,7],[169,5]]},"1067":{"position":[[132,5],[242,5],[509,5],[622,5]]}}}],["proxy'",{"_index":9,"t":{"989":{"position":[[96,7]]},"1027":{"position":[[296,7]]},"1057":{"position":[[86,7]]},"1065":{"position":[[91,7]]}}}],["proxy.cfg",{"_index":729,"t":{"1041":{"position":[[225,9],[326,9]]}}}],["proxy/oauth2",{"_index":1125,"t":{"1067":{"position":[[119,12],[229,12]]}}}],["proxy/oauth2/callback",{"_index":650,"t":{"1027":{"position":[[163,22]]}}}],["proxy=tru",{"_index":1087,"t":{"1059":{"position":[[1923,10]]}}}],["proxy>/oauth2/callback",{"_index":661,"t":{"1029":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":368,"t":{"1007":{"position":[[1333,17]]}}}],["proxy_connect_timeout",{"_index":1083,"t":{"1059":{"position":[[1608,21]]}}}],["proxy_pass",{"_index":998,"t":{"1057":{"position":[[319,10],[657,10],[2584,10],[2948,10]]},"1059":{"position":[[1469,10]]}}}],["proxy_pass_request_bodi",{"_index":1006,"t":{"1057":{"position":[[883,23]]}}}],["proxy_read_timeout",{"_index":1086,"t":{"1059":{"position":[[1656,18]]}}}],["proxy_send_timeout",{"_index":1084,"t":{"1059":{"position":[[1633,18]]}}}],["proxy_set_head",{"_index":1000,"t":{"1057":{"position":[[353,16],[382,16],[423,16],[458,16],[559,16],[691,16],[720,16],[761,16],[847,16],[1218,16],[1249,16],[1428,16]]},"1059":{"position":[[1503,16],[1532,16],[1573,16]]}}}],["proxyus",{"_index":858,"t":{"1043":{"position":[[7523,9]]}}}],["pubjwk",{"_index":599,"t":{"1023":{"position":[[1917,6]]},"1043":{"position":[[7295,6]]}}}],["pubkey",{"_index":854,"t":{"1043":{"position":[[7317,6]]}}}],["public",{"_index":394,"t":{"1011":{"position":[[1011,6],[1229,6]]},"1023":{"position":[[974,6]]}}}],["public_repo",{"_index":400,"t":{"1011":{"position":[[1376,11]]}}}],["publicli",{"_index":82,"t":{"993":{"position":[[175,9]]}}}],["push",{"_index":393,"t":{"1011":{"position":[[994,4]]},"1043":{"position":[[3328,4]]}}}],["put",{"_index":1126,"t":{"1067":{"position":[[149,3]]}}}],["python",{"_index":687,"t":{"1039":{"position":[[66,6],[107,6]]}}}],["quay.io/oauth2",{"_index":1128,"t":{"1067":{"position":[[214,14]]}}}],["queri",{"_index":1110,"t":{"1065":{"position":[[358,5]]}}}],["quick",{"_index":571,"t":{"1023":{"position":[[1080,5]]}}}],["quickli",{"_index":65,"t":{"991":{"position":[[154,7]]}}}],["r_basicprofil",{"_index":446,"t":{"1017":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":447,"t":{"1017":{"position":[[187,15]]}}}],["rand",{"_index":705,"t":{"1039":{"position":[[296,4]]}}}],["random",{"_index":190,"t":{"1001":{"position":[[391,6],[442,6]]}}}],["random_password",{"_index":719,"t":{"1039":{"position":[[663,17]]}}}],["rang",{"_index":896,"t":{"1043":{"position":[[11812,6]]}}}],["raw",{"_index":1025,"t":{"1057":{"position":[[2229,3]]}}}],["rc3.org",{"_index":1094,"t":{"1061":{"position":[[478,8]]}}}],["rd",{"_index":1109,"t":{"1065":{"position":[[355,2]]}}}],["re",{"_index":178,"t":{"999":{"position":[[799,2]]},"1065":{"position":[[200,2]]}}}],["reach",{"_index":879,"t":{"1043":{"position":[[10771,5]]}}}],["read",{"_index":332,"t":{"1005":{"position":[[2323,4]]},"1011":{"position":[[1207,4]]},"1029":{"position":[[240,4],[261,4]]},"1061":{"position":[[396,4]]}}}],["readi",{"_index":136,"t":{"995":{"position":[[613,6]]}}}],["readiness_check",{"_index":794,"t":{"1043":{"position":[[2837,17]]}}}],["real",{"_index":622,"t":{"1023":{"position":[[3070,4],[3215,4]]},"1043":{"position":[[7365,4],[7423,4],[7509,4],[7539,4],[9077,4],[11936,4]]},"1051":{"position":[[867,4]]},"1053":{"position":[[722,4]]},"1057":{"position":[[401,4],[739,4]]},"1059":{"position":[[1551,4]]}}}],["realm>/protocol/openid",{"_index":418,"t":{"1013":{"position":[[482,22],[570,22],[661,22]]}}}],["reason",{"_index":326,"t":{"1005":{"position":[[1998,6]]}}}],["recommend",{"_index":287,"t":{"1005":{"position":[[867,11]]},"1057":{"position":[[3574,11]]},"1059":{"position":[[14,11]]}}}],["redeem",{"_index":406,"t":{"1011":{"position":[[1837,6]]},"1013":{"position":[[519,6]]},"1023":{"position":[[3765,6]]},"1025":{"position":[[686,6]]},"1031":{"position":[[527,6]]},"1043":{"position":[[7549,6],[10639,6]]}}}],["redempt",{"_index":859,"t":{"1043":{"position":[[7573,10]]}}}],["redi",{"_index":40,"t":{"989":{"position":[[552,6]]},"997":{"position":[[326,5]]},"1001":{"position":[[4,5],[57,6],[606,5],[711,5],[873,5],[936,5],[964,5],[1055,5],[1112,5],[1175,5],[1208,5],[1254,5],[1357,5],[1412,5],[1475,5],[1505,5]]},"1007":{"position":[[1380,5]]},"1043":{"position":[[7700,5],[7752,5],[7837,5],[7857,5],[7892,5],[7909,5],[7960,5],[7982,5],[8017,5],[8075,5],[8098,5],[8129,5],[8193,5],[8228,5],[8245,5],[8279,5],[8334,5],[8355,5],[8408,5],[8494,5],[8515,5],[8549,5],[8575,5],[8633,5],[8668,5],[8700,5],[8733,5],[9335,5]]}}}],["redirect",{"_index":25,"t":{"989":{"position":[[276,10]]},"1003":{"position":[[123,8]]},"1005":{"position":[[699,8]]},"1009":{"position":[[95,8]]},"1013":{"position":[[76,8]]},"1015":{"position":[[178,8],[399,8],[477,8]]},"1017":{"position":[[217,8]]},"1021":{"position":[[556,8],[2027,8],[3309,8],[3369,8]]},"1023":{"position":[[1379,8],[1619,8],[3610,8]]},"1025":{"position":[[448,12]]},"1027":{"position":[[315,8],[562,8],[680,8]]},"1031":{"position":[[87,8],[267,8]]},"1043":{"position":[[2048,9],[2609,8],[7595,8],[7625,8],[11664,11],[12500,8]]},"1057":{"position":[[490,8],[591,8]]},"1063":{"position":[[586,8]]},"1065":{"position":[[22,8],[269,8],[380,8],[550,8],[585,8],[646,9],[873,8],[1006,8]]}}}],["redis://host[:port",{"_index":860,"t":{"1043":{"position":[[7788,21],[7937,20],[8445,21]]}}}],["reduc",{"_index":940,"t":{"1049":{"position":[[804,8]]}}}],["refer",{"_index":564,"t":{"1023":{"position":[[930,5],[1284,8]]},"1025":{"position":[[367,5]]}}}],["refresh",{"_index":175,"t":{"999":{"position":[[734,10]]},"1005":{"position":[[882,7],[936,7],[2540,9]]},"1021":{"position":[[2137,7],[3478,7]]},"1043":{"position":[[1373,7],[1390,7],[12333,8]]},"1057":{"position":[[1494,8]]}}}],["refresh/access/id",{"_index":205,"t":{"1001":{"position":[[787,17]]}}}],["regex",{"_index":7,"t":{"989":{"position":[[70,6]]},"1043":{"position":[[10094,5],[10363,5]]}}}],["regist",{"_index":224,"t":{"1003":{"position":[[17,8]]},"1023":{"position":[[453,8],[765,8]]},"1067":{"position":[[559,8]]}}}],["registr",{"_index":249,"t":{"1005":{"position":[[16,12]]},"1007":{"position":[[114,14],[156,14]]},"1017":{"position":[[18,12]]}}}],["regular",{"_index":121,"t":{"995":{"position":[[365,7]]}}}],["releas",{"_index":129,"t":{"995":{"position":[[493,8],[661,9]]},"1067":{"position":[[59,7],[421,7]]}}}],["reload",{"_index":1057,"t":{"1057":{"position":[[4107,6]]}}}],["remain",{"_index":449,"t":{"1017":{"position":[[300,9]]}}}],["remot",{"_index":901,"t":{"1043":{"position":[[12067,6]]}}}],["remote_addr",{"_index":1001,"t":{"1057":{"position":[[409,13],[747,13]]},"1059":{"position":[[1559,13]]}}}],["remote_address",{"_index":944,"t":{"1051":{"position":[[181,16]]},"1053":{"position":[[62,16]]}}}],["remov",{"_index":1105,"t":{"1065":{"position":[[76,7]]}}}],["replac",{"_index":723,"t":{"1041":{"position":[[65,9]]},"1047":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":712,"t":{"1039":{"position":[[550,19]]}}}],["repli",{"_index":354,"t":{"1007":{"position":[[779,6]]}}}],["repo",{"_index":395,"t":{"1011":{"position":[[1076,8]]},"1023":{"position":[[2497,4]]},"1043":{"position":[[3148,4]]}}}],["report",{"_index":968,"t":{"1051":{"position":[[1163,8]]},"1053":{"position":[[1301,8]]}}}],["repositori",{"_index":382,"t":{"1011":{"position":[[329,11],[953,11],[1018,10],[1056,11],[1126,10],[1236,10],[1320,11],[1445,10]]},"1029":{"position":[[245,12],[696,10]]},"1043":{"position":[[3201,10],[3292,10],[3347,11]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":645,"t":{"1025":{"position":[[714,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":644,"t":{"1025":{"position":[[647,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":646,"t":{"1025":{"position":[[786,39]]}}}],["url]/stat",{"_index":928,"t":{"1045":{"position":[[984,13]]}}}],["url]/var/www/stat",{"_index":924,"t":{"1045":{"position":[[629,21]]}}}],["us",{"_index":51,"t":{"989":{"position":[[761,6]]},"993":{"position":[[550,4]]},"995":{"position":[[3,3],[361,3]]},"997":{"position":[[115,4]]},"999":{"position":[[78,4],[287,5]]},"1001":{"position":[[863,5],[1102,3],[1118,3],[1363,3],[1481,3],[1511,3]]},"1003":{"position":[[385,5]]},"1007":{"position":[[230,3],[1169,5]]},"1011":{"position":[[1426,3],[1686,5]]},"1013":{"position":[[766,5]]},"1015":{"position":[[16,5],[816,5]]},"1019":{"position":[[175,4]]},"1021":{"position":[[194,3],[238,5],[320,5],[382,3],[740,4],[924,5],[4047,3]]},"1023":{"position":[[2172,3],[3211,3]]},"1025":{"position":[[105,5],[276,5]]},"1027":{"position":[[370,3],[670,3]]},"1029":{"position":[[43,3],[307,3],[555,3],[707,3]]},"1033":{"position":[[29,3],[105,3],[209,3]]},"1035":{"position":[[139,3]]},"1039":{"position":[[35,3]]},"1041":{"position":[[286,4]]},"1043":{"position":[[927,4],[1196,3],[1990,3],[2669,3],[2749,3],[3273,3],[4247,5],[4370,3],[4735,4],[4912,4],[5656,4],[6040,3],[6126,3],[6194,4],[6696,4],[6785,4],[6882,4],[6979,4],[7066,4],[7401,4],[7810,4],[7843,3],[8154,4],[8222,3],[8307,4],[8340,3],[8467,4],[8500,3],[8521,3],[8608,3],[8639,3],[8767,3],[9483,7],[9525,4],[9693,7],[9801,7],[10889,5],[11005,5],[12217,3],[12376,5],[12786,3]]},"1045":{"position":[[830,4],[1214,4]]},"1047":{"position":[[299,6]]},"1049":{"position":[[111,5],[735,5]]},"1051":{"position":[[857,3]]},"1053":{"position":[[712,3]]},"1057":{"position":[[1651,5],[2677,3],[2719,3],[3589,3],[4070,3]]},"1059":{"position":[[732,5],[815,3],[1184,3]]},"1061":{"position":[[487,5]]},"1063":{"position":[[375,3],[521,4],[647,4],[777,4],[926,3]]},"1065":{"position":[[345,5]]},"1067":{"position":[[182,5],[628,5]]}}}],["usag",{"_index":206,"t":{"1001":{"position":[[851,6]]}}}],["user",{"_index":22,"t":{"989":{"position":[[248,4],[643,4]]},"997":{"position":[[138,4]]},"999":{"position":[[790,5]]},"1001":{"position":[[184,4]]},"1005":{"position":[[393,6],[2171,4],[2439,4]]},"1007":{"position":[[410,5],[661,6]]},"1011":{"position":[[436,4],[463,5],[971,5],[1196,5],[1286,4],[1481,4],[1619,8]]},"1017":{"position":[[119,4]]},"1021":{"position":[[2256,5]]},"1025":{"position":[[58,5]]},"1029":{"position":[[659,5]]},"1043":{"position":[[2878,4],[3368,4],[3396,5],[5914,5],[6020,4],[6248,4],[6344,4],[6379,5],[7023,4],[7043,4],[7111,4],[9401,5],[11457,4],[11503,4]]},"1049":{"position":[[748,4]]},"1051":{"position":[[94,4],[341,4],[410,4],[1149,4]]},"1053":{"position":[[1287,4]]},"1057":{"position":[[1013,4],[1115,5],[1237,4],[1242,6]]},"1063":{"position":[[258,4]]},"1065":{"position":[[12,4],[121,4],[282,4],[393,4]]}}}],["user'",{"_index":140,"t":{"997":{"position":[[17,6]]},"1063":{"position":[[792,6]]}}}],["user/settings/appl",{"_index":665,"t":{"1031":{"position":[[52,28]]}}}],["user@domain.com",{"_index":945,"t":{"1051":{"position":[[200,17]]},"1053":{"position":[[81,17]]}}}],["user_ag",{"_index":974,"t":{"1053":{"position":[[180,14]]}}}],["userag",{"_index":967,"t":{"1051":{"position":[[1128,9]]},"1053":{"position":[[516,14],[1266,9]]}}}],["usernam",{"_index":402,"t":{"1011":{"position":[[1506,8],[1644,9]]},"1043":{"position":[[1816,8],[3414,8],[5964,8],[6069,8],[6130,8],[6429,8],[9457,8]]},"1051":{"position":[[63,8],[676,13],[1198,8],[1239,8]]},"1053":{"position":[[412,13],[1336,8],[1377,8]]}}}],["username@email.com",{"_index":969,"t":{"1051":{"position":[[1207,18]]},"1053":{"position":[[1345,18]]}}}],["utc",{"_index":816,"t":{"1043":{"position":[[4430,3]]}}}],["v3.0.0",{"_index":1135,"t":{"1067":{"position":[[451,7]]}}}],["v6.1.1",{"_index":1122,"t":{"1067":{"position":[[70,7]]}}}],["valid",{"_index":116,"t":{"995":{"position":[[231,8]]},"1003":{"position":[[189,5]]},"1005":{"position":[[958,9]]},"1009":{"position":[[83,5]]},"1011":{"position":[[1910,8]]},"1013":{"position":[[70,5],[608,8]]},"1025":{"position":[[756,8],[849,8]]},"1031":{"position":[[595,8]]},"1039":{"position":[[572,5]]},"1043":{"position":[[10847,10],[10963,10],[11523,8],[11556,10],[12494,5]]},"1061":{"position":[[384,11]]},"1067":{"position":[[313,9]]}}}],["valu",{"_index":183,"t":{"1001":{"position":[[203,5]]},"1003":{"position":[[418,6]]},"1007":{"position":[[1011,5]]},"1013":{"position":[[865,5]]},"1043":{"position":[[38,6]]},"1045":{"position":[[795,5]]},"1051":{"position":[[947,5]]},"1053":{"position":[[802,5]]}}}],["var/www/stat",{"_index":927,"t":{"1045":{"position":[[933,16]]}}}],["variabl",{"_index":604,"t":{"1023":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"1025":{"position":[[192,9]]},"1037":{"position":[[69,9],[183,9],[209,9]]},"1047":{"position":[[63,8],[238,8]]},"1049":{"position":[[613,10]]},"1051":{"position":[[744,9],[772,8]]},"1053":{"position":[[596,9],[627,8]]},"1055":{"position":[[500,9],[532,8]]},"1057":{"position":[[2202,9],[2838,9],[3826,8]]},"1063":{"position":[[189,9]]},"1067":{"position":[[684,9]]}}}],["verif",{"_index":833,"t":{"1043":{"position":[[5226,12],[5500,13]]}}}],["verifi",{"_index":401,"t":{"1011":{"position":[[1435,9]]},"1043":{"position":[[3282,9],[5183,8],[10434,8],[10830,6],[10946,6]]},"1067":{"position":[[350,9]]}}}],["version",{"_index":105,"t":{"993":{"position":[[679,8]]},"1043":{"position":[[11578,7],[11596,7]]},"1067":{"position":[[443,7]]}}}],["via",{"_index":201,"t":{"1001":{"position":[[717,3],[958,3]]},"1023":{"position":[[3308,3]]},"1025":{"position":[[161,3]]},"1037":{"position":[[31,3]]},"1043":{"position":[[338,3],[5614,3],[5819,3],[8674,3]]},"1051":{"position":[[1365,3]]},"1057":{"position":[[71,3],[1007,3],[2944,3],[3755,3]]},"1059":{"position":[[1247,3]]}}}],["volum",{"_index":941,"t":{"1049":{"position":[[817,7]]}}}],["vulner",{"_index":73,"t":{"993":{"position":[[37,13],[606,13]]},"995":{"position":[[75,16],[308,15]]}}}],["want",{"_index":214,"t":{"1001":{"position":[[1094,4]]},"1007":{"position":[[396,4],[884,4]]},"1021":{"position":[[1046,4]]},"1023":{"position":[[580,4]]},"1045":{"position":[[677,5]]},"1065":{"position":[[865,4]]}}}],["warn",{"_index":902,"t":{"1043":{"position":[[12083,8]]}}}],["way",{"_index":380,"t":{"1011":{"position":[[217,4]]},"1023":{"position":[[1086,3]]}}}],["web",{"_index":274,"t":{"1005":{"position":[[529,4]]},"1021":{"position":[[1898,3],[3142,3],[3261,3]]},"1061":{"position":[[423,3],[514,3]]}}}],["webapp",{"_index":345,"t":{"1007":{"position":[[194,7]]}}}],["websocket",{"_index":853,"t":{"1043":{"position":[[7245,10],[7269,9]]}}}],["well",{"_index":209,"t":{"1001":{"position":[[924,4],[1145,4],[1308,5]]},"1043":{"position":[[2290,5],[2328,5],[2923,4]]}}}],["whether",{"_index":425,"t":{"1015":{"position":[[0,7]]},"1025":{"position":[[241,7]]},"1043":{"position":[[9054,7]]}}}],["whitelist",{"_index":893,"t":{"1043":{"position":[[11613,9],[12386,9],[12729,11]]},"1065":{"position":[[954,9]]}}}],["wide_authority_to_your_service_account",{"_index":310,"t":{"1005":{"position":[[1438,38]]}}}],["window",{"_index":352,"t":{"1007":{"position":[[577,8]]}}}],["wish",{"_index":486,"t":{"1021":{"position":[[1146,4],[1578,4],[1671,4],[2276,4]]},"1027":{"position":[[95,5]]}}}],["within",{"_index":74,"t":{"993":{"position":[[51,6]]},"999":{"position":[[568,6]]},"1011":{"position":[[703,6]]},"1021":{"position":[[4077,6]]}}}],["without",{"_index":995,"t":{"1057":{"position":[[184,7]]}}}],["work",{"_index":58,"t":{"991":{"position":[[61,4]]},"1015":{"position":[[320,4]]},"1021":{"position":[[1247,5],[1744,4]]},"1023":{"position":[[210,4]]},"1043":{"position":[[2918,4]]},"1057":{"position":[[1528,4]]}}}],["write",{"_index":399,"t":{"1011":{"position":[[1300,5]]}}}],["x",{"_index":838,"t":{"1043":{"position":[[5618,1],[5699,1],[5902,1],[5920,1],[5942,1],[6367,1],[6385,1],[6407,1],[7490,1],[7507,1],[7521,1],[7537,1],[9075,1],[9386,1],[9407,1],[9432,1],[9556,1],[10227,1]]},"1051":{"position":[[865,1]]},"1053":{"position":[[720,1]]},"1057":{"position":[[399,1],[440,1],[475,1],[576,1],[737,1],[778,1],[1011,1],[1022,1],[1235,1],[1266,1],[1445,1]]},"1059":{"position":[[1549,1],[1590,1]]},"1065":{"position":[[570,1]]}}}],["x.y.z.linux",{"_index":1140,"t":{"1067":{"position":[[515,11]]}}}],["x509",{"_index":574,"t":{"1023":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":839,"t":{"1043":{"position":[[5672,12],[9364,12]]},"1057":{"position":[[1080,12]]}}}],["xxx\"client_secret",{"_index":538,"t":{"1021":{"position":[[3920,18]]}}}],["xxxxx\"client_secret",{"_index":510,"t":{"1021":{"position":[[2570,20]]}}}],["you'd",{"_index":398,"t":{"1011":{"position":[[1166,5]]}}}],["yourcompany.com",{"_index":744,"t":{"1043":{"position":[[853,18]]}}}],["yyy\"pass_access_token",{"_index":539,"t":{"1021":{"position":[[3941,22]]}}}],["yyyyy\"pass_access_token",{"_index":511,"t":{"1021":{"position":[[2593,24]]}}}],["zzz\"cookie_secur",{"_index":540,"t":{"1021":{"position":[[3986,18]]}}}],["zzzzz\"skip_provider_button",{"_index":513,"t":{"1021":{"position":[[2640,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file diff --git a/docs/7.0.x/behaviour/index.html b/docs/7.0.x/behaviour/index.html index f8135fd6..b080dc65 100644 --- a/docs/7.0.x/behaviour/index.html +++ b/docs/7.0.x/behaviour/index.html @@ -4,13 +4,13 @@ Behaviour | OAuth2 Proxy - +
Version: 7.0.x

Behaviour

  1. Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens).
  2. If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned)
  3. After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set
  4. The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration)

Notice that the proxy also provides a number of useful endpoints.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.0.x/community/security/index.html b/docs/7.0.x/community/security/index.html index 3dc948a1..8aded958 100644 --- a/docs/7.0.x/community/security/index.html +++ b/docs/7.0.x/community/security/index.html @@ -4,7 +4,7 @@ Security | OAuth2 Proxy - + @@ -28,7 +28,7 @@ If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.0.x/configuration/alpha-config/index.html b/docs/7.0.x/configuration/alpha-config/index.html index 3861a3dd..a570f25b 100644 --- a/docs/7.0.x/configuration/alpha-config/index.html +++ b/docs/7.0.x/configuration/alpha-config/index.html @@ -4,7 +4,7 @@ Alpha Configuration | OAuth2 Proxy - + @@ -34,7 +34,7 @@ response header.

FieldTypeDescription make up the header value

FieldTypeDescription
value[]byteValue expects a base64 encoded string value.
fromEnvstringFromEnv expects the name of an environment variable.
fromFilestringFromFile expects a path to a file containing the secret value.
claimstringClaim is the name of the claim in the session that the value should be
loaded from.
prefixstringPrefix is an optional prefix that will be prepended to the value of the
claim if it is non-empty.
basicAuthPasswordSecretSourceBasicAuthPassword converts this claim into a basic auth header.
Note the value of claim will become the basic auth username and the
basicAuthPassword will be used as the password value.

SecretSource​

(Appears on: ClaimSource, HeaderValue)

SecretSource references an individual secret value. Only one source within the struct should be defined at any time.

FieldTypeDescription
value[]byteValue expects a base64 encoded string value.
fromEnvstringFromEnv expects the name of an environment variable.
fromFilestringFromFile expects a path to a file containing the secret value.

Upstream​

(Appears on: Upstreams)

Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path.

FieldTypeDescription
idstringID should be a unique identifier for the upstream.
This value is required for all upstreams.
pathstringPath is used to map requests to the upstream server.
The closest match will take precedence and all Paths must be unique.
uristringThe URI of the upstream server. This may be an HTTP(S) server of a File
based URL. It may include a path, in which case all requests will be served
under that path.
Eg:
- http://localhost:8080
- https://service.localhost
- https://service.localhost/path
- file://host/path
If the URI's path is "/base" and the incoming request was for "/dir",
the upstream request will be for "/base/dir".
insecureSkipTLSVerifyboolInsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.
This option is insecure and will allow potential Man-In-The-Middle attacks
betweem OAuth2 Proxy and the usptream server.
Defaults to false.
staticboolStatic will make all requests to this upstream have a static response.
The response will have a body of "Authenticated" and a response code
matching StaticCode.
If StaticCode is not set, the response will return a 200 response.
staticCodeintStaticCode determines the response code for the Static response.
This option can only be used with Static enabled.
flushIntervalDurationFlushInterval is the period between flushing the response buffer when
streaming response from the upstream.
Defaults to 1 second.
passHostHeaderboolPassHostHeader determines whether the request host header should be proxied
to the upstream server.
Defaults to true.
proxyWebSocketsboolProxyWebSockets enables proxying of websockets to upstream servers
Defaults to true.

Upstreams​

([]Upstream alias)​

(Appears on: AlphaOptions)

Upstreams is a collection of definitions for upstream servers.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.0.x/configuration/oauth_provider/index.html b/docs/7.0.x/configuration/oauth_provider/index.html index 0d70f1ec..87448bf4 100644 --- a/docs/7.0.x/configuration/oauth_provider/index.html +++ b/docs/7.0.x/configuration/oauth_provider/index.html @@ -4,7 +4,7 @@ OAuth Provider Configuration | OAuth2 Proxy - + @@ -49,7 +49,7 @@ to setup the client id and client secret. Your "Redirection URI" will Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.0.x/configuration/overview/index.html b/docs/7.0.x/configuration/overview/index.html index 452e82d0..3145c1ea 100644 --- a/docs/7.0.x/configuration/overview/index.html +++ b/docs/7.0.x/configuration/overview/index.html @@ -4,7 +4,7 @@ Overview | OAuth2 Proxy - + @@ -19,7 +19,7 @@ The default format is configured as follows:

{{.Client}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}}

Available variables for request logging:

VariableExampleDescription
Client74.125.224.72The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true.
Hostdomain.comThe value of the Host header.
ProtocolHTTP/1.0The request protocol.
RequestDuration0.001The time in seconds that a request took to process.
RequestMethodGETThe request method.
RequestURI"/oauth2/auth"The URI path of the request.
ResponseSize12The size in bytes of the response.
StatusCode200The HTTP status code of the response.
Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
Upstream-The upstream data of the HTTP request.
UserAgent-The full user agent as reported by the requesting client.
Usernameusername@email.comThe email or username of the auth request.

Standard Log Format​

All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below:

[19/Mar/2015:17:20:19 -0400] [main.go:40] <MESSAGE>

If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows:

[{{.Timestamp}}] [{{.File}}] {{.Message}}

Available variables for standard logging:

VariableExampleDescription
Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
Filemain.go:40The file and line number of the logging statement.
MessageHTTP: listening on 127.0.0.1:4180The details of the log statement.

Configuring for use with the Nginx auth_request directive​

The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example:

server {
  listen 443 ssl;
  server_name ...;
  include ssl/ssl.conf;

  location /oauth2/ {
    proxy_pass       http://127.0.0.1:4180;
    proxy_set_header Host                    $host;
    proxy_set_header X-Real-IP               $remote_addr;
    proxy_set_header X-Scheme                $scheme;
    proxy_set_header X-Auth-Request-Redirect $request_uri;
    # or, if you are handling multiple domains:
    # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
  }
  location = /oauth2/auth {
    proxy_pass       http://127.0.0.1:4180;
    proxy_set_header Host             $host;
    proxy_set_header X-Real-IP        $remote_addr;
    proxy_set_header X-Scheme         $scheme;
    # nginx auth_request includes headers but not body
    proxy_set_header Content-Length   "";
    proxy_pass_request_body           off;
  }

  location / {
    auth_request /oauth2/auth;
    error_page 401 = /oauth2/sign_in;

    # pass information via X-User and X-Email headers to backend,
    # requires running with --set-xauthrequest flag
    auth_request_set $user   $upstream_http_x_auth_request_user;
    auth_request_set $email  $upstream_http_x_auth_request_email;
    proxy_set_header X-User  $user;
    proxy_set_header X-Email $email;

    # if you enabled --pass-access-token, this will pass the token to the backend
    auth_request_set $token  $upstream_http_x_auth_request_access_token;
    proxy_set_header X-Access-Token $token;

    # if you enabled --cookie-refresh, this is needed for it to work with auth_request
    auth_request_set $auth_cookie $upstream_http_set_cookie;
    add_header Set-Cookie $auth_cookie;

    # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
    # limit and so the OAuth2 Proxy splits these into multiple parts.
    # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
    # so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
    auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;

    # Extract the Cookie attributes from the first Set-Cookie header and append them
    # to the second part ($upstream_cookie_* variables only contain the raw cookie content)
    if ($auth_cookie ~* "(; .*)") {
        set $auth_cookie_name_0 $auth_cookie;
        set $auth_cookie_name_1 "auth_cookie_name_1=$auth_cookie_name_upstream_1$1";
    }

    # Send both Set-Cookie headers now if there was a second part
    if ($auth_cookie_name_upstream_1) {
        add_header Set-Cookie $auth_cookie_name_0;
        add_header Set-Cookie $auth_cookie_name_1;
    }

    proxy_pass http://backend/;
    # or "root /path/to/site;" or "fastcgi_pass ..." etc
  }
}

When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module.

nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
nginx.ingress.kubernetes.io/configuration-snippet: |
  auth_request_set $name_upstream_1 $upstream_cookie_name_1;

  access_by_lua_block {
    if ngx.var.name_upstream_1 ~= "" then
      ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
    end
  }

It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure).

You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be "$upstream_cookie__oauth2_proxy_1" instead of "$upstream_cookie_name_1" and the new cookie-name should be "_oauth2_proxy_1=" instead of "name_1=".

Configuring for use with the Traefik (v2) ForwardAuth middleware​

This option requires --reverse-proxy option to be set.

ForwardAuth with 401 errors middleware​

The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration:

http:
  routers:
    a-service:
      rule: "Host(`a-service.example.com`)"
      service: a-service-backend
      middlewares:
        - oauth-errors
        - oauth-auth
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    oauth:
      rule: "Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)"
      middlewares:
        - auth-headers
      service: oauth-backend
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"

  services:
    a-service-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.2:7555
    oauth-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.1:4180

  middlewares:
    auth-headers:
      headers:
        sslRedirect: true
        stsSeconds: 315360000
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        sslHost: example.com
        stsIncludeSubdomains: true
        stsPreload: true
        frameDeny: true
    oauth-auth:
      forwardAuth:
        address: https://oauth.example.com/oauth2/auth
        trustForwardHeader: true
    oauth-errors:
      errors:
        status:
          - "401-403"
        service: oauth-backend
        query: "/oauth2/sign_in"

ForwardAuth with static upstreams configuration​

Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint

Following options need to be set on oauth2-proxy:

  • --upstream=static://202: Configures a static response for authenticated sessions
  • --reverseproxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly
http:
  routers:
    a-service-route-1:
      rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)"
      service: a-service-backend
      middlewares:
        - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    a-service-route-2:
      rule: "Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)"
      service: a-service-backend
      middlewares:
        - oauth-auth-wo-redirect # unauthenticated session will return a 401
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    services-oauth2-route:
      rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)"
      middlewares:
        - auth-headers
      service: oauth-backend
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    oauth2-proxy-route:
      rule: "Host(`oauth.example.com`) && PathPrefix(`/`)"
      middlewares:
        - auth-headers
      service: oauth-backend
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"

  services:
    a-service-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.2:7555
    b-service-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.3:7555
    oauth-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.1:4180

  middlewares:
    auth-headers:
      headers:
        sslRedirect: true
        stsSeconds: 315360000
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        sslHost: example.com
        stsIncludeSubdomains: true
        stsPreload: true
        frameDeny: true
    oauth-auth-redirect:
      forwardAuth:
        address: https://oauth.example.com/
        trustForwardHeader: true
        authResponseHeaders:
          - X-Auth-Request-Access-Token
          - Authorization
    oauth-auth-wo-redirect:
      forwardAuth:
        address: https://oauth.example.com/oauth2/auth
        trustForwardHeader: true
        authResponseHeaders:
          - X-Auth-Request-Access-Token
          - Authorization
note

If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.0.x/configuration/session_storage/index.html b/docs/7.0.x/configuration/session_storage/index.html index ae76b8b3..25678d31 100644 --- a/docs/7.0.x/configuration/session_storage/index.html +++ b/docs/7.0.x/configuration/session_storage/index.html @@ -4,7 +4,7 @@ Session Storage | OAuth2 Proxy - + @@ -25,7 +25,7 @@ disclosure.

Usage--redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately.

Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately.

Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.0.x/configuration/tls/index.html b/docs/7.0.x/configuration/tls/index.html index 13d0b052..7e9bced2 100644 --- a/docs/7.0.x/configuration/tls/index.html +++ b/docs/7.0.x/configuration/tls/index.html @@ -4,7 +4,7 @@ TLS Configuration | OAuth2 Proxy - + @@ -15,7 +15,7 @@ external load balancer like Amazon ELB or Google Platform Load Balancing) use oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/.

An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS:

server {
    listen 443 default ssl;
    server_name internal.yourcompany.com;
    ssl_certificate /path/to/cert.pem;
    ssl_certificate_key /path/to/cert.key;
    add_header Strict-Transport-Security max-age=2592000;

    location / {
        proxy_pass http://127.0.0.1:4180;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Scheme $scheme;
        proxy_connect_timeout 1;
        proxy_send_timeout 30;
        proxy_read_timeout 30;
    }
}

The command line to run oauth2-proxy in this configuration would look like this:

./oauth2-proxy \
   --email-domain="yourcompany.com"  \
   --upstream=http://127.0.0.1:8080/ \
   --cookie-secret=... \
   --cookie-secure=true \
   --provider=... \
   --reverse-proxy=true \
   --client-id=... \
   --client-secret=...
Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.0.x/features/endpoints/index.html b/docs/7.0.x/features/endpoints/index.html index 23213e9d..5e2e7540 100644 --- a/docs/7.0.x/features/endpoints/index.html +++ b/docs/7.0.x/features/endpoints/index.html @@ -4,13 +4,13 @@ Endpoints | OAuth2 Proxy - +
Version: 7.0.x

Endpoints

OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable.

  • /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info
  • /ping - returns a 200 OK response, which is intended for use with health checks
  • /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies)
  • /oauth2/sign_out - this URL is used to clear the session cookie
  • /oauth2/start - a URL that will redirect to start the OAuth cycle
  • /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url.
  • /oauth2/userinfo - the URL is used to return user's email from the session in JSON format.
  • /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive

Sign out​

To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!):

/oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page

Alternatively, include the redirect URL in the X-Auth-Request-Redirect header:

GET /oauth2/sign_out HTTP/1.1
X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page
...

(The "sign_out_page" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.)

BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.0.x/features/request_signatures/index.html b/docs/7.0.x/features/request_signatures/index.html index b2f6b51b..7ede7d3b 100644 --- a/docs/7.0.x/features/request_signatures/index.html +++ b/docs/7.0.x/features/request_signatures/index.html @@ -4,7 +4,7 @@ Request Signatures | OAuth2 Proxy - + @@ -17,7 +17,7 @@ in oauthproxy.go.

signature_key must be of t following:

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.0.x/index.html b/docs/7.0.x/index.html index 419d6e6a..c8ef0fd8 100644 --- a/docs/7.0.x/index.html +++ b/docs/7.0.x/index.html @@ -4,13 +4,13 @@ Installation | OAuth2 Proxy - +
Version: 7.0.x

Installation

  1. Choose how to deploy:

    a. Download Prebuilt Binary (current release is v7.0.1)

    b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin

    c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available)

Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0.

$ sha256sum -c sha256sum.txt 2>&1 | grep OK
oauth2-proxy-x.y.z.linux-amd64: OK
  1. Select a Provider and Register an OAuth Application with a Provider
  2. Configure OAuth2 Proxy using config file, command line options, or environment variables
  3. Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)
Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.0.x/search-index.json b/docs/7.0.x/search-index.json index 54bd96cb..3f15111c 100644 --- a/docs/7.0.x/search-index.json +++ b/docs/7.0.x/search-index.json @@ -1 +1 @@ -[{"documents":[{"i":877,"t":"Installation","u":"/oauth2-proxy/docs/7.0.x/","b":["Docs"]},{"i":879,"t":"Behaviour","u":"/oauth2-proxy/docs/7.0.x/behaviour","b":["Docs"]},{"i":881,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","b":["Docs","Configuration"]},{"i":915,"t":"Alpha Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","b":["Docs","Configuration"]},{"i":940,"t":"Security","u":"/oauth2-proxy/docs/7.0.x/community/security","b":["Docs","Community"]},{"i":946,"t":"Session Storage","u":"/oauth2-proxy/docs/7.0.x/configuration/session_storage","b":["Docs","Configuration"]},{"i":952,"t":"Endpoints","u":"/oauth2-proxy/docs/7.0.x/features/endpoints","b":["Docs","Features"]},{"i":956,"t":"TLS Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/tls","b":["Docs","Configuration"]},{"i":958,"t":"Request Signatures","u":"/oauth2-proxy/docs/7.0.x/features/request_signatures","b":["Docs","Features"]},{"i":960,"t":"Overview","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","b":["Docs","Configuration"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/877",[0,2.353]],["t/879",[1,2.353]],["t/881",[2,1.467,3,1.467,4,0.843]],["t/915",[4,1.039,5,1.808]],["t/940",[6,2.353]],["t/946",[7,1.808,8,1.808]],["t/952",[9,2.353]],["t/956",[4,1.039,10,1.808]],["t/958",[11,1.808,12,1.808]],["t/960",[13,2.353]]],"invertedIndex":[["alpha",{"_index":5,"t":{"915":{"position":[[0,5]]}}}],["behaviour",{"_index":1,"t":{"879":{"position":[[0,9]]}}}],["configur",{"_index":4,"t":{"881":{"position":[[15,13]]},"915":{"position":[[6,13]]},"956":{"position":[[4,13]]}}}],["endpoint",{"_index":9,"t":{"952":{"position":[[0,9]]}}}],["instal",{"_index":0,"t":{"877":{"position":[[0,12]]}}}],["oauth",{"_index":2,"t":{"881":{"position":[[0,5]]}}}],["overview",{"_index":13,"t":{"960":{"position":[[0,8]]}}}],["provid",{"_index":3,"t":{"881":{"position":[[6,8]]}}}],["request",{"_index":11,"t":{"958":{"position":[[0,7]]}}}],["secur",{"_index":6,"t":{"940":{"position":[[0,8]]}}}],["session",{"_index":7,"t":{"946":{"position":[[0,7]]}}}],["signatur",{"_index":12,"t":{"958":{"position":[[8,10]]}}}],["storag",{"_index":8,"t":{"946":{"position":[[8,7]]}}}],["tl",{"_index":10,"t":{"956":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":883,"t":"Google Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#google-auth-provider","p":881},{"i":885,"t":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#azure-auth-provider","p":881},{"i":887,"t":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":881},{"i":889,"t":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#github-auth-provider","p":881},{"i":891,"t":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":881},{"i":893,"t":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":881},{"i":895,"t":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":881},{"i":897,"t":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":881},{"i":899,"t":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#openid-connect-provider","p":881},{"i":901,"t":"login.gov Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#logingov-provider","p":881},{"i":903,"t":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#nextcloud-provider","p":881},{"i":905,"t":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":881},{"i":907,"t":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":881},{"i":909,"t":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":881},{"i":911,"t":"Email Authentication","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#email-authentication","p":881},{"i":913,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":881},{"i":917,"t":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#using-alpha-configuration","p":915},{"i":919,"t":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":915},{"i":921,"t":"Removed options","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#removed-options","p":915},{"i":923,"t":"Configuration Reference","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#configuration-reference","p":915},{"i":924,"t":"AlphaOptions","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#alphaoptions","p":915},{"i":926,"t":"ClaimSource","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#claimsource","p":915},{"i":928,"t":"Duration","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#duration","p":915},{"i":930,"t":"Header","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#header","p":915},{"i":932,"t":"HeaderValue","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#headervalue","p":915},{"i":934,"t":"SecretSource","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#secretsource","p":915},{"i":936,"t":"Upstream","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#upstream","p":915},{"i":938,"t":"Upstreams","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#upstreams","p":915},{"i":942,"t":"Security Disclosures","u":"/oauth2-proxy/docs/7.0.x/community/security","h":"#security-disclosures","p":940},{"i":944,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.0.x/community/security","h":"#how-will-we-respond-to-disclosures","p":940},{"i":948,"t":"Cookie Storage","u":"/oauth2-proxy/docs/7.0.x/configuration/session_storage","h":"#cookie-storage","p":946},{"i":950,"t":"Redis Storage","u":"/oauth2-proxy/docs/7.0.x/configuration/session_storage","h":"#redis-storage","p":946},{"i":954,"t":"Sign out","u":"/oauth2-proxy/docs/7.0.x/features/endpoints","h":"#sign-out","p":952},{"i":962,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#generating-a-cookie-secret","p":960},{"i":964,"t":"Config File","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#config-file","p":960},{"i":966,"t":"Command Line Options","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#command-line-options","p":960},{"i":968,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#upstreams-configuration","p":960},{"i":970,"t":"Environment variables","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#environment-variables","p":960},{"i":972,"t":"Logging Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#logging-configuration","p":960},{"i":974,"t":"Auth Log Format","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#auth-log-format","p":960},{"i":976,"t":"Request Log Format","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#request-log-format","p":960},{"i":978,"t":"Standard Log Format","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#standard-log-format","p":960},{"i":980,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":960},{"i":982,"t":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":960},{"i":984,"t":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":960},{"i":986,"t":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":960}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/883",[0,3.209,1,1.312,2,1.033]],["t/885",[1,1.312,2,1.033,3,2.733]],["t/887",[1,1.312,2,1.033,4,3.209]],["t/889",[1,1.312,2,1.033,5,3.209]],["t/891",[1,1.312,2,1.033,6,3.209]],["t/893",[1,1.312,2,1.033,7,3.209]],["t/895",[1,1.312,2,1.033,8,3.209]],["t/897",[2,0.899,3,2.377,9,2.791,10,2.377]],["t/899",[2,1.033,11,3.209,12,3.209]],["t/901",[2,1.216,13,3.775]],["t/903",[2,1.216,14,3.775]],["t/905",[1,1.312,2,1.033,15,3.209]],["t/907",[1,1.312,2,1.033,16,3.209]],["t/909",[1,1.312,2,1.033,17,3.209]],["t/911",[18,3.775,19,3.775]],["t/913",[2,1.033,10,2.733,20,2.733]],["t/917",[21,2.42,22,3.209,23,1.593]],["t/919",[20,2.377,23,1.386,24,2.791,25,2.791]],["t/921",[26,3.775,27,3.215]],["t/923",[23,1.874,28,3.775]],["t/924",[29,4.582]],["t/926",[30,4.582]],["t/928",[31,4.582]],["t/930",[32,4.582]],["t/932",[33,4.582]],["t/934",[34,4.582]],["t/936",[35,3.121]],["t/938",[35,3.121]],["t/942",[36,3.775,37,3.215]],["t/944",[37,3.215,38,3.775]],["t/948",[39,3.215,40,3.215]],["t/950",[40,3.215,41,3.775]],["t/954",[42,3.775,43,3.775]],["t/962",[39,2.733,44,3.209,45,3.209]],["t/964",[46,3.775,47,3.775]],["t/966",[27,2.733,48,3.209,49,3.209]],["t/968",[23,1.874,35,2.571]],["t/970",[50,3.775,51,3.775]],["t/972",[23,1.874,52,2.571]],["t/974",[1,1.312,52,2.186,53,2.42]],["t/976",[52,2.186,53,2.42,54,3.209]],["t/978",[52,2.186,53,2.42,55,3.209]],["t/980",[21,1.862,23,1.226,56,2.469,57,2.469,58,2.469]],["t/982",[21,1.669,23,1.099,59,2.214,60,2.214,61,1.669,62,1.886]],["t/984",[61,2.104,62,2.377,63,2.791,64,2.791]],["t/986",[23,1.386,35,1.901,61,2.104,65,2.791]]],"invertedIndex":[["401",{"_index":63,"t":{"984":{"position":[[17,3]]}}}],["ad",{"_index":10,"t":{"897":{"position":[[16,2]]},"913":{"position":[[0,6]]}}}],["alpha",{"_index":22,"t":{"917":{"position":[[6,5]]}}}],["alphaopt",{"_index":29,"t":{"924":{"position":[[0,12]]}}}],["auth",{"_index":1,"t":{"883":{"position":[[7,4]]},"885":{"position":[[6,4]]},"887":{"position":[[9,4]]},"889":{"position":[[7,4]]},"891":{"position":[[9,4]]},"893":{"position":[[7,4]]},"895":{"position":[[9,4]]},"905":{"position":[[13,4]]},"907":{"position":[[10,4]]},"909":{"position":[[6,4]]},"974":{"position":[[0,4]]}}}],["auth_request",{"_index":57,"t":{"980":{"position":[[35,12]]}}}],["authent",{"_index":19,"t":{"911":{"position":[[6,14]]}}}],["azur",{"_index":3,"t":{"885":{"position":[[0,5]]},"897":{"position":[[10,5]]}}}],["bitbucket",{"_index":16,"t":{"907":{"position":[[0,9]]}}}],["claimsourc",{"_index":30,"t":{"926":{"position":[[0,11]]}}}],["command",{"_index":48,"t":{"966":{"position":[[0,7]]}}}],["config",{"_index":46,"t":{"964":{"position":[[0,6]]}}}],["configur",{"_index":23,"t":{"917":{"position":[[12,13]]},"919":{"position":[[11,13]]},"923":{"position":[[0,13]]},"968":{"position":[[10,13]]},"972":{"position":[[8,13]]},"980":{"position":[[0,11]]},"982":{"position":[[0,11]]},"986":{"position":[[34,13]]}}}],["connect",{"_index":12,"t":{"899":{"position":[[7,7]]}}}],["convert",{"_index":24,"t":{"919":{"position":[[0,10]]}}}],["cooki",{"_index":39,"t":{"948":{"position":[[0,6]]},"962":{"position":[[13,6]]}}}],["digitalocean",{"_index":15,"t":{"905":{"position":[[0,12]]}}}],["direct",{"_index":58,"t":{"980":{"position":[[48,9]]}}}],["disclosur",{"_index":37,"t":{"942":{"position":[[9,11]]},"944":{"position":[[23,12]]}}}],["durat",{"_index":31,"t":{"928":{"position":[[0,8]]}}}],["email",{"_index":18,"t":{"911":{"position":[[0,5]]}}}],["environ",{"_index":50,"t":{"970":{"position":[[0,11]]}}}],["error",{"_index":64,"t":{"984":{"position":[[21,6]]}}}],["facebook",{"_index":4,"t":{"887":{"position":[[0,8]]}}}],["file",{"_index":47,"t":{"964":{"position":[[7,4]]}}}],["format",{"_index":53,"t":{"974":{"position":[[9,6]]},"976":{"position":[[12,6]]},"978":{"position":[[13,6]]}}}],["forwardauth",{"_index":61,"t":{"982":{"position":[[42,11]]},"984":{"position":[[0,11]]},"986":{"position":[[0,11]]}}}],["gener",{"_index":44,"t":{"962":{"position":[[0,10]]}}}],["gitea",{"_index":17,"t":{"909":{"position":[[0,5]]}}}],["github",{"_index":5,"t":{"889":{"position":[[0,6]]}}}],["gitlab",{"_index":7,"t":{"893":{"position":[[0,6]]}}}],["googl",{"_index":0,"t":{"883":{"position":[[0,6]]}}}],["header",{"_index":32,"t":{"930":{"position":[[0,6]]}}}],["headervalu",{"_index":33,"t":{"932":{"position":[[0,11]]}}}],["keycloak",{"_index":6,"t":{"891":{"position":[[0,8]]}}}],["line",{"_index":49,"t":{"966":{"position":[[8,4]]}}}],["linkedin",{"_index":8,"t":{"895":{"position":[[0,8]]}}}],["log",{"_index":52,"t":{"972":{"position":[[0,7]]},"974":{"position":[[5,3]]},"976":{"position":[[8,3]]},"978":{"position":[[9,3]]}}}],["login.gov",{"_index":13,"t":{"901":{"position":[[0,9]]}}}],["microsoft",{"_index":9,"t":{"897":{"position":[[0,9]]}}}],["middlewar",{"_index":62,"t":{"982":{"position":[[54,10]]},"984":{"position":[[28,10]]}}}],["new",{"_index":20,"t":{"913":{"position":[[9,3]]},"919":{"position":[[32,3]]}}}],["nextcloud",{"_index":14,"t":{"903":{"position":[[0,9]]}}}],["nginx",{"_index":56,"t":{"980":{"position":[[29,5]]}}}],["openid",{"_index":11,"t":{"899":{"position":[[0,6]]}}}],["option",{"_index":27,"t":{"921":{"position":[[8,7]]},"966":{"position":[[13,7]]}}}],["out",{"_index":43,"t":{"954":{"position":[[5,3]]}}}],["provid",{"_index":2,"t":{"883":{"position":[[12,8]]},"885":{"position":[[11,8]]},"887":{"position":[[14,8]]},"889":{"position":[[12,8]]},"891":{"position":[[14,8]]},"893":{"position":[[12,8]]},"895":{"position":[[14,8]]},"897":{"position":[[19,8]]},"899":{"position":[[15,8]]},"901":{"position":[[10,8]]},"903":{"position":[[10,8]]},"905":{"position":[[18,8]]},"907":{"position":[[15,8]]},"909":{"position":[[11,8]]},"913":{"position":[[13,8]]}}}],["redi",{"_index":41,"t":{"950":{"position":[[0,5]]}}}],["refer",{"_index":28,"t":{"923":{"position":[[14,9]]}}}],["remov",{"_index":26,"t":{"921":{"position":[[0,7]]}}}],["request",{"_index":54,"t":{"976":{"position":[[0,7]]}}}],["respond",{"_index":38,"t":{"944":{"position":[[12,7]]}}}],["secret",{"_index":45,"t":{"962":{"position":[[20,6]]}}}],["secretsourc",{"_index":34,"t":{"934":{"position":[[0,12]]}}}],["secur",{"_index":36,"t":{"942":{"position":[[0,8]]}}}],["sign",{"_index":42,"t":{"954":{"position":[[0,4]]}}}],["standard",{"_index":55,"t":{"978":{"position":[[0,8]]}}}],["static",{"_index":65,"t":{"986":{"position":[[17,6]]}}}],["storag",{"_index":40,"t":{"948":{"position":[[7,7]]},"950":{"position":[[6,7]]}}}],["structur",{"_index":25,"t":{"919":{"position":[[36,9]]}}}],["traefik",{"_index":59,"t":{"982":{"position":[[29,7]]}}}],["upstream",{"_index":35,"t":{"936":{"position":[[0,8]]},"938":{"position":[[0,9]]},"968":{"position":[[0,9]]},"986":{"position":[[24,9]]}}}],["us",{"_index":21,"t":{"917":{"position":[[0,5]]},"980":{"position":[[16,3]]},"982":{"position":[[16,3]]}}}],["v2",{"_index":60,"t":{"982":{"position":[[37,4]]}}}],["variabl",{"_index":51,"t":{"970":{"position":[[12,9]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":878,"t":"Choose how to deploy: a. Download Prebuilt Binary (current release is v7.0.1) b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. $ sha256sum -c sha256sum.txt 2>&1 | grep OKoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/7.0.x/","h":"","p":877},{"i":880,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/7.0.x/behaviour","h":"","p":879},{"i":882,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure Facebook GitHub Keycloak GitLab LinkedIn Microsoft Azure AD OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket Gitea The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"","p":881},{"i":884,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"API Manager\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account: https://developers.google.com/identity/protocols/OAuth2ServiceAccount and make sure to download the json file. Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ).","s":"Google Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#google-auth-provider","p":881},{"i":886,"t":"Add an application: go to https://portal.azure.com, choose \"Azure Active Directory\" in the left menu, select \"App registrations\" and then click on \"New app registration\". Pick a name and choose \"Webapp / API\" as application type. Use https://internal.yourcompany.com as Sign-on URL. Click \"Create\". On the \"Settings\" / \"Properties\" page of the app, pick a logo and select \"Multi-tenanted\" if you want to allow users from multiple organizations to access your app. Note down the application ID. Click \"Save\". On the \"Settings\" / \"Required Permissions\" page of the app, click on \"Windows Azure Active Directory\" and then on \"Access the directory as the signed in user\". Hit \"Save\" and then then on \"Grant permissions\" (you might need another admin to do this). On the \"Settings\" / \"Reply URLs\" page of the app, add https://internal.yourcompanycom/oauth2/callback for each host that you want to protect by the oauth2 proxy. Click \"Save\". On the \"Settings\" / \"Keys\" page of the app, add a new key and note down the value after hitting \"Save\". Configure the proxy with --provider=azure --client-id= --client-secret= Note: When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#azure-auth-provider","p":881},{"i":888,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":881},{"i":890,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to login even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to login with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#github-auth-provider","p":881},{"i":892,"t":"Create new client in your Keycloak with Access Type 'confidental' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: --provider=keycloak--client-id=--client-secret=--login-url=\"http(s):///auth/realms//protocol/openid-connect/auth\"--redeem-url=\"http(s):///auth/realms//protocol/openid-connect/token\"--profile-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\"--validate-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\"--keycloak-group=--keycloak-group= For group based authorization, the optional --keycloak-group (legacy) or --allowed-group (global standard) flags can be used to specify which groups to limit access to. If these are unset but a groups mapper is set up above in step (3), the provider will still populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response. The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":881},{"i":894,"t":"This auth provider has been tested against Gitlab version 12.X. Due to Gitlab API changes, it may not work for version prior to 12.X (see 994). Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. If you need projects filtering, add the extra read_api scope to your application. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\"","s":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":881},{"i":896,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":881},{"i":898,"t":"For adding an application to the Microsoft Azure AD follow these steps to add an application. Take note of your TenantId if applicable for your situation. The TenantId can be used to override the default common authorization server with a tenant specific server.","s":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":881},{"i":900,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex and we will use it as an example. The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta, an example can be found below. Dex​ To configure the OIDC provider for Dex, perform the following steps: Download Dex: go get github.com/dexidp/dex See the getting started guide for more details. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Add a configuration block to the staticClients section of examples/config-dev.yaml: - id: oauth2-proxyredirectURIs:- 'http://127.0.0.1:4180/oauth2/callback'name: 'oauth2-proxy'secret: proxy Launch Dex: from $GOPATH/github.com/dexidp/dex, run: bin/dex serve examples/config-dev.yaml In a second terminal, run the oauth2-proxy with the following args: -provider oidc-provider-display-name \"My OIDC Provider\"-client-id oauth2-proxy-client-secret proxy-redirect-url http://127.0.0.1:4180/oauth2/callback-oidc-issuer-url http://127.0.0.1:5556/dex-cookie-secure=false-cookie-secret=secret-email-domain kilgore.trout To serve the current working directory as a web site under the /static endpoint, add: -upstream file://$PWD/#/static/ Test the setup by visiting http://127.0.0.1:4180 or http://127.0.0.1:4180/static . See also our local testing environment for a self-contained example using Docker and etcd as storage for Dex. Okta​ To configure the OIDC provider for Okta, perform the following steps: Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com . The client_id and client_secret are configured in the application settings. Generate a unique client_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#openid-connect-provider","p":881},{"i":902,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048 bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost', The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"login.gov Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#logingov-provider","p":881},{"i":904,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to setup the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#nextcloud-provider","p":881},{"i":906,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":881},{"i":908,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who has access to one selected repository use --bitbucket-repository=.","s":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":881},{"i":910,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1\"","s":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":881},{"i":912,"t":"To authorize by email domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#email-authentication","p":881},{"i":914,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":881},{"i":916,"t":"danger This page contains documentation for alpha features. We reserve the right to make breaking changes to the features detailed within this page with no notice. Options described in this page may be changed, removed, renamed or moved without prior warning. Please beware of this before you use alpha configuration options. This page details a set of alpha configuration options in a new format. Going forward we are intending to add structured configuration in YAML format to replace the existing TOML based configuration file and flags. Below is a reference for the structure of the configuration, with AlphaOptions as the root of the configuration. When using alpha configuration, your config file will look something like below: upstreams: - id: ... ...injectRequestHeaders: - name: ... ...injectResponseHeaders: - name: ... ... Please browse the reference below for the structure of the new configuration format.","s":"Alpha Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"","p":915},{"i":918,"t":"To use the new alpha configuration, generate a YAML file based on the format described in the reference below. Provide the path to this file using the --alpha-config flag. note When using the --alpha-config flag, some options are no longer available. See removed options below for more information.","s":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#using-alpha-configuration","p":915},{"i":920,"t":"Before adding the new --alpha-config option, start OAuth2 Proxy using the convert-config-to-alpha flag to convert existing configuration to the new format. oauth2-proxy --convert-config-to-alpha --config ./path/to/existing/config.cfg This will convert any options supported by the new format to YAML and print the new configuration to STDOUT. Copy this to a new file, remove any options from your existing configuration noted in removed options and then start OAuth2 Proxy using the new config. oauth2-proxy --alpha-config ./path/to/new/config.yaml --config ./path/to/existing/config.cfg","s":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":915},{"i":922,"t":"The following flags/options and their respective environment variables are no longer available when using alpha configuration: flush-interval/flush_interval pass-host-header/pass_host_header proxy-websockets/proxy_websockets ssl-upstream-insecure-skip-verify/ssl_upstream_insecure_skip_verify upstream/upstreams pass-basic-auth/pass_basic_auth pass-access-token/pass_access_token pass-user-headers/pass_user_headers pass-authorization-header/pass_authorization_header set-basic-auth/set_basic_auth set-xauthrequest/set_xauthrequest set-authorization-header/set_authorization_header prefer-email-to-user/prefer_email_to_user basic-auth-password/basic_auth_password skip-auth-strip-headers/skip_auth_strip_headers Attempting to use these options via flags or via config when --alpha-config set will result in an error. info You must remove these options before starting OAuth2 Proxy with --alpha-config","s":"Removed options","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#removed-options","p":915},{"i":925,"t":"AlphaOptions contains alpha structured configuration options. Usage of these options allows users to access alpha features that are not available as part of the primary configuration structure for OAuth2 Proxy. danger The options within this structure are considered alpha. They may change between releases without notice. Field Type Description upstreams Upstreams Upstreams is used to configure upstream servers.Once a user is authenticated, requests to the server will be proxied tothese upstream servers based on the path mappings defined in this list. injectRequestHeaders []Header InjectRequestHeaders is used to configure headers that should be addedto requests to upstream servers.Headers may source values from either the authenticated user's sessionor from a static secret value. injectResponseHeaders []Header InjectResponseHeaders is used to configure headers that should be addedto responses from the proxy.This is typically used when using the proxy as an external authenticationprovider in conjunction with another proxy such as NGINX and itsauth_request module.Headers may source values from either the authenticated user's sessionor from a static secret value.","s":"AlphaOptions","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#alphaoptions","p":915},{"i":927,"t":"(Appears on: HeaderValue) ClaimSource allows loading a header value from a claim within the session Field Type Description claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"ClaimSource","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#claimsource","p":915},{"i":929,"t":"(string alias)​ (Appears on: Upstream) Duration is as string representation of a period of time. A duration string is a is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\", \"-1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".","s":"Duration","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#duration","p":915},{"i":931,"t":"(Appears on: AlphaOptions) Header represents an individual header that will be added to a request or response header. Field Type Description name string Name is the header name to be used for this set of values.Names should be unique within a list of Headers. preserveRequestValue bool PreserveRequestValue determines whether any values for this headershould be preserved for the request to the upstream server.This option only applies to injected request headers.Defaults to false (headers that match this header will be stripped). values []HeaderValue Values contains the desired values for this header","s":"Header","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#header","p":915},{"i":933,"t":"(Appears on: Header) HeaderValue represents a single header value and the sources that can make up the header value Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value. claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"HeaderValue","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#headervalue","p":915},{"i":935,"t":"(Appears on: ClaimSource, HeaderValue) SecretSource references an individual secret value. Only one source within the struct should be defined at any time. Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value.","s":"SecretSource","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#secretsource","p":915},{"i":937,"t":"(Appears on: Upstreams) Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path. Field Type Description id string ID should be a unique identifier for the upstream.This value is required for all upstreams. path string Path is used to map requests to the upstream server.The closest match will take precedence and all Paths must be unique. uri string The URI of the upstream server. This may be an HTTP(S) server of a Filebased URL. It may include a path, in which case all requests will be servedunder that path.Eg:- http://localhost:8080- https://service.localhost- https://service.localhost/path- file://host/pathIf the URI's path is \"/base\" and the incoming request was for \"/dir\",the upstream request will be for \"/base/dir\". insecureSkipTLSVerify bool InsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.This option is insecure and will allow potential Man-In-The-Middle attacksbetweem OAuth2 Proxy and the usptream server.Defaults to false. static bool Static will make all requests to this upstream have a static response.The response will have a body of \"Authenticated\" and a response codematching StaticCode.If StaticCode is not set, the response will return a 200 response. staticCode int StaticCode determines the response code for the Static response.This option can only be used with Static enabled. flushInterval Duration FlushInterval is the period between flushing the response buffer whenstreaming response from the upstream.Defaults to 1 second. passHostHeader bool PassHostHeader determines whether the request host header should be proxiedto the upstream server.Defaults to true. proxyWebSockets bool ProxyWebSockets enables proxying of websockets to upstream serversDefaults to true.","s":"Upstream","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#upstream","p":915},{"i":939,"t":"([]Upstream alias)​ (Appears on: AlphaOptions) Upstreams is a collection of definitions for upstream servers.","s":"Upstreams","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#upstreams","p":915},{"i":941,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/7.0.x/community/security","h":"","p":940},{"i":943,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/7.0.x/community/security","h":"#security-disclosures","p":940},{"i":945,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.0.x/community/security","h":"#how-will-we-respond-to-disclosures","p":940},{"i":947,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/7.0.x/configuration/session_storage","h":"","p":946},{"i":949,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/7.0.x/configuration/session_storage","h":"#cookie-storage","p":946},{"i":951,"t":"The Redis Storage backend stores sessions, encrypted, in redis. Instead sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128 bit random number, hex-encoded The secret is a 128 bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.","s":"Redis Storage","u":"/oauth2-proxy/docs/7.0.x/configuration/session_storage","h":"#redis-storage","p":946},{"i":953,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive","s":"Endpoints","u":"/oauth2-proxy/docs/7.0.x/features/endpoints","h":"","p":952},{"i":955,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.","s":"Sign out","u":"/oauth2-proxy/docs/7.0.x/features/endpoints","h":"#sign-out","p":952},{"i":957,"t":"There are two recommended configurations. Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or .... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"TLS Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/tls","h":"","p":956},{"i":959,"t":"If signature_key is defined, proxied requests will be signed with the GAP-Signature header, which is a Hash-based Message Authentication Code (HMAC) of selected request information and the request body see SIGNATURE_HEADERS in oauthproxy.go. signature_key must be of the form algorithm:secretkey, (ie: signature_key = \"sha1:secret0\") For more information about HMAC request signature validation, read the following: Amazon Web Services: Signing and Authenticating REST Requests rc3.org: Using HMAC to authenticate Web service requests","s":"Request Signatures","u":"/oauth2-proxy/docs/7.0.x/features/request_signatures","h":"","p":958},{"i":961,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"","p":960},{"i":963,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_'; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#generating-a-cookie-secret","p":960},{"i":965,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#config-file","p":960},{"i":967,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --custom-templates-dir string path to custom html templates --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --gcp-healthchecks bool will enable /liveness_check, /readiness_check, and / (with the proper user-agent) endpoints that will make it work well with GCP App Engine and GKE Ingresses false --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --gitlab-projects string | list restrict logins to members of any of these projects (may be given multiple times) formatted as orgname/repo=accesslevel. Access level should be a value matching Gitlab access levels, defaulted to 20 if absent --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -B for bcrypt encryption --http-address string [http://]: or unix:// to listen on for HTTP clients \"127.0.0.1:4180\" --https-address string : to listen on for HTTPS clients \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --oidc-email-claim string which OIDC claim contains the user's email \"email\" --oidc-groups-claim string which OIDC claim contains the user groups \"groups\" --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Groups, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted and allows X-Forwarded-{Proto,Host,Uri} headers to be used on redirect selection false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Groups, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping endpoint false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string | list (DEPRECATED for --skip-auth-route) bypass authentication for requests paths that match (may be given multiple times) --skip-auth-route string | list bypass authentication for requests that match the method & path. Format: method=path_regex OR path_regex alone for all methods --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy true --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-key-file string path to private key file --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --allowed-group string | list restrict logins to members of this group (may be given multiple times) --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . to allow subdomains (e.g. .example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. [1]: Only these providers support --cookie-refresh: GitLab, Google and OIDC [2]: When using the whitelist-domain option, any domain prefixed with a . will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URL's protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*. See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#command-line-options","p":960},{"i":969,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#upstreams-configuration","p":960},{"i":971,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside of a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#environment-variables","p":960},{"i":973,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) can be disabled with --silence-ping-logging reducing log volume. This flag appends the --ping-path to --exclude-logging-paths.","s":"Logging Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#logging-configuration","p":960},{"i":975,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details. Message Authenticated via OAuth2 The details of the auth attempt.","s":"Auth Log Format","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#auth-log-format","p":960},{"i":977,"t":"HTTP request logs will output by default in the below format: - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#request-log-format","p":960},{"i":979,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#standard-log-format","p":960},{"i":981,"t":"The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\".","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":960},{"i":983,"t":"This option requires --reverse-proxy option to be set.","s":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":960},{"i":985,"t":"The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration: http: routers: a-service: rule: \"Host(`a-service.example.com`)\" service: a-service-backend middlewares: - oauth-errors - oauth-auth tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth: rule: \"Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true oauth-errors: errors: status: - \"401-403\" service: oauth-backend query: \"/oauth2/sign_in\"","s":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":960},{"i":987,"t":"Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint Following options need to be set on oauth2-proxy: --upstream=static://202: Configures a static response for authenticated sessions --reverseproxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly http: routers: a-service-route-1: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)\" service: a-service-backend middlewares: - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" a-service-route-2: rule: \"Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)\" service: a-service-backend middlewares: - oauth-auth-wo-redirect # unauthenticated session will return a 401 tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services-oauth2-route: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth2-proxy-route: rule: \"Host(`oauth.example.com`) && PathPrefix(`/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 b-service-backend: loadBalancer: servers: - url: http://172.16.0.3:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth-redirect: forwardAuth: address: https://oauth.example.com/ trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization oauth-auth-wo-redirect: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":960}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/878",[0,3.178,1,4.686,2,3.178,3,6.096,4,6.096,5,2.89,6,4.179,7,4.149,8,3.178,9,3.564,10,1.325,11,2.469,12,4.149,13,5.456,14,4.149,15,4.149,16,4.149,17,4.686,18,0.381,19,3.178,20,3.564,21,4.149,22,0.916,23,5.456,24,4.149,25,4.149,26,4.149,27,1.719,28,1.631,29,3.564,30,1.692,31,3.178,32,2.469,33,5.456,34,4.149,35,1.712,36,2.469,37,2.304,38,2.89,39,4.149,40,4.149,41,4.149,42,4.149,43,4.149,44,4.149,45,3.564,46,1.919,47,3.178,48,1.549,49,1.631,50,0.966,51,0.66,52,1.472,53,1.919,54,1.919,55,0.815,56,2.034,57,1.549,58,3.498,59,3.564,60,1.631,61,1.719,62,2.304]],["t/880",[10,1.219,18,0.302,22,0.843,35,1.646,48,1.616,50,0.993,60,1.702,63,2,64,1.702,65,2.776,66,2.776,67,3.596,68,1.462,69,3.719,70,3.016,71,2.776,72,1.991,73,2.222,74,1.537,75,1.462,76,4.297,77,2.878,78,2.122,79,3.719,80,1.658,81,1.794,82,4.33,83,1.557,84,4.33,85,2.255,86,1.391,87,4.33,88,4.33,89,3.016,90,2.002,91,2.776,92,4.33,93,2.255,94,2.776,95,3.016,96,3.116,97,2.922,98,2.776,99,0.941,100,2.576,101,1.537,102,1.537,103,2.255,104,2.776,105,1.462,106,2.776,107,3.016,108,2.776]],["t/882",[5,3.248,10,1.013,18,0.325,22,0.701,28,1.832,35,1.913,46,2.156,47,3.571,48,1.74,49,1.832,50,1.041,51,0.741,86,1.498,103,2.428,109,1.832,110,4.097,111,3.771,112,3.248,113,4.663,114,1.932,115,3.571,116,2.428,117,1.498,118,3.771,119,4.663,120,4.005,121,3.571,122,4.005,123,4.005,124,3.771,125,3.499,126,3.571,127,4.005,128,4.663,129,4.005,130,4.005,131,1.74,132,3.571,133,1.359,134,3.267,135,3.499,136,4.663]],["t/884",[0,5.208,2,3.008,10,1.027,22,0.59,28,1.024,30,1.46,32,2.336,35,0.689,46,1.205,48,1.764,49,1.543,51,0.624,55,0.512,64,1.024,68,1.326,70,2.735,72,0.925,73,0.88,74,1.393,77,1.205,78,1.277,80,0.656,83,1.312,86,0.837,99,1.027,110,3.931,112,1.815,114,1.958,133,1.533,137,1.996,138,3.206,139,2.338,140,1.595,141,3.134,142,2.606,143,2.238,144,2.238,145,2.606,146,2.238,147,4.725,148,5.26,149,3.357,150,1.815,151,2.238,152,2.606,153,3.619,154,2.606,155,2.606,156,3.373,157,1.815,158,2.238,159,2.606,160,2.238,161,1.996,162,1.996,163,2.606,164,3.373,165,1.906,166,1.963,167,1.996,168,2.606,169,1.55,170,1.671,171,2.066,172,2.606,173,2.238,174,3.927,175,1.996,176,1.205,177,1.996,178,2.238,179,1.671,180,1.447,181,0.723,182,2.606,183,1.996,184,3.029,185,2.606,186,2.238,187,2.606,188,3.029,189,1.996,190,1.671,191,1.815,192,3.802,193,2.336,194,2.606,195,2.066,196,1.671,197,3.619,198,2.238,199,1.55,200,1.996,201,3.372,202,3.927,203,2.181,204,1.19,205,2.606,206,2.606,207,2.606,208,2.606,209,1.815,210,1.55,211,2.606,212,2.606,213,1.024,214,2.517,215,2.238,216,1.905,217,1.447,218,2.606,219,2.238,220,1.867,221,2.238,222,2.238,223,2.606,224,2.606,225,2.606,226,1.14,227,1.996,228,1.55,229,2.238,230,1.996,231,1.671,232,1.815,233,1.14,234,2.606,235,1.671,236,1.55,237,2.606,238,1.14,239,1.996,240,2.606]],["t/886",[0,3.666,10,1.368,11,2.036,18,0.334,22,0.72,35,0.905,36,2.036,46,2.214,49,2.17,50,0.606,51,0.544,62,2.659,64,1.345,65,2.194,68,1.155,72,1.699,73,1.616,74,1.214,75,1.155,81,1.418,83,1.329,97,1.782,98,2.194,99,1.299,109,1.345,112,2.383,118,3.539,131,1.277,133,1.609,137,3.666,138,2.493,139,1.418,140,1.616,149,2.036,151,2.939,160,4.111,161,4.58,164,4.111,165,1.538,166,1.787,175,2.621,200,4.82,201,2.194,213,1.881,226,1.496,230,3.666,241,2.553,242,3.422,243,4.787,244,3.539,245,3.422,246,3.983,247,4.111,248,3.422,249,1.277,250,2.493,251,1.266,252,3.422,253,3.833,254,3.422,255,2.939,256,2.621,257,2.848,258,2.939,259,3.422,260,2.939,261,3.422,262,3.422,263,1.496,264,2.383,265,2.848,266,3.422,267,3.422,268,2.939,269,3.422,270,3.422,271,2.939,272,2.939,273,3.422,274,2.939,275,3.422,276,3.422,277,2.621,278,2.036,279,3.422]],["t/888",[28,2.232,48,2.12,86,1.825,99,1.234,139,2.353,140,1.918,176,2.627,179,3.641,199,3.379,246,3.379,280,6.631,281,5.68,282,2.484]],["t/890",[18,0.316,28,1.244,31,2.424,35,1.198,55,0.89,68,1.068,75,1.949,77,2.67,80,0.797,83,1.817,99,0.984,109,1.244,111,4.532,114,1.311,133,0.922,134,1.757,139,1.876,140,1.068,141,1.757,170,2.029,171,1.384,179,2.029,190,4.292,191,2.204,195,1.384,196,2.029,199,1.883,204,1.332,210,1.883,213,2.572,216,1.068,220,1.607,232,2.204,235,2.903,251,1.399,258,4.543,282,2.862,283,3.164,284,2.029,285,2.204,286,2.424,287,2.718,288,2.424,289,3.155,290,2.718,291,4.075,292,2.424,293,4.869,294,5.128,295,2.718,296,3.164,297,2.755,298,3.89,299,3.89,300,4.959,301,2.515,302,2.718,303,1.551,304,2.424,305,3.684,306,3.684,307,2.718,308,2.718,309,3.89,310,2.029,311,2.424,312,1.384,313,2.718,314,3.164,315,3.164,316,3.164,317,2.694,318,3.164,319,5.289,320,3.164,321,1.883,322,3.164,323,3.164]],["t/892",[18,0.35,28,1.972,35,0.969,55,0.72,60,1.439,74,1.781,75,1.236,77,1.694,86,1.177,99,1.09,100,2.179,101,1.3,102,1.3,105,1.236,120,5.964,131,1.367,133,1.067,135,2.179,138,1.908,139,2.55,140,1.236,150,2.551,153,2.805,156,3.146,165,1.978,170,2.348,171,1.602,176,1.694,179,2.348,180,2.034,181,1.393,189,2.805,192,4.65,195,1.602,196,2.348,201,3.217,204,0.923,213,1.972,220,1.3,249,1.873,251,0.969,268,3.146,282,1.602,297,1.908,321,2.179,324,3.663,325,5.723,326,2.805,327,3.663,328,2.805,329,3.663,330,3.663,331,6.156,332,6.156,333,6.156,334,3.663,335,3.663,336,2.551,337,5.018,338,3.663,339,3.663,340,1.795,341,3.663,342,3.663,343,2.551,344,2.805,345,3.663,346,2.348,347,2.805,348,3.663,349,1.908,350,2.179,351,3.663,352,1.694,353,3.663,354,2.348]],["t/894",[10,0.838,18,0.363,32,2.294,35,1.02,38,3.619,48,1.44,49,2.472,52,1.368,55,0.758,68,1.302,73,1.754,78,1.89,86,1.889,99,1.277,109,1.516,121,5.294,124,2.472,138,2.706,141,2.142,149,2.294,165,1.67,170,2.472,181,1.071,190,3.331,192,3.331,195,2.272,196,3.331,203,2.142,204,1.654,210,3.092,216,1.302,235,2.472,241,2.403,251,1.736,263,2.272,282,1.686,304,2.954,305,2.686,306,2.686,326,2.954,336,2.686,355,2.954,356,5.197,357,3.857,358,2.294,359,3.092,360,3.312,361,3.857,362,2.472,363,3.857,364,3.98,365,2.472,366,3.857,367,3.857,368,3.312,369,3.857,370,3.312,371,3.857,372,3.857,373,3.857,374,3.857,375,3.857,376,3.857,377,3.857,378,2.686,379,3.857,380,2.472,381,2.686,382,3.312]],["t/896",[10,1.339,46,2.325,48,2.301,81,2.083,83,1.396,86,1.615,117,1.615,122,4.318,133,1.465,137,3.85,138,2.618,139,2.083,140,1.697,141,2.792,149,2.991,157,3.501,161,3.85,179,3.223,180,2.792,181,1.711,210,2.991,251,1.329,265,3.966,285,3.501,383,5.027,384,5.027,385,3.85,386,5.027,387,5.027,388,4.318,389,5.027,390,2.325,391,5.294]],["t/898",[18,0.377,49,2.702,102,2.284,103,3.352,117,1.735,118,3.462,123,4.638,133,1.574,138,2.812,171,2.361,180,2.999,191,3.761,204,1.36,241,2.497,256,4.136,392,6.436,393,5.4,394,4.638,395,4.638]],["t/900",[2,1.318,5,1.198,10,1.538,11,1.023,18,0.346,19,1.318,22,0.853,27,0.713,30,0.785,32,1.023,35,1.646,36,1.023,37,2.001,46,2.134,48,0.642,49,2.403,50,0.97,51,0.902,52,1.279,55,0.708,56,0.843,60,0.676,61,2.173,64,0.676,73,1.217,74,1.482,75,0.955,77,1.308,78,1.766,81,0.713,83,0.478,85,0.896,86,1.342,99,1.078,101,0.61,102,1.637,109,0.676,114,0.713,116,1.473,117,1.483,124,2.31,125,2.484,133,1.217,135,1.023,138,2.174,139,1.493,140,0.581,141,0.955,149,1.023,157,1.971,162,1.318,165,1.594,166,1.558,167,3.198,169,1.023,171,2.482,173,1.477,176,2.134,180,0.955,181,1,184,1.814,188,1.814,192,1.814,195,1.237,198,1.477,199,2.144,200,2.167,204,1.162,209,1.198,210,1.023,213,1.416,215,1.477,216,0.581,219,2.43,226,0.752,241,2.134,244,1.103,246,2.144,247,2.43,249,1.056,251,1.104,257,1.023,260,2.43,264,1.971,277,1.318,278,1.023,282,1.237,284,1.103,286,1.318,289,1.198,303,0.843,340,1.387,344,1.318,355,2.76,359,2.144,364,1.318,365,1.103,380,3.181,381,2.51,385,1.318,388,1.477,390,0.795,396,1.72,397,2.43,398,1.72,399,1.72,400,1.72,401,1.103,402,1.72,403,1.72,404,4.962,405,1.814,406,5.675,407,1.477,408,0.843,409,2.829,410,1.72,411,1.72,412,1.477,413,1.971,414,1.103,415,2.43,416,1.318,417,1.477,418,1.72,419,2.829,420,2.829,421,1.72,422,1.72,423,1.72,424,1.72,425,1.72,426,1.72,427,2.43,428,1.198,429,1.477,430,1.72,431,1.318,432,1.477,433,1.72,434,1.477,435,1.72,436,1.72,437,1.72,438,1.023,439,1.72,440,1.72,441,1.318,442,1.72,443,1.318,444,1.308,445,1.72,446,1.72,447,1.72,448,1.72,449,1.318,450,1.72,451,3.586,452,1.477,453,2.829,454,1.023,455,1.72,456,1.318,457,1.971,458,1.318,459,1.72,460,2.829,461,0.713,462,1.72,463,1.318,464,0.843,465,1.477,466,1.814,467,1.971,468,1.72,469,1.477,470,2.829,471,1.72,472,1.72,473,1.72,474,1.72,475,1.72,476,1.72,477,2.829,478,1.72,479,1.571,480,1.72,481,1.72,482,1.477,483,1.72,484,2.43,485,2.43,486,1.198,487,1.198,488,1.72,489,2.829,490,1.72,491,1.477,492,1.72,493,3.604,494,1.72,495,2.43,496,1.477,497,1.72,498,1.477,499,1.72,500,2.829,501,1.72,502,1.72,503,1.72,504,1.72,505,1.72,506,1.72,507,1.72,508,1.72,509,1.72]],["t/902",[1,1.918,9,2.996,10,1.426,11,1.329,18,0.243,19,3.288,20,1.918,22,0.931,27,0.925,30,1.347,35,1.392,37,1.937,46,1.033,47,2.672,49,2.068,51,0.682,55,0.843,56,2.579,57,1.811,60,1.371,64,0.878,65,1.432,67,3.11,73,1.638,75,0.754,76,2.672,77,1.033,80,0.563,81,0.925,86,1.379,90,1.033,93,1.163,96,1.24,99,1.054,102,0.792,109,0.878,114,0.925,116,2.236,124,2.236,125,2.075,126,4.273,134,1.24,139,1.445,143,1.918,146,2.996,158,1.918,165,1.379,166,0.834,169,1.329,171,0.977,176,1.613,181,0.62,188,2.236,195,2.122,196,1.432,204,0.563,213,1.687,216,1.449,239,1.711,244,1.432,246,1.329,250,1.163,251,1.541,257,1.329,265,2.886,271,1.918,282,0.977,290,1.918,291,1.432,292,1.711,307,1.918,309,1.918,310,1.432,311,1.711,312,1.525,321,1.329,336,1.556,346,2.236,350,1.329,355,1.711,359,1.329,364,1.711,380,3.973,381,3.379,397,1.918,412,1.918,432,1.918,434,2.996,443,1.711,444,1.033,449,1.711,454,2.075,457,1.556,464,1.095,466,1.432,482,1.918,491,1.918,495,3.687,496,1.918,510,3.488,511,3.488,512,3.488,513,2.233,514,1.918,515,2.233,516,2.233,517,2.233,518,2.233,519,1.556,520,2.233,521,2.233,522,2.233,523,3.488,524,3.488,525,1.918,526,2.996,527,1.556,528,2.236,529,1.095,530,2.233,531,1.918,532,3.687,533,2.233,534,2.233,535,2.233,536,1.918,537,2.233,538,2.233,539,2.233,540,2.233,541,2.233,542,3.488,543,2.233,544,1.918,545,2.233,546,1.918,547,2.233,548,2.233,549,1.918,550,2.233,551,2.233,552,1.711,553,2.233,554,1.918,555,2.233,556,2.233,557,2.233,558,2.233,559,2.233,560,2.233,561,2.233,562,2.233,563,1.918,564,2.233,565,2.233,566,1.918,567,2.233,568,2.233,569,2.233,570,3.488,571,1.918,572,2.233,573,2.233,574,2.233,575,1.711,576,1.711,577,2.233,578,1.918,579,2.233,580,1.918,581,2.075,582,2.233,583,1.711,584,2.233,585,3.716,586,1.033,587,2.233,588,2.996,589,1.556,590,1.918,591,1.918,592,1.918,593,2.233,594,2.233,595,2.233,596,2.233,597,1.556]],["t/904",[18,0.397,28,2.233,32,2.628,35,1.661,50,0.782,51,0.702,53,2.043,54,2.043,56,2.165,57,1.649,75,1.491,80,1.113,83,1.226,86,1.419,93,2.301,106,2.832,127,6.332,133,1.287,165,2.131,166,2.121,176,2.043,181,1.578,201,3.643,227,4.353,251,1.754,282,1.932,297,2.301,321,2.628,362,2.832,382,5.396,415,3.794,463,3.384,528,2.832,586,2.043,598,3.384,599,4.418,600,3.384,601,4.418,602,4.418,603,3.794,604,4.418,605,4.418,606,4.418,607,4.418]],["t/906",[18,0.398,22,0.856,30,1.231,35,1.173,48,1.656,49,2.239,50,0.785,51,1.001,52,1.574,53,2.051,54,2.051,55,1.237,64,1.743,66,2.844,71,2.844,74,1.574,86,2.023,99,0.964,109,1.743,116,2.31,117,1.425,133,1.293,139,1.838,140,1.497,157,3.089,165,2.134,166,2.127,181,1.582,204,1.117,251,1.817,263,1.94,284,2.844,285,3.089,328,3.397,358,2.639,390,2.051,451,3.81,461,1.838,583,3.397,608,4.436,609,4.436,610,4.436,611,3.397,612,3.397,613,4.436,614,3.81,615,3.81,616,4.436,617,4.436,618,4.436]],["t/908",[10,1.347,18,0.458,22,0.839,35,1.136,46,2.581,48,1.604,50,0.988,51,0.887,55,1.097,64,1.688,74,1.981,75,1.45,80,1.082,83,1.193,90,1.987,116,2.237,117,1.38,129,5.325,133,1.252,140,1.45,165,2.109,166,2.083,181,1.549,188,3.578,190,3.578,204,1.082,213,2.436,216,1.45,230,3.291,232,3.887,235,2.754,241,1.987,251,1.136,284,2.754,289,2.992,291,3.578,294,4.275,326,3.291,328,3.291,385,3.291,391,3.69,498,3.69,583,3.291,611,3.291,612,3.291,614,3.69,619,4.296,620,4.296,621,4.296,622,4.296,623,4.296]],["t/910",[10,1.268,22,0.692,28,1.809,35,1.217,49,1.809,55,0.904,64,1.809,86,1.875,89,3.206,130,6.098,133,1.342,139,1.907,140,1.554,165,2.164,166,2.178,176,2.129,181,1.62,199,2.739,204,1.16,251,1.217,263,2.945,282,2.013,285,3.206,286,3.526,321,2.739,431,3.526,466,3.74,484,3.954,485,3.954,624,2.013,625,4.604,626,4.604,627,5.835,628,4.604,629,4.604,630,4.604,631,6.405,632,4.604,633,4.604,634,4.604]],["t/912",[18,0.48,54,2.497,80,1.36,90,2.497,114,2.666,171,3.007,216,2.518,217,3.574,635,5.4,636,4.136,637,5.4,638,4.638]],["t/914",[18,0.388,22,0.836,35,1.841,51,0.884,61,2.305,75,1.878,93,2.898,140,2.351,204,1.402,227,4.262,241,2.573,354,3.567,639,5.565,640,5.565]],["t/916",[10,1.399,11,2.432,18,0.377,30,1.5,50,1.261,52,1.45,55,1.189,74,1.917,99,0.888,100,2.432,101,1.45,107,2.847,115,3.131,132,4.138,140,1.824,144,3.51,166,1.526,169,2.432,195,1.787,214,2.62,220,1.45,241,1.89,253,4.127,303,2.003,312,2.646,340,2.003,358,3.214,360,3.51,408,2.965,414,3.463,444,1.89,458,3.131,463,3.131,528,3.463,641,3.51,642,4.127,643,4.138,644,4.087,645,4.087,646,2.62,647,4.087,648,4.087,649,2.62,650,3.51,651,3.51,652,2.847,653,5.197,654,2.847,655,3.131,656,4.087,657,2.847,658,3.131,659,3.51,660,3.51,661,3.51,662,4.087]],["t/918",[18,0.471,27,2.142,30,1.741,35,1.367,50,0.915,52,2.225,55,1.232,78,2.534,133,1.507,140,1.745,220,2.225,233,2.261,312,2.261,340,2.534,408,3.073,413,3.601,458,3.96,464,2.534,466,3.314,528,3.314,642,4.326,646,3.314,654,3.601,663,3.96]],["t/920",[18,0.407,22,1.012,30,1.278,37,3.24,50,1.134,51,1.07,52,2.559,55,1.323,103,2.398,133,1.342,134,2.557,140,2.397,214,3.74,220,1.634,312,2.551,576,3.526,642,4.318,646,3.74,652,3.206,654,3.206,664,5.158,665,5.835,666,3.954,667,3.526,668,4.604]],["t/922",[18,0.391,22,0.843,27,1.794,37,2.405,50,0.767,51,0.688,52,2.208,55,1.102,56,2.122,57,1.616,58,2.776,64,2.68,67,3.596,68,1.894,83,1.202,99,1.431,101,1.537,104,2.776,171,2.453,204,1.091,213,1.702,216,1.462,220,1.537,263,1.894,586,2.594,642,3.989,646,2.776,652,3.016,663,3.317,669,4.33,670,4.33,671,3.317,672,4.33,673,4.33,674,4.33,675,3.317,676,4.33,677,4.33,678,4.334,679,4.33,680,4.33,681,4.33,682,4.33,683,4.33,684,4.33,685,4.33,686,3.719,687,4.33,688,4.33,689,3.317,690,4.33,691,3.317,692,4.33,693,2.576]],["t/925",[6,2.985,18,0.46,22,0.949,27,1.615,50,1.167,51,0.62,55,1.161,62,2.165,63,1.682,75,1.316,80,1.488,83,1.453,101,2.407,102,1.857,105,2.132,107,2.715,112,2.715,131,2.358,181,1.453,213,1.532,233,1.705,236,2.319,249,1.455,303,1.91,340,1.91,352,1.802,354,2.499,358,2.319,390,1.802,401,3.355,405,2.499,438,3.114,444,1.802,461,1.615,641,3.348,642,3.788,643,2.985,649,2.499,653,5.075,657,2.715,660,4.495,661,4.495,694,3.348,695,3.348,696,3.898,697,3.898,698,2.715,699,3.898,700,3.898,701,3.348,702,5.234,703,3.898,704,3.645,705,5.234,706,3.898,707,3.348,708,3.348,709,3.898,710,3.348,711,3.898,712,3.898]],["t/927",[18,0.335,55,0.944,68,2.024,72,2.127,74,1.705,75,1.622,105,1.622,131,2.627,135,4.27,249,1.794,303,2.355,317,2.859,390,2.223,461,1.991,529,2.938,664,3.681,678,4.175,713,2.669,714,3.347,715,4.128,716,4.128,717,4.128,718,4.188,719,4.128,720,4.128,721,4.128,722,3.681,723,5.149,724,3.681,725,4.128,726,3.681,727,4.128,728,3.681]],["t/929",[10,1.113,28,2.013,36,3.047,55,1.006,101,1.817,108,3.283,238,2.726,250,2.667,378,3.567,405,3.283,529,3.294,713,2.844,729,4.399,730,4.775,731,5.121,732,3.923,733,5.121,734,5.121,735,5.121,736,6.234,737,5.121,738,5.121,739,5.121,740,5.121,741,5.121,742,4.775,743,4.399,744,5.121,745,5.121]],["t/931",[18,0.33,55,0.928,63,2.083,66,3.028,74,2.3,99,1.026,101,1.676,103,2.46,105,2.476,131,2.537,236,2.81,249,1.763,303,2.315,352,2.184,362,3.028,390,2.184,444,2.184,461,1.957,486,3.29,529,2.315,636,3.618,657,3.29,689,3.618,713,2.623,714,3.29,746,3.618,747,4.723,748,5.929,749,3.618,750,3.29,751,4.723,752,4.723,753,4.723,754,4.723,755,4.723,756,4.723,757,3.618,758,4.723]],["t/933",[18,0.301,30,1.197,55,0.847,56,2.114,57,1.61,68,1.889,72,1.53,74,1.986,105,2.097,131,2.741,135,4.052,181,1.197,195,1.886,233,1.886,249,1.61,317,2.566,346,2.765,390,1.995,401,2.765,444,1.995,461,1.787,529,3.338,664,3.303,678,3.897,713,2.395,714,3.004,717,3.704,718,3.982,719,3.704,720,3.704,721,3.704,722,3.303,723,4.806,724,3.303,725,3.704,726,3.303,727,3.704,728,3.303,746,3.303,759,4.313,760,3.004,761,4.326,762,3.004,763,2.566,764,4.806,765,4.806]],["t/935",[30,1.383,56,2.441,57,1.859,74,1.768,90,2.304,131,2.655,181,1.701,233,2.178,238,2.178,249,1.859,303,2.441,354,3.193,390,2.304,401,3.193,444,2.304,461,2.064,528,3.193,529,3.254,636,3.815,713,2.767,714,3.47,715,4.278,724,3.815,760,3.47,761,4.624,762,3.47,763,2.964,764,5.264,765,5.264,766,4.981]],["t/937",[18,0.324,22,0.811,50,0.58,51,0.521,55,0.912,63,2.171,66,2.977,67,2.102,75,1.107,80,0.826,81,1.358,93,1.707,96,1.821,99,0.712,101,2.525,102,1.914,105,1.107,131,1.224,166,1.734,176,2.148,180,1.821,195,1.434,203,2.58,231,2.102,233,2.892,249,1.224,251,0.867,263,1.434,301,1.821,340,1.607,352,3.058,362,2.102,390,1.516,428,2.283,438,3.685,461,1.358,467,2.283,479,2.58,486,3.235,529,2.643,624,1.434,671,2.511,675,2.511,698,2.283,701,2.816,713,1.821,730,2.511,732,2.511,746,2.511,749,4.494,750,3.235,757,2.511,767,3.278,768,3.278,769,3.278,770,3.278,771,2.816,772,2.816,773,3.278,774,3.278,775,3.278,776,3.278,777,3.278,778,3.278,779,3.278,780,3.278,781,3.278,782,3.278,783,3.278,784,4.645,785,2.102,786,2.816,787,3.278,788,2.816,789,3.278,790,3.278,791,3.278,792,3.278,793,4.645,794,3.278,795,2.511,796,3.278,797,3.278,798,5.394,799,2.511,800,2.816,801,3.278,802,4.645,803,2.816,804,3.278,805,3.278,806,4.645,807,3.278,808,4.645,809,2.816,810,3.278]],["t/939",[101,2.519,102,2.069,657,4.062,713,3.239,729,5.009,811,5.832,812,5.832]],["t/941",[22,0.824,51,0.871,133,1.597,141,3.843,180,3.044,238,2.397,359,3.261,378,3.817,405,3.514,663,4.198,813,5.481,814,4.198,815,4.198,816,5.481,817,4.707,818,3.817,819,5.481,820,5.481,821,5.481]],["t/943",[18,0.316,22,0.868,30,1.257,38,3.153,51,0.918,90,2.094,93,2.358,104,2.902,106,2.902,111,3.701,132,5.127,162,3.468,166,1.69,216,1.528,236,2.693,291,2.902,301,3.206,303,2.219,310,2.902,378,3.153,407,4.958,414,3.701,454,2.693,788,3.889,814,4.422,818,4.021,822,4.527,823,4.958,824,5.459,825,3.889,826,4.527,827,4.527,828,4.527,829,4.527,830,4.527,831,4.527,832,3.889,833,3.468,834,4.527,835,4.527,836,4.527,837,4.527,838,4.527,839,4.527,840,3.889,841,4.527,842,4.527,843,3.468,844,3.468]],["t/945",[6,4.445,18,0.405,28,1.794,106,2.927,111,3.72,139,1.891,140,1.541,166,1.704,226,1.996,239,3.497,241,2.111,293,3.497,301,2.535,310,2.927,454,3.796,707,3.921,814,3.497,818,3.18,823,4.985,824,4.985,825,3.921,840,6.182,845,6.38,846,5.804,847,5.804,848,4.565,849,4.565,850,4.565,851,4.565,852,4.565,853,4.565,854,4.565,855,4.565,856,5.804,857,4.565,858,4.565,859,4.565,860,4.565,861,4.565,862,4.565,863,4.565,864,4.565,865,4.565]],["t/947",[18,0.357,22,0.77,27,2.583,51,0.814,63,1.646,64,2.013,72,2.544,73,2.104,75,1.729,80,1.29,83,1.422,90,2.368,97,3.247,98,3.283,117,1.646,193,3.047,226,2.24,249,1.912,278,3.047,350,3.047,624,2.24,698,3.567,704,3.567,843,3.923,866,6.234,867,3.462]],["t/949",[18,0.392,22,0.937,36,2.586,51,0.991,63,1.807,72,2.339,73,2.361,80,1.095,83,1.207,97,2.929,99,0.945,102,1.543,117,1.397,165,2.003,181,1.207,184,2.787,204,1.095,226,1.901,229,3.734,250,2.264,277,4.776,278,3.709,303,2.131,350,3.346,370,3.734,464,2.131,487,3.028,867,3.662,868,4.347,869,6.593,870,4.347,871,4.347,872,4.347,873,4.347,874,4.347,875,4.347,876,4.347,877,4.347,878,4.347,879,4.347,880,4.347,881,3.734,882,4.347,883,3.734,884,3.734]],["t/951",[18,0.451,27,1.379,50,0.963,51,0.529,53,1.539,72,2.357,73,1.836,74,1.666,77,1.539,83,0.924,93,1.733,97,3.533,98,4.696,99,0.723,108,3.487,109,1.308,117,1.069,125,3.514,131,1.242,133,0.97,165,1.069,170,3.009,181,1.51,204,0.838,220,2.21,251,1.438,257,1.98,264,2.318,265,1.98,278,3.236,297,1.733,464,1.631,486,3.27,487,3.788,519,2.318,526,4.032,586,2.171,694,2.858,763,3.236,818,2.318,832,2.858,833,2.549,844,2.549,867,2.607,885,3.27,886,4.694,887,5.439,888,3.328,889,5.439,890,3.328,891,2.858,892,4.694,893,4.694,894,4.694,895,3.328,896,3.328,897,3.328,898,2.858,899,3.328,900,3.328,901,3.328,902,3.328,903,2.858,904,4.671,905,3.328,906,4.671,907,4.694,908,4.032,909,3.328,910,4.694,911,3.328,912,3.328]],["t/953",[18,0.465,22,0.905,37,2.245,45,4.606,48,2.246,50,0.716,51,0.852,52,1.434,57,1.509,60,2.107,62,2.245,70,2.815,72,1.903,73,1.81,78,1.981,80,1.018,83,1.122,86,1.299,91,2.591,94,2.591,95,2.815,96,3.56,101,1.434,104,2.591,115,3.096,178,3.472,197,3.096,204,1.018,216,1.364,233,1.768,246,2.405,250,2.105,251,1.764,253,3.438,282,1.768,284,2.591,312,1.768,352,2.964,358,2.405,413,2.815,457,2.815,704,2.815,718,3.438,799,4.107,817,3.472,913,3.472,914,4.042,915,4.042,916,2.591,917,4.042,918,3.096,919,3.472,920,3.096,921,4.042,922,5.362,923,3.472,924,4.042,925,5.362,926,3.472,927,4.042,928,2.815,929,3.096,930,3.096,931,3.472]],["t/955",[18,0.288,35,1.439,49,1.625,50,0.732,51,0.657,55,0.812,60,1.625,61,1.712,63,1.749,68,1.837,71,2.65,72,1.467,73,1.395,80,1.371,83,1.795,85,2.153,86,2.293,89,3.791,103,2.153,105,1.395,107,2.879,109,1.625,114,2.255,134,2.296,150,2.879,169,2.459,189,3.166,213,1.625,250,2.834,251,1.439,253,2.65,257,2.459,282,1.808,301,2.296,349,2.153,380,4.145,452,3.55,457,3.791,585,3.166,589,2.879,590,3.55,615,3.55,646,2.65,651,3.55,763,2.459,884,3.55,923,4.674,932,4.134,933,4.134,934,4.134,935,4.134,936,3.55,937,3.166,938,4.134,939,4.134,940,4.134,941,4.134,942,4.134,943,4.134,944,4.134,945,4.134,946,3.55,947,3.55]],["t/957",[10,1.603,18,0.351,22,1.002,35,1.33,49,1.138,50,1.045,51,1.039,52,1.507,53,1.964,54,1.964,58,3.782,60,1.138,61,2.084,62,2.794,63,1.365,73,1.87,80,0.73,101,1.028,102,1.028,105,0.978,109,1.138,110,2.958,116,2.212,117,1.365,125,1.723,133,0.844,165,1.78,166,1.585,175,2.218,177,2.218,181,1.538,183,2.218,204,0.73,216,1.434,231,1.857,263,1.857,265,2.527,288,2.218,349,2.212,408,1.419,416,3.253,429,3.648,441,2.218,454,2.527,465,3.648,519,2.017,571,2.487,581,1.723,586,1.339,624,1.857,659,3.648,708,3.648,716,4.32,785,3.552,948,3.648,949,4.247,950,4.247,951,4.247,952,4.247,953,4.247,954,3.648,955,4.247,956,5.03,957,3.859,958,2.218,959,2.896,960,2.896,961,2.896,962,3.253,963,2.896,964,3.648,965,4.247,966,2.896,967,2.896,968,2.487,969,2.896,970,2.896,971,2.896,972,2.896,973,2.896,974,2.487,975,2.218,976,2.896,977,2.487,978,4.32,979,1.857,980,2.487,981,3.648,982,2.896,983,2.896,984,4.247,985,2.896,986,1.857,987,2.896]],["t/959",[10,1.035,18,0.332,22,0.716,28,1.872,46,2.203,63,2.301,78,2.335,80,1.639,105,1.608,167,4.566,193,3.547,204,1.2,232,3.318,250,3.105,287,4.092,340,2.335,354,3.054,413,3.318,464,2.922,467,3.318,469,4.092,600,3.649,795,3.649,954,4.092,988,6.507,989,4.092,990,5.121,991,4.764,992,3.649,993,6.507,994,4.764,995,4.764,996,4.092,997,4.764,998,4.764]],["t/961",[22,0.8,30,1.771,50,1.13,51,0.846,52,1.888,53,2.95,54,2.95,55,1.253,56,3.349,57,2.55,89,3.706,99,1.156,586,2.461,771,4.57,999,5.321,1000,5.321,1001,6.379]],["t/963",[10,1.63,17,3.661,18,0.297,28,1.675,53,1.971,72,1.513,73,1.439,90,1.971,99,0.926,181,1.183,241,1.971,249,1.591,251,1.127,408,2.089,466,2.733,525,3.661,536,4.769,760,3.868,762,4.302,763,2.536,1002,4.263,1003,5.553,1004,4.263,1005,4.263,1006,4.263,1007,4.263,1008,4.263,1009,4.263,1010,4.263,1011,4.263,1012,4.263,1013,4.263,1014,6.176,1015,4.263,1016,4.263,1017,4.731,1018,4.263,1019,4.263,1020,6.176,1021,4.263,1022,4.263,1023,4.263,1024,4.263,1025,4.263,1026,4.263,1027,4.263,1028,4.263,1029,4.263,1030,4.263,1031,4.263,1032,4.263,1033,4.263,1034,3.661,1035,4.263]],["t/965",[10,1.366,18,0.362,30,1.746,51,0.826,52,2.399,53,2.402,54,2.402,55,1.02,61,2.152,226,2.272,238,2.272,244,3.33,297,3.522,598,4.816,655,3.979,742,3.979,1017,3.979,1036,4.461,1037,4.461,1038,4.461,1039,4.461,1040,6.288,1041,5.194,1042,5.194]],["t/967",[5,0.427,8,0.469,10,1.298,11,0.677,18,0.432,22,0.572,28,0.92,30,1.453,31,1.794,32,0.677,35,1.053,38,0.792,46,0.283,48,1.274,49,0.241,50,0.47,51,0.181,52,0.404,54,0.921,55,0.711,58,0.729,59,0.526,60,1.497,62,0.885,63,1.535,64,1.739,66,1.702,67,2.993,68,1.68,69,0.526,70,1.109,72,0.942,73,1.901,74,1.041,75,1.398,76,3.05,77,2.046,78,1.301,79,2.012,80,1.114,81,1.1,83,1.15,85,3.066,86,0.943,90,0.736,91,0.393,93,0.319,97,1.037,98,3.574,99,1.038,100,2.266,101,1.284,102,0.217,103,0.592,104,0.393,105,1.767,106,0.393,108,0.729,109,0.447,110,2.043,111,1.501,114,1.715,116,0.319,117,1.024,118,1.021,121,1.525,124,0.393,125,2.464,126,1.22,131,0.425,134,0.632,135,1.184,138,0.319,139,0.471,141,0.632,149,0.364,150,0.427,153,0.469,165,1.279,166,0.594,169,0.677,171,1.024,176,0.283,181,0.65,184,1.021,186,0.526,188,0.729,190,1.881,191,1.387,192,2.442,193,0.677,195,0.268,197,0.871,199,0.364,201,0.729,203,0.632,209,0.792,210,0.677,213,1.497,216,1.576,217,1.474,220,0.404,221,0.526,222,0.526,226,1.161,228,0.364,231,0.729,233,2.089,235,1.702,236,2.904,238,1.492,241,0.526,246,0.364,249,0.425,250,1.037,251,1.441,253,0.729,255,0.526,256,1.525,263,0.696,264,0.427,265,2.03,278,0.677,282,1.666,291,1.021,292,1.22,293,1.22,294,1.22,297,1.037,298,0.526,299,0.526,300,0.977,302,0.526,304,0.871,305,1.109,306,1.109,308,0.526,310,1.021,311,0.469,312,1.393,313,0.526,317,1.745,321,0.677,336,0.792,340,0.3,343,1.387,349,2.639,350,0.364,352,1.473,358,0.364,359,0.364,362,0.393,365,2.553,368,1.71,380,2.993,381,2.043,390,0.283,394,0.977,395,0.977,401,0.393,408,0.3,416,1.525,431,1.22,438,0.677,443,1.22,444,0.526,454,1.393,456,1.525,461,0.254,464,1.148,479,2.211,487,0.427,514,0.526,527,0.427,529,3.394,531,1.71,532,0.977,544,0.526,546,0.526,552,0.469,563,0.526,566,0.526,578,0.526,580,0.526,581,1.579,585,1.22,586,0.921,588,1.71,589,0.427,597,0.792,600,0.871,603,0.526,624,2.041,638,0.526,643,0.871,650,0.526,652,0.427,658,0.469,666,0.526,667,0.871,671,0.871,675,1.525,678,2.377,686,2.012,689,1.22,691,0.469,693,0.677,698,0.427,704,0.427,710,1.71,718,1.276,722,0.871,728,2.772,730,1.525,732,0.469,749,4.542,750,0.427,757,4.008,761,0.427,762,0.427,763,0.364,785,0.729,786,0.977,800,1.368,803,0.526,809,0.977,843,1.22,844,1.22,867,0.34,883,1.71,885,1.109,891,0.526,898,0.526,904,1.368,906,3.557,908,2.28,913,0.526,916,1.276,918,2.033,919,0.977,930,1.22,946,1.368,947,0.526,948,0.526,957,0.792,958,0.469,962,0.871,964,0.526,975,1.22,979,2.553,986,1.702,989,0.526,990,1.368,996,0.526,1043,0.613,1044,0.613,1045,1.138,1046,1.991,1047,0.613,1048,2.342,1049,0.613,1050,0.613,1051,0.613,1052,0.613,1053,0.613,1054,0.613,1055,1.138,1056,0.613,1057,0.613,1058,1.138,1059,0.613,1060,0.613,1061,0.613,1062,0.613,1063,1.593,1064,2.28,1065,0.613,1066,1.138,1067,0.613,1068,0.613,1069,0.613,1070,1.593,1071,2.342,1072,2.934,1073,0.613,1074,0.613,1075,0.613,1076,0.613,1077,0.613,1078,1.138,1079,0.613,1080,0.613,1081,1.368,1082,0.613,1083,0.613,1084,0.613,1085,0.613,1086,1.593,1087,1.593,1088,1.138,1089,0.613,1090,0.613,1091,0.613,1092,0.613,1093,0.613,1094,0.613,1095,0.526,1096,0.613,1097,0.613,1098,0.613,1099,0.613,1100,0.613,1101,0.613,1102,0.613,1103,0.613,1104,0.613,1105,0.977,1106,0.871,1107,0.613,1108,0.977,1109,0.977,1110,0.613,1111,0.526,1112,1.368,1113,1.138,1114,1.138,1115,0.613,1116,0.871,1117,0.613,1118,0.613,1119,0.613,1120,0.977,1121,0.526,1122,0.613,1123,0.613,1124,0.613,1125,0.613,1126,0.977,1127,0.613,1128,0.613,1129,0.613,1130,1.138,1131,1.991,1132,0.613,1133,0.613,1134,0.613,1135,0.613,1136,0.613,1137,1.593,1138,1.138,1139,0.613,1140,0.613,1141,0.613,1142,0.613,1143,1.991,1144,0.526,1145,0.613,1146,0.613,1147,1.22,1148,1.991,1149,0.871,1150,0.613,1151,0.613,1152,0.613,1153,0.613,1154,0.613,1155,0.613,1156,0.613,1157,0.613,1158,0.613,1159,0.613,1160,0.613,1161,0.613,1162,1.138,1163,0.613,1164,0.613,1165,0.526,1166,0.613,1167,0.613,1168,0.613,1169,0.613,1170,0.613,1171,0.613,1172,0.613,1173,0.613,1174,0.613,1175,0.613,1176,0.613,1177,0.613,1178,0.526,1179,0.613,1180,0.613]],["t/969",[18,0.366,22,0.89,27,2.452,30,1.957,35,1.673,37,2.173,50,1.12,51,0.622,52,1.388,55,0.768,63,1.902,64,1.537,80,0.985,99,0.85,100,3.121,101,2.502,102,1.862,103,2.037,131,1.46,134,2.173,195,1.711,226,2.766,233,2.766,236,3.121,238,1.711,244,2.508,251,1.566,257,2.327,297,2.037,305,2.725,306,2.725,340,1.917,346,2.508,365,2.508,405,2.508,427,4.506,438,3.121,591,4.506,624,2.294,772,3.36,885,2.725,937,4.534,1147,2.996,1181,3.912,1182,3.912,1183,3.912,1184,3.912,1185,3.912,1186,3.912,1187,5.246,1188,3.912,1189,5.246,1190,3.912,1191,3.912,1192,3.912]],["t/971",[10,1.321,18,0.343,30,1.364,50,0.87,53,2.811,54,2.811,56,2.979,57,2.269,61,2.036,73,1.659,97,2.559,114,2.036,181,1.687,216,1.659,220,2.157,226,2.149,238,2.149,297,3.165,598,4.655,655,3.764,718,3.15,726,4.655,742,3.764,1017,3.764,1036,4.221,1037,4.221,1038,4.221,1039,4.221,1193,4.914,1194,4.914,1195,4.914,1196,4.221,1197,4.914,1198,4.914]],["t/973",[10,1.387,18,0.371,22,0.601,30,1.661,36,3.167,50,1.06,51,0.635,53,1.849,57,1.492,60,1.571,63,1.923,68,1.349,80,1.007,83,1.11,85,3.961,117,1.71,203,2.22,220,1.419,228,2.378,233,2.328,249,1.987,312,2.328,343,3.708,624,1.748,667,3.062,916,2.563,918,4.887,975,4.887,1064,4.572,1081,3.433,1105,4.572,1106,3.062,1108,3.433,1109,5.14,1111,4.572,1112,3.433,1116,4.077,1144,3.433,1165,3.433,1199,3.708,1200,3.998,1201,3.998,1202,3.998,1203,3.998,1204,3.998,1205,3.433]],["t/975",[10,0.77,18,0.247,22,0.533,27,1.468,50,0.869,51,0.563,57,1.831,61,1.468,63,2.048,68,2.152,78,1.737,80,1.661,81,1.468,83,1.685,85,3.434,90,1.639,99,0.77,105,1.656,117,1.576,131,1.323,165,1.808,204,0.893,214,2.272,216,1.656,217,2.724,220,1.258,228,2.108,238,1.55,263,2.145,312,2.655,317,3.612,347,2.714,349,1.846,408,2.404,414,3.144,417,3.044,444,2.268,461,1.468,479,1.968,527,3.416,529,1.737,581,2.108,586,1.639,691,3.757,693,2.108,815,2.714,916,2.272,979,3.144,986,2.272,992,4.309,1121,3.044,1149,3.757,1199,2.468,1206,3.544,1207,3.044,1208,3.044,1209,3.757,1210,3.757,1211,4.882,1212,4.905,1213,3.544,1214,3.544,1215,3.544,1216,3.544,1217,3.544,1218,3.544,1219,3.757,1220,3.044,1221,3.044,1222,3.044,1223,3.044,1224,3.044,1225,2.714,1226,2.714,1227,3.044,1228,3.044,1229,3.044]],["t/977",[10,0.78,18,0.251,22,0.54,27,1.487,50,0.876,57,1.848,61,1.487,63,2.281,68,1.212,81,1.487,83,0.997,85,3.179,99,0.78,101,2.01,105,1.671,117,1.59,131,1.34,165,1.82,176,1.66,204,0.904,214,2.302,216,1.212,217,1.994,220,1.274,228,2.136,233,2.164,238,2.164,263,2.477,312,2.67,317,3.37,349,1.87,350,2.136,352,2.289,408,1.76,428,2.501,461,1.487,467,2.501,479,1.994,527,3.945,575,2.75,581,2.136,624,2.477,760,2.501,799,2.75,815,2.75,916,2.302,928,2.501,979,3.173,986,2.302,1116,2.75,1149,2.75,1199,2.501,1207,3.084,1208,3.084,1209,3.791,1210,3.791,1211,2.75,1219,3.791,1220,3.084,1221,3.084,1222,3.084,1223,3.084,1224,4.251,1225,2.75,1226,2.75,1227,4.251,1228,3.084,1229,3.084,1230,3.59,1231,3.59,1232,3.59,1233,3.59,1234,3.59,1235,3.59,1236,3.59,1237,4.949,1238,4.949,1239,4.949,1240,4.949,1241,3.59,1242,3.59,1243,3.59]],["t/979",[27,1.838,30,1.747,50,1.115,54,2.051,57,2.127,61,1.838,72,1.574,81,1.838,85,3.773,108,2.844,117,1.831,204,1.117,220,1.574,228,2.639,238,1.94,249,1.656,288,3.397,301,2.463,312,3.005,343,4.384,347,3.397,408,2.174,414,2.844,461,1.838,464,2.174,624,1.94,693,2.639,957,3.089,958,3.397,992,4.821,1196,3.81,1199,3.089,1209,4.364,1210,4.364,1219,4.364,1225,3.397,1226,3.397,1244,4.436,1245,4.436,1246,4.436,1247,5.698,1248,5.698]],["t/981",[10,1.622,18,0.32,22,0.483,29,2.762,50,0.57,51,0.638,52,0.715,57,1.498,58,1.292,60,0.792,61,0.835,62,3.111,63,1.472,64,1.578,65,1.292,68,1.355,71,1.292,72,0.715,73,2.291,74,1.777,75,0.68,77,2.468,80,0.508,81,0.835,83,1.272,86,1.033,91,1.292,94,2.062,95,1.404,96,1.119,97,1.049,99,1.41,102,0.715,105,1.891,109,1.264,114,0.835,116,1.049,118,1.292,133,0.587,140,0.68,171,0.881,177,3.51,183,1.543,184,1.292,203,1.786,204,0.508,213,1.264,216,1.547,220,1.141,226,1.407,251,0.533,263,2.004,272,1.731,289,1.404,295,1.731,301,2.545,344,1.543,349,3.27,352,2.119,359,1.199,365,1.292,428,2.24,441,2.464,444,0.932,449,2.464,456,1.543,464,0.988,519,1.404,549,2.762,552,1.543,554,1.731,575,2.464,576,1.543,581,1.913,586,2.119,589,1.404,592,1.731,611,1.543,612,1.543,649,1.292,658,1.543,695,3.448,743,1.731,761,1.404,795,1.543,833,1.543,867,1.786,885,2.24,903,1.731,920,1.543,926,1.731,928,2.24,929,1.543,930,3.835,931,1.731,937,1.543,957,1.404,962,1.543,968,1.731,974,3.448,977,3.935,978,5.489,979,2.062,980,2.762,981,3.935,1034,1.731,1095,3.448,1120,1.731,1126,1.731,1178,1.731,1205,1.731,1249,2.015,1250,2.015,1251,2.015,1252,2.015,1253,2.015,1254,5.601,1255,2.015,1256,2.015,1257,2.015,1258,4.582,1259,2.015,1260,2.015,1261,3.216,1262,2.015,1263,2.015,1264,3.216,1265,2.015,1266,2.015,1267,2.015,1268,3.216,1269,3.216,1270,2.015,1271,2.015,1272,2.015,1273,2.015,1274,2.015,1275,2.015,1276,2.015,1277,4.014,1278,3.216,1279,3.216,1280,2.015,1281,2.015,1282,2.015,1283,2.015,1284,1.731,1285,2.015,1286,2.015,1287,2.015,1288,3.216,1289,2.015,1290,3.216,1291,2.015,1292,3.216,1293,2.015,1294,2.015,1295,2.015,1296,2.015]],["t/983",[22,0.891,55,1.335,81,2.455,99,1.288,986,3.799]],["t/985",[10,0.778,22,0.538,30,0.994,48,2.578,50,0.634,51,0.569,60,1.406,61,1.483,63,1.817,65,2.294,68,2.058,71,2.294,75,1.208,80,0.901,91,2.294,94,3.166,95,2.493,96,1.988,102,1.752,105,1.909,114,2.046,117,1.587,193,4.032,217,1.988,251,1.306,352,2.284,479,3.836,586,1.655,597,4.455,624,1.565,649,2.294,654,2.493,693,3.364,785,3.166,867,3.552,920,2.741,928,2.493,929,2.741,936,3.074,1211,2.741,1297,4.241,1298,3.074,1299,4.241,1300,5.236,1301,3.579,1302,3.579,1303,3.074,1304,4.241,1305,4.241,1306,4.241,1307,4.241,1308,4.241,1309,4.241,1310,3.579,1311,3.074,1312,4.241,1313,3.074,1314,3.074,1315,3.074,1316,3.074,1317,3.074,1318,3.074,1319,3.074,1320,3.074,1321,3.074,1322,3.074,1323,3.074,1324,3.074,1325,3.074,1326,3.074,1327,3.579]],["t/987",[8,3.64,10,1.381,18,0.332,22,0.714,30,0.73,35,1.046,48,2.305,50,0.466,51,0.946,55,0.777,60,1.034,63,1.271,68,2.194,72,1.404,77,1.829,80,0.663,86,2.042,94,1.687,96,1.461,99,0.86,100,1.565,102,1.687,105,1.913,109,1.034,114,2.19,117,1.698,133,0.767,165,1.271,171,1.73,181,1.319,193,4.053,203,1.461,204,0.663,209,1.833,213,1.555,217,2.197,231,1.687,251,1.257,274,2.26,346,1.687,349,2.475,352,1.217,438,1.565,479,3.61,597,4.527,624,1.151,649,1.687,693,1.565,750,1.833,785,3.388,867,3.43,881,2.26,1106,2.015,1147,4.048,1284,2.26,1297,2.26,1298,2.26,1299,4.082,1300,5.304,1303,2.26,1304,4.54,1305,4.082,1306,4.867,1307,4.54,1308,4.54,1309,4.54,1311,2.26,1312,4.082,1313,2.26,1314,2.26,1315,2.26,1316,2.26,1317,2.26,1318,2.26,1319,2.26,1320,2.26,1321,2.26,1322,2.26,1323,2.26,1324,2.26,1325,2.26,1326,3.397,1328,2.631,1329,2.631,1330,2.631,1331,2.631,1332,2.631,1333,2.631,1334,3.955,1335,3.955,1336,2.631,1337,2.631,1338,3.955,1339,2.631,1340,2.631,1341,2.631,1342,3.955,1343,2.631]]],"invertedIndex":[["",{"_index":10,"t":{"878":{"position":[[92,1],[462,1],[496,1]]},"880":{"position":[[119,1],[559,4]]},"882":{"position":[[209,1]]},"884":{"position":[[1269,1],[2550,1],[2571,2]]},"886":{"position":[[202,1],[317,1],[526,1],[777,1],[953,1]]},"894":{"position":[[674,2]]},"896":{"position":[[366,1],[396,1]]},"900":{"position":[[39,1],[1414,1],[3059,1],[3080,1],[3140,1],[3191,1],[3193,1],[3236,1],[3238,1],[3261,1],[3284,1],[3311,1],[3331,1],[3361,1],[3493,1],[4386,1],[4407,1],[4464,1],[4520,1],[4522,1],[4560,1],[4562,1],[4578,1],[4599,1],[4624,1],[4644,1],[4665,1],[4693,1],[4770,1]]},"902":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"908":{"position":[[213,1],[238,1],[259,1]]},"910":{"position":[[400,2],[458,2]]},"916":{"position":[[752,3],[789,3],[827,3],[831,3]]},"929":{"position":[[234,1]]},"957":{"position":[[269,1],[304,1],[340,1],[376,1],[411,1],[433,1],[456,1],[473,1],[491,1],[627,4],[1264,1],[1465,1],[1467,1],[1679,2],[1778,1],[1813,1],[1849,1],[1871,1],[1894,1],[1911,1],[1934,1],[1952,1]]},"959":{"position":[[316,1]]},"963":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[312,1],[320,4],[325,1],[330,1],[570,1],[697,1],[706,1],[728,1],[730,1]]},"965":{"position":[[83,1],[85,1]]},"967":{"position":[[71,2],[796,1],[1237,1],[1360,3],[1711,4],[1716,2],[1825,1],[1906,1],[1994,1],[2456,2],[2673,1],[2675,1],[2753,1],[2755,1],[2859,1],[3380,1],[3519,1],[3630,1],[4576,2],[6999,2],[7068,1],[7514,2],[8156,1],[8812,1],[10630,1],[10779,1],[10843,1],[10963,1],[10994,1],[11983,1],[12162,1],[12356,1],[12438,1],[12504,1],[13157,1],[13509,2]]},"971":{"position":[[147,1],[149,1]]},"973":{"position":[[215,1],[241,1],[278,1],[343,1]]},"975":{"position":[[895,1]]},"977":{"position":[[750,1]]},"981":{"position":[[242,1],[272,4],[317,1],[513,1],[557,1],[629,1],[640,1],[655,1],[796,1],[879,3],[912,1],[923,1],[925,1],[969,1],[988,1],[1050,1],[1282,1],[1468,1],[1644,1],[1737,1],[1803,1],[1901,1],[2080,1],[2161,1],[2266,2],[2269,3],[2273,5],[2279,1],[2396,1],[2398,1],[2494,1],[2582,1],[2612,1],[2656,4],[2665,2],[3338,1],[3419,1],[3448,2],[3451,2],[3484,1],[3496,2],[3523,2],[3556,5],[3566,1]]},"985":{"position":[[589,2]]},"987":{"position":[[154,1],[348,1],[487,2],[569,1],[756,2],[857,1],[1068,2],[1281,2]]}}}],["0",{"_index":1063,"t":{"967":{"position":[[1430,1],[4836,1],[4849,1]]}}}],["0.0.0.0:4180",{"_index":509,"t":{"900":{"position":[[4772,14]]}}}],["0.001",{"_index":1241,"t":{"977":{"position":[[884,5]]}}}],["0400",{"_index":1210,"t":{"975":{"position":[[241,5],[1083,4]]},"977":{"position":[[122,5],[1171,4]]},"979":{"position":[[267,5],[593,4]]}}}],["1",{"_index":231,"t":{"884":{"position":[[2289,1]]},"937":{"position":[[1560,1]]},"957":{"position":[[1630,2]]},"967":{"position":[[1475,3],[13009,4]]},"987":{"position":[[422,2]]}}}],["1.5h",{"_index":739,"t":{"929":{"position":[[236,5]]}}}],["100",{"_index":1118,"t":{"967":{"position":[[4932,3]]}}}],["12",{"_index":1243,"t":{"977":{"position":[[1048,2]]}}}],["12.x",{"_index":356,"t":{"894":{"position":[[58,5],[128,4]]}}}],["123456.apps.googleusercontent.com",{"_index":1050,"t":{"967":{"position":[[592,35]]}}}],["127.0.0.1:4180",{"_index":958,"t":{"957":{"position":[[664,14]]},"967":{"position":[[4336,16]]},"979":{"position":[[732,14]]}}}],["128",{"_index":893,"t":{"951":{"position":[[383,3],[434,3]]}}}],["168h0m0",{"_index":1057,"t":{"967":{"position":[[1039,8]]}}}],["19/mar/2015:17:20:19",{"_index":1209,"t":{"975":{"position":[[218,21],[1061,20]]},"977":{"position":[[99,21],[1149,20]]},"979":{"position":[[244,21],[571,20]]}}}],["192",{"_index":1030,"t":{"963":{"position":[[644,3]]}}}],["1h",{"_index":187,"t":{"884":{"position":[[919,4]]}}}],["1s",{"_index":1084,"t":{"967":{"position":[[2571,4]]}}}],["2",{"_index":209,"t":{"884":{"position":[[1510,1]]},"900":{"position":[[3458,2]]},"967":{"position":[[12480,3],[13085,4]]},"987":{"position":[[716,2]]}}}],["2.0",{"_index":388,"t":{"896":{"position":[[213,3]]},"900":{"position":[[35,3]]}}}],["20",{"_index":1097,"t":{"967":{"position":[[3833,2]]}}}],["200",{"_index":799,"t":{"937":{"position":[[1276,3]]},"953":{"position":[[223,3],[336,3]]},"977":{"position":[[1097,3]]}}}],["202",{"_index":929,"t":{"953":{"position":[[868,3]]},"981":{"position":[[131,3]]},"985":{"position":[[162,3]]}}}],["2048",{"_index":533,"t":{"902":{"position":[[1052,4]]}}}],["24",{"_index":1028,"t":{"963":{"position":[[630,2]]}}}],["2>&1",{"_index":41,"t":{"878":{"position":[[491,4]]}}}],["2>/dev/nul",{"_index":1013,"t":{"963":{"position":[[227,11]]}}}],["2h45m",{"_index":740,"t":{"929":{"position":[[245,8]]}}}],["3",{"_index":268,"t":{"886":{"position":[[1119,2]]},"892":{"position":[[1141,4]]}}}],["3/4",{"_index":1168,"t":{"967":{"position":[[12782,3]]}}}],["30",{"_index":984,"t":{"957":{"position":[[1652,3],[1675,3]]}}}],["300m",{"_index":738,"t":{"929":{"position":[[225,8]]}}}],["315360000",{"_index":1317,"t":{"985":{"position":[[965,9]]},"987":{"position":[[1722,9]]}}}],["32",{"_index":1020,"t":{"963":{"position":[[309,2],[578,2],[708,2]]}}}],["3650",{"_index":545,"t":{"902":{"position":[[1175,4]]}}}],["401",{"_index":94,"t":{"880":{"position":[[403,3]]},"953":{"position":[[895,3]]},"981":{"position":[[158,3],[965,3]]},"985":{"position":[[189,3],[1254,4]]},"987":{"position":[[897,3]]}}}],["403",{"_index":1327,"t":{"985":{"position":[[1259,4]]}}}],["4180",{"_index":963,"t":{"957":{"position":[[979,5]]}}}],["443",{"_index":962,"t":{"957":{"position":[[909,3],[1273,3]]},"967":{"position":[[4421,6],[13356,3]]},"981":{"position":[[251,3]]}}}],["4kb",{"_index":1261,"t":{"981":{"position":[[1733,3],[1938,4]]}}}],["5",{"_index":224,"t":{"884":{"position":[[1988,1]]}}}],["6",{"_index":270,"t":{"886":{"position":[[1155,2]]}}}],["7",{"_index":1115,"t":{"967":{"position":[[4765,1]]}}}],["74.125.224.72",{"_index":1220,"t":{"975":{"position":[[808,13]]},"977":{"position":[[663,13]]}}}],["80",{"_index":1177,"t":{"967":{"position":[[13342,3]]}}}],["994",{"_index":361,"t":{"894":{"position":[[138,5]]}}}],["_",{"_index":1017,"t":{"963":{"position":[[279,3],[327,2],[732,3]]},"965":{"position":[[104,4]]},"971":{"position":[[168,4]]}}}],["__host",{"_index":1060,"t":{"967":{"position":[[1216,7]]}}}],["__secur",{"_index":1061,"t":{"967":{"position":[[1228,8]]}}}],["_oauth2_proxi",{"_index":891,"t":{"951":{"position":[[338,14]]},"967":{"position":[[1266,15]]}}}],["_oauth2_proxy_1",{"_index":1296,"t":{"981":{"position":[[3951,18]]}}}],["abov",{"_index":347,"t":{"892":{"position":[[1127,5]]},"975":{"position":[[1324,5]]},"979":{"position":[[45,5]]}}}],["absent",{"_index":1098,"t":{"967":{"position":[[3839,6]]}}}],["accept",{"_index":91,"t":{"880":{"position":[[363,7]]},"953":{"position":[[872,8]]},"967":{"position":[[9508,8]]},"981":{"position":[[135,8]]},"985":{"position":[[166,8]]}}}],["access",{"_index":213,"t":{"884":{"position":[[1746,7]]},"886":{"position":[[447,6],[622,7]]},"890":{"position":[[296,7],[924,6],[999,6],[1036,6],[1186,6],[1217,6],[1306,6]]},"892":{"position":[[40,6],[1067,6]]},"900":{"position":[[2344,6],[2403,7],[2977,6]]},"902":{"position":[[305,7],[2650,6],[3170,10]]},"908":{"position":[[528,6],[638,6],[673,6]]},"922":{"position":[[349,6]]},"925":{"position":[[101,6]]},"955":{"position":[[214,9]]},"967":{"position":[[3333,6],[3758,6],[3805,6],[5959,6],[6029,6],[6113,6],[6915,6],[7743,6],[10065,6],[10094,6],[12262,6]]},"981":{"position":[[1306,6],[1447,6]]},"987":{"position":[[2015,6],[2191,6]]}}}],["access_by_lua_block",{"_index":1289,"t":{"981":{"position":[[3399,19]]}}}],["access_token",{"_index":1125,"t":{"967":{"position":[[5988,12]]}}}],["accompani",{"_index":296,"t":{"890":{"position":[[382,11]]}}}],["account",{"_index":188,"t":{"884":{"position":[[977,7],[1091,8],[2388,7]]},"900":{"position":[[1641,8],[3747,8]]},"902":{"position":[[260,8],[737,7]]},"908":{"position":[[204,7],[487,7]]},"967":{"position":[[4038,7],[4082,7]]}}}],["acr",{"_index":1043,"t":{"967":{"position":[[34,3]]}}}],["activ",{"_index":243,"t":{"886":{"position":[[66,6],[592,6]]}}}],["actual",{"_index":612,"t":{"906":{"position":[[221,6]]},"908":{"position":[[124,6]]},"981":{"position":[[3721,6]]}}}],["ad",{"_index":103,"t":{"880":{"position":[[637,5]]},"882":{"position":[[289,2]]},"898":{"position":[[4,6],[49,2]]},"920":{"position":[[7,6]]},"931":{"position":[[79,5]]},"955":{"position":[[939,5]]},"967":{"position":[[9395,2],[10110,5]]},"969":{"position":[[750,6]]}}}],["add",{"_index":241,"t":{"886":{"position":[[0,3],[809,3],[979,3]]},"894":{"position":[[223,3],[431,3]]},"898":{"position":[[74,3]]},"900":{"position":[[605,3],[1296,4],[1989,3],[2336,3],[2567,3]]},"908":{"position":[[0,3]]},"914":{"position":[[80,3]]},"916":{"position":[[432,3]]},"945":{"position":[[148,3]]},"963":{"position":[[332,3]]},"967":{"position":[[6089,4],[13434,3]]}}}],["add_head",{"_index":974,"t":{"957":{"position":[[1402,10]]},"981":{"position":[[1608,10],[2496,10],[2539,10]]}}}],["addedto",{"_index":702,"t":{"925":{"position":[[652,7],[887,7]]}}}],["addit",{"_index":289,"t":{"890":{"position":[[206,10],[775,8]]},"900":{"position":[[2066,10]]},"908":{"position":[[559,10]]},"981":{"position":[[1968,10]]}}}],["addition",{"_index":1099,"t":{"967":{"position":[[4130,12]]}}}],["addr>:/oauth2/callback",{"_index":618,"t":{"906":{"position":[[611,24]]}}}],["headers.default",{"_index":756,"t":{"931":{"position":[[456,16]]}}}],["headers/pass_user_head",{"_index":681,"t":{"922":{"position":[[390,25]]}}}],["headers/skip_auth_strip_head",{"_index":690,"t":{"922":{"position":[[680,31]]}}}],["headershould",{"_index":751,"t":{"931":{"position":[[346,12]]}}}],["headervalu",{"_index":714,"t":{"927":{"position":[[13,12]]},"931":{"position":[[540,13]]},"933":{"position":[[21,11]]},"935":{"position":[[26,12]]}}}],["health",{"_index":919,"t":{"953":{"position":[[384,6]]},"967":{"position":[[7413,6],[7500,6]]}}}],["healthcheck",{"_index":1089,"t":{"967":{"position":[[2790,12]]}}}],["here",{"_index":516,"t":{"902":{"position":[[344,5]]}}}],["hex",{"_index":895,"t":{"951":{"position":[[406,3]]}}}],["histor",{"_index":868,"t":{"949":{"position":[[103,13]]}}}],["hit",{"_index":160,"t":{"884":{"position":[[404,3]]},"886":{"position":[[668,3],[1023,7]]}}}],["hmac",{"_index":993,"t":{"959":{"position":[[142,6],[361,4],[493,4]]}}}],["homepag",{"_index":608,"t":{"906":{"position":[[57,9]]}}}],["host",{"_index":263,"t":{"886":{"position":[[870,4]]},"894":{"position":[[185,7],[1053,6]]},"906":{"position":[[606,4]]},"910":{"position":[[47,4],[495,4],[560,4],[630,4]]},"922":{"position":[[162,4]]},"937":{"position":[[1636,4]]},"957":{"position":[[1520,4],[1525,6]]},"967":{"position":[[914,4],[6673,4],[6707,4]]},"975":{"position":[[927,4],[960,4]]},"977":{"position":[[443,9],[782,4],[815,4]]},"981":{"position":[[370,4],[375,6],[708,4],[713,6]]}}}],["host(`a",{"_index":1305,"t":{"985":{"position":[[342,8],[537,8]]},"987":{"position":[[431,8],[725,8],[1012,8]]}}}],["host(`oauth.example.com",{"_index":1339,"t":{"987":{"position":[[1254,26]]}}}],["host>/api/v3",{"_index":323,"t":{"890":{"position":[[1953,13]]}}}],["host>/auth/realms//login/oauth/access_token",{"_index":322,"t":{"890":{"position":[[1878,31]]}}}],["host>/login/oauth/author",{"_index":320,"t":{"890":{"position":[[1808,28]]}}}],["host>/oauth2/callback",{"_index":627,"t":{"910":{"position":[[144,21],[298,22]]}}}],["host_head",{"_index":1230,"t":{"977":{"position":[[128,13]]}}}],["hostnam",{"_index":583,"t":{"902":{"position":[[3220,9]]},"906":{"position":[[228,8]]},"908":{"position":[[131,8]]}}}],["hosts.thi",{"_index":787,"t":{"937":{"position":[[909,10]]}}}],["hour",{"_index":240,"t":{"884":{"position":[[2566,4]]}}}],["hst",{"_index":967,"t":{"957":{"position":[[1251,5]]}}}],["htaccess",{"_index":1129,"t":{"967":{"position":[[6568,8]]}}}],["html",{"_index":1070,"t":{"967":{"position":[[1764,4],[2647,6],[2727,6]]}}}],["htpasswd",{"_index":1071,"t":{"967":{"position":[[1789,8],[1853,8],[4109,8],[4166,8],[4210,8]]}}}],["http",{"_index":624,"t":{"910":{"position":[[26,9]]},"937":{"position":[[903,5]]},"947":{"position":[[70,4]]},"957":{"position":[[821,4],[854,4]]},"967":{"position":[[524,4],[1597,6],[2584,5],[2603,5],[4246,4],[4323,4],[4355,5],[4407,5],[6284,4],[10284,4],[11579,5],[11695,5],[11994,4],[12729,4],[12902,4],[13350,5],[13364,6]]},"969":{"position":[[151,4],[160,5]]},"973":{"position":[[439,4]]},"977":{"position":[[0,4],[1105,4],[1252,4]]},"979":{"position":[[713,5]]},"985":{"position":[[310,5]]},"987":{"position":[[391,5]]}}}],["http(",{"_index":772,"t":{"937":{"position":[[482,7]]},"969":{"position":[[91,7]]}}}],["http/1.0",{"_index":1223,"t":{"975":{"position":[[982,8]]},"977":{"position":[[837,8]]}}}],["http/1.1",{"_index":1232,"t":{"977":{"position":[[171,8]]}}}],["http/1.1x",{"_index":940,"t":{"955":{"position":[[623,9]]}}}],["http://0.0.0.0:8080\"]email_domain",{"_index":503,"t":{"900":{"position":[[4524,35]]}}}],["http://127.0.0.1:4180",{"_index":441,"t":{"900":{"position":[[1360,21]]},"957":{"position":[[1480,22]]},"981":{"position":[[330,22],[668,22]]}}}],["http://127.0.0.1:4180/oauth2/callback",{"_index":432,"t":{"900":{"position":[[1067,37]]},"902":{"position":[[3623,37]]}}}],["http://127.0.0.1:4180/oauth2/callback'nam",{"_index":422,"t":{"900":{"position":[[722,44]]}}}],["http://127.0.0.1:4180/static",{"_index":442,"t":{"900":{"position":[[1385,28]]}}}],["http://127.0.0.1:5556",{"_index":593,"t":{"902":{"position":[[3678,21]]}}}],["http://127.0.0.1:5556/author",{"_index":594,"t":{"902":{"position":[[3732,31]]}}}],["http://127.0.0.1:5556/dex",{"_index":433,"t":{"900":{"position":[[1121,25]]}}}],["http://127.0.0.1:5556/key",{"_index":596,"t":{"902":{"position":[[3819,26]]}}}],["http://127.0.0.1:5556/token",{"_index":595,"t":{"902":{"position":[[3776,27]]}}}],["http://127.0.0.1:8080",{"_index":1183,"t":{"969":{"position":[[218,22]]}}}],["http://127.0.0.1:8080/some/path",{"_index":1184,"t":{"969":{"position":[[361,32]]}}}],["http://172.16.0.1:4180",{"_index":1314,"t":{"985":{"position":[[876,22]]},"987":{"position":[[1633,22]]}}}],["http://172.16.0.2:7555",{"_index":1313,"t":{"985":{"position":[[808,22]]},"987":{"position":[[1493,22]]}}}],["http://172.16.0.3:7555",{"_index":1340,"t":{"987":{"position":[[1565,22]]}}}],["http://[oauth2",{"_index":1187,"t":{"969":{"position":[[608,14],[963,14]]}}}],["http://]:/sign_in",{"_index":1133,"t":{"967":{"position":[[7627,18]]}}}],["oauth2_proxy_",{"_index":1193,"t":{"971":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":1197,"t":{"971":{"position":[[425,27]]}}}],["oauth2_proxy_email_domain",{"_index":1198,"t":{"971":{"position":[[489,27]]}}}],["oauth2_proxy_jwt_key",{"_index":551,"t":{"902":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":577,"t":{"902":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":1059,"t":{"967":{"position":[[1154,11]]}}}],["oauthproxy.go",{"_index":995,"t":{"959":{"position":[[227,14]]}}}],["obtain",{"_index":1173,"t":{"967":{"position":[[12869,9]]}}}],["occur",{"_index":1246,"t":{"979":{"position":[[187,5]]}}}],["oidc",{"_index":380,"t":{"894":{"position":[[1126,4]]},"900":{"position":[[244,6],[374,4],[965,4],[996,4],[1105,4],[1549,4]]},"902":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"955":{"position":[[481,4],[667,4],[780,4],[889,4]]},"967":{"position":[[5341,4],[5453,4],[5498,4],[5608,4],[5699,4],[5720,4],[5770,4],[5799,4],[5829,4],[5876,4],[5907,4],[6193,4],[6947,4],[11256,4],[11283,4],[11340,4],[13080,4]]}}}],["oidc\"redirect_url",{"_index":470,"t":{"900":{"position":[[3061,18],[4388,18]]}}}],["oidc_issuer_url",{"_index":480,"t":{"900":{"position":[[3372,15]]}}}],["ok",{"_index":45,"t":{"878":{"position":[[537,2]]},"953":{"position":[[227,2],[340,2]]}}}],["okoauth2",{"_index":43,"t":{"878":{"position":[[503,8]]}}}],["okta",{"_index":406,"t":{"900":{"position":[[315,5],[1526,5],[1567,5],[1612,4],[2465,4],[3708,4],[3834,4],[4309,4],[4482,4]]}}}],["old",{"_index":1114,"t":{"967":{"position":[[4751,3],[4811,3]]}}}],["omit",{"_index":1179,"t":{"967":{"position":[[13392,4]]}}}],["on",{"_index":90,"t":{"880":{"position":[[354,3]]},"902":{"position":[[2206,3]]},"908":{"position":[[683,3]]},"912":{"position":[[156,3]]},"935":{"position":[[96,3]]},"943":{"position":[[674,4]]},"947":{"position":[[187,3]]},"963":{"position":[[39,3]]},"967":{"position":[[347,4],[7900,4],[11201,3]]},"975":{"position":[[298,3]]}}}],["onc",{"_index":239,"t":{"884":{"position":[[2558,4]]},"902":{"position":[[2843,4]]},"945":{"position":[[421,4]]}}}],["open",{"_index":162,"t":{"884":{"position":[[460,4]]},"900":{"position":[[106,4]]},"943":{"position":[[113,4]]}}}],["openid",{"_index":124,"t":{"882":{"position":[[292,6],[544,6]]},"894":{"position":[[276,7]]},"900":{"position":[[0,6],[220,6],[2628,6]]},"902":{"position":[[862,6],[906,6]]},"967":{"position":[[5635,6]]}}}],["openssl",{"_index":536,"t":{"902":{"position":[[1104,7]]},"963":{"position":[[78,7],[288,7]]}}}],["option",{"_index":55,"t":{"878":{"position":[[663,8]]},"884":{"position":[[1062,11]]},"890":{"position":[[276,8],[362,7]]},"892":{"position":[[944,8]]},"894":{"position":[[905,7]]},"900":{"position":[[1721,10],[2023,6],[2452,8]]},"902":{"position":[[1540,8],[2132,7],[3495,7]]},"906":{"position":[[407,8],[530,7],[706,7]]},"908":{"position":[[344,8],[584,7]]},"910":{"position":[[223,7]]},"916":{"position":[[164,7],[317,8],[373,7]]},"918":{"position":[[218,7],[263,7]]},"920":{"position":[[37,7],[256,7],[379,7],[437,7]]},"922":{"position":[[736,7],[844,7]]},"925":{"position":[[53,8],[77,7],[222,7]]},"927":{"position":[[246,8]]},"929":{"position":[[180,8]]},"931":{"position":[[416,6]]},"933":{"position":[[467,8]]},"937":{"position":[[920,6],[1374,6]]},"955":{"position":[[985,6]]},"961":{"position":[[48,8],[148,7]]},"965":{"position":[[169,6]]},"967":{"position":[[0,6],[52,9],[803,8],[1306,8],[1537,11],[10582,7],[12642,10],[12945,6],[13122,7],[13559,7]]},"969":{"position":[[61,6]]},"983":{"position":[[5,6],[37,6]]},"987":{"position":[[175,7],[2325,6]]}}}],["order",{"_index":1000,"t":{"961":{"position":[[109,5]]}}}],["org",{"_index":300,"t":{"890":{"position":[[534,3],[635,7],[795,4],[1559,3]]},"967":{"position":[[2981,3],[3467,3]]}}}],["organ",{"_index":258,"t":{"886":{"position":[[430,13]]},"890":{"position":[[259,12],[580,12],[713,12]]}}}],["organis",{"_index":302,"t":{"890":{"position":[[678,12]]},"967":{"position":[[3027,12]]}}}],["orgname/repo",{"_index":313,"t":{"890":{"position":[[1150,12]]},"967":{"position":[[3225,12]]}}}],["orgname/repo=accesslevel",{"_index":1096,"t":{"967":{"position":[[3732,25]]}}}],["origin",{"_index":173,"t":{"884":{"position":[[628,7]]},"900":{"position":[[146,10]]}}}],["os,base64",{"_index":1007,"t":{"963":{"position":[[125,10]]}}}],["otherwis",{"_index":452,"t":{"900":{"position":[[1903,10]]},"955":{"position":[[992,9]]}}}],["out",{"_index":457,"t":{"900":{"position":[[2125,3],[2318,3]]},"902":{"position":[[1156,3]]},"953":{"position":[[461,3]]},"955":{"position":[[17,4],[325,3]]}}}],["output",{"_index":1199,"t":{"973":{"position":[[34,6],[81,6]]},"975":{"position":[[142,6]]},"977":{"position":[[23,6]]},"979":{"position":[[80,6]]}}}],["outsid",{"_index":1196,"t":{"971":{"position":[[326,7]]},"979":{"position":[[193,7]]}}}],["overrid",{"_index":394,"t":{"898":{"position":[[183,8]]},"967":{"position":[[7249,8],[8463,8]]}}}],["override_speci",{"_index":1035,"t":{"963":{"position":[[711,16]]}}}],["overwrit",{"_index":1001,"t":{"961":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":639,"t":{"914":{"position":[[37,7]]}}}],["pad",{"_index":897,"t":{"951":{"position":[[479,9]]}}}],["page",{"_index":253,"t":{"886":{"position":[[332,4],[551,4],[792,4],[962,4]]},"916":{"position":[[12,4],[143,4],[190,4],[331,4]]},"953":{"position":[[426,5],[465,4]]},"955":{"position":[[329,4]]},"967":{"position":[[7322,4],[11438,4]]}}}],["pair",{"_index":898,"t":{"951":{"position":[[533,4]]},"967":{"position":[[2256,5]]}}}],["pane",{"_index":148,"t":{"884":{"position":[[237,5],[280,5],[321,5],[428,5]]}}}],["paramet",{"_index":937,"t":{"955":{"position":[[364,10]]},"969":{"position":[[258,10],[1096,10],[1121,9]]},"981":{"position":[[3773,10]]}}}],["part",{"_index":695,"t":{"925":{"position":[[149,4]]},"981":{"position":[[1796,6],[2177,4],[2455,4]]}}}],["particularli",{"_index":1195,"t":{"971":{"position":[[286,12]]}}}],["pass",{"_index":64,"t":{"880":{"position":[[12,7]]},"884":{"position":[[2104,4]]},"886":{"position":[[1292,6]]},"900":{"position":[[1795,6]]},"902":{"position":[[2283,4]]},"906":{"position":[[388,4]]},"908":{"position":[[325,4]]},"910":{"position":[[204,4]]},"922":{"position":[[157,4],[312,4],[344,4],[380,4],[416,4]]},"947":{"position":[[276,6]]},"967":{"position":[[512,7],[5954,4],[5977,4],[6157,4],[6188,4],[6258,4],[6279,4],[6482,7],[6620,4],[6642,4],[6668,4],[6690,4],[6738,4],[6761,4],[10060,4]]},"969":{"position":[[71,4]]},"981":{"position":[[990,4],[1301,4],[1330,4]]}}}],["passhosthead",{"_index":806,"t":{"937":{"position":[[1570,14],[1590,14]]}}}],["password",{"_index":728,"t":{"927":{"position":[[529,8]]},"933":{"position":[[750,8]]},"967":{"position":[[471,8],[491,8],[1827,8],[8385,8],[8407,9],[8476,8],[8532,8],[8563,9],[8623,9],[8653,8]]}}}],["password/basic_auth_password",{"_index":688,"t":{"922":{"position":[[635,28]]}}}],["patch",{"_index":861,"t":{"945":{"position":[[601,7]]}}}],["path",{"_index":233,"t":{"884":{"position":[[2349,4]]},"918":{"position":[[123,4]]},"925":{"position":[[521,4]]},"933":{"position":[[300,4]]},"935":{"position":[[340,4]]},"937":{"position":[[135,4],[160,5],[291,4],[303,4],[402,5],[534,5],[713,4]]},"953":{"position":[[279,6]]},"967":{"position":[[753,4],[1291,4],[1322,4],[1749,4],[2369,4],[2405,5],[2463,5],[4062,4],[5113,4],[7075,5],[7356,4],[7577,4],[10707,5],[10845,5],[11893,4],[11940,4],[12040,5],[12134,4]]},"969":{"position":[[501,5],[703,4],[852,4],[1256,4]]},"973":{"position":[[854,4],[880,6]]},"977":{"position":[[162,8],[1014,4]]}}}],["path.eg",{"_index":775,"t":{"937":{"position":[[592,8]]}}}],["path/to/cert.key",{"_index":973,"t":{"957":{"position":[[1383,18]]}}}],["path/to/cert.pem",{"_index":971,"t":{"957":{"position":[[1344,18]]}}}],["path/to/existing/config.cfg",{"_index":665,"t":{"920":{"position":[[204,29],[558,29]]}}}],["path/to/new/config.yaml",{"_index":668,"t":{"920":{"position":[[523,25]]}}}],["path/to/sit",{"_index":1273,"t":{"981":{"position":[[2623,15]]}}}],["path_regex",{"_index":1151,"t":{"967":{"position":[[10880,10]]}}}],["pathprefix",{"_index":1334,"t":{"987":{"position":[[490,16],[1284,16]]}}}],["pathprefix(`/no",{"_index":1336,"t":{"987":{"position":[[759,15]]}}}],["pathprefix(`/oauth2",{"_index":1311,"t":{"985":{"position":[[592,23]]},"987":{"position":[[1071,23]]}}}],["pem",{"_index":532,"t":{"902":{"position":[[1023,4],[2383,3],[2528,3]]},"967":{"position":[[4968,3],[5145,3]]}}}],["per",{"_index":638,"t":{"912":{"position":[[166,3]]},"967":{"position":[[352,3]]}}}],["perform",{"_index":409,"t":{"900":{"position":[[397,7],[1573,7]]}}}],["period",{"_index":732,"t":{"929":{"position":[[81,6]]},"937":{"position":[[1463,6]]},"967":{"position":[[2505,6]]}}}],["permiss",{"_index":230,"t":{"884":{"position":[[2239,11]]},"886":{"position":[[538,12],[703,12]]},"908":{"position":[[176,11]]}}}],["pick",{"_index":247,"t":{"886":{"position":[[171,4],[349,4]]},"900":{"position":[[2235,4],[2660,4]]}}}],["pin",{"_index":966,"t":{"957":{"position":[[1227,3]]}}}],["ping",{"_index":918,"t":{"953":{"position":[[318,5]]},"967":{"position":[[7351,4],[7372,4],[7427,7],[7437,4],[10457,4],[10506,4]]},"973":{"position":[[716,5],[743,4],[791,4],[849,4]]}}}],["ping,/path2",{"_index":1082,"t":{"967":{"position":[[2441,14]]}}}],["plain",{"_index":1280,"t":{"981":{"position":[[2894,5]]}}}],["platform",{"_index":465,"t":{"900":{"position":[[2603,8]]},"957":{"position":[[599,8],[790,8]]}}}],["pleas",{"_index":132,"t":{"882":{"position":[[425,6]]},"916":{"position":[[260,6],[835,6]]},"943":{"position":[[99,6],[144,6],[346,6],[434,6]]}}}],["plural",{"_index":1038,"t":{"965":{"position":[[186,6]]},"971":{"position":[[257,6]]}}}],["poc",{"_index":1062,"t":{"967":{"position":[[1353,6]]}}}],["point",{"_index":1330,"t":{"987":{"position":[[119,8]]}}}],["polici",{"_index":462,"t":{"900":{"position":[[2351,8]]}}}],["popul",{"_index":348,"t":{"892":{"position":[[1170,8]]}}}],["port",{"_index":416,"t":{"900":{"position":[[584,5]]},"957":{"position":[[904,4],[974,4]]},"967":{"position":[[13256,5],[13315,4],[13428,5],[13499,5]]}}}],["possibl",{"_index":378,"t":{"894":{"position":[[877,8]]},"929":{"position":[[125,8]]},"941":{"position":[[165,9]]},"943":{"position":[[467,9]]}}}],["post",{"_index":826,"t":{"943":{"position":[[158,4]]}}}],["potenti",{"_index":788,"t":{"937":{"position":[[954,9]]},"943":{"position":[[622,9]]}}}],["powershel",{"_index":1005,"t":{"963":{"position":[[86,10]]}}}],["pr",{"_index":825,"t":{"943":{"position":[[130,2]]},"945":{"position":[[373,3]]}}}],["prebuilt",{"_index":3,"t":{"878":{"position":[[34,8],[195,8],[291,8]]}}}],["preced",{"_index":771,"t":{"937":{"position":[[383,10]]},"961":{"position":[[118,11]]}}}],["prefer",{"_index":686,"t":{"922":{"position":[[582,6]]},"967":{"position":[[6353,9],[6403,6],[6429,6],[6838,9],[9970,9]]}}}],["preferred_usernam",{"_index":136,"t":{"882":{"position":[[484,18]]}}}],["prefix",{"_index":718,"t":{"927":{"position":[[219,6],[233,6],[255,6]]},"933":{"position":[[440,6],[454,6],[476,6]]},"953":{"position":[[136,6],[175,6]]},"967":{"position":[[1209,6],[7550,6],[12417,6],[13141,8]]},"971":{"position":[[75,9]]}}}],["preflight",{"_index":1145,"t":{"967":{"position":[[10538,9]]}}}],["prepend",{"_index":719,"t":{"927":{"position":[[275,9]]},"933":{"position":[[496,9]]}}}],["present",{"_index":843,"t":{"943":{"position":[[705,7]]},"947":{"position":[[237,7]]},"967":{"position":[[6963,8],[11558,9],[11674,9]]}}}],["preserv",{"_index":752,"t":{"931":{"position":[[362,9]]}}}],["preserverequestvalu",{"_index":748,"t":{"931":{"position":[[260,20],[286,20]]}}}],["pretti",{"_index":599,"t":{"904":{"position":[[282,6]]}}}],["prevent",{"_index":876,"t":{"949":{"position":[[460,7]]}}}],["preview",{"_index":448,"t":{"900":{"position":[[1682,7]]}}}],["previou",{"_index":864,"t":{"945":{"position":[[652,8]]}}}],["previous",{"_index":851,"t":{"945":{"position":[[287,10]]}}}],["primari",{"_index":696,"t":{"925":{"position":[[161,7]]}}}],["print",{"_index":666,"t":{"920":{"position":[[304,5]]},"967":{"position":[[12309,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":1008,"t":{"963":{"position":[[136,57]]}}}],["prior",{"_index":360,"t":{"894":{"position":[[119,5]]},"916":{"position":[[245,5]]}}}],["privat",{"_index":310,"t":{"890":{"position":[[1048,7]]},"902":{"position":[[1065,7]]},"943":{"position":[[222,8]]},"945":{"position":[[37,9]]},"967":{"position":[[4953,7],[5125,7],[11948,7]]}}}],["process",{"_index":575,"t":{"902":{"position":[[2587,7]]},"977":{"position":[[933,8]]},"981":{"position":[[2934,9],[2980,9]]}}}],["product",{"_index":158,"t":{"884":{"position":[[370,8]]},"902":{"position":[[294,10]]}}}],["profil",{"_index":336,"t":{"892":{"position":[[624,7]]},"894":{"position":[[284,7]]},"902":{"position":[[1992,7]]},"967":{"position":[[6888,7],[6907,7]]}}}],["project",{"_index":141,"t":{"884":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"890":{"position":[[13,8]]},"894":{"position":[[411,8]]},"896":{"position":[[55,8]]},"900":{"position":[[118,9]]},"941":{"position":[[33,8],[74,7],[204,8]]},"967":{"position":[[3614,8],[3680,8]]}}}],["prompt",{"_index":1046,"t":{"967":{"position":[[85,6],[6933,6],[6952,7],[6981,6]]}}}],["proper",{"_index":1092,"t":{"967":{"position":[[2871,6]]}}}],["properli",{"_index":371,"t":{"894":{"position":[[551,9]]}}}],["properti",{"_index":252,"t":{"886":{"position":[[319,12]]}}}],["propos",{"_index":849,"t":{"945":{"position":[[257,8]]}}}],["protect",{"_index":264,"t":{"886":{"position":[[892,7]]},"900":{"position":[[2189,11],[2279,8]]},"951":{"position":[[774,8]]},"967":{"position":[[9378,9]]}}}],["proto,host,uri",{"_index":1140,"t":{"967":{"position":[[9540,16]]}}}],["protocol",{"_index":527,"t":{"902":{"position":[[842,9]]},"967":{"position":[[13333,8]]},"975":{"position":[[973,8],[1003,9]]},"977":{"position":[[502,13],[828,8],[858,9]]}}}],["provid",{"_index":35,"t":{"878":{"position":[[406,8],[549,8],[599,8],[752,8]]},"880":{"position":[[309,8],[473,9],[740,8]]},"882":{"position":[[54,8],[90,10],[195,9],[360,8],[395,8],[450,9],[559,9]]},"884":{"position":[[2208,8]]},"886":{"position":[[1190,8]]},"890":{"position":[[184,8],[1264,7]]},"892":{"position":[[1150,8]]},"894":{"position":[[10,8]]},"900":{"position":[[84,9],[133,8],[235,8],[297,9],[379,8],[553,8],[956,8],[970,8],[1001,9],[1554,8],[1918,8],[3050,8],[4377,8]]},"902":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"904":{"position":[[14,8],[125,9],[528,8]]},"906":{"position":[[378,9]]},"908":{"position":[[315,9]]},"910":{"position":[[323,8]]},"914":{"position":[[27,9],[61,8],[151,9]]},"918":{"position":[[111,7]]},"955":{"position":[[169,8],[785,8]]},"957":{"position":[[89,9],[460,12],[1898,12]]},"967":{"position":[[1465,9],[1870,8],[7004,8],[7026,8],[7044,8],[7143,9],[7220,8],[7339,9],[11399,8],[11585,9],[13025,9],[13541,8]]},"969":{"position":[[194,9],[353,7],[691,7],[1149,9]]},"987":{"position":[[34,8],[2251,8]]}}}],["provider'",{"_index":589,"t":{"902":{"position":[[3422,10]]},"955":{"position":[[309,10]]},"967":{"position":[[7262,10]]},"981":{"position":[[1699,10]]}}}],["provider.example.com",{"_index":945,"t":{"955":{"position":[[894,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":939,"t":{"955":{"position":[[486,36]]}}}],["provider/sign_out_pag",{"_index":942,"t":{"955":{"position":[[672,25]]}}}],["provider=\"github",{"_index":628,"t":{"910":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":372,"t":{"894":{"position":[[605,17]]}}}],["provider=azur",{"_index":266,"t":{"886":{"position":[[1066,14]]}}}],["provider=bitbucket",{"_index":621,"t":{"908":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":613,"t":{"906":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":327,"t":{"892":{"position":[[342,17]]}}}],["providers.new",{"_index":640,"t":{"914":{"position":[[98,15]]}}}],["proxi",{"_index":22,"t":{"878":{"position":[[245,5],[512,5],[625,5]]},"880":{"position":[[32,5],[729,5]]},"882":{"position":[[179,5]]},"884":{"position":[[2306,5],[2422,6]]},"886":{"position":[[914,6],[1053,5]]},"900":{"position":[[530,5],[789,5],[924,5],[1028,5],[1048,5],[3656,5],[3676,5],[4817,5],[4837,5]]},"902":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"906":{"position":[[206,5],[249,5]]},"908":{"position":[[108,6],[152,5]]},"910":{"position":[[238,6]]},"914":{"position":[[130,5]]},"920":{"position":[[58,5],[163,5],[467,5],[502,5]]},"922":{"position":[[191,5],[875,5]]},"925":{"position":[[204,6],[475,7],[958,5],[1030,5]]},"937":{"position":[[103,7],[1004,5],[1751,8]]},"941":{"position":[[12,5]]},"943":{"position":[[65,5],[339,6]]},"947":{"position":[[109,5]]},"949":{"position":[[97,5],[396,5],[655,6]]},"953":{"position":[[7,5],[87,7],[169,5]]},"957":{"position":[[80,5],[204,5],[263,5],[647,5],[946,8],[965,5],[992,5],[1713,5],[1772,5]]},"959":{"position":[[29,7]]},"961":{"position":[[7,5]]},"967":{"position":[[7544,5],[7592,5],[7658,5],[7698,8],[7884,5],[9414,5],[9457,6],[11048,5],[12632,5],[12754,5],[12923,5]]},"969":{"position":[[7,5],[623,5],[978,5]]},"973":{"position":[[19,5]]},"975":{"position":[[905,5]]},"977":{"position":[[760,5]]},"981":{"position":[[192,8],[1763,5]]},"983":{"position":[[31,5]]},"985":{"position":[[223,8]]},"987":{"position":[[138,5],[208,6],[1235,5]]}}}],["proxiedto",{"_index":807,"t":{"937":{"position":[[1658,9]]}}}],["proxy'",{"_index":71,"t":{"880":{"position":[[96,7]]},"906":{"position":[[296,7]]},"955":{"position":[[91,7]]},"981":{"position":[[86,7]]},"985":{"position":[[93,7]]}}}],["proxy'secret",{"_index":423,"t":{"900":{"position":[[775,13]]}}}],["proxy.cfg",{"_index":1040,"t":{"965":{"position":[[225,9],[326,9]]}}}],["proxy.thi",{"_index":706,"t":{"925":{"position":[[914,10]]}}}],["proxy/oauth2",{"_index":13,"t":{"878":{"position":[[119,12],[232,12]]}}}],["proxy/oauth2/callback",{"_index":610,"t":{"906":{"position":[[163,22]]}}}],["proxy/v7",{"_index":14,"t":{"878":{"position":[[132,8]]}}}],["proxy=tru",{"_index":987,"t":{"957":{"position":[[1923,10]]}}}],["proxy>/oauth2/callback",{"_index":620,"t":{"908":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":276,"t":{"886":{"position":[[1333,17]]}}}],["proxy_connect_timeout",{"_index":982,"t":{"957":{"position":[[1608,21]]}}}],["proxy_pass",{"_index":977,"t":{"957":{"position":[[1469,10]]},"981":{"position":[[319,10],[657,10],[2584,10],[2948,10]]}}}],["proxy_pass_request_bodi",{"_index":1252,"t":{"981":{"position":[[883,23]]}}}],["proxy_read_timeout",{"_index":985,"t":{"957":{"position":[[1656,18]]}}}],["proxy_send_timeout",{"_index":983,"t":{"957":{"position":[[1633,18]]}}}],["proxy_set_head",{"_index":978,"t":{"957":{"position":[[1503,16],[1532,16],[1573,16]]},"981":{"position":[[353,16],[382,16],[423,16],[458,16],[559,16],[691,16],[720,16],[761,16],[847,16],[1218,16],[1249,16],[1428,16]]}}}],["proxyredirecturi",{"_index":421,"t":{"900":{"position":[[702,18]]}}}],["proxyus",{"_index":1135,"t":{"967":{"position":[[7942,9]]}}}],["proxywebsocket",{"_index":808,"t":{"937":{"position":[[1706,15],[1727,15]]}}}],["pubjwk",{"_index":563,"t":{"902":{"position":[[1917,6]]},"967":{"position":[[7714,6]]}}}],["pubkey",{"_index":1134,"t":{"967":{"position":[[7736,6]]}}}],["public",{"_index":309,"t":{"890":{"position":[[1011,6],[1229,6]]},"902":{"position":[[974,6]]}}}],["public_repo",{"_index":316,"t":{"890":{"position":[[1376,11]]}}}],["publicli",{"_index":827,"t":{"943":{"position":[[175,9]]}}}],["push",{"_index":308,"t":{"890":{"position":[[994,4]]},"967":{"position":[[3328,4]]}}}],["put",{"_index":15,"t":{"878":{"position":[[152,3]]}}}],["python",{"_index":1003,"t":{"963":{"position":[[66,6],[107,6]]}}}],["quay.io/oauth2",{"_index":21,"t":{"878":{"position":[[217,14]]}}}],["queri",{"_index":936,"t":{"955":{"position":[[358,5]]},"985":{"position":[[1287,6]]}}}],["quick",{"_index":535,"t":{"902":{"position":[[1080,5]]}}}],["quickli",{"_index":819,"t":{"941":{"position":[[154,7]]}}}],["r_basicprofil",{"_index":386,"t":{"896":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":387,"t":{"896":{"position":[[187,15]]}}}],["rand",{"_index":1019,"t":{"963":{"position":[[296,4]]}}}],["random",{"_index":894,"t":{"951":{"position":[[391,6],[442,6]]}}}],["random_password",{"_index":1032,"t":{"963":{"position":[[663,17]]}}}],["rang",{"_index":1164,"t":{"967":{"position":[[12531,6]]}}}],["raw",{"_index":1267,"t":{"981":{"position":[[2229,3]]}}}],["rc3.org",{"_index":998,"t":{"959":{"position":[[478,8]]}}}],["rd",{"_index":935,"t":{"955":{"position":[[355,2]]}}}],["re",{"_index":884,"t":{"949":{"position":[[799,2]]},"955":{"position":[[200,2]]}}}],["reach",{"_index":1155,"t":{"967":{"position":[[11455,5]]}}}],["read",{"_index":232,"t":{"884":{"position":[[2323,4]]},"890":{"position":[[1207,4]]},"908":{"position":[[240,4],[261,4]]},"959":{"position":[[396,4]]}}}],["read_api",{"_index":369,"t":{"894":{"position":[[445,8]]}}}],["readi",{"_index":862,"t":{"945":{"position":[[613,6]]}}}],["readiness_check",{"_index":1091,"t":{"967":{"position":[[2837,17]]}}}],["real",{"_index":581,"t":{"902":{"position":[[3070,4],[3215,4]]},"957":{"position":[[1551,4]]},"967":{"position":[[7784,4],[7842,4],[7928,4],[7958,4],[9496,4],[12655,4]]},"975":{"position":[[867,4]]},"977":{"position":[[722,4]]},"981":{"position":[[401,4],[739,4]]}}}],["realm>/protocol/openid",{"_index":333,"t":{"892":{"position":[[491,22],[585,22],[681,22],[781,22]]}}}],["reason",{"_index":225,"t":{"884":{"position":[[1998,6]]}}}],["recommend",{"_index":183,"t":{"884":{"position":[[867,11]]},"957":{"position":[[14,11]]},"981":{"position":[[3574,11]]}}}],["redeem",{"_index":321,"t":{"890":{"position":[[1837,6]]},"892":{"position":[[529,6]]},"902":{"position":[[3765,6]]},"904":{"position":[[686,6]]},"910":{"position":[[527,6]]},"967":{"position":[[7968,6],[11323,6]]}}}],["redempt",{"_index":1136,"t":{"967":{"position":[[7992,10]]}}}],["redi",{"_index":98,"t":{"880":{"position":[[552,6]]},"886":{"position":[[1380,5]]},"947":{"position":[[326,5]]},"951":{"position":[[4,5],[57,6],[606,5],[711,5],[873,5],[936,5],[964,5],[1055,5],[1112,5],[1175,5],[1208,5],[1254,5],[1357,5],[1412,5],[1475,5],[1505,5]]},"967":{"position":[[8119,5],[8171,5],[8256,5],[8276,5],[8311,5],[8328,5],[8379,5],[8401,5],[8436,5],[8494,5],[8517,5],[8548,5],[8612,5],[8647,5],[8664,5],[8698,5],[8753,5],[8774,5],[8827,5],[8913,5],[8934,5],[8968,5],[8994,5],[9052,5],[9087,5],[9119,5],[9152,5],[9835,5]]}}}],["redirect",{"_index":86,"t":{"880":{"position":[[276,10]]},"882":{"position":[[123,8]]},"884":{"position":[[699,8]]},"888":{"position":[[95,8]]},"892":{"position":[[76,8]]},"894":{"position":[[322,8],[625,8],[703,8]]},"896":{"position":[[217,8]]},"900":{"position":[[1054,8],[2720,8],[3969,8],[4029,8]]},"902":{"position":[[1379,8],[1619,8],[3610,8]]},"904":{"position":[[448,12]]},"906":{"position":[[315,8],[562,8],[680,8]]},"910":{"position":[[87,8],[267,8]]},"953":{"position":[[586,8]]},"955":{"position":[[22,8],[269,8],[380,8],[550,8],[585,8],[646,9],[873,8],[1006,8]]},"967":{"position":[[2048,9],[2609,8],[8014,8],[8044,8],[9579,8],[12383,11],[13219,8]]},"981":{"position":[[490,8],[591,8]]},"987":{"position":[[0,8],[371,9],[560,8],[571,9],[780,11],[848,8],[1893,9],[2058,9]]}}}],["redis://host[:port",{"_index":1137,"t":{"967":{"position":[[8207,21],[8356,20],[8864,21]]}}}],["reduc",{"_index":1203,"t":{"973":{"position":[[804,8]]}}}],["refer",{"_index":528,"t":{"902":{"position":[[930,5],[1284,8]]},"904":{"position":[[367,5]]},"916":{"position":[[552,9],[853,9]]},"918":{"position":[[94,9]]},"935":{"position":[[52,10]]}}}],["refresh",{"_index":184,"t":{"884":{"position":[[882,7],[936,7],[2540,9]]},"900":{"position":[[2830,7],[4138,7]]},"949":{"position":[[734,10]]},"967":{"position":[[1373,7],[1390,7],[13052,8]]},"981":{"position":[[1494,8]]}}}],["refresh/access/id",{"_index":902,"t":{"951":{"position":[[787,17]]}}}],["regex",{"_index":69,"t":{"880":{"position":[[70,6]]},"967":{"position":[[10617,5]]}}}],["regist",{"_index":47,"t":{"878":{"position":[[562,8]]},"882":{"position":[[17,8]]},"902":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":137,"t":{"884":{"position":[[16,12]]},"886":{"position":[[114,14],[156,14]]},"896":{"position":[[18,12]]}}}],["regular",{"_index":852,"t":{"945":{"position":[[365,7]]}}}],["releas",{"_index":6,"t":{"878":{"position":[[59,7],[424,7]]},"925":{"position":[[298,8]]},"945":{"position":[[493,8],[661,9]]}}}],["reload",{"_index":1343,"t":{"987":{"position":[[2335,6]]}}}],["remain",{"_index":389,"t":{"896":{"position":[[300,9]]}}}],["remot",{"_index":1169,"t":{"967":{"position":[[12786,6]]}}}],["remote_addr",{"_index":980,"t":{"957":{"position":[[1559,13]]},"981":{"position":[[409,13],[747,13]]}}}],["remote_address",{"_index":1207,"t":{"975":{"position":[[181,16]]},"977":{"position":[[62,16]]}}}],["remov",{"_index":646,"t":{"916":{"position":[[211,8]]},"918":{"position":[[255,7]]},"920":{"position":[[368,6],[429,7]]},"922":{"position":[[831,6]]},"955":{"position":[[76,7]]}}}],["renam",{"_index":647,"t":{"916":{"position":[[220,7]]}}}],["replac",{"_index":655,"t":{"916":{"position":[[479,7]]},"965":{"position":[[65,9]]},"971":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":1026,"t":{"963":{"position":[[550,19]]}}}],["repli",{"_index":261,"t":{"886":{"position":[[779,6]]}}}],["repo",{"_index":311,"t":{"890":{"position":[[1076,8]]},"902":{"position":[[2497,4]]},"967":{"position":[[3148,4]]}}}],["report",{"_index":1228,"t":{"975":{"position":[[1163,8]]},"977":{"position":[[1301,8]]}}}],["repositori",{"_index":294,"t":{"890":{"position":[[329,11],[953,11],[1018,10],[1056,11],[1126,10],[1236,10],[1320,11],[1445,10]]},"908":{"position":[[245,12],[696,10]]},"967":{"position":[[3201,10],[3292,10],[3347,11]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":605,"t":{"904":{"position":[[714,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":604,"t":{"904":{"position":[[647,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":606,"t":{"904":{"position":[[786,39]]}}}],["url]/stat",{"_index":1192,"t":{"969":{"position":[[984,13]]}}}],["url]/var/www/stat",{"_index":1188,"t":{"969":{"position":[[629,21]]}}}],["us",{"_index":18,"t":{"878":{"position":[[185,5],[631,5]]},"880":{"position":[[761,6]]},"882":{"position":[[385,5]]},"886":{"position":[[230,3],[1169,5]]},"890":{"position":[[1426,3],[1686,5]]},"892":{"position":[[1029,4],[1334,5]]},"894":{"position":[[160,5],[1042,5]]},"898":{"position":[[175,4]]},"900":{"position":[[194,3],[263,4],[566,5],[1484,5],[1617,5],[4707,3]]},"902":{"position":[[2172,3],[3211,3]]},"904":{"position":[[105,5],[276,5]]},"906":{"position":[[370,3],[670,3]]},"908":{"position":[[43,3],[307,3],[555,3],[707,3]]},"912":{"position":[[29,3],[105,3],[209,3]]},"914":{"position":[[139,3]]},"916":{"position":[[293,3],[659,5]]},"918":{"position":[[3,3],[141,5],[182,5]]},"920":{"position":[[64,5],[473,5]]},"922":{"position":[[100,5],[726,3]]},"925":{"position":[[379,4],[611,4],[846,4],[938,4],[948,5]]},"927":{"position":[[517,4]]},"931":{"position":[[183,4]]},"933":{"position":[[738,4]]},"937":{"position":[[311,4],[1393,4]]},"943":{"position":[[550,4]]},"945":{"position":[[3,3],[361,3]]},"947":{"position":[[115,4]]},"949":{"position":[[78,4],[287,5]]},"951":{"position":[[863,5],[1102,3],[1118,3],[1363,3],[1481,3],[1511,3]]},"953":{"position":[[375,3],[521,4],[647,4],[777,4],[926,3]]},"955":{"position":[[345,5]]},"957":{"position":[[732,5],[815,3],[1184,3]]},"959":{"position":[[487,5]]},"963":{"position":[[35,3]]},"965":{"position":[[286,4]]},"967":{"position":[[927,4],[1196,3],[1990,3],[2669,3],[2749,3],[3273,3],[4491,5],[4614,3],[4979,4],[5156,4],[6055,4],[6439,3],[6525,3],[6593,4],[7115,4],[7204,4],[7301,4],[7398,4],[7485,4],[7820,4],[8229,4],[8262,3],[8573,4],[8641,3],[8726,4],[8759,3],[8886,4],[8919,3],[8940,3],[9027,3],[9058,3],[9186,3],[9571,4],[10006,7],[10048,4],[10216,7],[10324,7],[11573,5],[11689,5],[12936,3],[13095,5],[13505,3]]},"969":{"position":[[830,4],[1214,4]]},"971":{"position":[[299,6]]},"973":{"position":[[111,5],[735,5]]},"975":{"position":[[857,3]]},"977":{"position":[[712,3]]},"981":{"position":[[1651,5],[2677,3],[2719,3],[3589,3]]},"987":{"position":[[55,3],[329,3],[2298,3]]}}}],["usag",{"_index":694,"t":{"925":{"position":[[62,5]]},"951":{"position":[[851,6]]}}}],["user",{"_index":83,"t":{"880":{"position":[[248,4],[643,4]]},"884":{"position":[[393,6],[2171,4],[2439,4]]},"886":{"position":[[410,5],[661,6]]},"890":{"position":[[436,4],[463,5],[971,5],[1196,5],[1286,4],[1481,4],[1619,8]]},"896":{"position":[[119,4]]},"900":{"position":[[2949,5]]},"904":{"position":[[58,5]]},"908":{"position":[[659,5]]},"922":{"position":[[385,4]]},"925":{"position":[[92,5],[421,4]]},"947":{"position":[[138,4]]},"949":{"position":[[790,5]]},"951":{"position":[[184,4]]},"953":{"position":[[258,4]]},"955":{"position":[[12,4],[121,4],[282,4],[393,4]]},"967":{"position":[[2878,4],[3368,4],[3396,5],[5931,4],[6313,5],[6419,4],[6647,4],[6743,4],[6778,5],[7442,4],[7462,4],[7530,4],[9901,5]]},"973":{"position":[[748,4]]},"975":{"position":[[94,4],[341,4],[410,4],[1149,4]]},"977":{"position":[[1287,4]]},"981":{"position":[[1013,4],[1115,5],[1237,4],[1242,6]]}}}],["user'",{"_index":704,"t":{"925":{"position":[[745,6],[1133,6]]},"947":{"position":[[17,6]]},"953":{"position":[[792,6]]},"967":{"position":[[5853,6]]}}}],["user/prefer_email_to_us",{"_index":687,"t":{"922":{"position":[[598,25]]}}}],["user/settings/appl",{"_index":625,"t":{"910":{"position":[[52,28]]}}}],["user@domain.com",{"_index":1208,"t":{"975":{"position":[[200,17]]},"977":{"position":[[81,17]]}}}],["user_ag",{"_index":1233,"t":{"977":{"position":[[180,14]]}}}],["userag",{"_index":1227,"t":{"975":{"position":[[1128,9]]},"977":{"position":[[516,14],[1266,9]]}}}],["userinfo",{"_index":351,"t":{"892":{"position":[[1270,8]]}}}],["usernam",{"_index":317,"t":{"890":{"position":[[1506,8],[1644,9]]},"927":{"position":[[475,8]]},"933":{"position":[[696,8]]},"967":{"position":[[1816,8],[3414,8],[6363,8],[6468,8],[6529,8],[6848,8],[9980,8]]},"975":{"position":[[63,8],[676,13],[1198,8],[1239,8]]},"977":{"position":[[412,13],[1336,8],[1377,8]]}}}],["username@email.com",{"_index":1229,"t":{"975":{"position":[[1207,18]]},"977":{"position":[[1345,18]]}}}],["usptream",{"_index":792,"t":{"937":{"position":[[1018,8]]}}}],["utc",{"_index":1110,"t":{"967":{"position":[[4674,3]]}}}],["v2",{"_index":1298,"t":{"985":{"position":[[12,2]]},"987":{"position":[[93,2]]}}}],["v3.0.0",{"_index":39,"t":{"878":{"position":[[454,7]]}}}],["v7.0.1",{"_index":7,"t":{"878":{"position":[[70,7]]}}}],["valid",{"_index":28,"t":{"878":{"position":[[316,9]]},"882":{"position":[[189,5]]},"884":{"position":[[958,9]]},"888":{"position":[[83,5]]},"890":{"position":[[1910,8]]},"892":{"position":[[70,5],[723,8]]},"904":{"position":[[756,8],[849,8]]},"910":{"position":[[595,8]]},"929":{"position":[[254,5]]},"945":{"position":[[231,8]]},"959":{"position":[[384,11]]},"963":{"position":[[572,5]]},"967":{"position":[[11531,10],[11647,10],[12242,8],[12275,10],[13213,5]]}}}],["valu",{"_index":131,"t":{"882":{"position":[[418,6]]},"886":{"position":[[1011,5]]},"892":{"position":[[1433,5]]},"925":{"position":[[708,6],[783,6],[1096,6],[1171,6]]},"927":{"position":[[62,5],[191,5],[292,5],[433,5],[538,6]]},"931":{"position":[[330,6],[533,6],[554,6],[582,6]]},"933":{"position":[[60,5],[110,5],[139,5],[152,5],[190,6],[337,6],[412,5],[513,5],[654,5],[759,6]]},"935":{"position":[[84,6],[179,5],[192,5],[230,6],[377,6]]},"937":{"position":[[254,5]]},"951":{"position":[[203,5]]},"967":{"position":[[38,6],[3783,5]]},"969":{"position":[[795,5]]},"975":{"position":[[947,5]]},"977":{"position":[[802,5]]}}}],["values.nam",{"_index":747,"t":{"931":{"position":[[204,12]]}}}],["var/www/stat",{"_index":1191,"t":{"969":{"position":[[933,16]]}}}],["variabl",{"_index":57,"t":{"878":{"position":[[687,9]]},"902":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"904":{"position":[[192,9]]},"922":{"position":[[61,9]]},"933":{"position":[[255,9]]},"935":{"position":[[295,9]]},"953":{"position":[[189,9]]},"961":{"position":[[69,9],[183,9],[209,9]]},"971":{"position":[[63,8],[238,8]]},"973":{"position":[[613,10]]},"975":{"position":[[744,9],[772,8]]},"977":{"position":[[596,9],[627,8]]},"979":{"position":[[500,9],[532,8]]},"981":{"position":[[2202,9],[2838,9],[3826,8]]}}}],["verif",{"_index":786,"t":{"937":{"position":[[878,12]]},"967":{"position":[[5470,12],[5744,13]]}}}],["verifi",{"_index":31,"t":{"878":{"position":[[353,9]]},"890":{"position":[[1435,9]]},"967":{"position":[[3282,9],[5427,8],[11118,8],[11514,6],[11630,6]]}}}],["verify/ssl_upstream_insecure_skip_verifi",{"_index":676,"t":{"922":{"position":[[252,40]]}}}],["version",{"_index":38,"t":{"878":{"position":[[446,7]]},"894":{"position":[[50,7],[111,7]]},"943":{"position":[[679,8]]},"967":{"position":[[12297,7],[12315,7]]}}}],["via",{"_index":586,"t":{"902":{"position":[[3308,3]]},"904":{"position":[[161,3]]},"922":{"position":[[744,3],[757,3]]},"951":{"position":[[717,3],[958,3]]},"957":{"position":[[1247,3]]},"961":{"position":[[31,3]]},"967":{"position":[[338,3],[6013,3],[6218,3],[9093,3]]},"975":{"position":[[1365,3]]},"981":{"position":[[71,3],[1007,3],[2944,3],[3755,3]]},"985":{"position":[[78,3]]}}}],["visit",{"_index":440,"t":{"900":{"position":[[1351,8]]}}}],["volum",{"_index":1204,"t":{"973":{"position":[[817,7]]}}}],["vulner",{"_index":823,"t":{"943":{"position":[[37,13],[606,13]]},"945":{"position":[[75,16],[308,15]]}}}],["want",{"_index":257,"t":{"886":{"position":[[396,4],[884,4]]},"900":{"position":[[1739,4]]},"902":{"position":[[580,4]]},"951":{"position":[[1094,4]]},"955":{"position":[[865,4]]},"969":{"position":[[677,5]]}}}],["warn",{"_index":650,"t":{"916":{"position":[[251,8]]},"967":{"position":[[12802,8]]}}}],["way",{"_index":290,"t":{"890":{"position":[[217,4]]},"902":{"position":[[1086,3]]}}}],["web",{"_index":167,"t":{"884":{"position":[[529,4]]},"900":{"position":[[1259,3],[2591,3],[3802,3],[3921,3]]},"959":{"position":[[423,3],[514,3]]}}}],["webapp",{"_index":248,"t":{"886":{"position":[[194,7]]}}}],["websocket",{"_index":809,"t":{"937":{"position":[[1763,10]]},"967":{"position":[[7664,10],[7688,9]]}}}],["websockets/proxy_websocket",{"_index":674,"t":{"922":{"position":[[197,27]]}}}],["well",{"_index":904,"t":{"951":{"position":[[924,4],[1145,4],[1308,5]]},"967":{"position":[[2290,5],[2328,5],[2923,4]]}}}],["whenstream",{"_index":804,"t":{"937":{"position":[[1507,13]]}}}],["whether",{"_index":362,"t":{"894":{"position":[[144,7]]},"904":{"position":[[241,7]]},"931":{"position":[[318,7]]},"937":{"position":[[1616,7]]},"967":{"position":[[9473,7]]}}}],["whitelist",{"_index":946,"t":{"955":{"position":[[954,9]]},"967":{"position":[[12332,9],[13105,9],[13448,11]]}}}],["whole",{"_index":1301,"t":{"985":{"position":[[236,5]]}}}],["wide_authority_to_your_service_account",{"_index":207,"t":{"884":{"position":[[1438,38]]}}}],["window",{"_index":259,"t":{"886":{"position":[[577,8]]}}}],["wish",{"_index":451,"t":{"900":{"position":[[1839,4],[2271,4],[2364,4],[2969,4]]},"906":{"position":[[95,5]]}}}],["within",{"_index":303,"t":{"890":{"position":[[703,6]]},"900":{"position":[[4737,6]]},"916":{"position":[[131,6]]},"925":{"position":[[230,6]]},"927":{"position":[[81,6]]},"931":{"position":[[234,6]]},"935":{"position":[[107,6]]},"943":{"position":[[51,6]]},"949":{"position":[[568,6]]}}}],["without",{"_index":649,"t":{"916":{"position":[[237,7]]},"925":{"position":[[307,7]]},"981":{"position":[[184,7]]},"985":{"position":[[215,7]]},"987":{"position":[[43,7]]}}}],["wo",{"_index":1338,"t":{"987":{"position":[[845,2],[2055,2]]}}}],["work",{"_index":359,"t":{"894":{"position":[[102,4],[546,4]]},"900":{"position":[[1236,7],[1940,5],[2437,4]]},"902":{"position":[[210,4]]},"941":{"position":[[61,4]]},"967":{"position":[[2918,4]]},"981":{"position":[[1528,4]]}}}],["write",{"_index":315,"t":{"890":{"position":[[1300,5]]}}}],["x",{"_index":349,"t":{"892":{"position":[[1183,1]]},"955":{"position":[[570,1]]},"957":{"position":[[1549,1],[1590,1]]},"967":{"position":[[6017,1],[6098,1],[6301,1],[6319,1],[6341,1],[6766,1],[6784,1],[6804,1],[6826,1],[7909,1],[7926,1],[7940,1],[7956,1],[9494,1],[9528,1],[9886,1],[9907,1],[9930,1],[9955,1],[10079,1],[10951,1]]},"975":{"position":[[865,1]]},"977":{"position":[[720,1]]},"981":{"position":[[399,1],[440,1],[475,1],[576,1],[737,1],[778,1],[1011,1],[1022,1],[1235,1],[1266,1],[1445,1]]},"987":{"position":[[336,1],[2000,1],[2176,1]]}}}],["x.y.z.linux",{"_index":44,"t":{"878":{"position":[[518,11]]}}}],["x509",{"_index":538,"t":{"902":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":1126,"t":{"967":{"position":[[6071,12],[9864,12]]},"981":{"position":[[1080,12]]}}}],["xauthrequest/set_xauthrequest",{"_index":684,"t":{"922":{"position":[[502,29]]}}}],["xxx\"client_secret",{"_index":504,"t":{"900":{"position":[[4580,18]]}}}],["xxxxx\"client_secret",{"_index":475,"t":{"900":{"position":[[3263,20]]}}}],["yaml",{"_index":654,"t":{"916":{"position":[[464,4]]},"918":{"position":[[47,4]]},"920":{"position":[[295,4]]},"985":{"position":[[288,6]]}}}],["you'd",{"_index":314,"t":{"890":{"position":[[1166,5]]}}}],["yourcompany.com",{"_index":1051,"t":{"967":{"position":[[853,18]]}}}],["yyy\"pass_access_token",{"_index":505,"t":{"900":{"position":[[4601,22]]}}}],["yyyyy\"pass_access_token",{"_index":476,"t":{"900":{"position":[[3286,24]]}}}],["zzz\"cookie_secur",{"_index":506,"t":{"900":{"position":[[4646,18]]}}}],["zzzzz\"skip_provider_button",{"_index":478,"t":{"900":{"position":[[3333,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file +[{"documents":[{"i":877,"t":"Behaviour","u":"/oauth2-proxy/docs/7.0.x/behaviour","b":["Docs"]},{"i":879,"t":"Installation","u":"/oauth2-proxy/docs/7.0.x/","b":["Docs"]},{"i":881,"t":"Security","u":"/oauth2-proxy/docs/7.0.x/community/security","b":["Docs","Community"]},{"i":887,"t":"Session Storage","u":"/oauth2-proxy/docs/7.0.x/configuration/session_storage","b":["Docs","Configuration"]},{"i":893,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","b":["Docs","Configuration"]},{"i":927,"t":"TLS Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/tls","b":["Docs","Configuration"]},{"i":929,"t":"Endpoints","u":"/oauth2-proxy/docs/7.0.x/features/endpoints","b":["Docs","Features"]},{"i":933,"t":"Overview","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","b":["Docs","Configuration"]},{"i":961,"t":"Alpha Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","b":["Docs","Configuration"]},{"i":986,"t":"Request Signatures","u":"/oauth2-proxy/docs/7.0.x/features/request_signatures","b":["Docs","Features"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/877",[0,2.353]],["t/879",[1,2.353]],["t/881",[2,2.353]],["t/887",[3,1.808,4,1.808]],["t/893",[5,1.467,6,1.467,7,0.843]],["t/927",[7,1.039,8,1.808]],["t/929",[9,2.353]],["t/933",[10,2.353]],["t/961",[7,1.039,11,1.808]],["t/986",[12,1.808,13,1.808]]],"invertedIndex":[["alpha",{"_index":11,"t":{"961":{"position":[[0,5]]}}}],["behaviour",{"_index":0,"t":{"877":{"position":[[0,9]]}}}],["configur",{"_index":7,"t":{"893":{"position":[[15,13]]},"927":{"position":[[4,13]]},"961":{"position":[[6,13]]}}}],["endpoint",{"_index":9,"t":{"929":{"position":[[0,9]]}}}],["instal",{"_index":1,"t":{"879":{"position":[[0,12]]}}}],["oauth",{"_index":5,"t":{"893":{"position":[[0,5]]}}}],["overview",{"_index":10,"t":{"933":{"position":[[0,8]]}}}],["provid",{"_index":6,"t":{"893":{"position":[[6,8]]}}}],["request",{"_index":12,"t":{"986":{"position":[[0,7]]}}}],["secur",{"_index":2,"t":{"881":{"position":[[0,8]]}}}],["session",{"_index":3,"t":{"887":{"position":[[0,7]]}}}],["signatur",{"_index":13,"t":{"986":{"position":[[8,10]]}}}],["storag",{"_index":4,"t":{"887":{"position":[[8,7]]}}}],["tl",{"_index":8,"t":{"927":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":883,"t":"Security Disclosures","u":"/oauth2-proxy/docs/7.0.x/community/security","h":"#security-disclosures","p":881},{"i":885,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.0.x/community/security","h":"#how-will-we-respond-to-disclosures","p":881},{"i":889,"t":"Cookie Storage","u":"/oauth2-proxy/docs/7.0.x/configuration/session_storage","h":"#cookie-storage","p":887},{"i":891,"t":"Redis Storage","u":"/oauth2-proxy/docs/7.0.x/configuration/session_storage","h":"#redis-storage","p":887},{"i":895,"t":"Google Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#google-auth-provider","p":893},{"i":897,"t":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#azure-auth-provider","p":893},{"i":899,"t":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":893},{"i":901,"t":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#github-auth-provider","p":893},{"i":903,"t":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":893},{"i":905,"t":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":893},{"i":907,"t":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":893},{"i":909,"t":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":893},{"i":911,"t":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#openid-connect-provider","p":893},{"i":913,"t":"login.gov Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#logingov-provider","p":893},{"i":915,"t":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#nextcloud-provider","p":893},{"i":917,"t":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":893},{"i":919,"t":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":893},{"i":921,"t":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":893},{"i":923,"t":"Email Authentication","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#email-authentication","p":893},{"i":925,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":893},{"i":931,"t":"Sign out","u":"/oauth2-proxy/docs/7.0.x/features/endpoints","h":"#sign-out","p":929},{"i":935,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#generating-a-cookie-secret","p":933},{"i":937,"t":"Config File","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#config-file","p":933},{"i":939,"t":"Command Line Options","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#command-line-options","p":933},{"i":941,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#upstreams-configuration","p":933},{"i":943,"t":"Environment variables","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#environment-variables","p":933},{"i":945,"t":"Logging Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#logging-configuration","p":933},{"i":947,"t":"Auth Log Format","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#auth-log-format","p":933},{"i":949,"t":"Request Log Format","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#request-log-format","p":933},{"i":951,"t":"Standard Log Format","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#standard-log-format","p":933},{"i":953,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":933},{"i":955,"t":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":933},{"i":957,"t":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":933},{"i":959,"t":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":933},{"i":963,"t":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#using-alpha-configuration","p":961},{"i":965,"t":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":961},{"i":967,"t":"Removed options","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#removed-options","p":961},{"i":969,"t":"Configuration Reference","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#configuration-reference","p":961},{"i":970,"t":"AlphaOptions","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#alphaoptions","p":961},{"i":972,"t":"ClaimSource","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#claimsource","p":961},{"i":974,"t":"Duration","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#duration","p":961},{"i":976,"t":"Header","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#header","p":961},{"i":978,"t":"HeaderValue","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#headervalue","p":961},{"i":980,"t":"SecretSource","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#secretsource","p":961},{"i":982,"t":"Upstream","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#upstream","p":961},{"i":984,"t":"Upstreams","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#upstreams","p":961}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/883",[0,3.775,1,3.215]],["t/885",[1,3.215,2,3.775]],["t/889",[3,3.215,4,3.215]],["t/891",[4,3.215,5,3.775]],["t/895",[6,3.209,7,1.312,8,1.033]],["t/897",[7,1.312,8,1.033,9,2.733]],["t/899",[7,1.312,8,1.033,10,3.209]],["t/901",[7,1.312,8,1.033,11,3.209]],["t/903",[7,1.312,8,1.033,12,3.209]],["t/905",[7,1.312,8,1.033,13,3.209]],["t/907",[7,1.312,8,1.033,14,3.209]],["t/909",[8,0.899,9,2.377,15,2.791,16,2.377]],["t/911",[8,1.033,17,3.209,18,3.209]],["t/913",[8,1.216,19,3.775]],["t/915",[8,1.216,20,3.775]],["t/917",[7,1.312,8,1.033,21,3.209]],["t/919",[7,1.312,8,1.033,22,3.209]],["t/921",[7,1.312,8,1.033,23,3.209]],["t/923",[24,3.775,25,3.775]],["t/925",[8,1.033,16,2.733,26,2.733]],["t/931",[27,3.775,28,3.775]],["t/935",[3,2.733,29,3.209,30,3.209]],["t/937",[31,3.775,32,3.775]],["t/939",[33,3.209,34,3.209,35,2.733]],["t/941",[36,2.571,37,1.874]],["t/943",[38,3.775,39,3.775]],["t/945",[37,1.874,40,2.571]],["t/947",[7,1.312,40,2.186,41,2.42]],["t/949",[40,2.186,41,2.42,42,3.209]],["t/951",[40,2.186,41,2.42,43,3.209]],["t/953",[37,1.226,44,1.862,45,2.469,46,2.469,47,2.469]],["t/955",[37,1.099,44,1.669,48,2.214,49,2.214,50,1.669,51,1.886]],["t/957",[50,2.104,51,2.377,52,2.791,53,2.791]],["t/959",[36,1.901,37,1.386,50,2.104,54,2.791]],["t/963",[37,1.593,44,2.42,55,3.209]],["t/965",[26,2.377,37,1.386,56,2.791,57,2.791]],["t/967",[35,3.215,58,3.775]],["t/969",[37,1.874,59,3.775]],["t/970",[60,4.582]],["t/972",[61,4.582]],["t/974",[62,4.582]],["t/976",[63,4.582]],["t/978",[64,4.582]],["t/980",[65,4.582]],["t/982",[36,3.121]],["t/984",[36,3.121]]],"invertedIndex":[["401",{"_index":52,"t":{"957":{"position":[[17,3]]}}}],["ad",{"_index":16,"t":{"909":{"position":[[16,2]]},"925":{"position":[[0,6]]}}}],["alpha",{"_index":55,"t":{"963":{"position":[[6,5]]}}}],["alphaopt",{"_index":60,"t":{"970":{"position":[[0,12]]}}}],["auth",{"_index":7,"t":{"895":{"position":[[7,4]]},"897":{"position":[[6,4]]},"899":{"position":[[9,4]]},"901":{"position":[[7,4]]},"903":{"position":[[9,4]]},"905":{"position":[[7,4]]},"907":{"position":[[9,4]]},"917":{"position":[[13,4]]},"919":{"position":[[10,4]]},"921":{"position":[[6,4]]},"947":{"position":[[0,4]]}}}],["auth_request",{"_index":46,"t":{"953":{"position":[[35,12]]}}}],["authent",{"_index":25,"t":{"923":{"position":[[6,14]]}}}],["azur",{"_index":9,"t":{"897":{"position":[[0,5]]},"909":{"position":[[10,5]]}}}],["bitbucket",{"_index":22,"t":{"919":{"position":[[0,9]]}}}],["claimsourc",{"_index":61,"t":{"972":{"position":[[0,11]]}}}],["command",{"_index":33,"t":{"939":{"position":[[0,7]]}}}],["config",{"_index":31,"t":{"937":{"position":[[0,6]]}}}],["configur",{"_index":37,"t":{"941":{"position":[[10,13]]},"945":{"position":[[8,13]]},"953":{"position":[[0,11]]},"955":{"position":[[0,11]]},"959":{"position":[[34,13]]},"963":{"position":[[12,13]]},"965":{"position":[[11,13]]},"969":{"position":[[0,13]]}}}],["connect",{"_index":18,"t":{"911":{"position":[[7,7]]}}}],["convert",{"_index":56,"t":{"965":{"position":[[0,10]]}}}],["cooki",{"_index":3,"t":{"889":{"position":[[0,6]]},"935":{"position":[[13,6]]}}}],["digitalocean",{"_index":21,"t":{"917":{"position":[[0,12]]}}}],["direct",{"_index":47,"t":{"953":{"position":[[48,9]]}}}],["disclosur",{"_index":1,"t":{"883":{"position":[[9,11]]},"885":{"position":[[23,12]]}}}],["durat",{"_index":62,"t":{"974":{"position":[[0,8]]}}}],["email",{"_index":24,"t":{"923":{"position":[[0,5]]}}}],["environ",{"_index":38,"t":{"943":{"position":[[0,11]]}}}],["error",{"_index":53,"t":{"957":{"position":[[21,6]]}}}],["facebook",{"_index":10,"t":{"899":{"position":[[0,8]]}}}],["file",{"_index":32,"t":{"937":{"position":[[7,4]]}}}],["format",{"_index":41,"t":{"947":{"position":[[9,6]]},"949":{"position":[[12,6]]},"951":{"position":[[13,6]]}}}],["forwardauth",{"_index":50,"t":{"955":{"position":[[42,11]]},"957":{"position":[[0,11]]},"959":{"position":[[0,11]]}}}],["gener",{"_index":29,"t":{"935":{"position":[[0,10]]}}}],["gitea",{"_index":23,"t":{"921":{"position":[[0,5]]}}}],["github",{"_index":11,"t":{"901":{"position":[[0,6]]}}}],["gitlab",{"_index":13,"t":{"905":{"position":[[0,6]]}}}],["googl",{"_index":6,"t":{"895":{"position":[[0,6]]}}}],["header",{"_index":63,"t":{"976":{"position":[[0,6]]}}}],["headervalu",{"_index":64,"t":{"978":{"position":[[0,11]]}}}],["keycloak",{"_index":12,"t":{"903":{"position":[[0,8]]}}}],["line",{"_index":34,"t":{"939":{"position":[[8,4]]}}}],["linkedin",{"_index":14,"t":{"907":{"position":[[0,8]]}}}],["log",{"_index":40,"t":{"945":{"position":[[0,7]]},"947":{"position":[[5,3]]},"949":{"position":[[8,3]]},"951":{"position":[[9,3]]}}}],["login.gov",{"_index":19,"t":{"913":{"position":[[0,9]]}}}],["microsoft",{"_index":15,"t":{"909":{"position":[[0,9]]}}}],["middlewar",{"_index":51,"t":{"955":{"position":[[54,10]]},"957":{"position":[[28,10]]}}}],["new",{"_index":26,"t":{"925":{"position":[[9,3]]},"965":{"position":[[32,3]]}}}],["nextcloud",{"_index":20,"t":{"915":{"position":[[0,9]]}}}],["nginx",{"_index":45,"t":{"953":{"position":[[29,5]]}}}],["openid",{"_index":17,"t":{"911":{"position":[[0,6]]}}}],["option",{"_index":35,"t":{"939":{"position":[[13,7]]},"967":{"position":[[8,7]]}}}],["out",{"_index":28,"t":{"931":{"position":[[5,3]]}}}],["provid",{"_index":8,"t":{"895":{"position":[[12,8]]},"897":{"position":[[11,8]]},"899":{"position":[[14,8]]},"901":{"position":[[12,8]]},"903":{"position":[[14,8]]},"905":{"position":[[12,8]]},"907":{"position":[[14,8]]},"909":{"position":[[19,8]]},"911":{"position":[[15,8]]},"913":{"position":[[10,8]]},"915":{"position":[[10,8]]},"917":{"position":[[18,8]]},"919":{"position":[[15,8]]},"921":{"position":[[11,8]]},"925":{"position":[[13,8]]}}}],["redi",{"_index":5,"t":{"891":{"position":[[0,5]]}}}],["refer",{"_index":59,"t":{"969":{"position":[[14,9]]}}}],["remov",{"_index":58,"t":{"967":{"position":[[0,7]]}}}],["request",{"_index":42,"t":{"949":{"position":[[0,7]]}}}],["respond",{"_index":2,"t":{"885":{"position":[[12,7]]}}}],["secret",{"_index":30,"t":{"935":{"position":[[20,6]]}}}],["secretsourc",{"_index":65,"t":{"980":{"position":[[0,12]]}}}],["secur",{"_index":0,"t":{"883":{"position":[[0,8]]}}}],["sign",{"_index":27,"t":{"931":{"position":[[0,4]]}}}],["standard",{"_index":43,"t":{"951":{"position":[[0,8]]}}}],["static",{"_index":54,"t":{"959":{"position":[[17,6]]}}}],["storag",{"_index":4,"t":{"889":{"position":[[7,7]]},"891":{"position":[[6,7]]}}}],["structur",{"_index":57,"t":{"965":{"position":[[36,9]]}}}],["traefik",{"_index":48,"t":{"955":{"position":[[29,7]]}}}],["upstream",{"_index":36,"t":{"941":{"position":[[0,9]]},"959":{"position":[[24,9]]},"982":{"position":[[0,8]]},"984":{"position":[[0,9]]}}}],["us",{"_index":44,"t":{"953":{"position":[[16,3]]},"955":{"position":[[16,3]]},"963":{"position":[[0,5]]}}}],["v2",{"_index":49,"t":{"955":{"position":[[37,4]]}}}],["variabl",{"_index":39,"t":{"943":{"position":[[12,9]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":878,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/7.0.x/behaviour","h":"","p":877},{"i":880,"t":"Choose how to deploy: a. Download Prebuilt Binary (current release is v7.0.1) b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. $ sha256sum -c sha256sum.txt 2>&1 | grep OKoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/7.0.x/","h":"","p":879},{"i":882,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/7.0.x/community/security","h":"","p":881},{"i":884,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/7.0.x/community/security","h":"#security-disclosures","p":881},{"i":886,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.0.x/community/security","h":"#how-will-we-respond-to-disclosures","p":881},{"i":888,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/7.0.x/configuration/session_storage","h":"","p":887},{"i":890,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/7.0.x/configuration/session_storage","h":"#cookie-storage","p":887},{"i":892,"t":"The Redis Storage backend stores sessions, encrypted, in redis. Instead sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128 bit random number, hex-encoded The secret is a 128 bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.","s":"Redis Storage","u":"/oauth2-proxy/docs/7.0.x/configuration/session_storage","h":"#redis-storage","p":887},{"i":894,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure Facebook GitHub Keycloak GitLab LinkedIn Microsoft Azure AD OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket Gitea The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"","p":893},{"i":896,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"API Manager\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account: https://developers.google.com/identity/protocols/OAuth2ServiceAccount and make sure to download the json file. Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ).","s":"Google Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#google-auth-provider","p":893},{"i":898,"t":"Add an application: go to https://portal.azure.com, choose \"Azure Active Directory\" in the left menu, select \"App registrations\" and then click on \"New app registration\". Pick a name and choose \"Webapp / API\" as application type. Use https://internal.yourcompany.com as Sign-on URL. Click \"Create\". On the \"Settings\" / \"Properties\" page of the app, pick a logo and select \"Multi-tenanted\" if you want to allow users from multiple organizations to access your app. Note down the application ID. Click \"Save\". On the \"Settings\" / \"Required Permissions\" page of the app, click on \"Windows Azure Active Directory\" and then on \"Access the directory as the signed in user\". Hit \"Save\" and then then on \"Grant permissions\" (you might need another admin to do this). On the \"Settings\" / \"Reply URLs\" page of the app, add https://internal.yourcompanycom/oauth2/callback for each host that you want to protect by the oauth2 proxy. Click \"Save\". On the \"Settings\" / \"Keys\" page of the app, add a new key and note down the value after hitting \"Save\". Configure the proxy with --provider=azure --client-id= --client-secret= Note: When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#azure-auth-provider","p":893},{"i":900,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":893},{"i":902,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to login even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to login with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#github-auth-provider","p":893},{"i":904,"t":"Create new client in your Keycloak with Access Type 'confidental' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: --provider=keycloak--client-id=--client-secret=--login-url=\"http(s):///auth/realms//protocol/openid-connect/auth\"--redeem-url=\"http(s):///auth/realms//protocol/openid-connect/token\"--profile-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\"--validate-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\"--keycloak-group=--keycloak-group= For group based authorization, the optional --keycloak-group (legacy) or --allowed-group (global standard) flags can be used to specify which groups to limit access to. If these are unset but a groups mapper is set up above in step (3), the provider will still populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response. The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":893},{"i":906,"t":"This auth provider has been tested against Gitlab version 12.X. Due to Gitlab API changes, it may not work for version prior to 12.X (see 994). Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. If you need projects filtering, add the extra read_api scope to your application. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\"","s":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":893},{"i":908,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":893},{"i":910,"t":"For adding an application to the Microsoft Azure AD follow these steps to add an application. Take note of your TenantId if applicable for your situation. The TenantId can be used to override the default common authorization server with a tenant specific server.","s":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":893},{"i":912,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex and we will use it as an example. The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta, an example can be found below. Dex​ To configure the OIDC provider for Dex, perform the following steps: Download Dex: go get github.com/dexidp/dex See the getting started guide for more details. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Add a configuration block to the staticClients section of examples/config-dev.yaml: - id: oauth2-proxyredirectURIs:- 'http://127.0.0.1:4180/oauth2/callback'name: 'oauth2-proxy'secret: proxy Launch Dex: from $GOPATH/github.com/dexidp/dex, run: bin/dex serve examples/config-dev.yaml In a second terminal, run the oauth2-proxy with the following args: -provider oidc-provider-display-name \"My OIDC Provider\"-client-id oauth2-proxy-client-secret proxy-redirect-url http://127.0.0.1:4180/oauth2/callback-oidc-issuer-url http://127.0.0.1:5556/dex-cookie-secure=false-cookie-secret=secret-email-domain kilgore.trout To serve the current working directory as a web site under the /static endpoint, add: -upstream file://$PWD/#/static/ Test the setup by visiting http://127.0.0.1:4180 or http://127.0.0.1:4180/static . See also our local testing environment for a self-contained example using Docker and etcd as storage for Dex. Okta​ To configure the OIDC provider for Okta, perform the following steps: Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com . The client_id and client_secret are configured in the application settings. Generate a unique client_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#openid-connect-provider","p":893},{"i":914,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048 bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost', The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"login.gov Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#logingov-provider","p":893},{"i":916,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to setup the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#nextcloud-provider","p":893},{"i":918,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":893},{"i":920,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who has access to one selected repository use --bitbucket-repository=.","s":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":893},{"i":922,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1\"","s":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":893},{"i":924,"t":"To authorize by email domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#email-authentication","p":893},{"i":926,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/7.0.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":893},{"i":928,"t":"There are two recommended configurations. Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or .... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"TLS Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/tls","h":"","p":927},{"i":930,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive","s":"Endpoints","u":"/oauth2-proxy/docs/7.0.x/features/endpoints","h":"","p":929},{"i":932,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.","s":"Sign out","u":"/oauth2-proxy/docs/7.0.x/features/endpoints","h":"#sign-out","p":929},{"i":934,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"","p":933},{"i":936,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_'; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#generating-a-cookie-secret","p":933},{"i":938,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#config-file","p":933},{"i":940,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --custom-templates-dir string path to custom html templates --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --gcp-healthchecks bool will enable /liveness_check, /readiness_check, and / (with the proper user-agent) endpoints that will make it work well with GCP App Engine and GKE Ingresses false --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --gitlab-projects string | list restrict logins to members of any of these projects (may be given multiple times) formatted as orgname/repo=accesslevel. Access level should be a value matching Gitlab access levels, defaulted to 20 if absent --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -B for bcrypt encryption --http-address string [http://]: or unix:// to listen on for HTTP clients \"127.0.0.1:4180\" --https-address string : to listen on for HTTPS clients \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --oidc-email-claim string which OIDC claim contains the user's email \"email\" --oidc-groups-claim string which OIDC claim contains the user groups \"groups\" --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Groups, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted and allows X-Forwarded-{Proto,Host,Uri} headers to be used on redirect selection false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Groups, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping endpoint false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string | list (DEPRECATED for --skip-auth-route) bypass authentication for requests paths that match (may be given multiple times) --skip-auth-route string | list bypass authentication for requests that match the method & path. Format: method=path_regex OR path_regex alone for all methods --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy true --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-key-file string path to private key file --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --allowed-group string | list restrict logins to members of this group (may be given multiple times) --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . to allow subdomains (e.g. .example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. [1]: Only these providers support --cookie-refresh: GitLab, Google and OIDC [2]: When using the whitelist-domain option, any domain prefixed with a . will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URL's protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*. See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#command-line-options","p":933},{"i":942,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#upstreams-configuration","p":933},{"i":944,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside of a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#environment-variables","p":933},{"i":946,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) can be disabled with --silence-ping-logging reducing log volume. This flag appends the --ping-path to --exclude-logging-paths.","s":"Logging Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#logging-configuration","p":933},{"i":948,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details. Message Authenticated via OAuth2 The details of the auth attempt.","s":"Auth Log Format","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#auth-log-format","p":933},{"i":950,"t":"HTTP request logs will output by default in the below format: - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#request-log-format","p":933},{"i":952,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#standard-log-format","p":933},{"i":954,"t":"The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\".","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":933},{"i":956,"t":"This option requires --reverse-proxy option to be set.","s":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":933},{"i":958,"t":"The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration: http: routers: a-service: rule: \"Host(`a-service.example.com`)\" service: a-service-backend middlewares: - oauth-errors - oauth-auth tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth: rule: \"Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true oauth-errors: errors: status: - \"401-403\" service: oauth-backend query: \"/oauth2/sign_in\"","s":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":933},{"i":960,"t":"Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint Following options need to be set on oauth2-proxy: --upstream=static://202: Configures a static response for authenticated sessions --reverseproxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly http: routers: a-service-route-1: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)\" service: a-service-backend middlewares: - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" a-service-route-2: rule: \"Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)\" service: a-service-backend middlewares: - oauth-auth-wo-redirect # unauthenticated session will return a 401 tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services-oauth2-route: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth2-proxy-route: rule: \"Host(`oauth.example.com`) && PathPrefix(`/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 b-service-backend: loadBalancer: servers: - url: http://172.16.0.3:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth-redirect: forwardAuth: address: https://oauth.example.com/ trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization oauth-auth-wo-redirect: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":933},{"i":962,"t":"danger This page contains documentation for alpha features. We reserve the right to make breaking changes to the features detailed within this page with no notice. Options described in this page may be changed, removed, renamed or moved without prior warning. Please beware of this before you use alpha configuration options. This page details a set of alpha configuration options in a new format. Going forward we are intending to add structured configuration in YAML format to replace the existing TOML based configuration file and flags. Below is a reference for the structure of the configuration, with AlphaOptions as the root of the configuration. When using alpha configuration, your config file will look something like below: upstreams: - id: ... ...injectRequestHeaders: - name: ... ...injectResponseHeaders: - name: ... ... Please browse the reference below for the structure of the new configuration format.","s":"Alpha Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"","p":961},{"i":964,"t":"To use the new alpha configuration, generate a YAML file based on the format described in the reference below. Provide the path to this file using the --alpha-config flag. note When using the --alpha-config flag, some options are no longer available. See removed options below for more information.","s":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#using-alpha-configuration","p":961},{"i":966,"t":"Before adding the new --alpha-config option, start OAuth2 Proxy using the convert-config-to-alpha flag to convert existing configuration to the new format. oauth2-proxy --convert-config-to-alpha --config ./path/to/existing/config.cfg This will convert any options supported by the new format to YAML and print the new configuration to STDOUT. Copy this to a new file, remove any options from your existing configuration noted in removed options and then start OAuth2 Proxy using the new config. oauth2-proxy --alpha-config ./path/to/new/config.yaml --config ./path/to/existing/config.cfg","s":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":961},{"i":968,"t":"The following flags/options and their respective environment variables are no longer available when using alpha configuration: flush-interval/flush_interval pass-host-header/pass_host_header proxy-websockets/proxy_websockets ssl-upstream-insecure-skip-verify/ssl_upstream_insecure_skip_verify upstream/upstreams pass-basic-auth/pass_basic_auth pass-access-token/pass_access_token pass-user-headers/pass_user_headers pass-authorization-header/pass_authorization_header set-basic-auth/set_basic_auth set-xauthrequest/set_xauthrequest set-authorization-header/set_authorization_header prefer-email-to-user/prefer_email_to_user basic-auth-password/basic_auth_password skip-auth-strip-headers/skip_auth_strip_headers Attempting to use these options via flags or via config when --alpha-config set will result in an error. info You must remove these options before starting OAuth2 Proxy with --alpha-config","s":"Removed options","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#removed-options","p":961},{"i":971,"t":"AlphaOptions contains alpha structured configuration options. Usage of these options allows users to access alpha features that are not available as part of the primary configuration structure for OAuth2 Proxy. danger The options within this structure are considered alpha. They may change between releases without notice. Field Type Description upstreams Upstreams Upstreams is used to configure upstream servers.Once a user is authenticated, requests to the server will be proxied tothese upstream servers based on the path mappings defined in this list. injectRequestHeaders []Header InjectRequestHeaders is used to configure headers that should be addedto requests to upstream servers.Headers may source values from either the authenticated user's sessionor from a static secret value. injectResponseHeaders []Header InjectResponseHeaders is used to configure headers that should be addedto responses from the proxy.This is typically used when using the proxy as an external authenticationprovider in conjunction with another proxy such as NGINX and itsauth_request module.Headers may source values from either the authenticated user's sessionor from a static secret value.","s":"AlphaOptions","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#alphaoptions","p":961},{"i":973,"t":"(Appears on: HeaderValue) ClaimSource allows loading a header value from a claim within the session Field Type Description claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"ClaimSource","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#claimsource","p":961},{"i":975,"t":"(string alias)​ (Appears on: Upstream) Duration is as string representation of a period of time. A duration string is a is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\", \"-1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".","s":"Duration","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#duration","p":961},{"i":977,"t":"(Appears on: AlphaOptions) Header represents an individual header that will be added to a request or response header. Field Type Description name string Name is the header name to be used for this set of values.Names should be unique within a list of Headers. preserveRequestValue bool PreserveRequestValue determines whether any values for this headershould be preserved for the request to the upstream server.This option only applies to injected request headers.Defaults to false (headers that match this header will be stripped). values []HeaderValue Values contains the desired values for this header","s":"Header","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#header","p":961},{"i":979,"t":"(Appears on: Header) HeaderValue represents a single header value and the sources that can make up the header value Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value. claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"HeaderValue","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#headervalue","p":961},{"i":981,"t":"(Appears on: ClaimSource, HeaderValue) SecretSource references an individual secret value. Only one source within the struct should be defined at any time. Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value.","s":"SecretSource","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#secretsource","p":961},{"i":983,"t":"(Appears on: Upstreams) Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path. Field Type Description id string ID should be a unique identifier for the upstream.This value is required for all upstreams. path string Path is used to map requests to the upstream server.The closest match will take precedence and all Paths must be unique. uri string The URI of the upstream server. This may be an HTTP(S) server of a Filebased URL. It may include a path, in which case all requests will be servedunder that path.Eg:- http://localhost:8080- https://service.localhost- https://service.localhost/path- file://host/pathIf the URI's path is \"/base\" and the incoming request was for \"/dir\",the upstream request will be for \"/base/dir\". insecureSkipTLSVerify bool InsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.This option is insecure and will allow potential Man-In-The-Middle attacksbetweem OAuth2 Proxy and the usptream server.Defaults to false. static bool Static will make all requests to this upstream have a static response.The response will have a body of \"Authenticated\" and a response codematching StaticCode.If StaticCode is not set, the response will return a 200 response. staticCode int StaticCode determines the response code for the Static response.This option can only be used with Static enabled. flushInterval Duration FlushInterval is the period between flushing the response buffer whenstreaming response from the upstream.Defaults to 1 second. passHostHeader bool PassHostHeader determines whether the request host header should be proxiedto the upstream server.Defaults to true. proxyWebSockets bool ProxyWebSockets enables proxying of websockets to upstream serversDefaults to true.","s":"Upstream","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#upstream","p":961},{"i":985,"t":"([]Upstream alias)​ (Appears on: AlphaOptions) Upstreams is a collection of definitions for upstream servers.","s":"Upstreams","u":"/oauth2-proxy/docs/7.0.x/configuration/alpha-config","h":"#upstreams","p":961},{"i":987,"t":"If signature_key is defined, proxied requests will be signed with the GAP-Signature header, which is a Hash-based Message Authentication Code (HMAC) of selected request information and the request body see SIGNATURE_HEADERS in oauthproxy.go. signature_key must be of the form algorithm:secretkey, (ie: signature_key = \"sha1:secret0\") For more information about HMAC request signature validation, read the following: Amazon Web Services: Signing and Authenticating REST Requests rc3.org: Using HMAC to authenticate Web service requests","s":"Request Signatures","u":"/oauth2-proxy/docs/7.0.x/features/request_signatures","h":"","p":986}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/878",[0,2,1,1.702,2,2.776,3,0.843,4,2.776,5,3.596,6,1.462,7,3.719,8,3.016,9,2.776,10,1.991,11,2.222,12,1.219,13,1.537,14,1.462,15,4.297,16,2.878,17,2.122,18,3.719,19,1.658,20,1.794,21,4.33,22,1.557,23,4.33,24,2.255,25,1.391,26,1.646,27,4.33,28,4.33,29,3.016,30,2.002,31,2.776,32,4.33,33,2.255,34,2.776,35,3.016,36,3.116,37,1.616,38,2.922,39,0.993,40,2.776,41,0.941,42,2.576,43,1.537,44,1.537,45,2.255,46,2.776,47,1.462,48,2.776,49,3.016,50,2.776,51,0.302,52,1.702]],["t/880",[3,0.916,12,1.325,26,1.712,37,1.549,39,0.966,51,0.381,52,1.631,53,3.178,54,4.686,55,3.178,56,6.096,57,6.096,58,2.89,59,4.179,60,4.149,61,3.178,62,3.564,63,2.469,64,4.149,65,5.456,66,4.149,67,4.149,68,4.149,69,4.686,70,3.178,71,3.564,72,4.149,73,5.456,74,4.149,75,4.149,76,4.149,77,1.719,78,1.631,79,3.564,80,1.692,81,3.178,82,2.469,83,5.456,84,4.149,85,2.469,86,2.304,87,2.89,88,4.149,89,4.149,90,4.149,91,4.149,92,4.149,93,4.149,94,3.564,95,1.919,96,3.178,97,1.631,98,0.66,99,1.472,100,1.919,101,1.919,102,0.815,103,2.034,104,1.549,105,3.498,106,3.564,107,1.719,108,2.304]],["t/882",[3,0.824,98,0.871,109,1.597,110,5.481,111,3.843,112,4.198,113,3.261,114,4.198,115,2.397,116,3.514,117,5.481,118,4.707,119,3.817,120,5.481,121,3.817,122,3.044,123,4.198,124,5.481,125,5.481]],["t/884",[3,0.868,30,2.094,33,2.358,46,2.902,48,2.902,51,0.316,80,1.257,87,3.153,98,0.918,112,4.422,119,4.021,121,3.153,126,4.527,127,4.958,128,4.958,129,2.219,130,5.127,131,3.468,132,5.459,133,3.889,134,3.701,135,4.527,136,3.701,137,4.527,138,2.693,139,4.527,140,2.902,141,4.527,142,4.527,143,4.527,144,2.902,145,3.889,146,1.528,147,3.468,148,2.693,149,3.206,150,4.527,151,4.527,152,4.527,153,4.527,154,4.527,155,4.527,156,3.889,157,3.889,158,4.527,159,4.527,160,3.468,161,3.468,162,1.69]],["t/886",[48,2.927,51,0.405,59,4.445,78,1.794,112,3.497,119,3.18,128,4.985,132,4.985,133,3.921,134,3.72,138,3.796,140,2.927,149,2.535,157,6.182,162,1.704,163,6.38,164,5.804,165,5.804,166,2.111,167,3.497,168,4.565,169,4.565,170,4.565,171,4.565,172,3.921,173,4.565,174,4.565,175,3.497,176,4.565,177,4.565,178,5.804,179,1.891,180,1.541,181,1.996,182,4.565,183,4.565,184,4.565,185,4.565,186,4.565,187,4.565,188,4.565,189,4.565,190,4.565]],["t/888",[0,1.646,1,2.013,3,0.77,10,2.544,11,2.104,14,1.729,19,1.29,22,1.422,30,2.368,38,3.247,40,3.283,51,0.357,77,2.583,98,0.814,160,3.923,181,2.24,191,3.567,192,6.234,193,3.567,194,2.24,195,3.047,196,3.047,197,3.047,198,3.462,199,1.912,200,1.646]],["t/890",[0,1.807,3,0.937,10,2.339,11,2.361,19,1.095,22,1.207,38,2.929,41,0.945,44,1.543,51,0.392,85,2.586,98,0.991,129,2.131,181,1.901,196,3.346,197,3.709,198,3.662,200,1.397,201,4.776,202,4.347,203,2.131,204,2.003,205,6.593,206,4.347,207,1.095,208,4.347,209,4.347,210,4.347,211,4.347,212,4.347,213,2.264,214,4.347,215,4.347,216,4.347,217,1.207,218,3.734,219,3.028,220,4.347,221,4.347,222,3.734,223,3.734,224,2.787,225,4.347,226,3.734,227,3.734]],["t/892",[10,2.357,11,1.836,13,1.666,16,1.539,22,0.924,33,1.733,38,3.533,39,0.963,40,4.696,41,0.723,50,3.487,51,0.451,77,1.379,98,0.529,100,1.539,109,0.97,119,2.318,145,2.858,147,2.549,161,2.549,197,3.236,198,2.607,200,1.069,203,1.631,204,1.069,207,0.838,217,1.51,219,3.788,228,3.27,229,4.694,230,5.439,231,3.328,232,1.242,233,5.439,234,3.328,235,2.858,236,4.694,237,4.694,238,4.032,239,4.694,240,3.328,241,3.236,242,3.328,243,3.328,244,3.27,245,2.858,246,3.328,247,2.318,248,3.328,249,1.98,250,2.171,251,3.328,252,2.318,253,3.328,254,2.858,255,1.733,256,2.858,257,4.671,258,3.514,259,1.438,260,3.328,261,4.671,262,1.98,263,4.694,264,2.21,265,3.009,266,4.032,267,3.328,268,1.308,269,4.694,270,3.328,271,3.328]],["t/894",[3,0.701,12,1.013,25,1.498,26,1.913,37,1.74,39,1.041,45,2.428,51,0.325,58,3.248,78,1.832,95,2.156,96,3.571,97,1.832,98,0.741,109,1.359,130,3.571,134,3.771,200,1.498,232,1.74,258,3.499,268,1.832,272,4.097,273,3.248,274,4.663,275,1.932,276,3.571,277,2.428,278,3.771,279,4.663,280,4.005,281,3.571,282,4.005,283,4.005,284,3.771,285,3.571,286,4.005,287,4.663,288,4.005,289,4.005,290,3.267,291,3.499,292,4.663]],["t/896",[1,1.024,3,0.59,6,1.326,8,2.735,10,0.925,11,0.88,12,1.027,13,1.393,16,1.205,17,1.277,19,0.656,22,1.312,25,0.837,26,0.689,37,1.764,41,1.027,53,5.208,55,3.008,78,1.024,80,1.46,82,2.336,95,1.205,97,1.543,98,0.624,102,0.512,109,1.533,111,3.134,115,1.14,122,1.447,131,1.996,146,1.905,148,1.55,162,1.963,175,1.996,179,2.338,180,1.595,181,1.14,195,2.336,204,1.906,207,1.19,217,0.723,222,2.238,224,3.029,264,1.867,265,1.671,272,3.931,273,1.815,275,1.958,293,1.996,294,3.206,295,2.606,296,2.238,297,2.238,298,2.606,299,2.238,300,4.725,301,5.26,302,3.357,303,1.815,304,2.238,305,2.606,306,3.619,307,2.606,308,2.606,309,3.373,310,1.815,311,2.238,312,2.606,313,2.238,314,1.996,315,2.606,316,3.373,317,1.996,318,2.606,319,1.55,320,2.066,321,2.606,322,2.238,323,3.927,324,1.996,325,1.205,326,1.996,327,2.238,328,1.671,329,2.606,330,1.996,331,2.606,332,2.238,333,2.606,334,3.029,335,1.996,336,1.671,337,1.815,338,3.802,339,2.606,340,2.066,341,1.671,342,3.619,343,2.238,344,1.55,345,1.996,346,3.372,347,3.927,348,2.181,349,2.606,350,2.606,351,2.606,352,2.606,353,1.815,354,1.55,355,2.606,356,2.606,357,1.024,358,2.517,359,2.238,360,1.447,361,2.606,362,2.238,363,2.238,364,2.238,365,2.606,366,2.606,367,2.606,368,1.996,369,1.55,370,1.996,371,1.671,372,1.815,373,1.14,374,2.606,375,1.671,376,2.606,377,2.606]],["t/898",[1,1.345,2,2.194,3,0.72,6,1.155,10,1.699,11,1.616,12,1.368,13,1.214,14,1.155,20,1.418,22,1.329,26,0.905,38,1.782,39,0.606,40,2.194,41,1.299,51,0.334,53,3.666,63,2.036,85,2.036,95,2.214,97,2.17,98,0.544,108,2.659,109,1.609,162,1.787,166,2.553,179,1.418,180,1.616,181,1.496,197,2.036,199,1.277,201,2.621,204,1.538,213,2.493,232,1.277,249,2.848,252,2.383,259,1.266,262,2.848,268,1.345,273,2.383,278,3.539,293,3.666,294,2.493,302,2.036,304,2.939,313,4.111,314,4.58,316,4.111,324,2.621,345,4.82,346,2.194,357,1.881,370,3.666,378,3.422,379,4.787,380,3.539,381,3.422,382,3.983,383,4.111,384,3.422,385,3.422,386,3.833,387,3.422,388,2.939,389,2.621,390,2.939,391,3.422,392,2.939,393,3.422,394,3.422,395,1.496,396,3.422,397,3.422,398,2.939,399,3.422,400,3.422,401,2.939,402,2.939,403,3.422,404,2.939,405,3.422,406,3.422,407,3.422]],["t/900",[25,1.825,37,2.12,41,1.234,78,2.232,179,2.353,180,1.918,325,2.627,328,3.641,344,3.379,382,3.379,408,6.631,409,5.68,410,2.484]],["t/902",[6,1.068,14,1.949,16,2.67,19,0.797,22,1.817,26,1.198,41,0.984,51,0.316,78,1.244,81,2.424,102,0.89,109,0.922,111,1.757,129,1.551,134,4.532,140,2.029,144,4.075,146,1.068,149,2.515,167,4.869,179,1.876,180,1.068,207,1.332,255,2.755,259,1.399,264,1.607,265,2.029,268,1.244,275,1.311,290,1.757,320,1.384,328,2.029,336,4.292,337,2.204,340,1.384,341,2.029,344,1.883,354,1.883,357,2.572,372,2.204,375,2.903,390,4.543,410,2.862,411,3.164,412,2.029,413,2.204,414,2.424,415,2.718,416,2.424,417,3.155,418,2.718,419,2.424,420,5.128,421,2.718,422,3.164,423,3.89,424,3.89,425,4.959,426,2.718,427,2.424,428,3.684,429,3.684,430,2.718,431,2.718,432,3.89,433,2.424,434,1.384,435,2.718,436,3.164,437,3.164,438,3.164,439,2.694,440,3.164,441,5.289,442,3.164,443,1.883,444,3.164,445,3.164]],["t/904",[13,1.781,14,1.236,16,1.694,25,1.177,26,0.969,41,1.09,42,2.179,43,1.3,44,1.3,47,1.236,51,0.35,52,1.439,78,1.972,102,0.72,109,1.067,122,2.034,179,2.55,180,1.236,196,2.179,199,1.873,204,1.978,207,0.923,217,1.393,232,1.367,255,1.908,259,0.969,264,1.3,265,2.348,280,5.964,291,2.179,294,1.908,303,2.551,306,2.805,309,3.146,320,1.602,325,1.694,328,2.348,335,2.805,338,4.65,340,1.602,341,2.348,346,3.217,357,1.972,398,3.146,410,1.602,443,2.179,446,3.663,447,5.723,448,2.805,449,3.663,450,2.805,451,3.663,452,3.663,453,6.156,454,6.156,455,6.156,456,3.663,457,3.663,458,2.551,459,5.018,460,3.663,461,3.663,462,1.795,463,3.663,464,3.663,465,2.551,466,2.805,467,3.663,468,2.348,469,2.805,470,3.663,471,1.908,472,3.663,473,1.694,474,3.663,475,2.348]],["t/906",[6,1.302,11,1.754,12,0.838,17,1.89,25,1.889,26,1.02,37,1.44,41,1.277,51,0.363,82,2.294,87,3.619,97,2.472,99,1.368,102,0.758,111,2.142,113,3.092,121,2.686,146,1.302,166,2.403,204,1.67,207,1.654,217,1.071,218,3.312,259,1.736,265,2.472,268,1.516,281,5.294,284,2.472,294,2.706,302,2.294,336,3.331,338,3.331,340,2.272,341,3.331,348,2.142,354,3.092,375,2.472,395,2.272,410,1.686,427,2.954,428,2.686,429,2.686,448,2.954,458,2.686,476,2.954,477,5.197,478,3.857,479,2.294,480,3.312,481,3.857,482,2.472,483,3.857,484,3.98,485,2.472,486,3.857,487,3.857,488,3.312,489,3.857,490,3.857,491,3.857,492,3.857,493,3.857,494,3.857,495,3.857,496,3.857,497,3.857,498,2.472,499,2.686,500,3.312]],["t/908",[12,1.339,20,2.083,22,1.396,25,1.615,37,2.301,95,2.325,109,1.465,111,2.792,122,2.792,179,2.083,180,1.697,200,1.615,217,1.711,249,3.966,259,1.329,282,4.318,293,3.85,294,2.618,302,2.991,310,3.501,314,3.85,328,3.223,354,2.991,413,3.501,501,5.027,502,5.027,503,3.85,504,5.027,505,5.027,506,4.318,507,5.027,508,2.325,509,5.294]],["t/910",[44,2.284,45,3.352,51,0.377,97,2.702,109,1.574,122,2.999,166,2.497,200,1.735,207,1.36,278,3.462,283,4.638,294,2.812,320,2.361,337,3.761,389,4.136,510,6.436,511,5.4,512,4.638,513,4.638]],["t/912",[1,0.676,3,0.853,11,1.217,12,1.538,13,1.482,14,0.955,16,1.308,17,1.766,20,0.713,22,0.478,24,0.896,25,1.342,26,1.646,37,0.642,39,0.97,41,1.078,43,0.61,44,1.637,51,0.346,52,0.676,55,1.318,58,1.198,63,1.023,70,1.318,77,0.713,80,0.785,82,1.023,85,1.023,86,2.001,95,2.134,97,2.403,98,0.902,99,1.279,102,0.708,103,0.843,107,2.173,109,1.217,111,0.955,113,2.144,116,1.814,122,0.955,127,1.477,129,0.843,131,1.318,136,1.103,138,1.023,146,0.581,162,1.558,166,2.134,179,1.493,180,0.581,181,0.752,197,1.023,199,1.056,200,1.483,201,1.318,203,0.843,204,1.594,207,1.162,217,1,219,1.198,224,1.814,244,1.198,252,1.971,258,2.484,259,1.104,262,1.023,268,0.676,275,0.713,277,1.473,284,2.31,291,1.023,294,2.174,302,1.023,310,1.971,317,3.198,319,1.023,320,2.482,322,1.477,325,2.134,334,1.814,338,1.814,340,1.237,343,1.477,344,2.144,345,2.167,353,1.198,354,1.023,357,1.416,359,1.477,362,2.43,380,1.103,382,2.144,383,2.43,392,2.43,410,1.237,412,1.103,414,1.318,417,1.198,462,1.387,466,1.318,476,2.76,484,1.318,485,1.103,498,3.181,499,2.51,503,1.318,506,1.477,508,0.795,514,1.72,515,2.43,516,1.72,517,1.72,518,1.72,519,1.103,520,1.72,521,1.72,522,4.962,523,5.675,524,0.843,525,2.829,526,1.72,527,1.72,528,1.477,529,1.971,530,2.43,531,1.318,532,1.477,533,1.72,534,2.829,535,2.829,536,1.72,537,1.72,538,1.72,539,1.72,540,1.72,541,1.72,542,2.43,543,1.198,544,1.477,545,1.72,546,1.318,547,1.477,548,1.72,549,1.477,550,1.72,551,1.72,552,1.72,553,1.023,554,1.72,555,1.72,556,1.318,557,1.72,558,1.318,559,1.308,560,1.72,561,1.72,562,1.72,563,1.72,564,1.318,565,1.72,566,3.586,567,1.477,568,2.829,569,1.72,570,1.318,571,1.971,572,1.318,573,1.72,574,2.829,575,0.713,576,1.72,577,1.318,578,1.477,579,1.814,580,1.971,581,1.72,582,1.477,583,2.829,584,1.72,585,1.72,586,1.72,587,1.72,588,1.72,589,1.72,590,2.829,591,1.72,592,1.571,593,1.72,594,1.72,595,1.477,596,1.72,597,2.43,598,2.43,599,1.72,600,2.829,601,1.72,602,1.477,603,1.72,604,3.604,605,1.72,606,2.43,607,1.477,608,1.72,609,1.477,610,1.72,611,2.829,612,1.72,613,1.72,614,1.72,615,1.72,616,1.72,617,1.72,618,1.72,619,1.72,620,1.72]],["t/914",[1,0.878,2,1.432,3,0.931,5,3.11,11,1.638,12,1.426,14,0.754,15,2.672,16,1.033,19,0.563,20,0.925,25,1.379,26,1.392,30,1.033,33,1.163,36,1.24,41,1.054,44,0.792,51,0.243,52,1.371,54,1.918,62,2.996,63,1.329,70,3.288,71,1.918,77,0.925,80,1.347,86,1.937,95,1.033,96,2.672,97,2.068,98,0.682,102,0.843,103,2.579,104,1.811,113,1.329,138,2.075,140,1.432,144,1.432,146,1.449,162,0.834,175,1.711,179,1.445,196,1.329,203,1.095,204,1.379,207,0.563,213,1.163,217,0.62,238,2.996,247,1.556,249,2.886,250,1.033,258,2.075,259,1.541,262,1.329,268,0.878,275,0.925,277,2.236,284,2.236,285,4.273,290,1.24,296,1.918,299,2.996,311,1.918,319,1.329,320,0.977,325,1.613,334,2.236,340,2.122,341,1.432,357,1.687,380,1.432,382,1.329,401,1.918,410,0.977,418,1.918,419,1.711,430,1.918,432,1.918,433,1.711,434,1.525,443,1.329,458,1.556,468,2.236,476,1.711,484,1.711,498,3.973,499,3.379,515,1.918,528,1.918,547,1.918,549,2.996,558,1.711,559,1.033,564,1.711,571,1.556,579,1.432,595,1.918,602,1.918,606,3.687,607,1.918,621,3.488,622,3.488,623,3.488,624,2.233,625,1.918,626,2.233,627,2.233,628,2.233,629,2.233,630,2.233,631,2.233,632,2.233,633,3.488,634,3.488,635,1.918,636,1.556,637,2.236,638,1.095,639,2.233,640,1.918,641,3.687,642,2.233,643,2.233,644,2.233,645,1.918,646,2.233,647,2.233,648,2.233,649,2.233,650,2.233,651,3.488,652,2.233,653,1.918,654,2.233,655,1.918,656,2.233,657,2.233,658,1.918,659,2.233,660,2.233,661,1.711,662,2.233,663,1.918,664,2.233,665,2.233,666,2.233,667,2.233,668,2.233,669,2.233,670,2.233,671,2.233,672,1.918,673,2.233,674,2.233,675,1.918,676,2.233,677,2.233,678,2.233,679,3.488,680,1.918,681,2.233,682,2.233,683,2.233,684,1.711,685,1.711,686,2.233,687,1.918,688,2.233,689,1.918,690,2.075,691,2.233,692,1.711,693,2.233,694,3.716,695,2.233,696,2.996,697,1.556,698,1.918,699,1.918,700,1.918,701,2.233,702,2.233,703,2.233,704,2.233,705,1.556]],["t/916",[14,1.491,19,1.113,22,1.226,25,1.419,26,1.661,33,2.301,39,0.782,48,2.832,51,0.397,78,2.233,82,2.628,98,0.702,100,2.043,101,2.043,103,2.165,104,1.649,109,1.287,162,2.121,204,2.131,217,1.578,250,2.043,255,2.301,259,1.754,286,6.332,325,2.043,346,3.643,368,4.353,410,1.932,443,2.628,482,2.832,500,5.396,530,3.794,577,3.384,637,2.832,706,3.384,707,4.418,708,3.384,709,4.418,710,4.418,711,3.794,712,4.418,713,4.418,714,4.418,715,4.418]],["t/918",[1,1.743,3,0.856,4,2.844,9,2.844,13,1.574,25,2.023,26,1.173,37,1.656,39,0.785,41,0.964,51,0.398,80,1.231,97,2.239,98,1.001,99,1.574,100,2.051,101,2.051,102,1.237,109,1.293,162,2.127,179,1.838,180,1.497,200,1.425,204,2.134,207,1.117,217,1.582,259,1.817,268,1.743,277,2.31,310,3.089,395,1.94,412,2.844,413,3.089,450,3.397,479,2.639,508,2.051,566,3.81,575,1.838,692,3.397,716,4.436,717,4.436,718,4.436,719,3.397,720,3.397,721,4.436,722,3.81,723,3.81,724,4.436,725,4.436,726,4.436]],["t/920",[1,1.688,3,0.839,12,1.347,13,1.981,14,1.45,19,1.082,22,1.193,26,1.136,30,1.987,37,1.604,39,0.988,51,0.458,95,2.581,98,0.887,102,1.097,109,1.252,144,3.578,146,1.45,162,2.083,166,1.987,180,1.45,200,1.38,204,2.109,207,1.082,217,1.549,259,1.136,277,2.237,288,5.325,334,3.578,336,3.578,357,2.436,370,3.291,372,3.887,375,2.754,412,2.754,417,2.992,420,4.275,448,3.291,450,3.291,503,3.291,509,3.69,609,3.69,692,3.291,719,3.291,720,3.291,722,3.69,727,4.296,728,4.296,729,4.296,730,4.296,731,4.296]],["t/922",[1,1.809,3,0.692,12,1.268,25,1.875,26,1.217,29,3.206,78,1.809,97,1.809,102,0.904,109,1.342,162,2.178,179,1.907,180,1.554,194,2.013,204,2.164,207,1.16,217,1.62,259,1.217,289,6.098,325,2.129,344,2.739,395,2.945,410,2.013,413,3.206,414,3.526,443,2.739,546,3.526,579,3.74,597,3.954,598,3.954,732,4.604,733,4.604,734,5.835,735,4.604,736,4.604,737,4.604,738,6.405,739,4.604,740,4.604,741,4.604]],["t/924",[19,1.36,30,2.497,51,0.48,101,2.497,146,2.518,275,2.666,320,3.007,360,3.574,742,5.4,743,4.136,744,5.4,745,4.638]],["t/926",[3,0.836,14,1.878,26,1.841,33,2.898,51,0.388,98,0.884,107,2.305,166,2.573,180,2.351,207,1.402,368,4.262,475,3.567,746,5.565,747,5.565]],["t/928",[0,1.365,3,1.002,11,1.87,12,1.603,19,0.73,26,1.33,39,1.045,43,1.028,44,1.028,47,0.978,51,0.351,52,1.138,97,1.138,98,1.039,99,1.507,100,1.964,101,1.964,105,3.782,107,2.084,108,2.794,109,0.844,138,2.527,146,1.434,162,1.585,194,1.857,200,1.365,204,1.78,207,0.73,217,1.538,247,2.017,249,2.527,250,1.339,258,1.723,268,1.138,272,2.958,277,2.212,324,2.218,326,2.218,330,2.218,371,1.857,395,1.857,416,2.218,471,2.212,524,1.419,531,3.253,544,3.648,556,2.218,578,3.648,680,2.487,690,1.723,748,3.552,749,3.648,750,4.247,751,4.247,752,3.648,753,4.247,754,4.247,755,4.247,756,3.648,757,4.247,758,4.32,759,5.03,760,3.859,761,2.218,762,2.896,763,3.648,764,2.896,765,2.896,766,3.253,767,2.896,768,3.648,769,4.247,770,2.896,771,2.896,772,2.487,773,2.896,774,2.896,775,2.896,776,2.896,777,2.896,778,2.487,779,2.218,780,2.896,781,2.487,782,4.32,783,1.857,784,2.487,785,3.648,786,2.896,787,2.896,788,4.247,789,2.896,790,1.857,791,2.896]],["t/930",[3,0.905,8,2.815,10,1.903,11,1.81,17,1.981,19,1.018,22,1.122,25,1.299,31,2.591,34,2.591,35,2.815,36,3.56,37,2.246,39,0.716,43,1.434,46,2.591,51,0.465,52,2.107,86,2.245,94,4.606,98,0.852,99,1.434,104,1.509,108,2.245,118,3.472,146,1.364,191,2.815,207,1.018,213,2.105,259,1.764,276,3.096,327,3.472,342,3.096,373,1.768,382,2.405,386,3.438,410,1.768,412,2.591,434,1.768,473,2.964,479,2.405,529,2.815,571,2.815,792,3.472,793,3.438,794,4.042,795,4.107,796,4.042,797,2.591,798,4.042,799,3.096,800,3.472,801,3.096,802,4.042,803,5.362,804,3.472,805,4.042,806,5.362,807,3.472,808,4.042,809,2.815,810,3.096,811,3.096,812,3.472]],["t/932",[0,1.749,6,1.837,9,2.65,10,1.467,11,1.395,19,1.371,22,1.795,24,2.153,25,2.293,26,1.439,29,3.791,39,0.732,45,2.153,47,1.395,49,2.879,51,0.288,52,1.625,97,1.625,98,0.657,102,0.812,107,1.712,149,2.296,213,2.834,227,3.55,241,2.459,259,1.439,262,2.459,268,1.625,275,2.255,290,2.296,303,2.879,319,2.459,335,3.166,357,1.625,386,2.65,410,1.808,471,2.153,498,4.145,567,3.55,571,3.791,694,3.166,697,2.879,698,3.55,723,3.55,804,4.674,813,2.65,814,4.134,815,4.134,816,4.134,817,4.134,818,3.55,819,3.166,820,4.134,821,4.134,822,4.134,823,4.134,824,4.134,825,4.134,826,4.134,827,3.55,828,4.134,829,3.55,830,3.55]],["t/934",[3,0.8,29,3.706,39,1.13,41,1.156,80,1.771,98,0.846,99,1.888,100,2.95,101,2.95,102,1.253,103,3.349,104,2.55,250,2.461,831,5.321,832,5.321,833,4.57,834,6.379]],["t/936",[10,1.513,11,1.439,12,1.63,30,1.971,41,0.926,51,0.297,69,3.661,78,1.675,100,1.971,166,1.971,199,1.591,217,1.183,241,2.536,259,1.127,524,2.089,579,2.733,635,3.661,645,4.769,835,4.263,836,5.553,837,4.263,838,4.263,839,4.263,840,4.263,841,4.263,842,4.263,843,4.263,844,4.263,845,4.263,846,4.263,847,4.302,848,6.176,849,4.263,850,4.263,851,4.731,852,4.263,853,4.263,854,6.176,855,4.263,856,4.263,857,4.263,858,4.263,859,4.263,860,4.263,861,3.868,862,4.263,863,4.263,864,4.263,865,4.263,866,4.263,867,4.263,868,4.263,869,3.661,870,4.263]],["t/938",[12,1.366,51,0.362,80,1.746,98,0.826,99,2.399,100,2.402,101,2.402,102,1.02,107,2.152,115,2.272,181,2.272,255,3.522,380,3.33,706,4.816,851,3.979,871,3.979,872,4.461,873,4.461,874,4.461,875,4.461,876,3.979,877,6.288,878,5.194,879,5.194]],["t/940",[0,1.535,1,1.739,3,0.572,4,1.702,5,2.993,6,1.68,7,0.526,8,1.109,10,0.942,11,1.901,12,1.298,13,1.041,14,1.398,15,3.05,16,2.046,17,1.301,18,2.012,19,1.114,20,1.1,22,1.15,24,3.066,25,0.943,26,1.053,30,0.736,31,0.393,33,0.319,37,1.274,38,1.037,39,0.47,40,3.574,41,1.038,42,2.266,43,1.284,44,0.217,45,0.592,46,0.393,47,1.767,48,0.393,50,0.729,51,0.432,52,1.497,58,0.427,61,0.469,63,0.677,78,0.92,80,1.453,81,1.794,82,0.677,87,0.792,95,0.283,97,0.241,98,0.181,99,0.404,101,0.921,102,0.711,105,0.729,106,0.526,108,0.885,111,0.632,113,0.364,115,1.492,134,1.501,138,1.393,140,1.021,144,1.021,146,1.576,148,2.904,160,1.22,161,1.22,162,0.594,166,0.526,167,1.22,179,0.471,181,1.161,191,0.427,193,0.427,194,2.041,195,0.677,196,0.364,197,0.677,198,0.34,199,0.425,200,1.024,203,1.148,204,1.279,213,1.037,217,0.65,219,0.427,224,1.021,226,1.71,228,1.109,232,0.425,235,0.526,241,0.364,245,0.526,249,2.03,250,0.921,252,0.427,255,1.037,257,1.368,258,2.464,259,1.441,261,3.557,264,0.404,266,2.28,268,0.447,272,2.043,275,1.715,277,0.319,278,1.021,281,1.525,284,0.393,285,1.22,290,0.632,291,1.184,294,0.319,302,0.364,303,0.427,306,0.469,319,0.677,320,1.024,325,0.283,332,0.526,334,0.729,336,1.881,337,1.387,338,2.442,340,0.268,342,0.871,344,0.364,346,0.729,348,0.632,353,0.792,354,0.677,357,1.497,360,1.474,363,0.526,364,0.526,369,0.364,371,0.729,373,2.089,375,1.702,382,0.364,386,0.729,388,0.526,389,1.525,395,0.696,410,1.666,419,1.22,420,1.22,423,0.526,424,0.526,425,0.977,426,0.526,427,0.871,428,1.109,429,1.109,431,0.526,433,0.469,434,1.393,435,0.526,439,1.745,443,0.677,458,0.792,462,0.3,465,1.387,471,2.639,473,1.473,479,0.364,482,0.393,485,2.553,488,1.71,498,2.993,499,2.043,508,0.283,512,0.977,513,0.977,519,0.393,524,0.3,531,1.525,546,1.22,553,0.677,558,1.22,559,0.526,570,1.525,575,0.254,592,2.211,625,0.526,636,0.427,638,3.394,640,1.71,641,0.977,653,0.526,655,0.526,661,0.469,672,0.526,675,0.526,687,0.526,689,0.526,690,1.579,694,1.22,696,1.71,697,0.427,705,0.792,708,0.871,711,0.526,745,0.526,748,0.729,749,0.526,760,0.792,761,0.469,766,0.871,768,0.526,779,1.22,783,2.553,790,1.702,792,0.526,793,1.276,797,1.276,799,2.033,800,0.977,811,1.22,829,1.368,830,0.526,847,0.427,880,0.613,881,0.613,882,1.138,883,1.991,884,0.613,885,4.542,886,0.469,887,2.342,888,0.613,889,2.377,890,2.772,891,0.613,892,0.613,893,0.613,894,0.613,895,0.613,896,1.138,897,1.525,898,0.613,899,0.613,900,1.138,901,0.613,902,0.613,903,0.613,904,0.613,905,1.593,906,2.28,907,0.613,908,1.138,909,0.613,910,0.613,911,0.613,912,1.593,913,2.342,914,2.934,915,0.677,916,0.613,917,0.613,918,4.008,919,0.613,920,0.613,921,0.613,922,1.138,923,0.613,924,0.613,925,1.368,926,0.613,927,0.871,928,0.469,929,0.526,930,0.613,931,0.613,932,0.613,933,1.593,934,1.593,935,1.138,936,0.613,937,0.613,938,0.613,939,0.613,940,0.613,941,0.613,942,0.526,943,0.613,944,0.613,945,0.613,946,0.613,947,0.613,948,0.613,949,0.613,950,0.613,951,0.613,952,0.977,953,0.871,954,0.613,955,0.977,956,0.871,957,0.871,958,0.977,959,0.613,960,0.526,961,1.368,962,1.368,963,1.138,964,1.138,965,0.613,966,0.871,967,0.613,968,0.427,969,0.613,970,1.525,971,0.613,972,0.977,973,0.526,974,0.613,975,0.977,976,0.427,977,0.613,978,0.613,979,0.613,980,0.977,981,0.613,982,2.012,983,0.613,984,0.613,985,1.71,986,1.138,987,1.991,988,0.469,989,0.613,990,0.613,991,0.977,992,0.613,993,0.427,994,0.613,995,0.613,996,1.593,997,0.871,998,1.138,999,0.613,1000,0.613,1001,0.613,1002,1.22,1003,0.613,1004,1.991,1005,1.368,1006,0.526,1007,0.526,1008,0.526,1009,0.613,1010,0.613,1011,1.22,1012,1.991,1013,0.871,1014,0.613,1015,0.613,1016,0.613,1017,0.613,1018,0.613,1019,0.613,1020,0.613,1021,0.613,1022,0.613,1023,0.613,1024,0.613,1025,0.613,1026,0.526,1027,1.138,1028,0.613,1029,0.613,1030,0.526,1031,0.613,1032,0.613,1033,0.613,1034,0.613,1035,0.526,1036,0.613,1037,0.613,1038,0.613,1039,0.613,1040,0.613,1041,0.613,1042,0.613,1043,0.613,1044,0.526,1045,0.613,1046,0.613]],["t/942",[0,1.902,1,1.537,3,0.89,19,0.985,26,1.673,39,1.12,41,0.85,42,3.121,43,2.502,44,1.862,45,2.037,51,0.366,77,2.452,80,1.957,86,2.173,98,0.622,99,1.388,102,0.768,115,1.711,116,2.508,148,3.121,181,2.766,194,2.294,228,2.725,232,1.46,255,2.037,259,1.566,262,2.327,290,2.173,340,1.711,373,2.766,380,2.508,428,2.725,429,2.725,462,1.917,468,2.508,485,2.508,542,4.506,553,3.121,699,4.506,819,4.534,1011,2.996,1047,3.912,1048,3.36,1049,3.912,1050,3.912,1051,3.912,1052,3.912,1053,3.912,1054,5.246,1055,3.912,1056,5.246,1057,3.912,1058,3.912,1059,3.912]],["t/944",[11,1.659,12,1.321,38,2.559,39,0.87,51,0.343,80,1.364,100,2.811,101,2.811,103,2.979,104,2.269,107,2.036,115,2.149,146,1.659,181,2.149,217,1.687,255,3.165,264,2.157,275,2.036,706,4.655,793,3.15,851,3.764,871,3.764,872,4.221,873,4.221,874,4.221,875,4.221,876,3.764,1060,4.914,1061,4.914,1062,4.914,1063,4.221,1064,4.655,1065,4.914,1066,4.914]],["t/946",[0,1.923,3,0.601,6,1.349,12,1.387,19,1.007,22,1.11,24,3.961,39,1.06,51,0.371,52,1.571,80,1.661,85,3.167,98,0.635,100,1.849,104,1.492,194,1.748,199,1.987,200,1.71,264,1.419,348,2.22,369,2.378,373,2.328,434,2.328,465,3.708,779,4.887,797,2.563,799,4.887,906,4.572,925,3.433,952,4.572,953,3.062,955,3.433,957,3.062,958,5.14,960,4.572,962,3.433,966,4.077,1008,3.433,1030,3.433,1067,3.708,1068,3.998,1069,3.998,1070,3.998,1071,3.998,1072,3.998,1073,3.433]],["t/948",[0,2.048,3,0.533,6,2.152,12,0.77,17,1.737,19,1.661,20,1.468,22,1.685,24,3.434,30,1.639,39,0.869,41,0.77,47,1.656,51,0.247,77,1.468,98,0.563,104,1.831,107,1.468,114,2.714,115,1.55,136,3.144,146,1.656,200,1.576,204,1.808,207,0.893,232,1.323,250,1.639,264,1.258,358,2.272,360,2.724,369,2.108,395,2.145,434,2.655,439,3.612,469,2.714,471,1.846,524,2.404,532,3.044,559,2.268,575,1.468,592,1.968,636,3.416,638,1.737,690,2.108,783,3.144,790,2.272,797,2.272,886,3.757,915,2.108,973,3.044,1013,3.757,1067,2.468,1074,3.544,1075,3.044,1076,3.044,1077,3.757,1078,3.757,1079,4.882,1080,4.309,1081,4.905,1082,3.544,1083,3.544,1084,3.544,1085,3.544,1086,3.544,1087,3.544,1088,3.757,1089,3.044,1090,3.044,1091,3.044,1092,3.044,1093,3.044,1094,2.714,1095,2.714,1096,3.044,1097,3.044,1098,3.044]],["t/950",[0,2.281,3,0.54,6,1.212,12,0.78,20,1.487,22,0.997,24,3.179,39,0.876,41,0.78,43,2.01,47,1.671,51,0.251,77,1.487,104,1.848,107,1.487,114,2.75,115,2.164,146,1.212,194,2.477,196,2.136,200,1.59,204,1.82,207,0.904,232,1.34,264,1.274,325,1.66,358,2.302,360,1.994,369,2.136,373,2.164,395,2.477,434,2.67,439,3.37,471,1.87,473,2.289,524,1.76,543,2.501,575,1.487,580,2.501,592,1.994,636,3.945,684,2.75,690,2.136,783,3.173,790,2.302,795,2.75,797,2.302,809,2.501,861,2.501,966,2.75,1013,2.75,1067,2.501,1075,3.084,1076,3.084,1077,3.791,1078,3.791,1079,2.75,1088,3.791,1089,3.084,1090,3.084,1091,3.084,1092,3.084,1093,4.251,1094,2.75,1095,2.75,1096,4.251,1097,3.084,1098,3.084,1099,3.59,1100,3.59,1101,3.59,1102,3.59,1103,3.59,1104,3.59,1105,3.59,1106,4.949,1107,4.949,1108,4.949,1109,4.949,1110,3.59,1111,3.59,1112,3.59]],["t/952",[10,1.574,20,1.838,24,3.773,39,1.115,50,2.844,77,1.838,80,1.747,101,2.051,104,2.127,107,1.838,115,1.94,136,2.844,149,2.463,194,1.94,199,1.656,200,1.831,203,2.174,207,1.117,264,1.574,369,2.639,416,3.397,434,3.005,465,4.384,469,3.397,524,2.174,575,1.838,760,3.089,761,3.397,915,2.639,1063,3.81,1067,3.089,1077,4.364,1078,4.364,1080,4.821,1088,4.364,1094,3.397,1095,3.397,1113,4.436,1114,4.436,1115,4.436,1116,5.698,1117,5.698]],["t/954",[0,1.472,1,1.578,2,1.292,3,0.483,6,1.355,9,1.292,10,0.715,11,2.291,12,1.622,13,1.777,14,0.68,16,2.468,19,0.508,20,0.835,22,1.272,25,1.033,31,1.292,34,2.062,35,1.404,36,1.119,38,1.049,39,0.57,41,1.41,44,0.715,47,1.891,51,0.32,52,0.792,79,2.762,98,0.638,99,0.715,104,1.498,105,1.292,107,0.835,108,3.111,109,0.587,113,1.199,146,1.547,147,1.543,149,2.545,180,0.68,181,1.407,198,1.786,203,0.988,207,0.508,224,1.292,228,2.24,247,1.404,250,2.119,256,1.731,259,0.533,264,1.141,268,1.264,275,0.835,277,1.049,278,1.292,320,0.881,326,3.51,330,1.543,348,1.786,357,1.264,395,2.004,402,1.731,417,1.404,421,1.731,466,1.543,471,3.27,473,2.119,485,1.292,543,2.24,556,2.464,559,0.932,564,2.464,570,1.543,658,2.762,661,1.543,663,1.731,684,2.464,685,1.543,690,1.913,697,1.404,700,1.731,719,1.543,720,1.543,760,1.404,766,1.543,772,1.731,778,3.448,781,3.935,782,5.489,783,2.062,784,2.762,785,3.935,801,1.543,807,1.731,809,2.24,810,1.543,811,3.835,812,1.731,819,1.543,869,1.731,942,3.448,972,1.731,976,1.404,980,1.731,988,1.543,1044,1.731,1073,1.731,1118,1.292,1119,2.015,1120,2.015,1121,2.015,1122,1.543,1123,2.015,1124,2.015,1125,5.601,1126,2.015,1127,2.015,1128,2.015,1129,4.582,1130,2.015,1131,2.015,1132,3.216,1133,2.015,1134,3.448,1135,2.015,1136,3.216,1137,2.015,1138,2.015,1139,2.015,1140,3.216,1141,3.216,1142,2.015,1143,2.015,1144,2.015,1145,2.015,1146,2.015,1147,2.015,1148,2.015,1149,4.014,1150,3.216,1151,3.216,1152,2.015,1153,2.015,1154,2.015,1155,2.015,1156,1.731,1157,2.015,1158,2.015,1159,2.015,1160,3.216,1161,2.015,1162,3.216,1163,2.015,1164,3.216,1165,2.015,1166,2.015,1167,1.731,1168,2.015,1169,2.015]],["t/956",[3,0.891,20,2.455,41,1.288,102,1.335,790,3.799]],["t/958",[0,1.817,2,2.294,3,0.538,6,2.058,9,2.294,12,0.778,14,1.208,19,0.901,31,2.294,34,3.166,35,2.493,36,1.988,37,2.578,39,0.634,44,1.752,47,1.909,52,1.406,80,0.994,98,0.569,107,1.483,194,1.565,195,4.032,198,3.552,200,1.587,250,1.655,259,1.306,275,2.046,360,1.988,473,2.284,592,3.836,705,4.455,748,3.166,801,2.741,809,2.493,810,2.741,818,3.074,915,3.364,1079,2.741,1118,2.294,1170,4.241,1171,3.074,1172,4.241,1173,5.236,1174,3.579,1175,3.579,1176,2.493,1177,3.074,1178,4.241,1179,4.241,1180,4.241,1181,4.241,1182,4.241,1183,4.241,1184,3.579,1185,3.074,1186,4.241,1187,3.074,1188,3.074,1189,3.074,1190,3.074,1191,3.074,1192,3.074,1193,3.074,1194,3.074,1195,3.074,1196,3.074,1197,3.074,1198,3.074,1199,3.074,1200,3.074,1201,3.579]],["t/960",[0,1.271,3,0.714,6,2.194,10,1.404,12,1.381,16,1.829,19,0.663,25,2.042,26,1.046,34,1.687,36,1.461,37,2.305,39,0.466,41,0.86,42,1.565,44,1.687,47,1.913,51,0.332,52,1.034,61,3.64,80,0.73,98,0.946,102,0.777,109,0.767,194,1.151,195,4.053,198,3.43,200,1.698,204,1.271,207,0.663,217,1.319,223,2.26,259,1.257,268,1.034,275,2.19,320,1.73,348,1.461,353,1.833,357,1.555,360,2.197,371,1.687,404,2.26,468,1.687,471,2.475,473,1.217,553,1.565,592,3.61,705,4.527,748,3.388,915,1.565,953,2.015,993,1.833,1011,4.048,1118,1.687,1156,2.26,1170,2.26,1171,2.26,1172,4.082,1173,5.304,1177,2.26,1178,4.54,1179,4.082,1180,4.867,1181,4.54,1182,4.54,1183,4.54,1185,2.26,1186,4.082,1187,2.26,1188,2.26,1189,2.26,1190,2.26,1191,2.26,1192,2.26,1193,2.26,1194,2.26,1195,2.26,1196,2.26,1197,2.26,1198,2.26,1199,2.26,1200,3.397,1202,2.631,1203,2.631,1204,2.631,1205,2.631,1206,2.631,1207,2.631,1208,3.955,1209,3.955,1210,2.631,1211,2.631,1212,3.955,1213,2.631,1214,2.631,1215,2.631,1216,3.955,1217,2.631]],["t/962",[12,1.399,13,1.917,39,1.261,41,0.888,42,2.432,43,1.45,49,2.847,51,0.377,63,2.432,80,1.5,99,1.45,102,1.189,129,2.003,130,4.138,136,3.463,162,1.526,166,1.89,180,1.824,264,1.45,276,3.131,297,3.51,319,2.432,340,1.787,358,2.62,386,4.127,434,2.646,462,2.003,479,3.214,480,3.51,524,2.965,559,1.89,572,3.131,577,3.131,637,3.463,752,3.51,813,2.62,827,3.51,871,3.131,968,2.847,988,3.131,997,4.138,1035,3.51,1118,2.62,1176,2.847,1218,3.51,1219,4.127,1220,4.087,1221,4.087,1222,4.087,1223,4.087,1224,5.197,1225,4.087,1226,2.847,1227,3.51,1228,3.51,1229,4.087]],["t/964",[17,2.534,26,1.367,39,0.915,51,0.471,77,2.142,80,1.741,99,2.225,102,1.232,109,1.507,123,3.96,180,1.745,203,2.534,264,2.225,373,2.261,434,2.261,462,2.534,524,3.073,529,3.601,572,3.96,579,3.314,637,3.314,813,3.314,1176,3.601,1219,4.326]],["t/966",[3,1.012,39,1.134,45,2.398,51,0.407,80,1.278,86,3.24,98,1.07,99,2.559,102,1.323,109,1.342,180,2.397,264,1.634,290,2.557,358,3.74,434,2.551,685,3.526,813,3.74,957,3.526,968,3.206,1026,3.954,1176,3.206,1219,4.318,1230,5.158,1231,5.835,1232,4.604]],["t/968",[1,2.68,3,0.843,5,3.596,6,1.894,22,1.202,39,0.767,41,1.431,43,1.537,46,2.776,51,0.391,77,1.794,86,2.405,98,0.688,99,2.208,102,1.102,103,2.122,104,1.616,105,2.776,123,3.317,146,1.462,207,1.091,250,2.594,264,1.537,320,2.453,357,1.702,395,1.894,813,2.776,886,3.317,889,4.334,915,2.576,927,3.317,968,3.016,970,3.317,982,3.719,1002,3.317,1219,3.989,1233,4.33,1234,4.33,1235,4.33,1236,4.33,1237,4.33,1238,4.33,1239,4.33,1240,4.33,1241,4.33,1242,4.33,1243,4.33,1244,4.33,1245,4.33,1246,4.33,1247,4.33,1248,4.33,1249,4.33,1250,4.33]],["t/971",[0,1.682,3,0.949,14,1.316,19,1.488,22,1.453,39,1.167,43,2.407,44,1.857,47,2.132,49,2.715,51,0.46,59,2.985,77,1.615,98,0.62,102,1.161,108,2.165,116,2.499,129,1.91,148,2.319,172,3.348,191,3.645,193,2.715,199,1.455,217,1.453,232,2.358,254,3.348,273,2.715,357,1.532,373,1.705,462,1.91,473,1.802,475,2.499,479,2.319,508,1.802,519,3.355,553,3.114,559,1.802,575,1.615,763,3.348,985,3.348,997,2.985,1118,2.499,1134,3.348,1218,3.348,1219,3.788,1224,5.075,1226,2.715,1227,4.495,1228,4.495,1251,3.898,1252,3.898,1253,3.898,1254,3.898,1255,3.348,1256,5.234,1257,3.898,1258,5.234,1259,3.898,1260,3.898,1261,3.898,1262,3.898]],["t/973",[6,2.024,10,2.127,13,1.705,14,1.622,47,1.622,51,0.335,102,0.944,129,2.355,199,1.794,232,2.627,291,4.27,439,2.859,508,2.223,575,1.991,638,2.938,758,4.128,793,4.188,889,4.175,890,3.681,956,3.681,1064,3.681,1230,3.681,1263,2.669,1264,3.347,1265,4.128,1266,4.128,1267,4.128,1268,4.128,1269,4.128,1270,5.149,1271,3.681,1272,4.128,1273,4.128]],["t/975",[12,1.113,43,1.817,50,3.283,78,2.013,85,3.047,102,1.006,115,2.726,116,3.283,121,3.567,213,2.667,638,3.294,876,4.775,897,4.775,928,3.923,1167,4.399,1263,2.844,1274,4.399,1275,5.121,1276,5.121,1277,5.121,1278,5.121,1279,6.234,1280,5.121,1281,5.121,1282,5.121,1283,5.121,1284,5.121,1285,5.121,1286,5.121]],["t/977",[0,2.083,4,3.028,13,2.3,41,1.026,43,1.676,45,2.46,47,2.476,51,0.33,102,0.928,129,2.315,148,2.81,199,1.763,232,2.537,244,3.29,473,2.184,482,3.028,508,2.184,559,2.184,575,1.957,638,2.315,743,3.618,885,3.618,918,3.618,993,3.29,1002,3.618,1226,3.29,1263,2.623,1264,3.29,1287,3.618,1288,4.723,1289,5.929,1290,4.723,1291,4.723,1292,4.723,1293,4.723,1294,4.723,1295,4.723,1296,4.723]],["t/979",[6,1.889,10,1.53,13,1.986,47,2.097,51,0.301,80,1.197,102,0.847,103,2.114,104,1.61,199,1.61,217,1.197,232,2.741,241,2.566,291,4.052,340,1.886,373,1.886,439,2.566,468,2.765,508,1.995,519,2.765,559,1.995,575,1.787,638,3.338,793,3.982,847,3.004,861,3.004,889,3.897,890,3.303,956,3.303,976,4.326,1064,3.303,1230,3.303,1263,2.395,1264,3.004,1266,3.704,1267,3.704,1268,3.704,1269,3.704,1270,4.806,1271,3.303,1272,3.704,1273,3.704,1287,3.303,1297,4.313,1298,4.806,1299,4.806]],["t/981",[13,1.768,30,2.304,80,1.383,103,2.441,104,1.859,115,2.178,129,2.441,199,1.859,217,1.701,232,2.655,241,2.964,373,2.178,475,3.193,508,2.304,519,3.193,559,2.304,575,2.064,637,3.193,638,3.254,743,3.815,847,3.47,861,3.47,976,4.624,1263,2.767,1264,3.47,1265,4.278,1271,3.815,1298,5.264,1299,5.264,1300,4.981]],["t/983",[0,2.171,3,0.811,4,2.977,5,2.102,14,1.107,19,0.826,20,1.358,33,1.707,36,1.821,39,0.58,41,0.712,43,2.525,44,1.914,47,1.107,51,0.324,98,0.521,102,0.912,122,1.821,149,1.821,156,2.816,162,1.734,193,2.283,194,1.434,199,1.224,232,1.224,244,3.235,259,0.867,325,2.148,340,1.434,348,2.58,371,2.102,373,2.892,395,1.434,462,1.607,473,3.058,482,2.102,508,1.516,543,2.283,553,3.685,575,1.358,580,2.283,592,2.58,638,2.643,748,2.102,795,2.511,833,2.816,885,4.494,897,2.511,918,2.511,927,2.511,928,2.511,929,2.816,961,2.816,970,2.511,975,2.816,991,2.816,993,3.235,1048,2.816,1122,2.511,1255,2.816,1263,1.821,1287,2.511,1301,3.278,1302,3.278,1303,3.278,1304,3.278,1305,3.278,1306,3.278,1307,3.278,1308,3.278,1309,3.278,1310,3.278,1311,3.278,1312,3.278,1313,3.278,1314,3.278,1315,3.278,1316,4.645,1317,3.278,1318,3.278,1319,3.278,1320,3.278,1321,3.278,1322,4.645,1323,3.278,1324,3.278,1325,3.278,1326,5.394,1327,3.278,1328,4.645,1329,3.278,1330,3.278,1331,4.645,1332,3.278,1333,4.645,1334,3.278]],["t/985",[43,2.519,44,2.069,1226,4.062,1263,3.239,1274,5.009,1335,5.832,1336,5.832]],["t/987",[0,2.301,3,0.716,12,1.035,17,2.335,19,1.639,47,1.608,51,0.332,78,1.872,95,2.203,195,3.547,203,2.922,207,1.2,213,3.105,317,4.566,372,3.318,415,4.092,462,2.335,475,3.054,529,3.318,580,3.318,582,4.092,708,3.649,756,4.092,1005,5.121,1006,4.092,1007,4.092,1080,3.649,1122,3.649,1337,6.507,1338,4.764,1339,6.507,1340,4.764,1341,4.764,1342,4.764,1343,4.764]]],"invertedIndex":[["",{"_index":12,"t":{"878":{"position":[[119,1],[559,4]]},"880":{"position":[[92,1],[462,1],[496,1]]},"894":{"position":[[209,1]]},"896":{"position":[[1269,1],[2550,1],[2571,2]]},"898":{"position":[[202,1],[317,1],[526,1],[777,1],[953,1]]},"906":{"position":[[674,2]]},"908":{"position":[[366,1],[396,1]]},"912":{"position":[[39,1],[1414,1],[3059,1],[3080,1],[3140,1],[3191,1],[3193,1],[3236,1],[3238,1],[3261,1],[3284,1],[3311,1],[3331,1],[3361,1],[3493,1],[4386,1],[4407,1],[4464,1],[4520,1],[4522,1],[4560,1],[4562,1],[4578,1],[4599,1],[4624,1],[4644,1],[4665,1],[4693,1],[4770,1]]},"914":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"920":{"position":[[213,1],[238,1],[259,1]]},"922":{"position":[[400,2],[458,2]]},"928":{"position":[[269,1],[304,1],[340,1],[376,1],[411,1],[433,1],[456,1],[473,1],[491,1],[627,4],[1264,1],[1465,1],[1467,1],[1679,2],[1778,1],[1813,1],[1849,1],[1871,1],[1894,1],[1911,1],[1934,1],[1952,1]]},"936":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[312,1],[320,4],[325,1],[330,1],[570,1],[697,1],[706,1],[728,1],[730,1]]},"938":{"position":[[83,1],[85,1]]},"940":{"position":[[71,2],[796,1],[1237,1],[1360,3],[1711,4],[1716,2],[1825,1],[1906,1],[1994,1],[2456,2],[2673,1],[2675,1],[2753,1],[2755,1],[2859,1],[3380,1],[3519,1],[3630,1],[4576,2],[6999,2],[7068,1],[7514,2],[8156,1],[8812,1],[10630,1],[10779,1],[10843,1],[10963,1],[10994,1],[11983,1],[12162,1],[12356,1],[12438,1],[12504,1],[13157,1],[13509,2]]},"944":{"position":[[147,1],[149,1]]},"946":{"position":[[215,1],[241,1],[278,1],[343,1]]},"948":{"position":[[895,1]]},"950":{"position":[[750,1]]},"954":{"position":[[242,1],[272,4],[317,1],[513,1],[557,1],[629,1],[640,1],[655,1],[796,1],[879,3],[912,1],[923,1],[925,1],[969,1],[988,1],[1050,1],[1282,1],[1468,1],[1644,1],[1737,1],[1803,1],[1901,1],[2080,1],[2161,1],[2266,2],[2269,3],[2273,5],[2279,1],[2396,1],[2398,1],[2494,1],[2582,1],[2612,1],[2656,4],[2665,2],[3338,1],[3419,1],[3448,2],[3451,2],[3484,1],[3496,2],[3523,2],[3556,5],[3566,1]]},"958":{"position":[[589,2]]},"960":{"position":[[154,1],[348,1],[487,2],[569,1],[756,2],[857,1],[1068,2],[1281,2]]},"962":{"position":[[752,3],[789,3],[827,3],[831,3]]},"975":{"position":[[234,1]]},"987":{"position":[[316,1]]}}}],["0",{"_index":905,"t":{"940":{"position":[[1430,1],[4836,1],[4849,1]]}}}],["0.0.0.0:4180",{"_index":620,"t":{"912":{"position":[[4772,14]]}}}],["0.001",{"_index":1110,"t":{"950":{"position":[[884,5]]}}}],["0400",{"_index":1078,"t":{"948":{"position":[[241,5],[1083,4]]},"950":{"position":[[122,5],[1171,4]]},"952":{"position":[[267,5],[593,4]]}}}],["1",{"_index":371,"t":{"896":{"position":[[2289,1]]},"928":{"position":[[1630,2]]},"940":{"position":[[1475,3],[13009,4]]},"960":{"position":[[422,2]]},"983":{"position":[[1560,1]]}}}],["1.5h",{"_index":1282,"t":{"975":{"position":[[236,5]]}}}],["100",{"_index":969,"t":{"940":{"position":[[4932,3]]}}}],["12",{"_index":1112,"t":{"950":{"position":[[1048,2]]}}}],["12.x",{"_index":477,"t":{"906":{"position":[[58,5],[128,4]]}}}],["123456.apps.googleusercontent.com",{"_index":891,"t":{"940":{"position":[[592,35]]}}}],["127.0.0.1:4180",{"_index":761,"t":{"928":{"position":[[664,14]]},"940":{"position":[[4336,16]]},"952":{"position":[[732,14]]}}}],["128",{"_index":237,"t":{"892":{"position":[[383,3],[434,3]]}}}],["168h0m0",{"_index":899,"t":{"940":{"position":[[1039,8]]}}}],["19/mar/2015:17:20:19",{"_index":1077,"t":{"948":{"position":[[218,21],[1061,20]]},"950":{"position":[[99,21],[1149,20]]},"952":{"position":[[244,21],[571,20]]}}}],["192",{"_index":865,"t":{"936":{"position":[[644,3]]}}}],["1h",{"_index":333,"t":{"896":{"position":[[919,4]]}}}],["1s",{"_index":931,"t":{"940":{"position":[[2571,4]]}}}],["2",{"_index":353,"t":{"896":{"position":[[1510,1]]},"912":{"position":[[3458,2]]},"940":{"position":[[12480,3],[13085,4]]},"960":{"position":[[716,2]]}}}],["2.0",{"_index":506,"t":{"908":{"position":[[213,3]]},"912":{"position":[[35,3]]}}}],["20",{"_index":944,"t":{"940":{"position":[[3833,2]]}}}],["200",{"_index":795,"t":{"930":{"position":[[223,3],[336,3]]},"950":{"position":[[1097,3]]},"983":{"position":[[1276,3]]}}}],["202",{"_index":810,"t":{"930":{"position":[[868,3]]},"954":{"position":[[131,3]]},"958":{"position":[[162,3]]}}}],["2048",{"_index":642,"t":{"914":{"position":[[1052,4]]}}}],["24",{"_index":863,"t":{"936":{"position":[[630,2]]}}}],["2>&1",{"_index":90,"t":{"880":{"position":[[491,4]]}}}],["2>/dev/nul",{"_index":846,"t":{"936":{"position":[[227,11]]}}}],["2h45m",{"_index":1283,"t":{"975":{"position":[[245,8]]}}}],["3",{"_index":398,"t":{"898":{"position":[[1119,2]]},"904":{"position":[[1141,4]]}}}],["3/4",{"_index":1033,"t":{"940":{"position":[[12782,3]]}}}],["30",{"_index":788,"t":{"928":{"position":[[1652,3],[1675,3]]}}}],["300m",{"_index":1281,"t":{"975":{"position":[[225,8]]}}}],["315360000",{"_index":1191,"t":{"958":{"position":[[965,9]]},"960":{"position":[[1722,9]]}}}],["32",{"_index":854,"t":{"936":{"position":[[309,2],[578,2],[708,2]]}}}],["3650",{"_index":654,"t":{"914":{"position":[[1175,4]]}}}],["401",{"_index":34,"t":{"878":{"position":[[403,3]]},"930":{"position":[[895,3]]},"954":{"position":[[158,3],[965,3]]},"958":{"position":[[189,3],[1254,4]]},"960":{"position":[[897,3]]}}}],["403",{"_index":1201,"t":{"958":{"position":[[1259,4]]}}}],["4180",{"_index":767,"t":{"928":{"position":[[979,5]]}}}],["443",{"_index":766,"t":{"928":{"position":[[909,3],[1273,3]]},"940":{"position":[[4421,6],[13356,3]]},"954":{"position":[[251,3]]}}}],["4kb",{"_index":1132,"t":{"954":{"position":[[1733,3],[1938,4]]}}}],["5",{"_index":366,"t":{"896":{"position":[[1988,1]]}}}],["6",{"_index":400,"t":{"898":{"position":[[1155,2]]}}}],["7",{"_index":965,"t":{"940":{"position":[[4765,1]]}}}],["74.125.224.72",{"_index":1089,"t":{"948":{"position":[[808,13]]},"950":{"position":[[663,13]]}}}],["80",{"_index":1043,"t":{"940":{"position":[[13342,3]]}}}],["994",{"_index":481,"t":{"906":{"position":[[138,5]]}}}],["_",{"_index":851,"t":{"936":{"position":[[279,3],[327,2],[732,3]]},"938":{"position":[[104,4]]},"944":{"position":[[168,4]]}}}],["__host",{"_index":902,"t":{"940":{"position":[[1216,7]]}}}],["__secur",{"_index":903,"t":{"940":{"position":[[1228,8]]}}}],["_oauth2_proxi",{"_index":235,"t":{"892":{"position":[[338,14]]},"940":{"position":[[1266,15]]}}}],["_oauth2_proxy_1",{"_index":1169,"t":{"954":{"position":[[3951,18]]}}}],["abov",{"_index":469,"t":{"904":{"position":[[1127,5]]},"948":{"position":[[1324,5]]},"952":{"position":[[45,5]]}}}],["absent",{"_index":945,"t":{"940":{"position":[[3839,6]]}}}],["accept",{"_index":31,"t":{"878":{"position":[[363,7]]},"930":{"position":[[872,8]]},"940":{"position":[[9508,8]]},"954":{"position":[[135,8]]},"958":{"position":[[166,8]]}}}],["access",{"_index":357,"t":{"896":{"position":[[1746,7]]},"898":{"position":[[447,6],[622,7]]},"902":{"position":[[296,7],[924,6],[999,6],[1036,6],[1186,6],[1217,6],[1306,6]]},"904":{"position":[[40,6],[1067,6]]},"912":{"position":[[2344,6],[2403,7],[2977,6]]},"914":{"position":[[305,7],[2650,6],[3170,10]]},"920":{"position":[[528,6],[638,6],[673,6]]},"932":{"position":[[214,9]]},"940":{"position":[[3333,6],[3758,6],[3805,6],[5959,6],[6029,6],[6113,6],[6915,6],[7743,6],[10065,6],[10094,6],[12262,6]]},"954":{"position":[[1306,6],[1447,6]]},"960":{"position":[[2015,6],[2191,6]]},"968":{"position":[[349,6]]},"971":{"position":[[101,6]]}}}],["access_by_lua_block",{"_index":1161,"t":{"954":{"position":[[3399,19]]}}}],["access_token",{"_index":979,"t":{"940":{"position":[[5988,12]]}}}],["accompani",{"_index":422,"t":{"902":{"position":[[382,11]]}}}],["account",{"_index":334,"t":{"896":{"position":[[977,7],[1091,8],[2388,7]]},"912":{"position":[[1641,8],[3747,8]]},"914":{"position":[[260,8],[737,7]]},"920":{"position":[[204,7],[487,7]]},"940":{"position":[[4038,7],[4082,7]]}}}],["acr",{"_index":880,"t":{"940":{"position":[[34,3]]}}}],["activ",{"_index":379,"t":{"898":{"position":[[66,6],[592,6]]}}}],["actual",{"_index":720,"t":{"918":{"position":[[221,6]]},"920":{"position":[[124,6]]},"954":{"position":[[3721,6]]}}}],["ad",{"_index":45,"t":{"878":{"position":[[637,5]]},"894":{"position":[[289,2]]},"910":{"position":[[4,6],[49,2]]},"932":{"position":[[939,5]]},"940":{"position":[[9395,2],[10110,5]]},"942":{"position":[[750,6]]},"966":{"position":[[7,6]]},"977":{"position":[[79,5]]}}}],["add",{"_index":166,"t":{"886":{"position":[[148,3]]},"898":{"position":[[0,3],[809,3],[979,3]]},"906":{"position":[[223,3],[431,3]]},"910":{"position":[[74,3]]},"912":{"position":[[605,3],[1296,4],[1989,3],[2336,3],[2567,3]]},"920":{"position":[[0,3]]},"926":{"position":[[80,3]]},"936":{"position":[[332,3]]},"940":{"position":[[6089,4],[13434,3]]},"962":{"position":[[432,3]]}}}],["add_head",{"_index":778,"t":{"928":{"position":[[1402,10]]},"954":{"position":[[1608,10],[2496,10],[2539,10]]}}}],["addedto",{"_index":1256,"t":{"971":{"position":[[652,7],[887,7]]}}}],["addit",{"_index":417,"t":{"902":{"position":[[206,10],[775,8]]},"912":{"position":[[2066,10]]},"920":{"position":[[559,10]]},"954":{"position":[[1968,10]]}}}],["addition",{"_index":946,"t":{"940":{"position":[[4130,12]]}}}],["addr>:/oauth2/callback",{"_index":726,"t":{"918":{"position":[[611,24]]}}}],["headers.default",{"_index":1295,"t":{"977":{"position":[[456,16]]}}}],["headers/pass_user_head",{"_index":1242,"t":{"968":{"position":[[390,25]]}}}],["headers/skip_auth_strip_head",{"_index":1249,"t":{"968":{"position":[[680,31]]}}}],["headershould",{"_index":1290,"t":{"977":{"position":[[346,12]]}}}],["headervalu",{"_index":1264,"t":{"973":{"position":[[13,12]]},"977":{"position":[[540,13]]},"979":{"position":[[21,11]]},"981":{"position":[[26,12]]}}}],["health",{"_index":800,"t":{"930":{"position":[[384,6]]},"940":{"position":[[7413,6],[7500,6]]}}}],["healthcheck",{"_index":936,"t":{"940":{"position":[[2790,12]]}}}],["here",{"_index":627,"t":{"914":{"position":[[344,5]]}}}],["hex",{"_index":240,"t":{"892":{"position":[[406,3]]}}}],["histor",{"_index":202,"t":{"890":{"position":[[103,13]]}}}],["hit",{"_index":313,"t":{"896":{"position":[[404,3]]},"898":{"position":[[668,3],[1023,7]]}}}],["hmac",{"_index":1339,"t":{"987":{"position":[[142,6],[361,4],[493,4]]}}}],["homepag",{"_index":716,"t":{"918":{"position":[[57,9]]}}}],["host",{"_index":395,"t":{"898":{"position":[[870,4]]},"906":{"position":[[185,7],[1053,6]]},"918":{"position":[[606,4]]},"922":{"position":[[47,4],[495,4],[560,4],[630,4]]},"928":{"position":[[1520,4],[1525,6]]},"940":{"position":[[914,4],[6673,4],[6707,4]]},"948":{"position":[[927,4],[960,4]]},"950":{"position":[[443,9],[782,4],[815,4]]},"954":{"position":[[370,4],[375,6],[708,4],[713,6]]},"968":{"position":[[162,4]]},"983":{"position":[[1636,4]]}}}],["host(`a",{"_index":1179,"t":{"958":{"position":[[342,8],[537,8]]},"960":{"position":[[431,8],[725,8],[1012,8]]}}}],["host(`oauth.example.com",{"_index":1213,"t":{"960":{"position":[[1254,26]]}}}],["host>/api/v3",{"_index":445,"t":{"902":{"position":[[1953,13]]}}}],["host>/auth/realms//login/oauth/access_token",{"_index":444,"t":{"902":{"position":[[1878,31]]}}}],["host>/login/oauth/author",{"_index":442,"t":{"902":{"position":[[1808,28]]}}}],["host>/oauth2/callback",{"_index":734,"t":{"922":{"position":[[144,21],[298,22]]}}}],["host_head",{"_index":1099,"t":{"950":{"position":[[128,13]]}}}],["hostnam",{"_index":692,"t":{"914":{"position":[[3220,9]]},"918":{"position":[[228,8]]},"920":{"position":[[131,8]]}}}],["hosts.thi",{"_index":1317,"t":{"983":{"position":[[909,10]]}}}],["hour",{"_index":377,"t":{"896":{"position":[[2566,4]]}}}],["hst",{"_index":771,"t":{"928":{"position":[[1251,5]]}}}],["htaccess",{"_index":984,"t":{"940":{"position":[[6568,8]]}}}],["html",{"_index":912,"t":{"940":{"position":[[1764,4],[2647,6],[2727,6]]}}}],["htpasswd",{"_index":913,"t":{"940":{"position":[[1789,8],[1853,8],[4109,8],[4166,8],[4210,8]]}}}],["http",{"_index":194,"t":{"888":{"position":[[70,4]]},"922":{"position":[[26,9]]},"928":{"position":[[821,4],[854,4]]},"940":{"position":[[524,4],[1597,6],[2584,5],[2603,5],[4246,4],[4323,4],[4355,5],[4407,5],[6284,4],[10284,4],[11579,5],[11695,5],[11994,4],[12729,4],[12902,4],[13350,5],[13364,6]]},"942":{"position":[[151,4],[160,5]]},"946":{"position":[[439,4]]},"950":{"position":[[0,4],[1105,4],[1252,4]]},"952":{"position":[[713,5]]},"958":{"position":[[310,5]]},"960":{"position":[[391,5]]},"983":{"position":[[903,5]]}}}],["http(",{"_index":1048,"t":{"942":{"position":[[91,7]]},"983":{"position":[[482,7]]}}}],["http/1.0",{"_index":1092,"t":{"948":{"position":[[982,8]]},"950":{"position":[[837,8]]}}}],["http/1.1",{"_index":1101,"t":{"950":{"position":[[171,8]]}}}],["http/1.1x",{"_index":822,"t":{"932":{"position":[[623,9]]}}}],["http://0.0.0.0:8080\"]email_domain",{"_index":614,"t":{"912":{"position":[[4524,35]]}}}],["http://127.0.0.1:4180",{"_index":556,"t":{"912":{"position":[[1360,21]]},"928":{"position":[[1480,22]]},"954":{"position":[[330,22],[668,22]]}}}],["http://127.0.0.1:4180/oauth2/callback",{"_index":547,"t":{"912":{"position":[[1067,37]]},"914":{"position":[[3623,37]]}}}],["http://127.0.0.1:4180/oauth2/callback'nam",{"_index":537,"t":{"912":{"position":[[722,44]]}}}],["http://127.0.0.1:4180/static",{"_index":557,"t":{"912":{"position":[[1385,28]]}}}],["http://127.0.0.1:5556",{"_index":701,"t":{"914":{"position":[[3678,21]]}}}],["http://127.0.0.1:5556/author",{"_index":702,"t":{"914":{"position":[[3732,31]]}}}],["http://127.0.0.1:5556/dex",{"_index":548,"t":{"912":{"position":[[1121,25]]}}}],["http://127.0.0.1:5556/key",{"_index":704,"t":{"914":{"position":[[3819,26]]}}}],["http://127.0.0.1:5556/token",{"_index":703,"t":{"914":{"position":[[3776,27]]}}}],["http://127.0.0.1:8080",{"_index":1050,"t":{"942":{"position":[[218,22]]}}}],["http://127.0.0.1:8080/some/path",{"_index":1051,"t":{"942":{"position":[[361,32]]}}}],["http://172.16.0.1:4180",{"_index":1188,"t":{"958":{"position":[[876,22]]},"960":{"position":[[1633,22]]}}}],["http://172.16.0.2:7555",{"_index":1187,"t":{"958":{"position":[[808,22]]},"960":{"position":[[1493,22]]}}}],["http://172.16.0.3:7555",{"_index":1214,"t":{"960":{"position":[[1565,22]]}}}],["http://[oauth2",{"_index":1054,"t":{"942":{"position":[[608,14],[963,14]]}}}],["http://]:/sign_in",{"_index":990,"t":{"940":{"position":[[7627,18]]}}}],["oauth2_proxy_",{"_index":1060,"t":{"944":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":1065,"t":{"944":{"position":[[425,27]]}}}],["oauth2_proxy_email_domain",{"_index":1066,"t":{"944":{"position":[[489,27]]}}}],["oauth2_proxy_jwt_key",{"_index":660,"t":{"914":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":686,"t":{"914":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":901,"t":{"940":{"position":[[1154,11]]}}}],["oauthproxy.go",{"_index":1341,"t":{"987":{"position":[[227,14]]}}}],["obtain",{"_index":1039,"t":{"940":{"position":[[12869,9]]}}}],["occur",{"_index":1115,"t":{"952":{"position":[[187,5]]}}}],["oidc",{"_index":498,"t":{"906":{"position":[[1126,4]]},"912":{"position":[[244,6],[374,4],[965,4],[996,4],[1105,4],[1549,4]]},"914":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"932":{"position":[[481,4],[667,4],[780,4],[889,4]]},"940":{"position":[[5341,4],[5453,4],[5498,4],[5608,4],[5699,4],[5720,4],[5770,4],[5799,4],[5829,4],[5876,4],[5907,4],[6193,4],[6947,4],[11256,4],[11283,4],[11340,4],[13080,4]]}}}],["oidc\"redirect_url",{"_index":583,"t":{"912":{"position":[[3061,18],[4388,18]]}}}],["oidc_issuer_url",{"_index":593,"t":{"912":{"position":[[3372,15]]}}}],["ok",{"_index":94,"t":{"880":{"position":[[537,2]]},"930":{"position":[[227,2],[340,2]]}}}],["okoauth2",{"_index":92,"t":{"880":{"position":[[503,8]]}}}],["okta",{"_index":523,"t":{"912":{"position":[[315,5],[1526,5],[1567,5],[1612,4],[2465,4],[3708,4],[3834,4],[4309,4],[4482,4]]}}}],["old",{"_index":964,"t":{"940":{"position":[[4751,3],[4811,3]]}}}],["omit",{"_index":1045,"t":{"940":{"position":[[13392,4]]}}}],["on",{"_index":30,"t":{"878":{"position":[[354,3]]},"884":{"position":[[674,4]]},"888":{"position":[[187,3]]},"914":{"position":[[2206,3]]},"920":{"position":[[683,3]]},"924":{"position":[[156,3]]},"936":{"position":[[39,3]]},"940":{"position":[[347,4],[7900,4],[11201,3]]},"948":{"position":[[298,3]]},"981":{"position":[[96,3]]}}}],["onc",{"_index":175,"t":{"886":{"position":[[421,4]]},"896":{"position":[[2558,4]]},"914":{"position":[[2843,4]]}}}],["open",{"_index":131,"t":{"884":{"position":[[113,4]]},"896":{"position":[[460,4]]},"912":{"position":[[106,4]]}}}],["openid",{"_index":284,"t":{"894":{"position":[[292,6],[544,6]]},"906":{"position":[[276,7]]},"912":{"position":[[0,6],[220,6],[2628,6]]},"914":{"position":[[862,6],[906,6]]},"940":{"position":[[5635,6]]}}}],["openssl",{"_index":645,"t":{"914":{"position":[[1104,7]]},"936":{"position":[[78,7],[288,7]]}}}],["option",{"_index":102,"t":{"880":{"position":[[663,8]]},"896":{"position":[[1062,11]]},"902":{"position":[[276,8],[362,7]]},"904":{"position":[[944,8]]},"906":{"position":[[905,7]]},"912":{"position":[[1721,10],[2023,6],[2452,8]]},"914":{"position":[[1540,8],[2132,7],[3495,7]]},"918":{"position":[[407,8],[530,7],[706,7]]},"920":{"position":[[344,8],[584,7]]},"922":{"position":[[223,7]]},"932":{"position":[[985,6]]},"934":{"position":[[48,8],[148,7]]},"938":{"position":[[169,6]]},"940":{"position":[[0,6],[52,9],[803,8],[1306,8],[1537,11],[10582,7],[12642,10],[12945,6],[13122,7],[13559,7]]},"942":{"position":[[61,6]]},"956":{"position":[[5,6],[37,6]]},"960":{"position":[[175,7],[2325,6]]},"962":{"position":[[164,7],[317,8],[373,7]]},"964":{"position":[[218,7],[263,7]]},"966":{"position":[[37,7],[256,7],[379,7],[437,7]]},"968":{"position":[[736,7],[844,7]]},"971":{"position":[[53,8],[77,7],[222,7]]},"973":{"position":[[246,8]]},"975":{"position":[[180,8]]},"977":{"position":[[416,6]]},"979":{"position":[[467,8]]},"983":{"position":[[920,6],[1374,6]]}}}],["order",{"_index":832,"t":{"934":{"position":[[109,5]]}}}],["org",{"_index":425,"t":{"902":{"position":[[534,3],[635,7],[795,4],[1559,3]]},"940":{"position":[[2981,3],[3467,3]]}}}],["organ",{"_index":390,"t":{"898":{"position":[[430,13]]},"902":{"position":[[259,12],[580,12],[713,12]]}}}],["organis",{"_index":426,"t":{"902":{"position":[[678,12]]},"940":{"position":[[3027,12]]}}}],["orgname/repo",{"_index":435,"t":{"902":{"position":[[1150,12]]},"940":{"position":[[3225,12]]}}}],["orgname/repo=accesslevel",{"_index":943,"t":{"940":{"position":[[3732,25]]}}}],["origin",{"_index":322,"t":{"896":{"position":[[628,7]]},"912":{"position":[[146,10]]}}}],["os,base64",{"_index":840,"t":{"936":{"position":[[125,10]]}}}],["otherwis",{"_index":567,"t":{"912":{"position":[[1903,10]]},"932":{"position":[[992,9]]}}}],["out",{"_index":571,"t":{"912":{"position":[[2125,3],[2318,3]]},"914":{"position":[[1156,3]]},"930":{"position":[[461,3]]},"932":{"position":[[17,4],[325,3]]}}}],["output",{"_index":1067,"t":{"946":{"position":[[34,6],[81,6]]},"948":{"position":[[142,6]]},"950":{"position":[[23,6]]},"952":{"position":[[80,6]]}}}],["outsid",{"_index":1063,"t":{"944":{"position":[[326,7]]},"952":{"position":[[193,7]]}}}],["overrid",{"_index":512,"t":{"910":{"position":[[183,8]]},"940":{"position":[[7249,8],[8463,8]]}}}],["override_speci",{"_index":870,"t":{"936":{"position":[[711,16]]}}}],["overwrit",{"_index":834,"t":{"934":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":746,"t":{"926":{"position":[[37,7]]}}}],["pad",{"_index":243,"t":{"892":{"position":[[479,9]]}}}],["page",{"_index":386,"t":{"898":{"position":[[332,4],[551,4],[792,4],[962,4]]},"930":{"position":[[426,5],[465,4]]},"932":{"position":[[329,4]]},"940":{"position":[[7322,4],[11438,4]]},"962":{"position":[[12,4],[143,4],[190,4],[331,4]]}}}],["pair",{"_index":245,"t":{"892":{"position":[[533,4]]},"940":{"position":[[2256,5]]}}}],["pane",{"_index":301,"t":{"896":{"position":[[237,5],[280,5],[321,5],[428,5]]}}}],["paramet",{"_index":819,"t":{"932":{"position":[[364,10]]},"942":{"position":[[258,10],[1096,10],[1121,9]]},"954":{"position":[[3773,10]]}}}],["part",{"_index":1134,"t":{"954":{"position":[[1796,6],[2177,4],[2455,4]]},"971":{"position":[[149,4]]}}}],["particularli",{"_index":1062,"t":{"944":{"position":[[286,12]]}}}],["pass",{"_index":1,"t":{"878":{"position":[[12,7]]},"888":{"position":[[276,6]]},"896":{"position":[[2104,4]]},"898":{"position":[[1292,6]]},"912":{"position":[[1795,6]]},"914":{"position":[[2283,4]]},"918":{"position":[[388,4]]},"920":{"position":[[325,4]]},"922":{"position":[[204,4]]},"940":{"position":[[512,7],[5954,4],[5977,4],[6157,4],[6188,4],[6258,4],[6279,4],[6482,7],[6620,4],[6642,4],[6668,4],[6690,4],[6738,4],[6761,4],[10060,4]]},"942":{"position":[[71,4]]},"954":{"position":[[990,4],[1301,4],[1330,4]]},"968":{"position":[[157,4],[312,4],[344,4],[380,4],[416,4]]}}}],["passhosthead",{"_index":1331,"t":{"983":{"position":[[1570,14],[1590,14]]}}}],["password",{"_index":890,"t":{"940":{"position":[[471,8],[491,8],[1827,8],[8385,8],[8407,9],[8476,8],[8532,8],[8563,9],[8623,9],[8653,8]]},"973":{"position":[[529,8]]},"979":{"position":[[750,8]]}}}],["password/basic_auth_password",{"_index":1248,"t":{"968":{"position":[[635,28]]}}}],["patch",{"_index":186,"t":{"886":{"position":[[601,7]]}}}],["path",{"_index":373,"t":{"896":{"position":[[2349,4]]},"930":{"position":[[279,6]]},"940":{"position":[[753,4],[1291,4],[1322,4],[1749,4],[2369,4],[2405,5],[2463,5],[4062,4],[5113,4],[7075,5],[7356,4],[7577,4],[10707,5],[10845,5],[11893,4],[11940,4],[12040,5],[12134,4]]},"942":{"position":[[501,5],[703,4],[852,4],[1256,4]]},"946":{"position":[[854,4],[880,6]]},"950":{"position":[[162,8],[1014,4]]},"964":{"position":[[123,4]]},"971":{"position":[[521,4]]},"979":{"position":[[300,4]]},"981":{"position":[[340,4]]},"983":{"position":[[135,4],[160,5],[291,4],[303,4],[402,5],[534,5],[713,4]]}}}],["path.eg",{"_index":1307,"t":{"983":{"position":[[592,8]]}}}],["path/to/cert.key",{"_index":777,"t":{"928":{"position":[[1383,18]]}}}],["path/to/cert.pem",{"_index":775,"t":{"928":{"position":[[1344,18]]}}}],["path/to/existing/config.cfg",{"_index":1231,"t":{"966":{"position":[[204,29],[558,29]]}}}],["path/to/new/config.yaml",{"_index":1232,"t":{"966":{"position":[[523,25]]}}}],["path/to/sit",{"_index":1145,"t":{"954":{"position":[[2623,15]]}}}],["path_regex",{"_index":1015,"t":{"940":{"position":[[10880,10]]}}}],["pathprefix",{"_index":1208,"t":{"960":{"position":[[490,16],[1284,16]]}}}],["pathprefix(`/no",{"_index":1210,"t":{"960":{"position":[[759,15]]}}}],["pathprefix(`/oauth2",{"_index":1185,"t":{"958":{"position":[[592,23]]},"960":{"position":[[1071,23]]}}}],["pem",{"_index":641,"t":{"914":{"position":[[1023,4],[2383,3],[2528,3]]},"940":{"position":[[4968,3],[5145,3]]}}}],["per",{"_index":745,"t":{"924":{"position":[[166,3]]},"940":{"position":[[352,3]]}}}],["perform",{"_index":525,"t":{"912":{"position":[[397,7],[1573,7]]}}}],["period",{"_index":928,"t":{"940":{"position":[[2505,6]]},"975":{"position":[[81,6]]},"983":{"position":[[1463,6]]}}}],["permiss",{"_index":370,"t":{"896":{"position":[[2239,11]]},"898":{"position":[[538,12],[703,12]]},"920":{"position":[[176,11]]}}}],["pick",{"_index":383,"t":{"898":{"position":[[171,4],[349,4]]},"912":{"position":[[2235,4],[2660,4]]}}}],["pin",{"_index":770,"t":{"928":{"position":[[1227,3]]}}}],["ping",{"_index":799,"t":{"930":{"position":[[318,5]]},"940":{"position":[[7351,4],[7372,4],[7427,7],[7437,4],[10457,4],[10506,4]]},"946":{"position":[[716,5],[743,4],[791,4],[849,4]]}}}],["ping,/path2",{"_index":926,"t":{"940":{"position":[[2441,14]]}}}],["plain",{"_index":1152,"t":{"954":{"position":[[2894,5]]}}}],["platform",{"_index":578,"t":{"912":{"position":[[2603,8]]},"928":{"position":[[599,8],[790,8]]}}}],["pleas",{"_index":130,"t":{"884":{"position":[[99,6],[144,6],[346,6],[434,6]]},"894":{"position":[[425,6]]},"962":{"position":[[260,6],[835,6]]}}}],["plural",{"_index":874,"t":{"938":{"position":[[186,6]]},"944":{"position":[[257,6]]}}}],["poc",{"_index":904,"t":{"940":{"position":[[1353,6]]}}}],["point",{"_index":1204,"t":{"960":{"position":[[119,8]]}}}],["polici",{"_index":576,"t":{"912":{"position":[[2351,8]]}}}],["popul",{"_index":470,"t":{"904":{"position":[[1170,8]]}}}],["port",{"_index":531,"t":{"912":{"position":[[584,5]]},"928":{"position":[[904,4],[974,4]]},"940":{"position":[[13256,5],[13315,4],[13428,5],[13499,5]]}}}],["possibl",{"_index":121,"t":{"882":{"position":[[165,9]]},"884":{"position":[[467,9]]},"906":{"position":[[877,8]]},"975":{"position":[[125,8]]}}}],["post",{"_index":135,"t":{"884":{"position":[[158,4]]}}}],["potenti",{"_index":156,"t":{"884":{"position":[[622,9]]},"983":{"position":[[954,9]]}}}],["powershel",{"_index":838,"t":{"936":{"position":[[86,10]]}}}],["pr",{"_index":133,"t":{"884":{"position":[[130,2]]},"886":{"position":[[373,3]]}}}],["prebuilt",{"_index":56,"t":{"880":{"position":[[34,8],[195,8],[291,8]]}}}],["preced",{"_index":833,"t":{"934":{"position":[[118,11]]},"983":{"position":[[383,10]]}}}],["prefer",{"_index":982,"t":{"940":{"position":[[6353,9],[6403,6],[6429,6],[6838,9],[9970,9]]},"968":{"position":[[582,6]]}}}],["preferred_usernam",{"_index":292,"t":{"894":{"position":[[484,18]]}}}],["prefix",{"_index":793,"t":{"930":{"position":[[136,6],[175,6]]},"940":{"position":[[1209,6],[7550,6],[12417,6],[13141,8]]},"944":{"position":[[75,9]]},"973":{"position":[[219,6],[233,6],[255,6]]},"979":{"position":[[440,6],[454,6],[476,6]]}}}],["preflight",{"_index":1009,"t":{"940":{"position":[[10538,9]]}}}],["prepend",{"_index":1267,"t":{"973":{"position":[[275,9]]},"979":{"position":[[496,9]]}}}],["present",{"_index":160,"t":{"884":{"position":[[705,7]]},"888":{"position":[[237,7]]},"940":{"position":[[6963,8],[11558,9],[11674,9]]}}}],["preserv",{"_index":1291,"t":{"977":{"position":[[362,9]]}}}],["preserverequestvalu",{"_index":1289,"t":{"977":{"position":[[260,20],[286,20]]}}}],["pretti",{"_index":707,"t":{"916":{"position":[[282,6]]}}}],["prevent",{"_index":214,"t":{"890":{"position":[[460,7]]}}}],["preview",{"_index":563,"t":{"912":{"position":[[1682,7]]}}}],["previou",{"_index":189,"t":{"886":{"position":[[652,8]]}}}],["previous",{"_index":171,"t":{"886":{"position":[[287,10]]}}}],["primari",{"_index":1251,"t":{"971":{"position":[[161,7]]}}}],["print",{"_index":1026,"t":{"940":{"position":[[12309,5]]},"966":{"position":[[304,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":841,"t":{"936":{"position":[[136,57]]}}}],["prior",{"_index":480,"t":{"906":{"position":[[119,5]]},"962":{"position":[[245,5]]}}}],["privat",{"_index":140,"t":{"884":{"position":[[222,8]]},"886":{"position":[[37,9]]},"902":{"position":[[1048,7]]},"914":{"position":[[1065,7]]},"940":{"position":[[4953,7],[5125,7],[11948,7]]}}}],["process",{"_index":684,"t":{"914":{"position":[[2587,7]]},"950":{"position":[[933,8]]},"954":{"position":[[2934,9],[2980,9]]}}}],["product",{"_index":311,"t":{"896":{"position":[[370,8]]},"914":{"position":[[294,10]]}}}],["profil",{"_index":458,"t":{"904":{"position":[[624,7]]},"906":{"position":[[284,7]]},"914":{"position":[[1992,7]]},"940":{"position":[[6888,7],[6907,7]]}}}],["project",{"_index":111,"t":{"882":{"position":[[33,8],[74,7],[204,8]]},"896":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"902":{"position":[[13,8]]},"906":{"position":[[411,8]]},"908":{"position":[[55,8]]},"912":{"position":[[118,9]]},"940":{"position":[[3614,8],[3680,8]]}}}],["prompt",{"_index":883,"t":{"940":{"position":[[85,6],[6933,6],[6952,7],[6981,6]]}}}],["proper",{"_index":939,"t":{"940":{"position":[[2871,6]]}}}],["properli",{"_index":490,"t":{"906":{"position":[[551,9]]}}}],["properti",{"_index":385,"t":{"898":{"position":[[319,12]]}}}],["propos",{"_index":169,"t":{"886":{"position":[[257,8]]}}}],["protect",{"_index":252,"t":{"892":{"position":[[774,8]]},"898":{"position":[[892,7]]},"912":{"position":[[2189,11],[2279,8]]},"940":{"position":[[9378,9]]}}}],["proto,host,uri",{"_index":1000,"t":{"940":{"position":[[9540,16]]}}}],["protocol",{"_index":636,"t":{"914":{"position":[[842,9]]},"940":{"position":[[13333,8]]},"948":{"position":[[973,8],[1003,9]]},"950":{"position":[[502,13],[828,8],[858,9]]}}}],["provid",{"_index":26,"t":{"878":{"position":[[309,8],[473,9],[740,8]]},"880":{"position":[[406,8],[549,8],[599,8],[752,8]]},"894":{"position":[[54,8],[90,10],[195,9],[360,8],[395,8],[450,9],[559,9]]},"896":{"position":[[2208,8]]},"898":{"position":[[1190,8]]},"902":{"position":[[184,8],[1264,7]]},"904":{"position":[[1150,8]]},"906":{"position":[[10,8]]},"912":{"position":[[84,9],[133,8],[235,8],[297,9],[379,8],[553,8],[956,8],[970,8],[1001,9],[1554,8],[1918,8],[3050,8],[4377,8]]},"914":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"916":{"position":[[14,8],[125,9],[528,8]]},"918":{"position":[[378,9]]},"920":{"position":[[315,9]]},"922":{"position":[[323,8]]},"926":{"position":[[27,9],[61,8],[151,9]]},"928":{"position":[[89,9],[460,12],[1898,12]]},"932":{"position":[[169,8],[785,8]]},"940":{"position":[[1465,9],[1870,8],[7004,8],[7026,8],[7044,8],[7143,9],[7220,8],[7339,9],[11399,8],[11585,9],[13025,9],[13541,8]]},"942":{"position":[[194,9],[353,7],[691,7],[1149,9]]},"960":{"position":[[34,8],[2251,8]]},"964":{"position":[[111,7]]}}}],["provider'",{"_index":697,"t":{"914":{"position":[[3422,10]]},"932":{"position":[[309,10]]},"940":{"position":[[7262,10]]},"954":{"position":[[1699,10]]}}}],["provider.example.com",{"_index":828,"t":{"932":{"position":[[894,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":821,"t":{"932":{"position":[[486,36]]}}}],["provider/sign_out_pag",{"_index":824,"t":{"932":{"position":[[672,25]]}}}],["provider=\"github",{"_index":735,"t":{"922":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":491,"t":{"906":{"position":[[605,17]]}}}],["provider=azur",{"_index":396,"t":{"898":{"position":[[1066,14]]}}}],["provider=bitbucket",{"_index":729,"t":{"920":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":721,"t":{"918":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":449,"t":{"904":{"position":[[342,17]]}}}],["providers.new",{"_index":747,"t":{"926":{"position":[[98,15]]}}}],["proxi",{"_index":3,"t":{"878":{"position":[[32,5],[729,5]]},"880":{"position":[[245,5],[512,5],[625,5]]},"882":{"position":[[12,5]]},"884":{"position":[[65,5],[339,6]]},"888":{"position":[[109,5]]},"890":{"position":[[97,5],[396,5],[655,6]]},"894":{"position":[[179,5]]},"896":{"position":[[2306,5],[2422,6]]},"898":{"position":[[914,6],[1053,5]]},"912":{"position":[[530,5],[789,5],[924,5],[1028,5],[1048,5],[3656,5],[3676,5],[4817,5],[4837,5]]},"914":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"918":{"position":[[206,5],[249,5]]},"920":{"position":[[108,6],[152,5]]},"922":{"position":[[238,6]]},"926":{"position":[[130,5]]},"928":{"position":[[80,5],[204,5],[263,5],[647,5],[946,8],[965,5],[992,5],[1713,5],[1772,5]]},"930":{"position":[[7,5],[87,7],[169,5]]},"934":{"position":[[7,5]]},"940":{"position":[[7544,5],[7592,5],[7658,5],[7698,8],[7884,5],[9414,5],[9457,6],[11048,5],[12632,5],[12754,5],[12923,5]]},"942":{"position":[[7,5],[623,5],[978,5]]},"946":{"position":[[19,5]]},"948":{"position":[[905,5]]},"950":{"position":[[760,5]]},"954":{"position":[[192,8],[1763,5]]},"956":{"position":[[31,5]]},"958":{"position":[[223,8]]},"960":{"position":[[138,5],[208,6],[1235,5]]},"966":{"position":[[58,5],[163,5],[467,5],[502,5]]},"968":{"position":[[191,5],[875,5]]},"971":{"position":[[204,6],[475,7],[958,5],[1030,5]]},"983":{"position":[[103,7],[1004,5],[1751,8]]},"987":{"position":[[29,7]]}}}],["proxiedto",{"_index":1332,"t":{"983":{"position":[[1658,9]]}}}],["proxy'",{"_index":9,"t":{"878":{"position":[[96,7]]},"918":{"position":[[296,7]]},"932":{"position":[[91,7]]},"954":{"position":[[86,7]]},"958":{"position":[[93,7]]}}}],["proxy'secret",{"_index":538,"t":{"912":{"position":[[775,13]]}}}],["proxy.cfg",{"_index":877,"t":{"938":{"position":[[225,9],[326,9]]}}}],["proxy.thi",{"_index":1259,"t":{"971":{"position":[[914,10]]}}}],["proxy/oauth2",{"_index":65,"t":{"880":{"position":[[119,12],[232,12]]}}}],["proxy/oauth2/callback",{"_index":718,"t":{"918":{"position":[[163,22]]}}}],["proxy/v7",{"_index":66,"t":{"880":{"position":[[132,8]]}}}],["proxy=tru",{"_index":791,"t":{"928":{"position":[[1923,10]]}}}],["proxy>/oauth2/callback",{"_index":728,"t":{"920":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":406,"t":{"898":{"position":[[1333,17]]}}}],["proxy_connect_timeout",{"_index":786,"t":{"928":{"position":[[1608,21]]}}}],["proxy_pass",{"_index":781,"t":{"928":{"position":[[1469,10]]},"954":{"position":[[319,10],[657,10],[2584,10],[2948,10]]}}}],["proxy_pass_request_bodi",{"_index":1123,"t":{"954":{"position":[[883,23]]}}}],["proxy_read_timeout",{"_index":789,"t":{"928":{"position":[[1656,18]]}}}],["proxy_send_timeout",{"_index":787,"t":{"928":{"position":[[1633,18]]}}}],["proxy_set_head",{"_index":782,"t":{"928":{"position":[[1503,16],[1532,16],[1573,16]]},"954":{"position":[[353,16],[382,16],[423,16],[458,16],[559,16],[691,16],[720,16],[761,16],[847,16],[1218,16],[1249,16],[1428,16]]}}}],["proxyredirecturi",{"_index":536,"t":{"912":{"position":[[702,18]]}}}],["proxyus",{"_index":994,"t":{"940":{"position":[[7942,9]]}}}],["proxywebsocket",{"_index":1333,"t":{"983":{"position":[[1706,15],[1727,15]]}}}],["pubjwk",{"_index":672,"t":{"914":{"position":[[1917,6]]},"940":{"position":[[7714,6]]}}}],["pubkey",{"_index":992,"t":{"940":{"position":[[7736,6]]}}}],["public",{"_index":432,"t":{"902":{"position":[[1011,6],[1229,6]]},"914":{"position":[[974,6]]}}}],["public_repo",{"_index":438,"t":{"902":{"position":[[1376,11]]}}}],["publicli",{"_index":137,"t":{"884":{"position":[[175,9]]}}}],["push",{"_index":431,"t":{"902":{"position":[[994,4]]},"940":{"position":[[3328,4]]}}}],["put",{"_index":67,"t":{"880":{"position":[[152,3]]}}}],["python",{"_index":836,"t":{"936":{"position":[[66,6],[107,6]]}}}],["quay.io/oauth2",{"_index":72,"t":{"880":{"position":[[217,14]]}}}],["queri",{"_index":818,"t":{"932":{"position":[[358,5]]},"958":{"position":[[1287,6]]}}}],["quick",{"_index":644,"t":{"914":{"position":[[1080,5]]}}}],["quickli",{"_index":120,"t":{"882":{"position":[[154,7]]}}}],["r_basicprofil",{"_index":504,"t":{"908":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":505,"t":{"908":{"position":[[187,15]]}}}],["rand",{"_index":853,"t":{"936":{"position":[[296,4]]}}}],["random",{"_index":239,"t":{"892":{"position":[[391,6],[442,6]]}}}],["random_password",{"_index":867,"t":{"936":{"position":[[663,17]]}}}],["rang",{"_index":1029,"t":{"940":{"position":[[12531,6]]}}}],["raw",{"_index":1139,"t":{"954":{"position":[[2229,3]]}}}],["rc3.org",{"_index":1343,"t":{"987":{"position":[[478,8]]}}}],["rd",{"_index":817,"t":{"932":{"position":[[355,2]]}}}],["re",{"_index":227,"t":{"890":{"position":[[799,2]]},"932":{"position":[[200,2]]}}}],["reach",{"_index":1019,"t":{"940":{"position":[[11455,5]]}}}],["read",{"_index":372,"t":{"896":{"position":[[2323,4]]},"902":{"position":[[1207,4]]},"920":{"position":[[240,4],[261,4]]},"987":{"position":[[396,4]]}}}],["read_api",{"_index":489,"t":{"906":{"position":[[445,8]]}}}],["readi",{"_index":187,"t":{"886":{"position":[[613,6]]}}}],["readiness_check",{"_index":938,"t":{"940":{"position":[[2837,17]]}}}],["real",{"_index":690,"t":{"914":{"position":[[3070,4],[3215,4]]},"928":{"position":[[1551,4]]},"940":{"position":[[7784,4],[7842,4],[7928,4],[7958,4],[9496,4],[12655,4]]},"948":{"position":[[867,4]]},"950":{"position":[[722,4]]},"954":{"position":[[401,4],[739,4]]}}}],["realm>/protocol/openid",{"_index":455,"t":{"904":{"position":[[491,22],[585,22],[681,22],[781,22]]}}}],["reason",{"_index":367,"t":{"896":{"position":[[1998,6]]}}}],["recommend",{"_index":330,"t":{"896":{"position":[[867,11]]},"928":{"position":[[14,11]]},"954":{"position":[[3574,11]]}}}],["redeem",{"_index":443,"t":{"902":{"position":[[1837,6]]},"904":{"position":[[529,6]]},"914":{"position":[[3765,6]]},"916":{"position":[[686,6]]},"922":{"position":[[527,6]]},"940":{"position":[[7968,6],[11323,6]]}}}],["redempt",{"_index":995,"t":{"940":{"position":[[7992,10]]}}}],["redi",{"_index":40,"t":{"878":{"position":[[552,6]]},"888":{"position":[[326,5]]},"892":{"position":[[4,5],[57,6],[606,5],[711,5],[873,5],[936,5],[964,5],[1055,5],[1112,5],[1175,5],[1208,5],[1254,5],[1357,5],[1412,5],[1475,5],[1505,5]]},"898":{"position":[[1380,5]]},"940":{"position":[[8119,5],[8171,5],[8256,5],[8276,5],[8311,5],[8328,5],[8379,5],[8401,5],[8436,5],[8494,5],[8517,5],[8548,5],[8612,5],[8647,5],[8664,5],[8698,5],[8753,5],[8774,5],[8827,5],[8913,5],[8934,5],[8968,5],[8994,5],[9052,5],[9087,5],[9119,5],[9152,5],[9835,5]]}}}],["redirect",{"_index":25,"t":{"878":{"position":[[276,10]]},"894":{"position":[[123,8]]},"896":{"position":[[699,8]]},"900":{"position":[[95,8]]},"904":{"position":[[76,8]]},"906":{"position":[[322,8],[625,8],[703,8]]},"908":{"position":[[217,8]]},"912":{"position":[[1054,8],[2720,8],[3969,8],[4029,8]]},"914":{"position":[[1379,8],[1619,8],[3610,8]]},"916":{"position":[[448,12]]},"918":{"position":[[315,8],[562,8],[680,8]]},"922":{"position":[[87,8],[267,8]]},"930":{"position":[[586,8]]},"932":{"position":[[22,8],[269,8],[380,8],[550,8],[585,8],[646,9],[873,8],[1006,8]]},"940":{"position":[[2048,9],[2609,8],[8014,8],[8044,8],[9579,8],[12383,11],[13219,8]]},"954":{"position":[[490,8],[591,8]]},"960":{"position":[[0,8],[371,9],[560,8],[571,9],[780,11],[848,8],[1893,9],[2058,9]]}}}],["redis://host[:port",{"_index":996,"t":{"940":{"position":[[8207,21],[8356,20],[8864,21]]}}}],["reduc",{"_index":1071,"t":{"946":{"position":[[804,8]]}}}],["refer",{"_index":637,"t":{"914":{"position":[[930,5],[1284,8]]},"916":{"position":[[367,5]]},"962":{"position":[[552,9],[853,9]]},"964":{"position":[[94,9]]},"981":{"position":[[52,10]]}}}],["refresh",{"_index":224,"t":{"890":{"position":[[734,10]]},"896":{"position":[[882,7],[936,7],[2540,9]]},"912":{"position":[[2830,7],[4138,7]]},"940":{"position":[[1373,7],[1390,7],[13052,8]]},"954":{"position":[[1494,8]]}}}],["refresh/access/id",{"_index":253,"t":{"892":{"position":[[787,17]]}}}],["regex",{"_index":7,"t":{"878":{"position":[[70,6]]},"940":{"position":[[10617,5]]}}}],["regist",{"_index":96,"t":{"880":{"position":[[562,8]]},"894":{"position":[[17,8]]},"914":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":293,"t":{"896":{"position":[[16,12]]},"898":{"position":[[114,14],[156,14]]},"908":{"position":[[18,12]]}}}],["regular",{"_index":173,"t":{"886":{"position":[[365,7]]}}}],["releas",{"_index":59,"t":{"880":{"position":[[59,7],[424,7]]},"886":{"position":[[493,8],[661,9]]},"971":{"position":[[298,8]]}}}],["reload",{"_index":1217,"t":{"960":{"position":[[2335,6]]}}}],["remain",{"_index":507,"t":{"908":{"position":[[300,9]]}}}],["remot",{"_index":1034,"t":{"940":{"position":[[12786,6]]}}}],["remote_addr",{"_index":784,"t":{"928":{"position":[[1559,13]]},"954":{"position":[[409,13],[747,13]]}}}],["remote_address",{"_index":1075,"t":{"948":{"position":[[181,16]]},"950":{"position":[[62,16]]}}}],["remov",{"_index":813,"t":{"932":{"position":[[76,7]]},"962":{"position":[[211,8]]},"964":{"position":[[255,7]]},"966":{"position":[[368,6],[429,7]]},"968":{"position":[[831,6]]}}}],["renam",{"_index":1222,"t":{"962":{"position":[[220,7]]}}}],["replac",{"_index":871,"t":{"938":{"position":[[65,9]]},"944":{"position":[[129,9]]},"962":{"position":[[479,7]]}}}],["replace(\"/\",\"_",{"_index":860,"t":{"936":{"position":[[550,19]]}}}],["repli",{"_index":393,"t":{"898":{"position":[[779,6]]}}}],["repo",{"_index":433,"t":{"902":{"position":[[1076,8]]},"914":{"position":[[2497,4]]},"940":{"position":[[3148,4]]}}}],["report",{"_index":1097,"t":{"948":{"position":[[1163,8]]},"950":{"position":[[1301,8]]}}}],["repositori",{"_index":420,"t":{"902":{"position":[[329,11],[953,11],[1018,10],[1056,11],[1126,10],[1236,10],[1320,11],[1445,10]]},"920":{"position":[[245,12],[696,10]]},"940":{"position":[[3201,10],[3292,10],[3347,11]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":713,"t":{"916":{"position":[[714,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":712,"t":{"916":{"position":[[647,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":714,"t":{"916":{"position":[[786,39]]}}}],["url]/stat",{"_index":1059,"t":{"942":{"position":[[984,13]]}}}],["url]/var/www/stat",{"_index":1055,"t":{"942":{"position":[[629,21]]}}}],["us",{"_index":51,"t":{"878":{"position":[[761,6]]},"880":{"position":[[185,5],[631,5]]},"884":{"position":[[550,4]]},"886":{"position":[[3,3],[361,3]]},"888":{"position":[[115,4]]},"890":{"position":[[78,4],[287,5]]},"892":{"position":[[863,5],[1102,3],[1118,3],[1363,3],[1481,3],[1511,3]]},"894":{"position":[[385,5]]},"898":{"position":[[230,3],[1169,5]]},"902":{"position":[[1426,3],[1686,5]]},"904":{"position":[[1029,4],[1334,5]]},"906":{"position":[[160,5],[1042,5]]},"910":{"position":[[175,4]]},"912":{"position":[[194,3],[263,4],[566,5],[1484,5],[1617,5],[4707,3]]},"914":{"position":[[2172,3],[3211,3]]},"916":{"position":[[105,5],[276,5]]},"918":{"position":[[370,3],[670,3]]},"920":{"position":[[43,3],[307,3],[555,3],[707,3]]},"924":{"position":[[29,3],[105,3],[209,3]]},"926":{"position":[[139,3]]},"928":{"position":[[732,5],[815,3],[1184,3]]},"930":{"position":[[375,3],[521,4],[647,4],[777,4],[926,3]]},"932":{"position":[[345,5]]},"936":{"position":[[35,3]]},"938":{"position":[[286,4]]},"940":{"position":[[927,4],[1196,3],[1990,3],[2669,3],[2749,3],[3273,3],[4491,5],[4614,3],[4979,4],[5156,4],[6055,4],[6439,3],[6525,3],[6593,4],[7115,4],[7204,4],[7301,4],[7398,4],[7485,4],[7820,4],[8229,4],[8262,3],[8573,4],[8641,3],[8726,4],[8759,3],[8886,4],[8919,3],[8940,3],[9027,3],[9058,3],[9186,3],[9571,4],[10006,7],[10048,4],[10216,7],[10324,7],[11573,5],[11689,5],[12936,3],[13095,5],[13505,3]]},"942":{"position":[[830,4],[1214,4]]},"944":{"position":[[299,6]]},"946":{"position":[[111,5],[735,5]]},"948":{"position":[[857,3]]},"950":{"position":[[712,3]]},"954":{"position":[[1651,5],[2677,3],[2719,3],[3589,3]]},"960":{"position":[[55,3],[329,3],[2298,3]]},"962":{"position":[[293,3],[659,5]]},"964":{"position":[[3,3],[141,5],[182,5]]},"966":{"position":[[64,5],[473,5]]},"968":{"position":[[100,5],[726,3]]},"971":{"position":[[379,4],[611,4],[846,4],[938,4],[948,5]]},"973":{"position":[[517,4]]},"977":{"position":[[183,4]]},"979":{"position":[[738,4]]},"983":{"position":[[311,4],[1393,4]]},"987":{"position":[[487,5]]}}}],["usag",{"_index":254,"t":{"892":{"position":[[851,6]]},"971":{"position":[[62,5]]}}}],["user",{"_index":22,"t":{"878":{"position":[[248,4],[643,4]]},"888":{"position":[[138,4]]},"890":{"position":[[790,5]]},"892":{"position":[[184,4]]},"896":{"position":[[393,6],[2171,4],[2439,4]]},"898":{"position":[[410,5],[661,6]]},"902":{"position":[[436,4],[463,5],[971,5],[1196,5],[1286,4],[1481,4],[1619,8]]},"908":{"position":[[119,4]]},"912":{"position":[[2949,5]]},"916":{"position":[[58,5]]},"920":{"position":[[659,5]]},"930":{"position":[[258,4]]},"932":{"position":[[12,4],[121,4],[282,4],[393,4]]},"940":{"position":[[2878,4],[3368,4],[3396,5],[5931,4],[6313,5],[6419,4],[6647,4],[6743,4],[6778,5],[7442,4],[7462,4],[7530,4],[9901,5]]},"946":{"position":[[748,4]]},"948":{"position":[[94,4],[341,4],[410,4],[1149,4]]},"950":{"position":[[1287,4]]},"954":{"position":[[1013,4],[1115,5],[1237,4],[1242,6]]},"968":{"position":[[385,4]]},"971":{"position":[[92,5],[421,4]]}}}],["user'",{"_index":191,"t":{"888":{"position":[[17,6]]},"930":{"position":[[792,6]]},"940":{"position":[[5853,6]]},"971":{"position":[[745,6],[1133,6]]}}}],["user/prefer_email_to_us",{"_index":1247,"t":{"968":{"position":[[598,25]]}}}],["user/settings/appl",{"_index":732,"t":{"922":{"position":[[52,28]]}}}],["user@domain.com",{"_index":1076,"t":{"948":{"position":[[200,17]]},"950":{"position":[[81,17]]}}}],["user_ag",{"_index":1102,"t":{"950":{"position":[[180,14]]}}}],["userag",{"_index":1096,"t":{"948":{"position":[[1128,9]]},"950":{"position":[[516,14],[1266,9]]}}}],["userinfo",{"_index":472,"t":{"904":{"position":[[1270,8]]}}}],["usernam",{"_index":439,"t":{"902":{"position":[[1506,8],[1644,9]]},"940":{"position":[[1816,8],[3414,8],[6363,8],[6468,8],[6529,8],[6848,8],[9980,8]]},"948":{"position":[[63,8],[676,13],[1198,8],[1239,8]]},"950":{"position":[[412,13],[1336,8],[1377,8]]},"973":{"position":[[475,8]]},"979":{"position":[[696,8]]}}}],["username@email.com",{"_index":1098,"t":{"948":{"position":[[1207,18]]},"950":{"position":[[1345,18]]}}}],["usptream",{"_index":1321,"t":{"983":{"position":[[1018,8]]}}}],["utc",{"_index":959,"t":{"940":{"position":[[4674,3]]}}}],["v2",{"_index":1171,"t":{"958":{"position":[[12,2]]},"960":{"position":[[93,2]]}}}],["v3.0.0",{"_index":88,"t":{"880":{"position":[[454,7]]}}}],["v7.0.1",{"_index":60,"t":{"880":{"position":[[70,7]]}}}],["valid",{"_index":78,"t":{"880":{"position":[[316,9]]},"886":{"position":[[231,8]]},"894":{"position":[[189,5]]},"896":{"position":[[958,9]]},"900":{"position":[[83,5]]},"902":{"position":[[1910,8]]},"904":{"position":[[70,5],[723,8]]},"916":{"position":[[756,8],[849,8]]},"922":{"position":[[595,8]]},"936":{"position":[[572,5]]},"940":{"position":[[11531,10],[11647,10],[12242,8],[12275,10],[13213,5]]},"975":{"position":[[254,5]]},"987":{"position":[[384,11]]}}}],["valu",{"_index":232,"t":{"892":{"position":[[203,5]]},"894":{"position":[[418,6]]},"898":{"position":[[1011,5]]},"904":{"position":[[1433,5]]},"940":{"position":[[38,6],[3783,5]]},"942":{"position":[[795,5]]},"948":{"position":[[947,5]]},"950":{"position":[[802,5]]},"971":{"position":[[708,6],[783,6],[1096,6],[1171,6]]},"973":{"position":[[62,5],[191,5],[292,5],[433,5],[538,6]]},"977":{"position":[[330,6],[533,6],[554,6],[582,6]]},"979":{"position":[[60,5],[110,5],[139,5],[152,5],[190,6],[337,6],[412,5],[513,5],[654,5],[759,6]]},"981":{"position":[[84,6],[179,5],[192,5],[230,6],[377,6]]},"983":{"position":[[254,5]]}}}],["values.nam",{"_index":1288,"t":{"977":{"position":[[204,12]]}}}],["var/www/stat",{"_index":1058,"t":{"942":{"position":[[933,16]]}}}],["variabl",{"_index":104,"t":{"880":{"position":[[687,9]]},"914":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"916":{"position":[[192,9]]},"930":{"position":[[189,9]]},"934":{"position":[[69,9],[183,9],[209,9]]},"944":{"position":[[63,8],[238,8]]},"946":{"position":[[613,10]]},"948":{"position":[[744,9],[772,8]]},"950":{"position":[[596,9],[627,8]]},"952":{"position":[[500,9],[532,8]]},"954":{"position":[[2202,9],[2838,9],[3826,8]]},"968":{"position":[[61,9]]},"979":{"position":[[255,9]]},"981":{"position":[[295,9]]}}}],["verif",{"_index":975,"t":{"940":{"position":[[5470,12],[5744,13]]},"983":{"position":[[878,12]]}}}],["verifi",{"_index":81,"t":{"880":{"position":[[353,9]]},"902":{"position":[[1435,9]]},"940":{"position":[[3282,9],[5427,8],[11118,8],[11514,6],[11630,6]]}}}],["verify/ssl_upstream_insecure_skip_verifi",{"_index":1238,"t":{"968":{"position":[[252,40]]}}}],["version",{"_index":87,"t":{"880":{"position":[[446,7]]},"884":{"position":[[679,8]]},"906":{"position":[[50,7],[111,7]]},"940":{"position":[[12297,7],[12315,7]]}}}],["via",{"_index":250,"t":{"892":{"position":[[717,3],[958,3]]},"914":{"position":[[3308,3]]},"916":{"position":[[161,3]]},"928":{"position":[[1247,3]]},"934":{"position":[[31,3]]},"940":{"position":[[338,3],[6013,3],[6218,3],[9093,3]]},"948":{"position":[[1365,3]]},"954":{"position":[[71,3],[1007,3],[2944,3],[3755,3]]},"958":{"position":[[78,3]]},"968":{"position":[[744,3],[757,3]]}}}],["visit",{"_index":555,"t":{"912":{"position":[[1351,8]]}}}],["volum",{"_index":1072,"t":{"946":{"position":[[817,7]]}}}],["vulner",{"_index":128,"t":{"884":{"position":[[37,13],[606,13]]},"886":{"position":[[75,16],[308,15]]}}}],["want",{"_index":262,"t":{"892":{"position":[[1094,4]]},"898":{"position":[[396,4],[884,4]]},"912":{"position":[[1739,4]]},"914":{"position":[[580,4]]},"932":{"position":[[865,4]]},"942":{"position":[[677,5]]}}}],["warn",{"_index":1035,"t":{"940":{"position":[[12802,8]]},"962":{"position":[[251,8]]}}}],["way",{"_index":418,"t":{"902":{"position":[[217,4]]},"914":{"position":[[1086,3]]}}}],["web",{"_index":317,"t":{"896":{"position":[[529,4]]},"912":{"position":[[1259,3],[2591,3],[3802,3],[3921,3]]},"987":{"position":[[423,3],[514,3]]}}}],["webapp",{"_index":384,"t":{"898":{"position":[[194,7]]}}}],["websocket",{"_index":991,"t":{"940":{"position":[[7664,10],[7688,9]]},"983":{"position":[[1763,10]]}}}],["websockets/proxy_websocket",{"_index":1237,"t":{"968":{"position":[[197,27]]}}}],["well",{"_index":257,"t":{"892":{"position":[[924,4],[1145,4],[1308,5]]},"940":{"position":[[2290,5],[2328,5],[2923,4]]}}}],["whenstream",{"_index":1329,"t":{"983":{"position":[[1507,13]]}}}],["whether",{"_index":482,"t":{"906":{"position":[[144,7]]},"916":{"position":[[241,7]]},"940":{"position":[[9473,7]]},"977":{"position":[[318,7]]},"983":{"position":[[1616,7]]}}}],["whitelist",{"_index":829,"t":{"932":{"position":[[954,9]]},"940":{"position":[[12332,9],[13105,9],[13448,11]]}}}],["whole",{"_index":1174,"t":{"958":{"position":[[236,5]]}}}],["wide_authority_to_your_service_account",{"_index":351,"t":{"896":{"position":[[1438,38]]}}}],["window",{"_index":391,"t":{"898":{"position":[[577,8]]}}}],["wish",{"_index":566,"t":{"912":{"position":[[1839,4],[2271,4],[2364,4],[2969,4]]},"918":{"position":[[95,5]]}}}],["within",{"_index":129,"t":{"884":{"position":[[51,6]]},"890":{"position":[[568,6]]},"902":{"position":[[703,6]]},"912":{"position":[[4737,6]]},"962":{"position":[[131,6]]},"971":{"position":[[230,6]]},"973":{"position":[[81,6]]},"977":{"position":[[234,6]]},"981":{"position":[[107,6]]}}}],["without",{"_index":1118,"t":{"954":{"position":[[184,7]]},"958":{"position":[[215,7]]},"960":{"position":[[43,7]]},"962":{"position":[[237,7]]},"971":{"position":[[307,7]]}}}],["wo",{"_index":1212,"t":{"960":{"position":[[845,2],[2055,2]]}}}],["work",{"_index":113,"t":{"882":{"position":[[61,4]]},"906":{"position":[[102,4],[546,4]]},"912":{"position":[[1236,7],[1940,5],[2437,4]]},"914":{"position":[[210,4]]},"940":{"position":[[2918,4]]},"954":{"position":[[1528,4]]}}}],["write",{"_index":437,"t":{"902":{"position":[[1300,5]]}}}],["x",{"_index":471,"t":{"904":{"position":[[1183,1]]},"928":{"position":[[1549,1],[1590,1]]},"932":{"position":[[570,1]]},"940":{"position":[[6017,1],[6098,1],[6301,1],[6319,1],[6341,1],[6766,1],[6784,1],[6804,1],[6826,1],[7909,1],[7926,1],[7940,1],[7956,1],[9494,1],[9528,1],[9886,1],[9907,1],[9930,1],[9955,1],[10079,1],[10951,1]]},"948":{"position":[[865,1]]},"950":{"position":[[720,1]]},"954":{"position":[[399,1],[440,1],[475,1],[576,1],[737,1],[778,1],[1011,1],[1022,1],[1235,1],[1266,1],[1445,1]]},"960":{"position":[[336,1],[2000,1],[2176,1]]}}}],["x.y.z.linux",{"_index":93,"t":{"880":{"position":[[518,11]]}}}],["x509",{"_index":647,"t":{"914":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":980,"t":{"940":{"position":[[6071,12],[9864,12]]},"954":{"position":[[1080,12]]}}}],["xauthrequest/set_xauthrequest",{"_index":1245,"t":{"968":{"position":[[502,29]]}}}],["xxx\"client_secret",{"_index":615,"t":{"912":{"position":[[4580,18]]}}}],["xxxxx\"client_secret",{"_index":588,"t":{"912":{"position":[[3263,20]]}}}],["yaml",{"_index":1176,"t":{"958":{"position":[[288,6]]},"962":{"position":[[464,4]]},"964":{"position":[[47,4]]},"966":{"position":[[295,4]]}}}],["you'd",{"_index":436,"t":{"902":{"position":[[1166,5]]}}}],["yourcompany.com",{"_index":892,"t":{"940":{"position":[[853,18]]}}}],["yyy\"pass_access_token",{"_index":616,"t":{"912":{"position":[[4601,22]]}}}],["yyyyy\"pass_access_token",{"_index":589,"t":{"912":{"position":[[3286,24]]}}}],["zzz\"cookie_secur",{"_index":617,"t":{"912":{"position":[[4646,18]]}}}],["zzzzz\"skip_provider_button",{"_index":591,"t":{"912":{"position":[[3333,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file diff --git a/docs/7.1.x/behaviour/index.html b/docs/7.1.x/behaviour/index.html index 1e1ddcfe..2fe1a185 100644 --- a/docs/7.1.x/behaviour/index.html +++ b/docs/7.1.x/behaviour/index.html @@ -4,13 +4,13 @@ Behaviour | OAuth2 Proxy - +
Version: 7.1.x

Behaviour

  1. Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens).
  2. If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned)
  3. After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set
  4. The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration)

Notice that the proxy also provides a number of useful endpoints.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.1.x/community/security/index.html b/docs/7.1.x/community/security/index.html index 44224312..7e5e1878 100644 --- a/docs/7.1.x/community/security/index.html +++ b/docs/7.1.x/community/security/index.html @@ -4,7 +4,7 @@ Security | OAuth2 Proxy - + @@ -28,7 +28,7 @@ If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.1.x/configuration/alpha-config/index.html b/docs/7.1.x/configuration/alpha-config/index.html index 87db3ed9..b65bd900 100644 --- a/docs/7.1.x/configuration/alpha-config/index.html +++ b/docs/7.1.x/configuration/alpha-config/index.html @@ -4,7 +4,7 @@ Alpha Configuration | OAuth2 Proxy - + @@ -34,7 +34,7 @@ response header.

FieldTypeDescription make up the header value

FieldTypeDescription
value[]byteValue expects a base64 encoded string value.
fromEnvstringFromEnv expects the name of an environment variable.
fromFilestringFromFile expects a path to a file containing the secret value.
claimstringClaim is the name of the claim in the session that the value should be
loaded from.
prefixstringPrefix is an optional prefix that will be prepended to the value of the
claim if it is non-empty.
basicAuthPasswordSecretSourceBasicAuthPassword converts this claim into a basic auth header.
Note the value of claim will become the basic auth username and the
basicAuthPassword will be used as the password value.

SecretSource​

(Appears on: ClaimSource, HeaderValue, TLS)

SecretSource references an individual secret value. Only one source within the struct should be defined at any time.

FieldTypeDescription
value[]byteValue expects a base64 encoded string value.
fromEnvstringFromEnv expects the name of an environment variable.
fromFilestringFromFile expects a path to a file containing the secret value.

Server​

(Appears on: AlphaOptions)

Server represents the configuration for an HTTP(S) server

FieldTypeDescription
BindAddressstringBindAddress is the address on which to serve traffic.
Leave blank or set to "-" to disable.
SecureBindAddressstringSecureBindAddress is the address on which to serve secure traffic.
Leave blank or set to "-" to disable.
TLSTLSTLS contains the information for loading the certificate and key for the
secure traffic.

TLS​

(Appears on: Server)

TLS contains the information for loading a TLS certifcate and key.

FieldTypeDescription
KeySecretSourceKey is the TLS key data to use.
Typically this will come from a file.
CertSecretSourceCert is the TLS certificate data to use.
Typically this will come from a file.

Upstream​

(Appears on: Upstreams)

Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path.

FieldTypeDescription
idstringID should be a unique identifier for the upstream.
This value is required for all upstreams.
pathstringPath is used to map requests to the upstream server.
The closest match will take precedence and all Paths must be unique.
uristringThe URI of the upstream server. This may be an HTTP(S) server of a File
based URL. It may include a path, in which case all requests will be served
under that path.
Eg:
- http://localhost:8080
- https://service.localhost
- https://service.localhost/path
- file://host/path
If the URI's path is "/base" and the incoming request was for "/dir",
the upstream request will be for "/base/dir".
insecureSkipTLSVerifyboolInsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.
This option is insecure and will allow potential Man-In-The-Middle attacks
betweem OAuth2 Proxy and the usptream server.
Defaults to false.
staticboolStatic will make all requests to this upstream have a static response.
The response will have a body of "Authenticated" and a response code
matching StaticCode.
If StaticCode is not set, the response will return a 200 response.
staticCodeintStaticCode determines the response code for the Static response.
This option can only be used with Static enabled.
flushIntervalDurationFlushInterval is the period between flushing the response buffer when
streaming response from the upstream.
Defaults to 1 second.
passHostHeaderboolPassHostHeader determines whether the request host header should be proxied
to the upstream server.
Defaults to true.
proxyWebSocketsboolProxyWebSockets enables proxying of websockets to upstream servers
Defaults to true.

Upstreams​

([]Upstream alias)​

(Appears on: AlphaOptions)

Upstreams is a collection of definitions for upstream servers.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.1.x/configuration/oauth_provider/index.html b/docs/7.1.x/configuration/oauth_provider/index.html index 81980fbd..082cb219 100644 --- a/docs/7.1.x/configuration/oauth_provider/index.html +++ b/docs/7.1.x/configuration/oauth_provider/index.html @@ -4,7 +4,7 @@ OAuth Provider Configuration | OAuth2 Proxy - + @@ -49,7 +49,7 @@ to setup the client id and client secret. Your "Redirection URI" will Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.1.x/configuration/overview/index.html b/docs/7.1.x/configuration/overview/index.html index 7ca4b48c..2aa64719 100644 --- a/docs/7.1.x/configuration/overview/index.html +++ b/docs/7.1.x/configuration/overview/index.html @@ -4,7 +4,7 @@ Overview | OAuth2 Proxy - + @@ -19,7 +19,7 @@ The default format is configured as follows:

{{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}}

Available variables for request logging:

VariableExampleDescription
Client74.125.224.72The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true.
Hostdomain.comThe value of the Host header.
ProtocolHTTP/1.0The request protocol.
RequestDuration0.001The time in seconds that a request took to process.
RequestID00010203-0405-4607-8809-0a0b0c0d0e0fThe request ID pulled from the --request-id-header. Random UUID if empty
RequestMethodGETThe request method.
RequestURI"/oauth2/auth"The URI path of the request.
ResponseSize12The size in bytes of the response.
StatusCode200The HTTP status code of the response.
Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
Upstream-The upstream data of the HTTP request.
UserAgent-The full user agent as reported by the requesting client.
Usernameusername@email.comThe email or username of the auth request.

Standard Log Format​

All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below:

[19/Mar/2015:17:20:19 -0400] [main.go:40] <MESSAGE>

If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows:

[{{.Timestamp}}] [{{.File}}] {{.Message}}

Available variables for standard logging:

VariableExampleDescription
Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
Filemain.go:40The file and line number of the logging statement.
MessageHTTP: listening on 127.0.0.1:4180The details of the log statement.

Configuring for use with the Nginx auth_request directive​

The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example:

server {
  listen 443 ssl;
  server_name ...;
  include ssl/ssl.conf;

  location /oauth2/ {
    proxy_pass       http://127.0.0.1:4180;
    proxy_set_header Host                    $host;
    proxy_set_header X-Real-IP               $remote_addr;
    proxy_set_header X-Scheme                $scheme;
    proxy_set_header X-Auth-Request-Redirect $request_uri;
    # or, if you are handling multiple domains:
    # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
  }
  location = /oauth2/auth {
    proxy_pass       http://127.0.0.1:4180;
    proxy_set_header Host             $host;
    proxy_set_header X-Real-IP        $remote_addr;
    proxy_set_header X-Scheme         $scheme;
    # nginx auth_request includes headers but not body
    proxy_set_header Content-Length   "";
    proxy_pass_request_body           off;
  }

  location / {
    auth_request /oauth2/auth;
    error_page 401 = /oauth2/sign_in;

    # pass information via X-User and X-Email headers to backend,
    # requires running with --set-xauthrequest flag
    auth_request_set $user   $upstream_http_x_auth_request_user;
    auth_request_set $email  $upstream_http_x_auth_request_email;
    proxy_set_header X-User  $user;
    proxy_set_header X-Email $email;

    # if you enabled --pass-access-token, this will pass the token to the backend
    auth_request_set $token  $upstream_http_x_auth_request_access_token;
    proxy_set_header X-Access-Token $token;

    # if you enabled --cookie-refresh, this is needed for it to work with auth_request
    auth_request_set $auth_cookie $upstream_http_set_cookie;
    add_header Set-Cookie $auth_cookie;

    # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
    # limit and so the OAuth2 Proxy splits these into multiple parts.
    # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
    # so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
    auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;

    # Extract the Cookie attributes from the first Set-Cookie header and append them
    # to the second part ($upstream_cookie_* variables only contain the raw cookie content)
    if ($auth_cookie ~* "(; .*)") {
        set $auth_cookie_name_0 $auth_cookie;
        set $auth_cookie_name_1 "auth_cookie_name_1=$auth_cookie_name_upstream_1$1";
    }

    # Send both Set-Cookie headers now if there was a second part
    if ($auth_cookie_name_upstream_1) {
        add_header Set-Cookie $auth_cookie_name_0;
        add_header Set-Cookie $auth_cookie_name_1;
    }

    proxy_pass http://backend/;
    # or "root /path/to/site;" or "fastcgi_pass ..." etc
  }
}

When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module.

nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
nginx.ingress.kubernetes.io/configuration-snippet: |
  auth_request_set $name_upstream_1 $upstream_cookie_name_1;

  access_by_lua_block {
    if ngx.var.name_upstream_1 ~= "" then
      ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
    end
  }

It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure).

You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be "$upstream_cookie__oauth2_proxy_1" instead of "$upstream_cookie_name_1" and the new cookie-name should be "_oauth2_proxy_1=" instead of "name_1=".

Configuring for use with the Traefik (v2) ForwardAuth middleware​

This option requires --reverse-proxy option to be set.

ForwardAuth with 401 errors middleware​

The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration:

http:
  routers:
    a-service:
      rule: "Host(`a-service.example.com`)"
      service: a-service-backend
      middlewares:
        - oauth-errors
        - oauth-auth
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    oauth:
      rule: "Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)"
      middlewares:
        - auth-headers
      service: oauth-backend
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"

  services:
    a-service-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.2:7555
    oauth-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.1:4180

  middlewares:
    auth-headers:
      headers:
        sslRedirect: true
        stsSeconds: 315360000
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        sslHost: example.com
        stsIncludeSubdomains: true
        stsPreload: true
        frameDeny: true
    oauth-auth:
      forwardAuth:
        address: https://oauth.example.com/oauth2/auth
        trustForwardHeader: true
    oauth-errors:
      errors:
        status:
          - "401-403"
        service: oauth-backend
        query: "/oauth2/sign_in"

ForwardAuth with static upstreams configuration​

Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint

Following options need to be set on oauth2-proxy:

  • --upstream=static://202: Configures a static response for authenticated sessions
  • --reverseproxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly
http:
  routers:
    a-service-route-1:
      rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)"
      service: a-service-backend
      middlewares:
        - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    a-service-route-2:
      rule: "Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)"
      service: a-service-backend
      middlewares:
        - oauth-auth-wo-redirect # unauthenticated session will return a 401
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    services-oauth2-route:
      rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)"
      middlewares:
        - auth-headers
      service: oauth-backend
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    oauth2-proxy-route:
      rule: "Host(`oauth.example.com`) && PathPrefix(`/`)"
      middlewares:
        - auth-headers
      service: oauth-backend
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"

  services:
    a-service-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.2:7555
    b-service-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.3:7555
    oauth-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.1:4180

  middlewares:
    auth-headers:
      headers:
        sslRedirect: true
        stsSeconds: 315360000
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        sslHost: example.com
        stsIncludeSubdomains: true
        stsPreload: true
        frameDeny: true
    oauth-auth-redirect:
      forwardAuth:
        address: https://oauth.example.com/
        trustForwardHeader: true
        authResponseHeaders:
          - X-Auth-Request-Access-Token
          - Authorization
    oauth-auth-wo-redirect:
      forwardAuth:
        address: https://oauth.example.com/oauth2/auth
        trustForwardHeader: true
        authResponseHeaders:
          - X-Auth-Request-Access-Token
          - Authorization
note

If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.1.x/configuration/session_storage/index.html b/docs/7.1.x/configuration/session_storage/index.html index 49759130..1f000073 100644 --- a/docs/7.1.x/configuration/session_storage/index.html +++ b/docs/7.1.x/configuration/session_storage/index.html @@ -4,7 +4,7 @@ Session Storage | OAuth2 Proxy - + @@ -25,7 +25,7 @@ disclosure.

Usage--redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately.

Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately.

Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.1.x/configuration/tls/index.html b/docs/7.1.x/configuration/tls/index.html index 2778cb7a..c055e98b 100644 --- a/docs/7.1.x/configuration/tls/index.html +++ b/docs/7.1.x/configuration/tls/index.html @@ -4,7 +4,7 @@ TLS Configuration | OAuth2 Proxy - + @@ -15,7 +15,7 @@ external load balancer like Amazon ELB or Google Platform Load Balancing) use oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/.

An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS:

server {
    listen 443 default ssl;
    server_name internal.yourcompany.com;
    ssl_certificate /path/to/cert.pem;
    ssl_certificate_key /path/to/cert.key;
    add_header Strict-Transport-Security max-age=2592000;

    location / {
        proxy_pass http://127.0.0.1:4180;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Scheme $scheme;
        proxy_connect_timeout 1;
        proxy_send_timeout 30;
        proxy_read_timeout 30;
    }
}

The command line to run oauth2-proxy in this configuration would look like this:

./oauth2-proxy \
   --email-domain="yourcompany.com"  \
   --upstream=http://127.0.0.1:8080/ \
   --cookie-secret=... \
   --cookie-secure=true \
   --provider=... \
   --reverse-proxy=true \
   --client-id=... \
   --client-secret=...
Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.1.x/features/endpoints/index.html b/docs/7.1.x/features/endpoints/index.html index fb6ab07e..539b20ac 100644 --- a/docs/7.1.x/features/endpoints/index.html +++ b/docs/7.1.x/features/endpoints/index.html @@ -4,13 +4,13 @@ Endpoints | OAuth2 Proxy - +
Version: 7.1.x

Endpoints

OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable.

  • /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info
  • /ping - returns a 200 OK response, which is intended for use with health checks
  • /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default
  • /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies)
  • /oauth2/sign_out - this URL is used to clear the session cookie
  • /oauth2/start - a URL that will redirect to start the OAuth cycle
  • /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url.
  • /oauth2/userinfo - the URL is used to return user's email from the session in JSON format.
  • /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive

Sign out​

To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!):

/oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page

Alternatively, include the redirect URL in the X-Auth-Request-Redirect header:

GET /oauth2/sign_out HTTP/1.1
X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page
...

(The "sign_out_page" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.)

BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.1.x/index.html b/docs/7.1.x/index.html index 09e06bc3..7a6d4c46 100644 --- a/docs/7.1.x/index.html +++ b/docs/7.1.x/index.html @@ -4,13 +4,13 @@ Installation | OAuth2 Proxy - +
Version: 7.1.x

Installation

  1. Choose how to deploy:

    a. Download Prebuilt Binary (current release is v7.1.3)

    b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin

    c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available)

    d. Using a Kubernetes manifest (Helm)

Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0.

$ sha256sum -c sha256sum.txt 2>&1 | grep OK
oauth2-proxy-x.y.z.linux-amd64: OK
  1. Select a Provider and Register an OAuth Application with a Provider
  2. Configure OAuth2 Proxy using config file, command line options, or environment variables
  3. Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)
Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.2.x/behaviour/index.html b/docs/7.2.x/behaviour/index.html index be4d4956..54817481 100644 --- a/docs/7.2.x/behaviour/index.html +++ b/docs/7.2.x/behaviour/index.html @@ -4,13 +4,13 @@ Behaviour | OAuth2 Proxy - +
Version: 7.2.x

Behaviour

  1. Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens).
  2. If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned)
  3. After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set
  4. The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration)

Notice that the proxy also provides a number of useful endpoints.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.2.x/community/security/index.html b/docs/7.2.x/community/security/index.html index ed853768..ba831287 100644 --- a/docs/7.2.x/community/security/index.html +++ b/docs/7.2.x/community/security/index.html @@ -4,7 +4,7 @@ Security | OAuth2 Proxy - + @@ -28,7 +28,7 @@ If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.2.x/configuration/alpha-config/index.html b/docs/7.2.x/configuration/alpha-config/index.html index b6aa0383..d7872bbe 100644 --- a/docs/7.2.x/configuration/alpha-config/index.html +++ b/docs/7.2.x/configuration/alpha-config/index.html @@ -4,7 +4,7 @@ Alpha Configuration | OAuth2 Proxy - + @@ -34,7 +34,7 @@ response header.

FieldTypeDescription make up the header value

FieldTypeDescription
value[]byteValue expects a base64 encoded string value.
fromEnvstringFromEnv expects the name of an environment variable.
fromFilestringFromFile expects a path to a file containing the secret value.
claimstringClaim is the name of the claim in the session that the value should be
loaded from.
prefixstringPrefix is an optional prefix that will be prepended to the value of the
claim if it is non-empty.
basicAuthPasswordSecretSourceBasicAuthPassword converts this claim into a basic auth header.
Note the value of claim will become the basic auth username and the
basicAuthPassword will be used as the password value.

KeycloakOptions​

(Appears on: Provider)

FieldTypeDescription
groups[]stringGroup enables to restrict login to members of indicated group
roles[]stringRole enables to restrict login to users with role (only available when using the keycloak-oidc provider)

LoginGovOptions​

(Appears on: Provider)

FieldTypeDescription
jwtKeystringJWTKey is a private key in PEM format used to sign JWT,
jwtKeyFilestringJWTKeyFile is a path to the private key file in PEM format used to sign the JWT
pubjwkURLstringPubJWKURL is the JWK pubkey access endpoint

OIDCOptions​

(Appears on: Provider)

FieldTypeDescription
issuerURLstringIssuerURL is the OpenID Connect issuer URL
eg: https://accounts.google.com
insecureAllowUnverifiedEmailboolInsecureAllowUnverifiedEmail prevents failures if an email address in an id_token is not verified
default set to 'false'
insecureSkipIssuerVerificationboolInsecureSkipIssuerVerification skips verification of ID token issuers. When false, ID Token Issuers must match the OIDC discovery URL
default set to 'false'
insecureSkipNonceboolInsecureSkipNonce skips verifying the ID Token's nonce claim that must match
the random nonce sent in the initial OAuth flow. Otherwise, the nonce is checked
after the initial OAuth redeem & subsequent token refreshes.
default set to 'true'
Warning: In a future release, this will change to 'false' by default for enhanced security.
skipDiscoveryboolSkipDiscovery allows to skip OIDC discovery and use manually supplied Endpoints
default set to 'false'
jwksURLstringJwksURL is the OpenID Connect JWKS URL
eg: https://www.googleapis.com/oauth2/v3/certs
emailClaimstringEmailClaim indicates which claim contains the user email,
default set to 'email'
groupsClaimstringGroupsClaim indicates which claim contains the user groups
default set to 'groups'
userIDClaimstringUserIDClaim indicates which claim contains the user ID
default set to 'email'

Provider​

(Appears on: Providers)

Provider holds all configuration for a single provider

FieldTypeDescription
clientIDstringClientID is the OAuth Client ID that is defined in the provider
This value is required for all providers.
clientSecretstringClientSecret is the OAuth Client Secret that is defined in the provider
This value is required for all providers.
clientSecretFilestringClientSecretFile is the name of the file
containing the OAuth Client Secret, it will be used if ClientSecret is not set.
keycloakConfigKeycloakOptionsKeycloakConfig holds all configurations for Keycloak provider.
azureConfigAzureOptionsAzureConfig holds all configurations for Azure provider.
ADFSConfigADFSOptionsADFSConfig holds all configurations for ADFS provider.
bitbucketConfigBitbucketOptionsBitbucketConfig holds all configurations for Bitbucket provider.
githubConfigGitHubOptionsGitHubConfig holds all configurations for GitHubC provider.
gitlabConfigGitLabOptionsGitLabConfig holds all configurations for GitLab provider.
googleConfigGoogleOptionsGoogleConfig holds all configurations for Google provider.
oidcConfigOIDCOptionsOIDCConfig holds all configurations for OIDC provider
or providers utilize OIDC configurations.
loginGovConfigLoginGovOptionsLoginGovConfig holds all configurations for LoginGov provider.
idstringID should be a unique identifier for the provider.
This value is required for all providers.
providerstringType is the OAuth provider
must be set from the supported providers group,
otherwise 'Google' is set as default
namestringName is the providers display name
if set, it will be shown to the users in the login page.
caFiles[]stringCAFiles is a list of paths to CA certificates that should be used when connecting to the provider.
If not specified, the default Go trust sources are used instead
loginURLstringLoginURL is the authentication endpoint
redeemURLstringRedeemURL is the token redemption endpoint
profileURLstringProfileURL is the profile access endpoint
resourcestringProtectedResource is the resource that is protected (Azure AD and ADFS only)
validateURLstringValidateURL is the access token validation endpoint
scopestringScope is the OAuth scope specification
promptstringPrompt is OIDC prompt
approvalPromptstringApprovalPrompt is the OAuth approval_prompt
default is set to 'force'
allowedGroups[]stringAllowedGroups is a list of restrict logins to members of this group
acrValuesstringAcrValues is a string of acr values

Providers​

([]Provider alias)​

(Appears on: AlphaOptions)

Providers is a collection of definitions for providers.

SecretSource​

(Appears on: ClaimSource, HeaderValue, TLS)

SecretSource references an individual secret value. Only one source within the struct should be defined at any time.

FieldTypeDescription
value[]byteValue expects a base64 encoded string value.
fromEnvstringFromEnv expects the name of an environment variable.
fromFilestringFromFile expects a path to a file containing the secret value.

Server​

(Appears on: AlphaOptions)

Server represents the configuration for an HTTP(S) server

FieldTypeDescription
BindAddressstringBindAddress is the address on which to serve traffic.
Leave blank or set to "-" to disable.
SecureBindAddressstringSecureBindAddress is the address on which to serve secure traffic.
Leave blank or set to "-" to disable.
TLSTLSTLS contains the information for loading the certificate and key for the
secure traffic.

TLS​

(Appears on: Server)

TLS contains the information for loading a TLS certifcate and key.

FieldTypeDescription
KeySecretSourceKey is the TLS key data to use.
Typically this will come from a file.
CertSecretSourceCert is the TLS certificate data to use.
Typically this will come from a file.

Upstream​

(Appears on: UpstreamConfig)

Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path.

FieldTypeDescription
idstringID should be a unique identifier for the upstream.
This value is required for all upstreams.
pathstringPath is used to map requests to the upstream server.
The closest match will take precedence and all Paths must be unique.
Path can also take a pattern when used with RewriteTarget.
Path segments can be captured and matched using regular experessions.
Eg:
- ^/foo$: Match only the explicit path /foo
- ^/bar/$: Match any path prefixed with /bar/
- ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget
rewriteTargetstringRewriteTarget allows users to rewrite the request path before it is sent to
the upstream server.
Use the Path to capture segments for reuse within the rewrite target.
Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewrite
the request /baz/abc/123 to /foo/abc/123 before proxying to the
upstream server.
uristringThe URI of the upstream server. This may be an HTTP(S) server of a File
based URL. It may include a path, in which case all requests will be served
under that path.
Eg:
- http://localhost:8080
- https://service.localhost
- https://service.localhost/path
- file://host/path
If the URI's path is "/base" and the incoming request was for "/dir",
the upstream request will be for "/base/dir".
insecureSkipTLSVerifyboolInsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.
This option is insecure and will allow potential Man-In-The-Middle attacks
betweem OAuth2 Proxy and the usptream server.
Defaults to false.
staticboolStatic will make all requests to this upstream have a static response.
The response will have a body of "Authenticated" and a response code
matching StaticCode.
If StaticCode is not set, the response will return a 200 response.
staticCodeintStaticCode determines the response code for the Static response.
This option can only be used with Static enabled.
flushIntervalDurationFlushInterval is the period between flushing the response buffer when
streaming response from the upstream.
Defaults to 1 second.
passHostHeaderboolPassHostHeader determines whether the request host header should be proxied
to the upstream server.
Defaults to true.
proxyWebSocketsboolProxyWebSockets enables proxying of websockets to upstream servers
Defaults to true.

UpstreamConfig​

(Appears on: AlphaOptions)

UpstreamConfig is a collection of definitions for upstream servers.

FieldTypeDescription
proxyRawPathboolProxyRawPath will pass the raw url path to upstream allowing for url's
like: "/%2F/" which would otherwise be redirected to "/"
upstreams[]UpstreamUpstreams represents the configuration for the upstream servers.
Requests will be proxied to this upstream if the path matches the request path.
Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.2.x/configuration/oauth_provider/index.html b/docs/7.2.x/configuration/oauth_provider/index.html index 932233b9..7410cf08 100644 --- a/docs/7.2.x/configuration/oauth_provider/index.html +++ b/docs/7.2.x/configuration/oauth_provider/index.html @@ -4,7 +4,7 @@ OAuth Provider Configuration | OAuth2 Proxy - + @@ -49,7 +49,7 @@ to setup the client id and client secret. Your "Redirection URI" will Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.2.x/configuration/overview/index.html b/docs/7.2.x/configuration/overview/index.html index c45eafe0..1777f2f4 100644 --- a/docs/7.2.x/configuration/overview/index.html +++ b/docs/7.2.x/configuration/overview/index.html @@ -4,7 +4,7 @@ Overview | OAuth2 Proxy - + @@ -19,7 +19,7 @@ The default format is configured as follows:

{{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}}

Available variables for request logging:

VariableExampleDescription
Client74.125.224.72The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true.
Hostdomain.comThe value of the Host header.
ProtocolHTTP/1.0The request protocol.
RequestDuration0.001The time in seconds that a request took to process.
RequestID00010203-0405-4607-8809-0a0b0c0d0e0fThe request ID pulled from the --request-id-header. Random UUID if empty
RequestMethodGETThe request method.
RequestURI"/oauth2/auth"The URI path of the request.
ResponseSize12The size in bytes of the response.
StatusCode200The HTTP status code of the response.
Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
Upstream-The upstream data of the HTTP request.
UserAgent-The full user agent as reported by the requesting client.
Usernameusername@email.comThe email or username of the auth request.

Standard Log Format​

All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below:

[19/Mar/2015:17:20:19 -0400] [main.go:40] <MESSAGE>

If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows:

[{{.Timestamp}}] [{{.File}}] {{.Message}}

Available variables for standard logging:

VariableExampleDescription
Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
Filemain.go:40The file and line number of the logging statement.
MessageHTTP: listening on 127.0.0.1:4180The details of the log statement.

Configuring for use with the Nginx auth_request directive​

The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example:

server {
  listen 443 ssl;
  server_name ...;
  include ssl/ssl.conf;

  location /oauth2/ {
    proxy_pass       http://127.0.0.1:4180;
    proxy_set_header Host                    $host;
    proxy_set_header X-Real-IP               $remote_addr;
    proxy_set_header X-Scheme                $scheme;
    proxy_set_header X-Auth-Request-Redirect $request_uri;
    # or, if you are handling multiple domains:
    # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
  }
  location = /oauth2/auth {
    proxy_pass       http://127.0.0.1:4180;
    proxy_set_header Host             $host;
    proxy_set_header X-Real-IP        $remote_addr;
    proxy_set_header X-Scheme         $scheme;
    # nginx auth_request includes headers but not body
    proxy_set_header Content-Length   "";
    proxy_pass_request_body           off;
  }

  location / {
    auth_request /oauth2/auth;
    error_page 401 = /oauth2/sign_in;

    # pass information via X-User and X-Email headers to backend,
    # requires running with --set-xauthrequest flag
    auth_request_set $user   $upstream_http_x_auth_request_user;
    auth_request_set $email  $upstream_http_x_auth_request_email;
    proxy_set_header X-User  $user;
    proxy_set_header X-Email $email;

    # if you enabled --pass-access-token, this will pass the token to the backend
    auth_request_set $token  $upstream_http_x_auth_request_access_token;
    proxy_set_header X-Access-Token $token;

    # if you enabled --cookie-refresh, this is needed for it to work with auth_request
    auth_request_set $auth_cookie $upstream_http_set_cookie;
    add_header Set-Cookie $auth_cookie;

    # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
    # limit and so the OAuth2 Proxy splits these into multiple parts.
    # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
    # so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
    auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;

    # Extract the Cookie attributes from the first Set-Cookie header and append them
    # to the second part ($upstream_cookie_* variables only contain the raw cookie content)
    if ($auth_cookie ~* "(; .*)") {
        set $auth_cookie_name_0 $auth_cookie;
        set $auth_cookie_name_1 "auth_cookie_name_1=$auth_cookie_name_upstream_1$1";
    }

    # Send both Set-Cookie headers now if there was a second part
    if ($auth_cookie_name_upstream_1) {
        add_header Set-Cookie $auth_cookie_name_0;
        add_header Set-Cookie $auth_cookie_name_1;
    }

    proxy_pass http://backend/;
    # or "root /path/to/site;" or "fastcgi_pass ..." etc
  }
}

When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module.

nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
nginx.ingress.kubernetes.io/configuration-snippet: |
  auth_request_set $name_upstream_1 $upstream_cookie_name_1;

  access_by_lua_block {
    if ngx.var.name_upstream_1 ~= "" then
      ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
    end
  }

It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure).

You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be "$upstream_cookie__oauth2_proxy_1" instead of "$upstream_cookie_name_1" and the new cookie-name should be "_oauth2_proxy_1=" instead of "name_1=".

Configuring for use with the Traefik (v2) ForwardAuth middleware​

This option requires --reverse-proxy option to be set.

ForwardAuth with 401 errors middleware​

The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration:

http:
  routers:
    a-service:
      rule: "Host(`a-service.example.com`)"
      service: a-service-backend
      middlewares:
        - oauth-errors
        - oauth-auth
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    oauth:
      rule: "Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)"
      middlewares:
        - auth-headers
      service: oauth-backend
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"

  services:
    a-service-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.2:7555
    oauth-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.1:4180

  middlewares:
    auth-headers:
      headers:
        sslRedirect: true
        stsSeconds: 315360000
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        sslHost: example.com
        stsIncludeSubdomains: true
        stsPreload: true
        frameDeny: true
    oauth-auth:
      forwardAuth:
        address: https://oauth.example.com/oauth2/auth
        trustForwardHeader: true
    oauth-errors:
      errors:
        status:
          - "401-403"
        service: oauth-backend
        query: "/oauth2/sign_in"

ForwardAuth with static upstreams configuration​

Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint

Following options need to be set on oauth2-proxy:

  • --upstream=static://202: Configures a static response for authenticated sessions
  • --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly
http:
  routers:
    a-service-route-1:
      rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)"
      service: a-service-backend
      middlewares:
        - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    a-service-route-2:
      rule: "Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)"
      service: a-service-backend
      middlewares:
        - oauth-auth-wo-redirect # unauthenticated session will return a 401
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    services-oauth2-route:
      rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)"
      middlewares:
        - auth-headers
      service: oauth-backend
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    oauth2-proxy-route:
      rule: "Host(`oauth.example.com`) && PathPrefix(`/`)"
      middlewares:
        - auth-headers
      service: oauth-backend
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"

  services:
    a-service-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.2:7555
    b-service-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.3:7555
    oauth-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.1:4180

  middlewares:
    auth-headers:
      headers:
        sslRedirect: true
        stsSeconds: 315360000
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        sslHost: example.com
        stsIncludeSubdomains: true
        stsPreload: true
        frameDeny: true
    oauth-auth-redirect:
      forwardAuth:
        address: https://oauth.example.com/
        trustForwardHeader: true
        authResponseHeaders:
          - X-Auth-Request-Access-Token
          - Authorization
    oauth-auth-wo-redirect:
      forwardAuth:
        address: https://oauth.example.com/oauth2/auth
        trustForwardHeader: true
        authResponseHeaders:
          - X-Auth-Request-Access-Token
          - Authorization
note

If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.2.x/configuration/session_storage/index.html b/docs/7.2.x/configuration/session_storage/index.html index 3eb4921a..640513c1 100644 --- a/docs/7.2.x/configuration/session_storage/index.html +++ b/docs/7.2.x/configuration/session_storage/index.html @@ -4,7 +4,7 @@ Session Storage | OAuth2 Proxy - + @@ -25,7 +25,7 @@ disclosure.

Usage--redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately.

Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately.

Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.2.x/configuration/tls/index.html b/docs/7.2.x/configuration/tls/index.html index 5972398e..3b865ec4 100644 --- a/docs/7.2.x/configuration/tls/index.html +++ b/docs/7.2.x/configuration/tls/index.html @@ -4,7 +4,7 @@ TLS Configuration | OAuth2 Proxy - + @@ -15,7 +15,7 @@ external load balancer like Amazon ELB or Google Platform Load Balancing) use oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/.

An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS:

server {
    listen 443 default ssl;
    server_name internal.yourcompany.com;
    ssl_certificate /path/to/cert.pem;
    ssl_certificate_key /path/to/cert.key;
    add_header Strict-Transport-Security max-age=2592000;

    location / {
        proxy_pass http://127.0.0.1:4180;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Scheme $scheme;
        proxy_connect_timeout 1;
        proxy_send_timeout 30;
        proxy_read_timeout 30;
    }
}

The command line to run oauth2-proxy in this configuration would look like this:

./oauth2-proxy \
   --email-domain="yourcompany.com"  \
   --upstream=http://127.0.0.1:8080/ \
   --cookie-secret=... \
   --cookie-secure=true \
   --provider=... \
   --reverse-proxy=true \
   --client-id=... \
   --client-secret=...
Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.2.x/features/endpoints/index.html b/docs/7.2.x/features/endpoints/index.html index 1f2cd3d9..2427d4e1 100644 --- a/docs/7.2.x/features/endpoints/index.html +++ b/docs/7.2.x/features/endpoints/index.html @@ -4,13 +4,13 @@ Endpoints | OAuth2 Proxy - +
Version: 7.2.x

Endpoints

OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable.

  • /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info
  • /ping - returns a 200 OK response, which is intended for use with health checks
  • /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default
  • /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies)
  • /oauth2/sign_out - this URL is used to clear the session cookie
  • /oauth2/start - a URL that will redirect to start the OAuth cycle
  • /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url.
  • /oauth2/userinfo - the URL is used to return user's email from the session in JSON format.
  • /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive

Sign out​

To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!):

/oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page

Alternatively, include the redirect URL in the X-Auth-Request-Redirect header:

GET /oauth2/sign_out HTTP/1.1
X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page
...

(The "sign_out_page" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.)

BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.2.x/index.html b/docs/7.2.x/index.html index 0fa8568e..26fca0f4 100644 --- a/docs/7.2.x/index.html +++ b/docs/7.2.x/index.html @@ -4,13 +4,13 @@ Installation | OAuth2 Proxy - +
Version: 7.2.x

Installation

  1. Choose how to deploy:

    a. Download Prebuilt Binary (current release is v7.2.1)

    b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin

    c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available)

    d. Using a Kubernetes manifest (Helm)

Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0.

$ sha256sum -c sha256sum.txt
oauth2-proxy-x.y.z.linux-amd64: OK
  1. Select a Provider and Register an OAuth Application with a Provider
  2. Configure OAuth2 Proxy using config file, command line options, or environment variables
  3. Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)
Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.2.x/search-index.json b/docs/7.2.x/search-index.json index 1c99ac06..36fd64bd 100644 --- a/docs/7.2.x/search-index.json +++ b/docs/7.2.x/search-index.json @@ -1 +1 @@ -[{"documents":[{"i":627,"t":"Installation","u":"/oauth2-proxy/docs/7.2.x/","b":["Docs"]},{"i":629,"t":"Behaviour","u":"/oauth2-proxy/docs/7.2.x/behaviour","b":["Docs"]},{"i":631,"t":"Security","u":"/oauth2-proxy/docs/7.2.x/community/security","b":["Docs","Community"]},{"i":637,"t":"Alpha Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","b":["Docs","Configuration"]},{"i":688,"t":"Session Storage","u":"/oauth2-proxy/docs/7.2.x/configuration/session_storage","b":["Docs","Configuration"]},{"i":694,"t":"TLS Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/tls","b":["Docs","Configuration"]},{"i":696,"t":"Endpoints","u":"/oauth2-proxy/docs/7.2.x/features/endpoints","b":["Docs","Features"]},{"i":700,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","b":["Docs","Configuration"]},{"i":736,"t":"Overview","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","b":["Docs","Configuration"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/627",[0,2.222]],["t/629",[1,2.222]],["t/631",[2,2.222]],["t/637",[3,1.699,4,0.94]],["t/688",[5,1.699,6,1.699]],["t/694",[4,0.94,7,1.699]],["t/696",[8,2.222]],["t/700",[4,0.761,9,1.375,10,1.375]],["t/736",[11,2.222]]],"invertedIndex":[["alpha",{"_index":3,"t":{"637":{"position":[[0,5]]}}}],["behaviour",{"_index":1,"t":{"629":{"position":[[0,9]]}}}],["configur",{"_index":4,"t":{"637":{"position":[[6,13]]},"694":{"position":[[4,13]]},"700":{"position":[[15,13]]}}}],["endpoint",{"_index":8,"t":{"696":{"position":[[0,9]]}}}],["instal",{"_index":0,"t":{"627":{"position":[[0,12]]}}}],["oauth",{"_index":9,"t":{"700":{"position":[[0,5]]}}}],["overview",{"_index":11,"t":{"736":{"position":[[0,8]]}}}],["provid",{"_index":10,"t":{"700":{"position":[[6,8]]}}}],["secur",{"_index":2,"t":{"631":{"position":[[0,8]]}}}],["session",{"_index":5,"t":{"688":{"position":[[0,7]]}}}],["storag",{"_index":6,"t":{"688":{"position":[[8,7]]}}}],["tl",{"_index":7,"t":{"694":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":633,"t":"Security Disclosures","u":"/oauth2-proxy/docs/7.2.x/community/security","h":"#security-disclosures","p":631},{"i":635,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.2.x/community/security","h":"#how-will-we-respond-to-disclosures","p":631},{"i":639,"t":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#using-alpha-configuration","p":637},{"i":641,"t":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":637},{"i":643,"t":"Removed options","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#removed-options","p":637},{"i":645,"t":"Configuration Reference","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#configuration-reference","p":637},{"i":646,"t":"ADFSOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#adfsoptions","p":637},{"i":648,"t":"AlphaOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#alphaoptions","p":637},{"i":650,"t":"AzureOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#azureoptions","p":637},{"i":652,"t":"BitbucketOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#bitbucketoptions","p":637},{"i":654,"t":"ClaimSource","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#claimsource","p":637},{"i":656,"t":"Duration","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#duration","p":637},{"i":658,"t":"GitHubOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#githuboptions","p":637},{"i":660,"t":"GitLabOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#gitlaboptions","p":637},{"i":662,"t":"GoogleOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#googleoptions","p":637},{"i":664,"t":"Header","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#header","p":637},{"i":666,"t":"HeaderValue","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#headervalue","p":637},{"i":668,"t":"KeycloakOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#keycloakoptions","p":637},{"i":670,"t":"LoginGovOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#logingovoptions","p":637},{"i":672,"t":"OIDCOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#oidcoptions","p":637},{"i":674,"t":"Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#provider","p":637},{"i":676,"t":"Providers","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#providers","p":637},{"i":678,"t":"SecretSource","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#secretsource","p":637},{"i":680,"t":"Server","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#server","p":637},{"i":682,"t":"TLS","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#tls","p":637},{"i":684,"t":"Upstream","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#upstream","p":637},{"i":686,"t":"UpstreamConfig","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#upstreamconfig","p":637},{"i":690,"t":"Cookie Storage","u":"/oauth2-proxy/docs/7.2.x/configuration/session_storage","h":"#cookie-storage","p":688},{"i":692,"t":"Redis Storage","u":"/oauth2-proxy/docs/7.2.x/configuration/session_storage","h":"#redis-storage","p":688},{"i":698,"t":"Sign out","u":"/oauth2-proxy/docs/7.2.x/features/endpoints","h":"#sign-out","p":696},{"i":702,"t":"Google Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#google-auth-provider","p":700},{"i":704,"t":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#azure-auth-provider","p":700},{"i":706,"t":"ADFS Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#adfs-auth-provider","p":700},{"i":708,"t":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":700},{"i":710,"t":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#github-auth-provider","p":700},{"i":712,"t":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":700},{"i":714,"t":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":700},{"i":716,"t":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":700},{"i":718,"t":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":700},{"i":720,"t":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#openid-connect-provider","p":700},{"i":722,"t":"login.gov Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#logingov-provider","p":700},{"i":724,"t":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#nextcloud-provider","p":700},{"i":726,"t":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":700},{"i":728,"t":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":700},{"i":730,"t":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":700},{"i":732,"t":"Email Authentication","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#email-authentication","p":700},{"i":734,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":700},{"i":738,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#generating-a-cookie-secret","p":736},{"i":740,"t":"Config File","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#config-file","p":736},{"i":742,"t":"Command Line Options","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#command-line-options","p":736},{"i":744,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#upstreams-configuration","p":736},{"i":746,"t":"Environment variables","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#environment-variables","p":736},{"i":748,"t":"Logging Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#logging-configuration","p":736},{"i":750,"t":"Auth Log Format","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#auth-log-format","p":736},{"i":752,"t":"Request Log Format","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#request-log-format","p":736},{"i":754,"t":"Standard Log Format","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#standard-log-format","p":736},{"i":756,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":736},{"i":758,"t":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":736},{"i":760,"t":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":736},{"i":762,"t":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":736}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/633",[0,3.86,1,3.328]],["t/635",[1,3.328,2,3.86]],["t/639",[3,2.497,4,3.237,5,1.722]],["t/641",[5,1.483,6,2.788,7,2.404,8,2.788]],["t/643",[9,3.86,10,3.328]],["t/645",[5,2.053,11,3.86]],["t/646",[12,4.778]],["t/648",[13,4.778]],["t/650",[14,4.778]],["t/652",[15,4.778]],["t/654",[16,4.778]],["t/656",[17,4.778]],["t/658",[18,4.778]],["t/660",[19,4.778]],["t/662",[20,4.778]],["t/664",[21,4.778]],["t/666",[22,4.778]],["t/668",[23,4.778]],["t/670",[24,4.778]],["t/672",[25,4.778]],["t/674",[26,1.539]],["t/676",[26,1.539]],["t/678",[27,4.778]],["t/680",[28,4.778]],["t/682",[29,4.778]],["t/684",[30,3.686]],["t/686",[31,4.778]],["t/690",[32,3.328,33,3.328]],["t/692",[33,3.328,34,3.86]],["t/698",[35,3.86,36,3.86]],["t/702",[26,1.042,37,3.237,38,1.318]],["t/704",[26,1.042,38,1.318,39,3.237]],["t/706",[26,1.042,38,1.318,40,3.237]],["t/708",[26,1.042,38,1.318,41,3.237]],["t/710",[26,1.042,38,1.318,42,3.237]],["t/712",[26,1.042,38,1.318,43,2.791]],["t/714",[26,0.898,38,1.135,43,2.404,44,2.788]],["t/716",[26,1.042,38,1.318,45,3.237]],["t/718",[26,1.042,38,1.318,46,3.237]],["t/720",[26,1.042,47,3.237,48,3.237]],["t/722",[26,1.243,49,3.86]],["t/724",[26,1.243,50,3.86]],["t/726",[26,1.042,38,1.318,51,3.237]],["t/728",[26,1.042,38,1.318,52,3.237]],["t/730",[26,1.042,38,1.318,53,3.237]],["t/732",[54,3.86,55,3.86]],["t/734",[7,2.791,26,1.042,56,3.237]],["t/738",[32,2.791,57,3.237,58,3.237]],["t/740",[59,3.86,60,3.86]],["t/742",[10,2.791,61,3.237,62,3.237]],["t/744",[5,2.053,30,2.977]],["t/746",[63,3.86,64,3.86]],["t/748",[5,2.053,65,2.715]],["t/750",[38,1.318,65,2.278,66,2.497]],["t/752",[65,2.278,66,2.497,67,3.237]],["t/754",[65,2.278,66,2.497,68,3.237]],["t/756",[3,1.888,5,1.302,69,2.448,70,2.448,71,2.448]],["t/758",[3,1.683,5,1.161,72,2.182,73,2.182,74,1.683,75,1.881]],["t/760",[74,2.15,75,2.404,76,2.788,77,2.788]],["t/762",[5,1.483,30,2.15,74,2.15,78,2.788]]],"invertedIndex":[["401",{"_index":76,"t":{"760":{"position":[[17,3]]}}}],["ad",{"_index":56,"t":{"734":{"position":[[0,6]]}}}],["adf",{"_index":40,"t":{"706":{"position":[[0,4]]}}}],["adfsopt",{"_index":12,"t":{"646":{"position":[[0,11]]}}}],["alpha",{"_index":4,"t":{"639":{"position":[[6,5]]}}}],["alphaopt",{"_index":13,"t":{"648":{"position":[[0,12]]}}}],["auth",{"_index":38,"t":{"702":{"position":[[7,4]]},"704":{"position":[[6,4]]},"706":{"position":[[5,4]]},"708":{"position":[[9,4]]},"710":{"position":[[7,4]]},"712":{"position":[[9,4]]},"714":{"position":[[14,4]]},"716":{"position":[[7,4]]},"718":{"position":[[9,4]]},"726":{"position":[[13,4]]},"728":{"position":[[10,4]]},"730":{"position":[[6,4]]},"750":{"position":[[0,4]]}}}],["auth_request",{"_index":70,"t":{"756":{"position":[[35,12]]}}}],["authent",{"_index":55,"t":{"732":{"position":[[6,14]]}}}],["azur",{"_index":39,"t":{"704":{"position":[[0,5]]}}}],["azureopt",{"_index":14,"t":{"650":{"position":[[0,12]]}}}],["bitbucket",{"_index":52,"t":{"728":{"position":[[0,9]]}}}],["bitbucketopt",{"_index":15,"t":{"652":{"position":[[0,16]]}}}],["claimsourc",{"_index":16,"t":{"654":{"position":[[0,11]]}}}],["command",{"_index":61,"t":{"742":{"position":[[0,7]]}}}],["config",{"_index":59,"t":{"740":{"position":[[0,6]]}}}],["configur",{"_index":5,"t":{"639":{"position":[[12,13]]},"641":{"position":[[11,13]]},"645":{"position":[[0,13]]},"744":{"position":[[10,13]]},"748":{"position":[[8,13]]},"756":{"position":[[0,11]]},"758":{"position":[[0,11]]},"762":{"position":[[34,13]]}}}],["connect",{"_index":48,"t":{"720":{"position":[[7,7]]}}}],["convert",{"_index":6,"t":{"641":{"position":[[0,10]]}}}],["cooki",{"_index":32,"t":{"690":{"position":[[0,6]]},"738":{"position":[[13,6]]}}}],["digitalocean",{"_index":51,"t":{"726":{"position":[[0,12]]}}}],["direct",{"_index":71,"t":{"756":{"position":[[48,9]]}}}],["disclosur",{"_index":1,"t":{"633":{"position":[[9,11]]},"635":{"position":[[23,12]]}}}],["durat",{"_index":17,"t":{"656":{"position":[[0,8]]}}}],["email",{"_index":54,"t":{"732":{"position":[[0,5]]}}}],["environ",{"_index":63,"t":{"746":{"position":[[0,11]]}}}],["error",{"_index":77,"t":{"760":{"position":[[21,6]]}}}],["facebook",{"_index":41,"t":{"708":{"position":[[0,8]]}}}],["file",{"_index":60,"t":{"740":{"position":[[7,4]]}}}],["format",{"_index":66,"t":{"750":{"position":[[9,6]]},"752":{"position":[[12,6]]},"754":{"position":[[13,6]]}}}],["forwardauth",{"_index":74,"t":{"758":{"position":[[42,11]]},"760":{"position":[[0,11]]},"762":{"position":[[0,11]]}}}],["gener",{"_index":57,"t":{"738":{"position":[[0,10]]}}}],["gitea",{"_index":53,"t":{"730":{"position":[[0,5]]}}}],["github",{"_index":42,"t":{"710":{"position":[[0,6]]}}}],["githubopt",{"_index":18,"t":{"658":{"position":[[0,13]]}}}],["gitlab",{"_index":45,"t":{"716":{"position":[[0,6]]}}}],["gitlabopt",{"_index":19,"t":{"660":{"position":[[0,13]]}}}],["googl",{"_index":37,"t":{"702":{"position":[[0,6]]}}}],["googleopt",{"_index":20,"t":{"662":{"position":[[0,13]]}}}],["header",{"_index":21,"t":{"664":{"position":[[0,6]]}}}],["headervalu",{"_index":22,"t":{"666":{"position":[[0,11]]}}}],["keycloak",{"_index":43,"t":{"712":{"position":[[0,8]]},"714":{"position":[[0,8]]}}}],["keycloakopt",{"_index":23,"t":{"668":{"position":[[0,15]]}}}],["line",{"_index":62,"t":{"742":{"position":[[8,4]]}}}],["linkedin",{"_index":46,"t":{"718":{"position":[[0,8]]}}}],["log",{"_index":65,"t":{"748":{"position":[[0,7]]},"750":{"position":[[5,3]]},"752":{"position":[[8,3]]},"754":{"position":[[9,3]]}}}],["login.gov",{"_index":49,"t":{"722":{"position":[[0,9]]}}}],["logingovopt",{"_index":24,"t":{"670":{"position":[[0,15]]}}}],["middlewar",{"_index":75,"t":{"758":{"position":[[54,10]]},"760":{"position":[[28,10]]}}}],["new",{"_index":7,"t":{"641":{"position":[[32,3]]},"734":{"position":[[9,3]]}}}],["nextcloud",{"_index":50,"t":{"724":{"position":[[0,9]]}}}],["nginx",{"_index":69,"t":{"756":{"position":[[29,5]]}}}],["oidc",{"_index":44,"t":{"714":{"position":[[9,4]]}}}],["oidcopt",{"_index":25,"t":{"672":{"position":[[0,11]]}}}],["openid",{"_index":47,"t":{"720":{"position":[[0,6]]}}}],["option",{"_index":10,"t":{"643":{"position":[[8,7]]},"742":{"position":[[13,7]]}}}],["out",{"_index":36,"t":{"698":{"position":[[5,3]]}}}],["provid",{"_index":26,"t":{"674":{"position":[[0,8]]},"676":{"position":[[0,9]]},"702":{"position":[[12,8]]},"704":{"position":[[11,8]]},"706":{"position":[[10,8]]},"708":{"position":[[14,8]]},"710":{"position":[[12,8]]},"712":{"position":[[14,8]]},"714":{"position":[[19,8]]},"716":{"position":[[12,8]]},"718":{"position":[[14,8]]},"720":{"position":[[15,8]]},"722":{"position":[[10,8]]},"724":{"position":[[10,8]]},"726":{"position":[[18,8]]},"728":{"position":[[15,8]]},"730":{"position":[[11,8]]},"734":{"position":[[13,8]]}}}],["redi",{"_index":34,"t":{"692":{"position":[[0,5]]}}}],["refer",{"_index":11,"t":{"645":{"position":[[14,9]]}}}],["remov",{"_index":9,"t":{"643":{"position":[[0,7]]}}}],["request",{"_index":67,"t":{"752":{"position":[[0,7]]}}}],["respond",{"_index":2,"t":{"635":{"position":[[12,7]]}}}],["secret",{"_index":58,"t":{"738":{"position":[[20,6]]}}}],["secretsourc",{"_index":27,"t":{"678":{"position":[[0,12]]}}}],["secur",{"_index":0,"t":{"633":{"position":[[0,8]]}}}],["server",{"_index":28,"t":{"680":{"position":[[0,6]]}}}],["sign",{"_index":35,"t":{"698":{"position":[[0,4]]}}}],["standard",{"_index":68,"t":{"754":{"position":[[0,8]]}}}],["static",{"_index":78,"t":{"762":{"position":[[17,6]]}}}],["storag",{"_index":33,"t":{"690":{"position":[[7,7]]},"692":{"position":[[6,7]]}}}],["structur",{"_index":8,"t":{"641":{"position":[[36,9]]}}}],["tl",{"_index":29,"t":{"682":{"position":[[0,3]]}}}],["traefik",{"_index":72,"t":{"758":{"position":[[29,7]]}}}],["upstream",{"_index":30,"t":{"684":{"position":[[0,8]]},"744":{"position":[[0,9]]},"762":{"position":[[24,9]]}}}],["upstreamconfig",{"_index":31,"t":{"686":{"position":[[0,14]]}}}],["us",{"_index":3,"t":{"639":{"position":[[0,5]]},"756":{"position":[[16,3]]},"758":{"position":[[16,3]]}}}],["v2",{"_index":73,"t":{"758":{"position":[[37,4]]}}}],["variabl",{"_index":64,"t":{"746":{"position":[[12,9]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":628,"t":"Choose how to deploy: a. Download Prebuilt Binary (current release is v7.2.1) b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available) d. Using a Kubernetes manifest (Helm) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. $ sha256sum -c sha256sum.txtoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/7.2.x/","h":"","p":627},{"i":630,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/7.2.x/behaviour","h":"","p":629},{"i":632,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/7.2.x/community/security","h":"","p":631},{"i":634,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/7.2.x/community/security","h":"#security-disclosures","p":631},{"i":636,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.2.x/community/security","h":"#how-will-we-respond-to-disclosures","p":631},{"i":638,"t":"danger This page contains documentation for alpha features. We reserve the right to make breaking changes to the features detailed within this page with no notice. Options described in this page may be changed, removed, renamed or moved without prior warning. Please beware of this before you use alpha configuration options. This page details a set of alpha configuration options in a new format. Going forward we are intending to add structured configuration in YAML format to replace the existing TOML based configuration file and flags. Below is a reference for the structure of the configuration, with AlphaOptions as the root of the configuration. When using alpha configuration, your config file will look something like below: upstreams: - id: ... ...injectRequestHeaders: - name: ... ...injectResponseHeaders: - name: ... ... Please browse the reference below for the structure of the new configuration format.","s":"Alpha Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"","p":637},{"i":640,"t":"To use the new alpha configuration, generate a YAML file based on the format described in the reference below. Provide the path to this file using the --alpha-config flag. note When using the --alpha-config flag, some options are no longer available. See removed options below for more information.","s":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#using-alpha-configuration","p":637},{"i":642,"t":"Before adding the new --alpha-config option, start OAuth2 Proxy using the convert-config-to-alpha flag to convert existing configuration to the new format. oauth2-proxy --convert-config-to-alpha --config ./path/to/existing/config.cfg This will convert any options supported by the new format to YAML and print the new configuration to STDOUT. Copy this to a new file, remove any options from your existing configuration noted in removed options and then start OAuth2 Proxy using the new config. oauth2-proxy --alpha-config ./path/to/new/config.yaml --config ./path/to/existing/config.cfg","s":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":637},{"i":644,"t":"The following flags/options and their respective environment variables are no longer available when using alpha configuration: flush-interval/flush_interval pass-host-header/pass_host_header proxy-websockets/proxy_websockets ssl-upstream-insecure-skip-verify/ssl_upstream_insecure_skip_verify upstream/upstreams pass-basic-auth/pass_basic_auth pass-access-token/pass_access_token pass-user-headers/pass_user_headers pass-authorization-header/pass_authorization_header set-basic-auth/set_basic_auth set-xauthrequest/set_xauthrequest set-authorization-header/set_authorization_header prefer-email-to-user/prefer_email_to_user basic-auth-password/basic_auth_password skip-auth-strip-headers/skip_auth_strip_headers Attempting to use these options via flags or via config when --alpha-config set will result in an error. info You must remove these options before starting OAuth2 Proxy with --alpha-config","s":"Removed options","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#removed-options","p":637},{"i":647,"t":"(Appears on: Provider) Field Type Description skipScope bool Skip adding the scope parameter in login requestDefault value is 'false'","s":"ADFSOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#adfsoptions","p":637},{"i":649,"t":"AlphaOptions contains alpha structured configuration options. Usage of these options allows users to access alpha features that are not available as part of the primary configuration structure for OAuth2 Proxy. danger The options within this structure are considered alpha. They may change between releases without notice. Field Type Description upstreamConfig UpstreamConfig UpstreamConfig is used to configure upstream servers.Once a user is authenticated, requests to the server will be proxied tothese upstream servers based on the path mappings defined in this list. injectRequestHeaders []Header InjectRequestHeaders is used to configure headers that should be addedto requests to upstream servers.Headers may source values from either the authenticated user's sessionor from a static secret value. injectResponseHeaders []Header InjectResponseHeaders is used to configure headers that should be addedto responses from the proxy.This is typically used when using the proxy as an external authenticationprovider in conjunction with another proxy such as NGINX and itsauth_request module.Headers may source values from either the authenticated user's sessionor from a static secret value. server Server Server is used to configure the HTTP(S) server for the proxy application.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. metricsServer Server MetricsServer is used to configure the HTTP(S) server for metrics.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. providers Providers Providers is used to configure multiple providers.","s":"AlphaOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#alphaoptions","p":637},{"i":651,"t":"(Appears on: Provider) Field Type Description tenant string Tenant directs to a tenant-specific or common (tenant-independent) endpointDefault value is 'common'","s":"AzureOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#azureoptions","p":637},{"i":653,"t":"(Appears on: Provider) Field Type Description team string Team sets restrict logins to members of this team repository string Repository sets restrict logins to user with access to this repository","s":"BitbucketOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#bitbucketoptions","p":637},{"i":655,"t":"(Appears on: HeaderValue) ClaimSource allows loading a header value from a claim within the session Field Type Description claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"ClaimSource","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#claimsource","p":637},{"i":657,"t":"(string alias)​ (Appears on: Upstream) Duration is as string representation of a period of time. A duration string is a is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\", \"-1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".","s":"Duration","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#duration","p":637},{"i":659,"t":"(Appears on: Provider) Field Type Description org string Org sets restrict logins to members of this organisation team string Team sets restrict logins to members of this team repo string Repo sets restrict logins to collaborators of this repository token string Token is the token to use when verifying repository collaboratorsit must have push access to the repository users []string Users allows users with these usernames to logineven if they do not belong to the specified org and team or collaborators","s":"GitHubOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#githuboptions","p":637},{"i":661,"t":"(Appears on: Provider) Field Type Description group []string Group sets restrict logins to members of this group projects []string Projects restricts logins to members of any of these projects","s":"GitLabOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#gitlaboptions","p":637},{"i":663,"t":"(Appears on: Provider) Field Type Description group []string Groups sets restrict logins to members of this google group adminEmail string AdminEmail is the google admin to impersonate for api calls serviceAccountJson string ServiceAccountJSON is the path to the service account json credentials","s":"GoogleOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#googleoptions","p":637},{"i":665,"t":"(Appears on: AlphaOptions) Header represents an individual header that will be added to a request or response header. Field Type Description name string Name is the header name to be used for this set of values.Names should be unique within a list of Headers. preserveRequestValue bool PreserveRequestValue determines whether any values for this headershould be preserved for the request to the upstream server.This option only applies to injected request headers.Defaults to false (headers that match this header will be stripped). values []HeaderValue Values contains the desired values for this header","s":"Header","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#header","p":637},{"i":667,"t":"(Appears on: Header) HeaderValue represents a single header value and the sources that can make up the header value Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value. claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"HeaderValue","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#headervalue","p":637},{"i":669,"t":"(Appears on: Provider) Field Type Description groups []string Group enables to restrict login to members of indicated group roles []string Role enables to restrict login to users with role (only available when using the keycloak-oidc provider)","s":"KeycloakOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#keycloakoptions","p":637},{"i":671,"t":"(Appears on: Provider) Field Type Description jwtKey string JWTKey is a private key in PEM format used to sign JWT, jwtKeyFile string JWTKeyFile is a path to the private key file in PEM format used to sign the JWT pubjwkURL string PubJWKURL is the JWK pubkey access endpoint","s":"LoginGovOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#logingovoptions","p":637},{"i":673,"t":"(Appears on: Provider) Field Type Description issuerURL string IssuerURL is the OpenID Connect issuer URLeg: https://accounts.google.com insecureAllowUnverifiedEmail bool InsecureAllowUnverifiedEmail prevents failures if an email address in an id_token is not verifieddefault set to 'false' insecureSkipIssuerVerification bool InsecureSkipIssuerVerification skips verification of ID token issuers. When false, ID Token Issuers must match the OIDC discovery URLdefault set to 'false' insecureSkipNonce bool InsecureSkipNonce skips verifying the ID Token's nonce claim that must matchthe random nonce sent in the initial OAuth flow. Otherwise, the nonce is checkedafter the initial OAuth redeem & subsequent token refreshes.default set to 'true'Warning: In a future release, this will change to 'false' by default for enhanced security. skipDiscovery bool SkipDiscovery allows to skip OIDC discovery and use manually supplied Endpointsdefault set to 'false' jwksURL string JwksURL is the OpenID Connect JWKS URLeg: https://www.googleapis.com/oauth2/v3/certs emailClaim string EmailClaim indicates which claim contains the user email,default set to 'email' groupsClaim string GroupsClaim indicates which claim contains the user groupsdefault set to 'groups' userIDClaim string UserIDClaim indicates which claim contains the user IDdefault set to 'email'","s":"OIDCOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#oidcoptions","p":637},{"i":675,"t":"(Appears on: Providers) Provider holds all configuration for a single provider Field Type Description clientID string ClientID is the OAuth Client ID that is defined in the providerThis value is required for all providers. clientSecret string ClientSecret is the OAuth Client Secret that is defined in the providerThis value is required for all providers. clientSecretFile string ClientSecretFile is the name of the filecontaining the OAuth Client Secret, it will be used if ClientSecret is not set. keycloakConfig KeycloakOptions KeycloakConfig holds all configurations for Keycloak provider. azureConfig AzureOptions AzureConfig holds all configurations for Azure provider. ADFSConfig ADFSOptions ADFSConfig holds all configurations for ADFS provider. bitbucketConfig BitbucketOptions BitbucketConfig holds all configurations for Bitbucket provider. githubConfig GitHubOptions GitHubConfig holds all configurations for GitHubC provider. gitlabConfig GitLabOptions GitLabConfig holds all configurations for GitLab provider. googleConfig GoogleOptions GoogleConfig holds all configurations for Google provider. oidcConfig OIDCOptions OIDCConfig holds all configurations for OIDC provideror providers utilize OIDC configurations. loginGovConfig LoginGovOptions LoginGovConfig holds all configurations for LoginGov provider. id string ID should be a unique identifier for the provider.This value is required for all providers. provider string Type is the OAuth providermust be set from the supported providers group,otherwise 'Google' is set as default name string Name is the providers display nameif set, it will be shown to the users in the login page. caFiles []string CAFiles is a list of paths to CA certificates that should be used when connecting to the provider.If not specified, the default Go trust sources are used instead loginURL string LoginURL is the authentication endpoint redeemURL string RedeemURL is the token redemption endpoint profileURL string ProfileURL is the profile access endpoint resource string ProtectedResource is the resource that is protected (Azure AD and ADFS only) validateURL string ValidateURL is the access token validation endpoint scope string Scope is the OAuth scope specification prompt string Prompt is OIDC prompt approvalPrompt string ApprovalPrompt is the OAuth approval_promptdefault is set to 'force' allowedGroups []string AllowedGroups is a list of restrict logins to members of this group acrValues string AcrValues is a string of acr values","s":"Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#provider","p":637},{"i":677,"t":"([]Provider alias)​ (Appears on: AlphaOptions) Providers is a collection of definitions for providers.","s":"Providers","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#providers","p":637},{"i":679,"t":"(Appears on: ClaimSource, HeaderValue, TLS) SecretSource references an individual secret value. Only one source within the struct should be defined at any time. Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value.","s":"SecretSource","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#secretsource","p":637},{"i":681,"t":"(Appears on: AlphaOptions) Server represents the configuration for an HTTP(S) server Field Type Description BindAddress string BindAddress is the address on which to serve traffic.Leave blank or set to \"-\" to disable. SecureBindAddress string SecureBindAddress is the address on which to serve secure traffic.Leave blank or set to \"-\" to disable. TLS TLS TLS contains the information for loading the certificate and key for thesecure traffic.","s":"Server","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#server","p":637},{"i":683,"t":"(Appears on: Server) TLS contains the information for loading a TLS certifcate and key. Field Type Description Key SecretSource Key is the TLS key data to use.Typically this will come from a file. Cert SecretSource Cert is the TLS certificate data to use.Typically this will come from a file.","s":"TLS","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#tls","p":637},{"i":685,"t":"(Appears on: UpstreamConfig) Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path. Field Type Description id string ID should be a unique identifier for the upstream.This value is required for all upstreams. path string Path is used to map requests to the upstream server.The closest match will take precedence and all Paths must be unique.Path can also take a pattern when used with RewriteTarget.Path segments can be captured and matched using regular experessions.Eg:- ^/foo$: Match only the explicit path /foo- ^/bar/$: Match any path prefixed with /bar/- ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget rewriteTarget string RewriteTarget allows users to rewrite the request path before it is sent tothe upstream server.Use the Path to capture segments for reuse within the rewrite target.Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewritethe request /baz/abc/123 to /foo/abc/123 before proxying to theupstream server. uri string The URI of the upstream server. This may be an HTTP(S) server of a Filebased URL. It may include a path, in which case all requests will be servedunder that path.Eg:- http://localhost:8080- https://service.localhost- https://service.localhost/path- file://host/pathIf the URI's path is \"/base\" and the incoming request was for \"/dir\",the upstream request will be for \"/base/dir\". insecureSkipTLSVerify bool InsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.This option is insecure and will allow potential Man-In-The-Middle attacksbetweem OAuth2 Proxy and the usptream server.Defaults to false. static bool Static will make all requests to this upstream have a static response.The response will have a body of \"Authenticated\" and a response codematching StaticCode.If StaticCode is not set, the response will return a 200 response. staticCode int StaticCode determines the response code for the Static response.This option can only be used with Static enabled. flushInterval Duration FlushInterval is the period between flushing the response buffer whenstreaming response from the upstream.Defaults to 1 second. passHostHeader bool PassHostHeader determines whether the request host header should be proxiedto the upstream server.Defaults to true. proxyWebSockets bool ProxyWebSockets enables proxying of websockets to upstream serversDefaults to true.","s":"Upstream","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#upstream","p":637},{"i":687,"t":"(Appears on: AlphaOptions) UpstreamConfig is a collection of definitions for upstream servers. Field Type Description proxyRawPath bool ProxyRawPath will pass the raw url path to upstream allowing for url'slike: \"/%2F/\" which would otherwise be redirected to \"/\" upstreams []Upstream Upstreams represents the configuration for the upstream servers.Requests will be proxied to this upstream if the path matches the request path.","s":"UpstreamConfig","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#upstreamconfig","p":637},{"i":689,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/7.2.x/configuration/session_storage","h":"","p":688},{"i":691,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/7.2.x/configuration/session_storage","h":"#cookie-storage","p":688},{"i":693,"t":"The Redis Storage backend stores sessions, encrypted, in redis. Instead sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128 bit random number, hex-encoded The secret is a 128 bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.","s":"Redis Storage","u":"/oauth2-proxy/docs/7.2.x/configuration/session_storage","h":"#redis-storage","p":688},{"i":695,"t":"There are two recommended configurations. Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or .... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"TLS Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/tls","h":"","p":694},{"i":697,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive","s":"Endpoints","u":"/oauth2-proxy/docs/7.2.x/features/endpoints","h":"","p":696},{"i":699,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.","s":"Sign out","u":"/oauth2-proxy/docs/7.2.x/features/endpoints","h":"#sign-out","p":696},{"i":701,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure ADFS Facebook GitHub Keycloak GitLab LinkedIn OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket Gitea The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"","p":700},{"i":703,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"API Manager\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account: https://developers.google.com/identity/protocols/OAuth2ServiceAccount and make sure to download the json file. Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ).","s":"Google Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#google-auth-provider","p":700},{"i":705,"t":"Add an application: go to https://portal.azure.com, choose \"Azure Active Directory\" in the left menu, select \"App registrations\" and then click on \"New app registration\". Pick a name and choose \"Webapp / API\" as application type. Use https://internal.yourcompany.com as Sign-on URL. Click \"Create\". On the \"Settings\" / \"Properties\" page of the app, pick a logo and select \"Multi-tenanted\" if you want to allow users from multiple organizations to access your app. Note down the application ID. Click \"Save\". On the \"Settings\" / \"Required Permissions\" page of the app, click on \"Windows Azure Active Directory\" and then on \"Access the directory as the signed in user\". Hit \"Save\" and then then on \"Grant permissions\" (you might need another admin to do this). On the \"Settings\" / \"Reply URLs\" page of the app, add https://internal.yourcompanycom/oauth2/callback for each host that you want to protect by the oauth2 proxy. Click \"Save\". On the \"Settings\" / \"Keys\" page of the app, add a new key and note down the value after hitting \"Save\". Configure the proxy with --provider=azure --client-id= --client-secret= --oidc-issuer-url=https://sts.windows.net/{tenant-id}/ Note: When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#azure-auth-provider","p":700},{"i":707,"t":"Open the ADFS administration console on your Windows Server and add a new Application Group Provide a name for the integration, select Server Application from the Standalone applications section and click Next Follow the wizard to get the client-id, client-secret and configure the application credentials Configure the proxy with --provider=adfs --client-id= --client-secret= Note: When using the ADFS Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"ADFS Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#adfs-auth-provider","p":700},{"i":709,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":700},{"i":711,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to login even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to login with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#github-auth-provider","p":700},{"i":713,"t":"note This is the legacy provider for Keycloak, use Keycloak OIDC Auth Provider if possible. Create new client in your Keycloak realm with Access Type 'confidental' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: --provider=keycloak --client-id= --client-secret= --login-url=\"http(s):///auth/realms//protocol/openid-connect/auth\" --redeem-url=\"http(s):///auth/realms//protocol/openid-connect/token\" --profile-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --validate-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --keycloak-group= --keycloak-group= For group based authorization, the optional --keycloak-group (legacy) or --allowed-group (global standard) flags can be used to specify which groups to limit access to. If these are unset but a groups mapper is set up above in step (3), the provider will still populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response. The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":700},{"i":715,"t":"Create new client in your Keycloak realm with Access Type 'confidental', Client protocol 'openid-connect' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Create a mapper with Mapper Type 'Audience' and Included Client Audience and Included Custom Audience set to your client name. Make sure you set the following to the appropriate url: --provider=keycloak-oidc --client-id= --client-secret= --redirect-url=https://myapp.com/oauth2/callback --oidc-issuer-url=https:///auth/realms/ --allowed-role= // Optional, required realm role --allowed-role=: // Optional, required client role","s":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":700},{"i":717,"t":"This auth provider has been tested against Gitlab version 12.X. Due to Gitlab API changes, it may not work for version prior to 12.X (see 994). Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. If you need projects filtering, add the extra read_api scope to your application. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\" If your self-hosted GitLab is on a sub-directory (e.g. domain.tld/gitlab), as opposed to its own sub-domain (e.g. gitlab.domain.tld), you may need to add a redirect from domain.tld/oauth pointing at e.g. domain.tld/gitlab/oauth.","s":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":700},{"i":719,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":700},{"i":721,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex and we will use it as an example. The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta, an example can be found below. Dex​ To configure the OIDC provider for Dex, perform the following steps: Download Dex: go get github.com/dexidp/dex See the getting started guide for more details. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Add a configuration block to the staticClients section of examples/config-dev.yaml: - id: oauth2-proxyredirectURIs:- 'http://127.0.0.1:4180/oauth2/callback'name: 'oauth2-proxy'secret: proxy Launch Dex: from $GOPATH/github.com/dexidp/dex, run: bin/dex serve examples/config-dev.yaml In a second terminal, run the oauth2-proxy with the following args: -provider oidc-provider-display-name \"My OIDC Provider\"-client-id oauth2-proxy-client-secret proxy-redirect-url http://127.0.0.1:4180/oauth2/callback-oidc-issuer-url http://127.0.0.1:5556/dex-cookie-secure=false-cookie-secret=secret-email-domain kilgore.trout To serve the current working directory as a web site under the /static endpoint, add: -upstream file://$PWD/#/static/ Test the setup by visiting http://127.0.0.1:4180 or http://127.0.0.1:4180/static . See also our local testing environment for a self-contained example using Docker and etcd as storage for Dex. Okta​ To configure the OIDC provider for Okta, perform the following steps: Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com . The client_id and client_secret are configured in the application settings. Generate a unique cookie_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#openid-connect-provider","p":700},{"i":723,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048 bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost', The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"login.gov Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#logingov-provider","p":700},{"i":725,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to setup the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#nextcloud-provider","p":700},{"i":727,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":700},{"i":729,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who has access to one selected repository use --bitbucket-repository=.","s":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":700},{"i":731,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1\"","s":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":700},{"i":733,"t":"To authorize by email domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#email-authentication","p":700},{"i":735,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":700},{"i":737,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"","p":736},{"i":739,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_'; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#generating-a-cookie-secret","p":736},{"i":741,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#config-file","p":736},{"i":743,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --custom-templates-dir string path to custom html templates --custom-sign-in-logo string path or a URL to an custom image for the sign_in page logo. Use \\\"-\\\" to disable default logo. --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --force-json-errors bool force JSON errors instead of HTTP error pages or redirects false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --gitlab-projects string | list restrict logins to members of any of these projects (may be given multiple times) formatted as orgname/repo=accesslevel. Access level should be a value matching Gitlab access levels, defaulted to 20 if absent --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -B for bcrypt encryption --htpasswd-user-group string | list the groups to be set on sessions for htpasswd users --http-address string [http://]: or unix:// to listen on for HTTP clients \"127.0.0.1:4180\" --https-address string : to listen on for HTTPS clients \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --insecure-oidc-skip-nonce bool skip verifying the OIDC ID Token's nonce claim true --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --oidc-email-claim string which OIDC claim contains the user's email \"email\" --oidc-groups-claim string which OIDC claim contains the user groups \"groups\" --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Groups, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --metrics-address string the address prometheus metrics will be scraped from \"\" --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --request-id-header string Request header to use as the request ID in logging X-Request-Id --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted and allows X-Forwarded-{Proto,Host,Uri} headers to be used on redirect selection false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Groups, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --show-debug-on-error bool show detailed error information on error pages (WARNING: this may contain sensitive information - do not use in production) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping endpoint false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string | list (DEPRECATED for --skip-auth-route) bypass authentication for requests paths that match (may be given multiple times) --skip-auth-route string | list bypass authentication for requests that match the method & path. Format: method=path_regex OR path_regex alone for all methods --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy true --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-key-file string path to private key file --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --allowed-group string | list restrict logins to members of this group (may be given multiple times) --allowed-role string | list restrict logins to users with this role (may be given multiple times). Only works with the keycloak-oidc provider. --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . to allow subdomains (e.g. .example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. [1]: Only these providers support --cookie-refresh: GitLab, Google and OIDC [2]: When using the whitelist-domain option, any domain prefixed with a . will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URL's protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*. See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#command-line-options","p":736},{"i":745,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#upstreams-configuration","p":736},{"i":747,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside of a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#environment-variables","p":736},{"i":749,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) can be disabled with --silence-ping-logging reducing log volume. This flag appends the --ping-path to --exclude-logging-paths.","s":"Logging Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#logging-configuration","p":736},{"i":751,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Message Authenticated via OAuth2 The details of the auth attempt. Protocol HTTP/1.0 The request protocol. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details.","s":"Auth Log Format","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#auth-log-format","p":736},{"i":753,"t":"HTTP request logs will output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#request-log-format","p":736},{"i":755,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#standard-log-format","p":736},{"i":757,"t":"The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\".","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":736},{"i":759,"t":"This option requires --reverse-proxy option to be set.","s":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":736},{"i":761,"t":"The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration: http: routers: a-service: rule: \"Host(`a-service.example.com`)\" service: a-service-backend middlewares: - oauth-errors - oauth-auth tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth: rule: \"Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true oauth-errors: errors: status: - \"401-403\" service: oauth-backend query: \"/oauth2/sign_in\"","s":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":736},{"i":763,"t":"Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint Following options need to be set on oauth2-proxy: --upstream=static://202: Configures a static response for authenticated sessions --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly http: routers: a-service-route-1: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)\" service: a-service-backend middlewares: - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" a-service-route-2: rule: \"Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)\" service: a-service-backend middlewares: - oauth-auth-wo-redirect # unauthenticated session will return a 401 tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services-oauth2-route: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth2-proxy-route: rule: \"Host(`oauth.example.com`) && PathPrefix(`/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 b-service-backend: loadBalancer: servers: - url: http://172.16.0.3:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth-redirect: forwardAuth: address: https://oauth.example.com/ trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization oauth-auth-wo-redirect: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":736}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/628",[0,3.047,1,4.914,2,3.328,3,6.364,4,6.364,5,3.047,6,4.043,7,4.274,8,3.328,9,3.703,10,1.31,11,2.477,12,4.274,13,5.67,14,4.274,15,4.274,16,4.274,17,4.914,18,0.621,19,3.328,20,3.328,21,4.274,22,1.201,23,5.67,24,4.274,25,4.274,26,4.274,27,1.821,28,3.703,29,3.703,30,4.274,31,4.274,32,1.741,33,3.703,34,1.863,35,2.823,36,2.637,37,4.274,38,4.274,39,1.227,40,2.637,41,2.477,42,3.047,43,4.274,44,4.274,45,4.274,46,4.274,47,3.703,48,2.102,49,3.328,50,1.597,51,1.821,52,1.07,53,0.875,54,1.667,55,2.102,56,2.102,57,0.987,58,2.213,59,1.741,60,3.746,61,3.703,62,1.667,63,1.907,64,2.337]],["t/630",[10,1.352,18,0.438,22,1.105,39,1.18,50,1.677,52,1.105,62,1.75,65,2.335,66,1.75,67,2.768,68,2.601,69,3.394,70,1.543,71,3.888,72,3.199,73,2.964,74,2.188,75,2.475,76,1.543,77,1.422,78,4.175,79,2.655,80,2.454,81,3.888,82,2.022,83,1.828,84,4.487,85,1.463,86,4.487,87,2.454,88,1.481,89,4.487,90,4.487,91,3.199,92,2.206,93,2.964,94,4.487,95,2.454,96,2.964,97,3.199,98,3.394,99,3.032,100,2.768,101,0.812,102,2.768,103,1.75,104,1.608,105,2.454,106,2.964,107,1.75,108,2.964,109,3.199,110,2.964]],["t/632",[22,1.086,53,1.178,111,1.824,112,5.754,113,3.99,114,4.481,115,3.55,116,4.481,117,2.693,118,3.801,119,5.754,120,4.986,121,4.103,122,5.754,123,3.801,124,3.335,125,4.481,126,5.754,127,5.754]],["t/634",[18,0.459,22,1.139,34,1.376,42,3.353,53,1.236,92,2.312,95,2.572,106,3.106,108,3.106,114,4.699,121,4.303,123,3.106,128,4.702,129,5.23,130,5.23,131,2.312,132,5.476,133,3.353,134,5.775,135,4.074,136,3.987,137,4.702,138,3.724,139,4.702,140,2.435,141,4.074,142,2.901,143,4.702,144,4.702,145,4.702,146,2.725,147,4.074,148,1.685,149,3.661,150,2.725,151,3.301,152,4.702,153,4.702,154,4.702,155,4.702,156,4.702,157,4.702,158,4.074,159,4.074,160,4.702,161,4.702,162,3.661,163,3.661,164,1.49]],["t/636",[6,4.327,18,0.592,32,1.933,108,3.133,114,3.693,121,3.382,130,5.259,134,5.259,135,4.11,136,4.009,140,3.466,142,2.926,151,2.594,159,6.571,164,1.504,165,6.692,166,6.069,167,6.069,168,2.332,169,3.382,170,4.743,171,4.743,172,4.743,173,4.743,174,4.11,175,4.11,176,4.743,177,3.693,178,4.743,179,4.743,180,6.069,181,2.021,182,1.631,183,2.116,184,4.743,185,4.743,186,4.743,187,4.743,188,4.743,189,4.743,190,4.743,191,4.743,192,4.743]],["t/638",[10,1.558,11,2.448,18,0.549,34,1.647,52,1.414,54,1.647,57,1.461,76,1.934,101,0.765,102,2.606,103,1.647,109,3.012,131,2.077,132,4.381,138,3.471,164,1.339,168,2.077,182,1.934,193,3.66,194,4.162,195,1.8,196,3.289,197,4.457,198,4.381,199,4.224,200,3.66,201,1.977,202,4.224,203,3.261,204,3.289,205,2.79,206,4.224,207,4.224,208,2.79,209,3.66,210,3.66,211,3.66,212,2.79,213,2.823,214,3.289,215,5.482,216,3.012,217,3.289,218,2.79,219,4.224,220,2.31,221,1.647,222,3.276,223,3.717,224,2.606,225,3.289,226,3.66,227,2.606,228,3.66,229,3.66,230,4.224]],["t/640",[18,0.693,27,2.305,34,1.928,39,0.979,52,1.021,54,2.569,57,1.521,80,2.958,111,1.714,125,4.211,182,1.859,197,4.693,204,4.211,205,3.573,213,2.413,216,3.856,220,2.958,221,2.569,222,3.411,223,3.573,231,3.573,232,2.109,233,4.211,234,2.66]],["t/642",[18,0.595,22,1.336,34,1.401,41,3.538,52,1.268,53,1.45,54,2.963,57,1.635,105,2.617,111,1.517,182,2.57,197,4.676,205,4.032,212,3.161,213,2.723,216,3.412,218,4.032,221,1.866,235,5.511,236,6.103,237,2.617,238,4.147,239,3.726,240,3.726,241,4.785]],["t/644",[18,0.571,22,1.105,27,1.912,41,2.601,52,0.847,53,0.919,54,2.542,57,1.352,58,2.324,59,1.828,60,2.964,66,2.795,69,3.394,70,2.013,85,1.121,101,1.251,103,1.75,106,2.964,125,3.494,148,1.608,197,4.306,205,2.964,212,2.964,221,1.75,242,1.313,243,4.487,244,4.487,245,3.494,246,4.487,247,2.1,248,4.487,249,4.487,250,3.494,251,4.487,252,4.487,253,4.647,254,4.487,255,1.543,256,4.487,257,4.487,258,2.879,259,4.487,260,4.487,261,4.487,262,4.487,263,3.888,264,4.487,265,4.487,266,3.494,267,4.487,268,3.494,269,2.879,270,4.487,271,2.768]],["t/647",[39,1.076,69,3.445,105,3.251,272,1.884,273,1.672,274,1.373,275,1.545,276,5.944,277,3.668,278,3.251,279,4.239,280,2.044,281,5.944,282,2.13,283,3.927]],["t/649",[0,3.356,6,2.328,18,0.709,22,1.208,27,1.391,39,1.093,52,1.373,53,0.669,57,1.274,64,1.786,65,1.686,77,1.035,82,1.615,85,1.176,101,0.852,103,2.152,104,2.667,107,2.355,109,2.328,118,2.157,131,1.606,140,2.437,141,4.078,150,1.893,174,2.83,183,1.457,193,2.83,195,1.391,197,3.645,198,2.543,203,1.893,208,2.157,215,4.782,220,1.786,224,2.015,228,4.078,229,4.078,232,1.274,255,1.123,273,0.919,274,0.754,275,0.849,282,2.164,284,2.83,285,2.83,286,3.266,287,3.266,288,2.328,289,4.297,290,3.266,291,3.266,292,2.83,293,2.157,294,4.706,295,3.266,296,2.904,297,3.356,298,4.706,299,2.904,300,1.324,301,1.606,302,3.266,303,2.83,304,3.266,305,2.83,306,2.328,307,3.266,308,3.266,309,3.356,310,3.266,311,2.437,312,4.078,313,2.695,314,4.706,315,4.078,316,4.078,317,4.706,318,2.437,319,2.904,320,2.314,321,4.706,322,3.266]],["t/651",[39,1.064,272,1.864,273,1.654,274,1.358,275,1.529,282,2.107,323,5.919,324,1.941,325,4.578,326,3.884,327,6.001,328,5.095,329,5.879]],["t/653",[39,1.036,85,1.431,101,1.234,146,4.219,255,1.968,272,1.814,273,1.61,274,1.322,275,1.488,280,2.343,324,2.25,330,3.19,331,2.679,332,4.809]],["t/655",[18,0.488,57,1.156,70,2.159,74,2.347,76,1.721,77,1.587,107,1.953,131,2.462,235,3.899,253,4.478,272,1.587,273,1.409,274,1.156,275,1.302,282,2.656,324,2.073,333,3.57,334,4.339,335,3.57,336,4.137,337,4.339,338,4.234,339,4.339,340,4.339,341,4.339,342,3.308,343,5.443,344,3.57,345,4.339,346,3.899,347,2.902,348,4.339,349,3.899]],["t/657",[10,1.237,32,2.182,40,3.304,57,1.237,103,2.088,110,3.537,117,3.064,118,3.537,123,3.537,272,1.697,324,2.334,350,4.64,351,5.098,352,5.355,353,4.17,354,2.929,355,5.355,356,5.355,357,5.355,358,6.547,359,5.355,360,5.355,361,5.355,362,5.355,363,5.355,364,5.098,365,4.64,366,5.355,367,5.355]],["t/659",[18,0.482,35,3.262,39,0.894,77,1.565,79,2.778,85,1.704,101,1.235,146,4.15,169,4.44,255,1.698,272,1.565,273,1.389,274,1.14,275,1.284,280,2.344,324,2.436,330,3.191,331,2.914,332,4.505,347,2.862,368,5.31,369,3.845,370,4.44,371,4.938,372,3.845,373,4.938,374,3.845,375,2.311]],["t/661",[39,1.047,101,1.047,113,3.999,272,1.834,273,1.627,274,1.336,275,1.504,280,2.358,324,2.264,330,3.21,331,3.21,376,3.263]],["t/663",[39,0.994,101,0.994,232,2.142,272,1.741,273,1.545,274,1.268,275,1.428,280,1.888,324,2.36,330,2.57,331,2.57,376,3.19,377,4.102,378,6.648,379,3.388,380,4.276,381,3.183,382,4.276,383,6.648,384,3.388,385,3.388,386,3.915,387,3.388]],["t/665",[18,0.479,57,1.135,65,2.438,68,2.849,76,2.34,101,0.89,103,1.917,105,2.689,107,3.016,131,2.417,150,2.849,195,2.095,224,3.033,266,3.828,272,1.558,273,1.383,274,1.135,275,1.278,277,3.033,282,2.561,283,3.248,301,2.417,324,1.623,333,3.505,388,3.248,389,3.828,390,4.916,391,3.248,392,6.208,393,3.505,394,3.248,395,4.916,396,4.916,397,4.916,398,4.916,399,4.916,400,4.916,401,4.916]],["t/667",[18,0.436,34,1.308,57,1.032,58,2.314,59,1.821,70,2.008,74,1.67,76,2.008,107,2.537,195,1.904,201,2.091,232,1.743,235,3.479,253,4.164,272,1.416,273,1.257,274,1.032,275,1.162,282,2.773,296,2.757,300,1.257,324,2.362,333,3.186,336,3.914,337,3.872,338,4.013,339,3.872,340,3.872,341,3.872,342,2.952,343,5.06,344,3.186,345,3.872,346,3.479,347,2.59,348,3.872,349,3.479,388,2.952,402,3.872,403,2.952,404,3.186,405,4.638,406,3.186,407,2.757,408,5.06,409,5.06]],["t/669",[18,0.544,27,2.376,39,1.215,85,1.394,272,1.768,273,1.569,274,1.288,275,1.45,280,2.307,324,2.215,330,3.14,331,2.609,376,3.212,410,3.67,411,4.832,412,5.605,413,3.44,414,2.609]],["t/671",[18,0.64,34,1.575,39,0.974,62,2.099,78,4.683,142,4.052,213,2.93,232,2.099,255,1.85,272,1.706,273,1.514,274,1.243,275,1.399,320,3.229,324,2.339,354,3.592,415,6.567,416,5.114,417,6.567,418,6.567,419,3.837,420,4.663]],["t/673",[6,2.613,10,0.846,18,0.357,35,2.421,39,0.663,50,1.909,68,2.124,69,3.407,77,1.162,79,2.395,85,1.469,101,1.286,140,1.898,148,2.106,164,1.863,195,2.505,203,2.124,272,1.162,273,1.031,274,0.846,275,0.953,277,3.923,283,4.417,324,2.207,336,3.478,376,1.635,411,5.094,414,2.39,419,2.613,421,5.107,422,2.96,423,2.645,424,3.407,425,5.107,426,3.176,427,5.107,428,3.176,429,3.664,430,1.802,431,3.176,432,3.664,433,5.107,434,2.854,435,3.642,436,3.664,437,5.107,438,3.176,439,5.094,440,3.664,441,2.613,442,2.854,443,4.426,444,3.664,445,2.613,446,3.664,447,2.124,448,3.664,449,3.664,450,3.664,451,2.854,452,1.21,453,3.664,454,5.107,455,2.854,456,2.854,457,3.664,458,5.107,459,3.664,460,5.107,461,3.664,462,5.107,463,3.664,464,5.107,465,3.664]],["t/675",[11,1.606,18,0.489,32,1.129,39,1.37,50,2.349,52,1.341,62,2.176,76,1.724,79,1.699,82,0.811,83,2.043,85,0.693,101,1.083,105,1.516,150,2.417,164,1.589,194,1.71,232,1.081,237,1.516,255,1.434,272,0.878,273,0.78,274,0.963,275,0.72,278,2.742,280,1.434,282,1.999,293,2.755,296,1.71,300,1.173,319,1.71,324,2.497,326,1.831,330,1.297,331,1.297,375,1.297,376,1.236,377,2.573,391,1.831,402,2.401,413,1.71,414,2.347,423,1.435,452,1.376,466,6.996,467,4.17,468,1.589,469,4.17,470,5.014,471,4.17,472,2.771,473,4.17,474,2.771,475,4.17,476,2.771,477,2.755,478,4.17,479,2.771,480,3.247,481,4.17,482,2.771,483,2.158,484,4.17,485,2.771,486,2.771,487,4.17,488,2.771,489,1.976,490,4.17,491,2.771,492,4.17,493,2.771,494,2.771,495,2.771,496,4.17,497,2.771,498,2.771,499,2.401,500,2.771,501,2.771,502,2.771,503,1.976,504,2.771,505,2.401,506,4.17,507,2.401,508,2.771,509,2.401,510,1.831,511,4.17,512,4.17,513,2.401,514,4.17,515,1.831,516,3.614,517,2.771,518,1.831,519,4.17,520,4.345,521,4.17,522,2.771,523,2.158,524,4.17,525,4.17,526,2.401]],["t/677",[39,1.361,224,3.815,272,1.96,350,5.358,527,5.358,528,5.358]],["t/679",[34,1.515,58,2.68,59,2.109,76,1.779,92,2.545,117,2.422,131,2.545,195,2.205,223,3.419,232,2.018,272,1.64,273,1.456,274,1.195,275,1.345,282,2.682,293,3.419,296,3.193,300,1.804,318,2.68,324,2.299,333,3.69,334,4.485,344,3.69,389,4.03,404,3.69,405,4.967,406,3.69,407,3.193,408,5.556,409,5.556,529,5.175]],["t/681",[10,1.679,52,0.972,101,1.157,104,2.29,140,2.667,195,2.195,224,3.178,234,2.533,272,1.633,273,1.449,274,1.189,275,1.339,309,3.672,315,5.539,316,5.539,318,3.6,319,3.178,320,2.533,324,2.11,335,3.672,388,3.402,430,3.143,530,4.558,531,6.392,532,6.392,533,4.558,534,5.15,535,5.15]],["t/683",[34,1.946,104,1.967,195,2.34,234,2.7,272,1.741,273,1.545,274,1.268,275,1.428,318,3.848,319,3.388,320,3.654,335,3.915,344,4.74,536,5.491,537,3.853,538,6.648,539,6.648,540,5.177]],["t/685",[18,0.587,22,1.061,52,0.531,53,0.576,57,0.974,65,2.517,68,3.665,69,1.631,77,1.337,82,0.824,83,1.147,85,0.703,95,1.539,98,1.631,101,0.51,103,2.817,104,2.015,107,1.098,124,2.445,131,1.384,151,1.539,158,2.439,164,1.337,175,2.439,201,1.317,212,2.787,220,1.539,232,2.876,245,2.192,247,1.317,250,2.192,272,0.892,273,0.792,274,0.65,275,0.732,277,3.469,282,1.008,283,1.859,288,2.007,289,2.192,292,2.439,299,3.716,301,3.224,309,2.007,313,1.256,318,1.458,324,1.856,338,2.603,351,2.192,353,2.192,388,1.859,391,1.859,393,3.008,394,1.859,410,2.308,434,2.192,442,2.192,499,2.439,541,2.814,542,2.814,543,2.814,544,2.439,545,2.814,546,2.814,547,2.814,548,4.219,549,5.061,550,2.814,551,4.219,552,2.814,553,4.219,554,5.061,555,2.439,556,5.622,557,4.219,558,2.814,559,2.814,560,2.814,561,2.814,562,2.814,563,2.814,564,2.814,565,2.814,566,2.814,567,1.974,568,2.814,569,0.792,570,2.814,571,2.814,572,2.814,573,2.814,574,2.814,575,2.814,576,2.814,577,2.814,578,2.814,579,2.814,580,4.219,581,2.814,582,2.814,583,2.814,584,2.814,585,2.814,586,4.219,587,2.814,588,2.439,589,2.814,590,2.814,591,5.061,592,2.192,593,2.439,594,2.192,595,2.814,596,4.219,597,2.439,598,2.814,599,2.814,600,1.859,601,2.007,602,4.219,603,2.814,604,2.445,605,4.219,606,2.439,607,2.814]],["t/687",[10,1.224,22,1.001,52,1.001,65,1.9,66,2.068,68,3.073,77,1.681,88,1.75,103,3.03,104,1.9,224,3.271,232,2.746,272,1.681,273,1.492,274,1.224,275,1.378,277,3.271,289,4.129,388,3.503,445,3.781,527,4.595,528,4.595,569,1.492,608,6.508,609,4.595,610,5.302,611,5.302,612,5.302]],["t/689",[18,0.522,22,1.011,27,2.79,53,1.097,65,1.919,66,2.088,74,2.824,75,2.346,77,1.697,82,1.567,85,1.338,92,2.633,99,3.391,100,3.304,162,4.17,183,2.389,274,1.237,288,3.818,297,3.818,313,2.389,384,3.304,452,1.767,537,3.104,613,6.547,614,3.104,615,3.795]],["t/691",[18,0.573,22,1.232,40,2.78,53,1.337,65,2.104,74,2.586,75,2.636,82,1.319,85,1.126,99,3.04,101,0.816,104,1.614,131,2.216,183,2.01,234,2.216,242,1.319,300,1.268,354,2.464,428,3.904,452,1.487,468,2.07,523,3.508,537,3.403,614,3.785,615,4.01,616,4.656,617,4.506,618,6.919,619,4.506,620,4.506,621,4.506,622,4.506,623,4.506,624,4.506,625,4.506,626,4.506,627,3.904,628,3.213,629,4.506,630,4.506,631,3.904,632,3.904,633,2.977,634,4.506,635,3.904]],["t/693",[18,0.66,27,1.453,52,1.067,53,0.698,55,1.677,74,2.601,75,2.026,76,1.669,79,1.389,85,0.852,95,1.865,99,3.685,100,4.76,101,0.617,110,3.734,111,1.081,121,2.431,147,2.955,149,2.655,163,2.655,221,2.539,234,1.677,242,0.998,269,2.387,282,1.222,284,2.955,300,1.59,320,1.677,375,1.596,391,3.207,407,3.488,423,3.19,441,3.462,442,2.655,452,1.125,468,1.081,510,3.207,518,2.253,569,1.59,614,3.277,615,2.814,628,4.031,636,4.855,637,5.653,638,5.653,639,3.41,640,2.955,641,4.855,642,4.855,643,4.207,644,3.41,645,3.41,646,3.41,647,2.955,648,3.41,649,2.431,650,3.41,651,3.41,652,3.41,653,2.955,654,4.899,655,3.41,656,4.899,657,2.104,658,4.855,659,2.995,660,4.207,661,3.41,662,1.453,663,4.855,664,3.41,665,3.41]],["t/695",[10,1.794,18,0.508,22,1.318,39,0.943,51,1.258,52,1.16,53,1.401,54,1.706,55,2.15,56,2.15,60,4.06,62,1.152,63,2.324,64,2.848,65,1.567,75,2.063,82,0.864,103,1.152,104,1.058,107,1.152,111,0.936,140,2.265,148,1.567,164,1.386,222,1.529,226,3.789,242,0.864,247,2.046,269,1.452,300,1.62,303,3.789,311,2.265,313,1.951,318,2.981,320,2.15,335,3.713,377,2.698,423,1.529,452,1.443,468,1.825,540,3.405,600,1.951,649,2.106,662,1.258,666,2.299,667,2.299,668,3.789,669,4.373,670,4.373,671,4.373,672,4.373,673,4.373,674,4.373,675,4.373,676,2.559,677,3.789,678,5.208,679,4.105,680,2.299,681,2.953,682,2.953,683,2.953,684,3.405,685,3.405,686,2.953,687,2.299,688,3.789,689,4.373,690,2.953,691,2.953,692,2.559,693,2.953,694,2.953,695,2.953,696,2.953,697,2.953,698,2.559,699,2.299,700,2.953,701,2.299,702,2.559,703,2.299,704,4.513,705,2.392,706,1.822,707,1.951,708,2.559,709,3.789,710,2.953,711,2.953,712,4.373,713,2.953,714,1.822,715,2.559]],["t/697",[18,0.672,22,1.16,41,2.312,47,4.692,50,2.297,52,0.753,53,1.109,54,1.556,59,1.625,62,2.397,64,2.182,72,2.845,74,2.023,75,1.94,80,2.182,82,1.168,85,0.997,88,1.317,93,2.636,96,2.636,97,2.845,98,3.821,103,1.556,106,2.636,120,3.457,148,1.43,194,3.341,203,2.312,213,1.78,214,3.107,232,1.556,233,3.107,242,1.168,280,1.372,297,2.845,301,3.241,325,3.107,338,3.341,354,2.182,375,1.867,386,2.845,430,2.663,452,1.317,530,2.845,533,2.845,569,1.939,592,4.216,716,3.457,717,3.989,718,3.989,719,2.636,720,3.989,721,3.107,722,3.457,723,5.326,724,3.457,725,3.457,726,3.107,727,3.989,728,2.845,729,5.414,730,3.457,731,3.989,732,5.414,733,3.457,734,3.457,735,2.636,736,2.636,737,3.989,738,2.845,739,3.107,740,3.107]],["t/699",[18,0.417,39,1.027,51,1.821,52,0.807,53,0.875,57,0.987,62,1.667,63,1.907,65,2.032,70,1.95,73,2.823,74,1.597,75,1.531,82,1.66,85,1.694,87,2.337,88,2.479,91,4.043,105,2.337,107,1.667,109,3.047,151,2.337,194,2.637,205,2.823,211,3.703,227,2.637,237,2.337,255,1.469,279,3.047,280,1.469,354,3.101,407,2.637,414,3.172,435,3.047,445,3.047,569,1.595,635,3.703,657,2.637,662,1.821,705,2.337,728,4.043,730,4.914,741,3.328,742,4.274,743,4.274,744,3.047,745,4.274,746,4.274,747,3.703,748,4.274,749,4.274,750,3.703,751,4.274,752,4.274,753,4.274,754,4.274,755,4.274,756,3.703,757,3.047,758,2.416,759,4.274,760,3.703,761,3.703]],["t/701",[5,3.489,10,1.13,18,0.477,22,0.924,32,1.994,39,1.382,48,2.406,49,3.811,50,1.829,51,2.085,52,1.168,53,1.002,88,1.615,111,1.551,132,3.811,136,4.09,214,3.811,237,3.386,282,1.753,306,3.489,311,2.534,336,3.386,377,3.82,413,3.019,422,3.588,423,3.206,452,1.615,477,3.233,480,3.811,483,3.811,489,3.489,662,2.085,758,2.085,762,4.894,763,4.894,764,4.241,765,3.811,766,4.241,767,4.894,768,4.241,769,4.894]],["t/703",[0,5.083,2,3.138,10,1.127,22,0.761,32,1.079,34,1.596,36,2.487,39,0.48,48,1.302,50,1.823,51,1.717,53,0.825,57,0.612,66,1.033,70,1.386,72,2.874,74,0.99,75,0.949,76,1.386,79,1.079,80,1.449,82,0.775,85,1.219,88,0.874,101,0.883,111,1.728,113,3.208,117,1.24,124,1.535,133,1.889,148,2.102,150,1.535,164,1.728,177,2.063,181,2.499,182,1.677,183,1.182,200,2.295,201,2.283,218,2.662,221,2.126,227,1.634,232,1.033,242,1.428,255,0.911,258,2.399,278,1.449,300,0.745,306,1.889,326,1.75,330,1.24,331,1.24,376,2.757,377,3.619,379,3.364,380,2.063,381,3.4,382,2.063,384,2.487,385,3.01,386,3.478,387,3.01,410,2.204,430,1.302,443,2.295,451,2.063,468,1.958,505,2.295,567,1.24,600,1.75,631,2.295,633,3.223,659,1.634,667,2.063,687,2.063,701,2.063,733,2.295,741,2.063,757,1.889,758,2.079,770,2.063,771,3.513,772,2.649,773,2.295,774,2.649,775,2.295,776,4.878,777,5.452,778,2.295,779,2.649,780,2.649,781,2.649,782,3.138,783,1.889,784,2.063,785,2.295,786,2.063,787,2.649,788,3.492,789,2.295,790,2.649,791,2.649,792,2.295,793,4.03,794,1.634,795,2.649,796,2.649,797,2.295,798,2.649,799,2.649,800,1.634,801,1.634,802,1.889,803,4.03,804,2.649,805,2.649,806,2.649,807,2.649,808,1.889,809,2.649,810,2.649,811,2.063,812,2.649,813,2.295,814,2.649,815,2.649,816,2.649,817,2.063,818,1.634,819,2.063,820,2.063,821,2.649,822,2.649]],["t/705",[0,3.501,10,1.512,11,2.008,18,0.479,22,0.927,39,0.627,40,2.138,48,2.414,51,2.43,52,0.654,53,0.71,64,2.685,66,1.351,67,2.138,70,1.191,74,1.835,75,1.759,76,1.191,77,1.098,83,1.412,85,1.227,99,1.794,100,2.138,101,1.123,111,1.808,164,1.808,168,2.804,181,1.476,182,1.688,183,1.546,194,3.828,247,1.621,255,1.688,274,0.8,282,1.241,306,2.47,320,2.414,323,2.698,354,2.685,379,2.138,381,2.008,414,1.621,424,2.008,468,1.556,477,3.767,518,2.289,569,1.381,614,2.008,616,2.47,657,3.029,662,1.476,687,2.698,735,4.62,770,3.823,771,2.685,778,3.002,785,4.255,786,4.831,788,4.255,802,4.669,819,3.823,823,3.465,824,4.91,825,3.519,826,3.465,827,4.255,828,3.465,829,3.465,830,3.002,831,3.002,832,3.002,833,3.002,834,3.002,835,3.465,836,3.465,837,3.465,838,3.002,839,2.698,840,3.002,841,3.465,842,3.465,843,2.698,844,2.698,845,3.002,846,2.698,847,3.002,848,3.002,849,3.002]],["t/707",[18,0.453,22,0.876,39,1.083,48,2.282,51,2.982,52,1.129,64,3.273,66,1.81,67,2.864,70,1.596,74,2.236,75,2.144,76,1.596,99,2.404,100,2.864,104,2.144,111,1.471,133,3.309,164,1.897,168,2.282,182,1.596,242,1.358,300,1.306,376,2.071,387,2.864,468,2.218,480,4.66,614,2.69,616,3.309,771,3.273,802,3.309,811,3.614,833,4.022,838,4.022,839,4.66,840,4.022,843,3.614,844,3.614,845,4.022,846,3.614,847,4.022,848,4.022,849,4.022,850,4.641,851,4.022,852,4.641,853,3.309,854,4.022,855,4.641,856,4.641]],["t/709",[32,2.435,50,2.234,88,1.973,101,1.082,181,2.547,182,2.055,280,2.055,567,2.797,735,3.949,794,3.688,801,3.688,857,6.992,858,5.977]],["t/711",[18,0.456,32,1.319,35,2.138,39,0.847,57,1.08,70,1.113,77,1.906,79,2.45,82,0.947,85,1.713,101,0.847,111,1.026,113,1.77,131,1.591,136,4.909,142,1.997,146,3.853,148,1.16,151,2.557,169,4.74,181,1.992,182,1.113,201,1.514,213,1.444,221,1.824,237,1.77,242,1.607,255,2.356,258,1.591,278,1.77,280,2.356,326,2.138,330,3.284,331,2.188,332,4.636,347,2.71,368,4.683,369,2.52,370,2.308,372,2.52,374,3.641,375,2.569,447,1.876,569,1.544,659,1.997,662,1.379,666,2.52,736,2.138,758,1.379,794,1.997,800,1.997,801,1.997,820,2.52,832,4.757,859,3.236,860,2.308,861,2.52,862,3.236,863,3.334,864,2.804,865,2.52,866,2.804,867,3.236,868,4.052,869,2.52,870,3.915,871,3.915,872,2.804,873,4.052,874,2.804,875,3.236,876,3.236,877,3.236,878,3.236,879,5.49,880,3.236,881,3.236,882,3.236]],["t/713",[18,0.57,32,2.066,39,1.058,57,0.838,62,1.415,70,1.247,76,1.744,77,1.15,79,1.478,88,1.197,101,0.918,102,2.238,103,1.415,104,1.3,107,1.415,111,1.608,123,2.397,124,2.103,181,2.698,182,1.247,201,1.698,220,1.984,221,1.415,242,1.062,255,1.744,258,1.784,274,1.171,280,1.247,282,1.3,293,2.397,300,1.427,301,1.784,336,1.984,375,1.698,376,3.385,379,3.129,387,2.238,403,2.397,413,4.59,414,1.698,447,2.103,468,2.007,515,2.397,537,2.103,567,1.698,569,1.021,659,2.238,705,1.984,741,2.825,757,2.587,771,1.984,782,2.825,794,2.238,800,2.238,839,2.825,883,5.071,884,3.144,885,3.144,886,5.067,887,2.587,888,3.144,889,2.825,890,3.144,891,3.144,892,6.331,893,5.486,894,6.331,895,3.628,896,3.628,897,5.071,898,3.628,899,3.628,900,3.628,901,2.587,902,2.825,903,3.628,904,2.825,905,3.628,906,3.628,907,3.628]],["t/715",[10,1.303,32,1.728,57,1.303,76,2.323,77,1.788,79,1.728,83,2.298,88,1.862,101,1.021,111,1.344,124,2.458,151,3.085,164,1.344,181,2.701,182,1.458,201,1.984,242,1.241,255,1.458,274,1.464,300,1.587,336,2.319,376,2.517,387,2.616,412,5.261,413,2.616,414,2.64,422,2.458,423,2.196,424,2.458,468,2.377,567,1.984,569,1.193,659,2.616,782,3.302,794,2.616,800,2.616,884,5.493,885,3.674,886,5.855,887,3.023,888,3.674,890,3.674,891,4.888,893,3.674,908,2.801,909,5.493,910,3.023,911,4.24,912,4.24,913,4.24,914,4.24,915,4.24,916,4.24]],["t/717",[10,0.858,18,0.503,36,2.292,39,0.673,42,3.676,50,1.388,51,2.726,54,1.449,57,0.858,70,1.277,75,1.847,80,2.032,88,2.111,101,1.072,113,2.032,115,3.181,123,2.454,148,1.331,168,2.912,201,2.413,203,2.153,209,3.219,242,1.967,247,2.771,278,2.82,280,1.277,300,1.045,330,2.413,331,1.739,376,2.301,381,2.153,394,2.454,410,2.032,414,1.739,422,2.153,424,2.153,468,1.634,489,5.185,515,2.454,569,1.89,627,3.219,659,2.292,662,2.197,758,1.583,771,2.82,800,3.181,825,2.292,869,2.893,870,2.649,871,2.649,887,2.649,917,2.893,918,5.156,919,3.715,920,3.715,921,3.715,922,4.611,923,4.226,924,3.715,925,3.715,926,3.219,927,3.715,928,3.715,929,3.715,930,3.715,931,3.715,932,3.715,933,3.715,934,3.715,935,3.715,936,3.219,937,5.156,938,3.715,939,3.715,940,3.715,941,3.715,942,3.219,943,3.715]],["t/719",[10,1.494,48,2.582,50,2.417,83,2.139,85,1.312,88,1.733,111,1.664,113,2.872,124,3.043,181,2.237,182,1.805,273,1.477,278,2.872,300,1.82,320,3.448,381,3.043,452,1.733,555,4.55,569,1.477,764,4.55,770,4.089,771,2.872,783,3.744,786,4.089,794,3.24,853,3.744,860,3.744,944,5.25,945,5.25,946,5.25,947,5.25,948,4.55,949,5.606]],["t/721",[2,1.348,5,1.235,10,1.716,11,1.004,18,0.5,19,1.348,22,1.112,27,0.738,34,0.841,36,1.068,39,1.175,40,1.068,41,2.134,48,2.336,50,0.647,51,2.715,52,1.072,53,1.207,54,1.436,57,0.85,58,0.897,62,0.675,63,2.421,66,0.675,75,1.319,76,1.473,77,0.911,79,1.17,80,2.013,83,0.705,85,0.433,87,0.947,88,1.414,101,0.927,103,0.675,104,1.702,111,1.358,113,0.947,115,2.271,118,1.898,124,1.004,129,1.5,131,0.851,133,1.235,138,1.068,140,0.897,148,0.62,164,1.358,168,2.336,181,1.568,182,0.595,183,0.773,195,1.224,196,1.348,201,1.344,204,1.348,220,1.571,222,0.897,227,1.068,231,1.898,233,2.237,234,0.851,242,1.39,255,1.266,258,2.898,273,0.487,274,0.663,275,0.45,278,0.947,280,0.988,296,1.068,299,1.068,300,1.036,311,1.488,336,0.947,376,1.282,381,1.004,385,1.772,391,1.144,414,2.397,422,2.134,423,2.218,424,2.134,445,1.235,451,1.348,452,1.568,468,1.624,503,1.235,518,1.898,530,2.048,567,2.223,569,1.205,594,2.237,601,1.235,604,1.665,614,1.004,616,1.235,628,1.235,633,1.898,657,1.068,662,0.738,668,1.5,677,1.5,684,1.348,703,1.348,728,2.048,735,2.432,736,1.144,758,0.738,771,2.343,783,2.048,789,3.712,792,1.5,801,2.271,802,2.048,808,1.235,811,1.348,813,2.489,825,1.068,827,2.489,834,2.489,853,1.235,861,1.348,863,1.235,902,1.348,909,1.5,910,1.235,917,2.866,922,1.348,923,1.144,948,1.5,950,1.731,951,2.489,952,1.731,953,1.731,954,1.731,955,1.731,956,1.731,957,5.123,958,5.892,959,2.872,960,1.731,961,1.731,962,1.5,963,2.489,964,1.5,965,1.731,966,2.872,967,2.872,968,1.731,969,1.731,970,1.731,971,1.731,972,1.731,973,1.731,974,1.731,975,1.5,976,1.731,977,1.5,978,1.731,979,1.731,980,1.731,981,1.731,982,1.731,983,1.731,984,1.348,985,1.731,986,1.731,987,1.731,988,1.731,989,1.348,990,1.731,991,3.712,992,2.872,993,1.731,994,2.872,995,1.731,996,1.731,997,1.731,998,2.872,999,1.731,1000,1.731,1001,1.731,1002,1.731,1003,1.731,1004,1.731,1005,2.872,1006,1.731,1007,1.731,1008,1.731,1009,1.5,1010,1.731,1011,2.489,1012,1.5,1013,1.5,1014,1.731,1015,2.872,1016,1.731,1017,1.5,1018,1.731,1019,3.681,1020,1.731,1021,2.489,1022,1.5,1023,1.731,1024,1.5,1025,1.731,1026,2.872,1027,1.731,1028,1.731,1029,1.731,1030,1.731,1031,1.731,1032,1.731,1033,1.731,1034,1.731,1035,1.731]],["t/723",[1,1.959,9,3.089,10,1.585,11,1.31,18,0.348,19,3.436,20,1.76,22,1.22,27,0.963,34,1.466,39,0.987,41,2.066,48,1.112,49,2.776,51,2.323,53,0.904,57,1.019,58,2.823,59,2.041,62,1.39,66,0.882,67,1.395,69,2.903,75,1.795,77,0.717,78,2.542,79,0.921,82,0.662,83,0.921,88,1.457,92,1.112,95,1.236,98,1.31,101,0.907,104,0.81,115,1.395,140,1.846,142,1.395,146,1.31,148,1.581,164,0.717,177,1.76,181,1.519,195,0.963,201,2.344,213,1.59,223,2.355,227,1.395,231,1.493,234,1.112,237,1.236,240,1.76,242,0.662,255,1.517,258,1.112,269,1.112,280,0.777,300,0.636,311,2.285,319,1.395,320,2.463,324,0.746,354,1.236,370,1.612,385,2.199,403,2.355,414,3.025,416,3.436,419,2.542,422,2.066,423,1.846,424,2.903,435,3.572,447,1.31,455,1.76,456,1.76,468,1.399,515,1.493,537,1.31,567,1.668,569,1.705,643,3.089,649,1.612,657,1.395,662,0.963,676,1.959,706,2.199,728,1.612,735,1.493,744,1.612,756,1.959,758,0.963,765,4.51,773,1.959,775,3.089,784,1.76,800,1.395,825,1.395,843,1.76,851,3.089,864,1.959,865,1.76,872,1.959,873,1.959,908,1.493,917,1.76,922,1.76,951,1.959,962,1.959,975,1.959,977,3.089,984,1.76,989,1.76,1009,1.959,1017,1.959,1021,3.824,1022,1.959,1036,3.564,1037,3.564,1038,3.564,1039,2.261,1040,1.959,1041,2.261,1042,2.261,1043,2.261,1044,2.261,1045,2.261,1046,2.261,1047,2.261,1048,3.564,1049,1.959,1050,2.261,1051,2.261,1052,2.261,1053,2.261,1054,1.959,1055,2.261,1056,2.261,1057,2.261,1058,2.261,1059,2.261,1060,3.564,1061,2.261,1062,1.959,1063,2.261,1064,1.959,1065,2.261,1066,2.261,1067,1.959,1068,2.261,1069,2.261,1070,1.76,1071,2.261,1072,1.959,1073,2.261,1074,2.261,1075,2.261,1076,2.261,1077,2.261,1078,2.261,1079,2.261,1080,2.261,1081,1.959,1082,2.261,1083,2.261,1084,1.959,1085,2.261,1086,2.261,1087,2.261,1088,3.564,1089,2.261,1090,2.261,1091,2.261,1092,1.76,1093,2.261,1094,1.959,1095,2.261,1096,1.959,1097,2.261,1098,1.76,1099,2.261,1100,2.261,1101,2.261,1102,2.261,1103,2.261,1104,2.261,1105,1.612]],["t/725",[18,0.579,32,2.418,36,2.827,39,1.192,52,0.865,53,0.938,55,2.253,56,2.253,58,2.373,59,1.867,77,1.452,82,1.341,85,1.145,88,1.512,95,2.506,108,3.027,111,1.452,164,1.881,196,3.568,223,3.027,269,2.253,280,1.575,300,1.67,375,2.144,379,3.662,394,3.027,447,2.656,468,2.207,567,2.144,569,1.959,766,6.735,817,4.622,936,5.705,963,3.971,1106,3.568,1107,4.582,1108,3.971,1109,4.582,1110,4.582,1111,3.971,1112,4.582,1113,4.582,1114,4.582,1115,4.582]],["t/727",[18,0.58,22,1.123,34,1.347,39,0.833,50,1.72,51,2.536,52,0.868,53,1.351,54,1.795,55,2.263,56,2.263,57,1.524,66,1.795,68,2.667,73,3.04,76,1.582,88,2.177,101,0.833,111,1.459,164,1.887,181,1.961,182,1.582,203,2.667,242,1.347,247,2.153,273,1.295,275,1.196,300,1.674,311,2.383,452,1.519,468,2.211,569,2.032,662,1.961,736,3.04,750,3.988,783,3.281,860,3.281,889,3.583,991,3.988,1098,3.583,1116,4.602,1117,4.602,1118,4.602,1119,3.583,1120,3.583,1121,4.602,1122,3.988,1123,4.602,1124,4.602,1125,4.602]],["t/729",[10,1.499,18,0.672,22,1.099,39,0.806,48,2.864,50,1.663,52,1.099,53,1.193,57,1.345,66,1.736,76,2.002,77,1.411,82,1.302,85,1.112,92,2.188,111,1.411,146,3.375,148,1.594,164,1.846,168,2.188,182,1.53,242,1.302,255,2.232,300,1.638,311,2.305,330,2.725,331,2.082,332,3.847,385,3.593,452,1.469,468,2.183,483,5.055,569,1.252,736,2.94,819,3.465,820,4.535,853,3.173,863,3.173,887,3.173,889,3.465,949,3.856,1024,3.856,1098,3.465,1119,3.465,1120,3.465,1122,3.856,1126,4.45,1127,4.45,1128,4.45,1129,4.45,1130,4.45]],["t/731",[10,1.409,22,0.903,32,1.95,39,0.866,51,2.039,57,1.105,66,1.866,88,2.014,91,3.412,111,1.517,164,1.935,181,2.039,182,1.645,231,4.032,242,1.401,247,3.312,280,1.645,300,1.717,313,2.135,447,2.774,468,2.244,503,3.412,567,2.239,569,1.346,768,6.478,801,2.952,860,3.412,861,3.726,1011,4.147,1012,4.147,1131,4.785,1132,4.785,1133,6.103,1134,4.785,1135,4.785,1136,4.785,1137,6.72,1138,4.785,1139,4.785,1140,4.785]],["t/733",[18,0.707,56,2.785,82,1.658,92,2.785,148,2.822,258,3.563,389,4.41,430,3.331,758,2.886,1141,5.664,1142,5.664,1143,4.908]],["t/735",[18,0.57,22,1.104,39,1.33,53,1.198,63,2.609,77,1.854,95,3.198,168,2.876,182,2.525,242,1.712,293,3.863,817,4.554,1144,5.848,1145,5.848]],["t/737",[22,1.052,34,1.964,52,1.266,53,1.142,54,2.175,55,3.3,56,3.3,57,1.55,58,3.728,59,2.933,91,3.976,101,1.009,269,2.742,544,4.832,1146,5.576,1147,5.576,1148,6.71]],["t/739",[10,1.827,17,3.825,18,0.43,28,3.825,32,1.798,55,2.17,74,1.649,75,1.581,92,2.17,101,0.799,168,2.17,222,2.286,231,2.916,274,1.019,300,1.242,404,4.13,406,4.61,407,2.723,569,1.242,1013,3.825,1049,3.825,1054,5.019,1149,4.413,1150,5.792,1151,4.413,1152,4.413,1153,4.413,1154,4.413,1155,4.413,1156,4.413,1157,4.413,1158,4.413,1159,4.413,1160,4.413,1161,6.465,1162,4.413,1163,5.034,1164,4.413,1165,4.413,1166,6.465,1167,4.413,1168,4.413,1169,4.413,1170,4.413,1171,4.413,1172,4.413,1173,4.413,1174,4.413,1175,4.413,1176,4.413,1177,4.413,1178,4.413,1179,3.825,1180,4.413]],["t/741",[10,1.526,18,0.53,34,1.934,53,1.113,54,2.776,55,2.673,56,2.673,57,1.255,63,2.425,117,2.544,183,2.425,217,4.233,364,4.233,375,3.331,825,3.354,1106,5.145,1163,4.233,1181,4.71,1182,4.71,1183,4.71,1184,4.71,1185,6.607,1186,5.435,1187,5.435]],["t/743",[5,0.414,8,0.452,10,1.454,11,0.629,18,0.632,20,0.452,22,0.713,32,0.927,34,1.553,35,1.711,36,0.67,39,0.748,42,0.774,48,0.285,50,1.258,51,0.247,52,0.489,53,0.222,54,0.423,56,0.946,57,0.827,60,0.717,61,0.503,62,1.397,64,0.837,65,1.87,66,1.728,68,1.501,69,2.853,70,1.728,71,0.503,72,1.091,74,1.074,75,2.059,76,0.988,77,1.359,78,2.825,79,1.805,80,1.416,81,1.971,82,1.297,83,1.055,85,1.107,87,3.324,88,1.034,92,0.752,93,0.383,95,0.317,99,0.996,100,3.505,101,0.891,102,2.332,103,1.397,104,0.208,105,0.594,106,0.383,107,2.132,108,0.383,110,0.717,113,0.594,115,0.358,117,1.676,136,1.503,138,0.358,140,1.178,142,0.944,146,0.887,148,1.681,150,2.97,162,1.191,163,1.191,164,0.911,168,0.534,169,1.091,181,0.463,183,1.282,194,1.403,195,0.652,198,0.845,203,0.336,210,0.941,212,0.383,213,1.398,220,0.317,221,0.423,222,0.301,225,0.452,227,0.67,232,1.92,234,1.413,237,0.594,238,0.503,239,0.845,245,0.845,247,0.716,250,1.771,253,2.401,255,1.299,258,1.119,263,1.971,266,1.191,268,0.452,269,0.946,271,1.932,273,0.163,274,0.251,275,0.151,277,3.807,278,0.594,280,1.362,282,0.389,283,3.56,288,0.414,296,0.358,297,0.414,299,0.67,300,0.64,301,1.54,305,1.667,311,0.301,313,2.147,318,0.562,319,1.187,320,1.656,323,1.498,324,2.399,326,1.271,327,0.941,328,0.503,330,1.466,331,1.212,332,1.011,336,1.244,338,1.187,342,0.717,347,1.666,349,2.789,351,1.498,353,0.452,354,1.244,368,0.845,369,0.452,370,0.414,372,0.452,374,0.452,375,0.9,376,1.843,377,1.773,379,0.67,380,0.452,381,0.336,382,0.452,384,0.67,385,0.67,386,1.372,387,0.358,393,0.414,394,0.383,405,0.414,406,0.414,407,0.358,410,0.317,412,0.845,413,0.358,414,2.352,416,0.845,419,1.372,420,0.503,422,0.336,423,2.139,424,1.666,426,0.503,430,1.54,431,0.503,434,0.845,435,1.091,438,0.941,439,0.941,447,0.629,452,1.111,468,1.256,477,1.011,489,1.372,503,1.091,507,0.941,509,1.667,510,1.271,513,0.503,515,0.717,516,0.941,518,0.383,520,1.667,523,2.017,526,0.503,533,2.049,537,0.336,540,0.452,567,0.272,569,1.579,593,1.326,597,0.503,600,0.717,604,2.394,606,0.941,614,0.629,615,0.336,628,0.414,633,1.011,640,0.503,647,0.503,654,0.941,656,3.579,660,2.244,662,0.463,679,0.774,680,0.452,684,1.498,685,0.845,688,0.503,699,1.191,705,2.854,706,1.598,707,2.617,714,1.598,716,0.503,719,1.011,721,2.017,722,0.941,723,0.941,724,0.503,725,0.503,740,1.191,744,0.414,757,0.414,758,1.76,760,1.326,761,0.503,765,1.191,771,0.317,784,0.452,797,0.503,801,0.358,808,0.774,818,0.358,830,1.326,831,0.503,854,0.503,865,1.191,868,0.503,869,0.845,870,1.091,871,1.091,874,0.503,901,1.372,908,0.383,910,1.847,923,2.617,926,1.667,984,1.191,1040,0.503,1062,0.503,1064,0.503,1070,0.452,1081,0.503,1084,0.503,1094,0.503,1096,0.503,1105,0.774,1108,0.941,1111,0.503,1143,0.503,1188,0.58,1189,1.086,1190,0.58,1191,2.275,1192,0.58,1193,0.58,1194,0.58,1195,0.58,1196,0.58,1197,1.086,1198,0.58,1199,0.58,1200,1.086,1201,0.58,1202,0.58,1203,0.58,1204,0.58,1205,1.53,1206,0.58,1207,1.086,1208,0.58,1209,0.58,1210,0.58,1211,1.53,1212,0.503,1213,2.874,1214,3.132,1215,0.58,1216,0.58,1217,0.58,1218,0.58,1219,1.086,1220,0.58,1221,0.58,1222,1.326,1223,0.58,1224,0.58,1225,0.58,1226,0.58,1227,1.53,1228,1.53,1229,0.58,1230,0.58,1231,0.58,1232,0.58,1233,0.58,1234,0.58,1235,0.58,1236,0.58,1237,0.58,1238,0.941,1239,0.845,1240,0.58,1241,0.941,1242,0.941,1243,0.58,1244,0.503,1245,1.326,1246,1.086,1247,1.086,1248,0.58,1249,0.845,1250,0.58,1251,0.58,1252,0.58,1253,0.941,1254,0.503,1255,0.58,1256,0.58,1257,0.941,1258,0.58,1259,0.58,1260,0.58,1261,1.086,1262,0.58,1263,0.58,1264,0.58,1265,1.53,1266,0.58,1267,0.58,1268,0.58,1269,0.58,1270,1.924,1271,1.086,1272,0.58,1273,0.58,1274,1.53,1275,0.58,1276,0.58,1277,0.503,1278,0.58,1279,0.58,1280,1.191,1281,1.924,1282,0.845,1283,0.58,1284,0.58,1285,0.58,1286,0.58,1287,0.58,1288,0.58,1289,0.58,1290,0.58,1291,0.58,1292,0.58,1293,0.58,1294,1.086,1295,0.58,1296,0.58,1297,0.503,1298,0.58,1299,0.58,1300,0.58,1301,0.58,1302,0.58,1303,0.58,1304,0.58,1305,0.58,1306,0.58,1307,0.58,1308,0.58,1309,0.58,1310,0.503,1311,0.58,1312,0.58]],["t/745",[18,0.532,22,1.167,27,2.634,34,2.17,39,1.199,41,2.338,52,1.25,53,0.826,54,1.573,57,0.932,65,2.215,66,1.573,82,1.181,101,0.73,102,3.366,103,2.892,104,1.955,105,2.206,117,1.888,118,2.665,150,3.162,183,2.955,201,1.888,220,2.206,232,2.583,237,2.206,279,4.408,282,1.446,299,3.366,309,2.877,313,2.434,375,1.888,403,2.665,456,4.248,510,2.665,530,3.89,569,1.739,657,2.489,825,2.489,870,2.877,871,2.877,923,2.665,1280,3.141,1313,4.034,1314,4.034,1315,4.034,1316,4.034,1317,4.034,1318,4.034,1319,5.455,1320,4.034,1321,5.455,1322,4.034,1323,4.034,1324,4.034]],["t/747",[10,1.472,18,0.5,34,1.5,52,0.967,55,3.134,56,3.134,58,3.301,59,2.597,63,2.287,75,1.837,99,2.655,117,2.399,148,1.837,183,2.287,217,3.991,221,2.486,300,1.793,338,3.163,346,4.963,364,3.991,375,2.983,758,2.184,1106,4.963,1163,3.991,1181,4.442,1182,4.442,1183,4.442,1184,4.442,1325,5.126,1326,5.126,1327,5.126,1328,4.442,1329,5.126,1330,5.126]],["t/749",[10,1.544,18,0.54,22,0.779,34,1.83,40,3.418,52,1.18,53,0.845,55,2.029,59,1.681,62,1.61,65,2.241,70,1.419,82,1.208,85,1.031,87,4.389,213,2.472,221,1.61,232,2.161,239,3.213,274,1.279,313,1.841,410,2.257,452,1.828,533,3.95,699,5.204,719,2.726,721,5.204,818,2.546,901,3.95,1222,3.576,1238,4.8,1239,3.213,1241,3.576,1242,5.419,1244,4.8,1245,3.576,1249,4.314,1277,3.576,1297,3.576,1331,3.95,1332,4.127,1333,4.127,1334,4.127,1335,4.127,1336,4.127,1337,3.576]],["t/751",[10,0.792,18,0.335,22,0.648,27,1.462,52,0.92,53,0.703,59,1.987,63,1.531,65,2.554,70,2.243,80,1.877,82,1.984,83,1.398,85,1.544,87,3.708,92,1.687,101,0.621,107,2.212,116,2.672,117,1.606,138,3.009,148,1.747,164,1.798,195,2.078,213,2.756,218,2.267,221,1.338,222,2.525,242,1.004,247,2.282,268,3.797,269,1.687,271,2.117,275,0.892,282,1.23,324,1.133,342,2.267,347,3.58,430,2.398,441,2.447,452,1.61,468,1.798,604,1.989,705,1.877,706,2.117,707,3.222,714,2.117,719,2.267,818,2.117,904,2.672,908,3.222,964,2.974,1254,2.974,1282,3.797,1331,2.447,1338,3.432,1339,2.974,1340,2.974,1341,3.797,1342,3.797,1343,5.081,1344,4.916,1345,4.876,1346,3.432,1347,3.432,1348,3.432,1349,3.432,1350,3.432,1351,3.432,1352,4.226,1353,3.797,1354,2.974,1355,2.974,1356,2.974,1357,2.974,1358,2.974,1359,2.974,1360,2.974,1361,2.974,1362,2.974,1363,2.974,1364,2.974,1365,2.974,1366,2.672,1367,2.672,1368,2.974,1369,2.974,1370,2.974]],["t/753",[10,0.803,18,0.339,22,0.656,27,1.481,52,0.929,59,2.005,63,1.551,65,2.72,70,1.195,83,1.416,85,0.869,87,3.398,101,0.629,103,2.228,107,2.228,116,2.707,117,2.303,148,1.245,164,1.811,213,2.772,218,2.296,221,1.356,222,1.8,232,1.919,242,1.017,247,2.673,275,0.904,282,1.245,301,2.42,313,2.549,342,2.296,347,3.311,404,2.478,430,1.709,441,2.478,452,1.624,468,1.811,537,2.015,567,1.627,592,2.707,594,2.707,601,2.478,604,2.015,705,1.901,706,2.145,707,3.251,714,2.145,719,2.296,738,2.478,818,2.145,908,3.774,1092,2.707,1249,2.707,1282,2.707,1331,2.478,1339,3.012,1340,3.012,1341,3.832,1342,3.832,1343,2.707,1352,4.264,1353,3.832,1354,3.012,1355,3.012,1356,3.012,1357,3.012,1358,3.012,1359,3.012,1360,3.012,1361,3.012,1362,3.012,1363,3.012,1364,3.012,1365,4.264,1366,2.707,1367,2.707,1368,4.264,1369,3.012,1370,3.012,1371,3.476,1372,3.476,1373,3.476,1374,3.476,1375,3.476,1376,3.476,1377,3.476,1378,4.921,1379,4.921,1380,4.921,1381,4.921,1382,3.476,1383,3.476,1384,3.476]],["t/755",[27,1.961,34,1.931,52,1.245,56,2.263,59,2.425,63,2.053,74,1.72,83,1.875,87,4.174,110,3.04,117,2.153,138,2.839,151,2.517,213,3.223,221,1.795,222,2.383,234,2.263,242,1.347,271,2.839,274,1.063,275,1.196,313,2.053,452,1.964,666,3.583,679,3.281,680,3.583,818,2.839,901,4.704,904,3.583,1328,3.988,1331,3.281,1341,4.635,1342,4.635,1344,5.717,1353,4.635,1366,3.583,1367,3.583,1385,4.602,1386,4.602,1387,4.602,1388,5.952,1389,5.952]],["t/757",[10,1.816,18,0.46,22,0.619,29,1.763,33,2.84,52,0.619,53,0.843,54,0.794,59,1.677,60,1.344,62,0.794,63,0.908,64,3.18,65,1.691,66,1.605,67,1.255,70,1.415,73,1.344,74,0.76,75,2.548,76,1.779,77,0.645,79,2.253,82,0.596,83,0.829,85,1.18,88,1.082,93,1.344,96,2.165,97,1.451,98,1.179,99,1.054,101,1.228,104,0.729,107,2.268,111,0.645,115,1.255,148,1.691,149,1.584,151,2.581,182,0.7,183,1.463,195,0.867,208,1.344,221,1.278,225,1.584,234,1.001,240,1.584,242,0.596,247,2.208,255,1.127,258,1.001,269,2.321,279,1.451,285,3.567,301,2.321,311,1.054,312,1.763,325,1.584,365,1.763,405,1.451,410,1.793,455,1.584,477,1.344,510,2.165,569,0.572,588,1.763,601,2.337,609,1.763,615,1.9,633,1.344,649,1.451,653,1.763,662,1.397,667,1.584,679,1.451,685,1.584,692,1.763,698,3.567,701,3.675,702,4.089,703,2.552,704,5.786,705,3.584,706,2.022,707,2.165,708,2.84,709,4.089,726,1.584,734,1.763,738,2.337,739,1.584,740,4.029,744,1.451,758,0.867,844,1.584,863,1.451,866,1.763,902,1.584,910,1.451,923,1.344,989,2.552,1067,2.84,1070,1.584,1072,1.763,1092,2.552,1119,1.584,1120,1.584,1179,1.763,1253,1.763,1257,1.763,1310,1.763,1337,1.763,1390,2.035,1391,2.035,1392,2.035,1393,2.035,1394,2.035,1395,5.815,1396,2.035,1397,2.035,1398,2.035,1399,4.719,1400,2.035,1401,2.035,1402,3.278,1403,2.035,1404,2.035,1405,3.278,1406,2.035,1407,2.035,1408,3.278,1409,3.278,1410,2.035,1411,2.035,1412,2.035,1413,2.035,1414,4.116,1415,2.035,1416,4.116,1417,3.278,1418,3.278,1419,2.035,1420,2.035,1421,2.035,1422,2.035,1423,1.763,1424,2.035,1425,2.035,1426,2.035,1427,3.278,1428,2.035,1429,3.278,1430,2.035,1431,3.278,1432,2.035,1433,2.035,1434,2.035,1435,2.035]],["t/759",[22,1.18,57,1.658,83,2.548,101,1.132,714,3.859]],["t/761",[10,0.849,22,0.694,34,1.076,50,2.71,52,0.694,53,0.753,62,1.434,63,1.641,65,2.11,67,2.269,70,2.189,73,2.429,77,1.166,82,1.076,93,2.429,96,3.382,97,2.622,98,2.131,104,1.834,107,2.297,208,2.429,216,2.622,269,1.808,271,3.634,301,2.517,313,1.641,318,2.651,384,4.388,430,1.808,452,1.69,569,1.44,604,4.204,615,3.88,726,2.863,738,2.622,739,2.863,747,3.186,758,2.181,1105,4.774,1343,2.863,1436,4.436,1437,3.186,1438,4.436,1439,5.518,1440,3.677,1441,3.677,1442,3.186,1443,4.436,1444,4.436,1445,4.436,1446,4.436,1447,4.436,1448,4.436,1449,3.677,1450,3.186,1451,4.436,1452,3.186,1453,3.186,1454,3.186,1455,3.186,1456,3.186,1457,3.186,1458,3.186,1459,3.186,1460,3.186,1461,3.186,1462,3.186,1463,3.186,1464,3.186,1465,3.186,1466,3.677]],["t/763",[8,3.816,10,1.532,18,0.478,22,0.925,34,0.781,39,0.734,50,2.406,52,0.504,53,1.269,57,0.936,62,1.041,65,1.452,70,2.336,74,1.515,79,1.651,82,0.781,88,2.19,96,1.763,98,1.547,101,0.734,102,1.646,104,1.756,107,2.295,111,0.846,208,1.763,242,0.781,255,1.393,258,1.993,271,1.646,299,1.646,300,1.379,301,1.312,313,1.191,318,2.834,384,4.405,393,1.903,403,1.763,410,1.459,430,1.993,452,1.806,468,1.285,569,1.379,600,1.763,604,3.938,615,3.732,632,2.312,662,1.137,705,2.68,714,1.646,715,2.312,758,2.332,808,1.903,846,2.078,942,2.312,1105,4.845,1212,2.312,1239,2.078,1280,4.261,1423,2.312,1436,2.312,1437,2.312,1438,4.246,1439,5.58,1442,2.312,1443,4.742,1444,4.246,1445,5.1,1446,4.742,1447,4.742,1448,4.742,1450,2.312,1451,4.246,1452,2.312,1453,2.312,1454,2.312,1455,2.312,1456,2.312,1457,2.312,1458,2.312,1459,2.312,1460,2.312,1461,2.312,1462,2.312,1463,2.312,1464,2.312,1465,3.512,1467,2.668,1468,2.668,1469,2.668,1470,4.053,1471,4.053,1472,2.668,1473,2.668,1474,4.053,1475,2.668,1476,2.668,1477,2.668,1478,4.053,1479,2.668]]],"invertedIndex":[["",{"_index":10,"t":{"628":{"position":[[92,1],[500,1]]},"630":{"position":[[119,1],[559,4]]},"638":{"position":[[752,3],[789,3],[827,3],[831,3]]},"657":{"position":[[234,1]]},"673":{"position":[[693,1]]},"681":{"position":[[202,1],[204,1],[331,1],[333,1]]},"687":{"position":[[259,3]]},"695":{"position":[[269,1],[304,1],[340,1],[376,1],[411,1],[433,1],[456,1],[473,1],[491,1],[627,4],[1264,1],[1465,1],[1467,1],[1679,2],[1778,1],[1813,1],[1849,1],[1871,1],[1894,1],[1911,1],[1934,1],[1952,1]]},"701":{"position":[[209,1]]},"703":{"position":[[1269,1],[2550,1],[2571,2]]},"705":{"position":[[202,1],[317,1],[526,1],[777,1],[953,1]]},"715":{"position":[[751,2],[830,2]]},"717":{"position":[[674,2]]},"719":{"position":[[366,1],[396,1]]},"721":{"position":[[39,1],[1414,1],[3059,1],[3080,1],[3140,1],[3191,1],[3193,1],[3236,1],[3238,1],[3261,1],[3284,1],[3311,1],[3331,1],[3361,1],[3493,1],[4386,1],[4407,1],[4464,1],[4520,1],[4522,1],[4560,1],[4562,1],[4578,1],[4599,1],[4624,1],[4644,1],[4665,1],[4693,1],[4770,1]]},"723":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"729":{"position":[[213,1],[238,1],[259,1]]},"731":{"position":[[400,2],[458,2]]},"739":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[312,1],[320,4],[325,1],[330,1],[570,1],[697,1],[706,1],[728,1],[730,1]]},"741":{"position":[[83,1],[85,1]]},"743":{"position":[[71,2],[796,1],[1237,1],[1360,3],[1711,4],[1716,2],[1872,2],[1875,2],[1949,1],[2030,1],[2118,1],[2580,2],[2887,1],[2889,1],[2967,1],[2969,1],[3406,1],[3545,1],[3656,1],[4299,1],[4690,2],[7197,2],[7266,1],[7712,2],[7817,2],[8434,1],[9090,1],[11156,1],[11305,1],[11369,1],[11489,1],[11520,1],[12509,1],[12688,1],[12788,1],[13026,1],[13108,1],[13174,1],[13827,1],[14179,2]]},"747":{"position":[[147,1],[149,1]]},"749":{"position":[[215,1],[241,1],[278,1],[343,1]]},"751":{"position":[[927,1]]},"753":{"position":[[782,1]]},"757":{"position":[[242,1],[272,4],[317,1],[513,1],[557,1],[629,1],[640,1],[655,1],[796,1],[879,3],[912,1],[923,1],[925,1],[969,1],[988,1],[1050,1],[1282,1],[1468,1],[1644,1],[1737,1],[1803,1],[1901,1],[2080,1],[2161,1],[2266,2],[2269,3],[2273,5],[2279,1],[2396,1],[2398,1],[2494,1],[2582,1],[2612,1],[2656,4],[2665,2],[3338,1],[3419,1],[3448,2],[3451,2],[3484,1],[3496,2],[3523,2],[3556,5],[3566,1]]},"761":{"position":[[589,2]]},"763":{"position":[[154,1],[349,1],[488,2],[570,1],[757,2],[858,1],[1069,2],[1282,2]]}}}],["0",{"_index":1205,"t":{"743":{"position":[[1430,1],[4950,1],[4963,1]]}}}],["0.0.0.0:4180",{"_index":1035,"t":{"721":{"position":[[4772,14]]}}}],["0.001",{"_index":1382,"t":{"753":{"position":[[916,5]]}}}],["00010203",{"_index":1358,"t":{"751":{"position":[[1121,8]]},"753":{"position":[[984,8]]}}}],["0400",{"_index":1342,"t":{"751":{"position":[[256,5],[1301,4]]},"753":{"position":[[137,5],[1323,4]]},"755":{"position":[[267,5],[593,4]]}}}],["0405",{"_index":1359,"t":{"751":{"position":[[1130,4]]},"753":{"position":[[993,4]]}}}],["0a0b0c0d0e0f",{"_index":1362,"t":{"751":{"position":[[1145,12]]},"753":{"position":[[1008,12]]}}}],["1",{"_index":600,"t":{"685":{"position":[[2225,1]]},"695":{"position":[[1630,2]]},"703":{"position":[[2289,1]]},"743":{"position":[[1475,3],[13679,4]]},"763":{"position":[[423,2]]}}}],["1.5h",{"_index":361,"t":{"657":{"position":[[236,5]]}}}],["100",{"_index":1251,"t":{"743":{"position":[[5046,3]]}}}],["12",{"_index":1384,"t":{"753":{"position":[[1200,2]]}}}],["12.x",{"_index":918,"t":{"717":{"position":[[58,5],[128,4]]}}}],["123456.apps.googleusercontent.com",{"_index":1192,"t":{"743":{"position":[[592,35]]}}}],["127.0.0.1:4180",{"_index":680,"t":{"695":{"position":[[664,14]]},"743":{"position":[[4450,16]]},"755":{"position":[[732,14]]}}}],["128",{"_index":642,"t":{"693":{"position":[[383,3],[434,3]]}}}],["168h0m0",{"_index":1199,"t":{"743":{"position":[[1039,8]]}}}],["19/mar/2015:17:20:19",{"_index":1341,"t":{"751":{"position":[[233,21],[1279,20]]},"753":{"position":[[114,21],[1301,20]]},"755":{"position":[[244,21],[571,20]]}}}],["192",{"_index":1176,"t":{"739":{"position":[[644,3]]}}}],["1h",{"_index":798,"t":{"703":{"position":[[919,4]]}}}],["1s",{"_index":1225,"t":{"743":{"position":[[2695,4]]}}}],["2",{"_index":808,"t":{"703":{"position":[[1510,1]]},"721":{"position":[[3458,2]]},"743":{"position":[[13150,3],[13755,4]]},"763":{"position":[[717,2]]}}}],["2.0",{"_index":948,"t":{"719":{"position":[[213,3]]},"721":{"position":[[35,3]]}}}],["20",{"_index":1230,"t":{"743":{"position":[[3859,2]]}}}],["200",{"_index":592,"t":{"685":{"position":[[1941,3]]},"697":{"position":[[223,3],[336,3]]},"753":{"position":[[1249,3]]}}}],["202",{"_index":739,"t":{"697":{"position":[[995,3]]},"757":{"position":[[131,3]]},"761":{"position":[[162,3]]}}}],["2048",{"_index":1051,"t":{"723":{"position":[[1052,4]]}}}],["24",{"_index":1174,"t":{"739":{"position":[[630,2]]}}}],["2>/dev/nul",{"_index":1160,"t":{"739":{"position":[[227,11]]}}}],["2f",{"_index":611,"t":{"687":{"position":[[212,7]]}}}],["2h45m",{"_index":362,"t":{"657":{"position":[[245,8]]}}}],["3",{"_index":839,"t":{"705":{"position":[[1119,2]]},"707":{"position":[[385,2],[421,2]]},"713":{"position":[[1247,4]]}}}],["3/4",{"_index":1300,"t":{"743":{"position":[[13452,3]]}}}],["30",{"_index":712,"t":{"695":{"position":[[1652,3],[1675,3]]}}}],["300m",{"_index":360,"t":{"657":{"position":[[225,8]]}}}],["315360000",{"_index":1456,"t":{"761":{"position":[[965,9]]},"763":{"position":[[1723,9]]}}}],["32",{"_index":1166,"t":{"739":{"position":[[309,2],[578,2],[708,2]]}}}],["3650",{"_index":1063,"t":{"723":{"position":[[1175,4]]}}}],["401",{"_index":96,"t":{"630":{"position":[[403,3]]},"697":{"position":[[1022,3]]},"757":{"position":[[158,3],[965,3]]},"761":{"position":[[189,3],[1254,4]]},"763":{"position":[[898,3]]}}}],["403",{"_index":1466,"t":{"761":{"position":[[1259,4]]}}}],["4180",{"_index":686,"t":{"695":{"position":[[979,5]]}}}],["443",{"_index":685,"t":{"695":{"position":[[909,3],[1273,3]]},"743":{"position":[[4535,6],[14026,3]]},"757":{"position":[[251,3]]}}}],["4607",{"_index":1360,"t":{"751":{"position":[[1135,4]]},"753":{"position":[[998,4]]}}}],["4kb",{"_index":1402,"t":{"757":{"position":[[1733,3],[1938,4]]}}}],["5",{"_index":815,"t":{"703":{"position":[[1988,1]]}}}],["6",{"_index":841,"t":{"705":{"position":[[1155,2]]}}}],["7",{"_index":1248,"t":{"743":{"position":[[4879,1]]}}}],["74.125.224.72",{"_index":1354,"t":{"751":{"position":[[840,13]]},"753":{"position":[[695,13]]}}}],["80",{"_index":1309,"t":{"743":{"position":[[14012,3]]}}}],["8809",{"_index":1361,"t":{"751":{"position":[[1140,4]]},"753":{"position":[[1003,4]]}}}],["994",{"_index":920,"t":{"717":{"position":[[138,5]]}}}],["_",{"_index":1163,"t":{"739":{"position":[[279,3],[327,2],[732,3]]},"741":{"position":[[104,4]]},"747":{"position":[[168,4]]}}}],["__host",{"_index":1202,"t":{"743":{"position":[[1216,7]]}}}],["__secur",{"_index":1203,"t":{"743":{"position":[[1228,8]]}}}],["_oauth2_proxi",{"_index":640,"t":{"693":{"position":[[338,14]]},"743":{"position":[[1266,15]]}}}],["_oauth2_proxy_1",{"_index":1435,"t":{"757":{"position":[[3951,18]]}}}],["abov",{"_index":904,"t":{"713":{"position":[[1233,5]]},"751":{"position":[[1542,5]]},"755":{"position":[[45,5]]}}}],["absent",{"_index":1231,"t":{"743":{"position":[[3865,6]]}}}],["accept",{"_index":93,"t":{"630":{"position":[[363,7]]},"697":{"position":[[999,8]]},"743":{"position":[[9877,8]]},"757":{"position":[[135,8]]},"761":{"position":[[166,8]]}}}],["access",{"_index":255,"t":{"644":{"position":[[349,6]]},"649":{"position":[[101,6]]},"653":{"position":[[171,6]]},"659":{"position":[[346,6]]},"671":{"position":[[259,6]]},"675":{"position":[[1993,6],[2140,6]]},"699":{"position":[[214,9]]},"703":{"position":[[1746,7]]},"705":{"position":[[447,6],[622,7]]},"711":{"position":[[296,7],[924,6],[999,6],[1036,6],[1186,6],[1217,6],[1306,6]]},"713":{"position":[[138,6],[1173,6]]},"715":{"position":[[46,6]]},"721":{"position":[[2344,6],[2403,7],[2977,6]]},"723":{"position":[[305,7],[2650,6],[3170,10]]},"729":{"position":[[528,6],[638,6],[673,6]]},"743":{"position":[[3359,6],[3784,6],[3831,6],[6157,6],[6227,6],[6311,6],[7113,6],[8021,6],[10434,6],[10463,6],[12932,6]]},"757":{"position":[[1306,6],[1447,6]]},"763":{"position":[[2016,6],[2192,6]]}}}],["access_by_lua_block",{"_index":1428,"t":{"757":{"position":[[3399,19]]}}}],["access_token",{"_index":1256,"t":{"743":{"position":[[6186,12]]}}}],["accompani",{"_index":867,"t":{"711":{"position":[[382,11]]}}}],["account",{"_index":385,"t":{"663":{"position":[[271,7]]},"703":{"position":[[977,7],[1091,8],[2388,7]]},"721":{"position":[[1641,8],[3747,8]]},"723":{"position":[[260,8],[737,7]]},"729":{"position":[[204,7],[487,7]]},"743":{"position":[[4064,7],[4108,7]]}}}],["acr",{"_index":526,"t":{"675":{"position":[[2485,3]]},"743":{"position":[[34,3]]}}}],["acrvalu",{"_index":525,"t":{"675":{"position":[[2443,9],[2460,9]]}}}],["activ",{"_index":824,"t":{"705":{"position":[[66,6],[592,6]]}}}],["actual",{"_index":1120,"t":{"727":{"position":[[221,6]]},"729":{"position":[[124,6]]},"757":{"position":[[3721,6]]}}}],["ad",{"_index":105,"t":{"630":{"position":[[637,5]]},"642":{"position":[[7,6]]},"647":{"position":[[66,6]]},"665":{"position":[[79,5]]},"675":{"position":[[2084,2]]},"699":{"position":[[939,5]]},"743":{"position":[[9764,2],[10479,5]]},"745":{"position":[[750,6]]}}}],["add",{"_index":168,"t":{"636":{"position":[[148,3]]},"638":{"position":[[432,3]]},"705":{"position":[[0,3],[809,3],[979,3]]},"707":{"position":[[64,3]]},"717":{"position":[[223,3],[431,3],[1312,3]]},"721":{"position":[[605,3],[1296,4],[1989,3],[2336,3],[2567,3]]},"729":{"position":[[0,3]]},"735":{"position":[[80,3]]},"739":{"position":[[332,3]]},"743":{"position":[[6287,4],[14104,3]]}}}],["add_head",{"_index":698,"t":{"695":{"position":[[1402,10]]},"757":{"position":[[1608,10],[2496,10],[2539,10]]}}}],["addedto",{"_index":294,"t":{"649":{"position":[[667,7],[902,7]]}}}],["addit",{"_index":863,"t":{"711":{"position":[[206,10],[775,8]]},"721":{"position":[[2066,10]]},"729":{"position":[[559,10]]},"757":{"position":[[1968,10]]}}}],["addition",{"_index":1232,"t":{"743":{"position":[[4156,12]]}}}],["addr>:/oauth2/callback",{"_index":1125,"t":{"727":{"position":[[611,24]]}}}],["headers.default",{"_index":400,"t":{"665":{"position":[[456,16]]}}}],["headers/pass_user_head",{"_index":257,"t":{"644":{"position":[[390,25]]}}}],["headers/skip_auth_strip_head",{"_index":267,"t":{"644":{"position":[[680,31]]}}}],["headershould",{"_index":395,"t":{"665":{"position":[[346,12]]}}}],["headervalu",{"_index":333,"t":{"655":{"position":[[13,12]]},"665":{"position":[[540,13]]},"667":{"position":[[21,11]]},"679":{"position":[[26,12]]}}}],["health",{"_index":722,"t":{"697":{"position":[[384,6]]},"743":{"position":[[7611,6],[7698,6]]}}}],["helm",{"_index":31,"t":{"628":{"position":[[322,6]]}}}],["here",{"_index":1042,"t":{"723":{"position":[[344,5]]}}}],["hex",{"_index":644,"t":{"693":{"position":[[406,3]]}}}],["histor",{"_index":617,"t":{"691":{"position":[[103,13]]}}}],["hit",{"_index":785,"t":{"703":{"position":[[404,3]]},"705":{"position":[[668,3],[1023,7]]}}}],["hold",{"_index":466,"t":{"675":{"position":[[33,5],[546,5],[631,5],[710,5],[803,5],[892,5],[979,5],[1065,5],[1145,5],[1275,5]]}}}],["homepag",{"_index":1116,"t":{"727":{"position":[[57,9]]}}}],["host",{"_index":247,"t":{"644":{"position":[[162,4]]},"685":{"position":[[2301,4]]},"695":{"position":[[1520,4],[1525,6]]},"705":{"position":[[870,4]]},"717":{"position":[[185,7],[1053,6],[1175,6]]},"727":{"position":[[606,4]]},"731":{"position":[[47,4],[495,4],[560,4],[630,4]]},"743":{"position":[[914,4],[6871,4],[6905,4]]},"751":{"position":[[959,4],[992,4]]},"753":{"position":[[475,9],[814,4],[847,4]]},"757":{"position":[[370,4],[375,6],[708,4],[713,6]]}}}],["host(`a",{"_index":1444,"t":{"761":{"position":[[342,8],[537,8]]},"763":{"position":[[432,8],[726,8],[1013,8]]}}}],["host(`oauth.example.com",{"_index":1475,"t":{"763":{"position":[[1255,26]]}}}],["host>/api/v3",{"_index":882,"t":{"711":{"position":[[1953,13]]}}}],["host>/auth/realms//login/oauth/access_token",{"_index":881,"t":{"711":{"position":[[1878,31]]}}}],["host>/login/oauth/author",{"_index":880,"t":{"711":{"position":[[1808,28]]}}}],["host>/oauth2/callback",{"_index":1133,"t":{"731":{"position":[[144,21],[298,22]]}}}],["host_head",{"_index":1371,"t":{"753":{"position":[[143,13]]}}}],["hostnam",{"_index":1098,"t":{"723":{"position":[[3220,9]]},"727":{"position":[[228,8]]},"729":{"position":[[131,8]]}}}],["hosts.thi",{"_index":581,"t":{"685":{"position":[[1574,10]]}}}],["hour",{"_index":822,"t":{"703":{"position":[[2566,4]]}}}],["hst",{"_index":691,"t":{"695":{"position":[[1251,5]]}}}],["htaccess",{"_index":1260,"t":{"743":{"position":[[6766,8]]}}}],["html",{"_index":1211,"t":{"743":{"position":[[1764,4],[2861,6],[2941,6]]}}}],["htpasswd",{"_index":1213,"t":{"743":{"position":[[1913,8],[1977,8],[4135,8],[4192,8],[4236,8],[4272,8],[4343,8]]}}}],["http",{"_index":313,"t":{"649":{"position":[[1307,4],[1316,5],[1615,4],[1624,5]]},"685":{"position":[[1568,5]]},"689":{"position":[[70,4]]},"695":{"position":[[821,4],[854,4]]},"731":{"position":[[26,9]]},"743":{"position":[[524,4],[1597,6],[2708,5],[2727,5],[2802,4],[4360,4],[4437,4],[4469,5],[4521,5],[6482,4],[10653,4],[12105,5],[12221,5],[12520,4],[13399,4],[13572,4],[14020,5],[14034,6]]},"745":{"position":[[151,4],[160,5]]},"749":{"position":[[439,4]]},"753":{"position":[[0,4],[1257,4],[1404,4]]},"755":{"position":[[713,5]]},"761":{"position":[[310,5]]},"763":{"position":[[392,5]]}}}],["http(",{"_index":309,"t":{"649":{"position":[[1239,7],[1561,7]]},"681":{"position":[[70,7]]},"685":{"position":[[1147,7]]},"745":{"position":[[91,7]]}}}],["http/1.0",{"_index":1357,"t":{"751":{"position":[[1080,8]]},"753":{"position":[[869,8]]}}}],["http/1.1",{"_index":1373,"t":{"753":{"position":[[186,8]]}}}],["http/1.1x",{"_index":751,"t":{"699":{"position":[[623,9]]}}}],["http://0.0.0.0:8080\"]email_domain",{"_index":1029,"t":{"721":{"position":[[4524,35]]}}}],["http://127.0.0.1:4180",{"_index":703,"t":{"695":{"position":[[1480,22]]},"721":{"position":[[1360,21]]},"757":{"position":[[330,22],[668,22]]}}}],["http://127.0.0.1:4180/oauth2/callback",{"_index":975,"t":{"721":{"position":[[1067,37]]},"723":{"position":[[3623,37]]}}}],["http://127.0.0.1:4180/oauth2/callback'nam",{"_index":969,"t":{"721":{"position":[[722,44]]}}}],["http://127.0.0.1:4180/static",{"_index":983,"t":{"721":{"position":[[1385,28]]}}}],["http://127.0.0.1:5556",{"_index":1101,"t":{"723":{"position":[[3678,21]]}}}],["http://127.0.0.1:5556/author",{"_index":1102,"t":{"723":{"position":[[3732,31]]}}}],["http://127.0.0.1:5556/dex",{"_index":976,"t":{"721":{"position":[[1121,25]]}}}],["http://127.0.0.1:5556/key",{"_index":1104,"t":{"723":{"position":[[3819,26]]}}}],["http://127.0.0.1:5556/token",{"_index":1103,"t":{"723":{"position":[[3776,27]]}}}],["http://127.0.0.1:8080",{"_index":1315,"t":{"745":{"position":[[218,22]]}}}],["http://127.0.0.1:8080/some/path",{"_index":1316,"t":{"745":{"position":[[361,32]]}}}],["http://172.16.0.1:4180",{"_index":1453,"t":{"761":{"position":[[876,22]]},"763":{"position":[[1634,22]]}}}],["http://172.16.0.2:7555",{"_index":1452,"t":{"761":{"position":[[808,22]]},"763":{"position":[[1494,22]]}}}],["http://172.16.0.3:7555",{"_index":1476,"t":{"763":{"position":[[1566,22]]}}}],["http://[oauth2",{"_index":1319,"t":{"745":{"position":[[608,14],[963,14]]}}}],["http://]::/sign_in",{"_index":1263,"t":{"743":{"position":[[7905,18]]}}}],["oauth2_proxy_",{"_index":1325,"t":{"747":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":1329,"t":{"747":{"position":[[425,27]]}}}],["oauth2_proxy_email_domain",{"_index":1330,"t":{"747":{"position":[[489,27]]}}}],["oauth2_proxy_jwt_key",{"_index":1069,"t":{"723":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1093,"t":{"723":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":1201,"t":{"743":{"position":[[1154,11]]}}}],["obtain",{"_index":1305,"t":{"743":{"position":[[13539,9]]}}}],["occur",{"_index":1387,"t":{"755":{"position":[[187,5]]}}}],["oidc",{"_index":414,"t":{"669":{"position":[[229,4]]},"673":{"position":[[442,4],[883,4]]},"675":{"position":[[1174,4],[1208,4],[2249,4]]},"699":{"position":[[481,4],[667,4],[780,4],[889,4]]},"705":{"position":[[1160,4]]},"713":{"position":[[60,4]]},"715":{"position":[[527,4],[653,4]]},"717":{"position":[[1126,4]]},"721":{"position":[[244,6],[374,4],[965,4],[996,4],[1105,4],[1549,4]]},"723":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"743":{"position":[[5455,4],[5567,4],[5612,4],[5731,4],[5771,4],[5806,4],[5897,4],[5918,4],[5968,4],[5997,4],[6027,4],[6074,4],[6105,4],[6391,4],[7145,4],[11782,4],[11809,4],[11866,4],[12895,4],[13750,4]]}}}],["oidc\"redirect_url",{"_index":998,"t":{"721":{"position":[[3061,18],[4388,18]]}}}],["oidc_issuer_url",{"_index":1007,"t":{"721":{"position":[[3372,15]]}}}],["oidcconfig",{"_index":492,"t":{"675":{"position":[[1111,10],[1134,10]]}}}],["oidcopt",{"_index":493,"t":{"675":{"position":[[1122,11]]}}}],["ok",{"_index":47,"t":{"628":{"position":[[560,2]]},"697":{"position":[[227,2],[340,2]]}}}],["okta",{"_index":958,"t":{"721":{"position":[[315,5],[1526,5],[1567,5],[1612,4],[2465,4],[3708,4],[3834,4],[4309,4],[4482,4]]}}}],["old",{"_index":1247,"t":{"743":{"position":[[4865,3],[4925,3]]}}}],["omit",{"_index":1311,"t":{"743":{"position":[[14062,4]]}}}],["on",{"_index":92,"t":{"630":{"position":[[354,3]]},"634":{"position":[[674,4]]},"679":{"position":[[101,3]]},"689":{"position":[[187,3]]},"723":{"position":[[2206,3]]},"729":{"position":[[683,3]]},"733":{"position":[[156,3]]},"739":{"position":[[39,3]]},"743":{"position":[[347,4],[8178,4],[11727,3]]},"751":{"position":[[313,3]]}}}],["onc",{"_index":177,"t":{"636":{"position":[[421,4]]},"703":{"position":[[2558,4]]},"723":{"position":[[2843,4]]}}}],["open",{"_index":133,"t":{"634":{"position":[[113,4]]},"703":{"position":[[460,4]]},"707":{"position":[[0,4]]},"721":{"position":[[106,4]]}}}],["openid",{"_index":422,"t":{"673":{"position":[[80,6],[986,6]]},"701":{"position":[[278,6],[530,6]]},"715":{"position":[[89,7]]},"717":{"position":[[276,7]]},"721":{"position":[[0,6],[220,6],[2628,6]]},"723":{"position":[[862,6],[906,6]]},"743":{"position":[[5833,6]]}}}],["openssl",{"_index":1054,"t":{"723":{"position":[[1104,7]]},"739":{"position":[[78,7],[288,7]]}}}],["oppos",{"_index":939,"t":{"717":{"position":[[1240,7]]}}}],["option",{"_index":57,"t":{"628":{"position":[[686,8]]},"638":{"position":[[164,7],[317,8],[373,7]]},"640":{"position":[[218,7],[263,7]]},"642":{"position":[[37,7],[256,7],[379,7],[437,7]]},"644":{"position":[[736,7],[844,7]]},"649":{"position":[[53,8],[77,7],[222,7]]},"655":{"position":[[246,8]]},"657":{"position":[[180,8]]},"665":{"position":[[416,6]]},"667":{"position":[[467,8]]},"685":{"position":[[1585,6],[2039,6]]},"699":{"position":[[985,6]]},"703":{"position":[[1062,11]]},"711":{"position":[[276,8],[362,7]]},"713":{"position":[[1050,8]]},"715":{"position":[[754,9],[833,9]]},"717":{"position":[[905,7]]},"721":{"position":[[1721,10],[2023,6],[2452,8]]},"723":{"position":[[1540,8],[2132,7],[3495,7]]},"727":{"position":[[407,8],[530,7],[706,7]]},"729":{"position":[[344,8],[584,7]]},"731":{"position":[[223,7]]},"737":{"position":[[48,8],[148,7]]},"741":{"position":[[169,6]]},"743":{"position":[[0,6],[52,9],[803,8],[1306,8],[1537,11],[11108,7],[13312,10],[13615,6],[13792,7],[14229,7]]},"745":{"position":[[61,6]]},"759":{"position":[[5,6],[37,6]]},"763":{"position":[[175,7],[2326,6]]}}}],["order",{"_index":1147,"t":{"737":{"position":[[109,5]]}}}],["org",{"_index":368,"t":{"659":{"position":[[46,3],[57,3],[478,3]]},"711":{"position":[[534,3],[635,7],[795,4],[1559,3]]},"743":{"position":[[3007,3],[3493,3]]}}}],["organ",{"_index":832,"t":{"705":{"position":[[430,13]]},"711":{"position":[[259,12],[580,12],[713,12]]}}}],["organis",{"_index":369,"t":{"659":{"position":[[101,12]]},"711":{"position":[[678,12]]},"743":{"position":[[3053,12]]}}}],["orgname/repo",{"_index":874,"t":{"711":{"position":[[1150,12]]},"743":{"position":[[3251,12]]}}}],["orgname/repo=accesslevel",{"_index":1229,"t":{"743":{"position":[[3758,25]]}}}],["origin",{"_index":792,"t":{"703":{"position":[[628,7]]},"721":{"position":[[146,10]]}}}],["os,base64",{"_index":1154,"t":{"739":{"position":[[125,10]]}}}],["otherwis",{"_index":445,"t":{"673":{"position":[[631,10]]},"687":{"position":[[232,9]]},"699":{"position":[[992,9]]},"721":{"position":[[1903,10]]}}}],["out",{"_index":728,"t":{"697":{"position":[[588,3]]},"699":{"position":[[17,4],[325,3]]},"721":{"position":[[2125,3],[2318,3]]},"723":{"position":[[1156,3]]}}}],["output",{"_index":1331,"t":{"749":{"position":[[34,6],[81,6]]},"751":{"position":[[142,6]]},"753":{"position":[[23,6]]},"755":{"position":[[80,6]]}}}],["outsid",{"_index":1328,"t":{"747":{"position":[[326,7]]},"755":{"position":[[193,7]]}}}],["overrid",{"_index":1261,"t":{"743":{"position":[[7447,8],[8741,8]]}}}],["override_speci",{"_index":1180,"t":{"739":{"position":[[711,16]]}}}],["overwrit",{"_index":1148,"t":{"737":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":1144,"t":{"735":{"position":[[37,7]]}}}],["pad",{"_index":646,"t":{"693":{"position":[[479,9]]}}}],["page",{"_index":194,"t":{"638":{"position":[[12,4],[143,4],[190,4],[331,4]]},"675":{"position":[[1648,5]]},"697":{"position":[[553,5],[592,4]]},"699":{"position":[[329,4]]},"705":{"position":[[332,4],[551,4],[792,4],[962,4]]},"743":{"position":[[1857,4],[2813,5],[7520,4],[10803,5],[11964,4]]}}}],["pair",{"_index":647,"t":{"693":{"position":[[533,4]]},"743":{"position":[[2380,5]]}}}],["pane",{"_index":777,"t":{"703":{"position":[[237,5],[280,5],[321,5],[428,5]]}}}],["paramet",{"_index":279,"t":{"647":{"position":[[83,9]]},"699":{"position":[[364,10]]},"745":{"position":[[258,10],[1096,10],[1121,9]]},"757":{"position":[[3773,10]]}}}],["part",{"_index":285,"t":{"649":{"position":[[149,4]]},"757":{"position":[[1796,6],[2177,4],[2455,4]]}}}],["particularli",{"_index":1327,"t":{"747":{"position":[[286,12]]}}}],["pass",{"_index":66,"t":{"630":{"position":[[12,7]]},"644":{"position":[[157,4],[312,4],[344,4],[380,4],[416,4]]},"687":{"position":[[154,4]]},"689":{"position":[[276,6]]},"703":{"position":[[2104,4]]},"705":{"position":[[1347,6]]},"707":{"position":[[557,6]]},"721":{"position":[[1795,6]]},"723":{"position":[[2283,4]]},"727":{"position":[[388,4]]},"729":{"position":[[325,4]]},"731":{"position":[[204,4]]},"743":{"position":[[512,7],[6152,4],[6175,4],[6355,4],[6386,4],[6456,4],[6477,4],[6680,7],[6818,4],[6840,4],[6866,4],[6888,4],[6936,4],[6959,4],[10429,4]]},"745":{"position":[[71,4]]},"757":{"position":[[990,4],[1301,4],[1330,4]]}}}],["passhosthead",{"_index":602,"t":{"685":{"position":[[2235,14],[2255,14]]}}}],["password",{"_index":349,"t":{"655":{"position":[[529,8]]},"667":{"position":[[750,8]]},"743":{"position":[[471,8],[491,8],[1951,8],[8663,8],[8685,9],[8754,8],[8810,8],[8841,9],[8901,9],[8931,8]]}}}],["password/basic_auth_password",{"_index":265,"t":{"644":{"position":[[635,28]]}}}],["patch",{"_index":188,"t":{"636":{"position":[[601,7]]}}}],["path",{"_index":232,"t":{"640":{"position":[[123,4]]},"649":{"position":[[536,4]]},"663":{"position":[[251,4]]},"667":{"position":[[300,4]]},"671":{"position":[[150,4]]},"675":{"position":[[1692,5]]},"679":{"position":[[345,4]]},"685":{"position":[[140,4],[165,5],[296,4],[308,4],[407,5],[592,4],[622,4],[671,4],[721,4],[824,4],[877,4],[949,4],[1199,5],[1378,4]]},"687":{"position":[[171,4],[397,4],[422,5]]},"697":{"position":[[279,6]]},"703":{"position":[[2349,4]]},"743":{"position":[[753,4],[1291,4],[1322,4],[1749,4],[1808,4],[2493,4],[2529,5],[2587,5],[4088,4],[5227,4],[7273,5],[7554,4],[7855,4],[11233,5],[11371,5],[12419,4],[12466,4],[12566,5],[12660,4]]},"745":{"position":[[501,5],[703,4],[852,4],[1256,4]]},"749":{"position":[[854,4],[880,6]]},"753":{"position":[[177,8],[1166,4]]}}}],["path.eg",{"_index":571,"t":{"685":{"position":[[1257,8]]}}}],["path/to/cert.key",{"_index":697,"t":{"695":{"position":[[1383,18]]}}}],["path/to/cert.pem",{"_index":695,"t":{"695":{"position":[[1344,18]]}}}],["path/to/existing/config.cfg",{"_index":236,"t":{"642":{"position":[[204,29],[558,29]]}}}],["path/to/new/config.yaml",{"_index":241,"t":{"642":{"position":[[523,25]]}}}],["path/to/sit",{"_index":1412,"t":{"757":{"position":[[2623,15]]}}}],["path_regex",{"_index":1284,"t":{"743":{"position":[[11406,10]]}}}],["pathprefix",{"_index":1470,"t":{"763":{"position":[[491,16],[1285,16]]}}}],["pathprefix(`/no",{"_index":1472,"t":{"763":{"position":[[760,15]]}}}],["pathprefix(`/oauth2",{"_index":1450,"t":{"761":{"position":[[592,23]]},"763":{"position":[[1072,23]]}}}],["pattern",{"_index":546,"t":{"685":{"position":[[449,7]]}}}],["pem",{"_index":416,"t":{"671":{"position":[[87,3],[182,3]]},"723":{"position":[[1023,4],[2383,3],[2528,3]]},"743":{"position":[[5082,3],[5259,3]]}}}],["per",{"_index":1143,"t":{"733":{"position":[[166,3]]},"743":{"position":[[352,3]]}}}],["perform",{"_index":959,"t":{"721":{"position":[[397,7],[1573,7]]}}}],["period",{"_index":353,"t":{"657":{"position":[[81,6]]},"685":{"position":[[2128,6]]},"743":{"position":[[2629,6]]}}}],["permiss",{"_index":819,"t":{"703":{"position":[[2239,11]]},"705":{"position":[[538,12],[703,12]]},"729":{"position":[[176,11]]}}}],["pick",{"_index":827,"t":{"705":{"position":[[171,4],[349,4]]},"721":{"position":[[2235,4],[2660,4]]}}}],["pin",{"_index":690,"t":{"695":{"position":[[1227,3]]}}}],["ping",{"_index":721,"t":{"697":{"position":[[318,5]]},"743":{"position":[[7549,4],[7570,4],[7625,7],[7635,4],[10983,4],[11032,4]]},"749":{"position":[[716,5],[743,4],[791,4],[849,4]]}}}],["ping,/path2",{"_index":1223,"t":{"743":{"position":[[2565,14]]}}}],["plain",{"_index":1419,"t":{"757":{"position":[[2894,5]]}}}],["platform",{"_index":677,"t":{"695":{"position":[[599,8],[790,8]]},"721":{"position":[[2603,8]]}}}],["pleas",{"_index":132,"t":{"634":{"position":[[99,6],[144,6],[346,6],[434,6]]},"638":{"position":[[260,6],[835,6]]},"701":{"position":[[411,6]]}}}],["plural",{"_index":1183,"t":{"741":{"position":[[186,6]]},"747":{"position":[[257,6]]}}}],["poc",{"_index":1204,"t":{"743":{"position":[[1353,6]]}}}],["point",{"_index":942,"t":{"717":{"position":[[1349,8]]},"763":{"position":[[119,8]]}}}],["polici",{"_index":995,"t":{"721":{"position":[[2351,8]]}}}],["popul",{"_index":905,"t":{"713":{"position":[[1276,8]]}}}],["port",{"_index":684,"t":{"695":{"position":[[904,4],[974,4]]},"721":{"position":[[584,5]]},"743":{"position":[[13926,5],[13985,4],[14098,5],[14169,5]]}}}],["possibl",{"_index":123,"t":{"632":{"position":[[165,9]]},"634":{"position":[[467,9]]},"657":{"position":[[125,8]]},"713":{"position":[[82,9]]},"717":{"position":[[877,8]]}}}],["post",{"_index":137,"t":{"634":{"position":[[158,4]]}}}],["potenti",{"_index":158,"t":{"634":{"position":[[622,9]]},"685":{"position":[[1619,9]]}}}],["powershel",{"_index":1152,"t":{"739":{"position":[[86,10]]}}}],["pr",{"_index":135,"t":{"634":{"position":[[130,2]]},"636":{"position":[[373,3]]}}}],["prebuilt",{"_index":3,"t":{"628":{"position":[[34,8],[195,8],[329,8]]}}}],["preced",{"_index":544,"t":{"685":{"position":[[388,10]]},"737":{"position":[[118,11]]}}}],["prefer",{"_index":263,"t":{"644":{"position":[[582,6]]},"743":{"position":[[6551,9],[6601,6],[6627,6],[7036,9],[10339,9]]}}}],["preferred_usernam",{"_index":769,"t":{"701":{"position":[[470,18]]}}}],["prefix",{"_index":338,"t":{"655":{"position":[[219,6],[233,6],[255,6]]},"667":{"position":[[440,6],[454,6],[476,6]]},"685":{"position":[[627,8],[676,8]]},"697":{"position":[[136,6],[175,6]]},"743":{"position":[[1209,6],[7828,6],[13087,6],[13811,8]]},"747":{"position":[[75,9]]}}}],["preflight",{"_index":1278,"t":{"743":{"position":[[11064,9]]}}}],["prepend",{"_index":339,"t":{"655":{"position":[[275,9]]},"667":{"position":[[496,9]]}}}],["present",{"_index":162,"t":{"634":{"position":[[705,7]]},"689":{"position":[[237,7]]},"743":{"position":[[7161,8],[12084,9],[12200,9]]}}}],["preserv",{"_index":396,"t":{"665":{"position":[[362,9]]}}}],["preserverequestvalu",{"_index":392,"t":{"665":{"position":[[260,20],[286,20]]}}}],["pretti",{"_index":1107,"t":{"725":{"position":[[282,6]]}}}],["prevent",{"_index":428,"t":{"673":{"position":[[200,8]]},"691":{"position":[[460,7]]}}}],["preview",{"_index":988,"t":{"721":{"position":[[1682,7]]}}}],["previou",{"_index":191,"t":{"636":{"position":[[652,8]]}}}],["previous",{"_index":173,"t":{"636":{"position":[[287,10]]}}}],["primari",{"_index":286,"t":{"649":{"position":[[161,7]]}}}],["print",{"_index":238,"t":{"642":{"position":[[304,5]]},"743":{"position":[[12979,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":1155,"t":{"739":{"position":[[136,57]]}}}],["prior",{"_index":209,"t":{"638":{"position":[[245,5]]},"717":{"position":[[119,5]]}}}],["privat",{"_index":142,"t":{"634":{"position":[[222,8]]},"636":{"position":[[37,9]]},"671":{"position":[[72,7],[162,7]]},"711":{"position":[[1048,7]]},"723":{"position":[[1065,7]]},"743":{"position":[[5067,7],[5239,7],[12474,7]]}}}],["process",{"_index":1092,"t":{"723":{"position":[[2587,7]]},"753":{"position":[[965,8]]},"757":{"position":[[2934,9],[2980,9]]}}}],["product",{"_index":784,"t":{"703":{"position":[[370,8]]},"723":{"position":[[294,10]]},"743":{"position":[[10874,11]]}}}],["profil",{"_index":515,"t":{"675":{"position":[[1985,7]]},"713":{"position":[[727,7]]},"717":{"position":[[284,7]]},"723":{"position":[[1992,7]]},"743":{"position":[[7086,7],[7105,7]]}}}],["profileurl",{"_index":514,"t":{"675":{"position":[[1949,10],[1967,10]]}}}],["project",{"_index":113,"t":{"632":{"position":[[33,8],[74,7],[204,8]]},"661":{"position":[[113,8],[131,8],[184,8]]},"703":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"711":{"position":[[13,8]]},"717":{"position":[[411,8]]},"719":{"position":[[55,8]]},"721":{"position":[[118,9]]},"743":{"position":[[3640,8],[3706,8]]}}}],["prometheu",{"_index":724,"t":{"697":{"position":[[430,10]]},"743":{"position":[[7777,10]]}}}],["prompt",{"_index":520,"t":{"675":{"position":[[2225,6],[2239,6],[2254,6]]},"743":{"position":[[85,6],[7131,6],[7150,7],[7179,6]]}}}],["properli",{"_index":928,"t":{"717":{"position":[[551,9]]}}}],["properti",{"_index":829,"t":{"705":{"position":[[319,12]]}}}],["propos",{"_index":171,"t":{"636":{"position":[[257,8]]}}}],["protect",{"_index":518,"t":{"675":{"position":[[2067,9]]},"693":{"position":[[774,8]]},"705":{"position":[[892,7]]},"721":{"position":[[2189,11],[2279,8]]},"743":{"position":[[9747,9]]}}}],["protectedresourc",{"_index":517,"t":{"675":{"position":[[2025,17]]}}}],["proto,host,uri",{"_index":1267,"t":{"743":{"position":[[9909,16]]}}}],["protocol",{"_index":908,"t":{"715":{"position":[[80,8]]},"723":{"position":[[842,9]]},"743":{"position":[[14003,8]]},"751":{"position":[[1071,8],[1101,9]]},"753":{"position":[[534,13],[860,8],[890,9]]}}}],["provid",{"_index":39,"t":{"628":{"position":[[444,8],[572,8],[622,8],[775,8]]},"630":{"position":[[309,8],[473,9],[740,8]]},"640":{"position":[[111,7]]},"647":{"position":[[13,9]]},"649":{"position":[[1809,9],[1819,9],[1829,9],[1869,10]]},"651":{"position":[[13,9]]},"653":{"position":[[13,9]]},"659":{"position":[[13,9]]},"661":{"position":[[13,9]]},"663":{"position":[[13,9]]},"669":{"position":[[13,9],[234,9]]},"671":{"position":[[13,9]]},"673":{"position":[[13,9]]},"675":{"position":[[13,10],[24,8],[70,8],[212,10],[345,10],[584,9],[666,9],[744,9],[842,9],[929,9],[1015,9],[1101,9],[1190,9],[1313,9],[1414,10],[1425,8],[1498,9],[1575,9]]},"677":{"position":[[0,11],[47,9],[92,10]]},"695":{"position":[[89,9],[460,12],[1898,12]]},"699":{"position":[[169,8],[785,8]]},"701":{"position":[[54,8],[90,10],[195,9],[346,8],[381,8],[436,9],[545,9]]},"703":{"position":[[2208,8]]},"705":{"position":[[1245,8]]},"707":{"position":[[92,7],[455,8]]},"711":{"position":[[184,8],[1264,7]]},"713":{"position":[[24,8],[70,8],[1256,8]]},"717":{"position":[[10,8]]},"721":{"position":[[84,9],[133,8],[235,8],[297,9],[379,8],[553,8],[956,8],[970,8],[1001,9],[1554,8],[1918,8],[3050,8],[4377,8]]},"723":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"725":{"position":[[14,8],[125,9],[528,8]]},"727":{"position":[[378,9]]},"729":{"position":[[315,9]]},"731":{"position":[[323,8]]},"735":{"position":[[27,9],[61,8],[151,9]]},"743":{"position":[[1465,9],[1994,8],[7202,8],[7224,8],[7242,8],[7341,9],[7418,8],[7537,9],[11925,8],[12111,9],[12900,9],[13695,9],[14211,8]]},"745":{"position":[[194,9],[353,7],[691,7],[1149,9]]},"763":{"position":[[34,8],[2252,8]]}}}],["provider'",{"_index":744,"t":{"699":{"position":[[309,10]]},"723":{"position":[[3422,10]]},"743":{"position":[[7460,10]]},"757":{"position":[[1699,10]]}}}],["provider.example.com",{"_index":759,"t":{"699":{"position":[[894,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":749,"t":{"699":{"position":[[486,36]]}}}],["provider.if",{"_index":508,"t":{"675":{"position":[[1760,11]]}}}],["provider.thi",{"_index":500,"t":{"675":{"position":[[1374,13]]}}}],["provider/sign_out_pag",{"_index":753,"t":{"699":{"position":[[672,25]]}}}],["provider=\"github",{"_index":1134,"t":{"731":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":929,"t":{"717":{"position":[[605,17]]}}}],["provider=adf",{"_index":856,"t":{"707":{"position":[[333,13]]}}}],["provider=azur",{"_index":837,"t":{"705":{"position":[[1066,14]]}}}],["provider=bitbucket",{"_index":1128,"t":{"729":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":1121,"t":{"727":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":888,"t":{"713":{"position":[[440,17]]},"715":{"position":[[509,17]]}}}],["providermust",{"_index":501,"t":{"675":{"position":[[1459,12]]}}}],["provideror",{"_index":494,"t":{"675":{"position":[[1179,10]]}}}],["providers.new",{"_index":1145,"t":{"735":{"position":[[98,15]]}}}],["providerthi",{"_index":469,"t":{"675":{"position":[[173,12],[306,12]]}}}],["proxi",{"_index":22,"t":{"628":{"position":[[245,5],[535,5],[648,5]]},"630":{"position":[[32,5],[729,5]]},"632":{"position":[[12,5]]},"634":{"position":[[65,5],[339,6]]},"642":{"position":[[58,5],[163,5],[467,5],[502,5]]},"644":{"position":[[191,5],[875,5]]},"649":{"position":[[204,6],[490,7],[973,5],[1045,5],[1262,5]]},"685":{"position":[[108,7],[1057,8],[1669,5],[2416,8]]},"687":{"position":[[365,7]]},"689":{"position":[[109,5]]},"691":{"position":[[97,5],[396,5],[655,6]]},"695":{"position":[[80,5],[204,5],[263,5],[647,5],[946,8],[965,5],[992,5],[1713,5],[1772,5]]},"697":{"position":[[7,5],[87,7],[169,5]]},"701":{"position":[[179,5]]},"703":{"position":[[2306,5],[2422,6]]},"705":{"position":[[914,6],[1053,5]]},"707":{"position":[[320,5]]},"721":{"position":[[530,5],[789,5],[924,5],[1028,5],[1048,5],[3656,5],[3676,5],[4817,5],[4837,5]]},"723":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"727":{"position":[[206,5],[249,5]]},"729":{"position":[[108,6],[152,5]]},"731":{"position":[[238,6]]},"735":{"position":[[130,5]]},"737":{"position":[[7,5]]},"743":{"position":[[7822,5],[7870,5],[7936,5],[7976,8],[8162,5],[9783,5],[9826,6],[11574,5],[13302,5],[13424,5],[13593,5]]},"745":{"position":[[7,5],[623,5],[978,5]]},"749":{"position":[[19,5]]},"751":{"position":[[937,5]]},"753":{"position":[[792,5]]},"757":{"position":[[192,8],[1763,5]]},"759":{"position":[[31,5]]},"761":{"position":[[223,8]]},"763":{"position":[[138,5],[208,6],[1236,5]]}}}],["proxiedto",{"_index":603,"t":{"685":{"position":[[2323,9]]}}}],["proxy'",{"_index":73,"t":{"630":{"position":[[96,7]]},"699":{"position":[[91,7]]},"727":{"position":[[296,7]]},"757":{"position":[[86,7]]},"761":{"position":[[93,7]]}}}],["proxy'secret",{"_index":970,"t":{"721":{"position":[[775,13]]}}}],["proxy.cfg",{"_index":1185,"t":{"741":{"position":[[225,9],[326,9]]}}}],["proxy.thi",{"_index":302,"t":{"649":{"position":[[929,10]]}}}],["proxy/oauth2",{"_index":13,"t":{"628":{"position":[[119,12],[232,12]]}}}],["proxy/oauth2/callback",{"_index":1118,"t":{"727":{"position":[[163,22]]}}}],["proxy/v7",{"_index":14,"t":{"628":{"position":[[132,8]]}}}],["proxy=tru",{"_index":715,"t":{"695":{"position":[[1923,10]]},"763":{"position":[[306,11]]}}}],["proxy>/oauth2/callback",{"_index":1127,"t":{"729":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":848,"t":{"705":{"position":[[1388,17]]},"707":{"position":[[598,17]]}}}],["proxy_connect_timeout",{"_index":710,"t":{"695":{"position":[[1608,21]]}}}],["proxy_pass",{"_index":702,"t":{"695":{"position":[[1469,10]]},"757":{"position":[[319,10],[657,10],[2584,10],[2948,10]]}}}],["proxy_pass_request_bodi",{"_index":1393,"t":{"757":{"position":[[883,23]]}}}],["proxy_read_timeout",{"_index":713,"t":{"695":{"position":[[1656,18]]}}}],["proxy_send_timeout",{"_index":711,"t":{"695":{"position":[[1633,18]]}}}],["proxy_set_head",{"_index":704,"t":{"695":{"position":[[1503,16],[1532,16],[1573,16]]},"757":{"position":[[353,16],[382,16],[423,16],[458,16],[559,16],[691,16],[720,16],[761,16],[847,16],[1218,16],[1249,16],[1428,16]]}}}],["proxyrawpath",{"_index":608,"t":{"687":{"position":[[118,12],[136,12]]}}}],["proxyredirecturi",{"_index":968,"t":{"721":{"position":[[702,18]]}}}],["proxyus",{"_index":1264,"t":{"743":{"position":[[8220,9]]}}}],["proxywebsocket",{"_index":605,"t":{"685":{"position":[[2371,15],[2392,15]]}}}],["pubjwk",{"_index":1081,"t":{"723":{"position":[[1917,6]]},"743":{"position":[[7992,6]]}}}],["pubjwkurl",{"_index":418,"t":{"671":{"position":[[214,9],[231,9]]}}}],["pubkey",{"_index":420,"t":{"671":{"position":[[252,6]]},"743":{"position":[[8014,6]]}}}],["public",{"_index":873,"t":{"711":{"position":[[1011,6],[1229,6]]},"723":{"position":[[974,6]]}}}],["public_repo",{"_index":877,"t":{"711":{"position":[[1376,11]]}}}],["publicli",{"_index":139,"t":{"634":{"position":[[175,9]]}}}],["pull",{"_index":1363,"t":{"751":{"position":[[1173,6]]},"753":{"position":[[1036,6]]}}}],["push",{"_index":372,"t":{"659":{"position":[[341,4]]},"711":{"position":[[994,4]]},"743":{"position":[[3354,4]]}}}],["put",{"_index":15,"t":{"628":{"position":[[152,3]]}}}],["python",{"_index":1150,"t":{"739":{"position":[[66,6],[107,6]]}}}],["quay.io/oauth2",{"_index":21,"t":{"628":{"position":[[217,14]]}}}],["queri",{"_index":747,"t":{"699":{"position":[[358,5]]},"761":{"position":[[1287,6]]}}}],["quick",{"_index":1053,"t":{"723":{"position":[[1080,5]]}}}],["quickli",{"_index":122,"t":{"632":{"position":[[154,7]]}}}],["r_basicprofil",{"_index":946,"t":{"719":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":947,"t":{"719":{"position":[[187,15]]}}}],["rand",{"_index":1165,"t":{"739":{"position":[[296,4]]}}}],["random",{"_index":441,"t":{"673":{"position":[[586,6]]},"693":{"position":[[391,6],[442,6]]},"751":{"position":[[1210,6]]},"753":{"position":[[1073,6]]}}}],["random_password",{"_index":1178,"t":{"739":{"position":[[663,17]]}}}],["rang",{"_index":1296,"t":{"743":{"position":[[13201,6]]}}}],["raw",{"_index":609,"t":{"687":{"position":[[163,3]]},"757":{"position":[[2229,3]]}}}],["rd",{"_index":746,"t":{"699":{"position":[[355,2]]}}}],["re",{"_index":635,"t":{"691":{"position":[[799,2]]},"699":{"position":[[200,2]]}}}],["reach",{"_index":1288,"t":{"743":{"position":[[11981,5]]}}}],["read",{"_index":820,"t":{"703":{"position":[[2323,4]]},"711":{"position":[[1207,4]]},"729":{"position":[[240,4],[261,4]]}}}],["read_api",{"_index":927,"t":{"717":{"position":[[445,8]]}}}],["readi",{"_index":189,"t":{"636":{"position":[[613,6]]}}}],["real",{"_index":706,"t":{"695":{"position":[[1551,4]]},"723":{"position":[[3070,4],[3215,4]]},"743":{"position":[[8062,4],[8120,4],[8206,4],[8236,4],[9865,4],[13325,4]]},"751":{"position":[[899,4]]},"753":{"position":[[754,4]]},"757":{"position":[[401,4],[739,4]]}}}],["realm",{"_index":884,"t":{"713":{"position":[[127,5]]},"715":{"position":[[35,5],[711,6],[773,5]]}}}],["realm>/protocol/openid",{"_index":894,"t":{"713":{"position":[[592,22],[687,22],[784,22],[885,22]]}}}],["reason",{"_index":816,"t":{"703":{"position":[[1998,6]]}}}],["recommend",{"_index":667,"t":{"695":{"position":[[14,11]]},"703":{"position":[[867,11]]},"757":{"position":[[3574,11]]}}}],["redeem",{"_index":447,"t":{"673":{"position":[[686,6]]},"711":{"position":[[1837,6]]},"713":{"position":[[631,6]]},"723":{"position":[[3765,6]]},"725":{"position":[[686,6]]},"731":{"position":[[527,6]]},"743":{"position":[[8246,6],[11849,6]]}}}],["redeemurl",{"_index":512,"t":{"675":{"position":[[1889,9],[1906,9]]}}}],["redempt",{"_index":513,"t":{"675":{"position":[[1929,10]]},"743":{"position":[[8270,10]]}}}],["redi",{"_index":100,"t":{"630":{"position":[[552,6]]},"689":{"position":[[326,5]]},"693":{"position":[[4,5],[57,6],[606,5],[711,5],[873,5],[936,5],[964,5],[1055,5],[1112,5],[1175,5],[1208,5],[1254,5],[1357,5],[1412,5],[1475,5],[1505,5]]},"705":{"position":[[1435,5]]},"707":{"position":[[645,5]]},"743":{"position":[[8397,5],[8449,5],[8534,5],[8554,5],[8589,5],[8606,5],[8657,5],[8679,5],[8714,5],[8772,5],[8795,5],[8826,5],[8890,5],[8925,5],[8942,5],[8976,5],[9031,5],[9052,5],[9105,5],[9191,5],[9212,5],[9246,5],[9272,5],[9330,5],[9365,5],[9397,5],[9430,5],[10204,5]]}}}],["redirect",{"_index":88,"t":{"630":{"position":[[276,10]]},"687":{"position":[[245,10]]},"697":{"position":[[713,8]]},"699":{"position":[[22,8],[269,8],[380,8],[550,8],[585,8],[646,9],[873,8],[1006,8]]},"701":{"position":[[123,8]]},"703":{"position":[[699,8]]},"709":{"position":[[95,8]]},"713":{"position":[[174,8]]},"715":{"position":[[116,8],[604,8]]},"717":{"position":[[322,8],[625,8],[703,8],[1318,8]]},"719":{"position":[[217,8]]},"721":{"position":[[1054,8],[2720,8],[3969,8],[4029,8]]},"723":{"position":[[1379,8],[1619,8],[3610,8]]},"725":{"position":[[448,12]]},"727":{"position":[[315,8],[562,8],[680,8]]},"731":{"position":[[87,8],[267,8]]},"743":{"position":[[2172,9],[2733,8],[2822,9],[8292,8],[8322,8],[9948,8],[13053,11],[13889,8]]},"757":{"position":[[490,8],[591,8]]},"763":{"position":[[0,8],[372,9],[561,8],[572,9],[781,11],[849,8],[1894,9],[2059,9]]}}}],["redis://host[:port",{"_index":1265,"t":{"743":{"position":[[8485,21],[8634,20],[9142,21]]}}}],["reduc",{"_index":1335,"t":{"749":{"position":[[804,8]]}}}],["refer",{"_index":223,"t":{"638":{"position":[[552,9],[853,9]]},"640":{"position":[[94,9]]},"679":{"position":[[57,10]]},"723":{"position":[[930,5],[1284,8]]},"725":{"position":[[367,5]]}}}],["refresh",{"_index":633,"t":{"691":{"position":[[734,10]]},"703":{"position":[[882,7],[936,7],[2540,9]]},"721":{"position":[[2830,7],[4138,7]]},"743":{"position":[[1373,7],[1390,7],[13722,8]]},"757":{"position":[[1494,8]]}}}],["refresh/access/id",{"_index":652,"t":{"693":{"position":[[787,17]]}}}],["refreshes.default",{"_index":449,"t":{"673":{"position":[[712,17]]}}}],["regex",{"_index":71,"t":{"630":{"position":[[70,6]]},"743":{"position":[[11143,5]]}}}],["regist",{"_index":49,"t":{"628":{"position":[[585,8]]},"701":{"position":[[17,8]]},"723":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":770,"t":{"703":{"position":[[16,12]]},"705":{"position":[[114,14],[156,14]]},"719":{"position":[[18,12]]}}}],["regular",{"_index":175,"t":{"636":{"position":[[365,7]]},"685":{"position":[[534,7]]}}}],["releas",{"_index":6,"t":{"628":{"position":[[59,7],[462,7]]},"636":{"position":[[493,8],[661,9]]},"649":{"position":[[298,8]]},"673":{"position":[[764,8]]}}}],["reload",{"_index":1479,"t":{"763":{"position":[[2336,6]]}}}],["remain",{"_index":555,"t":{"685":{"position":[[711,9]]},"719":{"position":[[300,9]]}}}],["remot",{"_index":1301,"t":{"743":{"position":[[13456,6]]}}}],["remote_addr",{"_index":708,"t":{"695":{"position":[[1559,13]]},"757":{"position":[[409,13],[747,13]]}}}],["remote_address",{"_index":1339,"t":{"751":{"position":[[181,16]]},"753":{"position":[[62,16]]}}}],["remov",{"_index":205,"t":{"638":{"position":[[211,8]]},"640":{"position":[[255,7]]},"642":{"position":[[368,6],[429,7]]},"644":{"position":[[831,6]]},"699":{"position":[[76,7]]}}}],["renam",{"_index":206,"t":{"638":{"position":[[220,7]]}}}],["replac",{"_index":217,"t":{"638":{"position":[[479,7]]},"741":{"position":[[65,9]]},"747":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":1172,"t":{"739":{"position":[[550,19]]}}}],["repli",{"_index":835,"t":{"705":{"position":[[779,6]]}}}],["repo",{"_index":370,"t":{"659":{"position":[[176,4],[188,4]]},"711":{"position":[[1076,8]]},"723":{"position":[[2497,4]]},"743":{"position":[[3174,4]]}}}],["report",{"_index":1369,"t":{"751":{"position":[[1381,8]]},"753":{"position":[[1453,8]]}}}],["repositori",{"_index":332,"t":{"653":{"position":[[108,10],[126,10],[186,10]]},"659":{"position":[[239,10],[304,10],[360,10]]},"711":{"position":[[329,11],[953,11],[1018,10],[1056,11],[1126,10],[1236,10],[1320,11],[1445,10]]},"729":{"position":[[245,12],[696,10]]},"743":{"position":[[3227,10],[3318,10],[3373,11]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":1113,"t":{"725":{"position":[[714,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":1112,"t":{"725":{"position":[[647,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":1114,"t":{"725":{"position":[[786,39]]}}}],["url]/stat",{"_index":1324,"t":{"745":{"position":[[984,13]]}}}],["url]/var/www/stat",{"_index":1320,"t":{"745":{"position":[[629,21]]}}}],["urldefault",{"_index":436,"t":{"673":{"position":[[457,10]]}}}],["urleg",{"_index":425,"t":{"673":{"position":[[102,6],[1006,6]]}}}],["us",{"_index":18,"t":{"628":{"position":[[185,5],[294,5],[654,5]]},"630":{"position":[[761,6]]},"634":{"position":[[550,4]]},"636":{"position":[[3,3],[361,3]]},"638":{"position":[[293,3],[659,5]]},"640":{"position":[[3,3],[141,5],[182,5]]},"642":{"position":[[64,5],[473,5]]},"644":{"position":[[100,5],[726,3]]},"649":{"position":[[394,4],[626,4],[861,4],[953,4],[963,5],[1217,4],[1433,3],[1539,4],[1741,3],[1842,4]]},"655":{"position":[[517,4]]},"659":{"position":[[285,3]]},"665":{"position":[[183,4]]},"667":{"position":[[738,4]]},"669":{"position":[[210,5]]},"671":{"position":[[98,4],[193,4]]},"673":{"position":[[902,3]]},"675":{"position":[[467,4],[1732,4],[1820,4]]},"685":{"position":[[316,4],[462,4],[528,5],[730,3],[2058,4]]},"689":{"position":[[115,4]]},"691":{"position":[[78,4],[287,5]]},"693":{"position":[[863,5],[1102,3],[1118,3],[1363,3],[1481,3],[1511,3]]},"695":{"position":[[732,5],[815,3],[1184,3]]},"697":{"position":[[375,3],[648,4],[774,4],[904,4],[1053,3]]},"699":{"position":[[345,5]]},"701":{"position":[[371,5]]},"705":{"position":[[230,3],[1224,5]]},"707":{"position":[[435,5]]},"711":{"position":[[1426,3],[1686,5]]},"713":{"position":[[47,3],[1135,4],[1440,5]]},"717":{"position":[[160,5],[1042,5]]},"721":{"position":[[194,3],[263,4],[566,5],[1484,5],[1617,5],[4707,3]]},"723":{"position":[[2172,3],[3211,3]]},"725":{"position":[[105,5],[276,5]]},"727":{"position":[[370,3],[670,3]]},"729":{"position":[[43,3],[307,3],[555,3],[707,3]]},"733":{"position":[[29,3],[105,3],[209,3]]},"735":{"position":[[139,3]]},"739":{"position":[[35,3]]},"741":{"position":[[286,4]]},"743":{"position":[[927,4],[1196,3],[1868,3],[2114,3],[2883,3],[2963,3],[3299,3],[4605,5],[4728,3],[5093,4],[5270,4],[6253,4],[6637,3],[6723,3],[6791,4],[7313,4],[7402,4],[7499,4],[7596,4],[7683,4],[8098,4],[8507,4],[8540,3],[8851,4],[8919,3],[9004,4],[9037,3],[9164,4],[9197,3],[9218,3],[9305,3],[9336,3],[9464,3],[9532,3],[9940,4],[10375,7],[10417,4],[10585,7],[10693,7],[10867,3],[12099,5],[12215,5],[13606,3],[13765,5],[14175,3]]},"745":{"position":[[830,4],[1214,4]]},"747":{"position":[[299,6]]},"749":{"position":[[111,5],[735,5]]},"751":{"position":[[889,3]]},"753":{"position":[[744,3]]},"757":{"position":[[1651,5],[2677,3],[2719,3],[3589,3]]},"763":{"position":[[55,3],[330,3],[2299,3]]}}}],["usag",{"_index":284,"t":{"649":{"position":[[62,5]]},"693":{"position":[[851,6]]}}}],["use.typ",{"_index":538,"t":{"683":{"position":[[155,13],[251,13]]}}}],["user",{"_index":85,"t":{"630":{"position":[[248,4],[643,4]]},"644":{"position":[[385,4]]},"649":{"position":[[92,5],[436,4]]},"653":{"position":[[161,4]]},"659":{"position":[[371,5],[386,5],[399,5]]},"669":{"position":[[173,5]]},"673":{"position":[[1120,4],[1220,4],[1321,4]]},"675":{"position":[[1629,5]]},"685":{"position":[[795,5]]},"689":{"position":[[138,4]]},"691":{"position":[[790,5]]},"693":{"position":[[184,4]]},"697":{"position":[[258,4]]},"699":{"position":[[12,4],[121,4],[282,4],[393,4]]},"703":{"position":[[393,6],[2171,4],[2439,4]]},"705":{"position":[[410,5],[661,6]]},"711":{"position":[[436,4],[463,5],[971,5],[1196,5],[1286,4],[1481,4],[1619,8]]},"719":{"position":[[119,4]]},"721":{"position":[[2949,5]]},"725":{"position":[[58,5]]},"729":{"position":[[659,5]]},"743":{"position":[[3394,4],[3422,5],[4281,4],[4352,5],[6129,4],[6511,5],[6617,4],[6845,4],[6941,4],[6976,5],[7640,4],[7660,4],[7728,4],[10270,5],[12814,5]]},"749":{"position":[[748,4]]},"751":{"position":[[94,4],[356,4],[425,4],[1367,4]]},"753":{"position":[[1439,4]]},"757":{"position":[[1013,4],[1115,5],[1237,4],[1242,6]]}}}],["user'",{"_index":297,"t":{"649":{"position":[[760,6],[1148,6]]},"689":{"position":[[17,6]]},"697":{"position":[[919,6]]},"743":{"position":[[6051,6]]}}}],["user/prefer_email_to_us",{"_index":264,"t":{"644":{"position":[[598,25]]}}}],["user/settings/appl",{"_index":1131,"t":{"731":{"position":[[52,28]]}}}],["user@domain.com",{"_index":1340,"t":{"751":{"position":[[215,17]]},"753":{"position":[[96,17]]}}}],["user_ag",{"_index":1374,"t":{"753":{"position":[[195,14]]}}}],["userag",{"_index":1368,"t":{"751":{"position":[[1346,9]]},"753":{"position":[[548,14],[1418,9]]}}}],["useridclaim",{"_index":464,"t":{"673":{"position":[[1255,11],[1274,11]]}}}],["userinfo",{"_index":906,"t":{"713":{"position":[[1376,8]]}}}],["usernam",{"_index":347,"t":{"655":{"position":[[475,8]]},"659":{"position":[[416,9]]},"667":{"position":[[696,8]]},"711":{"position":[[1506,8],[1644,9]]},"743":{"position":[[1940,8],[3440,8],[6561,8],[6666,8],[6727,8],[7046,8],[10349,8]]},"751":{"position":[[63,8],[708,13],[1416,8],[1457,8]]},"753":{"position":[[444,13],[1488,8],[1529,8]]}}}],["username@email.com",{"_index":1370,"t":{"751":{"position":[[1425,18]]},"753":{"position":[[1497,18]]}}}],["usptream",{"_index":585,"t":{"685":{"position":[[1683,8]]}}}],["utc",{"_index":1243,"t":{"743":{"position":[[4788,3]]}}}],["util",{"_index":495,"t":{"675":{"position":[[1200,7]]}}}],["uuid",{"_index":1364,"t":{"751":{"position":[[1217,4]]},"753":{"position":[[1080,4]]}}}],["v2",{"_index":1437,"t":{"761":{"position":[[12,2]]},"763":{"position":[[93,2]]}}}],["v3.0.0",{"_index":43,"t":{"628":{"position":[[492,7]]}}}],["v7.2.1",{"_index":7,"t":{"628":{"position":[[70,7]]}}}],["valid",{"_index":32,"t":{"628":{"position":[[354,9]]},"636":{"position":[[231,8]]},"657":{"position":[[254,5]]},"675":{"position":[[2153,10]]},"701":{"position":[[189,5]]},"703":{"position":[[958,9]]},"709":{"position":[[83,5]]},"711":{"position":[[1910,8]]},"713":{"position":[[168,5],[827,8]]},"715":{"position":[[110,5]]},"725":{"position":[[756,8],[849,8]]},"731":{"position":[[595,8]]},"739":{"position":[[572,5]]},"743":{"position":[[12057,10],[12173,10],[12912,8],[12945,10],[13883,5]]}}}],["validateurl",{"_index":519,"t":{"675":{"position":[[2102,11],[2121,11]]}}}],["valu",{"_index":282,"t":{"647":{"position":[[117,5]]},"649":{"position":[[723,6],[798,6],[1111,6],[1186,6]]},"651":{"position":[[143,5]]},"655":{"position":[[62,5],[191,5],[292,5],[433,5],[538,6]]},"665":{"position":[[330,6],[533,6],[554,6],[582,6]]},"667":{"position":[[60,5],[110,5],[139,5],[152,5],[190,6],[337,6],[412,5],[513,5],[654,5],[759,6]]},"675":{"position":[[186,5],[319,5],[1388,5],[2489,6]]},"679":{"position":[[89,6],[184,5],[197,5],[235,6],[382,6]]},"685":{"position":[[259,5]]},"693":{"position":[[203,5]]},"701":{"position":[[404,6]]},"705":{"position":[[1011,5]]},"713":{"position":[[1539,5]]},"743":{"position":[[38,6],[3809,5]]},"745":{"position":[[795,5]]},"751":{"position":[[979,5]]},"753":{"position":[[834,5]]}}}],["values.nam",{"_index":390,"t":{"665":{"position":[[204,12]]}}}],["var/www/stat",{"_index":1323,"t":{"745":{"position":[[933,16]]}}}],["variabl",{"_index":59,"t":{"628":{"position":[[710,9]]},"644":{"position":[[61,9]]},"667":{"position":[[255,9]]},"679":{"position":[[300,9]]},"697":{"position":[[189,9]]},"723":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"725":{"position":[[192,9]]},"737":{"position":[[69,9],[183,9],[209,9]]},"747":{"position":[[63,8],[238,8]]},"749":{"position":[[613,10]]},"751":{"position":[[776,9],[804,8]]},"753":{"position":[[628,9],[659,8]]},"755":{"position":[[500,9],[532,8]]},"757":{"position":[[2202,9],[2838,9],[3826,8]]}}}],["verif",{"_index":434,"t":{"673":{"position":[[364,12]]},"685":{"position":[[1543,12]]},"743":{"position":[[5584,12],[5942,13]]}}}],["verifi",{"_index":35,"t":{"628":{"position":[[391,9]]},"659":{"position":[[294,9]]},"673":{"position":[[530,9]]},"711":{"position":[[1435,9]]},"743":{"position":[[3308,9],[5541,8],[5757,9],[11644,8],[12040,6],[12156,6]]}}}],["verifieddefault",{"_index":432,"t":{"673":{"position":[[260,15]]}}}],["verify/ssl_upstream_insecure_skip_verifi",{"_index":251,"t":{"644":{"position":[[252,40]]}}}],["version",{"_index":42,"t":{"628":{"position":[[484,7]]},"634":{"position":[[679,8]]},"717":{"position":[[50,7],[111,7]]},"743":{"position":[[12967,7],[12985,7]]}}}],["via",{"_index":269,"t":{"644":{"position":[[744,3],[757,3]]},"693":{"position":[[717,3],[958,3]]},"695":{"position":[[1247,3]]},"723":{"position":[[3308,3]]},"725":{"position":[[161,3]]},"737":{"position":[[31,3]]},"743":{"position":[[338,3],[6211,3],[6416,3],[9371,3]]},"751":{"position":[[1027,3]]},"757":{"position":[[71,3],[1007,3],[2944,3],[3755,3]]},"761":{"position":[[78,3]]}}}],["visit",{"_index":982,"t":{"721":{"position":[[1351,8]]}}}],["volum",{"_index":1336,"t":{"749":{"position":[[817,7]]}}}],["vulner",{"_index":130,"t":{"634":{"position":[[37,13],[606,13]]},"636":{"position":[[75,16],[308,15]]}}}],["want",{"_index":657,"t":{"693":{"position":[[1094,4]]},"699":{"position":[[865,4]]},"705":{"position":[[396,4],[884,4]]},"721":{"position":[[1739,4]]},"723":{"position":[[580,4]]},"745":{"position":[[677,5]]}}}],["warn",{"_index":210,"t":{"638":{"position":[[251,8]]},"743":{"position":[[10809,9],[13472,8]]}}}],["way",{"_index":864,"t":{"711":{"position":[[217,4]]},"723":{"position":[[1086,3]]}}}],["web",{"_index":789,"t":{"703":{"position":[[529,4]]},"721":{"position":[[1259,3],[2591,3],[3802,3],[3921,3]]}}}],["webapp",{"_index":828,"t":{"705":{"position":[[194,7]]}}}],["websocket",{"_index":606,"t":{"685":{"position":[[2428,10]]},"743":{"position":[[7942,10],[7966,9]]}}}],["websockets/proxy_websocket",{"_index":249,"t":{"644":{"position":[[197,27]]}}}],["well",{"_index":654,"t":{"693":{"position":[[924,4],[1145,4],[1308,5]]},"743":{"position":[[2414,5],[2452,5]]}}}],["whenstream",{"_index":598,"t":{"685":{"position":[[2172,13]]}}}],["whether",{"_index":394,"t":{"665":{"position":[[318,7]]},"685":{"position":[[2281,7]]},"717":{"position":[[144,7]]},"725":{"position":[[241,7]]},"743":{"position":[[9842,7]]}}}],["whitelist",{"_index":760,"t":{"699":{"position":[[954,9]]},"743":{"position":[[13002,9],[13775,9],[14118,11]]}}}],["whole",{"_index":1440,"t":{"761":{"position":[[236,5]]}}}],["wide_authority_to_your_service_account",{"_index":806,"t":{"703":{"position":[[1438,38]]}}}],["window",{"_index":833,"t":{"705":{"position":[[577,8]]},"707":{"position":[[45,7]]}}}],["wish",{"_index":991,"t":{"721":{"position":[[1839,4],[2271,4],[2364,4],[2969,4]]},"727":{"position":[[95,5]]}}}],["within",{"_index":131,"t":{"634":{"position":[[51,6]]},"638":{"position":[[131,6]]},"649":{"position":[[230,6]]},"655":{"position":[[81,6]]},"665":{"position":[[234,6]]},"679":{"position":[[112,6]]},"685":{"position":[[912,6]]},"691":{"position":[[568,6]]},"711":{"position":[[703,6]]},"721":{"position":[[4737,6]]}}}],["without",{"_index":208,"t":{"638":{"position":[[237,7]]},"649":{"position":[[307,7]]},"757":{"position":[[184,7]]},"761":{"position":[[215,7]]},"763":{"position":[[43,7]]}}}],["wizard",{"_index":855,"t":{"707":{"position":[[221,6]]}}}],["wo",{"_index":1474,"t":{"763":{"position":[[846,2],[2056,2]]}}}],["work",{"_index":115,"t":{"632":{"position":[[61,4]]},"717":{"position":[[102,4],[546,4]]},"721":{"position":[[1236,7],[1940,5],[2437,4]]},"723":{"position":[[210,4]]},"743":{"position":[[12871,5]]},"757":{"position":[[1528,4]]}}}],["write",{"_index":876,"t":{"711":{"position":[[1300,5]]}}}],["x",{"_index":705,"t":{"695":{"position":[[1549,1],[1590,1]]},"699":{"position":[[570,1]]},"713":{"position":[[1289,1]]},"743":{"position":[[6215,1],[6296,1],[6499,1],[6517,1],[6539,1],[6964,1],[6982,1],[7002,1],[7024,1],[8187,1],[8204,1],[8218,1],[8234,1],[9565,1],[9863,1],[9897,1],[10255,1],[10276,1],[10299,1],[10324,1],[10448,1],[11477,1]]},"751":{"position":[[897,1]]},"753":{"position":[[752,1]]},"757":{"position":[[399,1],[440,1],[475,1],[576,1],[737,1],[778,1],[1011,1],[1022,1],[1235,1],[1266,1],[1445,1]]},"763":{"position":[[337,1],[2001,1],[2177,1]]}}}],["x.y.z.linux",{"_index":46,"t":{"628":{"position":[[541,11]]}}}],["x509",{"_index":1056,"t":{"723":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":1257,"t":{"743":{"position":[[6269,12],[10233,12]]},"757":{"position":[[1080,12]]}}}],["xauthrequest/set_xauthrequest",{"_index":261,"t":{"644":{"position":[[502,29]]}}}],["xxx\"client_secret",{"_index":1030,"t":{"721":{"position":[[4580,18]]}}}],["xxxxx\"client_secret",{"_index":1003,"t":{"721":{"position":[[3263,20]]}}}],["yaml",{"_index":216,"t":{"638":{"position":[[464,4]]},"640":{"position":[[47,4]]},"642":{"position":[[295,4]]},"761":{"position":[[288,6]]}}}],["you'd",{"_index":875,"t":{"711":{"position":[[1166,5]]}}}],["yourcompany.com",{"_index":1193,"t":{"743":{"position":[[853,18]]}}}],["yyy\"pass_access_token",{"_index":1031,"t":{"721":{"position":[[4601,22]]}}}],["yyyyy\"pass_access_token",{"_index":1004,"t":{"721":{"position":[[3286,24]]}}}],["zzz\"cookie_secur",{"_index":1032,"t":{"721":{"position":[[4646,18]]}}}],["zzzzz\"skip_provider_button",{"_index":1006,"t":{"721":{"position":[[3333,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file +[{"documents":[{"i":627,"t":"Installation","u":"/oauth2-proxy/docs/7.2.x/","b":["Docs"]},{"i":629,"t":"Behaviour","u":"/oauth2-proxy/docs/7.2.x/behaviour","b":["Docs"]},{"i":631,"t":"Security","u":"/oauth2-proxy/docs/7.2.x/community/security","b":["Docs","Community"]},{"i":637,"t":"Alpha Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","b":["Docs","Configuration"]},{"i":688,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","b":["Docs","Configuration"]},{"i":724,"t":"Session Storage","u":"/oauth2-proxy/docs/7.2.x/configuration/session_storage","b":["Docs","Configuration"]},{"i":730,"t":"TLS Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/tls","b":["Docs","Configuration"]},{"i":732,"t":"Endpoints","u":"/oauth2-proxy/docs/7.2.x/features/endpoints","b":["Docs","Features"]},{"i":736,"t":"Overview","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","b":["Docs","Configuration"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/627",[0,2.222]],["t/629",[1,2.222]],["t/631",[2,2.222]],["t/637",[3,1.699,4,0.94]],["t/688",[4,0.761,5,1.375,6,1.375]],["t/724",[7,1.699,8,1.699]],["t/730",[4,0.94,9,1.699]],["t/732",[10,2.222]],["t/736",[11,2.222]]],"invertedIndex":[["alpha",{"_index":3,"t":{"637":{"position":[[0,5]]}}}],["behaviour",{"_index":1,"t":{"629":{"position":[[0,9]]}}}],["configur",{"_index":4,"t":{"637":{"position":[[6,13]]},"688":{"position":[[15,13]]},"730":{"position":[[4,13]]}}}],["endpoint",{"_index":10,"t":{"732":{"position":[[0,9]]}}}],["instal",{"_index":0,"t":{"627":{"position":[[0,12]]}}}],["oauth",{"_index":5,"t":{"688":{"position":[[0,5]]}}}],["overview",{"_index":11,"t":{"736":{"position":[[0,8]]}}}],["provid",{"_index":6,"t":{"688":{"position":[[6,8]]}}}],["secur",{"_index":2,"t":{"631":{"position":[[0,8]]}}}],["session",{"_index":7,"t":{"724":{"position":[[0,7]]}}}],["storag",{"_index":8,"t":{"724":{"position":[[8,7]]}}}],["tl",{"_index":9,"t":{"730":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":633,"t":"Security Disclosures","u":"/oauth2-proxy/docs/7.2.x/community/security","h":"#security-disclosures","p":631},{"i":635,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.2.x/community/security","h":"#how-will-we-respond-to-disclosures","p":631},{"i":639,"t":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#using-alpha-configuration","p":637},{"i":641,"t":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":637},{"i":643,"t":"Removed options","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#removed-options","p":637},{"i":645,"t":"Configuration Reference","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#configuration-reference","p":637},{"i":646,"t":"ADFSOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#adfsoptions","p":637},{"i":648,"t":"AlphaOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#alphaoptions","p":637},{"i":650,"t":"AzureOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#azureoptions","p":637},{"i":652,"t":"BitbucketOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#bitbucketoptions","p":637},{"i":654,"t":"ClaimSource","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#claimsource","p":637},{"i":656,"t":"Duration","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#duration","p":637},{"i":658,"t":"GitHubOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#githuboptions","p":637},{"i":660,"t":"GitLabOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#gitlaboptions","p":637},{"i":662,"t":"GoogleOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#googleoptions","p":637},{"i":664,"t":"Header","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#header","p":637},{"i":666,"t":"HeaderValue","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#headervalue","p":637},{"i":668,"t":"KeycloakOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#keycloakoptions","p":637},{"i":670,"t":"LoginGovOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#logingovoptions","p":637},{"i":672,"t":"OIDCOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#oidcoptions","p":637},{"i":674,"t":"Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#provider","p":637},{"i":676,"t":"Providers","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#providers","p":637},{"i":678,"t":"SecretSource","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#secretsource","p":637},{"i":680,"t":"Server","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#server","p":637},{"i":682,"t":"TLS","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#tls","p":637},{"i":684,"t":"Upstream","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#upstream","p":637},{"i":686,"t":"UpstreamConfig","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#upstreamconfig","p":637},{"i":690,"t":"Google Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#google-auth-provider","p":688},{"i":692,"t":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#azure-auth-provider","p":688},{"i":694,"t":"ADFS Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#adfs-auth-provider","p":688},{"i":696,"t":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":688},{"i":698,"t":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#github-auth-provider","p":688},{"i":700,"t":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":688},{"i":702,"t":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":688},{"i":704,"t":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":688},{"i":706,"t":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":688},{"i":708,"t":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#openid-connect-provider","p":688},{"i":710,"t":"login.gov Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#logingov-provider","p":688},{"i":712,"t":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#nextcloud-provider","p":688},{"i":714,"t":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":688},{"i":716,"t":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":688},{"i":718,"t":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":688},{"i":720,"t":"Email Authentication","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#email-authentication","p":688},{"i":722,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":688},{"i":726,"t":"Cookie Storage","u":"/oauth2-proxy/docs/7.2.x/configuration/session_storage","h":"#cookie-storage","p":724},{"i":728,"t":"Redis Storage","u":"/oauth2-proxy/docs/7.2.x/configuration/session_storage","h":"#redis-storage","p":724},{"i":734,"t":"Sign out","u":"/oauth2-proxy/docs/7.2.x/features/endpoints","h":"#sign-out","p":732},{"i":738,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#generating-a-cookie-secret","p":736},{"i":740,"t":"Config File","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#config-file","p":736},{"i":742,"t":"Command Line Options","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#command-line-options","p":736},{"i":744,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#upstreams-configuration","p":736},{"i":746,"t":"Environment variables","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#environment-variables","p":736},{"i":748,"t":"Logging Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#logging-configuration","p":736},{"i":750,"t":"Auth Log Format","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#auth-log-format","p":736},{"i":752,"t":"Request Log Format","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#request-log-format","p":736},{"i":754,"t":"Standard Log Format","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#standard-log-format","p":736},{"i":756,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":736},{"i":758,"t":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":736},{"i":760,"t":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":736},{"i":762,"t":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":736}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/633",[0,3.86,1,3.328]],["t/635",[1,3.328,2,3.86]],["t/639",[3,2.497,4,3.237,5,1.722]],["t/641",[5,1.483,6,2.788,7,2.404,8,2.788]],["t/643",[9,3.86,10,3.328]],["t/645",[5,2.053,11,3.86]],["t/646",[12,4.778]],["t/648",[13,4.778]],["t/650",[14,4.778]],["t/652",[15,4.778]],["t/654",[16,4.778]],["t/656",[17,4.778]],["t/658",[18,4.778]],["t/660",[19,4.778]],["t/662",[20,4.778]],["t/664",[21,4.778]],["t/666",[22,4.778]],["t/668",[23,4.778]],["t/670",[24,4.778]],["t/672",[25,4.778]],["t/674",[26,1.539]],["t/676",[26,1.539]],["t/678",[27,4.778]],["t/680",[28,4.778]],["t/682",[29,4.778]],["t/684",[30,3.686]],["t/686",[31,4.778]],["t/690",[26,1.042,32,3.237,33,1.318]],["t/692",[26,1.042,33,1.318,34,3.237]],["t/694",[26,1.042,33,1.318,35,3.237]],["t/696",[26,1.042,33,1.318,36,3.237]],["t/698",[26,1.042,33,1.318,37,3.237]],["t/700",[26,1.042,33,1.318,38,2.791]],["t/702",[26,0.898,33,1.135,38,2.404,39,2.788]],["t/704",[26,1.042,33,1.318,40,3.237]],["t/706",[26,1.042,33,1.318,41,3.237]],["t/708",[26,1.042,42,3.237,43,3.237]],["t/710",[26,1.243,44,3.86]],["t/712",[26,1.243,45,3.86]],["t/714",[26,1.042,33,1.318,46,3.237]],["t/716",[26,1.042,33,1.318,47,3.237]],["t/718",[26,1.042,33,1.318,48,3.237]],["t/720",[49,3.86,50,3.86]],["t/722",[7,2.791,26,1.042,51,3.237]],["t/726",[52,3.328,53,3.328]],["t/728",[53,3.328,54,3.86]],["t/734",[55,3.86,56,3.86]],["t/738",[52,2.791,57,3.237,58,3.237]],["t/740",[59,3.86,60,3.86]],["t/742",[10,2.791,61,3.237,62,3.237]],["t/744",[5,2.053,30,2.977]],["t/746",[63,3.86,64,3.86]],["t/748",[5,2.053,65,2.715]],["t/750",[33,1.318,65,2.278,66,2.497]],["t/752",[65,2.278,66,2.497,67,3.237]],["t/754",[65,2.278,66,2.497,68,3.237]],["t/756",[3,1.888,5,1.302,69,2.448,70,2.448,71,2.448]],["t/758",[3,1.683,5,1.161,72,2.182,73,2.182,74,1.683,75,1.881]],["t/760",[74,2.15,75,2.404,76,2.788,77,2.788]],["t/762",[5,1.483,30,2.15,74,2.15,78,2.788]]],"invertedIndex":[["401",{"_index":76,"t":{"760":{"position":[[17,3]]}}}],["ad",{"_index":51,"t":{"722":{"position":[[0,6]]}}}],["adf",{"_index":35,"t":{"694":{"position":[[0,4]]}}}],["adfsopt",{"_index":12,"t":{"646":{"position":[[0,11]]}}}],["alpha",{"_index":4,"t":{"639":{"position":[[6,5]]}}}],["alphaopt",{"_index":13,"t":{"648":{"position":[[0,12]]}}}],["auth",{"_index":33,"t":{"690":{"position":[[7,4]]},"692":{"position":[[6,4]]},"694":{"position":[[5,4]]},"696":{"position":[[9,4]]},"698":{"position":[[7,4]]},"700":{"position":[[9,4]]},"702":{"position":[[14,4]]},"704":{"position":[[7,4]]},"706":{"position":[[9,4]]},"714":{"position":[[13,4]]},"716":{"position":[[10,4]]},"718":{"position":[[6,4]]},"750":{"position":[[0,4]]}}}],["auth_request",{"_index":70,"t":{"756":{"position":[[35,12]]}}}],["authent",{"_index":50,"t":{"720":{"position":[[6,14]]}}}],["azur",{"_index":34,"t":{"692":{"position":[[0,5]]}}}],["azureopt",{"_index":14,"t":{"650":{"position":[[0,12]]}}}],["bitbucket",{"_index":47,"t":{"716":{"position":[[0,9]]}}}],["bitbucketopt",{"_index":15,"t":{"652":{"position":[[0,16]]}}}],["claimsourc",{"_index":16,"t":{"654":{"position":[[0,11]]}}}],["command",{"_index":61,"t":{"742":{"position":[[0,7]]}}}],["config",{"_index":59,"t":{"740":{"position":[[0,6]]}}}],["configur",{"_index":5,"t":{"639":{"position":[[12,13]]},"641":{"position":[[11,13]]},"645":{"position":[[0,13]]},"744":{"position":[[10,13]]},"748":{"position":[[8,13]]},"756":{"position":[[0,11]]},"758":{"position":[[0,11]]},"762":{"position":[[34,13]]}}}],["connect",{"_index":43,"t":{"708":{"position":[[7,7]]}}}],["convert",{"_index":6,"t":{"641":{"position":[[0,10]]}}}],["cooki",{"_index":52,"t":{"726":{"position":[[0,6]]},"738":{"position":[[13,6]]}}}],["digitalocean",{"_index":46,"t":{"714":{"position":[[0,12]]}}}],["direct",{"_index":71,"t":{"756":{"position":[[48,9]]}}}],["disclosur",{"_index":1,"t":{"633":{"position":[[9,11]]},"635":{"position":[[23,12]]}}}],["durat",{"_index":17,"t":{"656":{"position":[[0,8]]}}}],["email",{"_index":49,"t":{"720":{"position":[[0,5]]}}}],["environ",{"_index":63,"t":{"746":{"position":[[0,11]]}}}],["error",{"_index":77,"t":{"760":{"position":[[21,6]]}}}],["facebook",{"_index":36,"t":{"696":{"position":[[0,8]]}}}],["file",{"_index":60,"t":{"740":{"position":[[7,4]]}}}],["format",{"_index":66,"t":{"750":{"position":[[9,6]]},"752":{"position":[[12,6]]},"754":{"position":[[13,6]]}}}],["forwardauth",{"_index":74,"t":{"758":{"position":[[42,11]]},"760":{"position":[[0,11]]},"762":{"position":[[0,11]]}}}],["gener",{"_index":57,"t":{"738":{"position":[[0,10]]}}}],["gitea",{"_index":48,"t":{"718":{"position":[[0,5]]}}}],["github",{"_index":37,"t":{"698":{"position":[[0,6]]}}}],["githubopt",{"_index":18,"t":{"658":{"position":[[0,13]]}}}],["gitlab",{"_index":40,"t":{"704":{"position":[[0,6]]}}}],["gitlabopt",{"_index":19,"t":{"660":{"position":[[0,13]]}}}],["googl",{"_index":32,"t":{"690":{"position":[[0,6]]}}}],["googleopt",{"_index":20,"t":{"662":{"position":[[0,13]]}}}],["header",{"_index":21,"t":{"664":{"position":[[0,6]]}}}],["headervalu",{"_index":22,"t":{"666":{"position":[[0,11]]}}}],["keycloak",{"_index":38,"t":{"700":{"position":[[0,8]]},"702":{"position":[[0,8]]}}}],["keycloakopt",{"_index":23,"t":{"668":{"position":[[0,15]]}}}],["line",{"_index":62,"t":{"742":{"position":[[8,4]]}}}],["linkedin",{"_index":41,"t":{"706":{"position":[[0,8]]}}}],["log",{"_index":65,"t":{"748":{"position":[[0,7]]},"750":{"position":[[5,3]]},"752":{"position":[[8,3]]},"754":{"position":[[9,3]]}}}],["login.gov",{"_index":44,"t":{"710":{"position":[[0,9]]}}}],["logingovopt",{"_index":24,"t":{"670":{"position":[[0,15]]}}}],["middlewar",{"_index":75,"t":{"758":{"position":[[54,10]]},"760":{"position":[[28,10]]}}}],["new",{"_index":7,"t":{"641":{"position":[[32,3]]},"722":{"position":[[9,3]]}}}],["nextcloud",{"_index":45,"t":{"712":{"position":[[0,9]]}}}],["nginx",{"_index":69,"t":{"756":{"position":[[29,5]]}}}],["oidc",{"_index":39,"t":{"702":{"position":[[9,4]]}}}],["oidcopt",{"_index":25,"t":{"672":{"position":[[0,11]]}}}],["openid",{"_index":42,"t":{"708":{"position":[[0,6]]}}}],["option",{"_index":10,"t":{"643":{"position":[[8,7]]},"742":{"position":[[13,7]]}}}],["out",{"_index":56,"t":{"734":{"position":[[5,3]]}}}],["provid",{"_index":26,"t":{"674":{"position":[[0,8]]},"676":{"position":[[0,9]]},"690":{"position":[[12,8]]},"692":{"position":[[11,8]]},"694":{"position":[[10,8]]},"696":{"position":[[14,8]]},"698":{"position":[[12,8]]},"700":{"position":[[14,8]]},"702":{"position":[[19,8]]},"704":{"position":[[12,8]]},"706":{"position":[[14,8]]},"708":{"position":[[15,8]]},"710":{"position":[[10,8]]},"712":{"position":[[10,8]]},"714":{"position":[[18,8]]},"716":{"position":[[15,8]]},"718":{"position":[[11,8]]},"722":{"position":[[13,8]]}}}],["redi",{"_index":54,"t":{"728":{"position":[[0,5]]}}}],["refer",{"_index":11,"t":{"645":{"position":[[14,9]]}}}],["remov",{"_index":9,"t":{"643":{"position":[[0,7]]}}}],["request",{"_index":67,"t":{"752":{"position":[[0,7]]}}}],["respond",{"_index":2,"t":{"635":{"position":[[12,7]]}}}],["secret",{"_index":58,"t":{"738":{"position":[[20,6]]}}}],["secretsourc",{"_index":27,"t":{"678":{"position":[[0,12]]}}}],["secur",{"_index":0,"t":{"633":{"position":[[0,8]]}}}],["server",{"_index":28,"t":{"680":{"position":[[0,6]]}}}],["sign",{"_index":55,"t":{"734":{"position":[[0,4]]}}}],["standard",{"_index":68,"t":{"754":{"position":[[0,8]]}}}],["static",{"_index":78,"t":{"762":{"position":[[17,6]]}}}],["storag",{"_index":53,"t":{"726":{"position":[[7,7]]},"728":{"position":[[6,7]]}}}],["structur",{"_index":8,"t":{"641":{"position":[[36,9]]}}}],["tl",{"_index":29,"t":{"682":{"position":[[0,3]]}}}],["traefik",{"_index":72,"t":{"758":{"position":[[29,7]]}}}],["upstream",{"_index":30,"t":{"684":{"position":[[0,8]]},"744":{"position":[[0,9]]},"762":{"position":[[24,9]]}}}],["upstreamconfig",{"_index":31,"t":{"686":{"position":[[0,14]]}}}],["us",{"_index":3,"t":{"639":{"position":[[0,5]]},"756":{"position":[[16,3]]},"758":{"position":[[16,3]]}}}],["v2",{"_index":73,"t":{"758":{"position":[[37,4]]}}}],["variabl",{"_index":64,"t":{"746":{"position":[[12,9]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":628,"t":"Choose how to deploy: a. Download Prebuilt Binary (current release is v7.2.1) b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available) d. Using a Kubernetes manifest (Helm) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. $ sha256sum -c sha256sum.txtoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/7.2.x/","h":"","p":627},{"i":630,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/7.2.x/behaviour","h":"","p":629},{"i":632,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/7.2.x/community/security","h":"","p":631},{"i":634,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/7.2.x/community/security","h":"#security-disclosures","p":631},{"i":636,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.2.x/community/security","h":"#how-will-we-respond-to-disclosures","p":631},{"i":638,"t":"danger This page contains documentation for alpha features. We reserve the right to make breaking changes to the features detailed within this page with no notice. Options described in this page may be changed, removed, renamed or moved without prior warning. Please beware of this before you use alpha configuration options. This page details a set of alpha configuration options in a new format. Going forward we are intending to add structured configuration in YAML format to replace the existing TOML based configuration file and flags. Below is a reference for the structure of the configuration, with AlphaOptions as the root of the configuration. When using alpha configuration, your config file will look something like below: upstreams: - id: ... ...injectRequestHeaders: - name: ... ...injectResponseHeaders: - name: ... ... Please browse the reference below for the structure of the new configuration format.","s":"Alpha Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"","p":637},{"i":640,"t":"To use the new alpha configuration, generate a YAML file based on the format described in the reference below. Provide the path to this file using the --alpha-config flag. note When using the --alpha-config flag, some options are no longer available. See removed options below for more information.","s":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#using-alpha-configuration","p":637},{"i":642,"t":"Before adding the new --alpha-config option, start OAuth2 Proxy using the convert-config-to-alpha flag to convert existing configuration to the new format. oauth2-proxy --convert-config-to-alpha --config ./path/to/existing/config.cfg This will convert any options supported by the new format to YAML and print the new configuration to STDOUT. Copy this to a new file, remove any options from your existing configuration noted in removed options and then start OAuth2 Proxy using the new config. oauth2-proxy --alpha-config ./path/to/new/config.yaml --config ./path/to/existing/config.cfg","s":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":637},{"i":644,"t":"The following flags/options and their respective environment variables are no longer available when using alpha configuration: flush-interval/flush_interval pass-host-header/pass_host_header proxy-websockets/proxy_websockets ssl-upstream-insecure-skip-verify/ssl_upstream_insecure_skip_verify upstream/upstreams pass-basic-auth/pass_basic_auth pass-access-token/pass_access_token pass-user-headers/pass_user_headers pass-authorization-header/pass_authorization_header set-basic-auth/set_basic_auth set-xauthrequest/set_xauthrequest set-authorization-header/set_authorization_header prefer-email-to-user/prefer_email_to_user basic-auth-password/basic_auth_password skip-auth-strip-headers/skip_auth_strip_headers Attempting to use these options via flags or via config when --alpha-config set will result in an error. info You must remove these options before starting OAuth2 Proxy with --alpha-config","s":"Removed options","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#removed-options","p":637},{"i":647,"t":"(Appears on: Provider) Field Type Description skipScope bool Skip adding the scope parameter in login requestDefault value is 'false'","s":"ADFSOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#adfsoptions","p":637},{"i":649,"t":"AlphaOptions contains alpha structured configuration options. Usage of these options allows users to access alpha features that are not available as part of the primary configuration structure for OAuth2 Proxy. danger The options within this structure are considered alpha. They may change between releases without notice. Field Type Description upstreamConfig UpstreamConfig UpstreamConfig is used to configure upstream servers.Once a user is authenticated, requests to the server will be proxied tothese upstream servers based on the path mappings defined in this list. injectRequestHeaders []Header InjectRequestHeaders is used to configure headers that should be addedto requests to upstream servers.Headers may source values from either the authenticated user's sessionor from a static secret value. injectResponseHeaders []Header InjectResponseHeaders is used to configure headers that should be addedto responses from the proxy.This is typically used when using the proxy as an external authenticationprovider in conjunction with another proxy such as NGINX and itsauth_request module.Headers may source values from either the authenticated user's sessionor from a static secret value. server Server Server is used to configure the HTTP(S) server for the proxy application.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. metricsServer Server MetricsServer is used to configure the HTTP(S) server for metrics.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. providers Providers Providers is used to configure multiple providers.","s":"AlphaOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#alphaoptions","p":637},{"i":651,"t":"(Appears on: Provider) Field Type Description tenant string Tenant directs to a tenant-specific or common (tenant-independent) endpointDefault value is 'common'","s":"AzureOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#azureoptions","p":637},{"i":653,"t":"(Appears on: Provider) Field Type Description team string Team sets restrict logins to members of this team repository string Repository sets restrict logins to user with access to this repository","s":"BitbucketOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#bitbucketoptions","p":637},{"i":655,"t":"(Appears on: HeaderValue) ClaimSource allows loading a header value from a claim within the session Field Type Description claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"ClaimSource","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#claimsource","p":637},{"i":657,"t":"(string alias)​ (Appears on: Upstream) Duration is as string representation of a period of time. A duration string is a is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\", \"-1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".","s":"Duration","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#duration","p":637},{"i":659,"t":"(Appears on: Provider) Field Type Description org string Org sets restrict logins to members of this organisation team string Team sets restrict logins to members of this team repo string Repo sets restrict logins to collaborators of this repository token string Token is the token to use when verifying repository collaboratorsit must have push access to the repository users []string Users allows users with these usernames to logineven if they do not belong to the specified org and team or collaborators","s":"GitHubOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#githuboptions","p":637},{"i":661,"t":"(Appears on: Provider) Field Type Description group []string Group sets restrict logins to members of this group projects []string Projects restricts logins to members of any of these projects","s":"GitLabOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#gitlaboptions","p":637},{"i":663,"t":"(Appears on: Provider) Field Type Description group []string Groups sets restrict logins to members of this google group adminEmail string AdminEmail is the google admin to impersonate for api calls serviceAccountJson string ServiceAccountJSON is the path to the service account json credentials","s":"GoogleOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#googleoptions","p":637},{"i":665,"t":"(Appears on: AlphaOptions) Header represents an individual header that will be added to a request or response header. Field Type Description name string Name is the header name to be used for this set of values.Names should be unique within a list of Headers. preserveRequestValue bool PreserveRequestValue determines whether any values for this headershould be preserved for the request to the upstream server.This option only applies to injected request headers.Defaults to false (headers that match this header will be stripped). values []HeaderValue Values contains the desired values for this header","s":"Header","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#header","p":637},{"i":667,"t":"(Appears on: Header) HeaderValue represents a single header value and the sources that can make up the header value Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value. claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"HeaderValue","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#headervalue","p":637},{"i":669,"t":"(Appears on: Provider) Field Type Description groups []string Group enables to restrict login to members of indicated group roles []string Role enables to restrict login to users with role (only available when using the keycloak-oidc provider)","s":"KeycloakOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#keycloakoptions","p":637},{"i":671,"t":"(Appears on: Provider) Field Type Description jwtKey string JWTKey is a private key in PEM format used to sign JWT, jwtKeyFile string JWTKeyFile is a path to the private key file in PEM format used to sign the JWT pubjwkURL string PubJWKURL is the JWK pubkey access endpoint","s":"LoginGovOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#logingovoptions","p":637},{"i":673,"t":"(Appears on: Provider) Field Type Description issuerURL string IssuerURL is the OpenID Connect issuer URLeg: https://accounts.google.com insecureAllowUnverifiedEmail bool InsecureAllowUnverifiedEmail prevents failures if an email address in an id_token is not verifieddefault set to 'false' insecureSkipIssuerVerification bool InsecureSkipIssuerVerification skips verification of ID token issuers. When false, ID Token Issuers must match the OIDC discovery URLdefault set to 'false' insecureSkipNonce bool InsecureSkipNonce skips verifying the ID Token's nonce claim that must matchthe random nonce sent in the initial OAuth flow. Otherwise, the nonce is checkedafter the initial OAuth redeem & subsequent token refreshes.default set to 'true'Warning: In a future release, this will change to 'false' by default for enhanced security. skipDiscovery bool SkipDiscovery allows to skip OIDC discovery and use manually supplied Endpointsdefault set to 'false' jwksURL string JwksURL is the OpenID Connect JWKS URLeg: https://www.googleapis.com/oauth2/v3/certs emailClaim string EmailClaim indicates which claim contains the user email,default set to 'email' groupsClaim string GroupsClaim indicates which claim contains the user groupsdefault set to 'groups' userIDClaim string UserIDClaim indicates which claim contains the user IDdefault set to 'email'","s":"OIDCOptions","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#oidcoptions","p":637},{"i":675,"t":"(Appears on: Providers) Provider holds all configuration for a single provider Field Type Description clientID string ClientID is the OAuth Client ID that is defined in the providerThis value is required for all providers. clientSecret string ClientSecret is the OAuth Client Secret that is defined in the providerThis value is required for all providers. clientSecretFile string ClientSecretFile is the name of the filecontaining the OAuth Client Secret, it will be used if ClientSecret is not set. keycloakConfig KeycloakOptions KeycloakConfig holds all configurations for Keycloak provider. azureConfig AzureOptions AzureConfig holds all configurations for Azure provider. ADFSConfig ADFSOptions ADFSConfig holds all configurations for ADFS provider. bitbucketConfig BitbucketOptions BitbucketConfig holds all configurations for Bitbucket provider. githubConfig GitHubOptions GitHubConfig holds all configurations for GitHubC provider. gitlabConfig GitLabOptions GitLabConfig holds all configurations for GitLab provider. googleConfig GoogleOptions GoogleConfig holds all configurations for Google provider. oidcConfig OIDCOptions OIDCConfig holds all configurations for OIDC provideror providers utilize OIDC configurations. loginGovConfig LoginGovOptions LoginGovConfig holds all configurations for LoginGov provider. id string ID should be a unique identifier for the provider.This value is required for all providers. provider string Type is the OAuth providermust be set from the supported providers group,otherwise 'Google' is set as default name string Name is the providers display nameif set, it will be shown to the users in the login page. caFiles []string CAFiles is a list of paths to CA certificates that should be used when connecting to the provider.If not specified, the default Go trust sources are used instead loginURL string LoginURL is the authentication endpoint redeemURL string RedeemURL is the token redemption endpoint profileURL string ProfileURL is the profile access endpoint resource string ProtectedResource is the resource that is protected (Azure AD and ADFS only) validateURL string ValidateURL is the access token validation endpoint scope string Scope is the OAuth scope specification prompt string Prompt is OIDC prompt approvalPrompt string ApprovalPrompt is the OAuth approval_promptdefault is set to 'force' allowedGroups []string AllowedGroups is a list of restrict logins to members of this group acrValues string AcrValues is a string of acr values","s":"Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#provider","p":637},{"i":677,"t":"([]Provider alias)​ (Appears on: AlphaOptions) Providers is a collection of definitions for providers.","s":"Providers","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#providers","p":637},{"i":679,"t":"(Appears on: ClaimSource, HeaderValue, TLS) SecretSource references an individual secret value. Only one source within the struct should be defined at any time. Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value.","s":"SecretSource","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#secretsource","p":637},{"i":681,"t":"(Appears on: AlphaOptions) Server represents the configuration for an HTTP(S) server Field Type Description BindAddress string BindAddress is the address on which to serve traffic.Leave blank or set to \"-\" to disable. SecureBindAddress string SecureBindAddress is the address on which to serve secure traffic.Leave blank or set to \"-\" to disable. TLS TLS TLS contains the information for loading the certificate and key for thesecure traffic.","s":"Server","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#server","p":637},{"i":683,"t":"(Appears on: Server) TLS contains the information for loading a TLS certifcate and key. Field Type Description Key SecretSource Key is the TLS key data to use.Typically this will come from a file. Cert SecretSource Cert is the TLS certificate data to use.Typically this will come from a file.","s":"TLS","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#tls","p":637},{"i":685,"t":"(Appears on: UpstreamConfig) Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path. Field Type Description id string ID should be a unique identifier for the upstream.This value is required for all upstreams. path string Path is used to map requests to the upstream server.The closest match will take precedence and all Paths must be unique.Path can also take a pattern when used with RewriteTarget.Path segments can be captured and matched using regular experessions.Eg:- ^/foo$: Match only the explicit path /foo- ^/bar/$: Match any path prefixed with /bar/- ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget rewriteTarget string RewriteTarget allows users to rewrite the request path before it is sent tothe upstream server.Use the Path to capture segments for reuse within the rewrite target.Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewritethe request /baz/abc/123 to /foo/abc/123 before proxying to theupstream server. uri string The URI of the upstream server. This may be an HTTP(S) server of a Filebased URL. It may include a path, in which case all requests will be servedunder that path.Eg:- http://localhost:8080- https://service.localhost- https://service.localhost/path- file://host/pathIf the URI's path is \"/base\" and the incoming request was for \"/dir\",the upstream request will be for \"/base/dir\". insecureSkipTLSVerify bool InsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.This option is insecure and will allow potential Man-In-The-Middle attacksbetweem OAuth2 Proxy and the usptream server.Defaults to false. static bool Static will make all requests to this upstream have a static response.The response will have a body of \"Authenticated\" and a response codematching StaticCode.If StaticCode is not set, the response will return a 200 response. staticCode int StaticCode determines the response code for the Static response.This option can only be used with Static enabled. flushInterval Duration FlushInterval is the period between flushing the response buffer whenstreaming response from the upstream.Defaults to 1 second. passHostHeader bool PassHostHeader determines whether the request host header should be proxiedto the upstream server.Defaults to true. proxyWebSockets bool ProxyWebSockets enables proxying of websockets to upstream serversDefaults to true.","s":"Upstream","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#upstream","p":637},{"i":687,"t":"(Appears on: AlphaOptions) UpstreamConfig is a collection of definitions for upstream servers. Field Type Description proxyRawPath bool ProxyRawPath will pass the raw url path to upstream allowing for url'slike: \"/%2F/\" which would otherwise be redirected to \"/\" upstreams []Upstream Upstreams represents the configuration for the upstream servers.Requests will be proxied to this upstream if the path matches the request path.","s":"UpstreamConfig","u":"/oauth2-proxy/docs/7.2.x/configuration/alpha-config","h":"#upstreamconfig","p":637},{"i":689,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure ADFS Facebook GitHub Keycloak GitLab LinkedIn OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket Gitea The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"","p":688},{"i":691,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"API Manager\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account: https://developers.google.com/identity/protocols/OAuth2ServiceAccount and make sure to download the json file. Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ).","s":"Google Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#google-auth-provider","p":688},{"i":693,"t":"Add an application: go to https://portal.azure.com, choose \"Azure Active Directory\" in the left menu, select \"App registrations\" and then click on \"New app registration\". Pick a name and choose \"Webapp / API\" as application type. Use https://internal.yourcompany.com as Sign-on URL. Click \"Create\". On the \"Settings\" / \"Properties\" page of the app, pick a logo and select \"Multi-tenanted\" if you want to allow users from multiple organizations to access your app. Note down the application ID. Click \"Save\". On the \"Settings\" / \"Required Permissions\" page of the app, click on \"Windows Azure Active Directory\" and then on \"Access the directory as the signed in user\". Hit \"Save\" and then then on \"Grant permissions\" (you might need another admin to do this). On the \"Settings\" / \"Reply URLs\" page of the app, add https://internal.yourcompanycom/oauth2/callback for each host that you want to protect by the oauth2 proxy. Click \"Save\". On the \"Settings\" / \"Keys\" page of the app, add a new key and note down the value after hitting \"Save\". Configure the proxy with --provider=azure --client-id= --client-secret= --oidc-issuer-url=https://sts.windows.net/{tenant-id}/ Note: When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#azure-auth-provider","p":688},{"i":695,"t":"Open the ADFS administration console on your Windows Server and add a new Application Group Provide a name for the integration, select Server Application from the Standalone applications section and click Next Follow the wizard to get the client-id, client-secret and configure the application credentials Configure the proxy with --provider=adfs --client-id= --client-secret= Note: When using the ADFS Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"ADFS Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#adfs-auth-provider","p":688},{"i":697,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":688},{"i":699,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to login even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to login with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#github-auth-provider","p":688},{"i":701,"t":"note This is the legacy provider for Keycloak, use Keycloak OIDC Auth Provider if possible. Create new client in your Keycloak realm with Access Type 'confidental' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: --provider=keycloak --client-id= --client-secret= --login-url=\"http(s):///auth/realms//protocol/openid-connect/auth\" --redeem-url=\"http(s):///auth/realms//protocol/openid-connect/token\" --profile-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --validate-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --keycloak-group= --keycloak-group= For group based authorization, the optional --keycloak-group (legacy) or --allowed-group (global standard) flags can be used to specify which groups to limit access to. If these are unset but a groups mapper is set up above in step (3), the provider will still populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response. The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":688},{"i":703,"t":"Create new client in your Keycloak realm with Access Type 'confidental', Client protocol 'openid-connect' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Create a mapper with Mapper Type 'Audience' and Included Client Audience and Included Custom Audience set to your client name. Make sure you set the following to the appropriate url: --provider=keycloak-oidc --client-id= --client-secret= --redirect-url=https://myapp.com/oauth2/callback --oidc-issuer-url=https:///auth/realms/ --allowed-role= // Optional, required realm role --allowed-role=: // Optional, required client role","s":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":688},{"i":705,"t":"This auth provider has been tested against Gitlab version 12.X. Due to Gitlab API changes, it may not work for version prior to 12.X (see 994). Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. If you need projects filtering, add the extra read_api scope to your application. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\" If your self-hosted GitLab is on a sub-directory (e.g. domain.tld/gitlab), as opposed to its own sub-domain (e.g. gitlab.domain.tld), you may need to add a redirect from domain.tld/oauth pointing at e.g. domain.tld/gitlab/oauth.","s":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":688},{"i":707,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":688},{"i":709,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex and we will use it as an example. The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta, an example can be found below. Dex​ To configure the OIDC provider for Dex, perform the following steps: Download Dex: go get github.com/dexidp/dex See the getting started guide for more details. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Add a configuration block to the staticClients section of examples/config-dev.yaml: - id: oauth2-proxyredirectURIs:- 'http://127.0.0.1:4180/oauth2/callback'name: 'oauth2-proxy'secret: proxy Launch Dex: from $GOPATH/github.com/dexidp/dex, run: bin/dex serve examples/config-dev.yaml In a second terminal, run the oauth2-proxy with the following args: -provider oidc-provider-display-name \"My OIDC Provider\"-client-id oauth2-proxy-client-secret proxy-redirect-url http://127.0.0.1:4180/oauth2/callback-oidc-issuer-url http://127.0.0.1:5556/dex-cookie-secure=false-cookie-secret=secret-email-domain kilgore.trout To serve the current working directory as a web site under the /static endpoint, add: -upstream file://$PWD/#/static/ Test the setup by visiting http://127.0.0.1:4180 or http://127.0.0.1:4180/static . See also our local testing environment for a self-contained example using Docker and etcd as storage for Dex. Okta​ To configure the OIDC provider for Okta, perform the following steps: Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com . The client_id and client_secret are configured in the application settings. Generate a unique cookie_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#openid-connect-provider","p":688},{"i":711,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048 bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost', The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"login.gov Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#logingov-provider","p":688},{"i":713,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to setup the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#nextcloud-provider","p":688},{"i":715,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":688},{"i":717,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who has access to one selected repository use --bitbucket-repository=.","s":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":688},{"i":719,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1\"","s":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":688},{"i":721,"t":"To authorize by email domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#email-authentication","p":688},{"i":723,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/7.2.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":688},{"i":725,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/7.2.x/configuration/session_storage","h":"","p":724},{"i":727,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/7.2.x/configuration/session_storage","h":"#cookie-storage","p":724},{"i":729,"t":"The Redis Storage backend stores sessions, encrypted, in redis. Instead sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128 bit random number, hex-encoded The secret is a 128 bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.","s":"Redis Storage","u":"/oauth2-proxy/docs/7.2.x/configuration/session_storage","h":"#redis-storage","p":724},{"i":731,"t":"There are two recommended configurations. Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or .... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"TLS Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/tls","h":"","p":730},{"i":733,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive","s":"Endpoints","u":"/oauth2-proxy/docs/7.2.x/features/endpoints","h":"","p":732},{"i":735,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.","s":"Sign out","u":"/oauth2-proxy/docs/7.2.x/features/endpoints","h":"#sign-out","p":732},{"i":737,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"","p":736},{"i":739,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_'; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#generating-a-cookie-secret","p":736},{"i":741,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#config-file","p":736},{"i":743,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --custom-templates-dir string path to custom html templates --custom-sign-in-logo string path or a URL to an custom image for the sign_in page logo. Use \\\"-\\\" to disable default logo. --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --force-json-errors bool force JSON errors instead of HTTP error pages or redirects false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --gitlab-projects string | list restrict logins to members of any of these projects (may be given multiple times) formatted as orgname/repo=accesslevel. Access level should be a value matching Gitlab access levels, defaulted to 20 if absent --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -B for bcrypt encryption --htpasswd-user-group string | list the groups to be set on sessions for htpasswd users --http-address string [http://]: or unix:// to listen on for HTTP clients \"127.0.0.1:4180\" --https-address string : to listen on for HTTPS clients \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --insecure-oidc-skip-nonce bool skip verifying the OIDC ID Token's nonce claim true --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --oidc-email-claim string which OIDC claim contains the user's email \"email\" --oidc-groups-claim string which OIDC claim contains the user groups \"groups\" --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Groups, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --metrics-address string the address prometheus metrics will be scraped from \"\" --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --request-id-header string Request header to use as the request ID in logging X-Request-Id --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted and allows X-Forwarded-{Proto,Host,Uri} headers to be used on redirect selection false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Groups, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --show-debug-on-error bool show detailed error information on error pages (WARNING: this may contain sensitive information - do not use in production) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping endpoint false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string | list (DEPRECATED for --skip-auth-route) bypass authentication for requests paths that match (may be given multiple times) --skip-auth-route string | list bypass authentication for requests that match the method & path. Format: method=path_regex OR path_regex alone for all methods --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy true --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-key-file string path to private key file --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --allowed-group string | list restrict logins to members of this group (may be given multiple times) --allowed-role string | list restrict logins to users with this role (may be given multiple times). Only works with the keycloak-oidc provider. --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . to allow subdomains (e.g. .example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. [1]: Only these providers support --cookie-refresh: GitLab, Google and OIDC [2]: When using the whitelist-domain option, any domain prefixed with a . will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URL's protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*. See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#command-line-options","p":736},{"i":745,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#upstreams-configuration","p":736},{"i":747,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside of a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#environment-variables","p":736},{"i":749,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) can be disabled with --silence-ping-logging reducing log volume. This flag appends the --ping-path to --exclude-logging-paths.","s":"Logging Configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#logging-configuration","p":736},{"i":751,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Message Authenticated via OAuth2 The details of the auth attempt. Protocol HTTP/1.0 The request protocol. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details.","s":"Auth Log Format","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#auth-log-format","p":736},{"i":753,"t":"HTTP request logs will output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#request-log-format","p":736},{"i":755,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#standard-log-format","p":736},{"i":757,"t":"The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\".","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":736},{"i":759,"t":"This option requires --reverse-proxy option to be set.","s":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":736},{"i":761,"t":"The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration: http: routers: a-service: rule: \"Host(`a-service.example.com`)\" service: a-service-backend middlewares: - oauth-errors - oauth-auth tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth: rule: \"Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true oauth-errors: errors: status: - \"401-403\" service: oauth-backend query: \"/oauth2/sign_in\"","s":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":736},{"i":763,"t":"Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint Following options need to be set on oauth2-proxy: --upstream=static://202: Configures a static response for authenticated sessions --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly http: routers: a-service-route-1: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)\" service: a-service-backend middlewares: - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" a-service-route-2: rule: \"Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)\" service: a-service-backend middlewares: - oauth-auth-wo-redirect # unauthenticated session will return a 401 tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services-oauth2-route: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth2-proxy-route: rule: \"Host(`oauth.example.com`) && PathPrefix(`/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 b-service-backend: loadBalancer: servers: - url: http://172.16.0.3:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth-redirect: forwardAuth: address: https://oauth.example.com/ trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization oauth-auth-wo-redirect: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.2.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":736}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/628",[0,3.047,1,4.914,2,3.328,3,6.364,4,6.364,5,3.047,6,4.043,7,4.274,8,3.328,9,3.703,10,1.31,11,2.477,12,4.274,13,5.67,14,4.274,15,4.274,16,4.274,17,4.914,18,0.621,19,3.328,20,3.328,21,4.274,22,1.201,23,5.67,24,4.274,25,4.274,26,4.274,27,1.821,28,3.703,29,3.703,30,4.274,31,4.274,32,1.741,33,3.703,34,1.863,35,2.823,36,2.637,37,4.274,38,4.274,39,1.227,40,2.637,41,2.477,42,3.047,43,4.274,44,4.274,45,4.274,46,4.274,47,3.703,48,2.102,49,3.328,50,1.597,51,1.821,52,1.07,53,0.875,54,1.667,55,2.102,56,2.102,57,0.987,58,2.213,59,1.741,60,3.746,61,3.703,62,1.667,63,1.907,64,2.337]],["t/630",[10,1.352,18,0.438,22,1.105,39,1.18,50,1.677,52,1.105,62,1.75,65,2.335,66,1.75,67,2.768,68,2.601,69,3.394,70,1.543,71,3.888,72,3.199,73,2.964,74,2.188,75,2.475,76,1.543,77,1.422,78,4.175,79,2.655,80,2.454,81,3.888,82,2.022,83,1.828,84,4.487,85,1.463,86,4.487,87,2.454,88,1.481,89,4.487,90,4.487,91,3.199,92,2.206,93,2.964,94,4.487,95,2.454,96,2.964,97,3.199,98,3.394,99,3.032,100,2.768,101,0.812,102,2.768,103,1.75,104,1.608,105,2.454,106,2.964,107,1.75,108,2.964,109,3.199,110,2.964]],["t/632",[22,1.086,53,1.178,111,1.824,112,5.754,113,3.99,114,4.481,115,3.55,116,4.481,117,2.693,118,3.801,119,5.754,120,4.986,121,4.103,122,5.754,123,3.801,124,3.335,125,4.481,126,5.754,127,5.754]],["t/634",[18,0.459,22,1.139,34,1.376,42,3.353,53,1.236,92,2.312,95,2.572,106,3.106,108,3.106,114,4.699,121,4.303,123,3.106,128,4.702,129,5.23,130,5.23,131,2.312,132,5.476,133,3.353,134,5.775,135,4.074,136,3.987,137,4.702,138,3.724,139,4.702,140,2.435,141,4.074,142,2.901,143,4.702,144,4.702,145,4.702,146,2.725,147,4.074,148,1.685,149,3.661,150,2.725,151,3.301,152,4.702,153,4.702,154,4.702,155,4.702,156,4.702,157,4.702,158,4.074,159,4.074,160,4.702,161,4.702,162,3.661,163,3.661,164,1.49]],["t/636",[6,4.327,18,0.592,32,1.933,108,3.133,114,3.693,121,3.382,130,5.259,134,5.259,135,4.11,136,4.009,140,3.466,142,2.926,151,2.594,159,6.571,164,1.504,165,6.692,166,6.069,167,6.069,168,2.332,169,3.382,170,4.743,171,4.743,172,4.743,173,4.743,174,4.11,175,4.11,176,4.743,177,3.693,178,4.743,179,4.743,180,6.069,181,2.021,182,1.631,183,2.116,184,4.743,185,4.743,186,4.743,187,4.743,188,4.743,189,4.743,190,4.743,191,4.743,192,4.743]],["t/638",[10,1.558,11,2.448,18,0.549,34,1.647,52,1.414,54,1.647,57,1.461,76,1.934,101,0.765,102,2.606,103,1.647,109,3.012,131,2.077,132,4.381,138,3.471,164,1.339,168,2.077,182,1.934,193,3.66,194,4.162,195,1.8,196,3.289,197,4.457,198,4.381,199,4.224,200,3.66,201,1.977,202,4.224,203,3.261,204,3.289,205,2.79,206,4.224,207,4.224,208,2.79,209,3.66,210,3.66,211,3.66,212,2.79,213,2.823,214,3.289,215,5.482,216,3.012,217,3.289,218,2.79,219,4.224,220,2.31,221,1.647,222,3.276,223,3.717,224,2.606,225,3.289,226,3.66,227,2.606,228,3.66,229,3.66,230,4.224]],["t/640",[18,0.693,27,2.305,34,1.928,39,0.979,52,1.021,54,2.569,57,1.521,80,2.958,111,1.714,125,4.211,182,1.859,197,4.693,204,4.211,205,3.573,213,2.413,216,3.856,220,2.958,221,2.569,222,3.411,223,3.573,231,3.573,232,2.109,233,4.211,234,2.66]],["t/642",[18,0.595,22,1.336,34,1.401,41,3.538,52,1.268,53,1.45,54,2.963,57,1.635,105,2.617,111,1.517,182,2.57,197,4.676,205,4.032,212,3.161,213,2.723,216,3.412,218,4.032,221,1.866,235,5.511,236,6.103,237,2.617,238,4.147,239,3.726,240,3.726,241,4.785]],["t/644",[18,0.571,22,1.105,27,1.912,41,2.601,52,0.847,53,0.919,54,2.542,57,1.352,58,2.324,59,1.828,60,2.964,66,2.795,69,3.394,70,2.013,85,1.121,101,1.251,103,1.75,106,2.964,125,3.494,148,1.608,197,4.306,205,2.964,212,2.964,221,1.75,242,1.313,243,4.487,244,4.487,245,3.494,246,4.487,247,2.1,248,4.487,249,4.487,250,3.494,251,4.487,252,4.487,253,4.647,254,4.487,255,1.543,256,4.487,257,4.487,258,2.879,259,4.487,260,4.487,261,4.487,262,4.487,263,3.888,264,4.487,265,4.487,266,3.494,267,4.487,268,3.494,269,2.879,270,4.487,271,2.768]],["t/647",[39,1.076,69,3.445,105,3.251,272,1.884,273,1.672,274,1.373,275,1.545,276,5.944,277,3.668,278,3.251,279,4.239,280,2.044,281,5.944,282,2.13,283,3.927]],["t/649",[0,3.356,6,2.328,18,0.709,22,1.208,27,1.391,39,1.093,52,1.373,53,0.669,57,1.274,64,1.786,65,1.686,77,1.035,82,1.615,85,1.176,101,0.852,103,2.152,104,2.667,107,2.355,109,2.328,118,2.157,131,1.606,140,2.437,141,4.078,150,1.893,174,2.83,183,1.457,193,2.83,195,1.391,197,3.645,198,2.543,203,1.893,208,2.157,215,4.782,220,1.786,224,2.015,228,4.078,229,4.078,232,1.274,255,1.123,273,0.919,274,0.754,275,0.849,282,2.164,284,2.83,285,2.83,286,3.266,287,3.266,288,2.328,289,4.297,290,3.266,291,3.266,292,2.83,293,2.157,294,4.706,295,3.266,296,2.904,297,3.356,298,4.706,299,2.904,300,1.324,301,1.606,302,3.266,303,2.83,304,3.266,305,2.83,306,2.328,307,3.266,308,3.266,309,3.356,310,3.266,311,2.437,312,4.078,313,2.695,314,4.706,315,4.078,316,4.078,317,4.706,318,2.437,319,2.904,320,2.314,321,4.706,322,3.266]],["t/651",[39,1.064,272,1.864,273,1.654,274,1.358,275,1.529,282,2.107,323,5.919,324,1.941,325,4.578,326,3.884,327,6.001,328,5.095,329,5.879]],["t/653",[39,1.036,85,1.431,101,1.234,146,4.219,255,1.968,272,1.814,273,1.61,274,1.322,275,1.488,280,2.343,324,2.25,330,3.19,331,2.679,332,4.809]],["t/655",[18,0.488,57,1.156,70,2.159,74,2.347,76,1.721,77,1.587,107,1.953,131,2.462,235,3.899,253,4.478,272,1.587,273,1.409,274,1.156,275,1.302,282,2.656,324,2.073,333,3.57,334,4.339,335,3.57,336,4.137,337,4.339,338,4.234,339,4.339,340,4.339,341,4.339,342,3.308,343,5.443,344,3.57,345,4.339,346,3.899,347,2.902,348,4.339,349,3.899]],["t/657",[10,1.237,32,2.182,40,3.304,57,1.237,103,2.088,110,3.537,117,3.064,118,3.537,123,3.537,272,1.697,324,2.334,350,4.64,351,5.098,352,5.355,353,4.17,354,2.929,355,5.355,356,5.355,357,5.355,358,6.547,359,5.355,360,5.355,361,5.355,362,5.355,363,5.355,364,5.098,365,4.64,366,5.355,367,5.355]],["t/659",[18,0.482,35,3.262,39,0.894,77,1.565,79,2.778,85,1.704,101,1.235,146,4.15,169,4.44,255,1.698,272,1.565,273,1.389,274,1.14,275,1.284,280,2.344,324,2.436,330,3.191,331,2.914,332,4.505,347,2.862,368,5.31,369,3.845,370,4.44,371,4.938,372,3.845,373,4.938,374,3.845,375,2.311]],["t/661",[39,1.047,101,1.047,113,3.999,272,1.834,273,1.627,274,1.336,275,1.504,280,2.358,324,2.264,330,3.21,331,3.21,376,3.263]],["t/663",[39,0.994,101,0.994,232,2.142,272,1.741,273,1.545,274,1.268,275,1.428,280,1.888,324,2.36,330,2.57,331,2.57,376,3.19,377,4.102,378,6.648,379,3.388,380,4.276,381,3.183,382,4.276,383,6.648,384,3.388,385,3.388,386,3.915,387,3.388]],["t/665",[18,0.479,57,1.135,65,2.438,68,2.849,76,2.34,101,0.89,103,1.917,105,2.689,107,3.016,131,2.417,150,2.849,195,2.095,224,3.033,266,3.828,272,1.558,273,1.383,274,1.135,275,1.278,277,3.033,282,2.561,283,3.248,301,2.417,324,1.623,333,3.505,388,3.248,389,3.828,390,4.916,391,3.248,392,6.208,393,3.505,394,3.248,395,4.916,396,4.916,397,4.916,398,4.916,399,4.916,400,4.916,401,4.916]],["t/667",[18,0.436,34,1.308,57,1.032,58,2.314,59,1.821,70,2.008,74,1.67,76,2.008,107,2.537,195,1.904,201,2.091,232,1.743,235,3.479,253,4.164,272,1.416,273,1.257,274,1.032,275,1.162,282,2.773,296,2.757,300,1.257,324,2.362,333,3.186,336,3.914,337,3.872,338,4.013,339,3.872,340,3.872,341,3.872,342,2.952,343,5.06,344,3.186,345,3.872,346,3.479,347,2.59,348,3.872,349,3.479,388,2.952,402,3.872,403,2.952,404,3.186,405,4.638,406,3.186,407,2.757,408,5.06,409,5.06]],["t/669",[18,0.544,27,2.376,39,1.215,85,1.394,272,1.768,273,1.569,274,1.288,275,1.45,280,2.307,324,2.215,330,3.14,331,2.609,376,3.212,410,3.67,411,4.832,412,5.605,413,3.44,414,2.609]],["t/671",[18,0.64,34,1.575,39,0.974,62,2.099,78,4.683,142,4.052,213,2.93,232,2.099,255,1.85,272,1.706,273,1.514,274,1.243,275,1.399,320,3.229,324,2.339,354,3.592,415,6.567,416,5.114,417,6.567,418,6.567,419,3.837,420,4.663]],["t/673",[6,2.613,10,0.846,18,0.357,35,2.421,39,0.663,50,1.909,68,2.124,69,3.407,77,1.162,79,2.395,85,1.469,101,1.286,140,1.898,148,2.106,164,1.863,195,2.505,203,2.124,272,1.162,273,1.031,274,0.846,275,0.953,277,3.923,283,4.417,324,2.207,336,3.478,376,1.635,411,5.094,414,2.39,419,2.613,421,5.107,422,2.96,423,2.645,424,3.407,425,5.107,426,3.176,427,5.107,428,3.176,429,3.664,430,1.802,431,3.176,432,3.664,433,5.107,434,2.854,435,3.642,436,3.664,437,5.107,438,3.176,439,5.094,440,3.664,441,2.613,442,2.854,443,4.426,444,3.664,445,2.613,446,3.664,447,2.124,448,3.664,449,3.664,450,3.664,451,2.854,452,1.21,453,3.664,454,5.107,455,2.854,456,2.854,457,3.664,458,5.107,459,3.664,460,5.107,461,3.664,462,5.107,463,3.664,464,5.107,465,3.664]],["t/675",[11,1.606,18,0.489,32,1.129,39,1.37,50,2.349,52,1.341,62,2.176,76,1.724,79,1.699,82,0.811,83,2.043,85,0.693,101,1.083,105,1.516,150,2.417,164,1.589,194,1.71,232,1.081,237,1.516,255,1.434,272,0.878,273,0.78,274,0.963,275,0.72,278,2.742,280,1.434,282,1.999,293,2.755,296,1.71,300,1.173,319,1.71,324,2.497,326,1.831,330,1.297,331,1.297,375,1.297,376,1.236,377,2.573,391,1.831,402,2.401,413,1.71,414,2.347,423,1.435,452,1.376,466,6.996,467,4.17,468,1.589,469,4.17,470,5.014,471,4.17,472,2.771,473,4.17,474,2.771,475,4.17,476,2.771,477,2.755,478,4.17,479,2.771,480,3.247,481,4.17,482,2.771,483,2.158,484,4.17,485,2.771,486,2.771,487,4.17,488,2.771,489,1.976,490,4.17,491,2.771,492,4.17,493,2.771,494,2.771,495,2.771,496,4.17,497,2.771,498,2.771,499,2.401,500,2.771,501,2.771,502,2.771,503,1.976,504,2.771,505,2.401,506,4.17,507,2.401,508,2.771,509,2.401,510,1.831,511,4.17,512,4.17,513,2.401,514,4.17,515,1.831,516,3.614,517,2.771,518,1.831,519,4.17,520,4.345,521,4.17,522,2.771,523,2.158,524,4.17,525,4.17,526,2.401]],["t/677",[39,1.361,224,3.815,272,1.96,350,5.358,527,5.358,528,5.358]],["t/679",[34,1.515,58,2.68,59,2.109,76,1.779,92,2.545,117,2.422,131,2.545,195,2.205,223,3.419,232,2.018,272,1.64,273,1.456,274,1.195,275,1.345,282,2.682,293,3.419,296,3.193,300,1.804,318,2.68,324,2.299,333,3.69,334,4.485,344,3.69,389,4.03,404,3.69,405,4.967,406,3.69,407,3.193,408,5.556,409,5.556,529,5.175]],["t/681",[10,1.679,52,0.972,101,1.157,104,2.29,140,2.667,195,2.195,224,3.178,234,2.533,272,1.633,273,1.449,274,1.189,275,1.339,309,3.672,315,5.539,316,5.539,318,3.6,319,3.178,320,2.533,324,2.11,335,3.672,388,3.402,430,3.143,530,4.558,531,6.392,532,6.392,533,4.558,534,5.15,535,5.15]],["t/683",[34,1.946,104,1.967,195,2.34,234,2.7,272,1.741,273,1.545,274,1.268,275,1.428,318,3.848,319,3.388,320,3.654,335,3.915,344,4.74,536,5.491,537,3.853,538,6.648,539,6.648,540,5.177]],["t/685",[18,0.587,22,1.061,52,0.531,53,0.576,57,0.974,65,2.517,68,3.665,69,1.631,77,1.337,82,0.824,83,1.147,85,0.703,95,1.539,98,1.631,101,0.51,103,2.817,104,2.015,107,1.098,124,2.445,131,1.384,151,1.539,158,2.439,164,1.337,175,2.439,201,1.317,212,2.787,220,1.539,232,2.876,245,2.192,247,1.317,250,2.192,272,0.892,273,0.792,274,0.65,275,0.732,277,3.469,282,1.008,283,1.859,288,2.007,289,2.192,292,2.439,299,3.716,301,3.224,309,2.007,313,1.256,318,1.458,324,1.856,338,2.603,351,2.192,353,2.192,388,1.859,391,1.859,393,3.008,394,1.859,410,2.308,434,2.192,442,2.192,499,2.439,541,2.814,542,2.814,543,2.814,544,2.439,545,2.814,546,2.814,547,2.814,548,4.219,549,5.061,550,2.814,551,4.219,552,2.814,553,4.219,554,5.061,555,2.439,556,5.622,557,4.219,558,2.814,559,2.814,560,2.814,561,2.814,562,2.814,563,2.814,564,2.814,565,2.814,566,2.814,567,1.974,568,2.814,569,0.792,570,2.814,571,2.814,572,2.814,573,2.814,574,2.814,575,2.814,576,2.814,577,2.814,578,2.814,579,2.814,580,4.219,581,2.814,582,2.814,583,2.814,584,2.814,585,2.814,586,4.219,587,2.814,588,2.439,589,2.814,590,2.814,591,5.061,592,2.192,593,2.439,594,2.192,595,2.814,596,4.219,597,2.439,598,2.814,599,2.814,600,1.859,601,2.007,602,4.219,603,2.814,604,2.445,605,4.219,606,2.439,607,2.814]],["t/687",[10,1.224,22,1.001,52,1.001,65,1.9,66,2.068,68,3.073,77,1.681,88,1.75,103,3.03,104,1.9,224,3.271,232,2.746,272,1.681,273,1.492,274,1.224,275,1.378,277,3.271,289,4.129,388,3.503,445,3.781,527,4.595,528,4.595,569,1.492,608,6.508,609,4.595,610,5.302,611,5.302,612,5.302]],["t/689",[5,3.489,10,1.13,18,0.477,22,0.924,32,1.994,39,1.382,48,2.406,49,3.811,50,1.829,51,2.085,52,1.168,53,1.002,88,1.615,111,1.551,132,3.811,136,4.09,214,3.811,237,3.386,282,1.753,306,3.489,311,2.534,336,3.386,377,3.82,413,3.019,422,3.588,423,3.206,452,1.615,477,3.233,480,3.811,483,3.811,489,3.489,613,2.085,614,4.894,615,2.085,616,4.894,617,4.241,618,3.811,619,4.241,620,4.894,621,4.241,622,4.894]],["t/691",[0,5.083,2,3.138,10,1.127,22,0.761,32,1.079,34,1.596,36,2.487,39,0.48,48,1.302,50,1.823,51,1.717,53,0.825,57,0.612,66,1.033,70,1.386,72,2.874,74,0.99,75,0.949,76,1.386,79,1.079,80,1.449,82,0.775,85,1.219,88,0.874,101,0.883,111,1.728,113,3.208,117,1.24,124,1.535,133,1.889,148,2.102,150,1.535,164,1.728,177,2.063,181,2.499,182,1.677,183,1.182,200,2.295,201,2.283,218,2.662,221,2.126,227,1.634,232,1.033,242,1.428,255,0.911,258,2.399,278,1.449,300,0.745,306,1.889,326,1.75,330,1.24,331,1.24,376,2.757,377,3.619,379,3.364,380,2.063,381,3.4,382,2.063,384,2.487,385,3.01,386,3.478,387,3.01,410,2.204,430,1.302,443,2.295,451,2.063,468,1.958,505,2.295,567,1.24,600,1.75,615,2.079,623,2.063,624,3.513,625,2.649,626,2.295,627,2.649,628,2.295,629,4.878,630,5.452,631,1.889,632,2.295,633,2.649,634,2.649,635,2.649,636,3.138,637,1.889,638,2.063,639,2.295,640,2.063,641,2.649,642,3.492,643,2.295,644,2.649,645,1.634,646,2.649,647,2.295,648,4.03,649,2.063,650,2.063,651,2.295,652,1.634,653,2.649,654,2.063,655,3.223,656,2.649,657,2.295,658,2.649,659,2.063,660,2.649,661,1.634,662,1.634,663,1.889,664,4.03,665,2.649,666,2.649,667,2.649,668,2.649,669,1.889,670,2.649,671,2.649,672,2.063,673,2.649,674,2.295,675,2.649,676,2.649,677,2.649,678,2.063,679,1.634,680,2.295,681,2.063,682,2.063,683,2.649,684,2.649]],["t/693",[0,3.501,10,1.512,11,2.008,18,0.479,22,0.927,39,0.627,40,2.138,48,2.414,51,2.43,52,0.654,53,0.71,64,2.685,66,1.351,67,2.138,70,1.191,74,1.835,75,1.759,76,1.191,77,1.098,83,1.412,85,1.227,99,1.794,100,2.138,101,1.123,111,1.808,164,1.808,168,2.804,181,1.476,182,1.688,183,1.546,194,3.828,247,1.621,255,1.688,274,0.8,282,1.241,306,2.47,320,2.414,323,2.698,354,2.685,379,2.138,381,2.008,414,1.621,424,2.008,468,1.556,477,3.767,518,2.289,569,1.381,613,1.476,623,3.823,624,2.685,632,3.002,639,4.255,640,4.831,642,4.255,649,2.698,663,4.669,681,3.823,685,3.465,686,4.91,687,3.519,688,3.465,689,4.62,690,4.255,691,3.465,692,3.465,693,3.002,694,3.002,695,3.029,696,3.002,697,3.002,698,3.002,699,3.465,700,3.465,701,3.465,702,3.002,703,2.698,704,3.002,705,3.465,706,3.465,707,2.698,708,2.698,709,3.002,710,2.698,711,3.002,712,3.002,713,2.47,714,2.008,715,3.002]],["t/695",[18,0.453,22,0.876,39,1.083,48,2.282,51,2.982,52,1.129,64,3.273,66,1.81,67,2.864,70,1.596,74,2.236,75,2.144,76,1.596,99,2.404,100,2.864,104,2.144,111,1.471,133,3.309,164,1.897,168,2.282,182,1.596,242,1.358,300,1.306,376,2.071,387,2.864,468,2.218,480,4.66,624,3.273,663,3.309,672,3.614,697,4.022,702,4.022,703,4.66,704,4.022,707,3.614,708,3.614,709,4.022,710,3.614,711,4.022,712,4.022,713,3.309,714,2.69,715,4.022,716,4.641,717,4.022,718,4.641,719,3.309,720,4.022,721,4.641,722,4.641]],["t/697",[32,2.435,50,2.234,88,1.973,101,1.082,181,2.547,182,2.055,280,2.055,567,2.797,652,3.688,662,3.688,689,3.949,723,6.992,724,5.977]],["t/699",[18,0.456,32,1.319,35,2.138,39,0.847,57,1.08,70,1.113,77,1.906,79,2.45,82,0.947,85,1.713,101,0.847,111,1.026,113,1.77,131,1.591,136,4.909,142,1.997,146,3.853,148,1.16,151,2.557,169,4.74,181,1.992,182,1.113,201,1.514,213,1.444,221,1.824,237,1.77,242,1.607,255,2.356,258,1.591,278,1.77,280,2.356,326,2.138,330,3.284,331,2.188,332,4.636,347,2.71,368,4.683,369,2.52,370,2.308,372,2.52,374,3.641,375,2.569,447,1.876,569,1.544,613,1.379,615,1.379,645,1.997,652,1.997,661,1.997,662,1.997,682,2.52,696,4.757,725,3.236,726,2.138,727,2.308,728,2.52,729,3.236,730,2.52,731,3.334,732,2.804,733,2.52,734,2.804,735,3.236,736,4.052,737,2.52,738,3.915,739,3.915,740,2.804,741,4.052,742,2.804,743,3.236,744,3.236,745,3.236,746,3.236,747,5.49,748,3.236,749,3.236,750,3.236]],["t/701",[18,0.57,32,2.066,39,1.058,57,0.838,62,1.415,70,1.247,76,1.744,77,1.15,79,1.478,88,1.197,101,0.918,102,2.238,103,1.415,104,1.3,107,1.415,111,1.608,123,2.397,124,2.103,181,2.698,182,1.247,201,1.698,220,1.984,221,1.415,242,1.062,255,1.744,258,1.784,274,1.171,280,1.247,282,1.3,293,2.397,300,1.427,301,1.784,336,1.984,375,1.698,376,3.385,379,3.129,387,2.238,403,2.397,413,4.59,414,1.698,447,2.103,468,2.007,515,2.397,537,2.103,567,1.698,569,1.021,624,1.984,631,2.587,636,2.825,645,2.238,652,2.238,659,2.825,661,2.238,703,2.825,751,5.071,752,3.144,753,3.144,754,5.067,755,2.587,756,3.144,757,2.825,758,3.144,759,3.144,760,6.331,761,5.486,762,6.331,763,3.628,764,3.628,765,5.071,766,3.628,767,3.628,768,3.628,769,2.587,770,2.825,771,3.628,772,2.825,773,3.628,774,1.984,775,3.628,776,3.628]],["t/703",[10,1.303,32,1.728,57,1.303,76,2.323,77,1.788,79,1.728,83,2.298,88,1.862,101,1.021,111,1.344,124,2.458,151,3.085,164,1.344,181,2.701,182,1.458,201,1.984,242,1.241,255,1.458,274,1.464,300,1.587,336,2.319,376,2.517,387,2.616,412,5.261,413,2.616,414,2.64,422,2.458,423,2.196,424,2.458,468,2.377,567,1.984,569,1.193,636,3.302,645,2.616,652,2.616,661,2.616,752,5.493,753,3.674,754,5.855,755,3.023,756,3.674,758,3.674,759,4.888,761,3.674,777,2.801,778,5.493,779,3.023,780,4.24,781,4.24,782,4.24,783,4.24,784,4.24,785,4.24]],["t/705",[10,0.858,18,0.503,36,2.292,39,0.673,42,3.676,50,1.388,51,2.726,54,1.449,57,0.858,70,1.277,75,1.847,80,2.032,88,2.111,101,1.072,113,2.032,115,3.181,123,2.454,148,1.331,168,2.912,201,2.413,203,2.153,209,3.219,242,1.967,247,2.771,278,2.82,280,1.277,300,1.045,330,2.413,331,1.739,376,2.301,381,2.153,394,2.454,410,2.032,414,1.739,422,2.153,424,2.153,468,1.634,489,5.185,515,2.454,569,1.89,613,2.197,615,1.583,624,2.82,645,2.292,661,3.181,687,2.292,737,2.893,738,2.649,739,2.649,755,2.649,786,2.893,787,5.156,788,3.715,789,3.715,790,3.715,791,4.611,792,4.226,793,3.715,794,3.715,795,3.219,796,3.715,797,3.219,798,3.715,799,3.715,800,3.715,801,3.715,802,3.715,803,3.715,804,3.715,805,3.715,806,3.219,807,5.156,808,3.715,809,3.715,810,3.715,811,3.715,812,3.219,813,3.715]],["t/707",[10,1.494,48,2.582,50,2.417,83,2.139,85,1.312,88,1.733,111,1.664,113,2.872,124,3.043,181,2.237,182,1.805,273,1.477,278,2.872,300,1.82,320,3.448,381,3.043,452,1.733,555,4.55,569,1.477,617,4.55,623,4.089,624,2.872,637,3.744,640,4.089,652,3.24,719,3.744,727,3.744,814,5.25,815,5.25,816,5.25,817,5.25,818,4.55,819,5.606]],["t/709",[2,1.348,5,1.235,10,1.716,11,1.004,18,0.5,19,1.348,22,1.112,27,0.738,34,0.841,36,1.068,39,1.175,40,1.068,41,2.134,48,2.336,50,0.647,51,2.715,52,1.072,53,1.207,54,1.436,57,0.85,58,0.897,62,0.675,63,2.421,66,0.675,75,1.319,76,1.473,77,0.911,79,1.17,80,2.013,83,0.705,85,0.433,87,0.947,88,1.414,101,0.927,103,0.675,104,1.702,111,1.358,113,0.947,115,2.271,118,1.898,124,1.004,129,1.5,131,0.851,133,1.235,138,1.068,140,0.897,148,0.62,164,1.358,168,2.336,181,1.568,182,0.595,183,0.773,195,1.224,196,1.348,201,1.344,204,1.348,220,1.571,222,0.897,227,1.068,231,1.898,233,2.237,234,0.851,242,1.39,255,1.266,258,2.898,273,0.487,274,0.663,275,0.45,278,0.947,280,0.988,296,1.068,299,1.068,300,1.036,311,1.488,336,0.947,376,1.282,381,1.004,385,1.772,391,1.144,414,2.397,422,2.134,423,2.218,424,2.134,445,1.235,451,1.348,452,1.568,468,1.624,503,1.235,518,1.898,530,2.048,567,2.223,569,1.205,594,2.237,601,1.235,604,1.665,613,0.738,615,0.738,624,2.343,637,2.048,643,3.712,647,1.5,655,1.898,662,2.271,663,2.048,669,1.235,672,1.348,674,2.489,687,1.068,689,2.432,690,2.489,695,1.068,698,2.489,713,1.235,714,1.004,719,1.235,726,1.144,728,1.348,731,1.235,770,1.348,778,1.5,779,1.235,786,2.866,791,1.348,792,1.144,818,1.5,820,1.731,821,2.489,822,1.731,823,1.731,824,1.731,825,1.731,826,1.731,827,5.123,828,5.892,829,2.872,830,1.731,831,1.731,832,1.5,833,2.489,834,1.348,835,1.5,836,1.731,837,2.872,838,2.872,839,1.731,840,1.731,841,1.731,842,1.731,843,1.731,844,1.731,845,1.5,846,1.731,847,1.5,848,1.731,849,1.5,850,1.731,851,1.731,852,1.731,853,1.731,854,1.731,855,1.348,856,1.731,857,1.348,858,1.731,859,1.731,860,1.731,861,1.731,862,1.348,863,1.731,864,3.712,865,2.872,866,1.731,867,2.048,868,2.872,869,1.731,870,1.5,871,1.731,872,1.731,873,2.872,874,1.731,875,1.731,876,1.731,877,1.731,878,1.731,879,1.731,880,2.872,881,1.731,882,1.731,883,1.731,884,1.5,885,1.731,886,2.489,887,1.5,888,1.5,889,1.235,890,1.731,891,2.872,892,1.731,893,1.5,894,1.731,895,3.681,896,1.731,897,2.489,898,1.5,899,1.731,900,1.5,901,1.731,902,2.872,903,1.731,904,1.731,905,1.731,906,1.731,907,1.731,908,1.731,909,1.731,910,1.731,911,1.731]],["t/711",[1,1.959,9,3.089,10,1.585,11,1.31,18,0.348,19,3.436,20,1.76,22,1.22,27,0.963,34,1.466,39,0.987,41,2.066,48,1.112,49,2.776,51,2.323,53,0.904,57,1.019,58,2.823,59,2.041,62,1.39,66,0.882,67,1.395,69,2.903,75,1.795,77,0.717,78,2.542,79,0.921,82,0.662,83,0.921,88,1.457,92,1.112,95,1.236,98,1.31,101,0.907,104,0.81,115,1.395,140,1.846,142,1.395,146,1.31,148,1.581,164,0.717,177,1.76,181,1.519,195,0.963,201,2.344,213,1.59,223,2.355,227,1.395,231,1.493,234,1.112,237,1.236,240,1.76,242,0.662,255,1.517,258,1.112,269,1.112,280,0.777,300,0.636,311,2.285,319,1.395,320,2.463,324,0.746,354,1.236,370,1.612,385,2.199,403,2.355,414,3.025,416,3.436,419,2.542,422,2.066,423,1.846,424,2.903,435,3.572,447,1.31,455,1.76,456,1.76,468,1.399,515,1.493,537,1.31,567,1.668,569,1.705,613,0.963,615,0.963,618,4.51,626,1.959,628,3.089,638,1.76,661,1.395,687,1.395,689,1.493,695,1.395,707,1.76,717,3.089,732,1.959,733,1.76,740,1.959,741,1.959,777,1.493,786,1.76,791,1.76,821,1.959,832,1.959,847,1.959,849,3.089,857,1.76,862,1.76,867,1.612,884,1.959,893,1.959,897,3.824,898,1.959,912,3.564,913,3.564,914,3.564,915,2.261,916,1.959,917,2.261,918,2.261,919,2.261,920,2.261,921,1.612,922,2.261,923,2.261,924,2.261,925,3.564,926,1.959,927,3.089,928,2.261,929,2.261,930,2.261,931,2.261,932,1.959,933,2.261,934,2.261,935,2.261,936,2.261,937,2.261,938,3.564,939,2.261,940,1.959,941,2.261,942,1.959,943,2.261,944,2.261,945,1.959,946,2.261,947,2.261,948,1.76,949,2.261,950,1.959,951,2.261,952,2.261,953,2.261,954,2.261,955,2.261,956,2.261,957,2.261,958,2.261,959,1.959,960,2.261,961,2.261,962,1.959,963,2.261,964,2.261,965,2.261,966,3.564,967,1.959,968,2.261,969,2.261,970,2.261,971,1.76,972,2.261,973,1.959,974,2.261,975,1.959,976,2.199,977,2.261,978,1.76,979,2.261,980,2.261,981,1.612,982,1.959,983,2.261,984,2.261,985,2.261,986,2.261,987,1.612]],["t/713",[18,0.579,32,2.418,36,2.827,39,1.192,52,0.865,53,0.938,55,2.253,56,2.253,58,2.373,59,1.867,77,1.452,82,1.341,85,1.145,88,1.512,95,2.506,108,3.027,111,1.452,164,1.881,196,3.568,223,3.027,269,2.253,280,1.575,300,1.67,375,2.144,379,3.662,394,3.027,447,2.656,468,2.207,567,2.144,569,1.959,619,6.735,678,4.622,806,5.705,833,3.971,988,3.568,989,4.582,990,3.971,991,4.582,992,4.582,993,3.971,994,4.582,995,4.582,996,4.582,997,4.582]],["t/715",[18,0.58,22,1.123,34,1.347,39,0.833,50,1.72,51,2.536,52,0.868,53,1.351,54,1.795,55,2.263,56,2.263,57,1.524,66,1.795,68,2.667,73,3.04,76,1.582,88,2.177,101,0.833,111,1.459,164,1.887,181,1.961,182,1.582,203,2.667,242,1.347,247,2.153,273,1.295,275,1.196,300,1.674,311,2.383,452,1.519,468,2.211,569,2.032,613,1.961,637,3.281,726,3.04,727,3.281,757,3.583,864,3.988,978,3.583,998,4.602,999,4.602,1000,4.602,1001,3.583,1002,3.583,1003,4.602,1004,3.988,1005,3.988,1006,4.602,1007,4.602,1008,4.602]],["t/717",[10,1.499,18,0.672,22,1.099,39,0.806,48,2.864,50,1.663,52,1.099,53,1.193,57,1.345,66,1.736,76,2.002,77,1.411,82,1.302,85,1.112,92,2.188,111,1.411,146,3.375,148,1.594,164,1.846,168,2.188,182,1.53,242,1.302,255,2.232,300,1.638,311,2.305,330,2.725,331,2.082,332,3.847,385,3.593,452,1.469,468,2.183,483,5.055,569,1.252,681,3.465,682,4.535,719,3.173,726,2.94,731,3.173,755,3.173,757,3.465,819,3.856,900,3.856,978,3.465,1001,3.465,1002,3.465,1004,3.856,1009,4.45,1010,4.45,1011,4.45,1012,4.45,1013,4.45]],["t/719",[10,1.409,22,0.903,32,1.95,39,0.866,51,2.039,57,1.105,66,1.866,88,2.014,91,3.412,111,1.517,164,1.935,181,2.039,182,1.645,231,4.032,242,1.401,247,3.312,280,1.645,300,1.717,313,2.135,447,2.774,468,2.244,503,3.412,567,2.239,569,1.346,621,6.478,662,2.952,727,3.412,728,3.726,886,4.147,887,4.147,1014,4.785,1015,4.785,1016,6.103,1017,4.785,1018,4.785,1019,4.785,1020,6.72,1021,4.785,1022,4.785,1023,4.785]],["t/721",[18,0.707,56,2.785,82,1.658,92,2.785,148,2.822,258,3.563,389,4.41,430,3.331,615,2.886,1024,5.664,1025,5.664,1026,4.908]],["t/723",[18,0.57,22,1.104,39,1.33,53,1.198,63,2.609,77,1.854,95,3.198,168,2.876,182,2.525,242,1.712,293,3.863,678,4.554,1027,5.848,1028,5.848]],["t/725",[18,0.522,22,1.011,27,2.79,53,1.097,65,1.919,66,2.088,74,2.824,75,2.346,77,1.697,82,1.567,85,1.338,92,2.633,99,3.391,100,3.304,162,4.17,183,2.389,274,1.237,288,3.818,297,3.818,313,2.389,384,3.304,452,1.767,537,3.104,714,3.104,1029,6.547,1030,3.795]],["t/727",[18,0.573,22,1.232,40,2.78,53,1.337,65,2.104,74,2.586,75,2.636,82,1.319,85,1.126,99,3.04,101,0.816,104,1.614,131,2.216,183,2.01,234,2.216,242,1.319,300,1.268,354,2.464,428,3.904,452,1.487,468,2.07,523,3.508,537,3.403,655,2.977,680,3.904,713,4.656,714,3.785,797,3.904,889,3.213,1030,4.01,1031,4.506,1032,6.919,1033,4.506,1034,4.506,1035,4.506,1036,4.506,1037,4.506,1038,4.506,1039,4.506,1040,4.506,1041,4.506,1042,4.506,1043,3.904,1044,4.506,1045,3.904]],["t/729",[18,0.66,27,1.453,52,1.067,53,0.698,55,1.677,74,2.601,75,2.026,76,1.669,79,1.389,85,0.852,95,1.865,99,3.685,100,4.76,101,0.617,110,3.734,111,1.081,121,2.431,147,2.955,149,2.655,163,2.655,221,2.539,234,1.677,242,0.998,269,2.387,282,1.222,284,2.955,300,1.59,320,1.677,375,1.596,391,3.207,407,3.488,423,3.19,441,3.462,442,2.655,452,1.125,468,1.081,510,3.207,518,2.253,569,1.59,613,1.453,645,2.995,695,2.104,714,3.277,889,4.031,921,2.431,927,4.207,1030,2.814,1046,4.855,1047,5.653,1048,5.653,1049,3.41,1050,2.955,1051,4.855,1052,4.855,1053,3.41,1054,3.41,1055,3.41,1056,2.955,1057,3.41,1058,3.41,1059,3.41,1060,3.41,1061,2.955,1062,4.899,1063,3.41,1064,4.899,1065,4.855,1066,4.207,1067,3.41,1068,4.855,1069,3.41,1070,3.41]],["t/731",[10,1.794,18,0.508,22,1.318,39,0.943,51,1.258,52,1.16,53,1.401,54,1.706,55,2.15,56,2.15,60,4.06,62,1.152,63,2.324,64,2.848,65,1.567,75,2.063,82,0.864,103,1.152,104,1.058,107,1.152,111,0.936,140,2.265,148,1.567,164,1.386,222,1.529,226,3.789,242,0.864,247,2.046,269,1.452,300,1.62,303,3.789,311,2.265,313,1.951,318,2.981,320,2.15,335,3.713,377,2.698,423,1.529,452,1.443,468,1.825,540,3.405,600,1.951,613,1.258,649,2.299,650,2.299,654,2.299,730,2.299,774,2.392,834,3.405,845,3.789,855,2.299,870,3.789,921,2.106,967,2.559,976,1.822,1071,4.373,1072,4.373,1073,4.373,1074,4.373,1075,4.373,1076,4.373,1077,4.373,1078,5.208,1079,4.105,1080,2.299,1081,2.953,1082,2.953,1083,2.953,1084,3.405,1085,2.953,1086,3.789,1087,4.373,1088,2.953,1089,2.953,1090,2.559,1091,2.953,1092,2.953,1093,2.953,1094,2.953,1095,2.953,1096,2.559,1097,2.299,1098,2.953,1099,2.559,1100,4.513,1101,1.951,1102,2.559,1103,3.789,1104,2.953,1105,2.953,1106,4.373,1107,2.953,1108,1.822,1109,2.559]],["t/733",[18,0.672,22,1.16,41,2.312,47,4.692,50,2.297,52,0.753,53,1.109,54,1.556,59,1.625,62,2.397,64,2.182,72,2.845,74,2.023,75,1.94,80,2.182,82,1.168,85,0.997,88,1.317,93,2.636,96,2.636,97,2.845,98,3.821,103,1.556,106,2.636,120,3.457,148,1.43,194,3.341,203,2.312,213,1.78,214,3.107,232,1.556,233,3.107,242,1.168,280,1.372,297,2.845,301,3.241,325,3.107,338,3.341,354,2.182,375,1.867,386,2.845,430,2.663,452,1.317,530,2.845,533,2.845,569,1.939,592,4.216,651,3.457,689,2.636,726,2.636,867,2.845,1110,3.457,1111,3.989,1112,3.989,1113,2.636,1114,3.989,1115,3.107,1116,3.457,1117,5.326,1118,3.457,1119,3.457,1120,3.107,1121,3.989,1122,5.414,1123,3.457,1124,3.989,1125,5.414,1126,3.457,1127,3.989,1128,2.845,1129,3.107,1130,3.107]],["t/735",[18,0.417,39,1.027,51,1.821,52,0.807,53,0.875,57,0.987,62,1.667,63,1.907,65,2.032,70,1.95,73,2.823,74,1.597,75,1.531,82,1.66,85,1.694,87,2.337,88,2.479,91,4.043,105,2.337,107,1.667,109,3.047,151,2.337,194,2.637,205,2.823,211,3.703,227,2.637,237,2.337,255,1.469,279,3.047,280,1.469,354,3.101,407,2.637,414,3.172,435,3.047,445,3.047,569,1.595,613,1.821,615,2.416,631,3.047,659,3.328,695,2.637,774,2.337,867,4.043,981,3.047,982,3.703,1005,3.703,1045,3.703,1123,4.914,1131,4.274,1132,4.274,1133,4.274,1134,4.274,1135,3.703,1136,4.274,1137,4.274,1138,4.274,1139,4.274,1140,4.274,1141,4.274,1142,4.274,1143,4.274,1144,3.703,1145,3.703]],["t/737",[22,1.052,34,1.964,52,1.266,53,1.142,54,2.175,55,3.3,56,3.3,57,1.55,58,3.728,59,2.933,91,3.976,101,1.009,269,2.742,544,4.832,1146,5.576,1147,5.576,1148,6.71]],["t/739",[10,1.827,17,3.825,18,0.43,28,3.825,32,1.798,55,2.17,74,1.649,75,1.581,92,2.17,101,0.799,168,2.17,222,2.286,231,2.916,274,1.019,300,1.242,404,4.13,406,4.61,407,2.723,569,1.242,888,3.825,926,3.825,932,5.019,1149,4.413,1150,5.792,1151,4.413,1152,4.413,1153,4.413,1154,4.413,1155,4.413,1156,4.413,1157,4.413,1158,4.413,1159,4.413,1160,4.413,1161,6.465,1162,4.413,1163,5.034,1164,4.413,1165,4.413,1166,6.465,1167,4.413,1168,4.413,1169,4.413,1170,4.413,1171,4.413,1172,4.413,1173,4.413,1174,4.413,1175,4.413,1176,4.413,1177,4.413,1178,4.413,1179,3.825,1180,4.413]],["t/741",[10,1.526,18,0.53,34,1.934,53,1.113,54,2.776,55,2.673,56,2.673,57,1.255,63,2.425,117,2.544,183,2.425,217,4.233,364,4.233,375,3.331,687,3.354,988,5.145,1163,4.233,1181,4.71,1182,4.71,1183,4.71,1184,4.71,1185,6.607,1186,5.435,1187,5.435]],["t/743",[5,0.414,8,0.452,10,1.454,11,0.629,18,0.632,20,0.452,22,0.713,32,0.927,34,1.553,35,1.711,36,0.67,39,0.748,42,0.774,48,0.285,50,1.258,51,0.247,52,0.489,53,0.222,54,0.423,56,0.946,57,0.827,60,0.717,61,0.503,62,1.397,64,0.837,65,1.87,66,1.728,68,1.501,69,2.853,70,1.728,71,0.503,72,1.091,74,1.074,75,2.059,76,0.988,77,1.359,78,2.825,79,1.805,80,1.416,81,1.971,82,1.297,83,1.055,85,1.107,87,3.324,88,1.034,92,0.752,93,0.383,95,0.317,99,0.996,100,3.505,101,0.891,102,2.332,103,1.397,104,0.208,105,0.594,106,0.383,107,2.132,108,0.383,110,0.717,113,0.594,115,0.358,117,1.676,136,1.503,138,0.358,140,1.178,142,0.944,146,0.887,148,1.681,150,2.97,162,1.191,163,1.191,164,0.911,168,0.534,169,1.091,181,0.463,183,1.282,194,1.403,195,0.652,198,0.845,203,0.336,210,0.941,212,0.383,213,1.398,220,0.317,221,0.423,222,0.301,225,0.452,227,0.67,232,1.92,234,1.413,237,0.594,238,0.503,239,0.845,245,0.845,247,0.716,250,1.771,253,2.401,255,1.299,258,1.119,263,1.971,266,1.191,268,0.452,269,0.946,271,1.932,273,0.163,274,0.251,275,0.151,277,3.807,278,0.594,280,1.362,282,0.389,283,3.56,288,0.414,296,0.358,297,0.414,299,0.67,300,0.64,301,1.54,305,1.667,311,0.301,313,2.147,318,0.562,319,1.187,320,1.656,323,1.498,324,2.399,326,1.271,327,0.941,328,0.503,330,1.466,331,1.212,332,1.011,336,1.244,338,1.187,342,0.717,347,1.666,349,2.789,351,1.498,353,0.452,354,1.244,368,0.845,369,0.452,370,0.414,372,0.452,374,0.452,375,0.9,376,1.843,377,1.773,379,0.67,380,0.452,381,0.336,382,0.452,384,0.67,385,0.67,386,1.372,387,0.358,393,0.414,394,0.383,405,0.414,406,0.414,407,0.358,410,0.317,412,0.845,413,0.358,414,2.352,416,0.845,419,1.372,420,0.503,422,0.336,423,2.139,424,1.666,426,0.503,430,1.54,431,0.503,434,0.845,435,1.091,438,0.941,439,0.941,447,0.629,452,1.111,468,1.256,477,1.011,489,1.372,503,1.091,507,0.941,509,1.667,510,1.271,513,0.503,515,0.717,516,0.941,518,0.383,520,1.667,523,2.017,526,0.503,533,2.049,537,0.336,540,0.452,567,0.272,569,1.579,593,1.326,597,0.503,600,0.717,604,2.394,606,0.941,613,0.463,615,1.76,618,1.191,624,0.317,631,0.414,638,0.452,655,1.011,657,0.503,662,0.358,669,0.774,679,0.358,693,1.326,694,0.503,714,0.629,720,0.503,733,1.191,736,0.503,737,0.845,738,1.091,739,1.091,742,0.503,769,1.372,774,2.854,777,0.383,779,1.847,792,2.617,795,1.667,834,1.498,857,1.191,889,0.414,916,0.503,940,0.503,942,0.503,948,0.452,959,0.503,962,0.503,973,0.503,975,0.503,976,1.598,981,0.414,987,0.774,990,0.941,993,0.503,1026,0.503,1030,0.336,1050,0.503,1056,0.503,1062,0.941,1064,3.579,1066,2.244,1079,0.774,1080,0.452,1084,0.845,1086,0.503,1097,1.191,1101,2.617,1108,1.598,1110,0.503,1113,1.011,1115,2.017,1116,0.941,1117,0.941,1118,0.503,1119,0.503,1130,1.191,1144,1.326,1145,0.503,1188,0.58,1189,1.086,1190,0.58,1191,2.275,1192,0.58,1193,0.58,1194,0.58,1195,0.58,1196,0.58,1197,1.086,1198,0.58,1199,0.58,1200,1.086,1201,0.58,1202,0.58,1203,0.58,1204,0.58,1205,1.53,1206,0.58,1207,1.086,1208,0.58,1209,0.58,1210,0.58,1211,1.53,1212,0.503,1213,2.874,1214,3.132,1215,0.58,1216,0.58,1217,0.58,1218,0.58,1219,1.086,1220,0.58,1221,0.58,1222,1.326,1223,0.58,1224,0.58,1225,0.58,1226,0.58,1227,1.53,1228,1.53,1229,0.58,1230,0.58,1231,0.58,1232,0.58,1233,0.58,1234,0.58,1235,0.58,1236,0.58,1237,0.58,1238,0.941,1239,0.845,1240,0.58,1241,0.941,1242,0.941,1243,0.58,1244,0.503,1245,1.326,1246,1.086,1247,1.086,1248,0.58,1249,0.845,1250,0.58,1251,0.58,1252,0.58,1253,0.941,1254,0.503,1255,0.58,1256,0.58,1257,0.941,1258,0.58,1259,0.58,1260,0.58,1261,1.086,1262,0.58,1263,0.58,1264,0.58,1265,1.53,1266,0.58,1267,0.58,1268,0.58,1269,0.58,1270,1.924,1271,1.086,1272,0.58,1273,0.58,1274,1.53,1275,0.58,1276,0.58,1277,0.503,1278,0.58,1279,0.58,1280,1.191,1281,1.924,1282,0.845,1283,0.58,1284,0.58,1285,0.58,1286,0.58,1287,0.58,1288,0.58,1289,0.58,1290,0.58,1291,0.58,1292,0.58,1293,0.58,1294,1.086,1295,0.58,1296,0.58,1297,0.503,1298,0.58,1299,0.58,1300,0.58,1301,0.58,1302,0.58,1303,0.58,1304,0.58,1305,0.58,1306,0.58,1307,0.58,1308,0.58,1309,0.58,1310,0.503,1311,0.58,1312,0.58]],["t/745",[18,0.532,22,1.167,27,2.634,34,2.17,39,1.199,41,2.338,52,1.25,53,0.826,54,1.573,57,0.932,65,2.215,66,1.573,82,1.181,101,0.73,102,3.366,103,2.892,104,1.955,105,2.206,117,1.888,118,2.665,150,3.162,183,2.955,201,1.888,220,2.206,232,2.583,237,2.206,279,4.408,282,1.446,299,3.366,309,2.877,313,2.434,375,1.888,403,2.665,456,4.248,510,2.665,530,3.89,569,1.739,687,2.489,695,2.489,738,2.877,739,2.877,792,2.665,1280,3.141,1313,4.034,1314,4.034,1315,4.034,1316,4.034,1317,4.034,1318,4.034,1319,5.455,1320,4.034,1321,5.455,1322,4.034,1323,4.034,1324,4.034]],["t/747",[10,1.472,18,0.5,34,1.5,52,0.967,55,3.134,56,3.134,58,3.301,59,2.597,63,2.287,75,1.837,99,2.655,117,2.399,148,1.837,183,2.287,217,3.991,221,2.486,300,1.793,338,3.163,346,4.963,364,3.991,375,2.983,615,2.184,988,4.963,1163,3.991,1181,4.442,1182,4.442,1183,4.442,1184,4.442,1325,5.126,1326,5.126,1327,5.126,1328,4.442,1329,5.126,1330,5.126]],["t/749",[10,1.544,18,0.54,22,0.779,34,1.83,40,3.418,52,1.18,53,0.845,55,2.029,59,1.681,62,1.61,65,2.241,70,1.419,82,1.208,85,1.031,87,4.389,213,2.472,221,1.61,232,2.161,239,3.213,274,1.279,313,1.841,410,2.257,452,1.828,533,3.95,679,2.546,769,3.95,1097,5.204,1113,2.726,1115,5.204,1222,3.576,1238,4.8,1239,3.213,1241,3.576,1242,5.419,1244,4.8,1245,3.576,1249,4.314,1277,3.576,1297,3.576,1331,3.95,1332,4.127,1333,4.127,1334,4.127,1335,4.127,1336,4.127,1337,3.576]],["t/751",[10,0.792,18,0.335,22,0.648,27,1.462,52,0.92,53,0.703,59,1.987,63,1.531,65,2.554,70,2.243,80,1.877,82,1.984,83,1.398,85,1.544,87,3.708,92,1.687,101,0.621,107,2.212,116,2.672,117,1.606,138,3.009,148,1.747,164,1.798,195,2.078,213,2.756,218,2.267,221,1.338,222,2.525,242,1.004,247,2.282,268,3.797,269,1.687,271,2.117,275,0.892,282,1.23,324,1.133,342,2.267,347,3.58,430,2.398,441,2.447,452,1.61,468,1.798,604,1.989,679,2.117,772,2.672,774,1.877,777,3.222,835,2.974,976,2.117,1101,3.222,1108,2.117,1113,2.267,1254,2.974,1282,3.797,1331,2.447,1338,3.432,1339,2.974,1340,2.974,1341,3.797,1342,3.797,1343,5.081,1344,4.916,1345,4.876,1346,3.432,1347,3.432,1348,3.432,1349,3.432,1350,3.432,1351,3.432,1352,4.226,1353,3.797,1354,2.974,1355,2.974,1356,2.974,1357,2.974,1358,2.974,1359,2.974,1360,2.974,1361,2.974,1362,2.974,1363,2.974,1364,2.974,1365,2.974,1366,2.672,1367,2.672,1368,2.974,1369,2.974,1370,2.974]],["t/753",[10,0.803,18,0.339,22,0.656,27,1.481,52,0.929,59,2.005,63,1.551,65,2.72,70,1.195,83,1.416,85,0.869,87,3.398,101,0.629,103,2.228,107,2.228,116,2.707,117,2.303,148,1.245,164,1.811,213,2.772,218,2.296,221,1.356,222,1.8,232,1.919,242,1.017,247,2.673,275,0.904,282,1.245,301,2.42,313,2.549,342,2.296,347,3.311,404,2.478,430,1.709,441,2.478,452,1.624,468,1.811,537,2.015,567,1.627,592,2.707,594,2.707,601,2.478,604,2.015,679,2.145,774,1.901,777,3.774,971,2.707,976,2.145,1101,3.251,1108,2.145,1113,2.296,1128,2.478,1249,2.707,1282,2.707,1331,2.478,1339,3.012,1340,3.012,1341,3.832,1342,3.832,1343,2.707,1352,4.264,1353,3.832,1354,3.012,1355,3.012,1356,3.012,1357,3.012,1358,3.012,1359,3.012,1360,3.012,1361,3.012,1362,3.012,1363,3.012,1364,3.012,1365,4.264,1366,2.707,1367,2.707,1368,4.264,1369,3.012,1370,3.012,1371,3.476,1372,3.476,1373,3.476,1374,3.476,1375,3.476,1376,3.476,1377,3.476,1378,4.921,1379,4.921,1380,4.921,1381,4.921,1382,3.476,1383,3.476,1384,3.476]],["t/755",[27,1.961,34,1.931,52,1.245,56,2.263,59,2.425,63,2.053,74,1.72,83,1.875,87,4.174,110,3.04,117,2.153,138,2.839,151,2.517,213,3.223,221,1.795,222,2.383,234,2.263,242,1.347,271,2.839,274,1.063,275,1.196,313,2.053,452,1.964,679,2.839,730,3.583,769,4.704,772,3.583,1079,3.281,1080,3.583,1328,3.988,1331,3.281,1341,4.635,1342,4.635,1344,5.717,1353,4.635,1366,3.583,1367,3.583,1385,4.602,1386,4.602,1387,4.602,1388,5.952,1389,5.952]],["t/757",[10,1.816,18,0.46,22,0.619,29,1.763,33,2.84,52,0.619,53,0.843,54,0.794,59,1.677,60,1.344,62,0.794,63,0.908,64,3.18,65,1.691,66,1.605,67,1.255,70,1.415,73,1.344,74,0.76,75,2.548,76,1.779,77,0.645,79,2.253,82,0.596,83,0.829,85,1.18,88,1.082,93,1.344,96,2.165,97,1.451,98,1.179,99,1.054,101,1.228,104,0.729,107,2.268,111,0.645,115,1.255,148,1.691,149,1.584,151,2.581,182,0.7,183,1.463,195,0.867,208,1.344,221,1.278,225,1.584,234,1.001,240,1.584,242,0.596,247,2.208,255,1.127,258,1.001,269,2.321,279,1.451,285,3.567,301,2.321,311,1.054,312,1.763,325,1.584,365,1.763,405,1.451,410,1.793,455,1.584,477,1.344,510,2.165,569,0.572,588,1.763,601,2.337,609,1.763,613,1.397,615,0.867,650,3.675,654,1.584,655,1.344,708,1.584,731,1.451,734,1.763,770,1.584,774,3.584,779,1.451,792,1.344,855,2.552,862,2.552,921,1.451,945,2.84,948,1.584,950,1.763,971,2.552,976,2.022,981,1.451,1001,1.584,1002,1.584,1030,1.9,1061,1.763,1079,1.451,1084,1.584,1090,1.763,1096,3.567,1099,4.089,1100,5.786,1101,2.165,1102,2.84,1103,4.089,1120,1.584,1126,1.763,1128,2.337,1129,1.584,1130,4.029,1179,1.763,1253,1.763,1257,1.763,1310,1.763,1337,1.763,1390,2.035,1391,2.035,1392,2.035,1393,2.035,1394,2.035,1395,5.815,1396,2.035,1397,2.035,1398,2.035,1399,4.719,1400,2.035,1401,2.035,1402,3.278,1403,2.035,1404,2.035,1405,3.278,1406,2.035,1407,2.035,1408,3.278,1409,3.278,1410,2.035,1411,2.035,1412,2.035,1413,2.035,1414,4.116,1415,2.035,1416,4.116,1417,3.278,1418,3.278,1419,2.035,1420,2.035,1421,2.035,1422,2.035,1423,1.763,1424,2.035,1425,2.035,1426,2.035,1427,3.278,1428,2.035,1429,3.278,1430,2.035,1431,3.278,1432,2.035,1433,2.035,1434,2.035,1435,2.035]],["t/759",[22,1.18,57,1.658,83,2.548,101,1.132,1108,3.859]],["t/761",[10,0.849,22,0.694,34,1.076,50,2.71,52,0.694,53,0.753,62,1.434,63,1.641,65,2.11,67,2.269,70,2.189,73,2.429,77,1.166,82,1.076,93,2.429,96,3.382,97,2.622,98,2.131,104,1.834,107,2.297,208,2.429,216,2.622,269,1.808,271,3.634,301,2.517,313,1.641,318,2.651,384,4.388,430,1.808,452,1.69,569,1.44,604,4.204,615,2.181,987,4.774,1030,3.88,1120,2.863,1128,2.622,1129,2.863,1135,3.186,1343,2.863,1436,4.436,1437,3.186,1438,4.436,1439,5.518,1440,3.677,1441,3.677,1442,3.186,1443,4.436,1444,4.436,1445,4.436,1446,4.436,1447,4.436,1448,4.436,1449,3.677,1450,3.186,1451,4.436,1452,3.186,1453,3.186,1454,3.186,1455,3.186,1456,3.186,1457,3.186,1458,3.186,1459,3.186,1460,3.186,1461,3.186,1462,3.186,1463,3.186,1464,3.186,1465,3.186,1466,3.677]],["t/763",[8,3.816,10,1.532,18,0.478,22,0.925,34,0.781,39,0.734,50,2.406,52,0.504,53,1.269,57,0.936,62,1.041,65,1.452,70,2.336,74,1.515,79,1.651,82,0.781,88,2.19,96,1.763,98,1.547,101,0.734,102,1.646,104,1.756,107,2.295,111,0.846,208,1.763,242,0.781,255,1.393,258,1.993,271,1.646,299,1.646,300,1.379,301,1.312,313,1.191,318,2.834,384,4.405,393,1.903,403,1.763,410,1.459,430,1.993,452,1.806,468,1.285,569,1.379,600,1.763,604,3.938,613,1.137,615,2.332,669,1.903,710,2.078,774,2.68,812,2.312,987,4.845,1030,3.732,1043,2.312,1108,1.646,1109,2.312,1212,2.312,1239,2.078,1280,4.261,1423,2.312,1436,2.312,1437,2.312,1438,4.246,1439,5.58,1442,2.312,1443,4.742,1444,4.246,1445,5.1,1446,4.742,1447,4.742,1448,4.742,1450,2.312,1451,4.246,1452,2.312,1453,2.312,1454,2.312,1455,2.312,1456,2.312,1457,2.312,1458,2.312,1459,2.312,1460,2.312,1461,2.312,1462,2.312,1463,2.312,1464,2.312,1465,3.512,1467,2.668,1468,2.668,1469,2.668,1470,4.053,1471,4.053,1472,2.668,1473,2.668,1474,4.053,1475,2.668,1476,2.668,1477,2.668,1478,4.053,1479,2.668]]],"invertedIndex":[["",{"_index":10,"t":{"628":{"position":[[92,1],[500,1]]},"630":{"position":[[119,1],[559,4]]},"638":{"position":[[752,3],[789,3],[827,3],[831,3]]},"657":{"position":[[234,1]]},"673":{"position":[[693,1]]},"681":{"position":[[202,1],[204,1],[331,1],[333,1]]},"687":{"position":[[259,3]]},"689":{"position":[[209,1]]},"691":{"position":[[1269,1],[2550,1],[2571,2]]},"693":{"position":[[202,1],[317,1],[526,1],[777,1],[953,1]]},"703":{"position":[[751,2],[830,2]]},"705":{"position":[[674,2]]},"707":{"position":[[366,1],[396,1]]},"709":{"position":[[39,1],[1414,1],[3059,1],[3080,1],[3140,1],[3191,1],[3193,1],[3236,1],[3238,1],[3261,1],[3284,1],[3311,1],[3331,1],[3361,1],[3493,1],[4386,1],[4407,1],[4464,1],[4520,1],[4522,1],[4560,1],[4562,1],[4578,1],[4599,1],[4624,1],[4644,1],[4665,1],[4693,1],[4770,1]]},"711":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"717":{"position":[[213,1],[238,1],[259,1]]},"719":{"position":[[400,2],[458,2]]},"731":{"position":[[269,1],[304,1],[340,1],[376,1],[411,1],[433,1],[456,1],[473,1],[491,1],[627,4],[1264,1],[1465,1],[1467,1],[1679,2],[1778,1],[1813,1],[1849,1],[1871,1],[1894,1],[1911,1],[1934,1],[1952,1]]},"739":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[312,1],[320,4],[325,1],[330,1],[570,1],[697,1],[706,1],[728,1],[730,1]]},"741":{"position":[[83,1],[85,1]]},"743":{"position":[[71,2],[796,1],[1237,1],[1360,3],[1711,4],[1716,2],[1872,2],[1875,2],[1949,1],[2030,1],[2118,1],[2580,2],[2887,1],[2889,1],[2967,1],[2969,1],[3406,1],[3545,1],[3656,1],[4299,1],[4690,2],[7197,2],[7266,1],[7712,2],[7817,2],[8434,1],[9090,1],[11156,1],[11305,1],[11369,1],[11489,1],[11520,1],[12509,1],[12688,1],[12788,1],[13026,1],[13108,1],[13174,1],[13827,1],[14179,2]]},"747":{"position":[[147,1],[149,1]]},"749":{"position":[[215,1],[241,1],[278,1],[343,1]]},"751":{"position":[[927,1]]},"753":{"position":[[782,1]]},"757":{"position":[[242,1],[272,4],[317,1],[513,1],[557,1],[629,1],[640,1],[655,1],[796,1],[879,3],[912,1],[923,1],[925,1],[969,1],[988,1],[1050,1],[1282,1],[1468,1],[1644,1],[1737,1],[1803,1],[1901,1],[2080,1],[2161,1],[2266,2],[2269,3],[2273,5],[2279,1],[2396,1],[2398,1],[2494,1],[2582,1],[2612,1],[2656,4],[2665,2],[3338,1],[3419,1],[3448,2],[3451,2],[3484,1],[3496,2],[3523,2],[3556,5],[3566,1]]},"761":{"position":[[589,2]]},"763":{"position":[[154,1],[349,1],[488,2],[570,1],[757,2],[858,1],[1069,2],[1282,2]]}}}],["0",{"_index":1205,"t":{"743":{"position":[[1430,1],[4950,1],[4963,1]]}}}],["0.0.0.0:4180",{"_index":911,"t":{"709":{"position":[[4772,14]]}}}],["0.001",{"_index":1382,"t":{"753":{"position":[[916,5]]}}}],["00010203",{"_index":1358,"t":{"751":{"position":[[1121,8]]},"753":{"position":[[984,8]]}}}],["0400",{"_index":1342,"t":{"751":{"position":[[256,5],[1301,4]]},"753":{"position":[[137,5],[1323,4]]},"755":{"position":[[267,5],[593,4]]}}}],["0405",{"_index":1359,"t":{"751":{"position":[[1130,4]]},"753":{"position":[[993,4]]}}}],["0a0b0c0d0e0f",{"_index":1362,"t":{"751":{"position":[[1145,12]]},"753":{"position":[[1008,12]]}}}],["1",{"_index":600,"t":{"685":{"position":[[2225,1]]},"691":{"position":[[2289,1]]},"731":{"position":[[1630,2]]},"743":{"position":[[1475,3],[13679,4]]},"763":{"position":[[423,2]]}}}],["1.5h",{"_index":361,"t":{"657":{"position":[[236,5]]}}}],["100",{"_index":1251,"t":{"743":{"position":[[5046,3]]}}}],["12",{"_index":1384,"t":{"753":{"position":[[1200,2]]}}}],["12.x",{"_index":787,"t":{"705":{"position":[[58,5],[128,4]]}}}],["123456.apps.googleusercontent.com",{"_index":1192,"t":{"743":{"position":[[592,35]]}}}],["127.0.0.1:4180",{"_index":1080,"t":{"731":{"position":[[664,14]]},"743":{"position":[[4450,16]]},"755":{"position":[[732,14]]}}}],["128",{"_index":1052,"t":{"729":{"position":[[383,3],[434,3]]}}}],["168h0m0",{"_index":1199,"t":{"743":{"position":[[1039,8]]}}}],["19/mar/2015:17:20:19",{"_index":1341,"t":{"751":{"position":[[233,21],[1279,20]]},"753":{"position":[[114,21],[1301,20]]},"755":{"position":[[244,21],[571,20]]}}}],["192",{"_index":1176,"t":{"739":{"position":[[644,3]]}}}],["1h",{"_index":658,"t":{"691":{"position":[[919,4]]}}}],["1s",{"_index":1225,"t":{"743":{"position":[[2695,4]]}}}],["2",{"_index":669,"t":{"691":{"position":[[1510,1]]},"709":{"position":[[3458,2]]},"743":{"position":[[13150,3],[13755,4]]},"763":{"position":[[717,2]]}}}],["2.0",{"_index":818,"t":{"707":{"position":[[213,3]]},"709":{"position":[[35,3]]}}}],["20",{"_index":1230,"t":{"743":{"position":[[3859,2]]}}}],["200",{"_index":592,"t":{"685":{"position":[[1941,3]]},"733":{"position":[[223,3],[336,3]]},"753":{"position":[[1249,3]]}}}],["202",{"_index":1129,"t":{"733":{"position":[[995,3]]},"757":{"position":[[131,3]]},"761":{"position":[[162,3]]}}}],["2048",{"_index":929,"t":{"711":{"position":[[1052,4]]}}}],["24",{"_index":1174,"t":{"739":{"position":[[630,2]]}}}],["2>/dev/nul",{"_index":1160,"t":{"739":{"position":[[227,11]]}}}],["2f",{"_index":611,"t":{"687":{"position":[[212,7]]}}}],["2h45m",{"_index":362,"t":{"657":{"position":[[245,8]]}}}],["3",{"_index":703,"t":{"693":{"position":[[1119,2]]},"695":{"position":[[385,2],[421,2]]},"701":{"position":[[1247,4]]}}}],["3/4",{"_index":1300,"t":{"743":{"position":[[13452,3]]}}}],["30",{"_index":1106,"t":{"731":{"position":[[1652,3],[1675,3]]}}}],["300m",{"_index":360,"t":{"657":{"position":[[225,8]]}}}],["315360000",{"_index":1456,"t":{"761":{"position":[[965,9]]},"763":{"position":[[1723,9]]}}}],["32",{"_index":1166,"t":{"739":{"position":[[309,2],[578,2],[708,2]]}}}],["3650",{"_index":941,"t":{"711":{"position":[[1175,4]]}}}],["401",{"_index":96,"t":{"630":{"position":[[403,3]]},"733":{"position":[[1022,3]]},"757":{"position":[[158,3],[965,3]]},"761":{"position":[[189,3],[1254,4]]},"763":{"position":[[898,3]]}}}],["403",{"_index":1466,"t":{"761":{"position":[[1259,4]]}}}],["4180",{"_index":1085,"t":{"731":{"position":[[979,5]]}}}],["443",{"_index":1084,"t":{"731":{"position":[[909,3],[1273,3]]},"743":{"position":[[4535,6],[14026,3]]},"757":{"position":[[251,3]]}}}],["4607",{"_index":1360,"t":{"751":{"position":[[1135,4]]},"753":{"position":[[998,4]]}}}],["4kb",{"_index":1402,"t":{"757":{"position":[[1733,3],[1938,4]]}}}],["5",{"_index":676,"t":{"691":{"position":[[1988,1]]}}}],["6",{"_index":705,"t":{"693":{"position":[[1155,2]]}}}],["7",{"_index":1248,"t":{"743":{"position":[[4879,1]]}}}],["74.125.224.72",{"_index":1354,"t":{"751":{"position":[[840,13]]},"753":{"position":[[695,13]]}}}],["80",{"_index":1309,"t":{"743":{"position":[[14012,3]]}}}],["8809",{"_index":1361,"t":{"751":{"position":[[1140,4]]},"753":{"position":[[1003,4]]}}}],["994",{"_index":789,"t":{"705":{"position":[[138,5]]}}}],["_",{"_index":1163,"t":{"739":{"position":[[279,3],[327,2],[732,3]]},"741":{"position":[[104,4]]},"747":{"position":[[168,4]]}}}],["__host",{"_index":1202,"t":{"743":{"position":[[1216,7]]}}}],["__secur",{"_index":1203,"t":{"743":{"position":[[1228,8]]}}}],["_oauth2_proxi",{"_index":1050,"t":{"729":{"position":[[338,14]]},"743":{"position":[[1266,15]]}}}],["_oauth2_proxy_1",{"_index":1435,"t":{"757":{"position":[[3951,18]]}}}],["abov",{"_index":772,"t":{"701":{"position":[[1233,5]]},"751":{"position":[[1542,5]]},"755":{"position":[[45,5]]}}}],["absent",{"_index":1231,"t":{"743":{"position":[[3865,6]]}}}],["accept",{"_index":93,"t":{"630":{"position":[[363,7]]},"733":{"position":[[999,8]]},"743":{"position":[[9877,8]]},"757":{"position":[[135,8]]},"761":{"position":[[166,8]]}}}],["access",{"_index":255,"t":{"644":{"position":[[349,6]]},"649":{"position":[[101,6]]},"653":{"position":[[171,6]]},"659":{"position":[[346,6]]},"671":{"position":[[259,6]]},"675":{"position":[[1993,6],[2140,6]]},"691":{"position":[[1746,7]]},"693":{"position":[[447,6],[622,7]]},"699":{"position":[[296,7],[924,6],[999,6],[1036,6],[1186,6],[1217,6],[1306,6]]},"701":{"position":[[138,6],[1173,6]]},"703":{"position":[[46,6]]},"709":{"position":[[2344,6],[2403,7],[2977,6]]},"711":{"position":[[305,7],[2650,6],[3170,10]]},"717":{"position":[[528,6],[638,6],[673,6]]},"735":{"position":[[214,9]]},"743":{"position":[[3359,6],[3784,6],[3831,6],[6157,6],[6227,6],[6311,6],[7113,6],[8021,6],[10434,6],[10463,6],[12932,6]]},"757":{"position":[[1306,6],[1447,6]]},"763":{"position":[[2016,6],[2192,6]]}}}],["access_by_lua_block",{"_index":1428,"t":{"757":{"position":[[3399,19]]}}}],["access_token",{"_index":1256,"t":{"743":{"position":[[6186,12]]}}}],["accompani",{"_index":735,"t":{"699":{"position":[[382,11]]}}}],["account",{"_index":385,"t":{"663":{"position":[[271,7]]},"691":{"position":[[977,7],[1091,8],[2388,7]]},"709":{"position":[[1641,8],[3747,8]]},"711":{"position":[[260,8],[737,7]]},"717":{"position":[[204,7],[487,7]]},"743":{"position":[[4064,7],[4108,7]]}}}],["acr",{"_index":526,"t":{"675":{"position":[[2485,3]]},"743":{"position":[[34,3]]}}}],["acrvalu",{"_index":525,"t":{"675":{"position":[[2443,9],[2460,9]]}}}],["activ",{"_index":686,"t":{"693":{"position":[[66,6],[592,6]]}}}],["actual",{"_index":1002,"t":{"715":{"position":[[221,6]]},"717":{"position":[[124,6]]},"757":{"position":[[3721,6]]}}}],["ad",{"_index":105,"t":{"630":{"position":[[637,5]]},"642":{"position":[[7,6]]},"647":{"position":[[66,6]]},"665":{"position":[[79,5]]},"675":{"position":[[2084,2]]},"735":{"position":[[939,5]]},"743":{"position":[[9764,2],[10479,5]]},"745":{"position":[[750,6]]}}}],["add",{"_index":168,"t":{"636":{"position":[[148,3]]},"638":{"position":[[432,3]]},"693":{"position":[[0,3],[809,3],[979,3]]},"695":{"position":[[64,3]]},"705":{"position":[[223,3],[431,3],[1312,3]]},"709":{"position":[[605,3],[1296,4],[1989,3],[2336,3],[2567,3]]},"717":{"position":[[0,3]]},"723":{"position":[[80,3]]},"739":{"position":[[332,3]]},"743":{"position":[[6287,4],[14104,3]]}}}],["add_head",{"_index":1096,"t":{"731":{"position":[[1402,10]]},"757":{"position":[[1608,10],[2496,10],[2539,10]]}}}],["addedto",{"_index":294,"t":{"649":{"position":[[667,7],[902,7]]}}}],["addit",{"_index":731,"t":{"699":{"position":[[206,10],[775,8]]},"709":{"position":[[2066,10]]},"717":{"position":[[559,10]]},"757":{"position":[[1968,10]]}}}],["addition",{"_index":1232,"t":{"743":{"position":[[4156,12]]}}}],["addr>:/oauth2/callback",{"_index":1008,"t":{"715":{"position":[[611,24]]}}}],["headers.default",{"_index":400,"t":{"665":{"position":[[456,16]]}}}],["headers/pass_user_head",{"_index":257,"t":{"644":{"position":[[390,25]]}}}],["headers/skip_auth_strip_head",{"_index":267,"t":{"644":{"position":[[680,31]]}}}],["headershould",{"_index":395,"t":{"665":{"position":[[346,12]]}}}],["headervalu",{"_index":333,"t":{"655":{"position":[[13,12]]},"665":{"position":[[540,13]]},"667":{"position":[[21,11]]},"679":{"position":[[26,12]]}}}],["health",{"_index":1116,"t":{"733":{"position":[[384,6]]},"743":{"position":[[7611,6],[7698,6]]}}}],["helm",{"_index":31,"t":{"628":{"position":[[322,6]]}}}],["here",{"_index":918,"t":{"711":{"position":[[344,5]]}}}],["hex",{"_index":1053,"t":{"729":{"position":[[406,3]]}}}],["histor",{"_index":1031,"t":{"727":{"position":[[103,13]]}}}],["hit",{"_index":639,"t":{"691":{"position":[[404,3]]},"693":{"position":[[668,3],[1023,7]]}}}],["hold",{"_index":466,"t":{"675":{"position":[[33,5],[546,5],[631,5],[710,5],[803,5],[892,5],[979,5],[1065,5],[1145,5],[1275,5]]}}}],["homepag",{"_index":998,"t":{"715":{"position":[[57,9]]}}}],["host",{"_index":247,"t":{"644":{"position":[[162,4]]},"685":{"position":[[2301,4]]},"693":{"position":[[870,4]]},"705":{"position":[[185,7],[1053,6],[1175,6]]},"715":{"position":[[606,4]]},"719":{"position":[[47,4],[495,4],[560,4],[630,4]]},"731":{"position":[[1520,4],[1525,6]]},"743":{"position":[[914,4],[6871,4],[6905,4]]},"751":{"position":[[959,4],[992,4]]},"753":{"position":[[475,9],[814,4],[847,4]]},"757":{"position":[[370,4],[375,6],[708,4],[713,6]]}}}],["host(`a",{"_index":1444,"t":{"761":{"position":[[342,8],[537,8]]},"763":{"position":[[432,8],[726,8],[1013,8]]}}}],["host(`oauth.example.com",{"_index":1475,"t":{"763":{"position":[[1255,26]]}}}],["host>/api/v3",{"_index":750,"t":{"699":{"position":[[1953,13]]}}}],["host>/auth/realms//login/oauth/access_token",{"_index":749,"t":{"699":{"position":[[1878,31]]}}}],["host>/login/oauth/author",{"_index":748,"t":{"699":{"position":[[1808,28]]}}}],["host>/oauth2/callback",{"_index":1016,"t":{"719":{"position":[[144,21],[298,22]]}}}],["host_head",{"_index":1371,"t":{"753":{"position":[[143,13]]}}}],["hostnam",{"_index":978,"t":{"711":{"position":[[3220,9]]},"715":{"position":[[228,8]]},"717":{"position":[[131,8]]}}}],["hosts.thi",{"_index":581,"t":{"685":{"position":[[1574,10]]}}}],["hour",{"_index":684,"t":{"691":{"position":[[2566,4]]}}}],["hst",{"_index":1089,"t":{"731":{"position":[[1251,5]]}}}],["htaccess",{"_index":1260,"t":{"743":{"position":[[6766,8]]}}}],["html",{"_index":1211,"t":{"743":{"position":[[1764,4],[2861,6],[2941,6]]}}}],["htpasswd",{"_index":1213,"t":{"743":{"position":[[1913,8],[1977,8],[4135,8],[4192,8],[4236,8],[4272,8],[4343,8]]}}}],["http",{"_index":313,"t":{"649":{"position":[[1307,4],[1316,5],[1615,4],[1624,5]]},"685":{"position":[[1568,5]]},"719":{"position":[[26,9]]},"725":{"position":[[70,4]]},"731":{"position":[[821,4],[854,4]]},"743":{"position":[[524,4],[1597,6],[2708,5],[2727,5],[2802,4],[4360,4],[4437,4],[4469,5],[4521,5],[6482,4],[10653,4],[12105,5],[12221,5],[12520,4],[13399,4],[13572,4],[14020,5],[14034,6]]},"745":{"position":[[151,4],[160,5]]},"749":{"position":[[439,4]]},"753":{"position":[[0,4],[1257,4],[1404,4]]},"755":{"position":[[713,5]]},"761":{"position":[[310,5]]},"763":{"position":[[392,5]]}}}],["http(",{"_index":309,"t":{"649":{"position":[[1239,7],[1561,7]]},"681":{"position":[[70,7]]},"685":{"position":[[1147,7]]},"745":{"position":[[91,7]]}}}],["http/1.0",{"_index":1357,"t":{"751":{"position":[[1080,8]]},"753":{"position":[[869,8]]}}}],["http/1.1",{"_index":1373,"t":{"753":{"position":[[186,8]]}}}],["http/1.1x",{"_index":1138,"t":{"735":{"position":[[623,9]]}}}],["http://0.0.0.0:8080\"]email_domain",{"_index":905,"t":{"709":{"position":[[4524,35]]}}}],["http://127.0.0.1:4180",{"_index":855,"t":{"709":{"position":[[1360,21]]},"731":{"position":[[1480,22]]},"757":{"position":[[330,22],[668,22]]}}}],["http://127.0.0.1:4180/oauth2/callback",{"_index":847,"t":{"709":{"position":[[1067,37]]},"711":{"position":[[3623,37]]}}}],["http://127.0.0.1:4180/oauth2/callback'nam",{"_index":840,"t":{"709":{"position":[[722,44]]}}}],["http://127.0.0.1:4180/static",{"_index":856,"t":{"709":{"position":[[1385,28]]}}}],["http://127.0.0.1:5556",{"_index":983,"t":{"711":{"position":[[3678,21]]}}}],["http://127.0.0.1:5556/author",{"_index":984,"t":{"711":{"position":[[3732,31]]}}}],["http://127.0.0.1:5556/dex",{"_index":848,"t":{"709":{"position":[[1121,25]]}}}],["http://127.0.0.1:5556/key",{"_index":986,"t":{"711":{"position":[[3819,26]]}}}],["http://127.0.0.1:5556/token",{"_index":985,"t":{"711":{"position":[[3776,27]]}}}],["http://127.0.0.1:8080",{"_index":1315,"t":{"745":{"position":[[218,22]]}}}],["http://127.0.0.1:8080/some/path",{"_index":1316,"t":{"745":{"position":[[361,32]]}}}],["http://172.16.0.1:4180",{"_index":1453,"t":{"761":{"position":[[876,22]]},"763":{"position":[[1634,22]]}}}],["http://172.16.0.2:7555",{"_index":1452,"t":{"761":{"position":[[808,22]]},"763":{"position":[[1494,22]]}}}],["http://172.16.0.3:7555",{"_index":1476,"t":{"763":{"position":[[1566,22]]}}}],["http://[oauth2",{"_index":1319,"t":{"745":{"position":[[608,14],[963,14]]}}}],["http://]::/sign_in",{"_index":1263,"t":{"743":{"position":[[7905,18]]}}}],["oauth2_proxy_",{"_index":1325,"t":{"747":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":1329,"t":{"747":{"position":[[425,27]]}}}],["oauth2_proxy_email_domain",{"_index":1330,"t":{"747":{"position":[[489,27]]}}}],["oauth2_proxy_jwt_key",{"_index":947,"t":{"711":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":972,"t":{"711":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":1201,"t":{"743":{"position":[[1154,11]]}}}],["obtain",{"_index":1305,"t":{"743":{"position":[[13539,9]]}}}],["occur",{"_index":1387,"t":{"755":{"position":[[187,5]]}}}],["oidc",{"_index":414,"t":{"669":{"position":[[229,4]]},"673":{"position":[[442,4],[883,4]]},"675":{"position":[[1174,4],[1208,4],[2249,4]]},"693":{"position":[[1160,4]]},"701":{"position":[[60,4]]},"703":{"position":[[527,4],[653,4]]},"705":{"position":[[1126,4]]},"709":{"position":[[244,6],[374,4],[965,4],[996,4],[1105,4],[1549,4]]},"711":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"735":{"position":[[481,4],[667,4],[780,4],[889,4]]},"743":{"position":[[5455,4],[5567,4],[5612,4],[5731,4],[5771,4],[5806,4],[5897,4],[5918,4],[5968,4],[5997,4],[6027,4],[6074,4],[6105,4],[6391,4],[7145,4],[11782,4],[11809,4],[11866,4],[12895,4],[13750,4]]}}}],["oidc\"redirect_url",{"_index":873,"t":{"709":{"position":[[3061,18],[4388,18]]}}}],["oidc_issuer_url",{"_index":882,"t":{"709":{"position":[[3372,15]]}}}],["oidcconfig",{"_index":492,"t":{"675":{"position":[[1111,10],[1134,10]]}}}],["oidcopt",{"_index":493,"t":{"675":{"position":[[1122,11]]}}}],["ok",{"_index":47,"t":{"628":{"position":[[560,2]]},"733":{"position":[[227,2],[340,2]]}}}],["okta",{"_index":828,"t":{"709":{"position":[[315,5],[1526,5],[1567,5],[1612,4],[2465,4],[3708,4],[3834,4],[4309,4],[4482,4]]}}}],["old",{"_index":1247,"t":{"743":{"position":[[4865,3],[4925,3]]}}}],["omit",{"_index":1311,"t":{"743":{"position":[[14062,4]]}}}],["on",{"_index":92,"t":{"630":{"position":[[354,3]]},"634":{"position":[[674,4]]},"679":{"position":[[101,3]]},"711":{"position":[[2206,3]]},"717":{"position":[[683,3]]},"721":{"position":[[156,3]]},"725":{"position":[[187,3]]},"739":{"position":[[39,3]]},"743":{"position":[[347,4],[8178,4],[11727,3]]},"751":{"position":[[313,3]]}}}],["onc",{"_index":177,"t":{"636":{"position":[[421,4]]},"691":{"position":[[2558,4]]},"711":{"position":[[2843,4]]}}}],["open",{"_index":133,"t":{"634":{"position":[[113,4]]},"691":{"position":[[460,4]]},"695":{"position":[[0,4]]},"709":{"position":[[106,4]]}}}],["openid",{"_index":422,"t":{"673":{"position":[[80,6],[986,6]]},"689":{"position":[[278,6],[530,6]]},"703":{"position":[[89,7]]},"705":{"position":[[276,7]]},"709":{"position":[[0,6],[220,6],[2628,6]]},"711":{"position":[[862,6],[906,6]]},"743":{"position":[[5833,6]]}}}],["openssl",{"_index":932,"t":{"711":{"position":[[1104,7]]},"739":{"position":[[78,7],[288,7]]}}}],["oppos",{"_index":809,"t":{"705":{"position":[[1240,7]]}}}],["option",{"_index":57,"t":{"628":{"position":[[686,8]]},"638":{"position":[[164,7],[317,8],[373,7]]},"640":{"position":[[218,7],[263,7]]},"642":{"position":[[37,7],[256,7],[379,7],[437,7]]},"644":{"position":[[736,7],[844,7]]},"649":{"position":[[53,8],[77,7],[222,7]]},"655":{"position":[[246,8]]},"657":{"position":[[180,8]]},"665":{"position":[[416,6]]},"667":{"position":[[467,8]]},"685":{"position":[[1585,6],[2039,6]]},"691":{"position":[[1062,11]]},"699":{"position":[[276,8],[362,7]]},"701":{"position":[[1050,8]]},"703":{"position":[[754,9],[833,9]]},"705":{"position":[[905,7]]},"709":{"position":[[1721,10],[2023,6],[2452,8]]},"711":{"position":[[1540,8],[2132,7],[3495,7]]},"715":{"position":[[407,8],[530,7],[706,7]]},"717":{"position":[[344,8],[584,7]]},"719":{"position":[[223,7]]},"735":{"position":[[985,6]]},"737":{"position":[[48,8],[148,7]]},"741":{"position":[[169,6]]},"743":{"position":[[0,6],[52,9],[803,8],[1306,8],[1537,11],[11108,7],[13312,10],[13615,6],[13792,7],[14229,7]]},"745":{"position":[[61,6]]},"759":{"position":[[5,6],[37,6]]},"763":{"position":[[175,7],[2326,6]]}}}],["order",{"_index":1147,"t":{"737":{"position":[[109,5]]}}}],["org",{"_index":368,"t":{"659":{"position":[[46,3],[57,3],[478,3]]},"699":{"position":[[534,3],[635,7],[795,4],[1559,3]]},"743":{"position":[[3007,3],[3493,3]]}}}],["organ",{"_index":696,"t":{"693":{"position":[[430,13]]},"699":{"position":[[259,12],[580,12],[713,12]]}}}],["organis",{"_index":369,"t":{"659":{"position":[[101,12]]},"699":{"position":[[678,12]]},"743":{"position":[[3053,12]]}}}],["orgname/repo",{"_index":742,"t":{"699":{"position":[[1150,12]]},"743":{"position":[[3251,12]]}}}],["orgname/repo=accesslevel",{"_index":1229,"t":{"743":{"position":[[3758,25]]}}}],["origin",{"_index":647,"t":{"691":{"position":[[628,7]]},"709":{"position":[[146,10]]}}}],["os,base64",{"_index":1154,"t":{"739":{"position":[[125,10]]}}}],["otherwis",{"_index":445,"t":{"673":{"position":[[631,10]]},"687":{"position":[[232,9]]},"709":{"position":[[1903,10]]},"735":{"position":[[992,9]]}}}],["out",{"_index":867,"t":{"709":{"position":[[2125,3],[2318,3]]},"711":{"position":[[1156,3]]},"733":{"position":[[588,3]]},"735":{"position":[[17,4],[325,3]]}}}],["output",{"_index":1331,"t":{"749":{"position":[[34,6],[81,6]]},"751":{"position":[[142,6]]},"753":{"position":[[23,6]]},"755":{"position":[[80,6]]}}}],["outsid",{"_index":1328,"t":{"747":{"position":[[326,7]]},"755":{"position":[[193,7]]}}}],["overrid",{"_index":1261,"t":{"743":{"position":[[7447,8],[8741,8]]}}}],["override_speci",{"_index":1180,"t":{"739":{"position":[[711,16]]}}}],["overwrit",{"_index":1148,"t":{"737":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":1027,"t":{"723":{"position":[[37,7]]}}}],["pad",{"_index":1055,"t":{"729":{"position":[[479,9]]}}}],["page",{"_index":194,"t":{"638":{"position":[[12,4],[143,4],[190,4],[331,4]]},"675":{"position":[[1648,5]]},"693":{"position":[[332,4],[551,4],[792,4],[962,4]]},"733":{"position":[[553,5],[592,4]]},"735":{"position":[[329,4]]},"743":{"position":[[1857,4],[2813,5],[7520,4],[10803,5],[11964,4]]}}}],["pair",{"_index":1056,"t":{"729":{"position":[[533,4]]},"743":{"position":[[2380,5]]}}}],["pane",{"_index":630,"t":{"691":{"position":[[237,5],[280,5],[321,5],[428,5]]}}}],["paramet",{"_index":279,"t":{"647":{"position":[[83,9]]},"735":{"position":[[364,10]]},"745":{"position":[[258,10],[1096,10],[1121,9]]},"757":{"position":[[3773,10]]}}}],["part",{"_index":285,"t":{"649":{"position":[[149,4]]},"757":{"position":[[1796,6],[2177,4],[2455,4]]}}}],["particularli",{"_index":1327,"t":{"747":{"position":[[286,12]]}}}],["pass",{"_index":66,"t":{"630":{"position":[[12,7]]},"644":{"position":[[157,4],[312,4],[344,4],[380,4],[416,4]]},"687":{"position":[[154,4]]},"691":{"position":[[2104,4]]},"693":{"position":[[1347,6]]},"695":{"position":[[557,6]]},"709":{"position":[[1795,6]]},"711":{"position":[[2283,4]]},"715":{"position":[[388,4]]},"717":{"position":[[325,4]]},"719":{"position":[[204,4]]},"725":{"position":[[276,6]]},"743":{"position":[[512,7],[6152,4],[6175,4],[6355,4],[6386,4],[6456,4],[6477,4],[6680,7],[6818,4],[6840,4],[6866,4],[6888,4],[6936,4],[6959,4],[10429,4]]},"745":{"position":[[71,4]]},"757":{"position":[[990,4],[1301,4],[1330,4]]}}}],["passhosthead",{"_index":602,"t":{"685":{"position":[[2235,14],[2255,14]]}}}],["password",{"_index":349,"t":{"655":{"position":[[529,8]]},"667":{"position":[[750,8]]},"743":{"position":[[471,8],[491,8],[1951,8],[8663,8],[8685,9],[8754,8],[8810,8],[8841,9],[8901,9],[8931,8]]}}}],["password/basic_auth_password",{"_index":265,"t":{"644":{"position":[[635,28]]}}}],["patch",{"_index":188,"t":{"636":{"position":[[601,7]]}}}],["path",{"_index":232,"t":{"640":{"position":[[123,4]]},"649":{"position":[[536,4]]},"663":{"position":[[251,4]]},"667":{"position":[[300,4]]},"671":{"position":[[150,4]]},"675":{"position":[[1692,5]]},"679":{"position":[[345,4]]},"685":{"position":[[140,4],[165,5],[296,4],[308,4],[407,5],[592,4],[622,4],[671,4],[721,4],[824,4],[877,4],[949,4],[1199,5],[1378,4]]},"687":{"position":[[171,4],[397,4],[422,5]]},"691":{"position":[[2349,4]]},"733":{"position":[[279,6]]},"743":{"position":[[753,4],[1291,4],[1322,4],[1749,4],[1808,4],[2493,4],[2529,5],[2587,5],[4088,4],[5227,4],[7273,5],[7554,4],[7855,4],[11233,5],[11371,5],[12419,4],[12466,4],[12566,5],[12660,4]]},"745":{"position":[[501,5],[703,4],[852,4],[1256,4]]},"749":{"position":[[854,4],[880,6]]},"753":{"position":[[177,8],[1166,4]]}}}],["path.eg",{"_index":571,"t":{"685":{"position":[[1257,8]]}}}],["path/to/cert.key",{"_index":1095,"t":{"731":{"position":[[1383,18]]}}}],["path/to/cert.pem",{"_index":1093,"t":{"731":{"position":[[1344,18]]}}}],["path/to/existing/config.cfg",{"_index":236,"t":{"642":{"position":[[204,29],[558,29]]}}}],["path/to/new/config.yaml",{"_index":241,"t":{"642":{"position":[[523,25]]}}}],["path/to/sit",{"_index":1412,"t":{"757":{"position":[[2623,15]]}}}],["path_regex",{"_index":1284,"t":{"743":{"position":[[11406,10]]}}}],["pathprefix",{"_index":1470,"t":{"763":{"position":[[491,16],[1285,16]]}}}],["pathprefix(`/no",{"_index":1472,"t":{"763":{"position":[[760,15]]}}}],["pathprefix(`/oauth2",{"_index":1450,"t":{"761":{"position":[[592,23]]},"763":{"position":[[1072,23]]}}}],["pattern",{"_index":546,"t":{"685":{"position":[[449,7]]}}}],["pem",{"_index":416,"t":{"671":{"position":[[87,3],[182,3]]},"711":{"position":[[1023,4],[2383,3],[2528,3]]},"743":{"position":[[5082,3],[5259,3]]}}}],["per",{"_index":1026,"t":{"721":{"position":[[166,3]]},"743":{"position":[[352,3]]}}}],["perform",{"_index":829,"t":{"709":{"position":[[397,7],[1573,7]]}}}],["period",{"_index":353,"t":{"657":{"position":[[81,6]]},"685":{"position":[[2128,6]]},"743":{"position":[[2629,6]]}}}],["permiss",{"_index":681,"t":{"691":{"position":[[2239,11]]},"693":{"position":[[538,12],[703,12]]},"717":{"position":[[176,11]]}}}],["pick",{"_index":690,"t":{"693":{"position":[[171,4],[349,4]]},"709":{"position":[[2235,4],[2660,4]]}}}],["pin",{"_index":1088,"t":{"731":{"position":[[1227,3]]}}}],["ping",{"_index":1115,"t":{"733":{"position":[[318,5]]},"743":{"position":[[7549,4],[7570,4],[7625,7],[7635,4],[10983,4],[11032,4]]},"749":{"position":[[716,5],[743,4],[791,4],[849,4]]}}}],["ping,/path2",{"_index":1223,"t":{"743":{"position":[[2565,14]]}}}],["plain",{"_index":1419,"t":{"757":{"position":[[2894,5]]}}}],["platform",{"_index":870,"t":{"709":{"position":[[2603,8]]},"731":{"position":[[599,8],[790,8]]}}}],["pleas",{"_index":132,"t":{"634":{"position":[[99,6],[144,6],[346,6],[434,6]]},"638":{"position":[[260,6],[835,6]]},"689":{"position":[[411,6]]}}}],["plural",{"_index":1183,"t":{"741":{"position":[[186,6]]},"747":{"position":[[257,6]]}}}],["poc",{"_index":1204,"t":{"743":{"position":[[1353,6]]}}}],["point",{"_index":812,"t":{"705":{"position":[[1349,8]]},"763":{"position":[[119,8]]}}}],["polici",{"_index":869,"t":{"709":{"position":[[2351,8]]}}}],["popul",{"_index":773,"t":{"701":{"position":[[1276,8]]}}}],["port",{"_index":834,"t":{"709":{"position":[[584,5]]},"731":{"position":[[904,4],[974,4]]},"743":{"position":[[13926,5],[13985,4],[14098,5],[14169,5]]}}}],["possibl",{"_index":123,"t":{"632":{"position":[[165,9]]},"634":{"position":[[467,9]]},"657":{"position":[[125,8]]},"701":{"position":[[82,9]]},"705":{"position":[[877,8]]}}}],["post",{"_index":137,"t":{"634":{"position":[[158,4]]}}}],["potenti",{"_index":158,"t":{"634":{"position":[[622,9]]},"685":{"position":[[1619,9]]}}}],["powershel",{"_index":1152,"t":{"739":{"position":[[86,10]]}}}],["pr",{"_index":135,"t":{"634":{"position":[[130,2]]},"636":{"position":[[373,3]]}}}],["prebuilt",{"_index":3,"t":{"628":{"position":[[34,8],[195,8],[329,8]]}}}],["preced",{"_index":544,"t":{"685":{"position":[[388,10]]},"737":{"position":[[118,11]]}}}],["prefer",{"_index":263,"t":{"644":{"position":[[582,6]]},"743":{"position":[[6551,9],[6601,6],[6627,6],[7036,9],[10339,9]]}}}],["preferred_usernam",{"_index":622,"t":{"689":{"position":[[470,18]]}}}],["prefix",{"_index":338,"t":{"655":{"position":[[219,6],[233,6],[255,6]]},"667":{"position":[[440,6],[454,6],[476,6]]},"685":{"position":[[627,8],[676,8]]},"733":{"position":[[136,6],[175,6]]},"743":{"position":[[1209,6],[7828,6],[13087,6],[13811,8]]},"747":{"position":[[75,9]]}}}],["preflight",{"_index":1278,"t":{"743":{"position":[[11064,9]]}}}],["prepend",{"_index":339,"t":{"655":{"position":[[275,9]]},"667":{"position":[[496,9]]}}}],["present",{"_index":162,"t":{"634":{"position":[[705,7]]},"725":{"position":[[237,7]]},"743":{"position":[[7161,8],[12084,9],[12200,9]]}}}],["preserv",{"_index":396,"t":{"665":{"position":[[362,9]]}}}],["preserverequestvalu",{"_index":392,"t":{"665":{"position":[[260,20],[286,20]]}}}],["pretti",{"_index":989,"t":{"713":{"position":[[282,6]]}}}],["prevent",{"_index":428,"t":{"673":{"position":[[200,8]]},"727":{"position":[[460,7]]}}}],["preview",{"_index":861,"t":{"709":{"position":[[1682,7]]}}}],["previou",{"_index":191,"t":{"636":{"position":[[652,8]]}}}],["previous",{"_index":173,"t":{"636":{"position":[[287,10]]}}}],["primari",{"_index":286,"t":{"649":{"position":[[161,7]]}}}],["print",{"_index":238,"t":{"642":{"position":[[304,5]]},"743":{"position":[[12979,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":1155,"t":{"739":{"position":[[136,57]]}}}],["prior",{"_index":209,"t":{"638":{"position":[[245,5]]},"705":{"position":[[119,5]]}}}],["privat",{"_index":142,"t":{"634":{"position":[[222,8]]},"636":{"position":[[37,9]]},"671":{"position":[[72,7],[162,7]]},"699":{"position":[[1048,7]]},"711":{"position":[[1065,7]]},"743":{"position":[[5067,7],[5239,7],[12474,7]]}}}],["process",{"_index":971,"t":{"711":{"position":[[2587,7]]},"753":{"position":[[965,8]]},"757":{"position":[[2934,9],[2980,9]]}}}],["product",{"_index":638,"t":{"691":{"position":[[370,8]]},"711":{"position":[[294,10]]},"743":{"position":[[10874,11]]}}}],["profil",{"_index":515,"t":{"675":{"position":[[1985,7]]},"701":{"position":[[727,7]]},"705":{"position":[[284,7]]},"711":{"position":[[1992,7]]},"743":{"position":[[7086,7],[7105,7]]}}}],["profileurl",{"_index":514,"t":{"675":{"position":[[1949,10],[1967,10]]}}}],["project",{"_index":113,"t":{"632":{"position":[[33,8],[74,7],[204,8]]},"661":{"position":[[113,8],[131,8],[184,8]]},"691":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"699":{"position":[[13,8]]},"705":{"position":[[411,8]]},"707":{"position":[[55,8]]},"709":{"position":[[118,9]]},"743":{"position":[[3640,8],[3706,8]]}}}],["prometheu",{"_index":1118,"t":{"733":{"position":[[430,10]]},"743":{"position":[[7777,10]]}}}],["prompt",{"_index":520,"t":{"675":{"position":[[2225,6],[2239,6],[2254,6]]},"743":{"position":[[85,6],[7131,6],[7150,7],[7179,6]]}}}],["properli",{"_index":798,"t":{"705":{"position":[[551,9]]}}}],["properti",{"_index":692,"t":{"693":{"position":[[319,12]]}}}],["propos",{"_index":171,"t":{"636":{"position":[[257,8]]}}}],["protect",{"_index":518,"t":{"675":{"position":[[2067,9]]},"693":{"position":[[892,7]]},"709":{"position":[[2189,11],[2279,8]]},"729":{"position":[[774,8]]},"743":{"position":[[9747,9]]}}}],["protectedresourc",{"_index":517,"t":{"675":{"position":[[2025,17]]}}}],["proto,host,uri",{"_index":1267,"t":{"743":{"position":[[9909,16]]}}}],["protocol",{"_index":777,"t":{"703":{"position":[[80,8]]},"711":{"position":[[842,9]]},"743":{"position":[[14003,8]]},"751":{"position":[[1071,8],[1101,9]]},"753":{"position":[[534,13],[860,8],[890,9]]}}}],["provid",{"_index":39,"t":{"628":{"position":[[444,8],[572,8],[622,8],[775,8]]},"630":{"position":[[309,8],[473,9],[740,8]]},"640":{"position":[[111,7]]},"647":{"position":[[13,9]]},"649":{"position":[[1809,9],[1819,9],[1829,9],[1869,10]]},"651":{"position":[[13,9]]},"653":{"position":[[13,9]]},"659":{"position":[[13,9]]},"661":{"position":[[13,9]]},"663":{"position":[[13,9]]},"669":{"position":[[13,9],[234,9]]},"671":{"position":[[13,9]]},"673":{"position":[[13,9]]},"675":{"position":[[13,10],[24,8],[70,8],[212,10],[345,10],[584,9],[666,9],[744,9],[842,9],[929,9],[1015,9],[1101,9],[1190,9],[1313,9],[1414,10],[1425,8],[1498,9],[1575,9]]},"677":{"position":[[0,11],[47,9],[92,10]]},"689":{"position":[[54,8],[90,10],[195,9],[346,8],[381,8],[436,9],[545,9]]},"691":{"position":[[2208,8]]},"693":{"position":[[1245,8]]},"695":{"position":[[92,7],[455,8]]},"699":{"position":[[184,8],[1264,7]]},"701":{"position":[[24,8],[70,8],[1256,8]]},"705":{"position":[[10,8]]},"709":{"position":[[84,9],[133,8],[235,8],[297,9],[379,8],[553,8],[956,8],[970,8],[1001,9],[1554,8],[1918,8],[3050,8],[4377,8]]},"711":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"713":{"position":[[14,8],[125,9],[528,8]]},"715":{"position":[[378,9]]},"717":{"position":[[315,9]]},"719":{"position":[[323,8]]},"723":{"position":[[27,9],[61,8],[151,9]]},"731":{"position":[[89,9],[460,12],[1898,12]]},"735":{"position":[[169,8],[785,8]]},"743":{"position":[[1465,9],[1994,8],[7202,8],[7224,8],[7242,8],[7341,9],[7418,8],[7537,9],[11925,8],[12111,9],[12900,9],[13695,9],[14211,8]]},"745":{"position":[[194,9],[353,7],[691,7],[1149,9]]},"763":{"position":[[34,8],[2252,8]]}}}],["provider'",{"_index":981,"t":{"711":{"position":[[3422,10]]},"735":{"position":[[309,10]]},"743":{"position":[[7460,10]]},"757":{"position":[[1699,10]]}}}],["provider.example.com",{"_index":1143,"t":{"735":{"position":[[894,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":1137,"t":{"735":{"position":[[486,36]]}}}],["provider.if",{"_index":508,"t":{"675":{"position":[[1760,11]]}}}],["provider.thi",{"_index":500,"t":{"675":{"position":[[1374,13]]}}}],["provider/sign_out_pag",{"_index":1140,"t":{"735":{"position":[[672,25]]}}}],["provider=\"github",{"_index":1017,"t":{"719":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":799,"t":{"705":{"position":[[605,17]]}}}],["provider=adf",{"_index":722,"t":{"695":{"position":[[333,13]]}}}],["provider=azur",{"_index":701,"t":{"693":{"position":[[1066,14]]}}}],["provider=bitbucket",{"_index":1011,"t":{"717":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":1003,"t":{"715":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":756,"t":{"701":{"position":[[440,17]]},"703":{"position":[[509,17]]}}}],["providermust",{"_index":501,"t":{"675":{"position":[[1459,12]]}}}],["provideror",{"_index":494,"t":{"675":{"position":[[1179,10]]}}}],["providers.new",{"_index":1028,"t":{"723":{"position":[[98,15]]}}}],["providerthi",{"_index":469,"t":{"675":{"position":[[173,12],[306,12]]}}}],["proxi",{"_index":22,"t":{"628":{"position":[[245,5],[535,5],[648,5]]},"630":{"position":[[32,5],[729,5]]},"632":{"position":[[12,5]]},"634":{"position":[[65,5],[339,6]]},"642":{"position":[[58,5],[163,5],[467,5],[502,5]]},"644":{"position":[[191,5],[875,5]]},"649":{"position":[[204,6],[490,7],[973,5],[1045,5],[1262,5]]},"685":{"position":[[108,7],[1057,8],[1669,5],[2416,8]]},"687":{"position":[[365,7]]},"689":{"position":[[179,5]]},"691":{"position":[[2306,5],[2422,6]]},"693":{"position":[[914,6],[1053,5]]},"695":{"position":[[320,5]]},"709":{"position":[[530,5],[789,5],[924,5],[1028,5],[1048,5],[3656,5],[3676,5],[4817,5],[4837,5]]},"711":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"715":{"position":[[206,5],[249,5]]},"717":{"position":[[108,6],[152,5]]},"719":{"position":[[238,6]]},"723":{"position":[[130,5]]},"725":{"position":[[109,5]]},"727":{"position":[[97,5],[396,5],[655,6]]},"731":{"position":[[80,5],[204,5],[263,5],[647,5],[946,8],[965,5],[992,5],[1713,5],[1772,5]]},"733":{"position":[[7,5],[87,7],[169,5]]},"737":{"position":[[7,5]]},"743":{"position":[[7822,5],[7870,5],[7936,5],[7976,8],[8162,5],[9783,5],[9826,6],[11574,5],[13302,5],[13424,5],[13593,5]]},"745":{"position":[[7,5],[623,5],[978,5]]},"749":{"position":[[19,5]]},"751":{"position":[[937,5]]},"753":{"position":[[792,5]]},"757":{"position":[[192,8],[1763,5]]},"759":{"position":[[31,5]]},"761":{"position":[[223,8]]},"763":{"position":[[138,5],[208,6],[1236,5]]}}}],["proxiedto",{"_index":603,"t":{"685":{"position":[[2323,9]]}}}],["proxy'",{"_index":73,"t":{"630":{"position":[[96,7]]},"715":{"position":[[296,7]]},"735":{"position":[[91,7]]},"757":{"position":[[86,7]]},"761":{"position":[[93,7]]}}}],["proxy'secret",{"_index":841,"t":{"709":{"position":[[775,13]]}}}],["proxy.cfg",{"_index":1185,"t":{"741":{"position":[[225,9],[326,9]]}}}],["proxy.thi",{"_index":302,"t":{"649":{"position":[[929,10]]}}}],["proxy/oauth2",{"_index":13,"t":{"628":{"position":[[119,12],[232,12]]}}}],["proxy/oauth2/callback",{"_index":1000,"t":{"715":{"position":[[163,22]]}}}],["proxy/v7",{"_index":14,"t":{"628":{"position":[[132,8]]}}}],["proxy=tru",{"_index":1109,"t":{"731":{"position":[[1923,10]]},"763":{"position":[[306,11]]}}}],["proxy>/oauth2/callback",{"_index":1010,"t":{"717":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":712,"t":{"693":{"position":[[1388,17]]},"695":{"position":[[598,17]]}}}],["proxy_connect_timeout",{"_index":1104,"t":{"731":{"position":[[1608,21]]}}}],["proxy_pass",{"_index":1099,"t":{"731":{"position":[[1469,10]]},"757":{"position":[[319,10],[657,10],[2584,10],[2948,10]]}}}],["proxy_pass_request_bodi",{"_index":1393,"t":{"757":{"position":[[883,23]]}}}],["proxy_read_timeout",{"_index":1107,"t":{"731":{"position":[[1656,18]]}}}],["proxy_send_timeout",{"_index":1105,"t":{"731":{"position":[[1633,18]]}}}],["proxy_set_head",{"_index":1100,"t":{"731":{"position":[[1503,16],[1532,16],[1573,16]]},"757":{"position":[[353,16],[382,16],[423,16],[458,16],[559,16],[691,16],[720,16],[761,16],[847,16],[1218,16],[1249,16],[1428,16]]}}}],["proxyrawpath",{"_index":608,"t":{"687":{"position":[[118,12],[136,12]]}}}],["proxyredirecturi",{"_index":839,"t":{"709":{"position":[[702,18]]}}}],["proxyus",{"_index":1264,"t":{"743":{"position":[[8220,9]]}}}],["proxywebsocket",{"_index":605,"t":{"685":{"position":[[2371,15],[2392,15]]}}}],["pubjwk",{"_index":959,"t":{"711":{"position":[[1917,6]]},"743":{"position":[[7992,6]]}}}],["pubjwkurl",{"_index":418,"t":{"671":{"position":[[214,9],[231,9]]}}}],["pubkey",{"_index":420,"t":{"671":{"position":[[252,6]]},"743":{"position":[[8014,6]]}}}],["public",{"_index":741,"t":{"699":{"position":[[1011,6],[1229,6]]},"711":{"position":[[974,6]]}}}],["public_repo",{"_index":745,"t":{"699":{"position":[[1376,11]]}}}],["publicli",{"_index":139,"t":{"634":{"position":[[175,9]]}}}],["pull",{"_index":1363,"t":{"751":{"position":[[1173,6]]},"753":{"position":[[1036,6]]}}}],["push",{"_index":372,"t":{"659":{"position":[[341,4]]},"699":{"position":[[994,4]]},"743":{"position":[[3354,4]]}}}],["put",{"_index":15,"t":{"628":{"position":[[152,3]]}}}],["python",{"_index":1150,"t":{"739":{"position":[[66,6],[107,6]]}}}],["quay.io/oauth2",{"_index":21,"t":{"628":{"position":[[217,14]]}}}],["queri",{"_index":1135,"t":{"735":{"position":[[358,5]]},"761":{"position":[[1287,6]]}}}],["quick",{"_index":931,"t":{"711":{"position":[[1080,5]]}}}],["quickli",{"_index":122,"t":{"632":{"position":[[154,7]]}}}],["r_basicprofil",{"_index":816,"t":{"707":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":817,"t":{"707":{"position":[[187,15]]}}}],["rand",{"_index":1165,"t":{"739":{"position":[[296,4]]}}}],["random",{"_index":441,"t":{"673":{"position":[[586,6]]},"729":{"position":[[391,6],[442,6]]},"751":{"position":[[1210,6]]},"753":{"position":[[1073,6]]}}}],["random_password",{"_index":1178,"t":{"739":{"position":[[663,17]]}}}],["rang",{"_index":1296,"t":{"743":{"position":[[13201,6]]}}}],["raw",{"_index":609,"t":{"687":{"position":[[163,3]]},"757":{"position":[[2229,3]]}}}],["rd",{"_index":1134,"t":{"735":{"position":[[355,2]]}}}],["re",{"_index":1045,"t":{"727":{"position":[[799,2]]},"735":{"position":[[200,2]]}}}],["reach",{"_index":1288,"t":{"743":{"position":[[11981,5]]}}}],["read",{"_index":682,"t":{"691":{"position":[[2323,4]]},"699":{"position":[[1207,4]]},"717":{"position":[[240,4],[261,4]]}}}],["read_api",{"_index":796,"t":{"705":{"position":[[445,8]]}}}],["readi",{"_index":189,"t":{"636":{"position":[[613,6]]}}}],["real",{"_index":976,"t":{"711":{"position":[[3070,4],[3215,4]]},"731":{"position":[[1551,4]]},"743":{"position":[[8062,4],[8120,4],[8206,4],[8236,4],[9865,4],[13325,4]]},"751":{"position":[[899,4]]},"753":{"position":[[754,4]]},"757":{"position":[[401,4],[739,4]]}}}],["realm",{"_index":752,"t":{"701":{"position":[[127,5]]},"703":{"position":[[35,5],[711,6],[773,5]]}}}],["realm>/protocol/openid",{"_index":762,"t":{"701":{"position":[[592,22],[687,22],[784,22],[885,22]]}}}],["reason",{"_index":677,"t":{"691":{"position":[[1998,6]]}}}],["recommend",{"_index":654,"t":{"691":{"position":[[867,11]]},"731":{"position":[[14,11]]},"757":{"position":[[3574,11]]}}}],["redeem",{"_index":447,"t":{"673":{"position":[[686,6]]},"699":{"position":[[1837,6]]},"701":{"position":[[631,6]]},"711":{"position":[[3765,6]]},"713":{"position":[[686,6]]},"719":{"position":[[527,6]]},"743":{"position":[[8246,6],[11849,6]]}}}],["redeemurl",{"_index":512,"t":{"675":{"position":[[1889,9],[1906,9]]}}}],["redempt",{"_index":513,"t":{"675":{"position":[[1929,10]]},"743":{"position":[[8270,10]]}}}],["redi",{"_index":100,"t":{"630":{"position":[[552,6]]},"693":{"position":[[1435,5]]},"695":{"position":[[645,5]]},"725":{"position":[[326,5]]},"729":{"position":[[4,5],[57,6],[606,5],[711,5],[873,5],[936,5],[964,5],[1055,5],[1112,5],[1175,5],[1208,5],[1254,5],[1357,5],[1412,5],[1475,5],[1505,5]]},"743":{"position":[[8397,5],[8449,5],[8534,5],[8554,5],[8589,5],[8606,5],[8657,5],[8679,5],[8714,5],[8772,5],[8795,5],[8826,5],[8890,5],[8925,5],[8942,5],[8976,5],[9031,5],[9052,5],[9105,5],[9191,5],[9212,5],[9246,5],[9272,5],[9330,5],[9365,5],[9397,5],[9430,5],[10204,5]]}}}],["redirect",{"_index":88,"t":{"630":{"position":[[276,10]]},"687":{"position":[[245,10]]},"689":{"position":[[123,8]]},"691":{"position":[[699,8]]},"697":{"position":[[95,8]]},"701":{"position":[[174,8]]},"703":{"position":[[116,8],[604,8]]},"705":{"position":[[322,8],[625,8],[703,8],[1318,8]]},"707":{"position":[[217,8]]},"709":{"position":[[1054,8],[2720,8],[3969,8],[4029,8]]},"711":{"position":[[1379,8],[1619,8],[3610,8]]},"713":{"position":[[448,12]]},"715":{"position":[[315,8],[562,8],[680,8]]},"719":{"position":[[87,8],[267,8]]},"733":{"position":[[713,8]]},"735":{"position":[[22,8],[269,8],[380,8],[550,8],[585,8],[646,9],[873,8],[1006,8]]},"743":{"position":[[2172,9],[2733,8],[2822,9],[8292,8],[8322,8],[9948,8],[13053,11],[13889,8]]},"757":{"position":[[490,8],[591,8]]},"763":{"position":[[0,8],[372,9],[561,8],[572,9],[781,11],[849,8],[1894,9],[2059,9]]}}}],["redis://host[:port",{"_index":1265,"t":{"743":{"position":[[8485,21],[8634,20],[9142,21]]}}}],["reduc",{"_index":1335,"t":{"749":{"position":[[804,8]]}}}],["refer",{"_index":223,"t":{"638":{"position":[[552,9],[853,9]]},"640":{"position":[[94,9]]},"679":{"position":[[57,10]]},"711":{"position":[[930,5],[1284,8]]},"713":{"position":[[367,5]]}}}],["refresh",{"_index":655,"t":{"691":{"position":[[882,7],[936,7],[2540,9]]},"709":{"position":[[2830,7],[4138,7]]},"727":{"position":[[734,10]]},"743":{"position":[[1373,7],[1390,7],[13722,8]]},"757":{"position":[[1494,8]]}}}],["refresh/access/id",{"_index":1060,"t":{"729":{"position":[[787,17]]}}}],["refreshes.default",{"_index":449,"t":{"673":{"position":[[712,17]]}}}],["regex",{"_index":71,"t":{"630":{"position":[[70,6]]},"743":{"position":[[11143,5]]}}}],["regist",{"_index":49,"t":{"628":{"position":[[585,8]]},"689":{"position":[[17,8]]},"711":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":623,"t":{"691":{"position":[[16,12]]},"693":{"position":[[114,14],[156,14]]},"707":{"position":[[18,12]]}}}],["regular",{"_index":175,"t":{"636":{"position":[[365,7]]},"685":{"position":[[534,7]]}}}],["releas",{"_index":6,"t":{"628":{"position":[[59,7],[462,7]]},"636":{"position":[[493,8],[661,9]]},"649":{"position":[[298,8]]},"673":{"position":[[764,8]]}}}],["reload",{"_index":1479,"t":{"763":{"position":[[2336,6]]}}}],["remain",{"_index":555,"t":{"685":{"position":[[711,9]]},"707":{"position":[[300,9]]}}}],["remot",{"_index":1301,"t":{"743":{"position":[[13456,6]]}}}],["remote_addr",{"_index":1102,"t":{"731":{"position":[[1559,13]]},"757":{"position":[[409,13],[747,13]]}}}],["remote_address",{"_index":1339,"t":{"751":{"position":[[181,16]]},"753":{"position":[[62,16]]}}}],["remov",{"_index":205,"t":{"638":{"position":[[211,8]]},"640":{"position":[[255,7]]},"642":{"position":[[368,6],[429,7]]},"644":{"position":[[831,6]]},"735":{"position":[[76,7]]}}}],["renam",{"_index":206,"t":{"638":{"position":[[220,7]]}}}],["replac",{"_index":217,"t":{"638":{"position":[[479,7]]},"741":{"position":[[65,9]]},"747":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":1172,"t":{"739":{"position":[[550,19]]}}}],["repli",{"_index":699,"t":{"693":{"position":[[779,6]]}}}],["repo",{"_index":370,"t":{"659":{"position":[[176,4],[188,4]]},"699":{"position":[[1076,8]]},"711":{"position":[[2497,4]]},"743":{"position":[[3174,4]]}}}],["report",{"_index":1369,"t":{"751":{"position":[[1381,8]]},"753":{"position":[[1453,8]]}}}],["repositori",{"_index":332,"t":{"653":{"position":[[108,10],[126,10],[186,10]]},"659":{"position":[[239,10],[304,10],[360,10]]},"699":{"position":[[329,11],[953,11],[1018,10],[1056,11],[1126,10],[1236,10],[1320,11],[1445,10]]},"717":{"position":[[245,12],[696,10]]},"743":{"position":[[3227,10],[3318,10],[3373,11]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":995,"t":{"713":{"position":[[714,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":994,"t":{"713":{"position":[[647,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":996,"t":{"713":{"position":[[786,39]]}}}],["url]/stat",{"_index":1324,"t":{"745":{"position":[[984,13]]}}}],["url]/var/www/stat",{"_index":1320,"t":{"745":{"position":[[629,21]]}}}],["urldefault",{"_index":436,"t":{"673":{"position":[[457,10]]}}}],["urleg",{"_index":425,"t":{"673":{"position":[[102,6],[1006,6]]}}}],["us",{"_index":18,"t":{"628":{"position":[[185,5],[294,5],[654,5]]},"630":{"position":[[761,6]]},"634":{"position":[[550,4]]},"636":{"position":[[3,3],[361,3]]},"638":{"position":[[293,3],[659,5]]},"640":{"position":[[3,3],[141,5],[182,5]]},"642":{"position":[[64,5],[473,5]]},"644":{"position":[[100,5],[726,3]]},"649":{"position":[[394,4],[626,4],[861,4],[953,4],[963,5],[1217,4],[1433,3],[1539,4],[1741,3],[1842,4]]},"655":{"position":[[517,4]]},"659":{"position":[[285,3]]},"665":{"position":[[183,4]]},"667":{"position":[[738,4]]},"669":{"position":[[210,5]]},"671":{"position":[[98,4],[193,4]]},"673":{"position":[[902,3]]},"675":{"position":[[467,4],[1732,4],[1820,4]]},"685":{"position":[[316,4],[462,4],[528,5],[730,3],[2058,4]]},"689":{"position":[[371,5]]},"693":{"position":[[230,3],[1224,5]]},"695":{"position":[[435,5]]},"699":{"position":[[1426,3],[1686,5]]},"701":{"position":[[47,3],[1135,4],[1440,5]]},"705":{"position":[[160,5],[1042,5]]},"709":{"position":[[194,3],[263,4],[566,5],[1484,5],[1617,5],[4707,3]]},"711":{"position":[[2172,3],[3211,3]]},"713":{"position":[[105,5],[276,5]]},"715":{"position":[[370,3],[670,3]]},"717":{"position":[[43,3],[307,3],[555,3],[707,3]]},"721":{"position":[[29,3],[105,3],[209,3]]},"723":{"position":[[139,3]]},"725":{"position":[[115,4]]},"727":{"position":[[78,4],[287,5]]},"729":{"position":[[863,5],[1102,3],[1118,3],[1363,3],[1481,3],[1511,3]]},"731":{"position":[[732,5],[815,3],[1184,3]]},"733":{"position":[[375,3],[648,4],[774,4],[904,4],[1053,3]]},"735":{"position":[[345,5]]},"739":{"position":[[35,3]]},"741":{"position":[[286,4]]},"743":{"position":[[927,4],[1196,3],[1868,3],[2114,3],[2883,3],[2963,3],[3299,3],[4605,5],[4728,3],[5093,4],[5270,4],[6253,4],[6637,3],[6723,3],[6791,4],[7313,4],[7402,4],[7499,4],[7596,4],[7683,4],[8098,4],[8507,4],[8540,3],[8851,4],[8919,3],[9004,4],[9037,3],[9164,4],[9197,3],[9218,3],[9305,3],[9336,3],[9464,3],[9532,3],[9940,4],[10375,7],[10417,4],[10585,7],[10693,7],[10867,3],[12099,5],[12215,5],[13606,3],[13765,5],[14175,3]]},"745":{"position":[[830,4],[1214,4]]},"747":{"position":[[299,6]]},"749":{"position":[[111,5],[735,5]]},"751":{"position":[[889,3]]},"753":{"position":[[744,3]]},"757":{"position":[[1651,5],[2677,3],[2719,3],[3589,3]]},"763":{"position":[[55,3],[330,3],[2299,3]]}}}],["usag",{"_index":284,"t":{"649":{"position":[[62,5]]},"729":{"position":[[851,6]]}}}],["use.typ",{"_index":538,"t":{"683":{"position":[[155,13],[251,13]]}}}],["user",{"_index":85,"t":{"630":{"position":[[248,4],[643,4]]},"644":{"position":[[385,4]]},"649":{"position":[[92,5],[436,4]]},"653":{"position":[[161,4]]},"659":{"position":[[371,5],[386,5],[399,5]]},"669":{"position":[[173,5]]},"673":{"position":[[1120,4],[1220,4],[1321,4]]},"675":{"position":[[1629,5]]},"685":{"position":[[795,5]]},"691":{"position":[[393,6],[2171,4],[2439,4]]},"693":{"position":[[410,5],[661,6]]},"699":{"position":[[436,4],[463,5],[971,5],[1196,5],[1286,4],[1481,4],[1619,8]]},"707":{"position":[[119,4]]},"709":{"position":[[2949,5]]},"713":{"position":[[58,5]]},"717":{"position":[[659,5]]},"725":{"position":[[138,4]]},"727":{"position":[[790,5]]},"729":{"position":[[184,4]]},"733":{"position":[[258,4]]},"735":{"position":[[12,4],[121,4],[282,4],[393,4]]},"743":{"position":[[3394,4],[3422,5],[4281,4],[4352,5],[6129,4],[6511,5],[6617,4],[6845,4],[6941,4],[6976,5],[7640,4],[7660,4],[7728,4],[10270,5],[12814,5]]},"749":{"position":[[748,4]]},"751":{"position":[[94,4],[356,4],[425,4],[1367,4]]},"753":{"position":[[1439,4]]},"757":{"position":[[1013,4],[1115,5],[1237,4],[1242,6]]}}}],["user'",{"_index":297,"t":{"649":{"position":[[760,6],[1148,6]]},"725":{"position":[[17,6]]},"733":{"position":[[919,6]]},"743":{"position":[[6051,6]]}}}],["user/prefer_email_to_us",{"_index":264,"t":{"644":{"position":[[598,25]]}}}],["user/settings/appl",{"_index":1014,"t":{"719":{"position":[[52,28]]}}}],["user@domain.com",{"_index":1340,"t":{"751":{"position":[[215,17]]},"753":{"position":[[96,17]]}}}],["user_ag",{"_index":1374,"t":{"753":{"position":[[195,14]]}}}],["userag",{"_index":1368,"t":{"751":{"position":[[1346,9]]},"753":{"position":[[548,14],[1418,9]]}}}],["useridclaim",{"_index":464,"t":{"673":{"position":[[1255,11],[1274,11]]}}}],["userinfo",{"_index":775,"t":{"701":{"position":[[1376,8]]}}}],["usernam",{"_index":347,"t":{"655":{"position":[[475,8]]},"659":{"position":[[416,9]]},"667":{"position":[[696,8]]},"699":{"position":[[1506,8],[1644,9]]},"743":{"position":[[1940,8],[3440,8],[6561,8],[6666,8],[6727,8],[7046,8],[10349,8]]},"751":{"position":[[63,8],[708,13],[1416,8],[1457,8]]},"753":{"position":[[444,13],[1488,8],[1529,8]]}}}],["username@email.com",{"_index":1370,"t":{"751":{"position":[[1425,18]]},"753":{"position":[[1497,18]]}}}],["usptream",{"_index":585,"t":{"685":{"position":[[1683,8]]}}}],["utc",{"_index":1243,"t":{"743":{"position":[[4788,3]]}}}],["util",{"_index":495,"t":{"675":{"position":[[1200,7]]}}}],["uuid",{"_index":1364,"t":{"751":{"position":[[1217,4]]},"753":{"position":[[1080,4]]}}}],["v2",{"_index":1437,"t":{"761":{"position":[[12,2]]},"763":{"position":[[93,2]]}}}],["v3.0.0",{"_index":43,"t":{"628":{"position":[[492,7]]}}}],["v7.2.1",{"_index":7,"t":{"628":{"position":[[70,7]]}}}],["valid",{"_index":32,"t":{"628":{"position":[[354,9]]},"636":{"position":[[231,8]]},"657":{"position":[[254,5]]},"675":{"position":[[2153,10]]},"689":{"position":[[189,5]]},"691":{"position":[[958,9]]},"697":{"position":[[83,5]]},"699":{"position":[[1910,8]]},"701":{"position":[[168,5],[827,8]]},"703":{"position":[[110,5]]},"713":{"position":[[756,8],[849,8]]},"719":{"position":[[595,8]]},"739":{"position":[[572,5]]},"743":{"position":[[12057,10],[12173,10],[12912,8],[12945,10],[13883,5]]}}}],["validateurl",{"_index":519,"t":{"675":{"position":[[2102,11],[2121,11]]}}}],["valu",{"_index":282,"t":{"647":{"position":[[117,5]]},"649":{"position":[[723,6],[798,6],[1111,6],[1186,6]]},"651":{"position":[[143,5]]},"655":{"position":[[62,5],[191,5],[292,5],[433,5],[538,6]]},"665":{"position":[[330,6],[533,6],[554,6],[582,6]]},"667":{"position":[[60,5],[110,5],[139,5],[152,5],[190,6],[337,6],[412,5],[513,5],[654,5],[759,6]]},"675":{"position":[[186,5],[319,5],[1388,5],[2489,6]]},"679":{"position":[[89,6],[184,5],[197,5],[235,6],[382,6]]},"685":{"position":[[259,5]]},"689":{"position":[[404,6]]},"693":{"position":[[1011,5]]},"701":{"position":[[1539,5]]},"729":{"position":[[203,5]]},"743":{"position":[[38,6],[3809,5]]},"745":{"position":[[795,5]]},"751":{"position":[[979,5]]},"753":{"position":[[834,5]]}}}],["values.nam",{"_index":390,"t":{"665":{"position":[[204,12]]}}}],["var/www/stat",{"_index":1323,"t":{"745":{"position":[[933,16]]}}}],["variabl",{"_index":59,"t":{"628":{"position":[[710,9]]},"644":{"position":[[61,9]]},"667":{"position":[[255,9]]},"679":{"position":[[300,9]]},"711":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"713":{"position":[[192,9]]},"733":{"position":[[189,9]]},"737":{"position":[[69,9],[183,9],[209,9]]},"747":{"position":[[63,8],[238,8]]},"749":{"position":[[613,10]]},"751":{"position":[[776,9],[804,8]]},"753":{"position":[[628,9],[659,8]]},"755":{"position":[[500,9],[532,8]]},"757":{"position":[[2202,9],[2838,9],[3826,8]]}}}],["verif",{"_index":434,"t":{"673":{"position":[[364,12]]},"685":{"position":[[1543,12]]},"743":{"position":[[5584,12],[5942,13]]}}}],["verifi",{"_index":35,"t":{"628":{"position":[[391,9]]},"659":{"position":[[294,9]]},"673":{"position":[[530,9]]},"699":{"position":[[1435,9]]},"743":{"position":[[3308,9],[5541,8],[5757,9],[11644,8],[12040,6],[12156,6]]}}}],["verifieddefault",{"_index":432,"t":{"673":{"position":[[260,15]]}}}],["verify/ssl_upstream_insecure_skip_verifi",{"_index":251,"t":{"644":{"position":[[252,40]]}}}],["version",{"_index":42,"t":{"628":{"position":[[484,7]]},"634":{"position":[[679,8]]},"705":{"position":[[50,7],[111,7]]},"743":{"position":[[12967,7],[12985,7]]}}}],["via",{"_index":269,"t":{"644":{"position":[[744,3],[757,3]]},"711":{"position":[[3308,3]]},"713":{"position":[[161,3]]},"729":{"position":[[717,3],[958,3]]},"731":{"position":[[1247,3]]},"737":{"position":[[31,3]]},"743":{"position":[[338,3],[6211,3],[6416,3],[9371,3]]},"751":{"position":[[1027,3]]},"757":{"position":[[71,3],[1007,3],[2944,3],[3755,3]]},"761":{"position":[[78,3]]}}}],["visit",{"_index":854,"t":{"709":{"position":[[1351,8]]}}}],["volum",{"_index":1336,"t":{"749":{"position":[[817,7]]}}}],["vulner",{"_index":130,"t":{"634":{"position":[[37,13],[606,13]]},"636":{"position":[[75,16],[308,15]]}}}],["want",{"_index":695,"t":{"693":{"position":[[396,4],[884,4]]},"709":{"position":[[1739,4]]},"711":{"position":[[580,4]]},"729":{"position":[[1094,4]]},"735":{"position":[[865,4]]},"745":{"position":[[677,5]]}}}],["warn",{"_index":210,"t":{"638":{"position":[[251,8]]},"743":{"position":[[10809,9],[13472,8]]}}}],["way",{"_index":732,"t":{"699":{"position":[[217,4]]},"711":{"position":[[1086,3]]}}}],["web",{"_index":643,"t":{"691":{"position":[[529,4]]},"709":{"position":[[1259,3],[2591,3],[3802,3],[3921,3]]}}}],["webapp",{"_index":691,"t":{"693":{"position":[[194,7]]}}}],["websocket",{"_index":606,"t":{"685":{"position":[[2428,10]]},"743":{"position":[[7942,10],[7966,9]]}}}],["websockets/proxy_websocket",{"_index":249,"t":{"644":{"position":[[197,27]]}}}],["well",{"_index":1062,"t":{"729":{"position":[[924,4],[1145,4],[1308,5]]},"743":{"position":[[2414,5],[2452,5]]}}}],["whenstream",{"_index":598,"t":{"685":{"position":[[2172,13]]}}}],["whether",{"_index":394,"t":{"665":{"position":[[318,7]]},"685":{"position":[[2281,7]]},"705":{"position":[[144,7]]},"713":{"position":[[241,7]]},"743":{"position":[[9842,7]]}}}],["whitelist",{"_index":1144,"t":{"735":{"position":[[954,9]]},"743":{"position":[[13002,9],[13775,9],[14118,11]]}}}],["whole",{"_index":1440,"t":{"761":{"position":[[236,5]]}}}],["wide_authority_to_your_service_account",{"_index":667,"t":{"691":{"position":[[1438,38]]}}}],["window",{"_index":697,"t":{"693":{"position":[[577,8]]},"695":{"position":[[45,7]]}}}],["wish",{"_index":864,"t":{"709":{"position":[[1839,4],[2271,4],[2364,4],[2969,4]]},"715":{"position":[[95,5]]}}}],["within",{"_index":131,"t":{"634":{"position":[[51,6]]},"638":{"position":[[131,6]]},"649":{"position":[[230,6]]},"655":{"position":[[81,6]]},"665":{"position":[[234,6]]},"679":{"position":[[112,6]]},"685":{"position":[[912,6]]},"699":{"position":[[703,6]]},"709":{"position":[[4737,6]]},"727":{"position":[[568,6]]}}}],["without",{"_index":208,"t":{"638":{"position":[[237,7]]},"649":{"position":[[307,7]]},"757":{"position":[[184,7]]},"761":{"position":[[215,7]]},"763":{"position":[[43,7]]}}}],["wizard",{"_index":721,"t":{"695":{"position":[[221,6]]}}}],["wo",{"_index":1474,"t":{"763":{"position":[[846,2],[2056,2]]}}}],["work",{"_index":115,"t":{"632":{"position":[[61,4]]},"705":{"position":[[102,4],[546,4]]},"709":{"position":[[1236,7],[1940,5],[2437,4]]},"711":{"position":[[210,4]]},"743":{"position":[[12871,5]]},"757":{"position":[[1528,4]]}}}],["write",{"_index":744,"t":{"699":{"position":[[1300,5]]}}}],["x",{"_index":774,"t":{"701":{"position":[[1289,1]]},"731":{"position":[[1549,1],[1590,1]]},"735":{"position":[[570,1]]},"743":{"position":[[6215,1],[6296,1],[6499,1],[6517,1],[6539,1],[6964,1],[6982,1],[7002,1],[7024,1],[8187,1],[8204,1],[8218,1],[8234,1],[9565,1],[9863,1],[9897,1],[10255,1],[10276,1],[10299,1],[10324,1],[10448,1],[11477,1]]},"751":{"position":[[897,1]]},"753":{"position":[[752,1]]},"757":{"position":[[399,1],[440,1],[475,1],[576,1],[737,1],[778,1],[1011,1],[1022,1],[1235,1],[1266,1],[1445,1]]},"763":{"position":[[337,1],[2001,1],[2177,1]]}}}],["x.y.z.linux",{"_index":46,"t":{"628":{"position":[[541,11]]}}}],["x509",{"_index":934,"t":{"711":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":1257,"t":{"743":{"position":[[6269,12],[10233,12]]},"757":{"position":[[1080,12]]}}}],["xauthrequest/set_xauthrequest",{"_index":261,"t":{"644":{"position":[[502,29]]}}}],["xxx\"client_secret",{"_index":906,"t":{"709":{"position":[[4580,18]]}}}],["xxxxx\"client_secret",{"_index":878,"t":{"709":{"position":[[3263,20]]}}}],["yaml",{"_index":216,"t":{"638":{"position":[[464,4]]},"640":{"position":[[47,4]]},"642":{"position":[[295,4]]},"761":{"position":[[288,6]]}}}],["you'd",{"_index":743,"t":{"699":{"position":[[1166,5]]}}}],["yourcompany.com",{"_index":1193,"t":{"743":{"position":[[853,18]]}}}],["yyy\"pass_access_token",{"_index":907,"t":{"709":{"position":[[4601,22]]}}}],["yyyyy\"pass_access_token",{"_index":879,"t":{"709":{"position":[[3286,24]]}}}],["zzz\"cookie_secur",{"_index":908,"t":{"709":{"position":[[4646,18]]}}}],["zzzzz\"skip_provider_button",{"_index":881,"t":{"709":{"position":[[3333,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file diff --git a/docs/7.3.x/behaviour/index.html b/docs/7.3.x/behaviour/index.html index 20ee5b06..2eb37a35 100644 --- a/docs/7.3.x/behaviour/index.html +++ b/docs/7.3.x/behaviour/index.html @@ -4,13 +4,13 @@ Behaviour | OAuth2 Proxy - +
Version: 7.3.x

Behaviour

  1. Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens).
  2. If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned)
  3. After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set
  4. The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration)

Notice that the proxy also provides a number of useful endpoints.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.3.x/community/security/index.html b/docs/7.3.x/community/security/index.html index 6acb2989..ea219880 100644 --- a/docs/7.3.x/community/security/index.html +++ b/docs/7.3.x/community/security/index.html @@ -4,7 +4,7 @@ Security | OAuth2 Proxy - + @@ -28,7 +28,7 @@ If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.3.x/configuration/alpha-config/index.html b/docs/7.3.x/configuration/alpha-config/index.html index 0818f634..070c0fac 100644 --- a/docs/7.3.x/configuration/alpha-config/index.html +++ b/docs/7.3.x/configuration/alpha-config/index.html @@ -4,7 +4,7 @@ Alpha Configuration | OAuth2 Proxy - + @@ -62,7 +62,7 @@ passed to the /oauth2/start endpoint are checked to determine wheth they are valid overrides for the given parameter passed to the IdP's login URL. Either Value or Pattern should be supplied, not both.

FieldTypeDescription
valuestringA Value rule matches just this specific value
patternstringA Pattern rule gives a regular expression that must be matched by
some substring of the value. The expression is not automatically
anchored to the start and end of the value, if you want to restrict
the whole parameter value you must anchor it yourself with ^ and $.

Upstream​

(Appears on: UpstreamConfig)

Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path.

FieldTypeDescription
idstringID should be a unique identifier for the upstream.
This value is required for all upstreams.
pathstringPath is used to map requests to the upstream server.
The closest match will take precedence and all Paths must be unique.
Path can also take a pattern when used with RewriteTarget.
Path segments can be captured and matched using regular experessions.
Eg:
- ^/foo$: Match only the explicit path /foo
- ^/bar/$: Match any path prefixed with /bar/
- ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget
rewriteTargetstringRewriteTarget allows users to rewrite the request path before it is sent to
the upstream server.
Use the Path to capture segments for reuse within the rewrite target.
Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewrite
the request /baz/abc/123 to /foo/abc/123 before proxying to the
upstream server.
uristringThe URI of the upstream server. This may be an HTTP(S) server of a File
based URL. It may include a path, in which case all requests will be served
under that path.
Eg:
- http://localhost:8080
- https://service.localhost
- https://service.localhost/path
- file://host/path
If the URI's path is "/base" and the incoming request was for "/dir",
the upstream request will be for "/base/dir".
insecureSkipTLSVerifyboolInsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.
This option is insecure and will allow potential Man-In-The-Middle attacks
betweem OAuth2 Proxy and the usptream server.
Defaults to false.
staticboolStatic will make all requests to this upstream have a static response.
The response will have a body of "Authenticated" and a response code
matching StaticCode.
If StaticCode is not set, the response will return a 200 response.
staticCodeintStaticCode determines the response code for the Static response.
This option can only be used with Static enabled.
flushIntervalDurationFlushInterval is the period between flushing the response buffer when
streaming response from the upstream.
Defaults to 1 second.
passHostHeaderboolPassHostHeader determines whether the request host header should be proxied
to the upstream server.
Defaults to true.
proxyWebSocketsboolProxyWebSockets enables proxying of websockets to upstream servers
Defaults to true.
timeoutDurationTimeout is the maximum duration the server will wait for a response from the upstream server.
Defaults to 30 seconds.

UpstreamConfig​

(Appears on: AlphaOptions)

UpstreamConfig is a collection of definitions for upstream servers.

FieldTypeDescription
proxyRawPathboolProxyRawPath will pass the raw url path to upstream allowing for url's
like: "/%2F/" which would otherwise be redirected to "/"
upstreams[]UpstreamUpstreams represents the configuration for the upstream servers.
Requests will be proxied to this upstream if the path matches the request path.
Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.3.x/configuration/oauth_provider/index.html b/docs/7.3.x/configuration/oauth_provider/index.html index 82a3bea8..03a018fd 100644 --- a/docs/7.3.x/configuration/oauth_provider/index.html +++ b/docs/7.3.x/configuration/oauth_provider/index.html @@ -4,7 +4,7 @@ OAuth Provider Configuration | OAuth2 Proxy - + @@ -49,7 +49,7 @@ to setup the client id and client secret. Your "Redirection URI" will Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.3.x/configuration/overview/index.html b/docs/7.3.x/configuration/overview/index.html index 82335a6d..37d27ad1 100644 --- a/docs/7.3.x/configuration/overview/index.html +++ b/docs/7.3.x/configuration/overview/index.html @@ -4,7 +4,7 @@ Overview | OAuth2 Proxy - + @@ -19,7 +19,7 @@ The default format is configured as follows:

{{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}}

Available variables for request logging:

VariableExampleDescription
Client74.125.224.72The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true.
Hostdomain.comThe value of the Host header.
ProtocolHTTP/1.0The request protocol.
RequestDuration0.001The time in seconds that a request took to process.
RequestID00010203-0405-4607-8809-0a0b0c0d0e0fThe request ID pulled from the --request-id-header. Random UUID if empty
RequestMethodGETThe request method.
RequestURI"/oauth2/auth"The URI path of the request.
ResponseSize12The size in bytes of the response.
StatusCode200The HTTP status code of the response.
Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
Upstream-The upstream data of the HTTP request.
UserAgent-The full user agent as reported by the requesting client.
Usernameusername@email.comThe email or username of the auth request.

Standard Log Format​

All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below:

[19/Mar/2015:17:20:19 -0400] [main.go:40] <MESSAGE>

If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows:

[{{.Timestamp}}] [{{.File}}] {{.Message}}

Available variables for standard logging:

VariableExampleDescription
Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
Filemain.go:40The file and line number of the logging statement.
MessageHTTP: listening on 127.0.0.1:4180The details of the log statement.

Configuring for use with the Nginx auth_request directive​

The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example:

server {
  listen 443 ssl;
  server_name ...;
  include ssl/ssl.conf;

  location /oauth2/ {
    proxy_pass       http://127.0.0.1:4180;
    proxy_set_header Host                    $host;
    proxy_set_header X-Real-IP               $remote_addr;
    proxy_set_header X-Scheme                $scheme;
    proxy_set_header X-Auth-Request-Redirect $request_uri;
    # or, if you are handling multiple domains:
    # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
  }
  location = /oauth2/auth {
    proxy_pass       http://127.0.0.1:4180;
    proxy_set_header Host             $host;
    proxy_set_header X-Real-IP        $remote_addr;
    proxy_set_header X-Scheme         $scheme;
    # nginx auth_request includes headers but not body
    proxy_set_header Content-Length   "";
    proxy_pass_request_body           off;
  }

  location / {
    auth_request /oauth2/auth;
    error_page 401 = /oauth2/sign_in;

    # pass information via X-User and X-Email headers to backend,
    # requires running with --set-xauthrequest flag
    auth_request_set $user   $upstream_http_x_auth_request_user;
    auth_request_set $email  $upstream_http_x_auth_request_email;
    proxy_set_header X-User  $user;
    proxy_set_header X-Email $email;

    # if you enabled --pass-access-token, this will pass the token to the backend
    auth_request_set $token  $upstream_http_x_auth_request_access_token;
    proxy_set_header X-Access-Token $token;

    # if you enabled --cookie-refresh, this is needed for it to work with auth_request
    auth_request_set $auth_cookie $upstream_http_set_cookie;
    add_header Set-Cookie $auth_cookie;

    # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
    # limit and so the OAuth2 Proxy splits these into multiple parts.
    # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
    # so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
    auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;

    # Extract the Cookie attributes from the first Set-Cookie header and append them
    # to the second part ($upstream_cookie_* variables only contain the raw cookie content)
    if ($auth_cookie ~* "(; .*)") {
        set $auth_cookie_name_0 $auth_cookie;
        set $auth_cookie_name_1 "auth_cookie_name_1=$auth_cookie_name_upstream_1$1";
    }

    # Send both Set-Cookie headers now if there was a second part
    if ($auth_cookie_name_upstream_1) {
        add_header Set-Cookie $auth_cookie_name_0;
        add_header Set-Cookie $auth_cookie_name_1;
    }

    proxy_pass http://backend/;
    # or "root /path/to/site;" or "fastcgi_pass ..." etc
  }
}

When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module.

nginx.ingress.kubernetes.io/auth-response-headers: Authorization
nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
nginx.ingress.kubernetes.io/configuration-snippet: |
  auth_request_set $name_upstream_1 $upstream_cookie_name_1;

  access_by_lua_block {
    if ngx.var.name_upstream_1 ~= "" then
      ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
    end
  }

It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure).

You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be "$upstream_cookie__oauth2_proxy_1" instead of "$upstream_cookie_name_1" and the new cookie-name should be "_oauth2_proxy_1=" instead of "name_1=".

Configuring for use with the Traefik (v2) ForwardAuth middleware​

This option requires --reverse-proxy option to be set.

ForwardAuth with 401 errors middleware​

The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration:

http:
  routers:
    a-service:
      rule: "Host(`a-service.example.com`)"
      service: a-service-backend
      middlewares:
        - oauth-errors
        - oauth-auth
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    oauth:
      rule: "Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)"
      middlewares:
        - auth-headers
      service: oauth-backend
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"

  services:
    a-service-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.2:7555
    oauth-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.1:4180

  middlewares:
    auth-headers:
      headers:
        sslRedirect: true
        stsSeconds: 315360000
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        sslHost: example.com
        stsIncludeSubdomains: true
        stsPreload: true
        frameDeny: true
    oauth-auth:
      forwardAuth:
        address: https://oauth.example.com/oauth2/auth
        trustForwardHeader: true
    oauth-errors:
      errors:
        status:
          - "401-403"
        service: oauth-backend
        query: "/oauth2/sign_in"

ForwardAuth with static upstreams configuration​

Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint

Following options need to be set on oauth2-proxy:

  • --upstream=static://202: Configures a static response for authenticated sessions
  • --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly
http:
  routers:
    a-service-route-1:
      rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)"
      service: a-service-backend
      middlewares:
        - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    a-service-route-2:
      rule: "Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)"
      service: a-service-backend
      middlewares:
        - oauth-auth-wo-redirect # unauthenticated session will return a 401
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    services-oauth2-route:
      rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)"
      middlewares:
        - auth-headers
      service: oauth-backend
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"
    oauth2-proxy-route:
      rule: "Host(`oauth.example.com`) && PathPrefix(`/`)"
      middlewares:
        - auth-headers
      service: oauth-backend
      tls:
        certResolver: default
        domains:
          - main: "example.com"
            sans:
              - "*.example.com"

  services:
    a-service-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.2:7555
    b-service-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.3:7555
    oauth-backend:
      loadBalancer:
        servers:
          - url: http://172.16.0.1:4180

  middlewares:
    auth-headers:
      headers:
        sslRedirect: true
        stsSeconds: 315360000
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        sslHost: example.com
        stsIncludeSubdomains: true
        stsPreload: true
        frameDeny: true
    oauth-auth-redirect:
      forwardAuth:
        address: https://oauth.example.com/
        trustForwardHeader: true
        authResponseHeaders:
          - X-Auth-Request-Access-Token
          - Authorization
    oauth-auth-wo-redirect:
      forwardAuth:
        address: https://oauth.example.com/oauth2/auth
        trustForwardHeader: true
        authResponseHeaders:
          - X-Auth-Request-Access-Token
          - Authorization
note

If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.3.x/configuration/session_storage/index.html b/docs/7.3.x/configuration/session_storage/index.html index 87775fd0..d25d46ba 100644 --- a/docs/7.3.x/configuration/session_storage/index.html +++ b/docs/7.3.x/configuration/session_storage/index.html @@ -4,7 +4,7 @@ Session Storage | OAuth2 Proxy - + @@ -25,7 +25,7 @@ disclosure.

Usage--redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately.

Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately.

Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.

Copyright © 2023 OAuth2 Proxy.
- + \ No newline at end of file diff --git a/docs/7.3.x/configuration/tls/index.html b/docs/7.3.x/configuration/tls/index.html index 88c708d2..f2b04a73 100644 --- a/docs/7.3.x/configuration/tls/index.html +++ b/docs/7.3.x/configuration/tls/index.html @@ -4,7 +4,7 @@ TLS Configuration | OAuth2 Proxy - + @@ -18,7 +18,7 @@ external load balancer like Amazon ELB or Google Platform Load Balancing) use oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/.

An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS:

server {
    listen 443 default ssl;
    server_name internal.yourcompany.com;
    ssl_certificate /path/to/cert.pem;
    ssl_certificate_key /path/to/cert.key;
    add_header Strict-Transport-Security max-age=2592000;

    location / {
        proxy_pass http://127.0.0.1:4180;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Scheme $scheme;
        proxy_connect_timeout 1;
        proxy_send_timeout 30;
        proxy_read_timeout 30;
    }
}

  • The command line to run oauth2-proxy in this configuration would look like this:

    ./oauth2-proxy \
       --email-domain="yourcompany.com"  \
       --upstream=http://127.0.0.1:8080/ \
       --cookie-secret=... \
       --cookie-secure=true \
       --provider=... \
       --reverse-proxy=true \
       --client-id=... \
       --client-secret=...
    • Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/7.3.x/features/endpoints/index.html b/docs/7.3.x/features/endpoints/index.html index ad0ee49d..4d2223dd 100644 --- a/docs/7.3.x/features/endpoints/index.html +++ b/docs/7.3.x/features/endpoints/index.html @@ -4,13 +4,13 @@ Endpoints | OAuth2 Proxy - +
    -
    Version: 7.3.x

    Endpoints

    OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable.

    • /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info
    • /ping - returns a 200 OK response, which is intended for use with health checks
    • /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default
    • /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies)
    • /oauth2/sign_out - this URL is used to clear the session cookie
    • /oauth2/start - a URL that will redirect to start the OAuth cycle
    • /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url.
    • /oauth2/userinfo - the URL is used to return user's email from the session in JSON format.
    • /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive

    Sign out​

    To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!):

    /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page

    Alternatively, include the redirect URL in the X-Auth-Request-Redirect header:

    GET /oauth2/sign_out HTTP/1.1
    X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page
    ...

    (The "sign_out_page" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.)

    BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.

    Auth​

    This endpoint returns 202 Accepted response or a 401 Unauthorized response.

    It can be configured using the following query parameters query parameters:

    • allowed_groups: comma separated list of allowed groups
    • allowed_email_domains: comma separated list of allowed email domains
    • allowed_emails: comma separated list of allowed emails
    Copyright © 2023 OAuth2 Proxy.
    - +
    Version: 7.3.x

    Endpoints

    OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable.

    • /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info
    • /ping - returns a 200 OK response, which is intended for use with health checks
    • /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default
    • /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies)
    • /oauth2/sign_out - this URL is used to clear the session cookie
    • /oauth2/start - a URL that will redirect to start the OAuth cycle
    • /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url.
    • /oauth2/userinfo - the URL is used to return user's email from the session in JSON format.
    • /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive

    Sign out​

    To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!):

    /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page

    Alternatively, include the redirect URL in the X-Auth-Request-Redirect header:

    GET /oauth2/sign_out HTTP/1.1
    X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page
    ...

    (The "sign_out_page" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.)

    BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.

    Auth​

    This endpoint returns 202 Accepted response or a 401 Unauthorized response.

    It can be configured using the following query parameters:

    • allowed_groups: comma separated list of allowed groups
    • allowed_email_domains: comma separated list of allowed email domains
    • allowed_emails: comma separated list of allowed emails
    Copyright © 2023 OAuth2 Proxy.
    + \ No newline at end of file diff --git a/docs/7.3.x/index.html b/docs/7.3.x/index.html index a9cf1da7..d4bcb6c2 100644 --- a/docs/7.3.x/index.html +++ b/docs/7.3.x/index.html @@ -4,13 +4,13 @@ Installation | OAuth2 Proxy - +
    Version: 7.3.x

    Installation

    1. Choose how to deploy:

      a. Download Prebuilt Binary (current release is v7.3.0)

      b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin

      c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available)

      d. Using a Kubernetes manifest (Helm)

    Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0.

    $ sha256sum -c sha256sum.txt
    oauth2-proxy-x.y.z.linux-amd64: OK
    1. Select a Provider and Register an OAuth Application with a Provider
    2. Configure OAuth2 Proxy using config file, command line options, or environment variables
    3. Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/7.3.x/search-index.json b/docs/7.3.x/search-index.json index cb96b3b2..ca7870f8 100644 --- a/docs/7.3.x/search-index.json +++ b/docs/7.3.x/search-index.json @@ -1 +1 @@ -[{"documents":[{"i":476,"t":"Installation","u":"/oauth2-proxy/docs/7.3.x/","b":["Docs"]},{"i":478,"t":"Behaviour","u":"/oauth2-proxy/docs/7.3.x/behaviour","b":["Docs"]},{"i":480,"t":"Security","u":"/oauth2-proxy/docs/7.3.x/community/security","b":["Docs","Community"]},{"i":486,"t":"Session Storage","u":"/oauth2-proxy/docs/7.3.x/configuration/session_storage","b":["Docs","Configuration"]},{"i":492,"t":"Alpha Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","b":["Docs","Configuration"]},{"i":549,"t":"Endpoints","u":"/oauth2-proxy/docs/7.3.x/features/endpoints","b":["Docs","Features"]},{"i":555,"t":"TLS Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/tls","b":["Docs","Configuration"]},{"i":561,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","b":["Docs","Configuration"]},{"i":599,"t":"Overview","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","b":["Docs","Configuration"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/476",[0,2.222]],["t/478",[1,2.222]],["t/480",[2,2.222]],["t/486",[3,1.699,4,1.699]],["t/492",[5,1.699,6,0.94]],["t/549",[7,2.222]],["t/555",[6,0.94,8,1.699]],["t/561",[6,0.761,9,1.375,10,1.375]],["t/599",[11,2.222]]],"invertedIndex":[["alpha",{"_index":5,"t":{"492":{"position":[[0,5]]}}}],["behaviour",{"_index":1,"t":{"478":{"position":[[0,9]]}}}],["configur",{"_index":6,"t":{"492":{"position":[[6,13]]},"555":{"position":[[4,13]]},"561":{"position":[[15,13]]}}}],["endpoint",{"_index":7,"t":{"549":{"position":[[0,9]]}}}],["instal",{"_index":0,"t":{"476":{"position":[[0,12]]}}}],["oauth",{"_index":9,"t":{"561":{"position":[[0,5]]}}}],["overview",{"_index":11,"t":{"599":{"position":[[0,8]]}}}],["provid",{"_index":10,"t":{"561":{"position":[[6,8]]}}}],["secur",{"_index":2,"t":{"480":{"position":[[0,8]]}}}],["session",{"_index":3,"t":{"486":{"position":[[0,7]]}}}],["storag",{"_index":4,"t":{"486":{"position":[[8,7]]}}}],["tl",{"_index":8,"t":{"555":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":482,"t":"Security Disclosures","u":"/oauth2-proxy/docs/7.3.x/community/security","h":"#security-disclosures","p":480},{"i":484,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.3.x/community/security","h":"#how-will-we-respond-to-disclosures","p":480},{"i":488,"t":"Cookie Storage","u":"/oauth2-proxy/docs/7.3.x/configuration/session_storage","h":"#cookie-storage","p":486},{"i":490,"t":"Redis Storage","u":"/oauth2-proxy/docs/7.3.x/configuration/session_storage","h":"#redis-storage","p":486},{"i":494,"t":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#using-alpha-configuration","p":492},{"i":496,"t":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":492},{"i":498,"t":"Removed options","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#removed-options","p":492},{"i":500,"t":"Configuration Reference","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#configuration-reference","p":492},{"i":501,"t":"ADFSOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#adfsoptions","p":492},{"i":503,"t":"AlphaOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#alphaoptions","p":492},{"i":505,"t":"AzureOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#azureoptions","p":492},{"i":507,"t":"BitbucketOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#bitbucketoptions","p":492},{"i":509,"t":"ClaimSource","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#claimsource","p":492},{"i":511,"t":"Duration","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#duration","p":492},{"i":513,"t":"GitHubOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#githuboptions","p":492},{"i":515,"t":"GitLabOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#gitlaboptions","p":492},{"i":517,"t":"GoogleOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#googleoptions","p":492},{"i":519,"t":"Header","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#header","p":492},{"i":521,"t":"HeaderValue","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#headervalue","p":492},{"i":523,"t":"KeycloakOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#keycloakoptions","p":492},{"i":525,"t":"LoginGovOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#logingovoptions","p":492},{"i":527,"t":"LoginURLParameter","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#loginurlparameter","p":492},{"i":529,"t":"OIDCOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#oidcoptions","p":492},{"i":531,"t":"Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#provider","p":492},{"i":533,"t":"ProviderType","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#providertype","p":492},{"i":535,"t":"Providers","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#providers","p":492},{"i":537,"t":"SecretSource","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#secretsource","p":492},{"i":539,"t":"Server","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#server","p":492},{"i":541,"t":"TLS","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#tls","p":492},{"i":543,"t":"URLParameterRule","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#urlparameterrule","p":492},{"i":545,"t":"Upstream","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#upstream","p":492},{"i":547,"t":"UpstreamConfig","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#upstreamconfig","p":492},{"i":551,"t":"Sign out","u":"/oauth2-proxy/docs/7.3.x/features/endpoints","h":"#sign-out","p":549},{"i":553,"t":"Auth","u":"/oauth2-proxy/docs/7.3.x/features/endpoints","h":"#auth","p":549},{"i":557,"t":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/7.3.x/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":555},{"i":559,"t":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/7.3.x/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":555},{"i":563,"t":"Google Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#google-auth-provider","p":561},{"i":565,"t":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#azure-auth-provider","p":561},{"i":567,"t":"ADFS Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#adfs-auth-provider","p":561},{"i":569,"t":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":561},{"i":571,"t":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#github-auth-provider","p":561},{"i":573,"t":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":561},{"i":575,"t":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":561},{"i":577,"t":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":561},{"i":579,"t":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":561},{"i":581,"t":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":561},{"i":583,"t":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#openid-connect-provider","p":561},{"i":585,"t":"login.gov Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#logingov-provider","p":561},{"i":587,"t":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#nextcloud-provider","p":561},{"i":589,"t":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":561},{"i":591,"t":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":561},{"i":593,"t":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":561},{"i":595,"t":"Email Authentication","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#email-authentication","p":561},{"i":597,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":561},{"i":601,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#generating-a-cookie-secret","p":599},{"i":603,"t":"Config File","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#config-file","p":599},{"i":605,"t":"Command Line Options","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#command-line-options","p":599},{"i":607,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#upstreams-configuration","p":599},{"i":609,"t":"Environment variables","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#environment-variables","p":599},{"i":611,"t":"Logging Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#logging-configuration","p":599},{"i":613,"t":"Auth Log Format","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#auth-log-format","p":599},{"i":615,"t":"Request Log Format","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#request-log-format","p":599},{"i":617,"t":"Standard Log Format","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#standard-log-format","p":599},{"i":619,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":599},{"i":621,"t":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":599},{"i":623,"t":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":599},{"i":625,"t":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":599}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/482",[0,3.998,1,3.463]],["t/484",[1,3.463,2,3.998]],["t/488",[3,3.463,4,3.463]],["t/490",[4,3.463,5,3.998]],["t/494",[6,2.613,7,3.359,8,1.831]],["t/496",[8,1.579,9,2.896,10,2.508,11,2.896]],["t/498",[12,3.998,13,3.463]],["t/500",[8,2.18,14,3.998]],["t/501",[15,4.938]],["t/503",[16,4.938]],["t/505",[17,4.938]],["t/507",[18,4.938]],["t/509",[19,4.938]],["t/511",[20,4.938]],["t/513",[21,4.938]],["t/515",[22,4.938]],["t/517",[23,4.938]],["t/519",[24,4.938]],["t/521",[25,4.938]],["t/523",[26,4.938]],["t/525",[27,4.938]],["t/527",[28,4.938]],["t/529",[29,4.938]],["t/531",[30,1.617]],["t/533",[31,4.938]],["t/535",[30,1.617]],["t/537",[32,4.938]],["t/539",[33,4.938]],["t/541",[34,3.841]],["t/543",[35,4.938]],["t/545",[36,3.841]],["t/547",[37,4.938]],["t/551",[38,3.998,39,3.998]],["t/553",[40,2.001]],["t/557",[34,2.253,41,2.508,42,2.896,43,2.508]],["t/559",[34,1.766,41,1.966,43,1.966,44,2.27,45,2.27,46,1.966]],["t/563",[30,1.1,40,1.361,47,3.359]],["t/565",[30,1.1,40,1.361,48,2.909]],["t/567",[30,1.1,40,1.361,49,3.359]],["t/569",[30,1.1,40,1.361,50,3.359]],["t/571",[30,1.1,40,1.361,51,3.359]],["t/573",[30,1.1,40,1.361,52,2.909]],["t/575",[30,0.948,40,1.173,52,2.508,53,2.896]],["t/577",[30,1.1,40,1.361,54,3.359]],["t/579",[30,1.1,40,1.361,55,3.359]],["t/581",[30,0.948,48,2.508,56,2.896,57,2.508]],["t/583",[30,1.1,58,3.359,59,3.359]],["t/585",[30,1.309,60,3.998]],["t/587",[30,1.309,61,3.998]],["t/589",[30,1.1,40,1.361,62,3.359]],["t/591",[30,1.1,40,1.361,63,3.359]],["t/593",[30,1.1,40,1.361,64,3.359]],["t/595",[65,3.998,66,3.998]],["t/597",[10,2.909,30,1.1,57,2.909]],["t/601",[3,2.909,67,3.359,68,3.359]],["t/603",[69,3.998,70,3.998]],["t/605",[13,2.909,71,3.359,72,3.359]],["t/607",[8,2.18,36,3.11]],["t/609",[73,3.998,74,3.998]],["t/611",[8,2.18,75,2.847]],["t/613",[40,1.361,75,2.391,76,2.613]],["t/615",[75,2.391,76,2.613,77,3.359]],["t/617",[75,2.391,76,2.613,78,3.359]],["t/619",[6,1.98,8,1.388,46,2.204,79,2.545,80,2.545]],["t/621",[6,1.766,8,1.238,81,2.27,82,2.27,83,1.766,84,1.966]],["t/623",[83,2.253,84,2.508,85,2.896,86,2.896]],["t/625",[8,1.579,36,2.253,83,2.253,87,2.896]]],"invertedIndex":[["401",{"_index":85,"t":{"623":{"position":[[17,3]]}}}],["ad",{"_index":57,"t":{"581":{"position":[[16,2]]},"597":{"position":[[0,6]]}}}],["adf",{"_index":49,"t":{"567":{"position":[[0,4]]}}}],["adfsopt",{"_index":15,"t":{"501":{"position":[[0,11]]}}}],["alpha",{"_index":7,"t":{"494":{"position":[[6,5]]}}}],["alphaopt",{"_index":16,"t":{"503":{"position":[[0,12]]}}}],["auth",{"_index":40,"t":{"553":{"position":[[0,4]]},"563":{"position":[[7,4]]},"565":{"position":[[6,4]]},"567":{"position":[[5,4]]},"569":{"position":[[9,4]]},"571":{"position":[[7,4]]},"573":{"position":[[9,4]]},"575":{"position":[[14,4]]},"577":{"position":[[7,4]]},"579":{"position":[[9,4]]},"589":{"position":[[13,4]]},"591":{"position":[[10,4]]},"593":{"position":[[6,4]]},"613":{"position":[[0,4]]}}}],["auth_request",{"_index":79,"t":{"619":{"position":[[35,12]]}}}],["authent",{"_index":66,"t":{"595":{"position":[[6,14]]}}}],["azur",{"_index":48,"t":{"565":{"position":[[0,5]]},"581":{"position":[[10,5]]}}}],["azureopt",{"_index":17,"t":{"505":{"position":[[0,12]]}}}],["bitbucket",{"_index":63,"t":{"591":{"position":[[0,9]]}}}],["bitbucketopt",{"_index":18,"t":{"507":{"position":[[0,16]]}}}],["claimsourc",{"_index":19,"t":{"509":{"position":[[0,11]]}}}],["command",{"_index":71,"t":{"605":{"position":[[0,7]]}}}],["config",{"_index":69,"t":{"603":{"position":[[0,6]]}}}],["configur",{"_index":8,"t":{"494":{"position":[[12,13]]},"496":{"position":[[11,13]]},"500":{"position":[[0,13]]},"607":{"position":[[10,13]]},"611":{"position":[[8,13]]},"619":{"position":[[0,11]]},"621":{"position":[[0,11]]},"625":{"position":[[34,13]]}}}],["connect",{"_index":59,"t":{"583":{"position":[[7,7]]}}}],["convert",{"_index":9,"t":{"496":{"position":[[0,10]]}}}],["cooki",{"_index":3,"t":{"488":{"position":[[0,6]]},"601":{"position":[[13,6]]}}}],["digitalocean",{"_index":62,"t":{"589":{"position":[[0,12]]}}}],["direct",{"_index":80,"t":{"619":{"position":[[48,9]]}}}],["disclosur",{"_index":1,"t":{"482":{"position":[[9,11]]},"484":{"position":[[23,12]]}}}],["durat",{"_index":20,"t":{"511":{"position":[[0,8]]}}}],["e.g",{"_index":45,"t":{"559":{"position":[[32,4]]}}}],["email",{"_index":65,"t":{"595":{"position":[[0,5]]}}}],["environ",{"_index":73,"t":{"609":{"position":[[0,11]]}}}],["error",{"_index":86,"t":{"623":{"position":[[21,6]]}}}],["facebook",{"_index":50,"t":{"569":{"position":[[0,8]]}}}],["file",{"_index":70,"t":{"603":{"position":[[7,4]]}}}],["format",{"_index":76,"t":{"613":{"position":[[9,6]]},"615":{"position":[[12,6]]},"617":{"position":[[13,6]]}}}],["forwardauth",{"_index":83,"t":{"621":{"position":[[42,11]]},"623":{"position":[[0,11]]},"625":{"position":[[0,11]]}}}],["gener",{"_index":67,"t":{"601":{"position":[[0,10]]}}}],["gitea",{"_index":64,"t":{"593":{"position":[[0,5]]}}}],["github",{"_index":51,"t":{"571":{"position":[[0,6]]}}}],["githubopt",{"_index":21,"t":{"513":{"position":[[0,13]]}}}],["gitlab",{"_index":54,"t":{"577":{"position":[[0,6]]}}}],["gitlabopt",{"_index":22,"t":{"515":{"position":[[0,13]]}}}],["googl",{"_index":47,"t":{"563":{"position":[[0,6]]}}}],["googleopt",{"_index":23,"t":{"517":{"position":[[0,13]]}}}],["header",{"_index":24,"t":{"519":{"position":[[0,6]]}}}],["headervalu",{"_index":25,"t":{"521":{"position":[[0,11]]}}}],["keycloak",{"_index":52,"t":{"573":{"position":[[0,8]]},"575":{"position":[[0,8]]}}}],["keycloakopt",{"_index":26,"t":{"523":{"position":[[0,15]]}}}],["line",{"_index":72,"t":{"605":{"position":[[8,4]]}}}],["linkedin",{"_index":55,"t":{"579":{"position":[[0,8]]}}}],["log",{"_index":75,"t":{"611":{"position":[[0,7]]},"613":{"position":[[5,3]]},"615":{"position":[[8,3]]},"617":{"position":[[9,3]]}}}],["login.gov",{"_index":60,"t":{"585":{"position":[[0,9]]}}}],["logingovopt",{"_index":27,"t":{"525":{"position":[[0,15]]}}}],["loginurlparamet",{"_index":28,"t":{"527":{"position":[[0,17]]}}}],["microsoft",{"_index":56,"t":{"581":{"position":[[0,9]]}}}],["middlewar",{"_index":84,"t":{"621":{"position":[[54,10]]},"623":{"position":[[28,10]]}}}],["new",{"_index":10,"t":{"496":{"position":[[32,3]]},"597":{"position":[[9,3]]}}}],["nextcloud",{"_index":61,"t":{"587":{"position":[[0,9]]}}}],["nginx",{"_index":46,"t":{"559":{"position":[[37,5]]},"619":{"position":[[29,5]]}}}],["oauth2",{"_index":42,"t":{"557":{"position":[[17,6]]}}}],["oidc",{"_index":53,"t":{"575":{"position":[[9,4]]}}}],["oidcopt",{"_index":29,"t":{"529":{"position":[[0,11]]}}}],["openid",{"_index":58,"t":{"583":{"position":[[0,6]]}}}],["option",{"_index":13,"t":{"498":{"position":[[8,7]]},"605":{"position":[[13,7]]}}}],["out",{"_index":39,"t":{"551":{"position":[[5,3]]}}}],["provid",{"_index":30,"t":{"531":{"position":[[0,8]]},"535":{"position":[[0,9]]},"563":{"position":[[12,8]]},"565":{"position":[[11,8]]},"567":{"position":[[10,8]]},"569":{"position":[[14,8]]},"571":{"position":[[12,8]]},"573":{"position":[[14,8]]},"575":{"position":[[19,8]]},"577":{"position":[[12,8]]},"579":{"position":[[14,8]]},"581":{"position":[[19,8]]},"583":{"position":[[15,8]]},"585":{"position":[[10,8]]},"587":{"position":[[10,8]]},"589":{"position":[[18,8]]},"591":{"position":[[15,8]]},"593":{"position":[[11,8]]},"597":{"position":[[13,8]]}}}],["providertyp",{"_index":31,"t":{"533":{"position":[[0,12]]}}}],["proxi",{"_index":43,"t":{"557":{"position":[[24,5]]},"559":{"position":[[25,6]]}}}],["redi",{"_index":5,"t":{"490":{"position":[[0,5]]}}}],["refer",{"_index":14,"t":{"500":{"position":[[14,9]]}}}],["remov",{"_index":12,"t":{"498":{"position":[[0,7]]}}}],["request",{"_index":77,"t":{"615":{"position":[[0,7]]}}}],["respond",{"_index":2,"t":{"484":{"position":[[12,7]]}}}],["revers",{"_index":44,"t":{"559":{"position":[[17,7]]}}}],["secret",{"_index":68,"t":{"601":{"position":[[20,6]]}}}],["secretsourc",{"_index":32,"t":{"537":{"position":[[0,12]]}}}],["secur",{"_index":0,"t":{"482":{"position":[[0,8]]}}}],["server",{"_index":33,"t":{"539":{"position":[[0,6]]}}}],["sign",{"_index":38,"t":{"551":{"position":[[0,4]]}}}],["standard",{"_index":78,"t":{"617":{"position":[[0,8]]}}}],["static",{"_index":87,"t":{"625":{"position":[[17,6]]}}}],["storag",{"_index":4,"t":{"488":{"position":[[7,7]]},"490":{"position":[[6,7]]}}}],["structur",{"_index":11,"t":{"496":{"position":[[36,9]]}}}],["termin",{"_index":41,"t":{"557":{"position":[[0,9]]},"559":{"position":[[0,9]]}}}],["tl",{"_index":34,"t":{"541":{"position":[[0,3]]},"557":{"position":[[10,3]]},"559":{"position":[[10,3]]}}}],["traefik",{"_index":81,"t":{"621":{"position":[[29,7]]}}}],["upstream",{"_index":36,"t":{"545":{"position":[[0,8]]},"607":{"position":[[0,9]]},"625":{"position":[[24,9]]}}}],["upstreamconfig",{"_index":37,"t":{"547":{"position":[[0,14]]}}}],["urlparameterrul",{"_index":35,"t":{"543":{"position":[[0,16]]}}}],["us",{"_index":6,"t":{"494":{"position":[[0,5]]},"619":{"position":[[16,3]]},"621":{"position":[[16,3]]}}}],["v2",{"_index":82,"t":{"621":{"position":[[37,4]]}}}],["variabl",{"_index":74,"t":{"609":{"position":[[12,9]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":477,"t":"Choose how to deploy: a. Download Prebuilt Binary (current release is v7.3.0) b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available) d. Using a Kubernetes manifest (Helm) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. $ sha256sum -c sha256sum.txtoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/7.3.x/","h":"","p":476},{"i":479,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/7.3.x/behaviour","h":"","p":478},{"i":481,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/7.3.x/community/security","h":"","p":480},{"i":483,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/7.3.x/community/security","h":"#security-disclosures","p":480},{"i":485,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.3.x/community/security","h":"#how-will-we-respond-to-disclosures","p":480},{"i":487,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/7.3.x/configuration/session_storage","h":"","p":486},{"i":489,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/7.3.x/configuration/session_storage","h":"#cookie-storage","p":486},{"i":491,"t":"The Redis Storage backend stores sessions, encrypted, in redis. Instead sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128 bit random number, hex-encoded The secret is a 128 bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.","s":"Redis Storage","u":"/oauth2-proxy/docs/7.3.x/configuration/session_storage","h":"#redis-storage","p":486},{"i":493,"t":"danger This page contains documentation for alpha features. We reserve the right to make breaking changes to the features detailed within this page with no notice. Options described in this page may be changed, removed, renamed or moved without prior warning. Please beware of this before you use alpha configuration options. This page details a set of alpha configuration options in a new format. Going forward we are intending to add structured configuration in YAML format to replace the existing TOML based configuration file and flags. Below is a reference for the structure of the configuration, with AlphaOptions as the root of the configuration. When using alpha configuration, your config file will look something like below: upstreams: - id: ... ...injectRequestHeaders: - name: ... ...injectResponseHeaders: - name: ... ... Please browse the reference below for the structure of the new configuration format.","s":"Alpha Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"","p":492},{"i":495,"t":"To use the new alpha configuration, generate a YAML file based on the format described in the reference below. Provide the path to this file using the --alpha-config flag. note When using the --alpha-config flag, some options are no longer available. See removed options below for more information.","s":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#using-alpha-configuration","p":492},{"i":497,"t":"Before adding the new --alpha-config option, start OAuth2 Proxy using the convert-config-to-alpha flag to convert existing configuration to the new format. oauth2-proxy --convert-config-to-alpha --config ./path/to/existing/config.cfg This will convert any options supported by the new format to YAML and print the new configuration to STDOUT. Copy this to a new file, remove any options from your existing configuration noted in removed options and then start OAuth2 Proxy using the new config. oauth2-proxy --alpha-config ./path/to/new/config.yaml --config ./path/to/existing/config.cfg","s":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":492},{"i":499,"t":"The following flags/options and their respective environment variables are no longer available when using alpha configuration: flush-interval/flush_interval pass-host-header/pass_host_header proxy-websockets/proxy_websockets ssl-upstream-insecure-skip-verify/ssl_upstream_insecure_skip_verify upstream/upstreams pass-basic-auth/pass_basic_auth pass-access-token/pass_access_token pass-user-headers/pass_user_headers pass-authorization-header/pass_authorization_header set-basic-auth/set_basic_auth set-xauthrequest/set_xauthrequest set-authorization-header/set_authorization_header prefer-email-to-user/prefer_email_to_user basic-auth-password/basic_auth_password skip-auth-strip-headers/skip_auth_strip_headers client-id/client_id client-secret/client_secret, and client-secret-file/client_secret_file provider provider-display-name/provider_display_name provider-ca-file/provider_ca_files login-url/login_url redeem-url/redeem_url profile-url/profile_url resource validate-url/validate_url scope prompt approval-prompt/approval_prompt acr-values/acr_values user-id-claim/user_id_claim allowed-group/allowed_groups allowed-role/allowed_roles jwt-key/jwt_key jwt-key-file/jwt_key_file pubjwk-url/pubjwk_url and all provider-specific options, i.e. any option whose name includes oidc, azure, bitbucket, github, gitlab, google or keycloak. Attempting to use any of these options via flags or via config when --alpha-config is set will result in an error. info You must remove these options before starting OAuth2 Proxy with --alpha-config","s":"Removed options","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#removed-options","p":492},{"i":502,"t":"(Appears on: Provider) Field Type Description skipScope bool Skip adding the scope parameter in login requestDefault value is 'false'","s":"ADFSOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#adfsoptions","p":492},{"i":504,"t":"AlphaOptions contains alpha structured configuration options. Usage of these options allows users to access alpha features that are not available as part of the primary configuration structure for OAuth2 Proxy. danger The options within this structure are considered alpha. They may change between releases without notice. Field Type Description upstreamConfig UpstreamConfig UpstreamConfig is used to configure upstream servers.Once a user is authenticated, requests to the server will be proxied tothese upstream servers based on the path mappings defined in this list. injectRequestHeaders []Header InjectRequestHeaders is used to configure headers that should be addedto requests to upstream servers.Headers may source values from either the authenticated user's sessionor from a static secret value. injectResponseHeaders []Header InjectResponseHeaders is used to configure headers that should be addedto responses from the proxy.This is typically used when using the proxy as an external authenticationprovider in conjunction with another proxy such as NGINX and itsauth_request module.Headers may source values from either the authenticated user's sessionor from a static secret value. server Server Server is used to configure the HTTP(S) server for the proxy application.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. metricsServer Server MetricsServer is used to configure the HTTP(S) server for metrics.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. providers Providers Providers is used to configure multiple providers.","s":"AlphaOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#alphaoptions","p":492},{"i":506,"t":"(Appears on: Provider) Field Type Description tenant string Tenant directs to a tenant-specific or common (tenant-independent) endpointDefault value is 'common'","s":"AzureOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#azureoptions","p":492},{"i":508,"t":"(Appears on: Provider) Field Type Description team string Team sets restrict logins to members of this team repository string Repository sets restrict logins to user with access to this repository","s":"BitbucketOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#bitbucketoptions","p":492},{"i":510,"t":"(Appears on: HeaderValue) ClaimSource allows loading a header value from a claim within the session Field Type Description claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"ClaimSource","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#claimsource","p":492},{"i":512,"t":"(string alias)​ (Appears on: Upstream) Duration is as string representation of a period of time. A duration string is a is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\", \"-1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".","s":"Duration","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#duration","p":492},{"i":514,"t":"(Appears on: Provider) Field Type Description org string Org sets restrict logins to members of this organisation team string Team sets restrict logins to members of this team repo string Repo sets restrict logins to collaborators of this repository token string Token is the token to use when verifying repository collaboratorsit must have push access to the repository users []string Users allows users with these usernames to logineven if they do not belong to the specified org and team or collaborators","s":"GitHubOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#githuboptions","p":492},{"i":516,"t":"(Appears on: Provider) Field Type Description group []string Group sets restrict logins to members of this group projects []string Projects restricts logins to members of any of these projects","s":"GitLabOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#gitlaboptions","p":492},{"i":518,"t":"(Appears on: Provider) Field Type Description group []string Groups sets restrict logins to members of this google group adminEmail string AdminEmail is the google admin to impersonate for api calls serviceAccountJson string ServiceAccountJSON is the path to the service account json credentials","s":"GoogleOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#googleoptions","p":492},{"i":520,"t":"(Appears on: AlphaOptions) Header represents an individual header that will be added to a request or response header. Field Type Description name string Name is the header name to be used for this set of values.Names should be unique within a list of Headers. preserveRequestValue bool PreserveRequestValue determines whether any values for this headershould be preserved for the request to the upstream server.This option only applies to injected request headers.Defaults to false (headers that match this header will be stripped). values []HeaderValue Values contains the desired values for this header","s":"Header","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#header","p":492},{"i":522,"t":"(Appears on: Header) HeaderValue represents a single header value and the sources that can make up the header value Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value. claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"HeaderValue","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#headervalue","p":492},{"i":524,"t":"(Appears on: Provider) Field Type Description groups []string Group enables to restrict login to members of indicated group roles []string Role enables to restrict login to users with role (only available when using the keycloak-oidc provider)","s":"KeycloakOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#keycloakoptions","p":492},{"i":526,"t":"(Appears on: Provider) Field Type Description jwtKey string JWTKey is a private key in PEM format used to sign JWT, jwtKeyFile string JWTKeyFile is a path to the private key file in PEM format used to sign the JWT pubjwkURL string PubJWKURL is the JWK pubkey access endpoint","s":"LoginGovOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#logingovoptions","p":492},{"i":528,"t":"(Appears on: Provider) LoginURLParameter is the configuration for a single query parameter that can be passed through from the /oauth2/start endpoint to the IdP login URL. The \"default\" option specifies the default value or values (if any) that will be passed to the IdP for this parameter, and \"allow\" is a list of options for ways in which this parameter can be set or overridden via the query string to /oauth2/start. If only a default is specified and no \"allow\" then the parameter is effectively fixed - the default value will always be used and anything passed to the start URL will be ignored. If only \"allow\" is specified but no default then the parameter will only be passed on to the IdP if the caller provides it, and no value will be sent otherwise. Examples: A parameter whose value is fixed name: organizationdefault:- myorg A parameter that is not passed by default, but may be set to one of a fixed set of values name: promptallow:- value: login- value: consent- value: select_account A parameter that is passed by default but may be overridden by one of a fixed set of values name: promptdefault: [\"login\"]allow:- value: consent- value: select_account A parameter that may be overridden, but only by values that match a regular expression. For example to restrict login_hint to email addresses in your organization's domain: name: login_hintallow:- pattern: '^[^@]*@example\\.com$'# this allows at most one \"@\" sign, and requires \"example.com\" domain. Note that the YAML rules around exactly which characters are allowed and/or require escaping in different types of string literals are convoluted. For regular expressions the single quoted form is simplest as backslash is not considered to be an escape character. Alternatively use the \"chomped block\" format |-: - pattern: |- ^[^@]*@example\\.com$ The hyphen is important, a | block would have a trailing newline character. Field Type Description name string Name specifies the name of the query parameter. default []string (Optional) Default specifies a default value or values that will bepassed to the IdP if not overridden. allow []URLParameterRule (Optional) Allow specifies rules about how the default (if any) may beoverridden via the query string to /oauth2/start. Onlyvalues that match one or more of the allow rules will beforwarded to the IdP.","s":"LoginURLParameter","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#loginurlparameter","p":492},{"i":530,"t":"(Appears on: Provider) Field Type Description issuerURL string IssuerURL is the OpenID Connect issuer URLeg: https://accounts.google.com insecureAllowUnverifiedEmail bool InsecureAllowUnverifiedEmail prevents failures if an email address in an id_token is not verifieddefault set to 'false' insecureSkipIssuerVerification bool InsecureSkipIssuerVerification skips verification of ID token issuers. When false, ID Token Issuers must match the OIDC discovery URLdefault set to 'false' insecureSkipNonce bool InsecureSkipNonce skips verifying the ID Token's nonce claim that must matchthe random nonce sent in the initial OAuth flow. Otherwise, the nonce is checkedafter the initial OAuth redeem & subsequent token refreshes.default set to 'true'Warning: In a future release, this will change to 'false' by default for enhanced security. skipDiscovery bool SkipDiscovery allows to skip OIDC discovery and use manually supplied Endpointsdefault set to 'false' jwksURL string JwksURL is the OpenID Connect JWKS URLeg: https://www.googleapis.com/oauth2/v3/certs emailClaim string EmailClaim indicates which claim contains the user email,default set to 'email' groupsClaim string GroupsClaim indicates which claim contains the user groupsdefault set to 'groups' userIDClaim string UserIDClaim indicates which claim contains the user IDdefault set to 'email' audienceClaims []string AudienceClaim allows to define any claim that is verified against the client idBy default aud claim is used for verification. extraAudiences []string ExtraAudiences is a list of additional audiences that are allowedto pass verification in addition to the client id.","s":"OIDCOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#oidcoptions","p":492},{"i":532,"t":"(Appears on: Providers) Provider holds all configuration for a single provider Field Type Description clientID string ClientID is the OAuth Client ID that is defined in the providerThis value is required for all providers. clientSecret string ClientSecret is the OAuth Client Secret that is defined in the providerThis value is required for all providers. clientSecretFile string ClientSecretFile is the name of the filecontaining the OAuth Client Secret, it will be used if ClientSecret is not set. keycloakConfig KeycloakOptions KeycloakConfig holds all configurations for Keycloak provider. azureConfig AzureOptions AzureConfig holds all configurations for Azure provider. ADFSConfig ADFSOptions ADFSConfig holds all configurations for ADFS provider. bitbucketConfig BitbucketOptions BitbucketConfig holds all configurations for Bitbucket provider. githubConfig GitHubOptions GitHubConfig holds all configurations for GitHubC provider. gitlabConfig GitLabOptions GitLabConfig holds all configurations for GitLab provider. googleConfig GoogleOptions GoogleConfig holds all configurations for Google provider. oidcConfig OIDCOptions OIDCConfig holds all configurations for OIDC provideror providers utilize OIDC configurations. loginGovConfig LoginGovOptions LoginGovConfig holds all configurations for LoginGov provider. id string ID should be a unique identifier for the provider.This value is required for all providers. provider ProviderType Type is the OAuth providermust be set from the supported providers group,otherwise 'Google' is set as default name string Name is the providers display nameif set, it will be shown to the users in the login page. caFiles []string CAFiles is a list of paths to CA certificates that should be used when connecting to the provider.If not specified, the default Go trust sources are used instead loginURL string LoginURL is the authentication endpoint loginURLParameters []LoginURLParameter LoginURLParameters defines the parameters that can be passed from the start URL to the IdP login URL redeemURL string RedeemURL is the token redemption endpoint profileURL string ProfileURL is the profile access endpoint resource string ProtectedResource is the resource that is protected (Azure AD and ADFS only) validateURL string ValidateURL is the access token validation endpoint scope string Scope is the OAuth scope specification allowedGroups []string AllowedGroups is a list of restrict logins to members of this group force_code_challenge_method string The forced code challenge method","s":"Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#provider","p":492},{"i":534,"t":"(string alias)​ (Appears on: Provider) ProviderType is used to enumerate the different provider type options Valid options are: adfs, azure, bitbucket, digitalocean facebook, github, gitlab, google, keycloak, keycloak-oidc, linkedin, login.gov, nextcloud and oidc.","s":"ProviderType","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#providertype","p":492},{"i":536,"t":"([]Provider alias)​ (Appears on: AlphaOptions) Providers is a collection of definitions for providers.","s":"Providers","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#providers","p":492},{"i":538,"t":"(Appears on: ClaimSource, HeaderValue, TLS) SecretSource references an individual secret value. Only one source within the struct should be defined at any time. Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value.","s":"SecretSource","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#secretsource","p":492},{"i":540,"t":"(Appears on: AlphaOptions) Server represents the configuration for an HTTP(S) server Field Type Description BindAddress string BindAddress is the address on which to serve traffic.Leave blank or set to \"-\" to disable. SecureBindAddress string SecureBindAddress is the address on which to serve secure traffic.Leave blank or set to \"-\" to disable. TLS TLS TLS contains the information for loading the certificate and key for thesecure traffic and further configuration for the TLS server.","s":"Server","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#server","p":492},{"i":542,"t":"(Appears on: Server) TLS contains the information for loading a TLS certificate and key as well as an optional minimal TLS version that is acceptable. Field Type Description Key SecretSource Key is the TLS key data to use.Typically this will come from a file. Cert SecretSource Cert is the TLS certificate data to use.Typically this will come from a file. MinVersion string MinVersion is the minimal TLS version that is acceptable.E.g. Set to \"TLS1.3\" to select TLS version 1.3","s":"TLS","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#tls","p":492},{"i":544,"t":"(Appears on: LoginURLParameter) URLParameterRule represents a rule by which query parameters passed to the /oauth2/start endpoint are checked to determine whether they are valid overrides for the given parameter passed to the IdP's login URL. Either Value or Pattern should be supplied, not both. Field Type Description value string A Value rule matches just this specific value pattern string A Pattern rule gives a regular expression that must be matched bysome substring of the value. The expression is not automaticallyanchored to the start and end of the value, if you want to restrictthe whole parameter value you must anchor it yourself with ^ and $.","s":"URLParameterRule","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#urlparameterrule","p":492},{"i":546,"t":"(Appears on: UpstreamConfig) Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path. Field Type Description id string ID should be a unique identifier for the upstream.This value is required for all upstreams. path string Path is used to map requests to the upstream server.The closest match will take precedence and all Paths must be unique.Path can also take a pattern when used with RewriteTarget.Path segments can be captured and matched using regular experessions.Eg:- ^/foo$: Match only the explicit path /foo- ^/bar/$: Match any path prefixed with /bar/- ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget rewriteTarget string RewriteTarget allows users to rewrite the request path before it is sent tothe upstream server.Use the Path to capture segments for reuse within the rewrite target.Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewritethe request /baz/abc/123 to /foo/abc/123 before proxying to theupstream server. uri string The URI of the upstream server. This may be an HTTP(S) server of a Filebased URL. It may include a path, in which case all requests will be servedunder that path.Eg:- http://localhost:8080- https://service.localhost- https://service.localhost/path- file://host/pathIf the URI's path is \"/base\" and the incoming request was for \"/dir\",the upstream request will be for \"/base/dir\". insecureSkipTLSVerify bool InsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.This option is insecure and will allow potential Man-In-The-Middle attacksbetweem OAuth2 Proxy and the usptream server.Defaults to false. static bool Static will make all requests to this upstream have a static response.The response will have a body of \"Authenticated\" and a response codematching StaticCode.If StaticCode is not set, the response will return a 200 response. staticCode int StaticCode determines the response code for the Static response.This option can only be used with Static enabled. flushInterval Duration FlushInterval is the period between flushing the response buffer whenstreaming response from the upstream.Defaults to 1 second. passHostHeader bool PassHostHeader determines whether the request host header should be proxiedto the upstream server.Defaults to true. proxyWebSockets bool ProxyWebSockets enables proxying of websockets to upstream serversDefaults to true. timeout Duration Timeout is the maximum duration the server will wait for a response from the upstream server.Defaults to 30 seconds.","s":"Upstream","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#upstream","p":492},{"i":548,"t":"(Appears on: AlphaOptions) UpstreamConfig is a collection of definitions for upstream servers. Field Type Description proxyRawPath bool ProxyRawPath will pass the raw url path to upstream allowing for url'slike: \"/%2F/\" which would otherwise be redirected to \"/\" upstreams []Upstream Upstreams represents the configuration for the upstream servers.Requests will be proxied to this upstream if the path matches the request path.","s":"UpstreamConfig","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#upstreamconfig","p":492},{"i":550,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive","s":"Endpoints","u":"/oauth2-proxy/docs/7.3.x/features/endpoints","h":"","p":549},{"i":552,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.","s":"Sign out","u":"/oauth2-proxy/docs/7.3.x/features/endpoints","h":"#sign-out","p":549},{"i":554,"t":"This endpoint returns 202 Accepted response or a 401 Unauthorized response. It can be configured using the following query parameters query parameters: allowed_groups: comma separated list of allowed groups allowed_email_domains: comma separated list of allowed email domains allowed_emails: comma separated list of allowed emails","s":"Auth","u":"/oauth2-proxy/docs/7.3.x/features/endpoints","h":"#auth","p":549},{"i":556,"t":"There are two recommended configurations: At OAuth2 Proxy At Reverse Proxy","s":"TLS Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/tls","h":"","p":555},{"i":558,"t":"Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... With this configuration approach the customization of the TLS settings is limited. The minimal acceptable TLS version can be set with --tls-min-version=TLS1.3. The defaults set TLS1.2 as the minimal version. Regardless of the minimum version configured, TLS1.3 is currently always used as the maximal version. The server side cipher suites are the defaults from crypto/tls of the currently used go version for building oauth2-proxy.","s":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/7.3.x/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":555},{"i":560,"t":"Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or ... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/7.3.x/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":555},{"i":562,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure ADFS Facebook GitHub Keycloak GitLab LinkedIn Microsoft Azure AD OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket Gitea The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"","p":561},{"i":564,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"API Manager\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account: https://developers.google.com/identity/protocols/OAuth2ServiceAccount and make sure to download the json file. Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ).","s":"Google Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#google-auth-provider","p":561},{"i":566,"t":"Add an application: go to https://portal.azure.com, choose \"Azure Active Directory\" in the left menu, select \"App registrations\" and then click on \"New app registration\". Pick a name and choose \"Webapp / API\" as application type. Use https://internal.yourcompany.com as Sign-on URL. Click \"Create\". On the \"Settings\" / \"Properties\" page of the app, pick a logo and select \"Multi-tenanted\" if you want to allow users from multiple organizations to access your app. Note down the application ID. Click \"Save\". On the \"Settings\" / \"Required Permissions\" page of the app, click on \"Windows Azure Active Directory\" and then on \"Access the directory as the signed in user\". Hit \"Save\" and then then on \"Grant permissions\" (you might need another admin to do this). On the \"Settings\" / \"Reply URLs\" page of the app, add https://internal.yourcompanycom/oauth2/callback for each host that you want to protect by the oauth2 proxy. Click \"Save\". On the \"Settings\" / \"Keys\" page of the app, add a new key and note down the value after hitting \"Save\". Configure the proxy with --provider=azure --client-id= --client-secret= --oidc-issuer-url=https://sts.windows.net/{tenant-id}/ Note: When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#azure-auth-provider","p":561},{"i":568,"t":"Open the ADFS administration console on your Windows Server and add a new Application Group Provide a name for the integration, select Server Application from the Standalone applications section and click Next Follow the wizard to get the client-id, client-secret and configure the application credentials Configure the proxy with --provider=adfs --client-id= --client-secret= Note: When using the ADFS Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"ADFS Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#adfs-auth-provider","p":561},{"i":570,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":561},{"i":572,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to login even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to login with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#github-auth-provider","p":561},{"i":574,"t":"note This is the legacy provider for Keycloak, use Keycloak OIDC Auth Provider if possible. Create new client in your Keycloak realm with Access Type 'confidental' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: --provider=keycloak --client-id= --client-secret= --login-url=\"http(s):///auth/realms//protocol/openid-connect/auth\" --redeem-url=\"http(s):///auth/realms//protocol/openid-connect/token\" --profile-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --validate-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --keycloak-group= --keycloak-group= For group based authorization, the optional --keycloak-group (legacy) or --allowed-group (global standard) flags can be used to specify which groups to limit access to. If these are unset but a groups mapper is set up above in step (3), the provider will still populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response. The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":561},{"i":576,"t":"Create new client in your Keycloak realm with Access Type 'confidental', Client protocol 'openid-connect' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Create a mapper with Mapper Type 'Audience' and Included Client Audience and Included Custom Audience set to your client name. Make sure you set the following to the appropriate url: --provider=keycloak-oidc --client-id= --client-secret= --redirect-url=https://myapp.com/oauth2/callback --oidc-issuer-url=https:///realms/ --allowed-role= // Optional, required realm role --allowed-role=: // Optional, required client role","s":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":561},{"i":578,"t":"This auth provider has been tested against Gitlab version 12.X. Due to Gitlab API changes, it may not work for version prior to 12.X (see 994). Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. If you need projects filtering, add the extra read_api scope to your application. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\" If your self-hosted GitLab is on a sub-directory (e.g. domain.tld/gitlab), as opposed to its own sub-domain (e.g. gitlab.domain.tld), you may need to add a redirect from domain.tld/oauth pointing at e.g. domain.tld/gitlab/oauth.","s":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":561},{"i":580,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":561},{"i":582,"t":"For adding an application to the Microsoft Azure AD follow these steps to add an application. Take note of your TenantId if applicable for your situation. The TenantId can be used to override the default common authorization server with a tenant specific server.","s":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":561},{"i":584,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex and we will use it as an example. The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta, an example can be found below. Dex​ To configure the OIDC provider for Dex, perform the following steps: Download Dex: go get github.com/dexidp/dex See the getting started guide for more details. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Add a configuration block to the staticClients section of examples/config-dev.yaml: - id: oauth2-proxyredirectURIs:- 'http://127.0.0.1:4180/oauth2/callback'name: 'oauth2-proxy'secret: proxy Launch Dex: from $GOPATH/github.com/dexidp/dex, run: bin/dex serve examples/config-dev.yaml In a second terminal, run the oauth2-proxy with the following args: -provider oidc-provider-display-name \"My OIDC Provider\"-client-id oauth2-proxy-client-secret proxy-redirect-url http://127.0.0.1:4180/oauth2/callback-oidc-issuer-url http://127.0.0.1:5556/dex-cookie-secure=false-cookie-secret=secret-email-domain kilgore.trout To serve the current working directory as a web site under the /static endpoint, add: -upstream file://$PWD/#/static/ Test the setup by visiting http://127.0.0.1:4180 or http://127.0.0.1:4180/static . See also our local testing environment for a self-contained example using Docker and etcd as storage for Dex. Okta​ To configure the OIDC provider for Okta, perform the following steps: Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com . The client_id and client_secret are configured in the application settings. Generate a unique cookie_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#openid-connect-provider","p":561},{"i":586,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048 bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost', The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"login.gov Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#logingov-provider","p":561},{"i":588,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to setup the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#nextcloud-provider","p":561},{"i":590,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":561},{"i":592,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who has access to one selected repository use --bitbucket-repository=.","s":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":561},{"i":594,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1\"","s":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":561},{"i":596,"t":"To authorize by email domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#email-authentication","p":561},{"i":598,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":561},{"i":600,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"","p":599},{"i":602,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_'; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#generating-a-cookie-secret","p":599},{"i":604,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#config-file","p":599},{"i":606,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --code-challenge-method string use PKCE code challenges with the specified method. Either 'plain' or 'S256' (recommended) --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --custom-templates-dir string path to custom html templates --custom-sign-in-logo string path or a URL to an custom image for the sign_in page logo. Use \\\"-\\\" to disable default logo. --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --force-json-errors bool force JSON errors instead of HTTP error pages or redirects false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --gitlab-projects string | list restrict logins to members of any of these projects (may be given multiple times) formatted as orgname/repo=accesslevel. Access level should be a value matching Gitlab access levels, defaulted to 20 if absent --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -B for bcrypt encryption --htpasswd-user-group string | list the groups to be set on sessions for htpasswd users --http-address string [http://]: or unix:// to listen on for HTTP clients. Square brackets are required for ipv6 address, e.g. http://[::1]:4180 \"127.0.0.1:4180\" --https-address string [https://]: to listen on for HTTPS clients. Square brackets are required for ipv6 address, e.g. https://[::1]:443 \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --insecure-oidc-skip-nonce bool skip verifying the OIDC ID Token's nonce claim true --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --oidc-email-claim string which OIDC claim contains the user's email \"email\" --oidc-groups-claim string which OIDC claim contains the user groups \"groups\" --oidc-audience-claim string which OIDC claim contains the audience \"aud\" --oidc-extra-audience string | list additional audiences which are allowed to pass verification \"[]\" --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Groups, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --metrics-address string the address prometheus metrics will be scraped from \"\" --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --request-id-header string Request header to use as the request ID in logging X-Request-Id --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted and allows X-Forwarded-{Proto,Host,Uri} headers to be used on redirect selection false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Groups, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --show-debug-on-error bool show detailed error information on error pages (WARNING: this may contain sensitive information - do not use in production) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping endpoint false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string | list (DEPRECATED for --skip-auth-route) bypass authentication for requests paths that match (may be given multiple times) --skip-auth-route string | list bypass authentication for requests that match the method & path. Format: method=path_regex OR path_regex alone for all methods --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy true --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-key-file string path to private key file --tls-min-version string minimum TLS version that is acceptable, either \"TLS1.2\" or \"TLS1.3\" \"TLS1.2\" --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --upstream-timeout duration maximum amount of time the server will wait for a response from the upstream 30s --allowed-group string | list restrict logins to members of this group (may be given multiple times) --allowed-role string | list restrict logins to users with this role (may be given multiple times). Only works with the keycloak-oidc provider. --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . or a *. to allow subdomains (e.g. .example.com, *.example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. [1]: Only these providers support --cookie-refresh: GitLab, Google and OIDC [2]: When using the whitelist-domain option, any domain prefixed with a . or a *. will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URL's protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*. See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#command-line-options","p":599},{"i":608,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#upstreams-configuration","p":599},{"i":610,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside of a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#environment-variables","p":599},{"i":612,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) can be disabled with --silence-ping-logging reducing log volume. This flag appends the --ping-path to --exclude-logging-paths.","s":"Logging Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#logging-configuration","p":599},{"i":614,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Message Authenticated via OAuth2 The details of the auth attempt. Protocol HTTP/1.0 The request protocol. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details.","s":"Auth Log Format","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#auth-log-format","p":599},{"i":616,"t":"HTTP request logs will output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#request-log-format","p":599},{"i":618,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#standard-log-format","p":599},{"i":620,"t":"The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\".","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":599},{"i":622,"t":"This option requires --reverse-proxy option to be set.","s":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":599},{"i":624,"t":"The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration: http: routers: a-service: rule: \"Host(`a-service.example.com`)\" service: a-service-backend middlewares: - oauth-errors - oauth-auth tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth: rule: \"Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true oauth-errors: errors: status: - \"401-403\" service: oauth-backend query: \"/oauth2/sign_in\"","s":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":599},{"i":626,"t":"Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint Following options need to be set on oauth2-proxy: --upstream=static://202: Configures a static response for authenticated sessions --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly http: routers: a-service-route-1: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)\" service: a-service-backend middlewares: - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" a-service-route-2: rule: \"Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)\" service: a-service-backend middlewares: - oauth-auth-wo-redirect # unauthenticated session will return a 401 tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services-oauth2-route: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth2-proxy-route: rule: \"Host(`oauth.example.com`) && PathPrefix(`/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 b-service-backend: loadBalancer: servers: - url: http://172.16.0.3:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth-redirect: forwardAuth: address: https://oauth.example.com/ trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization oauth-auth-wo-redirect: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":599}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/477",[0,3.128,1,5.028,2,3.406,3,6.496,4,6.496,5,2.906,6,4.162,7,4.344,8,3.406,9,3.406,10,1.297,11,2.424,12,4.344,13,5.78,14,4.344,15,4.344,16,4.344,17,5.028,18,0.612,19,3.406,20,3.406,21,4.344,22,1.26,23,5.78,24,4.344,25,4.344,26,4.344,27,1.912,28,3.779,29,3.779,30,4.344,31,4.344,32,1.625,33,3.779,34,2.014,35,2.906,36,2.563,37,4.344,38,4.344,39,1.2,40,2.721,41,2.19,42,2.721,43,4.344,44,4.344,45,4.344,46,4.344,47,3.779,48,2.09,49,3.406,50,1.69,51,1.833,52,1.04,53,0.907,54,1.759,55,2.09,56,2.09,57,0.975,58,2.301,59,1.833,60,3.621,61,3.779,62,1.564,63,1.912,64,2.424]],["t/479",[10,1.34,18,0.43,22,1.158,39,1.153,50,1.776,52,1.075,62,1.643,65,2.49,66,1.582,67,2.693,68,2.418,69,3.523,70,1.643,71,3.97,72,3.054,73,3.054,74,2.324,75,2.542,76,1.524,77,1.365,78,3.995,79,2.809,80,2.547,81,3.97,82,2.19,83,1.849,84,4.564,85,1.603,86,4.564,87,2.547,88,1.582,89,4.564,90,4.564,91,3.054,92,2.196,93,2.547,94,4.564,95,2.547,96,2.859,97,3.054,98,3.333,99,3.164,100,2.859,101,0.821,102,2.859,103,1.849,104,1.582,105,2.302,106,3.054,107,1.849,108,3.054,109,3.287,110,3.054]],["t/481",[22,1.141,53,1.228,111,1.824,112,5.883,113,4.169,114,4.613,115,3.685,116,4.613,117,2.83,118,3.935,119,5.883,120,5.117,121,4.236,122,5.883,123,3.935,124,3.283,125,4.613,126,5.883,127,5.883]],["t/483",[18,0.451,22,1.194,34,1.484,42,2.999,53,1.285,92,2.303,95,2.672,106,3.202,108,3.202,114,4.83,121,4.436,123,3.202,128,4.787,129,5.358,130,5.358,131,2.414,132,5.638,133,3.447,134,5.924,135,4.164,136,3.634,137,4.787,138,3.859,139,4.787,140,2.536,141,4.164,142,2.999,143,4.787,144,4.787,145,4.787,146,2.824,147,4.164,148,1.598,149,3.754,150,2.414,151,3.263,152,4.787,153,4.787,154,4.787,155,4.787,156,4.787,157,4.787,158,4.164,159,3.754,160,4.787,161,4.787,162,3.754,163,3.754,164,1.484]],["t/485",[6,4.461,18,0.584,32,1.807,108,3.231,114,3.787,121,3.478,130,5.389,134,5.389,135,4.201,136,3.655,140,3.623,142,3.026,151,2.559,159,6.086,164,1.498,165,6.839,166,6.195,167,6.195,168,2.324,169,3.478,170,4.83,171,4.83,172,4.83,173,4.83,174,4.201,175,3.478,176,4.83,177,3.787,178,4.83,179,4.83,180,6.195,181,2.126,182,1.739,183,2.221,184,4.83,185,4.83,186,4.83,187,4.83,188,4.83,189,4.83,190,4.83,191,4.83,192,4.83]],["t/487",[18,0.515,22,1.06,27,2.947,53,1.141,65,2.045,66,1.894,74,3.011,75,2.41,77,1.634,82,1.695,85,1.467,92,2.629,99,3.546,100,3.424,162,4.286,183,2.513,193,3.936,194,6.694,195,3.936,196,2.513,197,3.424,198,3.225,199,3.225,200,3.95,201,1.226,202,1.695]],["t/489",[18,0.564,22,1.294,40,2.871,53,1.392,65,2.241,74,2.752,75,2.709,82,1.421,85,1.23,99,3.173,101,0.825,104,1.589,131,2.311,183,2.108,198,3.533,199,3.935,200,4.173,202,1.421,203,4.803,204,4.584,205,2.311,206,1.995,207,6.152,208,4.584,209,1.322,210,4.584,211,4.584,212,4.584,213,4.584,214,4.584,215,2.428,216,3.987,217,4.584,218,4.584,219,1.275,220,3.987,221,3.301,222,4.584,223,4.584,224,3.987,225,3.987,226,3.066,227,4.584,228,3.594,229,3.987]],["t/491",[18,0.651,27,1.521,52,1.036,53,0.721,55,1.662,74,2.767,75,2.072,76,1.647,79,1.458,85,0.927,95,1.928,99,3.852,100,4.946,101,0.622,110,3.852,111,1.071,121,2.488,147,3.005,149,2.709,163,2.709,199,3.397,200,2.911,202,1.071,205,1.742,206,1.033,209,0.996,219,1.602,221,4.146,230,3.301,231,4.935,232,5.757,233,2.488,234,1.197,235,5.757,236,3.454,237,3.005,238,4.935,239,4.935,240,4.293,241,3.554,242,3.454,243,3.606,244,3.454,245,3.454,246,3.301,247,3.005,248,3.454,249,2.488,250,3.454,251,1.662,252,2.374,253,3.454,254,2.311,255,3.454,256,3.005,257,1.588,258,3.005,259,4.514,260,3.327,261,1.545,262,3.454,263,5.008,264,2.038,265,4.935,266,2.691,267,3.091,268,4.293,269,3.454,270,1.521,271,4.935,272,3.454,273,3.454]],["t/493",[10,1.546,11,2.395,18,0.54,34,1.778,52,1.38,54,1.738,57,1.449,76,1.914,101,0.772,102,2.689,103,1.738,109,3.091,131,2.164,132,4.496,138,3.592,164,1.331,168,2.065,182,2.064,266,1.738,274,3.734,275,4.317,276,1.89,277,3.366,278,4.611,279,4.496,280,4.292,281,3.734,282,2.065,283,4.292,284,3.383,285,3.366,286,2.871,287,4.292,288,4.292,289,2.871,290,3.734,291,3.734,292,3.734,293,2.871,294,2.843,295,3.366,296,5.617,297,2.871,298,3.366,299,2.871,300,4.292,301,2.395,302,3.421,303,3.836,304,2.689,305,3.366,306,3.366,307,2.689,308,3.734,309,3.734,310,4.292]],["t/495",[18,0.685,27,2.431,34,2.089,39,0.957,52,0.994,54,2.728,57,1.511,80,3.082,111,1.712,125,4.33,182,1.988,205,2.784,266,2.728,278,4.863,285,4.33,286,3.694,294,2.431,297,3.694,301,3.082,302,3.568,303,3.694,311,3.694,312,2.236,313,3.976]],["t/497",[18,0.587,22,1.404,34,1.511,41,3.142,52,1.236,53,1.511,54,3.15,57,1.624,105,2.457,111,1.511,182,2.754,266,1.974,278,4.843,286,4.168,293,3.26,294,2.743,297,3.26,299,4.168,314,5.676,315,6.231,316,2.72,317,4.239,318,3.821,319,3.821,320,4.873]],["t/499",[18,0.485,22,0.998,27,1.614,32,1.371,39,1.117,41,1.848,52,0.66,53,0.765,54,2.409,57,1.447,58,1.942,59,1.547,60,2.296,66,2.354,69,3.036,70,1.853,76,1.224,77,1.539,78,3.443,85,1.381,91,2.452,101,1.161,103,1.485,106,2.452,125,2.874,136,2.163,148,1.224,151,1.942,164,1.137,206,1.778,209,1.057,219,1.02,251,1.763,252,2.476,266,1.485,278,3.979,286,2.452,293,2.452,321,3.665,322,3.665,323,2.874,324,3.665,325,1.763,326,3.665,327,3.665,328,2.874,329,3.665,330,3.665,331,4.283,332,3.665,333,1.319,334,3.665,335,3.665,336,2.476,337,3.665,338,3.665,339,3.665,340,3.665,341,3.188,342,3.665,343,3.665,344,2.874,345,3.665,346,3.665,347,3.665,348,3.665,349,2.452,350,3.665,351,2.874,352,3.665,353,1.179,354,3.665,355,2.046,356,3.665,357,2.296,358,3.665,359,2.874,360,3.665,361,1.942,362,3.188,363,3.188,364,3.665,365,3.188,366,3.665,367,3.665,368,3.665,369,3.665,370,3.665,371,3.665,372,2.874,373,3.665,374,2.046,375,3.188,376,1.614,377,2.046,378,2.452,379,2.296,380,2.046,381,2.046,382,2.874,383,3.665,384,2.296]],["t/502",[39,1.054,69,3.588,105,3.067,201,1.365,234,2.108,353,1.956,361,3.222,385,1.818,386,1.692,387,1.575,388,6.081,389,3.81,390,3.394,391,6.081,392,4.068]],["t/504",[0,3.443,6,2.381,18,0.701,22,1.266,27,1.456,39,1.066,52,1.338,53,0.69,57,1.26,64,1.845,65,1.789,77,0.989,82,1.742,85,1.283,101,0.861,103,2.275,104,2.638,107,2.493,109,2.381,118,2.212,131,1.667,140,2.533,141,4.159,150,1.667,174,2.876,183,1.52,193,3.443,195,2.381,196,2.83,201,0.742,219,1.33,234,2.133,251,2.3,256,2.876,274,2.876,276,1.456,278,3.758,279,2.593,284,1.951,289,2.212,296,4.886,301,1.845,304,2.071,308,4.159,309,4.159,312,1.339,333,1.19,386,0.92,387,0.856,393,2.876,394,3.306,395,2.876,396,4.405,397,3.306,398,3.306,399,2.876,400,2.071,401,4.782,402,3.306,403,2.995,404,4.782,405,2.995,406,1.591,407,3.306,408,2.876,409,3.306,410,2.876,411,2.381,412,3.306,413,3.306,414,3.443,415,3.306,416,2.411,417,3.75,418,4.782,419,4.159,420,4.159,421,4.782,422,2.533,423,2.995,424,4.782,425,3.306]],["t/506",[39,1.042,201,1.349,234,2.084,374,3.356,385,1.798,386,1.673,387,1.557,426,5.607,427,1.798,428,4.716,429,5.56,430,5.231,431,6.014]],["t/508",[39,1.014,85,1.57,101,1.255,146,4.397,201,1.313,333,2.106,353,2.244,385,1.749,386,1.628,387,1.515,427,2.086,432,3.208,433,2.815,434,4.986]],["t/510",[18,0.481,57,1.145,70,2.309,74,2.496,76,1.704,77,1.526,107,2.067,131,2.574,201,1.145,234,2.629,314,4.002,331,4.62,385,1.526,386,1.42,387,1.322,427,1.918,435,3.675,436,4.44,437,3.675,438,4.321,439,4.44,440,4.396,441,4.44,442,4.44,443,4.44,444,3.414,445,5.581,446,3.675,447,4.44,448,4.002,449,3.011,450,4.44,451,4.002]],["t/512",[10,1.226,32,2.045,40,3.424,57,1.226,103,2.214,110,3.656,117,3.221,118,3.656,123,3.656,215,2.895,385,1.634,427,2.164,452,4.286,453,5.249,454,5.466,455,4.286,456,5.466,457,5.466,458,5.466,459,6.694,460,5.466,461,5.466,462,5.466,463,5.466,464,5.466,465,5.249,466,4.754,467,5.466,468,5.466]],["t/514",[18,0.474,35,3.367,39,0.872,77,1.505,79,2.942,85,1.871,101,1.255,146,4.321,169,4.579,201,1.129,257,2.314,333,1.812,353,2.243,385,1.505,386,1.4,387,1.303,427,2.259,432,3.206,433,3.059,434,4.664,449,2.969,469,5.467,470,3.946,471,4.579,472,5.032,473,3.946,474,5.032,475,3.946]],["t/516",[39,1.025,101,1.064,113,4.179,201,1.327,353,2.258,385,1.769,386,1.646,387,1.532,427,2.099,432,3.228,433,3.378,476,3.296]],["t/518",[39,0.972,101,1.009,197,3.513,201,1.258,312,2.271,353,1.804,380,3.795,385,1.677,386,1.56,387,1.452,427,2.188,432,2.579,433,2.698,476,3.222,477,6.8,478,3.513,479,4.397,480,3.308,481,4.397,482,6.8,483,3.513,484,4.038,485,3.513]],["t/520",[18,0.472,57,1.124,65,2.603,68,2.654,76,2.322,101,0.901,103,2.029,105,2.526,107,3.207,131,2.526,150,2.526,201,1.124,234,2.534,246,3.351,276,2.205,304,3.138,344,3.928,385,1.498,386,1.394,387,1.297,389,3.138,392,3.351,406,2.41,427,1.498,435,3.607,486,3.138,487,3.928,488,5.009,489,6.34,490,3.351,491,3.138,492,5.009,493,5.009,494,5.009,495,5.009,496,5.009,497,5.009,498,5.009]],["t/522",[18,0.428,34,1.409,57,1.02,58,2.408,59,1.918,70,2.144,74,1.769,76,1.988,107,2.691,201,1.02,219,1.265,234,2.746,243,2.847,276,2.001,282,2.187,312,1.841,314,3.564,331,4.289,385,1.359,386,1.265,387,1.177,403,2.847,427,2.188,435,3.273,438,4.084,439,3.954,440,4.161,441,3.954,442,3.954,443,3.954,444,3.041,445,5.181,446,3.273,447,3.954,448,3.564,449,2.682,450,3.954,451,3.564,486,2.847,499,3.564,500,3.041,501,3.273,502,4.784,503,3.273,504,5.181,505,5.181]],["t/524",[18,0.537,27,2.508,39,1.189,85,1.529,201,1.278,353,2.208,376,2.508,381,3.179,385,1.703,386,1.585,387,1.475,427,2.053,432,3.157,433,2.74,476,3.244,506,3.831,507,4.955,508,5.778]],["t/526",[18,0.633,34,1.704,39,0.952,62,1.977,78,4.492,142,4.207,201,1.233,215,3.557,251,3.231,294,2.956,312,2.225,333,1.977,385,1.643,386,1.528,387,1.423,427,2.169,509,6.715,510,5.266,511,6.715,512,6.715,513,3.956,514,4.779]],["t/528",[10,1.394,18,0.412,39,0.758,41,1.477,52,0.527,57,1.303,62,1.054,63,1.926,66,2.259,67,1.728,68,2.318,76,2.255,77,2.077,83,1.772,92,2.794,101,1.045,111,0.908,148,0.978,150,1.477,159,4.554,175,3.15,201,0.982,202,2.275,215,1.552,233,2.11,234,2.649,252,2.105,257,2.998,261,1.174,294,1.29,297,1.96,313,2.11,353,1.407,375,2.548,385,0.876,386,0.815,387,0.759,390,4.034,395,2.548,427,1.858,432,1.347,499,3.43,515,2.297,516,3.885,517,4.106,518,5.406,519,2.297,520,5.807,521,2.929,522,2.548,523,2.929,524,2.297,525,2.929,526,1.96,527,2.929,528,2.929,529,2.929,530,3.805,531,4.375,532,2.929,533,2.929,534,3.805,535,2.929,536,1.409,537,2.929,538,1.772,539,2.929,540,3.43,541,4.375,542,1.96,543,3.77,544,2.929,545,2.929,546,5.236,547,2.929,548,4.375,549,1.635,550,2.929,551,2.929,552,2.929,553,2.297,554,2.929,555,2.929,556,2.297,557,2.929,558,3.43,559,2.297,560,2.297,561,2.297,562,2.929,563,2.929,564,2.548,565,2.929,566,2.929,567,2.929]],["t/530",[6,2.448,10,0.763,18,0.46,35,3.264,36,2.006,39,0.589,50,1.898,66,1.178,68,1.801,69,3.367,77,1.459,79,2.408,85,1.532,101,1.274,140,1.801,148,1.905,150,1.714,164,1.934,201,0.763,202,1.513,206,1.459,216,2.957,233,2.448,241,2.448,260,2.585,276,2.512,284,2.006,355,1.897,376,2.148,385,1.017,386,0.946,387,0.88,389,3.906,392,4.417,400,2.13,427,2.117,438,3.835,476,1.497,507,4.964,513,2.448,526,2.275,536,1.636,568,4.879,569,2.878,570,3.367,571,4.879,572,2.957,573,4.879,574,3.4,575,2.957,576,3.4,577,4.879,578,4.475,579,3.513,580,3.4,581,4.879,582,2.957,583,4.964,584,3.4,585,4.244,586,3.4,587,3.4,588,3.4,589,3.4,590,3.4,591,2.666,592,3.4,593,4.879,594,2.666,595,2.448,596,3.4,597,4.879,598,3.4,599,4.879,600,3.4,601,4.879,602,3.4,603,4.879,604,3.4,605,4.879,606,3.4,607,2.957,608,4.879,609,3.056,610,2.448,611,3.4]],["t/532",[11,1.567,18,0.481,32,1.05,39,1.341,41,1.416,50,2.374,52,1.307,62,2.046,66,0.973,76,1.704,79,1.788,82,0.871,83,2.067,85,0.754,101,1.023,105,1.416,150,2.137,164,1.583,201,0.951,202,1.314,206,1.526,219,1.179,228,2.201,230,1.878,234,1.769,246,1.878,254,1.878,257,1.291,260,1.487,261,1.137,275,1.759,312,1.137,316,1.567,333,1.525,349,1.878,351,2.201,353,1.642,357,1.759,359,3.323,361,2.704,374,1.567,376,1.865,377,2.365,378,1.878,379,1.759,380,2.365,381,1.567,385,0.839,386,0.781,387,0.727,390,1.567,400,3.197,403,1.759,423,1.759,427,2.249,432,1.291,433,1.351,476,1.236,499,2.201,515,4.002,518,2.442,612,7.151,613,4.237,614,4.237,615,5.104,616,4.237,617,2.808,618,4.237,619,2.808,620,4.237,621,2.808,622,4.237,623,2.808,624,3.051,625,4.237,626,2.808,627,4.237,628,2.808,629,2.808,630,4.237,631,2.808,632,4.237,633,2.808,634,4.237,635,2.808,636,2.808,637,2.808,638,4.237,639,2.808,640,2.808,641,2.442,642,2.808,643,2.442,644,2.808,645,2.808,646,2.808,647,2.442,648,4.237,649,2.808,650,2.442,651,4.237,652,4.237,653,2.442,654,4.237,655,2.808,656,4.237,657,4.237,658,2.808,659,1.878,660,2.442,661,2.022]],["t/534",[18,0.534,32,2.12,39,1.186,57,1.535,136,3.343,201,1.271,376,3.012,377,3.162,378,3.791,379,3.55,380,3.162,381,3.819,385,1.694,427,1.694,452,4.443,549,3.162,624,4.081,643,4.929,662,5.666,663,4.929,664,4.929,665,4.443,666,4.081,667,4.443]],["t/536",[39,1.334,304,3.966,385,1.893,452,4.964,668,5.507,669,5.507]],["t/538",[34,1.637,58,2.796,59,2.228,76,1.762,92,2.539,117,2.539,131,2.662,201,1.184,219,1.823,234,2.655,243,3.307,276,2.324,303,3.531,312,2.138,385,1.578,386,1.469,387,1.367,400,3.307,403,3.307,422,2.796,427,2.131,435,3.801,436,4.592,446,3.801,487,4.139,501,3.801,502,5.131,503,3.801,504,5.699,505,5.699,670,5.279]],["t/540",[10,1.658,52,1.161,101,1.161,104,2.442,140,2.73,201,1.156,205,2.598,251,2.479,276,2.268,304,3.228,385,1.541,386,1.434,387,1.334,414,3.71,419,5.614,420,5.614,422,3.913,423,3.228,427,1.93,437,3.71,486,3.228,536,3.105,671,4.648,672,6.454,673,6.454,674,4.648,675,5.153,676,5.153,677,5.153]],["t/542",[34,1.99,42,4.396,48,2.455,57,1.145,93,2.848,101,0.918,104,1.769,198,3.785,201,1.145,205,2.574,251,3.542,259,4.002,276,2.247,385,1.526,386,1.42,387,1.322,422,4.163,423,4.019,427,1.526,437,3.675,446,4.62,678,5.031,679,6.416,680,6.416,681,5.031,682,6.416,683,5.104,684,4.002,685,5.104]],["t/544",[10,1.394,32,1.815,41,2.446,62,1.746,66,2.153,68,3.291,72,3.246,175,3.494,201,1.089,234,2.693,261,1.302,264,2.862,353,1.561,374,2.708,385,1.451,386,1.35,387,1.256,390,3.825,417,3.804,427,1.858,486,3.039,490,3.246,491,3.039,515,3.804,516,3.246,517,3.804,534,5.404,540,5.374,543,4.935,564,4.22,595,3.494,686,3.804,687,4.22,688,4.852,689,4.22,690,4.852,691,4.852,692,4.852,693,3.804,694,4.852,695,4.22,696,4.852,697,4.852]],["t/546",[18,0.571,22,1.092,52,0.496,53,0.575,57,0.938,65,2.663,68,3.375,69,1.627,77,1.25,82,0.855,83,1.117,85,0.74,95,1.539,98,1.539,101,0.496,103,3.005,104,2.098,107,1.117,124,2.333,131,1.39,151,1.461,158,2.398,164,1.296,175,1.986,195,1.986,196,1.268,201,0.619,233,1.986,234,0.956,246,1.845,261,0.74,282,1.326,293,2.796,301,1.539,312,3.036,323,2.162,325,1.326,328,2.162,385,0.824,386,0.767,387,0.714,389,3.529,392,1.845,396,2.162,399,2.398,405,3.793,406,3.28,414,1.986,422,1.461,427,1.684,440,2.618,453,3.959,455,2.162,486,1.727,490,2.796,491,1.727,506,2.333,540,2.162,578,2.162,641,2.398,659,1.845,698,2.757,699,2.757,700,2.757,701,2.398,702,2.757,703,2.757,704,4.18,705,5.048,706,2.757,707,4.18,708,2.757,709,4.18,710,5.048,711,2.398,712,5.633,713,4.18,714,2.757,715,2.757,716,2.757,717,2.757,718,2.757,719,2.757,720,2.757,721,2.757,722,2.757,723,2.011,724,2.757,725,2.757,726,2.757,727,2.757,728,2.757,729,2.757,730,2.757,731,2.757,732,2.757,733,2.757,734,2.757,735,4.18,736,2.757,737,2.757,738,2.757,739,2.757,740,2.757,741,5.048,742,2.757,743,2.398,744,2.757,745,2.757,746,5.048,747,2.162,748,2.398,749,2.757,750,4.18,751,2.398,752,2.757,753,2.757,754,1.845,755,3.01,756,4.18,757,2.757,758,2.466,759,4.18,760,2.398,761,2.757,762,3.636,763,2.162,764,2.398,765,2.162]],["t/548",[10,1.214,22,1.049,52,0.974,65,2.024,66,1.875,68,2.866,77,1.618,88,1.875,103,3.223,104,1.875,201,1.214,261,1.452,304,3.39,312,2.918,385,1.618,386,1.505,387,1.401,389,3.39,396,4.243,486,3.39,526,3.62,668,4.707,669,4.707,766,6.653,767,4.707,768,5.411,769,5.411,770,5.411]],["t/550",[18,0.664,22,1.216,41,2.043,47,4.797,50,2.44,52,0.729,53,1.151,54,1.641,59,1.709,62,2.257,64,2.261,72,2.71,74,2.146,75,1.985,80,2.261,82,1.256,85,1.087,88,1.404,93,2.261,96,2.537,97,2.71,98,3.756,103,1.641,106,2.71,120,3.523,148,1.352,193,2.917,202,1.256,209,1.168,215,2.146,257,1.863,261,1.89,275,3.454,284,2.39,294,1.783,295,3.176,312,1.641,313,2.917,353,1.303,406,3.238,428,3.176,440,3.454,484,2.917,517,3.176,536,2.653,671,2.917,674,2.917,693,3.176,747,4.324,771,3.523,772,4.051,773,4.051,774,2.71,775,4.051,776,3.176,777,3.523,778,5.454,779,3.523,780,3.523,781,3.176,782,4.051,783,2.917,784,5.515,785,3.523,786,5.515,787,3.523,788,2.71,789,2.71,790,4.051,791,2.917,792,2.917,793,3.176]],["t/552",[18,0.409,39,1.001,51,1.833,52,0.782,53,0.907,57,0.975,62,1.564,63,1.912,65,2.163,70,2.081,73,2.906,74,1.69,75,1.564,82,1.792,85,1.859,87,2.424,88,2.664,91,3.867,105,2.19,107,1.759,109,3.128,151,2.301,215,3.062,229,3.779,243,2.721,261,1.551,264,2.563,270,1.912,275,2.721,286,2.906,292,3.779,307,2.721,316,2.424,333,1.564,353,1.397,376,3.049,390,2.424,516,2.906,524,3.406,526,2.906,538,2.341,556,3.406,579,3.128,783,4.162,785,5.028,794,3.406,795,4.344,796,4.344,797,3.128,798,4.344,799,4.344,800,4.344,801,4.344,802,2.424,803,4.344,804,4.344,805,4.344,806,4.344,807,4.344,808,3.779,809,3.128,810,4.344,811,3.779]],["t/554",[18,0.518,52,0.989,62,1.977,77,2.169,93,3.066,96,3.441,97,3.675,98,3.066,148,2.242,150,3.657,209,1.584,390,3.748,406,3.231,476,2.418,516,4.492,538,2.225,792,3.956,812,5.493,813,4.852,814,4.852,815,5.493,816,5.493]],["t/556",[22,1.422,52,1.146,53,1.329,817,4.994,818,4.586,819,3.757]],["t/558",[5,3.826,9,3.352,10,1.74,11,2.386,18,0.539,22,1.334,39,0.991,42,4.493,52,1.238,53,1.436,55,2.057,56,2.057,60,2.678,75,2.059,93,2.386,101,1.16,104,1.482,148,1.427,164,1.326,202,1.773,206,1.71,207,3.719,219,1.591,251,2.751,306,3.352,416,2.156,422,3.993,522,3.719,678,4.485,681,4.485,684,3.352,820,3.352,821,5.719,822,5.719,823,3.719,824,3.719,825,3.719,826,4.275,827,2.86,828,3.079,829,3.719,830,4.275,831,3.719,832,4.275,833,3.719,834,4.275,835,4.275,836,4.275,837,4.275]],["t/560",[10,1.739,18,0.544,22,1.343,39,0.602,51,1.467,52,0.892,53,1.39,54,2.008,55,1.673,56,1.673,60,3.946,62,1.251,63,2.544,64,3.224,65,1.855,75,1.784,82,1.078,103,1.408,104,1.205,107,1.408,111,1.078,140,2.626,148,1.161,164,1.078,196,2.28,202,1.537,206,1.482,209,1.003,219,1.379,249,2.504,252,1.673,260,1.842,270,1.531,302,1.842,306,2.726,325,2.385,380,2.767,408,4.312,416,1.753,437,4.161,754,2.326,765,3.887,802,2.767,819,2.051,820,2.726,823,3.024,824,3.024,825,3.024,838,4.957,839,4.957,840,3.024,841,4.312,842,5.778,843,4.536,844,2.726,845,3.477,846,3.477,847,3.477,848,3.887,849,3.887,850,3.477,851,2.726,852,4.312,853,4.957,854,3.477,855,3.477,856,3.024,857,3.477,858,3.477,859,3.477,860,3.477,861,3.477,862,3.024,863,2.726,864,3.477,865,2.726,866,3.024,867,2.726,868,5.026,869,2.178,870,2.326,871,3.024,872,4.312,873,3.477,874,3.477,875,3.477,876,3.024]],["t/562",[5,3.29,10,1.103,18,0.463,22,0.954,32,1.84,39,1.35,48,2.366,49,3.856,50,1.914,51,2.075,52,1.128,53,1.026,88,1.704,105,2.48,111,1.525,132,3.856,136,3.697,202,1.525,234,1.704,260,3.32,270,2.165,295,3.856,316,3.497,377,3.497,378,3.29,379,3.081,380,3.497,381,2.745,411,3.541,416,2.48,438,3.497,538,1.992,569,3.697,624,3.541,663,4.278,664,4.278,665,3.856,666,3.541,667,3.856,877,4.918,878,4.278,879,4.278,880,4.918]],["t/564",[0,5.245,2,3.203,10,1.112,22,0.792,32,1.001,34,1.72,36,2.41,39,0.464,48,1.287,50,1.928,51,1.724,53,0.853,57,0.6,66,0.927,70,1.47,72,2.733,74,1.041,75,0.963,76,1.364,79,1.129,80,1.493,82,0.83,85,1.33,88,0.927,101,0.892,111,1.72,113,3.334,117,1.287,124,1.493,133,1.927,148,1.994,150,1.349,164,1.72,177,2.098,181,2.63,182,1.784,183,1.23,197,2.559,206,1.883,209,1.429,219,0.744,224,2.327,226,3.315,266,2.247,267,1.676,281,2.327,282,2.384,299,2.733,307,1.676,312,1.084,333,0.963,336,2.384,361,1.417,374,1.493,380,3.334,411,1.927,432,1.23,433,1.287,476,2.772,478,3.474,479,2.098,480,3.524,481,2.098,483,3.104,484,3.569,485,3.104,506,2.28,530,2.327,536,1.287,538,2.007,549,1.493,585,2.327,591,2.098,647,2.327,689,2.327,723,1.287,754,1.79,787,2.327,794,2.098,809,1.927,818,1.927,851,2.098,865,2.098,881,2.098,882,3.47,883,2.675,884,2.327,885,2.675,886,2.327,887,4.955,888,5.546,889,2.327,890,2.675,891,2.675,892,3.203,893,1.927,894,2.098,895,2.327,896,2.098,897,2.675,898,3.553,899,2.327,900,2.675,901,2.675,902,2.327,903,4.085,904,1.676,905,2.675,906,2.675,907,2.327,908,2.675,909,2.675,910,1.676,911,1.676,912,1.927,913,4.085,914,2.675,915,2.675,916,2.675,917,1.927,918,2.675,919,2.675,920,2.098,921,2.675,922,2.327,923,2.675,924,2.675,925,2.675,926,2.098,927,2.098,928,2.098,929,2.675,930,2.675]],["t/566",[0,3.595,10,1.5,11,1.959,18,0.47,22,0.968,39,0.608,40,2.199,48,2.401,51,2.451,52,0.632,53,0.733,64,2.786,66,1.217,67,2.071,70,1.264,74,1.942,75,1.797,76,1.172,77,1.05,83,1.422,85,1.34,99,1.86,100,2.199,101,1.139,111,1.801,164,1.801,168,2.795,181,1.545,182,1.797,183,1.614,199,2.071,201,0.788,203,2.528,206,1.493,215,2.644,234,1.217,251,2.401,254,2.349,261,1.34,264,2.945,270,1.545,275,3.963,325,1.689,333,1.797,376,1.545,377,3.242,411,2.528,426,2.528,478,2.199,480,2.071,570,2.071,788,4.78,851,2.753,881,3.914,882,2.644,889,3.054,895,4.342,896,4.961,898,4.342,912,4.813,927,3.914,931,3.511,932,4.992,933,3.639,934,3.511,935,4.342,936,3.511,937,3.511,938,3.054,939,3.054,940,3.054,941,3.054,942,3.054,943,3.511,944,3.511,945,3.511,946,3.054,947,2.753,948,3.054,949,3.511,950,3.511,951,2.753,952,2.753,953,3.054,954,2.753,955,3.054,956,3.054,957,3.054]],["t/568",[18,0.445,22,0.916,39,1.058,48,2.273,51,3.019,52,1.099,64,3.408,66,1.637,67,2.787,70,1.701,74,2.376,75,2.198,76,1.577,99,2.503,100,2.959,104,2.117,111,1.465,133,3.402,164,1.894,168,2.273,182,1.701,199,2.787,203,3.402,206,2.139,209,1.362,219,1.314,476,2.08,485,2.959,624,4.398,882,3.235,912,3.402,920,3.704,941,4.109,946,4.109,947,4.789,948,4.109,951,3.704,952,3.704,953,4.109,954,3.704,955,4.109,956,4.109,957,4.109,958,4.724,959,4.109,960,4.724,961,3.402,962,4.109,963,4.724,964,4.724]],["t/570",[32,2.288,50,2.38,88,2.119,101,1.101,181,2.692,182,2.202,353,1.967,723,2.942,788,4.091,904,3.831,911,3.831,965,7.161,966,6.116]],["t/572",[18,0.448,32,1.226,35,2.192,39,0.823,57,1.066,70,1.179,77,1.833,79,2.587,82,1.016,85,1.879,101,0.855,111,1.016,113,1.828,131,1.652,136,4.484,142,2.052,146,4.003,148,1.094,151,2.516,169,4.886,181,2.091,182,1.179,209,1.612,257,2.57,261,1.5,266,1.924,267,2.052,270,1.442,282,1.576,294,1.442,316,1.828,333,2.52,336,1.576,353,2.252,355,1.828,361,1.736,374,1.828,432,3.297,433,2.285,434,4.796,449,2.802,469,4.806,470,2.569,471,2.359,473,2.569,475,3.725,519,2.569,538,1.327,609,2.976,789,2.192,813,3.739,814,3.739,817,2.569,904,2.052,910,2.052,911,2.052,928,2.569,940,4.861,967,3.276,968,2.359,969,2.569,970,3.276,971,2.569,972,2.85,973,3.276,974,4.132,975,2.569,976,2.85,977,4.132,978,2.85,979,3.276,980,3.276,981,3.276,982,3.276,983,5.588,984,3.276,985,3.276,986,3.276]],["t/574",[18,0.562,32,1.93,39,1.032,57,0.825,62,1.324,70,1.324,76,1.722,77,1.1,79,1.552,88,1.275,101,0.928,102,2.304,103,1.49,104,1.275,107,1.49,111,1.6,123,2.461,124,2.053,181,2.843,182,1.324,198,2.17,201,1.158,206,1.931,209,1.061,219,1.435,234,1.275,257,1.691,261,0.987,266,1.49,267,2.304,282,1.769,301,2.053,333,1.857,336,1.769,353,1.183,355,2.053,357,2.304,376,1.619,381,4.247,400,2.304,406,1.769,438,2.053,476,3.418,478,3.232,485,2.304,500,2.461,723,1.769,794,2.884,802,2.053,809,2.649,828,2.649,882,1.948,892,2.884,904,2.304,910,2.304,947,2.884,987,5.159,988,3.199,989,3.199,990,5.183,991,2.649,992,3.199,993,2.884,994,3.199,995,3.199,996,6.459,997,6.459,998,6.459,999,3.678,1000,3.678,1001,5.159,1002,3.678,1003,3.678,1004,3.678,1005,2.649,1006,3.678,1007,2.884,1008,3.678,1009,3.678,1010,3.678]],["t/576",[10,1.29,32,1.612,57,1.29,76,2.304,77,1.719,79,1.819,83,2.329,88,1.993,101,1.035,111,1.336,124,2.405,151,3.046,164,1.336,181,2.848,182,1.551,201,1.452,206,2.294,209,1.243,219,1.6,260,2.283,261,1.157,267,2.699,282,2.073,333,1.551,376,2.531,381,2.405,438,2.405,476,2.531,485,2.699,508,5.413,569,2.542,570,2.542,610,4.659,723,2.073,827,2.883,892,3.379,904,2.699,910,2.699,988,5.628,989,3.748,990,6.005,991,3.103,992,3.748,994,3.748,995,5.001,1011,2.883,1012,4.309,1013,4.309,1014,4.309,1015,4.309,1016,4.309,1017,4.309,1018,4.309]],["t/578",[10,0.845,18,0.494,36,2.223,39,0.653,42,3.287,50,1.466,51,2.755,54,1.526,57,0.845,70,1.356,75,1.889,80,2.103,88,2.262,101,1.086,113,2.103,115,3.287,123,2.521,148,1.258,168,2.904,206,1.569,209,1.979,219,1.048,220,3.277,261,1.842,267,2.36,270,2.31,282,2.524,284,2.223,290,3.277,325,2.904,353,1.212,357,2.36,361,2.779,376,1.659,379,4.657,432,2.413,433,1.813,476,2.31,480,2.223,491,2.36,506,2.103,538,1.526,569,2.223,570,2.223,813,2.521,814,2.521,882,2.779,910,3.287,933,2.36,975,2.954,991,2.713,1019,2.954,1020,5.247,1021,3.768,1022,3.768,1023,3.768,1024,4.733,1025,4.367,1026,3.768,1027,3.768,1028,3.277,1029,3.768,1030,3.768,1031,3.768,1032,3.768,1033,3.768,1034,3.768,1035,3.768,1036,3.768,1037,3.768,1038,3.277,1039,5.247,1040,3.768,1041,3.768,1042,3.768,1043,3.768,1044,3.277,1045,3.768]],["t/580",[10,1.484,48,2.577,50,2.573,83,2.17,85,1.438,88,1.857,111,1.661,113,2.99,124,2.99,181,2.358,182,1.928,202,1.661,219,1.84,251,3.451,261,1.438,361,2.838,386,1.49,480,3.161,665,4.201,711,4.66,881,4.201,882,2.838,893,3.858,896,4.201,904,3.356,961,3.858,968,3.858,1046,5.357,1047,5.357,1048,5.357,1049,5.357,1050,4.66,1051,5.752]],["t/582",[18,0.545,51,3.131,104,2.402,105,3.495,111,1.795,124,3.23,168,2.785,202,1.795,209,1.669,336,2.785,374,3.23,377,3.23,426,4.168,429,4.539,686,4.539,878,5.035,882,3.066,1052,6.931,1053,5.788]],["t/584",[2,1.366,5,1.166,10,1.705,11,0.972,18,0.49,19,1.366,22,1.163,27,0.767,34,0.899,36,1.028,39,1.147,40,1.092,41,1.878,48,2.319,50,0.678,51,2.741,52,1.04,53,1.252,54,1.509,57,0.836,58,0.923,62,0.627,63,2.429,66,0.604,75,1.341,76,1.449,77,0.867,79,1.224,80,2.079,83,0.706,85,0.468,87,0.972,88,1.505,101,0.937,103,0.706,104,1.671,111,1.346,113,0.972,115,2.333,118,1.94,124,0.972,129,1.516,131,0.879,133,1.255,138,1.092,140,0.923,148,0.582,164,1.346,168,2.319,181,1.64,182,0.627,183,0.801,199,1.028,201,0.651,202,1.495,203,1.255,205,0.879,206,1.556,209,1.39,219,1.036,221,1.255,226,1.94,246,1.166,254,1.94,260,2.3,261,1.165,264,1.028,270,0.767,276,1.277,277,1.366,282,1.395,285,1.366,301,1.618,302,0.923,307,1.092,311,1.94,313,2.088,333,1.341,336,2.886,349,1.166,353,0.933,361,0.923,376,2.291,386,0.485,387,0.451,403,1.092,405,1.092,416,1.462,438,0.972,476,1.277,480,1.028,483,1.817,526,1.166,538,0.706,558,1.366,569,2.197,570,2.197,591,1.366,609,1.092,610,1.255,659,1.94,671,2.088,723,2.319,755,1.255,758,1.711,783,2.088,788,2.492,789,1.166,820,1.366,827,1.166,828,1.255,841,1.516,848,1.366,867,1.366,882,2.3,893,2.088,899,3.777,902,1.516,911,2.333,912,2.088,917,1.255,920,1.366,922,2.523,933,1.092,935,2.523,942,2.523,961,1.255,969,1.366,1019,2.921,1024,1.366,1025,1.166,1050,1.516,1054,1.743,1055,2.523,1056,1.743,1057,1.743,1058,1.743,1059,1.743,1060,1.743,1061,5.204,1062,5.999,1063,2.9,1064,1.743,1065,1.743,1066,1.516,1067,2.523,1068,1.743,1069,2.9,1070,2.9,1071,1.743,1072,1.743,1073,1.743,1074,1.743,1075,1.743,1076,1.743,1077,1.743,1078,1.516,1079,1.743,1080,1.516,1081,1.743,1082,1.743,1083,1.743,1084,1.743,1085,1.743,1086,1.743,1087,1.366,1088,1.743,1089,1.743,1090,1.743,1091,1.743,1092,1.366,1093,1.743,1094,3.777,1095,2.9,1096,1.743,1097,2.9,1098,1.743,1099,1.743,1100,1.743,1101,2.9,1102,1.743,1103,1.743,1104,1.743,1105,1.743,1106,1.743,1107,1.743,1108,2.9,1109,1.743,1110,1.743,1111,1.743,1112,1.516,1113,1.743,1114,2.523,1115,1.516,1116,1.516,1117,1.743,1118,2.9,1119,1.743,1120,1.516,1121,1.743,1122,3.724,1123,1.743,1124,2.523,1125,1.516,1126,1.743,1127,1.516,1128,1.743,1129,2.9,1130,1.743,1131,1.743,1132,1.743,1133,1.743,1134,1.743,1135,1.743,1136,1.743,1137,1.743,1138,1.743]],["t/586",[1,1.983,9,2.829,10,1.572,11,1.272,18,0.34,19,3.51,20,1.788,22,1.279,27,1.004,34,1.578,39,0.961,41,1.819,48,1.097,49,2.829,51,2.34,53,0.934,57,1.004,58,2.937,59,2.148,62,1.299,66,0.79,67,1.345,69,3.002,75,1.832,77,0.682,78,2.413,79,0.962,82,0.707,83,0.923,88,1.551,92,1.097,95,1.272,98,1.272,101,0.916,104,0.79,115,1.428,140,1.911,142,1.428,146,1.345,148,1.494,164,0.707,177,1.788,181,1.588,198,1.345,205,1.15,206,1.338,209,0.658,215,1.208,219,0.634,240,3.138,249,1.642,251,2.448,252,1.097,260,1.911,261,1.658,264,1.345,270,1.004,276,1.004,282,2.448,294,1.588,303,2.413,307,1.428,311,1.525,316,1.272,319,1.788,333,1.611,336,1.097,353,0.733,355,1.272,357,1.428,372,1.788,376,2.903,416,2.257,423,1.428,427,0.682,471,1.642,483,2.26,500,2.413,510,3.51,513,2.598,519,1.788,538,0.923,542,1.525,560,1.788,569,2.128,570,3.002,579,3.665,594,1.788,595,1.642,666,4.246,723,1.735,783,1.642,788,1.525,797,1.642,808,1.983,840,1.983,869,2.26,884,1.983,886,3.138,894,1.788,910,1.428,933,1.428,951,1.788,959,3.138,971,1.788,976,1.983,977,1.983,1011,1.525,1019,1.788,1024,1.788,1055,1.983,1066,1.983,1078,1.983,1080,3.138,1087,1.788,1092,1.788,1112,1.983,1120,1.983,1124,3.894,1125,1.983,1139,3.607,1140,3.607,1141,3.607,1142,2.28,1143,1.983,1144,2.28,1145,2.28,1146,2.28,1147,2.28,1148,2.28,1149,2.28,1150,2.28,1151,3.607,1152,2.28,1153,2.28,1154,2.28,1155,2.28,1156,1.983,1157,2.28,1158,2.28,1159,2.28,1160,2.28,1161,2.28,1162,3.607,1163,2.28,1164,1.983,1165,2.28,1166,1.983,1167,2.28,1168,2.28,1169,1.983,1170,2.28,1171,2.28,1172,1.788,1173,2.28,1174,1.983,1175,2.28,1176,2.28,1177,2.28,1178,2.28,1179,2.28,1180,2.28,1181,2.28,1182,2.28,1183,2.28,1184,2.28,1185,1.983,1186,2.28,1187,2.28,1188,2.28,1189,3.607,1190,2.28,1191,2.28,1192,2.28,1193,1.788,1194,2.28,1195,1.983,1196,2.28,1197,1.983,1198,2.28,1199,1.788,1200,2.28,1201,2.28,1202,2.28,1203,2.28,1204,2.28,1205,2.28]],["t/588",[18,0.571,32,2.266,36,2.751,39,1.165,52,0.839,53,0.973,55,2.243,56,2.243,58,2.47,59,1.968,77,1.394,82,1.446,85,1.252,88,1.616,95,2.602,108,3.119,111,1.446,164,1.878,206,2.129,219,1.685,252,2.243,257,2.144,261,1.911,277,3.656,303,3.119,353,1.5,355,2.602,478,3.794,491,2.921,553,3.656,667,6.24,723,2.243,926,4.749,1038,5.85,1067,4.056,1206,3.656,1207,4.663,1208,4.663,1209,4.663,1210,4.056,1211,4.663,1212,4.663,1213,4.663,1214,4.663]],["t/590",[18,0.572,22,1.178,34,1.452,39,0.811,50,1.822,51,2.563,52,0.843,53,1.407,54,1.897,55,2.253,56,2.253,57,1.512,66,1.623,68,2.481,73,3.133,76,1.563,88,2.336,101,0.843,111,1.452,164,1.883,181,2.062,182,1.686,202,1.452,206,2.132,209,1.351,219,1.69,261,1.983,270,2.062,284,2.763,325,2.253,386,1.303,387,1.213,416,2.362,556,3.672,789,3.133,893,3.372,968,3.372,993,3.672,1094,4.074,1199,3.672,1215,4.683,1216,4.683,1217,4.683,1218,3.672,1219,3.672,1220,4.683,1221,4.074,1222,4.683,1223,4.683,1224,4.683]],["t/592",[10,1.487,18,0.663,22,1.152,39,0.784,48,2.857,50,1.761,52,1.069,53,1.24,57,1.333,66,1.569,76,1.983,77,1.353,82,1.404,85,1.215,92,2.177,111,1.404,146,3.504,148,1.511,164,1.842,168,2.177,182,1.629,202,1.404,206,2.105,209,1.305,219,1.652,261,1.215,333,2.386,378,4.435,416,2.282,432,2.731,433,2.177,434,3.973,483,3.721,609,2.835,789,3.028,927,3.549,928,4.657,961,3.259,991,3.259,993,3.549,1051,3.937,1127,3.937,1199,3.549,1218,3.549,1219,3.549,1221,3.937,1225,4.526,1226,4.526,1227,4.526,1228,4.526,1229,4.526]],["t/594",[10,1.398,22,0.945,32,1.823,39,0.844,51,2.057,57,1.093,66,1.689,88,2.159,91,3.26,111,1.511,164,1.932,181,2.145,182,1.754,196,2.241,206,2.164,209,1.406,219,1.733,261,1.308,311,4.168,325,3.482,349,3.26,353,1.568,355,2.72,723,2.345,879,6.655,911,3.053,968,3.509,969,3.821,1114,4.239,1115,4.239,1230,4.873,1231,4.873,1232,6.231,1233,4.873,1234,4.873,1235,4.873,1236,6.868,1237,4.873,1238,4.873,1239,4.873]],["t/596",[18,0.699,56,2.785,82,1.795,92,2.785,148,2.693,336,3.569,487,4.539,536,3.334,538,2.807,1240,5.788,1241,5.788,1242,5.035]],["t/598",[18,0.564,22,1.16,39,1.303,53,1.248,63,2.633,77,1.788,95,3.338,168,2.877,182,2.708,209,1.725,400,3.746,926,4.689,1243,5.98,1244,5.98]],["t/600",[22,1.105,34,2.129,52,1.235,53,1.189,54,2.307,55,3.302,56,3.302,57,1.54,58,3.903,59,3.11,91,3.811,101,1.025,252,2.74,701,4.955,1245,5.696,1246,5.696,1247,6.865]],["t/602",[10,1.818,17,3.904,18,0.423,28,3.904,32,1.679,55,2.159,74,1.747,75,1.616,92,2.159,101,0.808,168,2.159,201,1.007,219,1.249,243,2.812,261,1.205,302,2.378,311,3.003,501,4.254,503,4.754,560,3.52,1116,3.904,1156,5.138,1248,4.488,1249,5.907,1250,4.488,1251,4.488,1252,4.488,1253,4.488,1254,4.488,1255,4.488,1256,4.488,1257,4.488,1258,4.488,1259,4.488,1260,6.602,1261,4.488,1262,5.177,1263,4.488,1264,4.488,1265,6.602,1266,4.488,1267,4.488,1268,4.488,1269,4.488,1270,4.488,1271,4.488,1272,4.488,1273,4.488,1274,4.488,1275,4.488,1276,4.488,1277,4.488,1278,3.904,1279,4.488]],["t/604",[10,1.516,18,0.523,34,2.095,53,1.158,54,2.951,55,2.67,56,2.67,57,1.245,63,2.443,117,2.67,183,2.552,257,3.35,298,4.352,465,4.352,559,4.352,561,4.352,933,3.477,1206,5.299,1262,4.352,1280,4.828,1281,4.828,1282,6.757,1283,5.55,1284,5.55]],["t/606",[5,0.374,8,0.439,10,1.459,11,0.586,18,0.619,20,0.439,22,0.724,32,0.831,34,1.645,35,1.696,36,0.62,39,0.709,42,1.174,48,0.269,50,1.29,51,0.236,52,0.456,53,0.219,54,0.426,56,0.901,57,0.793,60,0.658,61,0.487,62,1.272,64,0.829,65,1.951,66,1.573,68,1.343,69,2.895,70,1.805,71,0.487,72,0.994,74,1.097,75,2.075,76,0.941,77,1.316,78,2.622,79,1.857,80,1.415,81,1.933,82,1.365,83,1.247,85,1.181,87,3.412,88,1.067,92,0.715,93,0.586,95,0.312,99,0.993,100,3.569,101,0.883,102,2.34,103,1.588,104,0.364,105,0.53,106,0.374,107,2.217,108,0.374,110,0.703,113,0.586,115,0.35,117,1.797,136,1.311,138,0.35,140,1.177,142,0.931,146,0.877,148,1.559,150,2.629,162,1.165,163,1.165,164,0.875,168,0.506,169,1.07,181,0.463,183,1.297,193,0.403,195,0.403,196,2.204,197,0.658,198,0.33,199,0.62,200,0.33,201,0.236,202,1.028,205,1.422,206,1.172,215,1.177,219,0.618,221,0.403,226,0.994,228,1.988,230,1.254,234,0.364,237,0.487,243,0.35,247,0.487,251,1.595,252,0.901,254,0.374,257,1.022,259,0.824,260,2.168,261,1.51,263,3.559,266,0.426,268,2.206,270,0.463,275,1.392,276,0.825,279,0.824,284,0.33,291,0.914,293,0.374,294,1.356,301,0.312,302,0.296,305,0.439,307,0.658,312,1.988,316,0.586,317,0.487,318,0.824,323,0.824,325,0.715,328,1.742,331,2.388,333,1.344,336,1.069,341,1.933,344,1.165,349,0.994,351,0.824,353,1.261,355,0.586,357,0.658,359,0.824,361,0.557,362,1.63,363,0.914,365,0.487,372,0.439,374,1.046,376,2.336,377,0.829,379,1.174,380,1.574,381,0.312,382,0.439,384,1.929,386,0.156,387,0.145,389,3.891,392,3.607,403,0.35,405,0.658,406,1.595,410,1.63,416,0.282,422,0.993,423,1.174,426,1.349,427,2.222,429,0.824,430,0.487,432,1.416,433,1.22,434,0.994,438,1.574,440,1.174,444,0.703,449,1.664,451,2.771,453,1.742,455,0.439,469,0.824,470,0.439,471,0.403,473,0.439,475,0.439,476,1.801,478,0.658,479,0.439,480,0.33,481,0.439,483,0.658,484,1.349,485,0.35,490,0.374,491,0.35,502,0.403,503,0.403,506,0.312,508,0.824,510,0.824,513,1.349,514,0.487,524,0.439,536,1.7,538,1.657,542,0.994,549,0.312,553,0.824,569,0.33,570,1.664,572,0.487,575,0.487,578,1.165,579,1.07,582,0.914,583,0.914,607,1.293,609,0.35,610,1.349,650,1.63,653,0.487,659,0.703,660,0.914,661,1.349,666,1.07,674,2.031,678,0.439,681,0.439,684,0.439,686,0.824,687,2.679,723,0.269,748,1.293,751,0.487,754,0.703,758,2.414,760,0.914,762,0.487,763,1.469,764,0.487,765,0.439,771,0.487,774,0.994,776,1.988,777,0.914,778,0.914,779,0.487,780,0.487,793,1.165,797,0.403,802,2.91,809,0.403,811,1.293,813,0.994,814,0.994,818,0.403,819,1.496,827,1.696,829,0.487,831,0.914,833,0.487,843,0.757,844,0.439,848,1.469,849,0.824,852,0.487,863,1.165,869,1.588,870,2.622,882,0.296,894,0.439,907,0.487,911,0.35,917,0.757,938,1.293,939,0.487,962,0.487,971,1.165,974,0.487,975,0.824,978,0.487,1005,1.349,1011,0.374,1025,2.844,1028,1.933,1087,1.165,1143,0.487,1164,0.487,1166,0.487,1172,0.439,1185,0.487,1195,0.487,1197,0.487,1210,0.487,1242,0.487,1285,0.559,1286,0.559,1287,2.222,1288,0.559,1289,0.559,1290,0.487,1291,0.559,1292,0.559,1293,0.559,1294,0.559,1295,0.559,1296,1.051,1297,0.559,1298,0.559,1299,1.051,1300,0.559,1301,0.559,1302,0.559,1303,0.559,1304,1.486,1305,0.559,1306,1.051,1307,0.559,1308,0.559,1309,0.559,1310,1.486,1311,0.487,1312,2.82,1313,0.559,1314,0.559,1315,0.559,1316,0.559,1317,0.559,1318,0.559,1319,1.293,1320,0.559,1321,0.559,1322,0.559,1323,0.559,1324,1.486,1325,1.486,1326,0.559,1327,0.559,1328,0.559,1329,0.559,1330,0.559,1331,0.559,1332,0.559,1333,0.559,1334,1.051,1335,1.051,1336,1.051,1337,0.559,1338,0.559,1339,0.559,1340,0.914,1341,0.824,1342,0.559,1343,0.914,1344,0.914,1345,0.559,1346,0.487,1347,1.051,1348,1.051,1349,0.559,1350,0.824,1351,0.559,1352,0.559,1353,0.559,1354,0.914,1355,0.487,1356,0.559,1357,0.559,1358,0.914,1359,0.559,1360,0.559,1361,0.559,1362,0.559,1363,0.559,1364,0.559,1365,1.486,1366,0.559,1367,0.559,1368,0.559,1369,1.874,1370,1.051,1371,0.559,1372,0.559,1373,1.486,1374,0.559,1375,0.559,1376,0.487,1377,0.559,1378,0.559,1379,1.165,1380,1.874,1381,0.559,1382,0.559,1383,0.559,1384,0.559,1385,0.559,1386,0.559,1387,0.559,1388,0.559,1389,0.559,1390,0.559,1391,0.559,1392,0.559,1393,1.051,1394,0.559,1395,0.559,1396,0.487,1397,0.559,1398,0.559,1399,0.559,1400,0.559,1401,0.559,1402,0.559,1403,0.559,1404,0.559,1405,0.559,1406,0.559,1407,0.559,1408,0.559,1409,0.487,1410,0.559,1411,0.559]],["t/608",[18,0.524,22,1.223,27,2.776,34,2.352,39,1.172,41,2.066,52,1.217,53,0.855,54,1.659,57,0.919,65,2.359,66,1.42,82,1.27,101,0.737,102,3.481,103,3.072,104,1.926,105,2.066,117,1.971,118,2.741,150,2.802,183,3.11,196,2.555,230,2.741,234,1.42,257,1.884,261,1.693,264,2.417,282,1.971,301,2.286,312,2.739,316,2.286,390,3.52,405,3.481,414,2.95,500,2.741,595,4.002,671,4.002,813,2.741,814,2.741,933,2.566,1025,2.741,1379,3.212,1412,4.097,1413,4.097,1414,4.097,1415,4.097,1416,4.097,1417,4.097,1418,5.557,1419,4.097,1420,5.557,1421,4.097,1422,4.097,1423,4.097]],["t/610",[10,1.461,18,0.493,34,1.621,52,0.941,55,3.133,56,3.133,58,3.45,59,2.749,63,2.301,75,1.882,99,2.769,117,2.515,148,1.745,183,2.404,219,1.812,257,2.995,266,2.638,298,4.099,440,3.275,448,5.107,465,4.099,538,2.117,559,4.099,561,4.099,1206,5.107,1262,4.099,1280,4.547,1281,4.547,1424,5.227,1425,5.227,1426,5.227,1427,4.547,1428,5.227,1429,5.227]],["t/612",[10,1.532,18,0.532,22,0.813,34,1.979,40,3.536,52,1.148,53,0.875,55,2.017,59,1.769,62,1.509,65,2.387,70,1.509,82,1.3,85,1.125,87,4.588,196,1.928,201,1.266,202,1.75,266,1.698,294,2.485,312,2.286,318,3.287,506,2.34,549,2.34,674,4.065,763,3.287,774,2.805,776,5.353,863,5.353,1005,4.065,1319,3.647,1340,4.91,1341,3.287,1343,3.647,1344,5.551,1346,4.91,1350,4.426,1376,3.647,1396,3.647,1430,4.065,1431,4.192,1432,4.192,1433,4.192,1434,4.192,1435,4.192,1436,3.647]],["t/614",[10,0.78,18,0.328,22,0.674,27,1.531,52,0.892,53,0.726,59,2.092,63,1.531,65,2.725,70,2.397,80,1.94,82,2.147,83,1.408,85,1.691,87,3.864,92,1.673,101,0.626,107,2.34,116,2.726,117,1.673,138,3.105,148,1.655,164,1.792,202,1.537,206,1.728,209,1.003,234,1.205,241,2.504,252,1.673,266,1.408,276,2.182,294,2.773,299,2.326,302,2.626,325,2.385,382,3.887,384,2.178,387,0.9,427,1.04,444,2.326,449,3.716,536,2.385,549,1.94,558,2.726,661,3.57,758,2.051,774,2.326,802,1.94,819,2.051,869,2.178,870,3.316,1007,2.726,1011,3.316,1355,3.024,1430,2.504,1437,3.477,1438,3.024,1439,3.024,1440,3.887,1441,3.887,1442,5.222,1443,5.026,1444,4.957,1445,3.477,1446,3.477,1447,3.477,1448,3.477,1449,3.477,1450,3.477,1451,4.312,1452,3.887,1453,3.024,1454,3.024,1455,3.024,1456,3.024,1457,3.024,1458,3.024,1459,3.024,1460,3.024,1461,3.024,1462,3.024,1463,3.024,1464,3.024,1465,2.726,1466,2.726,1467,3.024,1468,3.024,1469,3.024]],["t/616",[10,0.79,18,0.332,22,0.683,27,1.55,52,0.9,59,2.112,63,1.55,65,2.906,70,1.268,83,1.427,85,0.945,87,3.536,101,0.634,103,2.357,107,2.357,116,2.762,117,2.407,148,1.176,164,1.805,196,2.676,198,2.078,202,1.552,206,1.74,209,1.016,234,1.221,241,2.536,266,1.427,294,2.789,299,2.356,302,1.866,312,2.027,325,2.8,387,0.912,406,2.407,444,2.356,449,3.433,501,2.536,536,1.694,549,1.966,659,2.356,661,2.536,723,1.694,747,2.762,755,2.536,758,2.078,774,2.356,791,2.536,802,1.966,819,2.078,869,2.206,870,3.347,1011,3.893,1193,2.762,1350,2.762,1430,2.536,1438,3.064,1439,3.064,1440,3.923,1441,3.923,1442,2.762,1451,4.352,1452,3.923,1453,3.064,1454,3.064,1455,3.064,1456,3.064,1457,3.064,1458,3.064,1459,3.064,1460,3.064,1461,3.064,1462,3.064,1463,3.064,1464,4.352,1465,2.762,1466,2.762,1467,4.352,1468,3.064,1469,3.064,1470,3.522,1471,3.522,1472,3.522,1473,3.522,1474,3.522,1475,3.522,1476,3.522,1477,5.003,1478,5.003,1479,5.003,1480,5.003,1481,3.522,1482,3.522,1483,3.522]],["t/618",[27,2.062,34,2.09,52,1.213,56,2.253,59,2.563,63,2.062,74,1.822,83,1.897,87,4.36,110,3.133,117,2.253,138,2.934,151,2.481,196,2.154,201,1.051,202,1.883,205,2.362,209,1.351,266,1.897,294,3.253,302,2.481,384,2.934,387,1.213,549,2.614,817,3.672,843,3.372,844,3.672,1005,4.853,1007,3.672,1427,4.074,1430,3.372,1440,4.762,1441,4.762,1443,5.863,1452,4.762,1465,3.672,1466,3.672,1484,4.683,1485,4.683,1486,4.683,1487,6.073,1488,6.073]],["t/620",[10,1.806,18,0.451,22,0.643,29,1.783,33,2.883,52,0.596,53,0.87,54,0.83,59,1.76,60,1.284,62,0.738,63,0.903,64,3.304,65,1.792,66,1.445,67,1.21,70,1.501,73,1.372,74,0.798,75,2.615,76,1.755,77,0.613,79,2.374,82,0.636,83,0.83,85,1.286,88,1.148,93,1.144,96,2.076,97,1.372,98,1.144,99,1.086,101,1.246,104,0.711,107,2.398,111,0.636,115,1.284,148,1.599,149,1.608,151,2.537,182,0.738,183,1.524,200,1.955,205,1.034,209,0.591,226,1.372,230,2.217,249,1.476,252,2.304,258,1.783,261,0.55,266,1.342,270,1.459,276,0.903,289,1.372,305,1.608,319,1.608,325,2.304,333,1.193,336,0.986,377,1.144,390,1.144,393,3.628,406,2.304,416,1.034,417,1.608,428,1.608,466,1.783,502,1.476,506,1.849,538,0.83,594,1.608,609,1.284,693,1.608,743,1.783,755,2.386,767,1.783,781,1.608,791,2.386,792,1.476,793,4.123,797,1.476,802,3.73,818,1.476,827,1.372,828,1.476,843,1.476,849,1.608,856,1.783,862,3.628,865,3.756,866,4.166,867,2.599,868,5.926,869,2.076,870,2.217,871,2.883,872,4.166,952,1.608,972,1.783,1025,1.372,1092,2.599,1169,2.883,1172,1.608,1174,1.783,1193,2.599,1218,1.608,1219,1.608,1278,1.783,1290,1.783,1354,1.783,1358,1.783,1409,1.783,1436,1.783,1489,2.05,1490,2.05,1491,2.05,1492,2.05,1493,2.05,1494,5.92,1495,2.05,1496,2.05,1497,2.05,1498,4.79,1499,2.05,1500,2.05,1501,3.314,1502,2.05,1503,2.05,1504,3.314,1505,2.05,1506,2.05,1507,3.314,1508,3.314,1509,2.05,1510,2.05,1511,2.05,1512,2.05,1513,4.171,1514,2.05,1515,4.171,1516,3.314,1517,3.314,1518,2.05,1519,2.05,1520,2.05,1521,1.783,1522,2.05,1523,2.05,1524,2.05,1525,3.314,1526,2.05,1527,3.314,1528,2.05,1529,3.314,1530,2.05,1531,2.05,1532,2.05,1533,2.05]],["t/622",[22,1.242,57,1.65,83,2.595,101,1.153,819,3.78]],["t/624",[10,0.837,22,0.723,34,1.156,50,2.886,52,0.671,53,0.778,62,1.342,63,1.642,65,2.246,67,2.2,70,2.339,73,2.495,77,1.115,82,1.156,93,2.081,96,3.263,97,2.495,98,2.081,104,1.805,107,2.431,196,1.715,197,4.554,200,4.033,202,1.615,252,1.794,261,1.398,289,2.495,297,2.495,384,3.76,406,2.506,422,2.759,516,2.495,536,1.794,538,2.11,542,4.573,543,3.751,695,3.244,758,4.375,781,2.924,791,2.685,792,2.685,1442,2.924,1534,4.531,1535,3.244,1536,4.531,1537,5.652,1538,3.729,1539,3.244,1540,4.531,1541,4.531,1542,4.531,1543,4.531,1544,4.531,1545,3.729,1546,3.244,1547,4.531,1548,3.244,1549,3.244,1550,3.244,1551,3.244,1552,3.244,1553,3.244,1554,3.244,1555,3.244,1556,3.244,1557,3.244,1558,3.244,1559,3.244,1560,3.244,1561,3.244,1562,3.729]],["t/626",[8,3.904,10,1.519,18,0.469,22,0.965,34,0.836,39,0.712,50,2.556,52,0.485,53,1.318,57,0.922,62,0.97,65,1.537,70,2.497,74,1.599,79,1.734,82,0.836,88,2.346,96,1.688,98,1.504,101,0.739,102,1.688,104,1.725,107,2.428,111,0.836,196,1.239,197,4.57,200,3.875,202,1.727,206,1.228,209,0.777,219,1.385,225,2.345,261,1.336,270,1.187,289,1.803,333,1.479,336,1.976,384,1.688,405,1.688,406,1.297,422,2.95,490,1.803,500,1.803,506,1.504,536,1.976,538,2.255,542,4.641,543,4.01,754,1.803,758,4.093,802,2.778,819,1.59,876,2.345,917,1.941,954,2.114,1044,2.345,1311,2.345,1341,2.114,1379,4.366,1521,2.345,1534,2.345,1535,2.345,1536,4.33,1537,5.713,1539,2.345,1540,4.33,1541,5.214,1542,4.843,1543,4.843,1544,4.843,1546,2.345,1547,4.33,1548,2.345,1549,2.345,1550,2.345,1551,2.345,1552,2.345,1553,2.345,1554,2.345,1555,2.345,1556,2.345,1557,2.345,1558,2.345,1559,2.345,1560,2.345,1561,3.574,1563,2.695,1564,2.695,1565,2.695,1566,4.108,1567,4.108,1568,2.695,1569,2.695,1570,4.108,1571,2.695,1572,2.695,1573,2.695,1574,4.108,1575,2.695]]],"invertedIndex":[["",{"_index":10,"t":{"477":{"position":[[92,1],[500,1]]},"479":{"position":[[119,1],[559,4]]},"493":{"position":[[752,3],[789,3],[827,3],[831,3]]},"512":{"position":[[234,1]]},"528":{"position":[[1423,3],[1777,1],[1779,1],[1792,1],[1843,1]]},"530":{"position":[[693,1]]},"540":{"position":[[202,1],[204,1],[331,1],[333,1]]},"544":{"position":[[649,1],[655,2]]},"548":{"position":[[259,3]]},"558":{"position":[[227,1],[262,1],[298,1],[334,1],[369,1],[391,1],[414,1],[431,1],[449,1]]},"560":{"position":[[114,3],[750,1],[951,1],[953,1],[1165,2],[1264,1],[1299,1],[1335,1],[1357,1],[1380,1],[1397,1],[1420,1],[1438,1]]},"562":{"position":[[209,1]]},"564":{"position":[[1269,1],[2550,1],[2571,2]]},"566":{"position":[[202,1],[317,1],[526,1],[777,1],[953,1]]},"576":{"position":[[746,2],[825,2]]},"578":{"position":[[674,2]]},"580":{"position":[[366,1],[396,1]]},"584":{"position":[[39,1],[1414,1],[3059,1],[3080,1],[3140,1],[3191,1],[3193,1],[3236,1],[3238,1],[3261,1],[3284,1],[3311,1],[3331,1],[3361,1],[3493,1],[4386,1],[4407,1],[4464,1],[4520,1],[4522,1],[4560,1],[4562,1],[4578,1],[4599,1],[4624,1],[4644,1],[4665,1],[4693,1],[4770,1]]},"586":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"592":{"position":[[213,1],[238,1],[259,1]]},"594":{"position":[[400,2],[458,2]]},"602":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[312,1],[320,4],[325,1],[330,1],[570,1],[697,1],[706,1],[728,1],[730,1]]},"604":{"position":[[83,1],[85,1]]},"606":{"position":[[71,2],[918,1],[1359,1],[1482,3],[1833,4],[1838,2],[1994,2],[1997,2],[2071,1],[2152,1],[2240,1],[2702,2],[3009,1],[3011,1],[3089,1],[3091,1],[3528,1],[3667,1],[3778,1],[4421,1],[4964,2],[6527,1],[6594,4],[7646,2],[7715,1],[8161,2],[8266,2],[8883,1],[9539,1],[11605,1],[11754,1],[11818,1],[11938,1],[11969,1],[13060,1],[13348,1],[13448,1],[13686,1],[13768,1],[13775,2],[13857,1],[14510,1],[14517,2],[14870,2]]},"610":{"position":[[147,1],[149,1]]},"612":{"position":[[215,1],[241,1],[278,1],[343,1]]},"614":{"position":[[927,1]]},"616":{"position":[[782,1]]},"620":{"position":[[242,1],[272,4],[317,1],[513,1],[557,1],[629,1],[640,1],[655,1],[796,1],[879,3],[912,1],[923,1],[925,1],[969,1],[988,1],[1050,1],[1282,1],[1468,1],[1644,1],[1737,1],[1803,1],[1901,1],[2080,1],[2161,1],[2266,2],[2269,3],[2273,5],[2279,1],[2396,1],[2398,1],[2494,1],[2582,1],[2612,1],[2656,4],[2665,2],[3338,1],[3419,1],[3448,2],[3451,2],[3484,1],[3496,2],[3523,2],[3556,5],[3566,1]]},"624":{"position":[[589,2]]},"626":{"position":[[154,1],[349,1],[488,2],[570,1],[757,2],[858,1],[1069,2],[1282,2]]}}}],["0",{"_index":1304,"t":{"606":{"position":[[1552,1],[5224,1],[5237,1]]}}}],["0.0.0.0:4180",{"_index":1138,"t":{"584":{"position":[[4772,14]]}}}],["0.001",{"_index":1481,"t":{"616":{"position":[[916,5]]}}}],["00010203",{"_index":1457,"t":{"614":{"position":[[1121,8]]},"616":{"position":[[984,8]]}}}],["0400",{"_index":1441,"t":{"614":{"position":[[256,5],[1301,4]]},"616":{"position":[[137,5],[1323,4]]},"618":{"position":[[267,5],[593,4]]}}}],["0405",{"_index":1458,"t":{"614":{"position":[[1130,4]]},"616":{"position":[[993,4]]}}}],["0a0b0c0d0e0f",{"_index":1461,"t":{"614":{"position":[[1145,12]]},"616":{"position":[[1008,12]]}}}],["1",{"_index":754,"t":{"546":{"position":[[2225,1]]},"560":{"position":[[1116,2]]},"564":{"position":[[2289,1]]},"606":{"position":[[1597,3],[14362,4]]},"626":{"position":[[423,2]]}}}],["1.3",{"_index":685,"t":{"542":{"position":[[474,3]]}}}],["1.5h",{"_index":462,"t":{"512":{"position":[[236,5]]}}}],["100",{"_index":1352,"t":{"606":{"position":[[5320,3]]}}}],["12",{"_index":1483,"t":{"616":{"position":[[1200,2]]}}}],["12.x",{"_index":1020,"t":{"578":{"position":[[58,5],[128,4]]}}}],["123456.apps.googleusercontent.com",{"_index":1288,"t":{"606":{"position":[[592,35]]}}}],["127.0.0.1:4180",{"_index":844,"t":{"560":{"position":[[150,14]]},"606":{"position":[[4643,16]]},"618":{"position":[[732,14]]}}}],["128",{"_index":239,"t":{"491":{"position":[[383,3],[434,3]]}}}],["168h0m0",{"_index":1298,"t":{"606":{"position":[[1161,8]]}}}],["19/mar/2015:17:20:19",{"_index":1440,"t":{"614":{"position":[[233,21],[1279,20]]},"616":{"position":[[114,21],[1301,20]]},"618":{"position":[[244,21],[571,20]]}}}],["192",{"_index":1275,"t":{"602":{"position":[[644,3]]}}}],["1h",{"_index":908,"t":{"564":{"position":[[919,4]]}}}],["1s",{"_index":1322,"t":{"606":{"position":[[2817,4]]}}}],["2",{"_index":917,"t":{"564":{"position":[[1510,1]]},"584":{"position":[[3458,2]]},"606":{"position":[[13833,3],[14438,4]]},"626":{"position":[[717,2]]}}}],["2.0",{"_index":1050,"t":{"580":{"position":[[213,3]]},"584":{"position":[[35,3]]}}}],["20",{"_index":1327,"t":{"606":{"position":[[3981,2]]}}}],["200",{"_index":747,"t":{"546":{"position":[[1941,3]]},"550":{"position":[[223,3],[336,3]]},"616":{"position":[[1249,3]]}}}],["202",{"_index":792,"t":{"550":{"position":[[995,3]]},"554":{"position":[[22,3]]},"620":{"position":[[131,3]]},"624":{"position":[[162,3]]}}}],["2048",{"_index":1153,"t":{"586":{"position":[[1052,4]]}}}],["24",{"_index":1273,"t":{"602":{"position":[[630,2]]}}}],["2>/dev/nul",{"_index":1259,"t":{"602":{"position":[[227,11]]}}}],["2f",{"_index":769,"t":{"548":{"position":[[212,7]]}}}],["2h45m",{"_index":463,"t":{"512":{"position":[[245,8]]}}}],["3",{"_index":947,"t":{"566":{"position":[[1119,2]]},"568":{"position":[[385,2],[421,2]]},"574":{"position":[[1247,4]]}}}],["3/4",{"_index":1399,"t":{"606":{"position":[[14135,3]]}}}],["30",{"_index":765,"t":{"546":{"position":[[2598,2]]},"560":{"position":[[1138,3],[1161,3]]},"606":{"position":[[13321,3]]}}}],["300m",{"_index":461,"t":{"512":{"position":[[225,8]]}}}],["315360000",{"_index":1552,"t":{"624":{"position":[[965,9]]},"626":{"position":[[1723,9]]}}}],["32",{"_index":1265,"t":{"602":{"position":[[309,2],[578,2],[708,2]]}}}],["3650",{"_index":1165,"t":{"586":{"position":[[1175,4]]}}}],["401",{"_index":96,"t":{"479":{"position":[[403,3]]},"550":{"position":[[1022,3]]},"554":{"position":[[49,3]]},"620":{"position":[[158,3],[965,3]]},"624":{"position":[[189,3],[1254,4]]},"626":{"position":[[898,3]]}}}],["403",{"_index":1562,"t":{"624":{"position":[[1259,4]]}}}],["4180",{"_index":850,"t":{"560":{"position":[[465,5]]}}}],["443",{"_index":849,"t":{"560":{"position":[[395,3],[759,3]]},"606":{"position":[[4809,6],[14717,3]]},"620":{"position":[[251,3]]}}}],["4607",{"_index":1459,"t":{"614":{"position":[[1135,4]]},"616":{"position":[[998,4]]}}}],["4kb",{"_index":1501,"t":{"620":{"position":[[1733,3],[1938,4]]}}}],["5",{"_index":924,"t":{"564":{"position":[[1988,1]]}}}],["6",{"_index":949,"t":{"566":{"position":[[1155,2]]}}}],["7",{"_index":1349,"t":{"606":{"position":[[5153,1]]}}}],["74.125.224.72",{"_index":1453,"t":{"614":{"position":[[840,13]]},"616":{"position":[[695,13]]}}}],["80",{"_index":1408,"t":{"606":{"position":[[14703,3]]}}}],["8809",{"_index":1460,"t":{"614":{"position":[[1140,4]]},"616":{"position":[[1003,4]]}}}],["994",{"_index":1022,"t":{"578":{"position":[[138,5]]}}}],["_",{"_index":1262,"t":{"602":{"position":[[279,3],[327,2],[732,3]]},"604":{"position":[[104,4]]},"610":{"position":[[168,4]]}}}],["__host",{"_index":1301,"t":{"606":{"position":[[1338,7]]}}}],["__secur",{"_index":1302,"t":{"606":{"position":[[1350,8]]}}}],["_oauth2_proxi",{"_index":237,"t":{"491":{"position":[[338,14]]},"606":{"position":[[1388,15]]}}}],["_oauth2_proxy_1",{"_index":1533,"t":{"620":{"position":[[3951,18]]}}}],["abov",{"_index":1007,"t":{"574":{"position":[[1233,5]]},"614":{"position":[[1542,5]]},"618":{"position":[[45,5]]}}}],["absent",{"_index":1328,"t":{"606":{"position":[[3987,6]]}}}],["accept",{"_index":93,"t":{"479":{"position":[[363,7]]},"542":{"position":[[139,11]]},"550":{"position":[[999,8]]},"554":{"position":[[26,8]]},"558":{"position":[[566,10]]},"606":{"position":[[10326,8],[12993,11]]},"620":{"position":[[135,8]]},"624":{"position":[[166,8]]}}}],["acceptable.e.g",{"_index":683,"t":{"542":{"position":[[420,15]]}}}],["access",{"_index":333,"t":{"499":{"position":[[349,6]]},"504":{"position":[[101,6]]},"508":{"position":[[171,6]]},"514":{"position":[[346,6]]},"526":{"position":[[259,6]]},"532":{"position":[[2139,6],[2286,6]]},"552":{"position":[[214,9]]},"564":{"position":[[1746,7]]},"566":{"position":[[447,6],[622,7]]},"572":{"position":[[296,7],[924,6],[999,6],[1036,6],[1186,6],[1217,6],[1306,6]]},"574":{"position":[[138,6],[1173,6]]},"576":{"position":[[46,6]]},"584":{"position":[[2344,6],[2403,7],[2977,6]]},"586":{"position":[[305,7],[2650,6],[3170,10]]},"592":{"position":[[528,6],[638,6],[673,6]]},"606":{"position":[[3481,6],[3906,6],[3953,6],[6606,6],[6676,6],[6760,6],[7562,6],[8470,6],[10883,6],[10912,6],[13592,6]]},"620":{"position":[[1306,6],[1447,6]]},"626":{"position":[[2016,6],[2192,6]]}}}],["access_by_lua_block",{"_index":1526,"t":{"620":{"position":[[3399,19]]}}}],["access_token",{"_index":1357,"t":{"606":{"position":[[6635,12]]}}}],["accompani",{"_index":973,"t":{"572":{"position":[[382,11]]}}}],["account",{"_index":483,"t":{"518":{"position":[[271,7]]},"564":{"position":[[977,7],[1091,8],[2388,7]]},"584":{"position":[[1641,8],[3747,8]]},"586":{"position":[[260,8],[737,7]]},"592":{"position":[[204,7],[487,7]]},"606":{"position":[[4186,7],[4230,7]]}}}],["acr",{"_index":365,"t":{"499":{"position":[[1037,3]]},"606":{"position":[[34,3]]}}}],["activ",{"_index":932,"t":{"566":{"position":[[66,6],[592,6]]}}}],["actual",{"_index":1219,"t":{"590":{"position":[[221,6]]},"592":{"position":[[124,6]]},"620":{"position":[[3721,6]]}}}],["ad",{"_index":105,"t":{"479":{"position":[[637,5]]},"497":{"position":[[7,6]]},"502":{"position":[[66,6]]},"520":{"position":[[79,5]]},"532":{"position":[[2230,2]]},"552":{"position":[[939,5]]},"562":{"position":[[294,2]]},"582":{"position":[[4,6],[49,2]]},"606":{"position":[[10213,2],[10928,5]]},"608":{"position":[[750,6]]}}}],["add",{"_index":168,"t":{"485":{"position":[[148,3]]},"493":{"position":[[432,3]]},"566":{"position":[[0,3],[809,3],[979,3]]},"568":{"position":[[64,3]]},"578":{"position":[[223,3],[431,3],[1312,3]]},"582":{"position":[[74,3]]},"584":{"position":[[605,3],[1296,4],[1989,3],[2336,3],[2567,3]]},"592":{"position":[[0,3]]},"598":{"position":[[80,3]]},"602":{"position":[[332,3]]},"606":{"position":[[6736,4],[14795,3]]}}}],["add_head",{"_index":862,"t":{"560":{"position":[[888,10]]},"620":{"position":[[1608,10],[2496,10],[2539,10]]}}}],["addedto",{"_index":401,"t":{"504":{"position":[[667,7],[902,7]]}}}],["addit",{"_index":609,"t":{"530":{"position":[[1553,10],[1614,8]]},"572":{"position":[[206,10],[775,8]]},"584":{"position":[[2066,10]]},"592":{"position":[[559,10]]},"606":{"position":[[6534,10]]},"620":{"position":[[1968,10]]}}}],["addition",{"_index":1329,"t":{"606":{"position":[[4278,12]]}}}],["address",{"_index":536,"t":{"528":{"position":[[1301,9]]},"530":{"position":[[230,7]]},"540":{"position":[[146,7],[268,7]]},"550":{"position":[[465,7],[496,8]]},"564":{"position":[[1804,7]]},"596":{"position":[[95,9],[199,9]]},"606":{"position":[[4487,7],[4611,8],[4668,7],[4777,8],[5785,7],[7100,7],[8199,7],[8218,7],[14146,8],[14239,7]]},"614":{"position":[[81,7],[875,8]]},"616":{"position":[[730,8]]},"624":{"position":[[1150,8]]},"626":{"position":[[1917,8],[2082,8]]}}}],["address=\"0.0.0.0:4180",{"_index":846,"t":{"560":{"position":[[312,22]]}}}],["address=\"http://:4180",{"_index":847,"t":{"560":{"position":[[345,23]]}}}],["adf",{"_index":624,"t":{"532":{"position":[[739,4],[2237,4]]},"534":{"position":[[128,5]]},"562":{"position":[[232,4]]},"568":{"position":[[9,4],[445,4]]}}}],["adfsconfig",{"_index":622,"t":{"532":{"position":[[676,10],[699,10]]}}}],["adfsopt",{"_index":623,"t":{"532":{"position":[[687,11]]}}}],["admin",{"_index":478,"t":{"518":{"position":[[164,5]]},"564":{"position":[[1300,5],[1736,5],[1856,5],[1942,5]]},"566":{"position":[[740,5]]},"574":{"position":[[1482,5],[1548,7]]},"588":{"position":[[574,6],[612,6]]},"606":{"position":[[4003,5],[4033,5]]}}}],["adminemail",{"_index":477,"t":{"518":{"position":[[121,10],[139,10]]}}}],["administr",{"_index":920,"t":{"564":{"position":[[1783,14]]},"568":{"position":[[14,14]]},"584":{"position":[[1626,14]]}}}],["advisori",{"_index":165,"t":{"485":{"position":[[23,10],[182,8],[411,9]]}}}],["ae",{"_index":1274,"t":{"602":{"position":[[640,3]]}}}],["affect",{"_index":161,"t":{"483":{"position":[[688,8]]}}}],["afterward",{"_index":798,"t":{"552":{"position":[[334,10]]}}}],["ag",{"_index":1346,"t":{"606":{"position":[[5098,3]]},"612":{"position":[[237,3],[256,5]]}}}],["again",{"_index":796,"t":{"552":{"position":[[240,6]]}}}],["against",{"_index":36,"t":{"477":{"position":[[404,7]]},"530":{"position":[[1433,7]]},"564":{"position":[[2192,7],[2455,7]]},"578":{"position":[[35,7]]},"584":{"position":[[163,7]]},"588":{"position":[[50,7]]},"606":{"position":[[323,7],[4304,7]]}}}],["age=2592000",{"_index":864,"t":{"560":{"position":[[929,12]]}}}],["agenc",{"_index":1140,"t":{"586":{"position":[[80,7],[718,6]]}}}],["agent",{"_index":774,"t":{"550":{"position":[[263,6]]},"606":{"position":[[8094,5],[8114,5],[8182,6]]},"612":{"position":[[753,6]]},"614":{"position":[[1372,5]]},"616":{"position":[[1444,5]]}}}],["agre",{"_index":178,"t":{"485":{"position":[[441,6]]}}}],["agreement",{"_index":1047,"t":{"580":{"position":[[124,9]]}}}],["ajax",{"_index":90,"t":{"479":{"position":[[335,4]]}}}],["algorithm:secretkey",{"_index":1375,"t":{"606":{"position":[[11400,21]]}}}],["alia",{"_index":452,"t":{"512":{"position":[[8,7]]},"534":{"position":[[8,7]]},"536":{"position":[[12,7]]}}}],["allow",{"_index":77,"t":{"479":{"position":[[143,8]]},"487":{"position":[[9,5]]},"499":{"position":[[1087,7],[1116,7]]},"504":{"position":[[85,6]]},"510":{"position":[[38,6]]},"514":{"position":[[392,6]]},"528":{"position":[[295,7],[459,7],[609,7],[1404,6],[1529,7],[2096,5],[2132,5],[2282,5]]},"530":{"position":[[868,6],[1389,6]]},"546":{"position":[[788,6],[1613,5]]},"548":{"position":[[188,8]]},"554":{"position":[[192,7],[254,7],[316,7]]},"566":{"position":[[404,5]]},"572":{"position":[[473,7],[1180,5],[1473,5],[1628,5]]},"574":{"position":[[1090,7]]},"576":{"position":[[715,7],[781,7]]},"584":{"position":[[2784,7],[4106,8]]},"586":{"position":[[2350,5]]},"588":{"position":[[23,6]]},"592":{"position":[[456,6]]},"598":{"position":[[117,5]]},"606":{"position":[[3538,5],[5734,5],[5876,5],[6565,7],[10339,6],[13327,7],[13428,7],[13693,7],[13781,5],[13894,5],[14525,5],[14627,8],[14655,8],[14767,5],[14850,5]]},"620":{"position":[[33,6]]},"624":{"position":[[38,6]]}}}],["allowed_email",{"_index":816,"t":{"554":{"position":[[276,15]]}}}],["allowed_email_domain",{"_index":815,"t":{"554":{"position":[[207,22]]}}}],["allowed_group",{"_index":812,"t":{"554":{"position":[[152,15]]}}}],["allowedgroup",{"_index":657,"t":{"532":{"position":[[2371,13],[2394,13]]}}}],["allowedto",{"_index":611,"t":{"530":{"position":[[1583,9]]}}}],["alon",{"_index":1383,"t":{"606":{"position":[[11866,5]]}}}],["alpha",{"_index":278,"t":{"493":{"position":[[44,5],[297,5],[353,5],[665,5]]},"495":{"position":[[15,5],[153,5],[194,5]]},"497":{"position":[[24,5],[92,5],[189,5],[510,5]]},"499":{"position":[[106,5],[1408,5],[1524,5]]},"504":{"position":[[22,5],[108,5],[267,6]]}}}],["alphaopt",{"_index":304,"t":{"493":{"position":[[607,12]]},"504":{"position":[[0,12]]},"520":{"position":[[13,13]]},"536":{"position":[[33,13]]},"540":{"position":[[13,13]]},"548":{"position":[[13,13]]}}}],["altern",{"_index":556,"t":{"528":{"position":[[1732,13]]},"552":{"position":[[523,14]]},"590":{"position":[[496,14]]}}}],["alway",{"_index":522,"t":{"528":{"position":[[532,6]]},"558":{"position":[[745,6]]}}}],["amazon",{"_index":838,"t":{"560":{"position":[[61,6],[255,6]]}}}],["amd64",{"_index":23,"t":{"477":{"position":[[251,7],[553,6]]}}}],["amount",{"_index":1391,"t":{"606":{"position":[[13252,6]]}}}],["anchor",{"_index":696,"t":{"544":{"position":[[625,6]]}}}],["and/or",{"_index":547,"t":{"528":{"position":[[1537,6]]}}}],["anoth",{"_index":411,"t":{"504":{"position":[[1037,7]]},"562":{"position":[[82,7]]},"564":{"position":[[176,7]]},"566":{"position":[[732,7]]}}}],["anyth",{"_index":523,"t":{"528":{"position":[[551,8]]}}}],["apach",{"_index":1433,"t":{"612":{"position":[[668,6]]}}}],["api",{"_index":480,"t":{"518":{"position":[[189,3]]},"564":{"position":[[250,4],[1263,5],[1285,5],[1326,4],[1742,3]]},"566":{"position":[[204,4]]},"578":{"position":[[78,3]]},"580":{"position":[[368,3]]},"584":{"position":[[1979,3]]},"606":{"position":[[4058,3]]}}}],["api/v1",{"_index":1239,"t":{"594":{"position":[[635,9]]}}}],["app",{"_index":788,"t":{"550":{"position":[[820,3]]},"566":{"position":[[109,4],[152,3],[344,4],[459,4],[563,4],[804,4],[974,4]]},"570":{"position":[[16,3]]},"584":{"position":[[2215,5],[2701,4],[3925,3]]},"586":{"position":[[1334,3]]}}}],["appear",{"_index":385,"t":{"502":{"position":[[0,8]]},"506":{"position":[[0,8]]},"508":{"position":[[0,8]]},"510":{"position":[[0,8]]},"512":{"position":[[16,8]]},"514":{"position":[[0,8]]},"516":{"position":[[0,8]]},"518":{"position":[[0,8]]},"520":{"position":[[0,8]]},"522":{"position":[[0,8]]},"524":{"position":[[0,8]]},"526":{"position":[[0,8]]},"528":{"position":[[0,8]]},"530":{"position":[[0,8]]},"532":{"position":[[0,8]]},"534":{"position":[[16,8]]},"536":{"position":[[20,8]]},"538":{"position":[[0,8]]},"540":{"position":[[0,8]]},"542":{"position":[[0,8]]},"544":{"position":[[0,8]]},"546":{"position":[[0,8]]},"548":{"position":[[0,8]]}}}],["append",{"_index":1436,"t":{"612":{"position":[[835,7]]},"620":{"position":[[2149,6]]}}}],["appli",{"_index":495,"t":{"520":{"position":[[428,7]]}}}],["applic",{"_index":51,"t":{"477":{"position":[[603,11]]},"552":{"position":[[228,11]]},"560":{"position":[[532,12]]},"562":{"position":[[35,11]]},"564":{"position":[[534,12],[547,11]]},"566":{"position":[[7,12],[212,11],[478,11]]},"568":{"position":[[74,11],[142,11],[174,12],[282,11]]},"578":{"position":[[230,12],[343,11],[468,12],[724,11]]},"582":{"position":[[14,11],[81,12],[124,10]]},"584":{"position":[[1817,13],[1890,12],[2169,11],[2255,11],[2391,11],[2542,12],[2571,12],[2668,11],[2989,12],[3549,11],[3806,12],[3876,11]]},"586":{"position":[[467,11],[559,11],[779,11],[3018,11],[3109,11]]},"590":{"position":[[19,11],[108,12]]},"594":{"position":[[13,12]]},"606":{"position":[[9144,10]]}}}],["application.y",{"_index":415,"t":{"504":{"position":[[1268,15]]}}}],["application/json",{"_index":94,"t":{"479":{"position":[[371,17]]}}}],["approach",{"_index":826,"t":{"558":{"position":[[495,8]]}}}],["appropri",{"_index":267,"t":{"491":{"position":[[1239,14],[1442,14]]},"564":{"position":[[594,11]]},"572":{"position":[[1750,11]]},"574":{"position":[[421,11]]},"576":{"position":[[490,11]]},"578":{"position":[[1107,11]]}}}],["approv",{"_index":363,"t":{"499":{"position":[[1005,8]]},"606":{"position":[[76,8],[7619,8]]}}}],["approval_prompt",{"_index":1286,"t":{"606":{"position":[[105,15]]}}}],["apps/oauth2",{"_index":1209,"t":{"588":{"position":[[351,15]]}}}],["aren't",{"_index":1368,"t":{"606":{"position":[[10547,6]]}}}],["arg",{"_index":1077,"t":{"584":{"position":[[949,5]]}}}],["argument",{"_index":1206,"t":{"588":{"position":[[218,9]]},"604":{"position":[[19,8],[116,8]]},"610":{"position":[[19,8],[180,8]]}}}],["arm64",{"_index":25,"t":{"477":{"position":[[269,5]]}}}],["armv6",{"_index":24,"t":{"477":{"position":[[259,5]]}}}],["around",{"_index":544,"t":{"528":{"position":[[1493,6]]}}}],["ask",{"_index":86,"t":{"479":{"position":[[256,5]]}}}],["assembl",{"_index":1267,"t":{"602":{"position":[[347,8]]}}}],["assemblynam",{"_index":1269,"t":{"602":{"position":[[390,12]]}}}],["assign",{"_index":922,"t":{"564":{"position":[[1835,6]]},"584":{"position":[[2926,11],[4073,12]]}}}],["assum",{"_index":1150,"t":{"586":{"position":[[526,6]]}}}],["attacksbetweem",{"_index":739,"t":{"546":{"position":[[1647,14]]}}}],["attempt",{"_index":382,"t":{"499":{"position":[[1338,10]]},"606":{"position":[[168,8]]},"614":{"position":[[99,10],[1062,8]]}}}],["attent",{"_index":144,"t":{"483":{"position":[[294,9]]}}}],["attribut",{"_index":1172,"t":{"586":{"position":[[1446,9]]},"606":{"position":[[1794,9]]},"620":{"position":[[2101,10]]}}}],["aud",{"_index":607,"t":{"530":{"position":[[1465,3]]},"606":{"position":[[2490,3],[6492,5],[12141,3]]}}}],["audienc",{"_index":610,"t":{"530":{"position":[[1564,9]]},"576":{"position":[[357,10],[388,8],[417,8]]},"584":{"position":[[2225,9]]},"606":{"position":[[6431,8],[6483,8],[6511,8],[6545,9]]}}}],["audienceclaim",{"_index":605,"t":{"530":{"position":[[1351,14],[1375,13]]}}}],["auth",{"_index":70,"t":{"479":{"position":[[65,4]]},"499":{"position":[[630,4],[669,4]]},"510":{"position":[[412,4],[470,4]]},"522":{"position":[[633,4],[691,4]]},"552":{"position":[[572,4],[633,4]]},"564":{"position":[[1015,4],[1271,6]]},"566":{"position":[[1240,4]]},"568":{"position":[[450,4]]},"572":{"position":[[179,4]]},"574":{"position":[[65,4]]},"578":{"position":[[5,4]]},"606":{"position":[[131,4],[184,4],[466,4],[535,4],[6747,4],[6916,4],[6942,5],[7278,4],[10706,4],[10727,4],[10750,4],[10775,4],[10899,4],[11088,4],[11113,4],[11508,4],[11587,4],[11635,4],[11736,4],[11895,4]]},"612":{"position":[[519,4]]},"614":{"position":[[606,4],[790,4],[1057,4],[1473,4],[1524,4]]},"616":{"position":[[1545,4]]},"620":{"position":[[94,5],[477,4],[578,4]]},"624":{"position":[[437,4],[631,4],[912,4],[1131,5]]},"626":{"position":[[556,4],[841,4],[1111,4],[1317,4],[1670,4],[1889,4],[2003,4],[2051,4],[2179,4]]}}}],["auth/pass_basic_auth",{"_index":332,"t":{"499":{"position":[[323,20]]}}}],["auth/set_basic_auth",{"_index":338,"t":{"499":{"position":[[478,19]]}}}],["auth_cooki",{"_index":1498,"t":{"620":{"position":[[1568,12],[1630,13],[2252,13],[2305,13]]}}}],["auth_cookie_name_0",{"_index":1507,"t":{"620":{"position":[[2285,19],[2518,20]]}}}],["auth_cookie_name_1",{"_index":1508,"t":{"620":{"position":[[2323,19],[2561,20]]}}}],["auth_cookie_name_1=$auth_cookie_name_upstream_1$1",{"_index":1509,"t":{"620":{"position":[[2343,52]]}}}],["auth_cookie_name_upstream_1",{"_index":1504,"t":{"620":{"position":[[2014,28],[2463,30]]}}}],["auth_request",{"_index":793,"t":{"550":{"position":[[1072,12]]},"606":{"position":[[10841,12],[11051,12],[11159,12]]},"620":{"position":[[10,12],[804,12],[927,12],[1538,12],[1871,12]]}}}],["auth_request_set",{"_index":1494,"t":{"620":{"position":[[1098,16],[1157,16],[1360,16],[1551,16],[1997,16],[2857,16],[3340,16]]}}}],["authent",{"_index":82,"t":{"479":{"position":[[200,14],[294,14],[458,14],[657,14]]},"487":{"position":[[24,14]]},"489":{"position":[[802,12]]},"504":{"position":[[444,14],[746,13],[1134,13]]},"532":{"position":[[1871,14]]},"546":{"position":[[1833,15]]},"550":{"position":[[109,14]]},"552":{"position":[[154,14],[294,14]]},"560":{"position":[[494,12]]},"564":{"position":[[2497,14]]},"572":{"position":[[234,14]]},"586":{"position":[[2935,13]]},"588":{"position":[[37,12]]},"592":{"position":[[498,13]]},"596":{"position":[[111,13]]},"606":{"position":[[153,14],[224,14],[277,13],[310,12],[2159,12],[2245,12],[4291,12],[5694,14],[7224,15],[11538,14],[11654,14],[11768,14],[11946,14],[13731,15],[13910,14]]},"608":{"position":[[291,13]]},"612":{"position":[[419,15]]},"614":{"position":[[0,14],[113,13],[365,13],[440,12],[514,14],[1013,13]]},"620":{"position":[[49,12]]},"624":{"position":[[56,12]]},"626":{"position":[[273,13]]}}}],["authenticationprovid",{"_index":409,"t":{"504":{"position":[[994,22]]}}}],["autherror",{"_index":1448,"t":{"614":{"position":[[464,9]]}}}],["authfailur",{"_index":1446,"t":{"614":{"position":[[406,11]]}}}],["author",{"_index":336,"t":{"499":{"position":[[421,13],[536,13]]},"564":{"position":[[606,10],[688,10],[994,11]]},"572":{"position":[[67,13]]},"574":{"position":[[1031,14]]},"582":{"position":[[211,13]]},"584":{"position":[[1757,13],[1860,13],[1993,13],[2098,13],[2508,13],[2807,13],[3414,13],[4115,13],[4256,13]]},"586":{"position":[[3369,14]]},"596":{"position":[[3,9],[68,9],[179,9]]},"606":{"position":[[6809,13],[6869,13],[10967,13],[10997,13],[11971,13]]},"620":{"position":[[1667,13]]},"626":{"position":[[2031,13],[2207,13]]}}}],["authorizationnginx.ingress.kubernetes.io/auth",{"_index":1520,"t":{"620":{"position":[[3120,45]]}}}],["authresponsehead",{"_index":1574,"t":{"626":{"position":[[1978,20],[2154,20]]}}}],["authsuccess",{"_index":1444,"t":{"614":{"position":[[339,11],[1494,11]]}}}],["auto",{"_index":1569,"t":{"626":{"position":[[776,4]]}}}],["automat",{"_index":795,"t":{"552":{"position":[[186,13]]}}}],["automaticallyanchor",{"_index":692,"t":{"544":{"position":[[510,21]]}}}],["avail",{"_index":27,"t":{"477":{"position":[[280,10]]},"487":{"position":[[198,9],[249,9]]},"491":{"position":[[1271,9]]},"495":{"position":[[240,10]]},"499":{"position":[[85,9]]},"504":{"position":[[136,9]]},"524":{"position":[[195,9]]},"584":{"position":[[2037,9]]},"586":{"position":[[334,9]]},"608":{"position":[[737,9],[871,9],[950,9]]},"614":{"position":[[766,9]]},"616":{"position":[[618,9]]},"618":{"position":[[490,9]]}}}],["azur",{"_index":377,"t":{"499":{"position":[[1284,6]]},"532":{"position":[[660,5],[2223,6]]},"534":{"position":[[134,6]]},"562":{"position":[[226,5],[288,5]]},"566":{"position":[[59,6],[586,5],[1234,5]]},"582":{"position":[[43,5]]},"606":{"position":[[364,5],[5954,5],[10206,6]]},"620":{"position":[[3676,7]]}}}],["azureconfig",{"_index":620,"t":{"532":{"position":[[594,11],[619,11]]}}}],["azureopt",{"_index":621,"t":{"532":{"position":[[606,12]]}}}],["b",{"_index":8,"t":{"477":{"position":[[78,2]]},"606":{"position":[[4368,1]]},"626":{"position":[[463,2],[1044,2],[1517,1]]}}}],["back",{"_index":231,"t":{"491":{"position":[[100,4],[172,4]]}}}],["backend",{"_index":200,"t":{"487":{"position":[[224,9],[259,8]]},"489":{"position":[[19,7],[42,7],[141,8],[366,7]]},"491":{"position":[[18,7],[1291,7]]},"606":{"position":[[10644,8]]},"620":{"position":[[1041,8],[1352,7]]},"624":{"position":[[393,7],[659,7],[769,8],[837,8],[1279,7]]},"626":{"position":[[527,7],[812,7],[1139,7],[1345,7],[1455,8],[1527,8],[1595,8]]}}}],["backport",{"_index":190,"t":{"485":{"position":[[632,8]]}}}],["backslash",{"_index":555,"t":{"528":{"position":[[1677,9]]}}}],["backup",{"_index":1344,"t":{"606":{"position":[[5034,6],[5169,7]]},"612":{"position":[[266,6],[293,9],[310,6]]}}}],["balanc",{"_index":842,"t":{"560":{"position":[[100,10],[241,8],[290,10]]}}}],["banner",{"_index":1324,"t":{"606":{"position":[[2962,6],[2990,6],[3032,7]]}}}],["bar",{"_index":709,"t":{"546":{"position":[[603,8],[641,5]]}}}],["base",{"_index":301,"t":{"493":{"position":[[505,5]]},"495":{"position":[[57,5]]},"504":{"position":[[523,5]]},"546":{"position":[[1386,7]]},"574":{"position":[[1025,5]]},"584":{"position":[[3391,5],[3929,4]]},"606":{"position":[[13198,5]]},"608":{"position":[[1243,5]]}}}],["base/dir",{"_index":734,"t":{"546":{"position":[[1467,12]]}}}],["base64",{"_index":503,"t":{"522":{"position":[[168,6]]},"538":{"position":[[213,6]]},"602":{"position":[[241,6],[302,6],[586,6]]},"606":{"position":[[1671,6]]}}}],["base64url",{"_index":244,"t":{"491":{"position":[[457,9]]}}}],["bash",{"_index":1250,"t":{"602":{"position":[[73,4]]}}}],["basic",{"_index":331,"t":{"499":{"position":[[317,5],[472,5],[624,5]]},"510":{"position":[[406,5],[464,5]]},"522":{"position":[[627,5],[685,5]]},"606":{"position":[[460,5],[529,5],[6910,5],[6936,5],[7272,5],[8054,5],[8141,5],[11082,5],[11107,5]]}}}],["basicauthpassword",{"_index":445,"t":{"510":{"position":[[330,17],[361,17]]},"522":{"position":[[551,17],[582,17]]}}}],["baz",{"_index":710,"t":{"546":{"position":[[648,12],[690,4],[957,11]]}}}],["baz/abc/123",{"_index":720,"t":{"546":{"position":[[1021,12]]}}}],["bcrypt",{"_index":1331,"t":{"606":{"position":[[4374,6]]}}}],["bearer",{"_index":81,"t":{"479":{"position":[[181,6]]},"606":{"position":[[2412,6],[6883,6],[11011,6],[12045,6],[12106,6]]}}}],["becom",{"_index":448,"t":{"510":{"position":[[453,6]]},"522":{"position":[[674,6]]},"610":{"position":[[417,7],[481,7]]}}}],["befor",{"_index":293,"t":{"493":{"position":[[282,6]]},"497":{"position":[[0,6]]},"499":{"position":[[1488,6]]},"546":{"position":[[829,6],[1050,6]]},"606":{"position":[[5304,6]]}}}],["beforward",{"_index":567,"t":{"528":{"position":[[2299,11]]}}}],["behind",{"_index":61,"t":{"477":{"position":[[744,6]]},"606":{"position":[[10258,6]]}}}],["believ",{"_index":128,"t":{"483":{"position":[[12,7]]}}}],["beload",{"_index":439,"t":{"510":{"position":[[204,8]]},"522":{"position":[[425,8]]}}}],["belong",{"_index":475,"t":{"514":{"position":[[454,6]]},"572":{"position":[[510,6],[1535,6]]},"606":{"position":[[3591,6]]}}}],["below",{"_index":302,"t":{"493":{"position":[[541,5],[728,6],[863,5]]},"495":{"position":[[104,6],[271,5]]},"560":{"position":[[53,7]]},"584":{"position":[[345,6]]},"602":{"position":[[50,5]]},"606":{"position":[[14892,5]]},"614":{"position":[[167,5],[324,5]]},"616":{"position":[[48,5]]},"618":{"position":[[237,6]]}}}],["beoverridden",{"_index":565,"t":{"528":{"position":[[2189,12]]}}}],["bepass",{"_index":563,"t":{"528":{"position":[[2057,8]]}}}],["between",{"_index":195,"t":{"487":{"position":[[53,7]]},"504":{"position":[[290,7]]},"546":{"position":[[2135,7]]},"606":{"position":[[2758,7]]}}}],["bewar",{"_index":292,"t":{"493":{"position":[[267,6]]},"552":{"position":[[838,6]]}}}],["bin/dex",{"_index":1076,"t":{"584":{"position":[[848,7]]}}}],["binari",{"_index":4,"t":{"477":{"position":[[43,6],[160,6],[338,8]]}}}],["bindaddress",{"_index":419,"t":{"504":{"position":[[1377,11],[1685,11]]},"540":{"position":[[108,11],[127,11]]}}}],["bit",{"_index":240,"t":{"491":{"position":[[387,3],[438,3]]},"586":{"position":[[823,4],[1057,3]]}}}],["bitbucket",{"_index":378,"t":{"499":{"position":[[1291,10]]},"532":{"position":[[832,9]]},"534":{"position":[[141,10]]},"562":{"position":[[345,9]]},"592":{"position":[[477,9],[594,9],[713,9]]}}}],["bitbucketconfig",{"_index":625,"t":{"532":{"position":[[754,15],[787,15]]}}}],["bitbucketopt",{"_index":626,"t":{"532":{"position":[[770,16]]}}}],["blank",{"_index":673,"t":{"540":{"position":[[186,5],[315,5]]}}}],["block",{"_index":558,"t":{"528":{"position":[[1763,6],[1845,5]]},"584":{"position":[[625,5]]},"614":{"position":[[294,5]]}}}],["bodi",{"_index":743,"t":{"546":{"position":[[1825,4]]},"620":{"position":[[842,4]]}}}],["bool",{"_index":389,"t":{"502":{"position":[[56,4]]},"520":{"position":[[281,4]]},"530":{"position":[[166,4],[322,4],[501,4],[849,4]]},"546":{"position":[[1502,4],[1725,4],[2250,4],[2387,4]]},"548":{"position":[[131,4]]},"606":{"position":[[144,4],[1188,4],[1703,4],[2049,4],[2289,4],[2836,4],[2890,4],[4835,4],[4997,4],[5757,4],[5871,4],[6021,4],[6619,4],[6830,4],[6921,4],[7071,4],[7332,4],[7403,4],[8402,4],[9679,4],[9798,4],[10045,4],[10238,4],[10488,4],[10695,4],[10988,4],[11093,4],[11206,4],[11445,4],[11523,4],[11914,4],[12059,4],[12246,4],[12390,4],[12496,4],[12612,4],[12711,4]]}}}],["both",{"_index":417,"t":{"504":{"position":[[1302,4],[1610,4]]},"544":{"position":[[291,5]]},"620":{"position":[[2405,4]]}}}],["bracket",{"_index":1335,"t":{"606":{"position":[[4580,8],[4746,8]]}}}],["break",{"_index":283,"t":{"493":{"position":[[89,8]]}}}],["bring",{"_index":143,"t":{"483":{"position":[[281,5]]}}}],["brows",{"_index":310,"t":{"493":{"position":[[842,6]]}}}],["browser",{"_index":1197,"t":{"586":{"position":[[2922,8]]},"606":{"position":[[14744,8]]}}}],["browserxssfilt",{"_index":1553,"t":{"624":{"position":[[975,17]]},"626":{"position":[[1733,17]]}}}],["bs=32",{"_index":1257,"t":{"602":{"position":[[213,5]]}}}],["buffer",{"_index":751,"t":{"546":{"position":[[2165,6]]},"606":{"position":[[2784,7]]}}}],["build",{"_index":9,"t":{"477":{"position":[[81,5]]},"558":{"position":[[881,8]]},"586":{"position":[[2563,6],[2581,5]]}}}],["built",{"_index":1059,"t":{"584":{"position":[[157,5]]}}}],["bundl",{"_index":1173,"t":{"586":{"position":[[1456,7]]}}}],["button",{"_index":1385,"t":{"606":{"position":[[12383,6]]}}}],["button=tru",{"_index":1182,"t":{"586":{"position":[[1902,11]]}}}],["bypass",{"_index":1380,"t":{"606":{"position":[[11647,6],[11761,6],[12251,6],[13903,6]]}}}],["bysom",{"_index":690,"t":{"544":{"position":[[457,6]]}}}],["byte",{"_index":501,"t":{"522":{"position":[[145,6]]},"538":{"position":[[190,6]]},"602":{"position":[[581,4],[633,6]]},"616":{"position":[[1215,5]]}}}],["c",{"_index":17,"t":{"477":{"position":[[182,2],[513,1]]},"602":{"position":[[115,1]]}}}],["c=us/st=washington/l=dc/o=gsa/ou=18f/cn=localhost",{"_index":1168,"t":{"586":{"position":[[1193,53]]}}}],["ca",{"_index":351,"t":{"499":{"position":[[865,2]]},"532":{"position":[[1707,2]]},"606":{"position":[[7700,2],[7731,2]]}}}],["cafil",{"_index":648,"t":{"532":{"position":[[1660,7],[1677,7]]}}}],["call",{"_index":481,"t":{"518":{"position":[[193,5]]},"564":{"position":[[1929,5]]},"606":{"position":[[4062,5]]}}}],["callback",{"_index":789,"t":{"550":{"position":[[860,8]]},"572":{"position":[[81,8]]},"584":{"position":[[594,10]]},"590":{"position":[[121,8]]},"592":{"position":[[28,9]]}}}],["caller",{"_index":525,"t":{"528":{"position":[[705,6]]}}}],["capitalis",{"_index":1425,"t":{"610":{"position":[[108,12]]}}}],["captur",{"_index":705,"t":{"546":{"position":[[507,8],[699,7],[885,7]]}}}],["case",{"_index":95,"t":{"479":{"position":[[398,4]]},"483":{"position":[[533,4]]},"491":{"position":[[1079,5]]},"546":{"position":[[1214,4]]},"586":{"position":[[3451,5]]},"588":{"position":[[839,5]]},"598":{"position":[[90,4]]},"606":{"position":[[12356,4]]}}}],["caseadd",{"_index":1268,"t":{"602":{"position":[[376,7]]}}}],["center",{"_index":887,"t":{"564":{"position":[[230,6],[314,6],[421,6]]}}}],["cert",{"_index":681,"t":{"542":{"position":[[260,4],[278,4]]},"558":{"position":[[65,4],[306,4]]},"606":{"position":[[12851,4]]}}}],["cert.pem",{"_index":1163,"t":{"586":{"position":[[1160,8]]}}}],["certif",{"_index":423,"t":{"504":{"position":[[1480,11],[1788,11]]},"532":{"position":[[1710,12]]},"540":{"position":[[400,11]]},"542":{"position":[[68,11],[294,11]]},"586":{"position":[[1008,11]]},"606":{"position":[[7734,12],[12520,12],[12636,12],[12876,11]]}}}],["certresolv",{"_index":1542,"t":{"624":{"position":[[447,13],[672,13]]},"626":{"position":[[624,13],[907,13],[1152,13],[1358,13]]}}}],["challeng",{"_index":660,"t":{"532":{"position":[[2513,9]]},"606":{"position":[[744,9],[782,10]]}}}],["chang",{"_index":284,"t":{"493":{"position":[[98,7],[202,8]]},"504":{"position":[[283,6]]},"530":{"position":[[783,6]]},"550":{"position":[[150,7]]},"578":{"position":[[82,8]]},"590":{"position":[[651,6]]},"606":{"position":[[1307,7]]}}}],["channel",{"_index":1313,"t":{"606":{"position":[[2339,7]]}}}],["charact",{"_index":546,"t":{"528":{"position":[[1514,10],[1721,10],[1881,10]]}}}],["check",{"_index":72,"t":{"479":{"position":[[80,7]]},"544":{"position":[[134,7]]},"550":{"position":[[391,6]]},"564":{"position":[[2184,7],[2447,7]]},"606":{"position":[[8067,6],[8154,6],[8171,5]]}}}],["checkedaft",{"_index":587,"t":{"530":{"position":[[655,12]]}}}],["checksum",{"_index":38,"t":{"477":{"position":[[430,8]]}}}],["chomp",{"_index":557,"t":{"528":{"position":[[1754,8]]}}}],["choos",{"_index":0,"t":{"477":{"position":[[0,6]]},"504":{"position":[[1288,6],[1596,6]]},"564":{"position":[[108,6],[243,6],[286,6],[327,6],[434,6],[497,6],[522,6],[577,6],[801,6],[1278,6],[1764,6],[2020,6]]},"566":{"position":[[52,6],[187,6]]}}}],["cidr",{"_index":1394,"t":{"606":{"position":[[13879,4]]}}}],["cipher",{"_index":835,"t":{"558":{"position":[[797,6]]}}}],["claim",{"_index":438,"t":{"510":{"position":[[75,5],[123,5],[136,5],[161,5],[393,5],[442,5]]},"522":{"position":[[344,5],[357,5],[382,5],[614,5],[663,5]]},"530":{"position":[[561,5],[1101,5],[1201,5],[1302,5],[1410,5],[1469,5]]},"562":{"position":[[477,7],[508,5]]},"574":{"position":[[361,5]]},"576":{"position":[[303,5]]},"584":{"position":[[1782,6]]},"606":{"position":[[6067,5],[6282,5],[6306,5],[6360,5],[6384,5],[6440,5],[6464,5]]}}}],["claim/user_id_claim",{"_index":367,"t":{"499":{"position":[[1067,19]]}}}],["claimsourc",{"_index":436,"t":{"510":{"position":[[26,11]]},"538":{"position":[[13,12]]}}}],["clear",{"_index":784,"t":{"550":{"position":[[601,6],[656,5]]}}}],["click",{"_index":912,"t":{"564":{"position":[[1291,5]]},"566":{"position":[[138,5],[283,5],[494,5],[568,5],[921,5]]},"568":{"position":[[199,5]]},"584":{"position":[[1983,5],[2647,5]]}}}],["client",{"_index":206,"t":{"489":{"position":[[187,6],[340,6],[481,6]]},"491":{"position":[[109,6]]},"499":{"position":[[712,6],[732,6],[765,6]]},"530":{"position":[[1445,6],[1630,6]]},"532":{"position":[[140,6],[269,6],[441,6]]},"558":{"position":[[435,6],[453,6]]},"560":{"position":[[1424,6],[1442,6]]},"564":{"position":[[511,6],[834,6],[848,6],[1228,6],[1490,6],[1914,6]]},"566":{"position":[[1083,6],[1124,6]]},"568":{"position":[[239,6],[250,6],[349,6],[390,6]]},"574":{"position":[[103,6],[292,6],[460,6],[498,6]]},"576":{"position":[[11,6],[73,6],[234,6],[381,6],[438,6],[534,6],[565,6],[847,6]]},"578":{"position":[[748,6],[777,6]]},"584":{"position":[[1011,6],[1034,6],[2891,6],[2905,6],[4169,6],[4183,6]]},"586":{"position":[[1587,6],[3565,6],[3589,6]]},"588":{"position":[[414,6],[428,6],[548,6],[582,6]]},"590":{"position":[[338,6],[352,6],[442,6],[466,6]]},"592":{"position":[[275,6],[289,6],[376,6],[400,6]]},"594":{"position":[[175,6],[189,6],[355,6],[405,6]]},"606":{"position":[[549,6],[576,6],[630,6],[661,6],[677,6],[723,6],[4564,8],[4730,8],[8516,6],[8584,7],[12163,6],[14013,6]]},"614":{"position":[[677,11],[833,6],[1408,7]]},"616":{"position":[[413,11],[688,6],[1480,7]]},"626":{"position":[[2276,6],[2307,6]]}}}],["client'",{"_index":995,"t":{"574":{"position":[[518,8]]},"576":{"position":[[550,8],[585,8]]}}}],["client/remot",{"_index":1454,"t":{"614":{"position":[[858,13]]},"616":{"position":[[713,13]]}}}],["client_id",{"_index":1114,"t":{"584":{"position":[[3499,9],[4564,13]]},"594":{"position":[[368,9]]}}}],["client_secret",{"_index":1115,"t":{"584":{"position":[[3513,13]]},"594":{"position":[[422,13]]}}}],["clientid",{"_index":613,"t":{"532":{"position":[[102,8],[118,8]]}}}],["clientsecret",{"_index":615,"t":{"532":{"position":[[223,12],[243,12],[475,12]]}}}],["clientsecretfil",{"_index":616,"t":{"532":{"position":[[356,16],[380,16]]}}}],["closest",{"_index":700,"t":{"546":{"position":[[364,7]]}}}],["cloud",{"_index":840,"t":{"560":{"position":[[80,5]]},"586":{"position":[[2259,5]]}}}],["cloud/dock",{"_index":1186,"t":{"586":{"position":[[2179,12]]}}}],["cluster",{"_index":268,"t":{"491":{"position":[[1260,7],[1418,7]]},"606":{"position":[[8852,7],[8904,7],[8993,7],[9671,7],[9701,8],[9727,7]]}}}],["cluster=tru",{"_index":271,"t":{"491":{"position":[[1367,12],[1515,12]]}}}],["code",{"_index":659,"t":{"532":{"position":[[2508,4]]},"546":{"position":[[2005,4]]},"584":{"position":[[2821,4],[4129,4]]},"606":{"position":[[739,4],[777,4]]},"616":{"position":[[1269,4]]}}}],["codematch",{"_index":744,"t":{"546":{"position":[[1864,12]]}}}],["collabor",{"_index":169,"t":{"485":{"position":[[161,12]]},"514":{"position":[[217,13],[494,13]]},"572":{"position":[[310,13],[550,14],[934,13],[1104,13],[1456,13],[1575,14]]},"606":{"position":[[3327,13],[3451,13],[3631,13]]}}}],["collaboratorsit",{"_index":472,"t":{"514":{"position":[[315,15]]}}}],["collect",{"_index":668,"t":{"536":{"position":[[62,10]]},"548":{"position":[[47,10]]}}}],["combin",{"_index":1396,"t":{"606":{"position":[[13961,8]]},"612":{"position":[[675,8]]}}}],["come",{"_index":680,"t":{"542":{"position":[[242,4],[338,4]]}}}],["comma",{"_index":813,"t":{"554":{"position":[[168,5],[230,5],[292,5]]},"572":{"position":[[889,5],[1605,5],[1669,5]]},"578":{"position":[[1025,5]]},"606":{"position":[[2627,5],[3281,5],[3747,5]]},"608":{"position":[[1057,5]]}}}],["command",{"_index":55,"t":{"477":{"position":[[673,7]]},"491":{"position":[[731,8]]},"558":{"position":[[135,7]]},"560":{"position":[[1172,7]]},"588":{"position":[[205,7]]},"590":{"position":[[693,7]]},"600":{"position":[[35,7],[135,7]]},"602":{"position":[[56,9]]},"604":{"position":[[6,7]]},"610":{"position":[[6,7],[365,7]]},"612":{"position":[[140,8]]}}}],["commandlin",{"_index":1196,"t":{"586":{"position":[[2830,12]]}}}],["common",{"_index":429,"t":{"506":{"position":[[99,6],[152,8]]},"582":{"position":[[204,6]]},"606":{"position":[[411,6],[449,8]]}}}],["commun",{"_index":112,"t":{"481":{"position":[[23,9]]}}}],["compat",{"_index":1356,"t":{"606":{"position":[[5973,14]]}}}],["complet",{"_index":213,"t":{"489":{"position":[[405,10]]}}}],["compos",{"_index":147,"t":{"483":{"position":[[353,7]]},"491":{"position":[[230,8]]}}}],["compress",{"_index":1340,"t":{"606":{"position":[[4826,8],[4868,10]]},"612":{"position":[[332,10],[354,10]]}}}],["compris",{"_index":248,"t":{"491":{"position":[[565,9]]}}}],["concurr",{"_index":223,"t":{"489":{"position":[[628,12]]}}}],["confident",{"_index":989,"t":{"574":{"position":[[150,13]]},"576":{"position":[[58,14]]}}}],["config",{"_index":54,"t":{"477":{"position":[[660,6]]},"493":{"position":[[691,6]]},"495":{"position":[[159,6],[200,6]]},"497":{"position":[[30,6],[82,6],[179,6],[197,6],[487,7],[516,6],[551,6]]},"499":{"position":[[1394,6],[1414,6],[1530,6]]},"550":{"position":[[182,6]]},"560":{"position":[[46,6],[645,6]]},"578":{"position":[[495,6]]},"584":{"position":[[3684,6],[4346,6],[4845,6]]},"590":{"position":[[545,6]]},"600":{"position":[[82,6]]},"604":{"position":[[50,6],[162,6],[235,6]]},"606":{"position":[[861,6],[883,6]]},"608":{"position":[[1173,6]]},"620":{"position":[[2906,6]]}}}],["config=/etc/oauth2",{"_index":1284,"t":{"604":{"position":[[307,18]]}}}],["configur",{"_index":52,"t":{"477":{"position":[[631,9],[720,9]]},"479":{"position":[[518,10],[698,14]]},"491":{"position":[[1031,9],[1153,9],[1390,9]]},"493":{"position":[[303,13],[359,13],[447,13],[511,13],[587,14],[639,14],[671,14],[898,13]]},"495":{"position":[[21,14]]},"497":{"position":[[123,13],[318,13],[406,13]]},"499":{"position":[[112,14]]},"504":{"position":[[39,13],[169,13],[402,9],[634,9],[869,9],[1225,9],[1464,9],[1547,9],[1772,9],[1850,9]]},"528":{"position":[[48,13]]},"532":{"position":[[43,13],[556,14],[641,14],[720,14],[813,14],[902,14],[989,14],[1075,14],[1155,14],[1213,15],[1285,14]]},"540":{"position":[[49,13],[454,13]]},"546":{"position":[[53,13]]},"548":{"position":[[309,13]]},"550":{"position":[[832,10]]},"552":{"position":[[971,13]]},"554":{"position":[[86,10]]},"556":{"position":[[26,15]]},"558":{"position":[[0,9],[176,13],[481,13],[713,11]]},"560":{"position":[[0,9],[1213,13]]},"562":{"position":[[105,9],[409,13]]},"566":{"position":[[1039,9]]},"568":{"position":[[268,9],[306,9]]},"584":{"position":[[360,9],[611,13],[1535,9],[1747,9],[1847,9],[2372,9],[3011,13],[3531,10]]},"588":{"position":[[165,14]]},"590":{"position":[[304,10]]},"592":{"position":[[442,13],[570,13]]},"600":{"position":[[20,10],[234,13]]},"606":{"position":[[261,13],[2555,13],[9169,15],[10143,13],[12337,10],[12831,13]]},"608":{"position":[[180,10],[511,10],[775,10],[1031,10]]},"610":{"position":[[339,13]]},"612":{"position":[[67,10],[183,9],[589,12]]},"614":{"position":[[582,9],[654,10]]},"616":{"position":[[315,9],[390,10]]},"618":{"position":[[134,13],[349,9],[425,10]]},"620":{"position":[[2798,13],[3744,10]]},"624":{"position":[[295,14]]},"626":{"position":[[240,10]]}}}],["conflict",{"_index":227,"t":{"489":{"position":[[768,9]]}}}],["conjunct",{"_index":410,"t":{"504":{"position":[[1020,11]]},"606":{"position":[[7248,11],[8964,11],[9461,11],[9621,11]]}}}],["connect",{"_index":260,"t":{"491":{"position":[[942,10],[970,10],[1223,10],[1426,10]]},"530":{"position":[[87,7],[993,7]]},"532":{"position":[[1748,10]]},"560":{"position":[[414,11]]},"562":{"position":[[304,7],[556,7]]},"576":{"position":[[97,8]]},"584":{"position":[[7,7],[227,7],[271,7],[2635,7]]},"586":{"position":[[869,7],[913,8]]},"606":{"position":[[6114,7],[7772,10],[8860,10],[8912,10],[9009,10],[9227,10],[9323,11],[9516,10],[9569,10],[9684,7],[9735,10],[9803,7],[9894,10]]}}}],["connect/auth",{"_index":999,"t":{"574":{"position":[[615,13]]}}}],["connect/token",{"_index":1000,"t":{"574":{"position":[[710,14]]}}}],["connect/userinfo",{"_index":1001,"t":{"574":{"position":[[807,17],[908,17]]}}}],["consent",{"_index":530,"t":{"528":{"position":[[970,7],[1138,7]]},"564":{"position":[[341,7]]}}}],["consid",{"_index":395,"t":{"504":{"position":[[256,10]]},"528":{"position":[[1694,10]]}}}],["consol",{"_index":958,"t":{"568":{"position":[[29,7]]}}}],["consum",{"_index":1051,"t":{"580":{"position":[[353,8],[380,8]]},"592":{"position":[[16,8]]}}}],["contact",{"_index":1141,"t":{"586":{"position":[[96,7],[135,7]]}}}],["contain",{"_index":276,"t":{"493":{"position":[[17,8]]},"504":{"position":[[13,8]]},"520":{"position":[[561,8]]},"522":{"position":[[315,10]]},"530":{"position":[[1107,8],[1207,8],[1308,8]]},"538":{"position":[[360,10]]},"540":{"position":[[359,8]]},"542":{"position":[[25,8]]},"584":{"position":[[1466,9],[4746,10]]},"586":{"position":[[2508,8]]},"606":{"position":[[6312,8],[6390,8],[6470,8],[11277,7]]},"614":{"position":[[53,7],[305,7]]},"620":{"position":[[2217,7]]}}}],["content",{"_index":1169,"t":{"586":{"position":[[1251,8]]},"620":{"position":[[864,7],[2240,8]]}}}],["contenttypenosniff",{"_index":1554,"t":{"624":{"position":[[998,19]]},"626":{"position":[[1756,19]]}}}],["contrib",{"_index":1283,"t":{"604":{"position":[[257,7]]}}}],["control",{"_index":1366,"t":{"606":{"position":[[10282,8]]}}}],["convert",{"_index":314,"t":{"497":{"position":[[74,7],[106,7],[171,7],[244,7]]},"510":{"position":[[379,8]]},"522":{"position":[[600,8]]}}}],["convolut",{"_index":551,"t":{"528":{"position":[[1603,11]]}}}],["cooki",{"_index":75,"t":{"479":{"position":[[112,6],[122,6],[543,8],[570,6]]},"487":{"position":[[122,6],[309,6]]},"489":{"position":[[4,6],[126,6],[199,7],[426,7],[518,6],[579,6]]},"491":{"position":[[139,6],[196,6],[326,6]]},"550":{"position":[[608,8],[674,6]]},"552":{"position":[[103,8]]},"558":{"position":[[373,6],[395,6]]},"560":{"position":[[1339,6],[1361,6]]},"564":{"position":[[929,6]]},"566":{"position":[[1273,6],[1311,6]]},"568":{"position":[[483,6],[521,6]]},"578":{"position":[[570,6],[814,6]]},"584":{"position":[[1147,6],[1167,6],[3618,7]]},"586":{"position":[[1729,6],[1811,6],[1861,6],[3847,6]]},"602":{"position":[[21,6]]},"606":{"position":[[897,6],[934,6],[958,7],[1071,6],[1110,6],[1154,6],[1172,6],[1206,6],[1225,6],[1260,6],[1324,6],[1366,6],[1406,6],[1437,6],[1458,7],[1488,6],[1524,6],[1603,6],[1651,7],[1689,6],[1732,6],[1751,6],[1787,6],[10473,6],[10517,6],[10561,7],[10662,6],[10669,6],[14398,6]]},"610":{"position":[[398,6]]},"620":{"position":[[1487,6],[1623,6],[1710,7],[1847,7],[1914,7],[1979,7],[2094,6],[2131,6],[2233,6],[2414,6],[2511,6],[2554,6],[3475,8],[3728,6],[3761,6],[3810,6],[3929,6]]}}}],["cookie_secret",{"_index":1116,"t":{"584":{"position":[[3589,13]]},"602":{"position":[[681,15]]}}}],["cookienam",{"_index":235,"t":{"491":{"position":[[257,12],[301,10],[541,12]]}}}],["copi",{"_index":319,"t":{"497":{"position":[[343,4]]},"586":{"position":[[2600,4]]},"620":{"position":[[1825,6]]}}}],["coreo",{"_index":1060,"t":{"584":{"position":[[171,6]]}}}],["corp.com\"]client_id",{"_index":1105,"t":{"584":{"position":[[3240,20]]}}}],["corpor",{"_index":126,"t":{"481":{"position":[[218,9]]}}}],["correct",{"_index":969,"t":{"572":{"position":[[104,7]]},"584":{"position":[[545,7]]},"594":{"position":[[110,7]]}}}],["correctli",{"_index":954,"t":{"566":{"position":[[1362,10]]},"568":{"position":[[572,10]]},"626":{"position":[[382,9]]}}}],["count=1",{"_index":1258,"t":{"602":{"position":[[219,7]]}}}],["cover",{"_index":1484,"t":{"618":{"position":[[30,7]]}}}],["creat",{"_index":181,"t":{"485":{"position":[[480,6]]},"564":{"position":[[40,6],[808,8],[1074,6],[1754,6],[2010,6]]},"566":{"position":[[289,9]]},"570":{"position":[[0,6]]},"572":{"position":[[0,6],[1350,7]]},"574":{"position":[[92,6],[299,6],[487,8],[1461,6]]},"576":{"position":[[0,6],[241,6],[324,6]]},"580":{"position":[[42,6]]},"584":{"position":[[2653,6],[3002,6],[3791,6]]},"586":{"position":[[443,6],[2429,6]]},"590":{"position":[[0,6]]},"594":{"position":[[0,6]]},"606":{"position":[[1288,8],[4345,7]]}}}],["credenti",{"_index":485,"t":{"518":{"position":[[284,11]]},"564":{"position":[[293,13],[441,13],[474,12]]},"568":{"position":[[294,11]]},"574":{"position":[[270,10]]},"576":{"position":[[212,10]]},"606":{"position":[[4243,11]]}}}],["crypto/tl",{"_index":837,"t":{"558":{"position":[[833,10]]}}}],["current",{"_index":5,"t":{"477":{"position":[[50,8]]},"558":{"position":[[735,9],[851,9]]},"562":{"position":[[517,9]]},"584":{"position":[[1228,7]]},"606":{"position":[[5930,10]]}}}],["custom",{"_index":827,"t":{"558":{"position":[[508,13]]},"576":{"position":[[410,6]]},"584":{"position":[[2091,6]]},"606":{"position":[[1843,6],[1879,6],[1903,6],[1950,6],[2976,6],[3056,6]]},"620":{"position":[[3803,6]]}}}],["cycl",{"_index":786,"t":{"550":{"position":[[741,5],[803,6]]}}}],["d",{"_index":28,"t":{"477":{"position":[[291,2]]},"602":{"position":[[254,1]]}}}],["danger",{"_index":274,"t":{"493":{"position":[[0,6]]},"504":{"position":[[211,6]]}}}],["dashboard",{"_index":886,"t":{"564":{"position":[[220,9]]},"586":{"position":[[496,10],[798,10]]}}}],["data",{"_index":198,"t":{"487":{"position":[[179,4]]},"489":{"position":[[550,4],[586,5]]},"542":{"position":[[210,4],[306,4]]},"574":{"position":[[1355,4]]},"586":{"position":[[426,4]]},"606":{"position":[[10631,4]]},"616":{"position":[[1392,4]]}}}],["date",{"_index":1465,"t":{"614":{"position":[[1310,4]]},"616":{"position":[[1332,4]]},"618":{"position":[[602,4]]}}}],["day",{"_index":1164,"t":{"586":{"position":[[1170,4]]},"606":{"position":[[5124,4]]}}}],["dd",{"_index":1255,"t":{"602":{"position":[[194,2]]}}}],["debug",{"_index":1371,"t":{"606":{"position":[[11191,5]]}}}],["decim",{"_index":457,"t":{"512":{"position":[[153,7]]}}}],["decod",{"_index":1272,"t":{"602":{"position":[[620,6]]}}}],["decreas",{"_index":1245,"t":{"600":{"position":[[98,10]]}}}],["default",{"_index":202,"t":{"487":{"position":[[316,9]]},"489":{"position":[[34,7]]},"491":{"position":[[356,8]]},"528":{"position":[[176,9],[207,7],[431,7],[513,7],[637,7],[873,8],[1031,7],[1975,7],[2003,7],[2023,7],[2168,7]]},"530":{"position":[[804,7],[1457,7]]},"532":{"position":[[1549,7],[1797,7]]},"550":{"position":[[517,7]]},"558":{"position":[[635,8],[819,8]]},"560":{"position":[[168,8],[763,7]]},"562":{"position":[[218,7]]},"580":{"position":[[146,7]]},"582":{"position":[[196,7]]},"584":{"position":[[576,7],[1927,7],[2415,7],[2863,8],[4248,7]]},"590":{"position":[[575,8]]},"592":{"position":[[434,7]]},"606":{"position":[[24,7],[2011,7],[2327,7],[3024,7],[3104,7],[3968,9],[7822,7],[14597,8],[14668,7]]},"612":{"position":[[3,8],[627,7]]},"614":{"position":[[152,7],[636,7]]},"616":{"position":[[33,7],[372,7]]},"618":{"position":[[219,7],[407,7]]},"624":{"position":[[461,7],[686,7]]},"626":{"position":[[638,7],[921,7],[1166,7],[1372,7]]}}}],["defin",{"_index":400,"t":{"504":{"position":[[550,7]]},"530":{"position":[[1399,6]]},"532":{"position":[[158,7],[291,7],[1953,7]]},"538":{"position":[[140,7]]},"574":{"position":[[1511,6]]},"598":{"position":[[48,6]]}}}],["definit",{"_index":669,"t":{"536":{"position":[[76,11]]},"548":{"position":[[61,11]]}}}],["delay",{"_index":186,"t":{"485":{"position":[[571,5]]}}}],["demo",{"_index":1149,"t":{"586":{"position":[[512,5]]}}}],["demonstr",{"_index":155,"t":{"483":{"position":[[558,11]]}}}],["depend",{"_index":108,"t":{"479":{"position":[[680,10]]},"483":{"position":[[85,13]]},"485":{"position":[[339,14]]},"588":{"position":[[228,9]]},"606":{"position":[[7974,8]]}}}],["deploy",{"_index":1,"t":{"477":{"position":[[14,7],[737,6]]},"586":{"position":[[3075,11]]}}}],["deprec",{"_index":1378,"t":{"606":{"position":[[11612,11]]}}}],["describ",{"_index":285,"t":{"493":{"position":[[172,9]]},"495":{"position":[[77,9]]},"584":{"position":[[2156,8]]}}}],["descript",{"_index":387,"t":{"502":{"position":[[34,11]]},"504":{"position":[[334,11]]},"506":{"position":[[34,11]]},"508":{"position":[[34,11]]},"510":{"position":[[111,11]]},"514":{"position":[[34,11]]},"516":{"position":[[34,11]]},"518":{"position":[[34,11]]},"520":{"position":[[129,11]]},"522":{"position":[[127,11]]},"524":{"position":[[34,11]]},"526":{"position":[[34,11]]},"528":{"position":[[1903,11]]},"530":{"position":[[34,11]]},"532":{"position":[[90,11]]},"538":{"position":[[172,11]]},"540":{"position":[[96,11]]},"542":{"position":[[162,11]]},"544":{"position":[[308,11]]},"546":{"position":[[182,11]]},"548":{"position":[[106,11]]},"584":{"position":[[2324,11]]},"590":{"position":[[71,11]]},"606":{"position":[[12,11]]},"614":{"position":[[821,11]]},"616":{"position":[[676,11]]},"618":{"position":[[549,11]]}}}],["desir",{"_index":498,"t":{"520":{"position":[[574,7]]}}}],["detail",{"_index":138,"t":{"483":{"position":[[167,7],[457,6]]},"493":{"position":[[122,8],[336,7]]},"584":{"position":[[508,8]]},"606":{"position":[[11216,8]]},"614":{"position":[[1042,7],[1552,8]]},"618":{"position":[[751,7]]}}}],["determin",{"_index":490,"t":{"520":{"position":[[307,10]]},"544":{"position":[[145,9]]},"546":{"position":[[1981,10],[2270,10]]},"606":{"position":[[8555,9]]},"626":{"position":[[362,9]]}}}],["dev.yaml",{"_index":1070,"t":{"584":{"position":[[679,9],[878,8]]}}}],["develop",{"_index":1120,"t":{"584":{"position":[[3737,9]]},"586":{"position":[[315,9]]}}}],["dex",{"_index":1061,"t":{"584":{"position":[[178,3],[352,4],[392,4],[435,4],[802,4],[1521,4]]}}}],["differ",{"_index":549,"t":{"528":{"position":[[1564,9]]},"534":{"position":[[77,9]]},"564":{"position":[[2146,9]]},"606":{"position":[[5905,6]]},"612":{"position":[[381,9]]},"614":{"position":[[546,9]]},"616":{"position":[[279,9]]},"618":{"position":[[313,9]]}}}],["digitalocean",{"_index":663,"t":{"534":{"position":[[152,12]]},"562":{"position":[[332,12]]}}}],["dir",{"_index":1309,"t":{"606":{"position":[[1860,3]]}}}],["dir\",th",{"_index":733,"t":{"546":{"position":[[1427,10]]}}}],["direct",{"_index":428,"t":{"506":{"position":[[67,7]]},"550":{"position":[[1085,9]]},"620":{"position":[[23,9]]}}}],["directli",{"_index":771,"t":{"550":{"position":[[22,8]]},"606":{"position":[[12421,8]]}}}],["directori",{"_index":933,"t":{"566":{"position":[[73,10],[599,10],[634,9]]},"578":{"position":[[1201,9]]},"584":{"position":[[1244,9]]},"586":{"position":[[2480,9]]},"604":{"position":[[265,10]]},"608":{"position":[[595,9]]}}}],["disabl",{"_index":674,"t":{"540":{"position":[[209,8],[338,8]]},"550":{"position":[[505,8]]},"606":{"position":[[1557,8],[2003,7],[3016,7],[3096,7],[5229,7],[6260,8],[11450,7]]},"612":{"position":[[483,8],[767,8]]}}}],["disallow",{"_index":773,"t":{"550":{"position":[[244,9]]}}}],["disclos",{"_index":167,"t":{"485":{"position":[[65,9],[298,9]]}}}],["disclosur",{"_index":121,"t":{"481":{"position":[[139,11]]},"483":{"position":[[194,11],[491,10]]},"485":{"position":[[129,10]]},"491":{"position":[[839,11]]}}}],["discov",{"_index":157,"t":{"483":{"position":[[590,10]]}}}],["discoveri",{"_index":579,"t":{"530":{"position":[[447,9],[888,9]]},"552":{"position":[[826,11]]},"586":{"position":[[3252,10],[3298,9],[3485,9],[3711,9]]},"606":{"position":[[6247,9],[12236,9],[12272,10]]}}}],["discret",{"_index":192,"t":{"485":{"position":[[695,10]]}}}],["discuss",{"_index":166,"t":{"485":{"position":[[47,7],[216,10]]}}}],["display",{"_index":349,"t":{"499":{"position":[[821,7]]},"532":{"position":[[1591,7]]},"584":{"position":[[979,7]]},"594":{"position":[[332,7]]},"606":{"position":[[2027,7],[2054,7],[7876,7]]}}}],["doc",{"_index":1285,"t":{"606":{"position":[[66,4]]}}}],["docker",{"_index":19,"t":{"477":{"position":[[204,6]]},"584":{"position":[[1490,6]]},"586":{"position":[[2318,6],[2556,6],[2574,6]]}}}],["document",{"_index":277,"t":{"493":{"position":[[26,13]]},"584":{"position":[[2470,13]]},"588":{"position":[[387,13]]}}}],["doesn't",{"_index":953,"t":{"566":{"position":[[1335,7]]},"568":{"position":[[545,7]]}}}],["domain",{"_index":538,"t":{"528":{"position":[[1334,7],[1460,7]]},"552":{"position":[[854,6],[964,6]]},"554":{"position":[[268,7]]},"562":{"position":[[147,6]]},"564":{"position":[[644,6],[1054,7],[1825,6]]},"572":{"position":[[407,8]]},"578":{"position":[[1263,6]]},"584":{"position":[[1194,6]]},"586":{"position":[[3874,6]]},"596":{"position":[[22,6],[221,9]]},"606":{"position":[[904,6],[941,7],[1006,6],[1078,6],[2138,6],[2198,6],[13672,6],[13701,7],[13754,6],[14468,6],[14487,6],[14562,6],[14821,7]]},"610":{"position":[[469,6]]},"620":{"position":[[548,8]]},"624":{"position":[[469,8],[694,8]]},"626":{"position":[[646,8],[929,8],[1174,8],[1380,8]]}}}],["domain.com",{"_index":1455,"t":{"614":{"position":[[964,10]]},"616":{"position":[[819,10]]}}}],["domain.tld/gitlab",{"_index":1040,"t":{"578":{"position":[[1217,19]]}}}],["domain.tld/gitlab/oauth",{"_index":1045,"t":{"578":{"position":[[1366,24]]}}}],["domain.tld/oauth",{"_index":1043,"t":{"578":{"position":[[1332,16]]}}}],["domain=\"yourcompany.com",{"_index":823,"t":{"558":{"position":[[237,24]]},"560":{"position":[[1274,24]]}}}],["domain=gsa.gov",{"_index":1178,"t":{"586":{"position":[[1758,14]]}}}],["domain=localhost",{"_index":1181,"t":{"586":{"position":[[1868,16]]}}}],["domain=yourcompany.com",{"_index":1240,"t":{"596":{"position":[[41,23]]}}}],["domain}/admin/oauth2/a",{"_index":1128,"t":{"584":{"position":[[4314,23]]}}}],["domain}/dev/console/apps/new",{"_index":1123,"t":{"584":{"position":[[3839,28]]}}}],["domain}/oauth2/default\"upstream",{"_index":1131,"t":{"584":{"position":[[4487,32]]}}}],["don't",{"_index":1354,"t":{"606":{"position":[[5762,5],[8164,6]]},"620":{"position":[[3791,5]]}}}],["done",{"_index":141,"t":{"483":{"position":[[214,4]]},"504":{"position":[[1357,4],[1665,4]]}}}],["doubl",{"_index":782,"t":{"550":{"position":[[570,7]]}}}],["down",{"_index":898,"t":{"564":{"position":[[492,4],[2230,4]]},"566":{"position":[[469,4],[1002,4]]}}}],["download",{"_index":2,"t":{"477":{"position":[[25,8]]},"564":{"position":[[1187,8],[2268,10]]},"584":{"position":[[426,8]]}}}],["drop",{"_index":897,"t":{"564":{"position":[[487,4]]}}}],["dropdown",{"_index":885,"t":{"564":{"position":[[158,8]]}}}],["due",{"_index":1021,"t":{"578":{"position":[[64,3]]}}}],["durat",{"_index":453,"t":{"512":{"position":[[39,8],[99,8]]},"546":{"position":[[2098,8],[2484,8],[2516,8]]},"606":{"position":[[1124,8],[1503,8],[1542,9],[2742,8],[13235,8]]}}}],["dure",{"_index":1450,"t":{"614":{"position":[[507,6]]}}}],["dynam",{"_index":1538,"t":{"624":{"position":[[275,7]]}}}],["e.g",{"_index":1025,"t":{"578":{"position":[[359,4],[1211,5],[1270,5],[1361,4]]},"584":{"position":[[2201,4]]},"606":{"position":[[587,4],[969,5],[1469,5],[2682,4],[4620,4],[4786,4],[6134,4],[7210,4],[8348,5],[8785,4],[8928,5],[9077,5],[9585,5],[13798,5]]},"608":{"position":[[885,4]]},"620":{"position":[[3662,5]]}}}],["each",{"_index":40,"t":{"477":{"position":[[457,4]]},"489":{"position":[[228,4]]},"512":{"position":[[170,4]]},"566":{"position":[[865,4]]},"584":{"position":[[1885,4]]},"612":{"position":[[464,4],[556,4]]}}}],["echo",{"_index":1263,"t":{"602":{"position":[[283,4]]}}}],["effect",{"_index":521,"t":{"528":{"position":[[489,11]]}}}],["elb",{"_index":839,"t":{"560":{"position":[[68,4],[262,3]]}}}],["email",{"_index":148,"t":{"483":{"position":[[364,5]]},"499":{"position":[[589,5]]},"528":{"position":[[1295,5]]},"530":{"position":[[224,5],[1146,7],[1343,7]]},"550":{"position":[[926,5]]},"554":{"position":[[262,5],[324,6]]},"558":{"position":[[231,5]]},"560":{"position":[[1268,5]]},"564":{"position":[[1798,5],[1862,5],[1879,5],[2039,5],[2064,5]]},"572":{"position":[[401,5]]},"578":{"position":[[296,5]]},"584":{"position":[[1188,5]]},"586":{"position":[[1479,5],[1752,5],[3868,5]]},"592":{"position":[[215,5]]},"596":{"position":[[16,5],[35,5],[89,5],[125,6],[160,5],[193,5],[215,5]]},"606":{"position":[[291,6],[331,6],[2132,5],[2172,6],[2262,5],[4009,5],[5751,5],[5779,5],[6276,5],[6332,5],[6338,7],[6978,5],[7057,5],[7094,5],[7188,5],[7463,5],[10763,5]]},"610":{"position":[[463,5]]},"614":{"position":[[75,5],[1448,5]]},"616":{"position":[[1520,5]]},"620":{"position":[[1024,5],[1174,6],[1268,5],[1274,7]]}}}],["email,default",{"_index":600,"t":{"530":{"position":[[1125,13]]}}}],["emailclaim",{"_index":599,"t":{"530":{"position":[[1056,10],[1074,10]]}}}],["empti",{"_index":444,"t":{"510":{"position":[[323,6]]},"522":{"position":[[544,6]]},"606":{"position":[[4947,5],[14611,5]]},"614":{"position":[[1225,5]]},"616":{"position":[[1088,5]]}}}],["enabl",{"_index":506,"t":{"524":{"position":[[68,7],[144,7]]},"546":{"position":[[2075,8],[2408,7]]},"564":{"position":[[1319,6],[1729,6]]},"578":{"position":[[256,6]]},"606":{"position":[[8407,7]]},"612":{"position":[[472,7]]},"620":{"position":[[1291,7],[1477,7]]},"626":{"position":[[318,7]]}}}],["encod",{"_index":243,"t":{"491":{"position":[[410,7],[467,7],[652,7]]},"522":{"position":[[175,7]]},"538":{"position":[[220,7]]},"552":{"position":[[432,11]]},"602":{"position":[[597,8]]},"606":{"position":[[1678,8]]}}}],["encount",{"_index":1189,"t":{"586":{"position":[[2236,9],[2400,9]]}}}],["encrypt",{"_index":221,"t":{"489":{"position":[[558,9]]},"491":{"position":[[43,10],[671,9],[740,10]]},"584":{"position":[[3606,7]]},"606":{"position":[[4381,10]]}}}],["end",{"_index":693,"t":{"544":{"position":[[549,3]]},"550":{"position":[[786,3]]},"620":{"position":[[3562,3]]}}}],["end_session_endpoint",{"_index":807,"t":{"552":{"position":[[733,20]]}}}],["endeavour",{"_index":119,"t":{"481":{"position":[[115,9]]}}}],["endpoint",{"_index":62,"t":{"477":{"position":[[757,8]]},"479":{"position":[[768,10]]},"526":{"position":[[266,8]]},"528":{"position":[[141,8]]},"532":{"position":[[1886,8],[2086,8],[2146,8],[2310,8]]},"544":{"position":[[121,8]]},"550":{"position":[[48,10],[69,9],[417,8]]},"552":{"position":[[62,8]]},"554":{"position":[[5,8]]},"560":{"position":[[558,8]]},"574":{"position":[[1385,8]]},"584":{"position":[[1286,9]]},"586":{"position":[[3403,9],[3529,9]]},"606":{"position":[[439,9],[5709,8],[7569,8],[8024,8],[8477,9],[8730,8],[11486,8],[12263,8],[13099,9],[13616,8]]},"612":{"position":[[722,8]]},"620":{"position":[[100,9]]},"624":{"position":[[114,8]]},"626":{"position":[[156,8]]}}}],["endpointdefault",{"_index":431,"t":{"506":{"position":[[127,15]]}}}],["endpointsdefault",{"_index":596,"t":{"530":{"position":[[924,16]]}}}],["enforc",{"_index":1323,"t":{"606":{"position":[[2841,7]]}}}],["enhanc",{"_index":592,"t":{"530":{"position":[[816,8]]}}}],["ensur",{"_index":220,"t":{"489":{"position":[[543,6]]},"578":{"position":[[519,6]]}}}],["enter",{"_index":968,"t":{"572":{"position":[[94,5]]},"580":{"position":[[233,5]]},"590":{"position":[[142,6]]},"594":{"position":[[100,5]]}}}],["enterpris",{"_index":982,"t":{"572":{"position":[[1699,11]]}}}],["entri",{"_index":1330,"t":{"606":{"position":[[4329,7]]}}}],["enumer",{"_index":662,"t":{"534":{"position":[[63,9]]}}}],["env",{"_index":1190,"t":{"586":{"position":[[2325,3]]}}}],["environ",{"_index":58,"t":{"477":{"position":[[698,11]]},"499":{"position":[[49,11]]},"522":{"position":[[243,11]]},"538":{"position":[[288,11]]},"584":{"position":[[1443,11]]},"586":{"position":[[2145,11],[2192,13],[2265,12],[2291,11],[2735,11]]},"588":{"position":[[180,11]]},"600":{"position":[[57,11],[171,11],[197,11]]},"610":{"position":[[51,11],[226,11]]}}}],["equival",{"_index":1222,"t":{"590":{"position":[[519,10]]}}}],["error",{"_index":384,"t":{"499":{"position":[[1446,6]]},"606":{"position":[[2270,6],[2304,5],[2883,6],[2906,6],[2929,5],[11200,5],[11225,5],[11246,5]]},"614":{"position":[[501,5]]},"618":{"position":[[175,6]]},"624":{"position":[[422,6],[1228,7],[1236,7]]},"626":{"position":[[62,6]]}}}],["error_pag",{"_index":1493,"t":{"620":{"position":[[954,10]]}}}],["escap",{"_index":548,"t":{"528":{"position":[[1552,8],[1714,6]]}}}],["especi",{"_index":1403,"t":{"606":{"position":[[14206,10]]}}}],["etc",{"_index":1409,"t":{"606":{"position":[[14732,5]]},"620":{"position":[[2661,3]]}}}],["etc/example.cfg",{"_index":1117,"t":{"584":{"position":[[3691,16]]}}}],["etc/localhost.cfg",{"_index":1129,"t":{"584":{"position":[[4358,18],[4852,18]]}}}],["etcd",{"_index":1088,"t":{"584":{"position":[[1501,4]]}}}],["evalu",{"_index":1397,"t":{"606":{"position":[[14040,8]]}}}],["even",{"_index":974,"t":{"572":{"position":[[490,4],[1515,4]]},"606":{"position":[[3571,4]]}}}],["event",{"_index":1466,"t":{"614":{"position":[[1339,6]]},"616":{"position":[[1361,6]]},"618":{"position":[[631,6]]}}}],["everyon",{"_index":1127,"t":{"584":{"position":[[4086,8]]},"592":{"position":[[463,8]]}}}],["everyth",{"_index":1148,"t":{"586":{"position":[[407,10]]}}}],["everywher",{"_index":1200,"t":{"586":{"position":[[3230,11]]}}}],["ex",{"_index":903,"t":{"564":{"position":[[651,3],[748,3]]}}}],["exactli",{"_index":545,"t":{"528":{"position":[[1500,7]]}}}],["exampl",{"_index":63,"t":{"477":{"position":[[766,8]]},"528":{"position":[[762,9],[1261,7]]},"552":{"position":[[922,8]]},"560":{"position":[[37,8],[576,7],[631,7]]},"584":{"position":[[207,8],[324,7],[1476,7],[2206,8],[2693,7],[3868,7],[4338,7]]},"598":{"position":[[11,8]]},"604":{"position":[[210,7]]},"610":{"position":[[383,8]]},"614":{"position":[[813,7]]},"616":{"position":[[668,7]]},"618":{"position":[[541,7]]},"620":{"position":[[226,8]]},"624":{"position":[[263,8]]}}}],["example.com",{"_index":542,"t":{"528":{"position":[[1446,13]]},"586":{"position":[[3881,11]]},"606":{"position":[[13804,13],[13818,14],[14873,14]]},"624":{"position":[[486,13],[508,15],[711,13],[733,15],[1053,11]]},"626":{"position":[[663,13],[685,15],[946,13],[968,15],[1191,13],[1213,15],[1397,13],[1419,15],[1811,11]]}}}],["example.com:8080",{"_index":1411,"t":{"606":{"position":[[14829,17]]}}}],["example.oktapreview.com",{"_index":1093,"t":{"584":{"position":[[1697,23]]}}}],["example\\.com",{"_index":541,"t":{"528":{"position":[[1375,23],[1795,20]]}}}],["examples/config",{"_index":1069,"t":{"584":{"position":[[663,15],[862,15]]}}}],["exce",{"_index":1500,"t":{"620":{"position":[[1722,6]]}}}],["exclud",{"_index":1319,"t":{"606":{"position":[[2599,7],[2660,7],[2715,9]]},"612":{"position":[[864,7]]}}}],["exclus",{"_index":273,"t":{"491":{"position":[[1541,10]]}}}],["exist",{"_index":299,"t":{"493":{"position":[[491,8]]},"497":{"position":[[114,8],[397,8]]},"564":{"position":[[1774,8],[2030,8]]},"614":{"position":[[920,6]]},"616":{"position":[[775,6]]}}}],["expect",{"_index":502,"t":{"522":{"position":[[158,7],[220,7],[290,7]]},"538":{"position":[[203,7],[265,7],[335,7]]},"606":{"position":[[5921,8]]},"620":{"position":[[3625,9]]}}}],["experessions.eg",{"_index":706,"t":{"546":{"position":[[542,16]]}}}],["expir",{"_index":1296,"t":{"606":{"position":[[1117,6],[1133,6]]}}}],["explicit",{"_index":708,"t":{"546":{"position":[[583,8]]}}}],["explicitli",{"_index":1447,"t":{"614":{"position":[[453,10]]}}}],["exploit",{"_index":156,"t":{"483":{"position":[[574,7]]}}}],["express",{"_index":534,"t":{"528":{"position":[[1245,11],[1627,11]]},"544":{"position":[[425,10],[492,10]]}}}],["extern",{"_index":408,"t":{"504":{"position":[[985,8]]},"560":{"position":[[227,8],[549,8]]}}}],["extra",{"_index":1028,"t":{"578":{"position":[[439,5]]},"606":{"position":[[2373,5],[2444,5],[6505,5],[12187,6],[12199,5]]}}}],["extraaudi",{"_index":608,"t":{"530":{"position":[[1501,14],[1525,14]]}}}],["extract",{"_index":33,"t":{"477":{"position":[[367,10]]},"620":{"position":[[1960,7],[2082,7]]}}}],["facebook",{"_index":664,"t":{"534":{"position":[[165,9]]},"562":{"position":[[237,8]]}}}],["fail",{"_index":1355,"t":{"606":{"position":[[5768,4]]},"614":{"position":[[430,6]]}}}],["failur",{"_index":574,"t":{"530":{"position":[[209,8]]}}}],["fals",{"_index":392,"t":{"502":{"position":[[126,7]]},"520":{"position":[[476,5]]},"530":{"position":[[283,7],[403,6],[475,7],[793,7],[948,7]]},"546":{"position":[[1711,6]]},"606":{"position":[[2365,5],[2864,5],[2954,5],[4890,5],[5824,5],[5988,5],[6796,5],[6897,5],[7307,5],[9771,5],[9930,5],[10416,5],[10589,5],[10955,5],[11070,5],[11178,5],[11335,5],[11495,5],[11574,5],[12218,5],[12361,5],[12463,5],[12570,5],[12686,5]]}}}],["falseskip_provider_button",{"_index":1136,"t":{"584":{"position":[[4667,25]]}}}],["fastcgi_pass",{"_index":1512,"t":{"620":{"position":[[2642,13]]}}}],["fb",{"_index":965,"t":{"570":{"position":[[13,2],[64,2]]}}}],["featur",{"_index":279,"t":{"493":{"position":[[50,9],[113,8]]},"504":{"position":[[114,8]]},"606":{"position":[[9763,7],[9922,7]]}}}],["field",{"_index":386,"t":{"502":{"position":[[23,5]]},"504":{"position":[[323,5]]},"506":{"position":[[23,5]]},"508":{"position":[[23,5]]},"510":{"position":[[100,5]]},"514":{"position":[[23,5]]},"516":{"position":[[23,5]]},"518":{"position":[[23,5]]},"520":{"position":[[118,5]]},"522":{"position":[[116,5]]},"524":{"position":[[23,5]]},"526":{"position":[[23,5]]},"528":{"position":[[1892,5]]},"530":{"position":[[23,5]]},"532":{"position":[[79,5]]},"538":{"position":[[161,5]]},"540":{"position":[[85,5]]},"542":{"position":[[151,5]]},"544":{"position":[[297,5]]},"546":{"position":[[171,5]]},"548":{"position":[[95,5]]},"580":{"position":[[319,6]]},"584":{"position":[[3444,5]]},"590":{"position":[[135,6]]},"606":{"position":[[2494,7]]}}}],["file",{"_index":34,"t":{"477":{"position":[[382,4],[439,4],[667,5]]},"483":{"position":[[428,5]]},"493":{"position":[[525,4],[698,4]]},"495":{"position":[[52,4],[136,4]]},"497":{"position":[[362,5]]},"522":{"position":[[310,4]]},"526":{"position":[[174,4]]},"538":{"position":[[355,4]]},"542":{"position":[[254,5],[350,5]]},"564":{"position":[[1205,5],[2263,4],[2332,4],[2361,4]]},"584":{"position":[[3025,4],[4353,4]]},"586":{"position":[[2329,5],[2387,5],[2458,4],[2610,4]]},"590":{"position":[[552,5]]},"600":{"position":[[89,4],[248,4]]},"604":{"position":[[57,4],[242,4]]},"606":{"position":[[298,4],[342,4],[691,4],[707,4],[890,4],[2108,4],[4266,4],[4323,5],[4859,5],[4922,4],[5024,5],[5147,5],[5207,5],[5299,4],[5489,4],[5525,4],[7703,4],[12856,4],[12888,4],[12903,4],[12935,4],[13109,7],[13134,5]]},"608":{"position":[[123,5],[138,4],[496,4],[527,7],[579,5],[721,5],[861,5],[1180,5]]},"610":{"position":[[353,4]]},"612":{"position":[[106,4],[165,4],[205,4]]},"618":{"position":[[465,11],[638,4],[658,4]]},"624":{"position":[[283,4]]},"626":{"position":[[2321,4]]}}}],["file/client_secret_fil",{"_index":348,"t":{"499":{"position":[[779,23]]}}}],["file/jwt_key_fil",{"_index":371,"t":{"499":{"position":[[1167,17]]}}}],["file/provider_ca_fil",{"_index":352,"t":{"499":{"position":[[868,22]]}}}],["file://$pwd/#/stat",{"_index":1084,"t":{"584":{"position":[[1311,21]]}}}],["file:///var/www/stat",{"_index":1417,"t":{"608":{"position":[[540,23]]}}}],["file:///var/www/static/#/stat",{"_index":1421,"t":{"608":{"position":[[890,32]]}}}],["file://host/pathif",{"_index":730,"t":{"546":{"position":[[1349,18]]}}}],["file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1195,"t":{"586":{"position":[[2781,41]]},"606":{"position":[[5610,42]]}}}],["file=/path/to/cert.key",{"_index":822,"t":{"558":{"position":[[107,23],[346,22]]}}}],["file=/path/to/cert.pem",{"_index":821,"t":{"558":{"position":[[70,22],[311,22]]}}}],["file=/path/to/fil",{"_index":1241,"t":{"596":{"position":[[132,18]]}}}],["filebas",{"_index":724,"t":{"546":{"position":[[1167,9]]}}}],["filecontain",{"_index":617,"t":{"532":{"position":[[416,14]]}}}],["filenam",{"_index":1343,"t":{"606":{"position":[[4906,8],[5041,9]]},"612":{"position":[[131,8]]}}}],["fill",{"_index":893,"t":{"564":{"position":[[362,4]]},"580":{"position":[[288,4]]},"584":{"position":[[2120,4],[2313,4]]},"590":{"position":[[39,4]]}}}],["filter",{"_index":1027,"t":{"578":{"position":[[420,10]]}}}],["find",{"_index":951,"t":{"566":{"position":[[1302,4]]},"568":{"position":[[512,4]]},"586":{"position":[[168,4]]}}}],["firewal",{"_index":1198,"t":{"586":{"position":[[3128,8]]}}}],["first",{"_index":1092,"t":{"584":{"position":[[1690,6]]},"586":{"position":[[758,6]]},"620":{"position":[[1836,5],[2121,5]]}}}],["fix",{"_index":159,"t":{"483":{"position":[[632,3]]},"485":{"position":[[55,5],[244,5],[381,5],[428,3],[472,3],[585,5],[645,3]]},"528":{"position":[[501,5],[799,5],[909,5],[1073,5]]}}}],["flag",{"_index":266,"t":{"491":{"position":[[1136,5],[1167,5],[1380,5],[1404,5],[1467,5]]},"493":{"position":[[534,6]]},"495":{"position":[[166,5],[207,5]]},"497":{"position":[[98,4]]},"499":{"position":[[1381,5]]},"564":{"position":[[1868,5],[2090,5],[2136,4],[2401,5]]},"572":{"position":[[621,5],[767,4]]},"574":{"position":[[1122,5]]},"606":{"position":[[1213,4],[1739,4]]},"610":{"position":[[412,4],[476,4]]},"612":{"position":[[830,4]]},"614":{"position":[[626,5]]},"616":{"position":[[362,5]]},"618":{"position":[[397,5]]},"620":{"position":[[1093,4],[1688,5]]}}}],["flags/opt",{"_index":321,"t":{"499":{"position":[[14,13]]}}}],["flaw",{"_index":1402,"t":{"606":{"position":[[14199,6]]}}}],["flight",{"_index":184,"t":{"485":{"position":[[541,6]]}}}],["flow",{"_index":586,"t":{"530":{"position":[[625,5]]}}}],["flush",{"_index":323,"t":{"499":{"position":[[127,5]]},"546":{"position":[[2143,8]]},"606":{"position":[[2727,5],[2766,8]]}}}],["flushinterv",{"_index":750,"t":{"546":{"position":[[2084,13],[2107,13]]}}}],["follow",{"_index":209,"t":{"489":{"position":[[256,9]]},"491":{"position":[[246,10]]},"499":{"position":[[4,9]]},"550":{"position":[[38,9]]},"554":{"position":[[107,9]]},"560":{"position":[[652,8]]},"564":{"position":[[1331,6],[1516,9],[1664,6]]},"568":{"position":[[210,6]]},"572":{"position":[[611,9],[757,9],[1733,9]]},"574":{"position":[[404,9]]},"576":{"position":[[473,9]]},"578":{"position":[[201,6],[485,9],[584,6],[895,9],[1090,9]]},"582":{"position":[[52,6]]},"584":{"position":[[409,9],[939,9],[1585,9],[3039,10],[4715,9]]},"586":{"position":[[1530,9]]},"590":{"position":[[397,9]]},"592":{"position":[[334,9]]},"594":{"position":[[213,9]]},"598":{"position":[[0,6]]},"614":{"position":[[668,8]]},"616":{"position":[[404,8]]},"618":{"position":[[439,8]]},"620":{"position":[[2788,9]]},"626":{"position":[[165,9]]}}}],["foo",{"_index":707,"t":{"546":{"position":[[560,7],[597,4]]}}}],["foo/$1",{"_index":718,"t":{"546":{"position":[[988,7]]}}}],["foo/abc/123",{"_index":721,"t":{"546":{"position":[[1037,12]]}}}],["footer",{"_index":1325,"t":{"606":{"position":[[3042,6],[3070,6],[3112,7]]}}}],["forc",{"_index":228,"t":{"489":{"position":[[784,5]]},"532":{"position":[[2501,6]]},"606":{"position":[[121,7],[952,5],[1452,5],[2824,5],[2872,5],[2895,5]]}}}],["force_code_challenge_method",{"_index":658,"t":{"532":{"position":[[2462,27]]}}}],["forcestshead",{"_index":1555,"t":{"624":{"position":[[1023,15]]},"626":{"position":[[1781,15]]}}}],["forego",{"_index":176,"t":{"485":{"position":[[391,6]]}}}],["form",{"_index":553,"t":{"528":{"position":[[1657,4]]},"588":{"position":[[318,4]]},"606":{"position":[[2044,4],[2088,4]]}}}],["format",{"_index":294,"t":{"493":{"position":[[390,7],[469,6],[912,7]]},"495":{"position":[[70,6]]},"497":{"position":[[148,7],[285,6]]},"526":{"position":[[91,6],[186,6]]},"528":{"position":[[1770,6]]},"550":{"position":[[957,7]]},"572":{"position":[[1137,9]]},"586":{"position":[[1028,6],[2532,6]]},"606":{"position":[[197,6],[3360,9],[3867,9],[5360,6],[5537,6],[10086,6],[11826,7],[12773,6]]},"612":{"position":[[602,6],[641,7]]},"614":{"position":[[173,7],[556,6],[619,6],[644,6]]},"616":{"position":[[54,7],[289,6],[355,6],[380,6]]},"618":{"position":[[112,7],[227,6],[323,6],[390,6],[415,6]]}}}],["forward",{"_index":102,"t":{"479":{"position":[[599,9]]},"493":{"position":[[404,7]]},"574":{"position":[[1291,9]]},"606":{"position":[[6666,9],[6950,9],[6968,9],[6990,9],[7415,9],[7433,9],[7453,9],[7475,9],[8638,9],[10348,9],[11928,9]]},"608":{"position":[[279,7],[462,9]]},"626":{"position":[[339,9]]}}}],["forwardauth",{"_index":1536,"t":{"624":{"position":[[15,11],[1137,12]]},"626":{"position":[[96,11],[1904,12],[2069,12]]}}}],["found",{"_index":129,"t":{"483":{"position":[[29,5],[243,5]]},"584":{"position":[[339,5]]}}}],["fraction",{"_index":458,"t":{"512":{"position":[[189,8]]}}}],["fragment",{"_index":1420,"t":{"608":{"position":[[759,8],[808,8]]}}}],["framedeni",{"_index":1559,"t":{"624":{"position":[[1109,10]]},"626":{"position":[[1867,10]]}}}],["freeform",{"_index":900,"t":{"564":{"position":[[567,9]]}}}],["fromenv",{"_index":504,"t":{"522":{"position":[[197,7],[212,7]]},"538":{"position":[[242,7],[257,7]]}}}],["fromfil",{"_index":505,"t":{"522":{"position":[[265,8],[281,8]]},"538":{"position":[[310,8],[326,8]]}}}],["full",{"_index":116,"t":{"481":{"position":[[82,4]]},"614":{"position":[[1362,4]]},"616":{"position":[[1434,4]]}}}],["function",{"_index":1563,"t":{"626":{"position":[[20,13]]}}}],["further",{"_index":677,"t":{"540":{"position":[[446,7]]}}}],["futur",{"_index":591,"t":{"530":{"position":[[757,6]]},"564":{"position":[[1244,6]]},"584":{"position":[[4219,6]]}}}],["gap",{"_index":1374,"t":{"606":{"position":[[11364,3]]}}}],["gener",{"_index":311,"t":{"495":{"position":[[36,8]]},"584":{"position":[[2768,7],[3571,8]]},"586":{"position":[[1035,9]]},"594":{"position":[[381,9],[439,9]]},"602":{"position":[[3,8]]}}}],["get",{"_index":1065,"t":{"584":{"position":[[477,7]]}}}],["gitea",{"_index":879,"t":{"562":{"position":[[355,5]]},"594":{"position":[[41,5],[394,5],[452,5],[489,5],[554,5],[624,5]]}}}],["github",{"_index":136,"t":{"483":{"position":[[136,7],[729,6]]},"485":{"position":[[7,6],[109,6]]},"499":{"position":[[1302,7]]},"534":{"position":[[175,7]]},"562":{"position":[[72,6],[246,6]]},"572":{"position":[[172,6],[429,6],[628,6],[788,6],[801,6],[1069,6],[1396,6],[1612,6],[1692,6],[1801,6],[1871,6],[1946,6]]},"606":{"position":[[3122,6],[3190,6],[3289,6],[3388,6],[3509,6]]}}}],["github.com/dexidp/dex",{"_index":1064,"t":{"584":{"position":[[447,21]]}}}],["github.com/oauth2",{"_index":12,"t":{"477":{"position":[[101,17]]}}}],["githubc",{"_index":629,"t":{"532":{"position":[[921,7]]}}}],["githubconfig",{"_index":627,"t":{"532":{"position":[[852,12],[879,12]]}}}],["githubopt",{"_index":628,"t":{"532":{"position":[[865,13]]}}}],["gitlab",{"_index":379,"t":{"499":{"position":[[1310,7]]},"532":{"position":[[1008,6]]},"534":{"position":[[183,7]]},"562":{"position":[[262,6]]},"578":{"position":[[43,6],[71,6],[193,7],[739,6],[915,6],[1060,7],[1149,6],[1182,6]]},"606":{"position":[[3647,6],[3755,6],[3946,6],[14414,7]]}}}],["gitlab.com",{"_index":1023,"t":{"578":{"position":[[166,10]]}}}],["gitlab.domain.tld",{"_index":1042,"t":{"578":{"position":[[1276,19]]}}}],["gitlabconfig",{"_index":630,"t":{"532":{"position":[[939,12],[966,12]]}}}],["gitlabopt",{"_index":631,"t":{"532":{"position":[[952,13]]}}}],["give",{"_index":689,"t":{"544":{"position":[[409,5]]},"564":{"position":[[1481,4]]}}}],["given",{"_index":687,"t":{"544":{"position":[[196,5]]},"606":{"position":[[2213,5],[3845,5],[4146,5],[7934,5],[11707,5],[13404,5],[13503,5],[13933,5]]}}}],["global",{"_index":1004,"t":{"574":{"position":[[1104,7]]}}}],["gmail",{"_index":921,"t":{"564":{"position":[[1819,5]]}}}],["go",{"_index":11,"t":{"477":{"position":[[94,2]]},"493":{"position":[[398,5]]},"532":{"position":[[1805,2]]},"558":{"position":[[866,2]]},"566":{"position":[[20,2]]},"584":{"position":[[440,2]]},"586":{"position":[[2885,2]]},"606":{"position":[[384,2],[7830,2]]}}}],["googl",{"_index":380,"t":{"499":{"position":[[1318,6]]},"518":{"position":[[108,6],[157,6]]},"532":{"position":[[1094,6],[1530,8]]},"534":{"position":[[191,7]]},"560":{"position":[[73,6],[269,6]]},"562":{"position":[[63,8],[211,6]]},"564":{"position":[[4,7],[1032,6],[1849,6],[2077,6],[2373,6]]},"606":{"position":[[3996,6],[4026,6],[4070,6],[4125,6],[4171,6],[7682,6],[14422,6]]}}}],["googleconfig",{"_index":632,"t":{"532":{"position":[[1025,12],[1052,12]]}}}],["googleopt",{"_index":633,"t":{"532":{"position":[[1038,13]]}}}],["gopath/bin",{"_index":16,"t":{"477":{"position":[[170,11]]}}}],["gopath/github.com/dexidp/dex",{"_index":1075,"t":{"584":{"position":[[812,30]]}}}],["govern",{"_index":1139,"t":{"586":{"position":[[41,11],[69,10]]}}}],["grab",{"_index":1201,"t":{"586":{"position":[[3360,4]]}}}],["grant",{"_index":942,"t":{"566":{"position":[[696,6]]},"584":{"position":[[2792,5],[4095,5]]}}}],["group",{"_index":476,"t":{"516":{"position":[[46,5],[61,5],[107,5]]},"518":{"position":[[46,5],[61,6],[115,5]]},"524":{"position":[[46,6],[62,5],[118,5]]},"530":{"position":[[1246,8]]},"532":{"position":[[2456,5]]},"554":{"position":[[200,6]]},"564":{"position":[[1039,6],[2045,5],[2084,5],[2156,6],[2217,7],[2467,5]]},"568":{"position":[[86,5]]},"574":{"position":[[332,6],[372,9],[1019,5],[1070,5],[1098,5],[1157,6],[1209,6],[1301,6],[1348,6],[1408,5],[1470,5],[1532,6]]},"576":{"position":[[274,6],[314,9]]},"578":{"position":[[857,5],[995,6]]},"584":{"position":[[2958,6],[4067,5]]},"606":{"position":[[3654,5],[3717,6],[4077,5],[4132,5],[4408,5],[4432,6],[6353,6],[6408,6],[6415,8],[7443,7],[10740,7],[13335,5],[13390,5]]}}}],["group,otherwis",{"_index":645,"t":{"532":{"position":[[1514,15]]}}}],["group/allowed_group",{"_index":368,"t":{"499":{"position":[[1095,20]]}}}],["group=\"mygroup,myothergroup",{"_index":1037,"t":{"578":{"position":[[922,29]]}}}],["group=/oauth2/callback",{"_index":1224,"t":{"590":{"position":[[611,24]]}}}],["headers.default",{"_index":497,"t":{"520":{"position":[[456,16]]}}}],["headers/pass_user_head",{"_index":335,"t":{"499":{"position":[[390,25]]}}}],["headers/skip_auth_strip_head",{"_index":345,"t":{"499":{"position":[[680,31]]}}}],["headershould",{"_index":492,"t":{"520":{"position":[[346,12]]}}}],["headervalu",{"_index":435,"t":{"510":{"position":[[13,12]]},"520":{"position":[[540,13]]},"522":{"position":[[21,11]]},"538":{"position":[[26,12]]}}}],["health",{"_index":777,"t":{"550":{"position":[[384,6]]},"606":{"position":[[8060,6],[8147,6]]}}}],["helm",{"_index":31,"t":{"477":{"position":[[322,6]]}}}],["here",{"_index":1145,"t":{"586":{"position":[[344,5]]}}}],["hex",{"_index":242,"t":{"491":{"position":[[406,3]]}}}],["histor",{"_index":204,"t":{"489":{"position":[[103,13]]}}}],["hit",{"_index":895,"t":{"564":{"position":[[404,3]]},"566":{"position":[[668,3],[1023,7]]}}}],["hold",{"_index":612,"t":{"532":{"position":[[33,5],[546,5],[631,5],[710,5],[803,5],[892,5],[979,5],[1065,5],[1145,5],[1275,5]]}}}],["homepag",{"_index":1215,"t":{"590":{"position":[[57,9]]}}}],["host",{"_index":325,"t":{"499":{"position":[[162,4]]},"546":{"position":[[2301,4]]},"560":{"position":[[1006,4],[1011,6]]},"566":{"position":[[870,4]]},"578":{"position":[[185,7],[1053,6],[1175,6]]},"590":{"position":[[606,4]]},"594":{"position":[[47,4],[495,4],[560,4],[630,4]]},"606":{"position":[[1036,4],[7320,4],[7354,4]]},"614":{"position":[[959,4],[992,4]]},"616":{"position":[[475,9],[814,4],[847,4]]},"620":{"position":[[370,4],[375,6],[708,4],[713,6]]}}}],["host(`a",{"_index":1540,"t":{"624":{"position":[[342,8],[537,8]]},"626":{"position":[[432,8],[726,8],[1013,8]]}}}],["host(`oauth.example.com",{"_index":1571,"t":{"626":{"position":[[1255,26]]}}}],["host>/api/v3",{"_index":986,"t":{"572":{"position":[[1953,13]]}}}],["host>/auth/realms//login/oauth/access_token",{"_index":985,"t":{"572":{"position":[[1878,31]]}}}],["host>/login/oauth/author",{"_index":984,"t":{"572":{"position":[[1808,28]]}}}],["host>/oauth2/callback",{"_index":1232,"t":{"594":{"position":[[144,21],[298,22]]}}}],["host>/realms/:::/sign_in",{"_index":1363,"t":{"606":{"position":[[8354,18]]}}}],["oauth2_proxy_",{"_index":1424,"t":{"610":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":1428,"t":{"610":{"position":[[425,27]]}}}],["oauth2_proxy_email_domain",{"_index":1429,"t":{"610":{"position":[[489,27]]}}}],["oauth2_proxy_jwt_key",{"_index":1171,"t":{"586":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1194,"t":{"586":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":1300,"t":{"606":{"position":[[1276,11]]}}}],["obtain",{"_index":1404,"t":{"606":{"position":[[14222,9]]}}}],["occur",{"_index":1486,"t":{"618":{"position":[[187,5]]}}}],["oidc",{"_index":376,"t":{"499":{"position":[[1278,5]]},"524":{"position":[[229,4]]},"530":{"position":[[442,4],[883,4]]},"532":{"position":[[1174,4],[1208,4]]},"534":{"position":[[218,5],[259,5]]},"552":{"position":[[481,4],[667,4],[780,4],[889,4]]},"566":{"position":[[1160,4]]},"574":{"position":[[60,4]]},"576":{"position":[[527,4],[653,4]]},"578":{"position":[[1126,4]]},"584":{"position":[[244,6],[374,4],[965,4],[996,4],[1105,4],[1549,4]]},"586":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"606":{"position":[[5729,4],[5841,4],[5886,4],[6005,4],[6045,4],[6080,4],[6171,4],[6192,4],[6242,4],[6271,4],[6301,4],[6348,4],[6379,4],[6426,4],[6459,4],[6500,4],[6840,4],[7594,4],[12231,4],[12258,4],[12315,4],[13555,4],[14433,4]]}}}],["oidc\"redirect_url",{"_index":1101,"t":{"584":{"position":[[3061,18],[4388,18]]}}}],["oidc_issuer_url",{"_index":1110,"t":{"584":{"position":[[3372,15]]}}}],["oidcconfig",{"_index":634,"t":{"532":{"position":[[1111,10],[1134,10]]}}}],["oidcopt",{"_index":635,"t":{"532":{"position":[[1122,11]]}}}],["ok",{"_index":47,"t":{"477":{"position":[[560,2]]},"550":{"position":[[227,2],[340,2]]}}}],["okta",{"_index":1062,"t":{"584":{"position":[[315,5],[1526,5],[1567,5],[1612,4],[2465,4],[3708,4],[3834,4],[4309,4],[4482,4]]}}}],["old",{"_index":1348,"t":{"606":{"position":[[5139,3],[5199,3]]}}}],["omit",{"_index":1410,"t":{"606":{"position":[[14753,4]]}}}],["on",{"_index":92,"t":{"479":{"position":[[354,3]]},"483":{"position":[[674,4]]},"487":{"position":[[187,3]]},"528":{"position":[[900,3],[1064,3],[1419,3],[2263,3]]},"538":{"position":[[101,3]]},"586":{"position":[[2206,3]]},"592":{"position":[[683,3]]},"596":{"position":[[156,3]]},"602":{"position":[[39,3]]},"606":{"position":[[347,4],[8627,4],[12176,3]]},"614":{"position":[[313,3]]}}}],["onc",{"_index":177,"t":{"485":{"position":[[421,4]]},"564":{"position":[[2558,4]]},"586":{"position":[[2843,4]]}}}],["onlyvalu",{"_index":566,"t":{"528":{"position":[[2241,10]]}}}],["open",{"_index":133,"t":{"483":{"position":[[113,4]]},"564":{"position":[[460,4]]},"568":{"position":[[0,4]]},"584":{"position":[[106,4]]}}}],["openid",{"_index":569,"t":{"530":{"position":[[80,6],[986,6]]},"562":{"position":[[297,6],[549,6]]},"576":{"position":[[89,7]]},"578":{"position":[[276,7]]},"584":{"position":[[0,6],[220,6],[2628,6]]},"586":{"position":[[862,6],[906,6]]},"606":{"position":[[6107,6]]}}}],["openssl",{"_index":1156,"t":{"586":{"position":[[1104,7]]},"602":{"position":[[78,7],[288,7]]}}}],["oppos",{"_index":1041,"t":{"578":{"position":[[1240,7]]}}}],["option",{"_index":57,"t":{"477":{"position":[[686,8]]},"493":{"position":[[164,7],[317,8],[373,7]]},"495":{"position":[[218,7],[263,7]]},"497":{"position":[[37,7],[256,7],[379,7],[437,7]]},"499":{"position":[[1233,8],[1251,6],[1369,7],[1480,7]]},"504":{"position":[[53,8],[77,7],[222,7]]},"510":{"position":[[246,8]]},"512":{"position":[[180,8]]},"520":{"position":[[416,6]]},"522":{"position":[[467,8]]},"528":{"position":[[186,6],[316,7],[1992,10],[2121,10]]},"534":{"position":[[101,7],[115,7]]},"542":{"position":[[102,8]]},"546":{"position":[[1585,6],[2039,6]]},"552":{"position":[[985,6]]},"564":{"position":[[1062,11]]},"572":{"position":[[276,8],[362,7]]},"574":{"position":[[1050,8]]},"576":{"position":[[749,9],[828,9]]},"578":{"position":[[905,7]]},"584":{"position":[[1721,10],[2023,6],[2452,8]]},"586":{"position":[[1540,8],[2132,7],[3495,7]]},"590":{"position":[[407,8],[530,7],[706,7]]},"592":{"position":[[344,8],[584,7]]},"594":{"position":[[223,7]]},"600":{"position":[[48,8],[148,7]]},"604":{"position":[[169,6]]},"606":{"position":[[0,6],[52,9],[925,8],[1428,8],[1659,11],[11557,7],[13995,10],[14298,6],[14475,7],[14920,7]]},"608":{"position":[[61,6]]},"622":{"position":[[5,6],[37,6]]},"626":{"position":[[175,7],[2326,6]]}}}],["order",{"_index":1246,"t":{"600":{"position":[[109,5]]}}}],["org",{"_index":469,"t":{"514":{"position":[[46,3],[57,3],[478,3]]},"572":{"position":[[534,3],[635,7],[795,4],[1559,3]]},"606":{"position":[[3129,3],[3615,3]]}}}],["organ",{"_index":940,"t":{"566":{"position":[[430,13]]},"572":{"position":[[259,12],[580,12],[713,12]]}}}],["organis",{"_index":470,"t":{"514":{"position":[[101,12]]},"572":{"position":[[678,12]]},"606":{"position":[[3175,12]]}}}],["organization'",{"_index":537,"t":{"528":{"position":[[1319,14]]}}}],["organizationdefault",{"_index":527,"t":{"528":{"position":[[811,20]]}}}],["orgname/repo",{"_index":978,"t":{"572":{"position":[[1150,12]]},"606":{"position":[[3373,12]]}}}],["orgname/repo=accesslevel",{"_index":1326,"t":{"606":{"position":[[3880,25]]}}}],["origin",{"_index":902,"t":{"564":{"position":[[628,7]]},"584":{"position":[[146,10]]}}}],["os,base64",{"_index":1253,"t":{"602":{"position":[[125,10]]}}}],["otherwis",{"_index":526,"t":{"528":{"position":[[751,10]]},"530":{"position":[[631,10]]},"548":{"position":[[232,9]]},"552":{"position":[[992,9]]},"584":{"position":[[1903,10]]}}}],["out",{"_index":783,"t":{"550":{"position":[[588,3]]},"552":{"position":[[17,4],[325,3]]},"584":{"position":[[2125,3],[2318,3]]},"586":{"position":[[1156,3]]}}}],["output",{"_index":1430,"t":{"612":{"position":[[34,6],[81,6]]},"614":{"position":[[142,6]]},"616":{"position":[[23,6]]},"618":{"position":[[80,6]]}}}],["outsid",{"_index":1427,"t":{"610":{"position":[[326,7]]},"618":{"position":[[193,7]]}}}],["overrid",{"_index":686,"t":{"544":{"position":[[178,9]]},"582":{"position":[[183,8]]},"606":{"position":[[7896,8],[9190,8]]}}}],["overridden",{"_index":520,"t":{"528":{"position":[[371,10],[1050,10],[1193,11],[2084,11]]}}}],["override_speci",{"_index":1279,"t":{"602":{"position":[[711,16]]}}}],["overwrit",{"_index":1247,"t":{"600":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":1243,"t":{"598":{"position":[[37,7]]}}}],["pad",{"_index":245,"t":{"491":{"position":[[479,9]]}}}],["page",{"_index":275,"t":{"493":{"position":[[12,4],[143,4],[190,4],[331,4]]},"532":{"position":[[1654,5]]},"550":{"position":[[553,5],[592,4]]},"552":{"position":[[329,4]]},"566":{"position":[[332,4],[551,4],[792,4],[962,4]]},"606":{"position":[[1979,4],[2935,5],[7969,4],[11252,5],[12413,4]]}}}],["pair",{"_index":247,"t":{"491":{"position":[[533,4]]},"606":{"position":[[2502,5]]}}}],["pane",{"_index":888,"t":{"564":{"position":[[237,5],[280,5],[321,5],[428,5]]}}}],["paramet",{"_index":390,"t":{"502":{"position":[[83,9]]},"528":{"position":[[81,9],[280,10],[347,9],[476,9],[654,9],[774,9],[841,9],[1003,9],[1171,9],[1964,10]]},"532":{"position":[[1965,10]]},"544":{"position":[[82,10],[202,9],[600,9]]},"552":{"position":[[364,10]]},"554":{"position":[[123,10],[140,11]]},"608":{"position":[[258,10],[1096,10],[1121,9]]},"620":{"position":[[3773,10]]}}}],["part",{"_index":393,"t":{"504":{"position":[[149,4]]},"620":{"position":[[1796,6],[2177,4],[2455,4]]}}}],["particularli",{"_index":1426,"t":{"610":{"position":[[286,12]]}}}],["pass",{"_index":66,"t":{"479":{"position":[[12,7]]},"487":{"position":[[276,6]]},"499":{"position":[[157,4],[312,4],[344,4],[380,4],[416,4]]},"528":{"position":[[103,6],[253,6],[560,6],[677,6],[863,6],[1021,6]]},"530":{"position":[[1593,4]]},"532":{"position":[[1988,6]]},"544":{"position":[[93,6],[212,6]]},"548":{"position":[[154,4]]},"564":{"position":[[2104,4]]},"566":{"position":[[1347,6]]},"568":{"position":[[557,6]]},"584":{"position":[[1795,6]]},"586":{"position":[[2283,4]]},"590":{"position":[[388,4]]},"592":{"position":[[325,4]]},"594":{"position":[[204,4]]},"606":{"position":[[512,7],[6576,4],[6601,4],[6624,4],[6804,4],[6835,4],[6905,4],[6926,4],[7129,7],[7267,4],[7289,4],[7315,4],[7337,4],[7385,4],[7408,4],[10878,4]]},"608":{"position":[[71,4]]},"620":{"position":[[990,4],[1301,4],[1330,4]]}}}],["passhosthead",{"_index":756,"t":{"546":{"position":[[2235,14],[2255,14]]}}}],["password",{"_index":451,"t":{"510":{"position":[[529,8]]},"522":{"position":[[750,8]]},"606":{"position":[[471,8],[491,8],[2073,8],[9112,8],[9134,9],[9203,8],[9259,8],[9290,9],[9350,9],[9380,8]]}}}],["password/basic_auth_password",{"_index":343,"t":{"499":{"position":[[635,28]]}}}],["patch",{"_index":188,"t":{"485":{"position":[[601,7]]}}}],["path",{"_index":312,"t":{"495":{"position":[[123,4]]},"504":{"position":[[536,4]]},"518":{"position":[[251,4]]},"522":{"position":[[300,4]]},"526":{"position":[[150,4]]},"532":{"position":[[1698,5]]},"538":{"position":[[345,4]]},"546":{"position":[[140,4],[165,5],[296,4],[308,4],[407,5],[592,4],[622,4],[671,4],[721,4],[824,4],[877,4],[949,4],[1199,5],[1378,4]]},"548":{"position":[[171,4],[397,4],[422,5]]},"550":{"position":[[279,6]]},"564":{"position":[[2349,4]]},"606":{"position":[[875,4],[1413,4],[1444,4],[1871,4],[1930,4],[2615,4],[2651,5],[2709,5],[4210,4],[5501,4],[7722,5],[8003,4],[8304,4],[11682,5],[11820,5],[12868,4],[12915,4],[13117,5],[13211,4]]},"608":{"position":[[501,5],[703,4],[852,4],[1256,4]]},"612":{"position":[[854,4],[880,6]]},"616":{"position":[[177,8],[1166,4]]}}}],["path.eg",{"_index":726,"t":{"546":{"position":[[1257,8]]}}}],["path/to/cert.key",{"_index":861,"t":{"560":{"position":[[869,18]]}}}],["path/to/cert.pem",{"_index":859,"t":{"560":{"position":[[830,18]]}}}],["path/to/existing/config.cfg",{"_index":315,"t":{"497":{"position":[[204,29],[558,29]]}}}],["path/to/new/config.yaml",{"_index":320,"t":{"497":{"position":[[523,25]]}}}],["path/to/sit",{"_index":1511,"t":{"620":{"position":[[2623,15]]}}}],["path_regex",{"_index":1382,"t":{"606":{"position":[[11855,10]]}}}],["pathprefix",{"_index":1566,"t":{"626":{"position":[[491,16],[1285,16]]}}}],["pathprefix(`/no",{"_index":1568,"t":{"626":{"position":[[760,15]]}}}],["pathprefix(`/oauth2",{"_index":1546,"t":{"624":{"position":[[592,23]]},"626":{"position":[[1072,23]]}}}],["pattern",{"_index":540,"t":{"528":{"position":[[1366,8],[1783,8]]},"544":{"position":[[259,7],[379,7],[396,7]]},"546":{"position":[[449,7]]}}}],["pem",{"_index":510,"t":{"526":{"position":[[87,3],[182,3]]},"586":{"position":[[1023,4],[2383,3],[2528,3]]},"606":{"position":[[5356,3],[5533,3]]}}}],["per",{"_index":1242,"t":{"596":{"position":[[166,3]]},"606":{"position":[[352,3]]}}}],["perform",{"_index":1063,"t":{"584":{"position":[[397,7],[1573,7]]}}}],["period",{"_index":455,"t":{"512":{"position":[[81,6]]},"546":{"position":[[2128,6]]},"606":{"position":[[2751,6]]}}}],["permiss",{"_index":927,"t":{"564":{"position":[[2239,11]]},"566":{"position":[[538,12],[703,12]]},"592":{"position":[[176,11]]}}}],["pick",{"_index":935,"t":{"566":{"position":[[171,4],[349,4]]},"584":{"position":[[2235,4],[2660,4]]}}}],["pin",{"_index":854,"t":{"560":{"position":[[713,3]]}}}],["ping",{"_index":776,"t":{"550":{"position":[[318,5]]},"606":{"position":[[7998,4],[8019,4],[8074,7],[8084,4],[11432,4],[11481,4]]},"612":{"position":[[716,5],[743,4],[791,4],[849,4]]}}}],["ping,/path2",{"_index":1320,"t":{"606":{"position":[[2687,14]]}}}],["pkce",{"_index":1289,"t":{"606":{"position":[[772,4]]}}}],["plain",{"_index":1290,"t":{"606":{"position":[[827,7]]},"620":{"position":[[2894,5]]}}}],["platform",{"_index":841,"t":{"560":{"position":[[86,8],[276,8]]},"584":{"position":[[2603,8]]}}}],["pleas",{"_index":132,"t":{"483":{"position":[[99,6],[144,6],[346,6],[434,6]]},"493":{"position":[[260,6],[835,6]]},"562":{"position":[[430,6]]}}}],["plural",{"_index":1281,"t":{"604":{"position":[[186,6]]},"610":{"position":[[257,6]]}}}],["poc",{"_index":1303,"t":{"606":{"position":[[1475,6]]}}}],["point",{"_index":1044,"t":{"578":{"position":[[1349,8]]},"626":{"position":[[119,8]]}}}],["polici",{"_index":1098,"t":{"584":{"position":[[2351,8]]}}}],["popul",{"_index":1008,"t":{"574":{"position":[[1276,8]]}}}],["port",{"_index":848,"t":{"560":{"position":[[390,4],[460,4]]},"584":{"position":[[584,5]]},"606":{"position":[[14617,5],[14676,4],[14789,5],[14860,5]]}}}],["possibl",{"_index":123,"t":{"481":{"position":[[165,9]]},"483":{"position":[[467,9]]},"512":{"position":[[125,8]]},"574":{"position":[[82,9]]},"578":{"position":[[877,8]]}}}],["post",{"_index":137,"t":{"483":{"position":[[158,4]]}}}],["potenti",{"_index":158,"t":{"483":{"position":[[622,9]]},"546":{"position":[[1619,9]]}}}],["powershel",{"_index":1251,"t":{"602":{"position":[[86,10]]}}}],["pr",{"_index":135,"t":{"483":{"position":[[130,2]]},"485":{"position":[[373,3]]}}}],["prebuilt",{"_index":3,"t":{"477":{"position":[[34,8],[195,8],[329,8]]}}}],["preced",{"_index":701,"t":{"546":{"position":[[388,10]]},"600":{"position":[[118,11]]}}}],["prefer",{"_index":341,"t":{"499":{"position":[[582,6]]},"606":{"position":[[7000,9],[7050,6],[7076,6],[7485,9],[10788,9]]}}}],["preferred_usernam",{"_index":880,"t":{"562":{"position":[[489,18]]}}}],["prefix",{"_index":440,"t":{"510":{"position":[[219,6],[233,6],[255,6]]},"522":{"position":[[440,6],[454,6],[476,6]]},"546":{"position":[[627,8],[676,8]]},"550":{"position":[[136,6],[175,6]]},"606":{"position":[[1331,6],[8277,6],[13747,6],[14494,8]]},"610":{"position":[[75,9]]}}}],["preflight",{"_index":1377,"t":{"606":{"position":[[11513,9]]}}}],["prepend",{"_index":441,"t":{"510":{"position":[[275,9]]},"522":{"position":[[496,9]]}}}],["present",{"_index":162,"t":{"483":{"position":[[705,7]]},"487":{"position":[[237,7]]},"606":{"position":[[7610,8],[12533,9],[12649,9]]}}}],["preserv",{"_index":493,"t":{"520":{"position":[[362,9]]}}}],["preserverequestvalu",{"_index":489,"t":{"520":{"position":[[260,20],[286,20]]}}}],["pretti",{"_index":1207,"t":{"588":{"position":[[282,6]]}}}],["prevent",{"_index":216,"t":{"489":{"position":[[460,7]]},"530":{"position":[[200,8]]}}}],["preview",{"_index":1091,"t":{"584":{"position":[[1682,7]]}}}],["previou",{"_index":191,"t":{"485":{"position":[[652,8]]}}}],["previous",{"_index":173,"t":{"485":{"position":[[287,10]]}}}],["primari",{"_index":394,"t":{"504":{"position":[[161,7]]}}}],["print",{"_index":317,"t":{"497":{"position":[[304,5]]},"606":{"position":[[13639,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":1254,"t":{"602":{"position":[[136,57]]}}}],["prior",{"_index":290,"t":{"493":{"position":[[245,5]]},"578":{"position":[[119,5]]}}}],["privat",{"_index":142,"t":{"483":{"position":[[222,8]]},"485":{"position":[[37,9]]},"526":{"position":[[72,7],[162,7]]},"572":{"position":[[1048,7]]},"586":{"position":[[1065,7]]},"606":{"position":[[5341,7],[5513,7],[12923,7]]}}}],["process",{"_index":1193,"t":{"586":{"position":[[2587,7]]},"616":{"position":[[965,8]]},"620":{"position":[[2934,9],[2980,9]]}}}],["product",{"_index":894,"t":{"564":{"position":[[370,8]]},"586":{"position":[[294,10]]},"606":{"position":[[11323,11]]}}}],["profil",{"_index":357,"t":{"499":{"position":[[933,7]]},"532":{"position":[[2131,7]]},"574":{"position":[[727,7]]},"578":{"position":[[284,7]]},"586":{"position":[[1992,7]]},"606":{"position":[[7535,7],[7554,7]]}}}],["profileurl",{"_index":654,"t":{"532":{"position":[[2095,10],[2113,10]]}}}],["project",{"_index":113,"t":{"481":{"position":[[33,8],[74,7],[204,8]]},"516":{"position":[[113,8],[131,8],[184,8]]},"564":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"572":{"position":[[13,8]]},"578":{"position":[[411,8]]},"580":{"position":[[55,8]]},"584":{"position":[[118,9]]},"606":{"position":[[3762,8],[3828,8]]}}}],["prometheu",{"_index":779,"t":{"550":{"position":[[430,10]]},"606":{"position":[[8226,10]]}}}],["prompt",{"_index":362,"t":{"499":{"position":[[998,6]]},"606":{"position":[[85,6],[7580,6],[7599,7],[7628,6]]}}}],["prompt/approval_prompt",{"_index":364,"t":{"499":{"position":[[1014,22]]}}}],["promptallow",{"_index":529,"t":{"528":{"position":[[935,12]]}}}],["promptdefault",{"_index":532,"t":{"528":{"position":[[1099,14]]}}}],["properli",{"_index":1030,"t":{"578":{"position":[[551,9]]}}}],["properti",{"_index":937,"t":{"566":{"position":[[319,12]]}}}],["propos",{"_index":171,"t":{"485":{"position":[[257,8]]}}}],["protect",{"_index":254,"t":{"491":{"position":[[774,8]]},"532":{"position":[[2213,9]]},"566":{"position":[[892,7]]},"584":{"position":[[2189,11],[2279,8]]},"606":{"position":[[10196,9]]}}}],["protectedresourc",{"_index":655,"t":{"532":{"position":[[2171,17]]}}}],["proto,host,uri",{"_index":1367,"t":{"606":{"position":[[10358,16]]}}}],["protocol",{"_index":1011,"t":{"576":{"position":[[80,8]]},"586":{"position":[[842,9]]},"606":{"position":[[14694,8]]},"614":{"position":[[1071,8],[1101,9]]},"616":{"position":[[534,13],[860,8],[890,9]]}}}],["provid",{"_index":39,"t":{"477":{"position":[[444,8],[572,8],[622,8],[775,8]]},"479":{"position":[[309,8],[473,9],[740,8]]},"495":{"position":[[111,7]]},"499":{"position":[[803,8],[812,8],[856,8],[1215,8]]},"502":{"position":[[13,9]]},"504":{"position":[[1809,9],[1819,9],[1829,9],[1869,10]]},"506":{"position":[[13,9]]},"508":{"position":[[13,9]]},"514":{"position":[[13,9]]},"516":{"position":[[13,9]]},"518":{"position":[[13,9]]},"524":{"position":[[13,9],[234,9]]},"526":{"position":[[13,9]]},"528":{"position":[[13,9],[712,8]]},"530":{"position":[[13,9]]},"532":{"position":[[13,10],[24,8],[70,8],[212,10],[345,10],[584,9],[666,9],[744,9],[842,9],[929,9],[1015,9],[1101,9],[1190,9],[1313,9],[1414,10],[1425,8],[1504,9],[1581,9]]},"534":{"position":[[29,9],[87,8]]},"536":{"position":[[0,11],[47,9],[92,10]]},"552":{"position":[[169,8],[785,8]]},"558":{"position":[[47,9],[418,12]]},"560":{"position":[[1384,12]]},"562":{"position":[[54,8],[90,10],[195,9],[365,8],[400,8],[455,9],[564,9]]},"564":{"position":[[2208,8]]},"566":{"position":[[1245,8]]},"568":{"position":[[92,7],[455,8]]},"572":{"position":[[184,8],[1264,7]]},"574":{"position":[[24,8],[70,8],[1256,8]]},"578":{"position":[[10,8]]},"584":{"position":[[84,9],[133,8],[235,8],[297,9],[379,8],[553,8],[956,8],[970,8],[1001,9],[1554,8],[1918,8],[3050,8],[4377,8]]},"586":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"588":{"position":[[14,8],[125,9],[528,8]]},"590":{"position":[[378,9]]},"592":{"position":[[315,9]]},"594":{"position":[[323,8]]},"598":{"position":[[27,9],[61,8],[151,9]]},"606":{"position":[[1587,9],[2116,8],[7651,8],[7673,8],[7691,8],[7790,9],[7867,8],[7986,9],[12374,8],[12560,9],[13560,9],[14378,9],[14902,8]]},"608":{"position":[[194,9],[353,7],[691,7],[1149,9]]},"626":{"position":[[34,8],[2252,8]]}}}],["provider'",{"_index":797,"t":{"552":{"position":[[309,10]]},"586":{"position":[[3422,10]]},"606":{"position":[[7909,10]]},"620":{"position":[[1699,10]]}}}],["provider.example.com",{"_index":810,"t":{"552":{"position":[[894,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":801,"t":{"552":{"position":[[486,36]]}}}],["provider.if",{"_index":649,"t":{"532":{"position":[[1766,11]]}}}],["provider.thi",{"_index":642,"t":{"532":{"position":[[1374,13]]}}}],["provider/sign_out_pag",{"_index":805,"t":{"552":{"position":[[672,25]]}}}],["provider=\"github",{"_index":1233,"t":{"594":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":1031,"t":{"578":{"position":[[605,17]]}}}],["provider=adf",{"_index":964,"t":{"568":{"position":[[333,13]]}}}],["provider=azur",{"_index":945,"t":{"566":{"position":[[1066,14]]}}}],["provider=bitbucket",{"_index":1227,"t":{"592":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":1220,"t":{"590":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":992,"t":{"574":{"position":[[440,17]]},"576":{"position":[[509,17]]}}}],["providermust",{"_index":644,"t":{"532":{"position":[[1465,12]]}}}],["provideror",{"_index":636,"t":{"532":{"position":[[1179,10]]}}}],["providers.new",{"_index":1244,"t":{"598":{"position":[[98,15]]}}}],["providerthi",{"_index":614,"t":{"532":{"position":[[173,12],[306,12]]}}}],["providertyp",{"_index":643,"t":{"532":{"position":[[1434,12]]},"534":{"position":[[39,12]]}}}],["proxi",{"_index":22,"t":{"477":{"position":[[245,5],[535,5],[648,5]]},"479":{"position":[[32,5],[729,5]]},"481":{"position":[[12,5]]},"483":{"position":[[65,5],[339,6]]},"487":{"position":[[109,5]]},"489":{"position":[[97,5],[396,5],[655,6]]},"497":{"position":[[58,5],[163,5],[467,5],[502,5]]},"499":{"position":[[191,5],[1511,5]]},"504":{"position":[[204,6],[490,7],[973,5],[1045,5],[1262,5]]},"546":{"position":[[108,7],[1057,8],[1669,5],[2416,8]]},"548":{"position":[[365,7]]},"550":{"position":[[7,5],[87,7],[169,5]]},"556":{"position":[[52,5],[69,5]]},"558":{"position":[[38,5],[162,5],[221,5],[897,6]]},"560":{"position":[[133,5],[432,8],[451,5],[478,5],[1199,5],[1258,5]]},"562":{"position":[[179,5]]},"564":{"position":[[2306,5],[2422,6]]},"566":{"position":[[914,6],[1053,5]]},"568":{"position":[[320,5]]},"584":{"position":[[530,5],[789,5],[924,5],[1028,5],[1048,5],[3656,5],[3676,5],[4817,5],[4837,5]]},"586":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"590":{"position":[[206,5],[249,5]]},"592":{"position":[[108,6],[152,5]]},"594":{"position":[[238,6]]},"598":{"position":[[130,5]]},"600":{"position":[[7,5]]},"606":{"position":[[8271,5],[8319,5],[8385,5],[8425,8],[8611,5],[10232,5],[10275,6],[12023,5],[13985,5],[14107,5],[14276,5]]},"608":{"position":[[7,5],[623,5],[978,5]]},"612":{"position":[[19,5]]},"614":{"position":[[937,5]]},"616":{"position":[[792,5]]},"620":{"position":[[192,8],[1763,5]]},"622":{"position":[[31,5]]},"624":{"position":[[223,8]]},"626":{"position":[[138,5],[208,6],[1236,5]]}}}],["proxiedto",{"_index":757,"t":{"546":{"position":[[2323,9]]}}}],["proxy'",{"_index":73,"t":{"479":{"position":[[96,7]]},"552":{"position":[[91,7]]},"590":{"position":[[296,7]]},"620":{"position":[[86,7]]},"624":{"position":[[93,7]]}}}],["proxy'secret",{"_index":1073,"t":{"584":{"position":[[775,13]]}}}],["proxy.cfg",{"_index":1282,"t":{"604":{"position":[[225,9],[326,9]]}}}],["proxy.thi",{"_index":407,"t":{"504":{"position":[[929,10]]}}}],["proxy/oauth2",{"_index":13,"t":{"477":{"position":[[119,12],[232,12]]}}}],["proxy/oauth2/callback",{"_index":1217,"t":{"590":{"position":[[163,22]]}}}],["proxy/v7",{"_index":14,"t":{"477":{"position":[[132,8]]}}}],["proxy=tru",{"_index":876,"t":{"560":{"position":[[1409,10]]},"626":{"position":[[306,11]]}}}],["proxy>/oauth2/callback",{"_index":1226,"t":{"592":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":956,"t":{"566":{"position":[[1388,17]]},"568":{"position":[[598,17]]}}}],["proxy_connect_timeout",{"_index":873,"t":{"560":{"position":[[1094,21]]}}}],["proxy_pass",{"_index":866,"t":{"560":{"position":[[955,10]]},"620":{"position":[[319,10],[657,10],[2584,10],[2948,10]]}}}],["proxy_pass_request_bodi",{"_index":1492,"t":{"620":{"position":[[883,23]]}}}],["proxy_read_timeout",{"_index":875,"t":{"560":{"position":[[1142,18]]}}}],["proxy_send_timeout",{"_index":874,"t":{"560":{"position":[[1119,18]]}}}],["proxy_set_head",{"_index":868,"t":{"560":{"position":[[989,16],[1018,16],[1059,16]]},"620":{"position":[[353,16],[382,16],[423,16],[458,16],[559,16],[691,16],[720,16],[761,16],[847,16],[1218,16],[1249,16],[1428,16]]}}}],["proxyrawpath",{"_index":766,"t":{"548":{"position":[[118,12],[136,12]]}}}],["proxyredirecturi",{"_index":1071,"t":{"584":{"position":[[702,18]]}}}],["proxyus",{"_index":1364,"t":{"606":{"position":[[8669,9]]}}}],["proxywebsocket",{"_index":759,"t":{"546":{"position":[[2371,15],[2392,15]]}}}],["pubjwk",{"_index":372,"t":{"499":{"position":[[1185,6]]},"586":{"position":[[1917,6]]},"606":{"position":[[8441,6]]}}}],["pubjwkurl",{"_index":512,"t":{"526":{"position":[[214,9],[231,9]]}}}],["pubkey",{"_index":514,"t":{"526":{"position":[[252,6]]},"606":{"position":[[8463,6]]}}}],["public",{"_index":977,"t":{"572":{"position":[[1011,6],[1229,6]]},"586":{"position":[[974,6]]}}}],["public_repo",{"_index":981,"t":{"572":{"position":[[1376,11]]}}}],["publicli",{"_index":139,"t":{"483":{"position":[[175,9]]}}}],["pull",{"_index":1462,"t":{"614":{"position":[[1173,6]]},"616":{"position":[[1036,6]]}}}],["push",{"_index":473,"t":{"514":{"position":[[341,4]]},"572":{"position":[[994,4]]},"606":{"position":[[3476,4]]}}}],["put",{"_index":15,"t":{"477":{"position":[[152,3]]}}}],["python",{"_index":1249,"t":{"602":{"position":[[66,6],[107,6]]}}}],["quay.io/oauth2",{"_index":21,"t":{"477":{"position":[[217,14]]}}}],["queri",{"_index":516,"t":{"528":{"position":[[75,5],[390,5],[1958,5],[2210,5]]},"544":{"position":[[76,5]]},"552":{"position":[[358,5]]},"554":{"position":[[117,5],[134,5]]},"624":{"position":[[1287,6]]}}}],["quick",{"_index":1155,"t":{"586":{"position":[[1080,5]]}}}],["quickli",{"_index":122,"t":{"481":{"position":[[154,7]]}}}],["quot",{"_index":552,"t":{"528":{"position":[[1650,6]]}}}],["r_basicprofil",{"_index":1048,"t":{"580":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":1049,"t":{"580":{"position":[[187,15]]}}}],["rand",{"_index":1264,"t":{"602":{"position":[[296,4]]}}}],["random",{"_index":241,"t":{"491":{"position":[[391,6],[442,6]]},"530":{"position":[[586,6]]},"614":{"position":[[1210,6]]},"616":{"position":[[1073,6]]}}}],["random_password",{"_index":1277,"t":{"602":{"position":[[663,17]]}}}],["rang",{"_index":1395,"t":{"606":{"position":[[13884,6]]}}}],["raw",{"_index":767,"t":{"548":{"position":[[163,3]]},"620":{"position":[[2229,3]]}}}],["rd",{"_index":799,"t":{"552":{"position":[[355,2]]}}}],["re",{"_index":229,"t":{"489":{"position":[[799,2]]},"552":{"position":[[200,2]]}}}],["reach",{"_index":1386,"t":{"606":{"position":[[12430,5]]}}}],["read",{"_index":928,"t":{"564":{"position":[[2323,4]]},"572":{"position":[[1207,4]]},"592":{"position":[[240,4],[261,4]]}}}],["read_api",{"_index":1029,"t":{"578":{"position":[[445,8]]}}}],["readi",{"_index":189,"t":{"485":{"position":[[613,6]]}}}],["real",{"_index":869,"t":{"560":{"position":[[1037,4]]},"586":{"position":[[3070,4],[3215,4]]},"606":{"position":[[8511,4],[8569,4],[8655,4],[8685,4],[10314,4],[14008,4]]},"614":{"position":[[899,4]]},"616":{"position":[[754,4]]},"620":{"position":[[401,4],[739,4]]}}}],["realm",{"_index":988,"t":{"574":{"position":[[127,5]]},"576":{"position":[[35,5],[706,6],[768,5]]}}}],["realm>/protocol/openid",{"_index":998,"t":{"574":{"position":[[592,22],[687,22],[784,22],[885,22]]}}}],["reason",{"_index":925,"t":{"564":{"position":[[1998,6]]}}}],["recommend",{"_index":818,"t":{"556":{"position":[[14,11]]},"564":{"position":[[867,11]]},"606":{"position":[[845,13]]},"620":{"position":[[3574,11]]}}}],["redeem",{"_index":355,"t":{"499":{"position":[[911,6]]},"530":{"position":[[686,6]]},"572":{"position":[[1837,6]]},"574":{"position":[[631,6]]},"586":{"position":[[3765,6]]},"588":{"position":[[686,6]]},"594":{"position":[[527,6]]},"606":{"position":[[8695,6],[12298,6]]}}}],["redeemurl",{"_index":652,"t":{"532":{"position":[[2035,9],[2052,9]]}}}],["redempt",{"_index":653,"t":{"532":{"position":[[2075,10]]},"606":{"position":[[8719,10]]}}}],["redi",{"_index":100,"t":{"479":{"position":[[552,6]]},"487":{"position":[[326,5]]},"491":{"position":[[4,5],[57,6],[606,5],[711,5],[873,5],[936,5],[964,5],[1055,5],[1112,5],[1175,5],[1208,5],[1254,5],[1357,5],[1412,5],[1475,5],[1505,5]]},"566":{"position":[[1435,5]]},"568":{"position":[[645,5]]},"606":{"position":[[8846,5],[8898,5],[8983,5],[9003,5],[9038,5],[9055,5],[9106,5],[9128,5],[9163,5],[9221,5],[9244,5],[9275,5],[9339,5],[9374,5],[9391,5],[9425,5],[9480,5],[9501,5],[9554,5],[9640,5],[9661,5],[9695,5],[9721,5],[9779,5],[9814,5],[9846,5],[9879,5],[10653,5]]}}}],["redirect",{"_index":88,"t":{"479":{"position":[[276,10]]},"548":{"position":[[245,10]]},"550":{"position":[[713,8]]},"552":{"position":[[22,8],[269,8],[380,8],[550,8],[585,8],[646,9],[873,8],[1006,8]]},"562":{"position":[[123,8]]},"564":{"position":[[699,8]]},"570":{"position":[[95,8]]},"574":{"position":[[174,8]]},"576":{"position":[[116,8],[604,8]]},"578":{"position":[[322,8],[625,8],[703,8],[1318,8]]},"580":{"position":[[217,8]]},"584":{"position":[[1054,8],[2720,8],[3969,8],[4029,8]]},"586":{"position":[[1379,8],[1619,8],[3610,8]]},"588":{"position":[[448,12]]},"590":{"position":[[315,8],[562,8],[680,8]]},"594":{"position":[[87,8],[267,8]]},"606":{"position":[[2294,9],[2855,8],[2944,9],[8741,8],[8771,8],[10397,8],[13713,11],[14580,8]]},"620":{"position":[[490,8],[591,8]]},"626":{"position":[[0,8],[372,9],[561,8],[572,9],[781,11],[849,8],[1894,9],[2059,9]]}}}],["redis://host[:port",{"_index":1365,"t":{"606":{"position":[[8934,21],[9083,20],[9591,21]]}}}],["reduc",{"_index":1434,"t":{"612":{"position":[[804,8]]}}}],["refer",{"_index":303,"t":{"493":{"position":[[552,9],[853,9]]},"495":{"position":[[94,9]]},"538":{"position":[[57,10]]},"586":{"position":[[930,5],[1284,8]]},"588":{"position":[[367,5]]}}}],["refresh",{"_index":226,"t":{"489":{"position":[[734,10]]},"564":{"position":[[882,7],[936,7],[2540,9]]},"584":{"position":[[2830,7],[4138,7]]},"606":{"position":[[1495,7],[1512,7],[14405,8]]},"620":{"position":[[1494,8]]}}}],["refresh/access/id",{"_index":255,"t":{"491":{"position":[[787,17]]}}}],["refreshes.default",{"_index":589,"t":{"530":{"position":[[712,17]]}}}],["regardless",{"_index":832,"t":{"558":{"position":[[679,10]]}}}],["regex",{"_index":71,"t":{"479":{"position":[[70,6]]},"606":{"position":[[11592,5]]}}}],["regist",{"_index":49,"t":{"477":{"position":[[585,8]]},"562":{"position":[[17,8]]},"586":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":881,"t":{"564":{"position":[[16,12]]},"566":{"position":[[114,14],[156,14]]},"580":{"position":[[18,12]]}}}],["regular",{"_index":175,"t":{"485":{"position":[[365,7]]},"528":{"position":[[1237,7],[1619,7]]},"544":{"position":[[417,7]]},"546":{"position":[[534,7]]}}}],["releas",{"_index":6,"t":{"477":{"position":[[59,7],[462,7]]},"485":{"position":[[493,8],[661,9]]},"504":{"position":[[298,8]]},"530":{"position":[[764,8]]}}}],["reload",{"_index":1575,"t":{"626":{"position":[[2336,6]]}}}],["remain",{"_index":711,"t":{"546":{"position":[[711,9]]},"580":{"position":[[300,9]]}}}],["remot",{"_index":1400,"t":{"606":{"position":[[14139,6]]}}}],["remote_addr",{"_index":871,"t":{"560":{"position":[[1045,13]]},"620":{"position":[[409,13],[747,13]]}}}],["remote_address",{"_index":1438,"t":{"614":{"position":[[181,16]]},"616":{"position":[[62,16]]}}}],["remov",{"_index":286,"t":{"493":{"position":[[211,8]]},"495":{"position":[[255,7]]},"497":{"position":[[368,6],[429,7]]},"499":{"position":[[1467,6]]},"552":{"position":[[76,7]]}}}],["renam",{"_index":287,"t":{"493":{"position":[[220,7]]}}}],["replac",{"_index":298,"t":{"493":{"position":[[479,7]]},"604":{"position":[[65,9]]},"610":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":1271,"t":{"602":{"position":[[550,19]]}}}],["repli",{"_index":943,"t":{"566":{"position":[[779,6]]}}}],["repo",{"_index":471,"t":{"514":{"position":[[176,4],[188,4]]},"572":{"position":[[1076,8]]},"586":{"position":[[2497,4]]},"606":{"position":[[3296,4]]}}}],["report",{"_index":1468,"t":{"614":{"position":[[1381,8]]},"616":{"position":[[1453,8]]}}}],["repositori",{"_index":434,"t":{"508":{"position":[[108,10],[126,10],[186,10]]},"514":{"position":[[239,10],[304,10],[360,10]]},"572":{"position":[[329,11],[953,11],[1018,10],[1056,11],[1126,10],[1236,10],[1320,11],[1445,10]]},"592":{"position":[[245,12],[696,10]]},"606":{"position":[[3349,10],[3440,10],[3495,11]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":1212,"t":{"588":{"position":[[714,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":1211,"t":{"588":{"position":[[647,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":1213,"t":{"588":{"position":[[786,39]]}}}],["url]/stat",{"_index":1423,"t":{"608":{"position":[[984,13]]}}}],["url]/var/www/stat",{"_index":1419,"t":{"608":{"position":[[629,21]]}}}],["urldefault",{"_index":580,"t":{"530":{"position":[[457,10]]}}}],["urleg",{"_index":571,"t":{"530":{"position":[[102,6],[1006,6]]}}}],["urlparameterrul",{"_index":564,"t":{"528":{"position":[[2102,18]]},"544":{"position":[[32,16]]}}}],["us",{"_index":18,"t":{"477":{"position":[[185,5],[294,5],[654,5]]},"479":{"position":[[761,6]]},"483":{"position":[[550,4]]},"485":{"position":[[3,3],[361,3]]},"487":{"position":[[115,4]]},"489":{"position":[[78,4],[287,5]]},"491":{"position":[[863,5],[1102,3],[1118,3],[1363,3],[1481,3],[1511,3]]},"493":{"position":[[293,3],[659,5]]},"495":{"position":[[3,3],[141,5],[182,5]]},"497":{"position":[[64,5],[473,5]]},"499":{"position":[[100,5],[1352,3]]},"504":{"position":[[394,4],[626,4],[861,4],[953,4],[963,5],[1217,4],[1433,3],[1539,4],[1741,3],[1842,4]]},"510":{"position":[[517,4]]},"514":{"position":[[285,3]]},"520":{"position":[[183,4]]},"522":{"position":[[738,4]]},"524":{"position":[[210,5]]},"526":{"position":[[98,4],[193,4]]},"528":{"position":[[542,4],[1746,3]]},"530":{"position":[[902,3],[1478,4]]},"532":{"position":[[467,4],[1738,4],[1826,4]]},"534":{"position":[[55,4]]},"546":{"position":[[316,4],[462,4],[528,5],[730,3],[2058,4]]},"550":{"position":[[375,3],[648,4],[774,4],[904,4],[1053,3]]},"552":{"position":[[345,5]]},"554":{"position":[[97,5]]},"558":{"position":[[752,4],[861,4]]},"560":{"position":[[218,5],[301,3],[670,3]]},"562":{"position":[[390,5]]},"566":{"position":[[230,3],[1224,5]]},"568":{"position":[[435,5]]},"572":{"position":[[1426,3],[1686,5]]},"574":{"position":[[47,3],[1135,4],[1440,5]]},"578":{"position":[[160,5],[1042,5]]},"582":{"position":[[175,4]]},"584":{"position":[[194,3],[263,4],[566,5],[1484,5],[1617,5],[4707,3]]},"586":{"position":[[2172,3],[3211,3]]},"588":{"position":[[105,5],[276,5]]},"590":{"position":[[370,3],[670,3]]},"592":{"position":[[43,3],[307,3],[555,3],[707,3]]},"596":{"position":[[29,3],[105,3],[209,3]]},"598":{"position":[[139,3]]},"602":{"position":[[35,3]]},"604":{"position":[[286,4]]},"606":{"position":[[768,3],[1049,4],[1318,3],[1990,3],[2236,3],[3005,3],[3085,3],[3421,3],[4879,5],[5002,3],[5367,4],[5544,4],[6702,4],[7086,3],[7172,3],[7240,4],[7762,4],[7851,4],[7948,4],[8045,4],[8132,4],[8547,4],[8956,4],[8989,3],[9300,4],[9368,3],[9453,4],[9486,3],[9613,4],[9646,3],[9667,3],[9754,3],[9785,3],[9913,3],[9981,3],[10389,4],[10824,7],[10866,4],[11034,7],[11142,7],[11316,3],[12548,5],[12664,5],[14289,3],[14448,5],[14866,3]]},"608":{"position":[[830,4],[1214,4]]},"610":{"position":[[299,6]]},"612":{"position":[[111,5],[735,5]]},"614":{"position":[[889,3]]},"616":{"position":[[744,3]]},"620":{"position":[[1651,5],[2677,3],[2719,3],[3589,3]]},"626":{"position":[[55,3],[330,3],[2299,3]]}}}],["usag",{"_index":256,"t":{"491":{"position":[[851,6]]},"504":{"position":[[62,5]]}}}],["use.typ",{"_index":679,"t":{"542":{"position":[[218,13],[314,13]]}}}],["user",{"_index":85,"t":{"479":{"position":[[248,4],[643,4]]},"487":{"position":[[138,4]]},"489":{"position":[[790,5]]},"491":{"position":[[184,4]]},"499":{"position":[[385,4],[1059,4]]},"504":{"position":[[92,5],[436,4]]},"508":{"position":[[161,4]]},"514":{"position":[[371,5],[386,5],[399,5]]},"524":{"position":[[173,5]]},"530":{"position":[[1120,4],[1220,4],[1321,4]]},"532":{"position":[[1635,5]]},"546":{"position":[[795,5]]},"550":{"position":[[258,4]]},"552":{"position":[[12,4],[121,4],[282,4],[393,4]]},"564":{"position":[[393,6],[2171,4],[2439,4]]},"566":{"position":[[410,5],[661,6]]},"572":{"position":[[436,4],[463,5],[971,5],[1196,5],[1286,4],[1481,4],[1619,8]]},"580":{"position":[[119,4]]},"584":{"position":[[2949,5]]},"588":{"position":[[58,5]]},"592":{"position":[[659,5]]},"606":{"position":[[3516,4],[3544,5],[4403,4],[4474,5],[6403,4],[6960,5],[7066,4],[7294,4],[7390,4],[7425,5],[8089,4],[8109,4],[8177,4],[10719,5],[13474,5]]},"612":{"position":[[748,4]]},"614":{"position":[[94,4],[356,4],[425,4],[1367,4]]},"616":{"position":[[1439,4]]},"620":{"position":[[1013,4],[1115,5],[1237,4],[1242,6]]}}}],["user'",{"_index":193,"t":{"487":{"position":[[17,6]]},"504":{"position":[[760,6],[1148,6]]},"550":{"position":[[919,6]]},"606":{"position":[[6325,6]]}}}],["user/prefer_email_to_us",{"_index":342,"t":{"499":{"position":[[598,25]]}}}],["user/settings/appl",{"_index":1230,"t":{"594":{"position":[[52,28]]}}}],["user@domain.com",{"_index":1439,"t":{"614":{"position":[[215,17]]},"616":{"position":[[96,17]]}}}],["user_ag",{"_index":1473,"t":{"616":{"position":[[195,14]]}}}],["userag",{"_index":1467,"t":{"614":{"position":[[1346,9]]},"616":{"position":[[548,14],[1418,9]]}}}],["useridclaim",{"_index":603,"t":{"530":{"position":[[1255,11],[1274,11]]}}}],["userinfo",{"_index":1009,"t":{"574":{"position":[[1376,8]]}}}],["usernam",{"_index":449,"t":{"510":{"position":[[475,8]]},"514":{"position":[[416,9]]},"522":{"position":[[696,8]]},"572":{"position":[[1506,8],[1644,9]]},"606":{"position":[[2062,8],[3562,8],[7010,8],[7115,8],[7176,8],[7495,8],[10798,8]]},"614":{"position":[[63,8],[708,13],[1416,8],[1457,8]]},"616":{"position":[[444,13],[1488,8],[1529,8]]}}}],["username@email.com",{"_index":1469,"t":{"614":{"position":[[1425,18]]},"616":{"position":[[1497,18]]}}}],["usptream",{"_index":740,"t":{"546":{"position":[[1683,8]]}}}],["utc",{"_index":1345,"t":{"606":{"position":[[5062,3]]}}}],["util",{"_index":637,"t":{"532":{"position":[[1200,7]]}}}],["uuid",{"_index":1463,"t":{"614":{"position":[[1217,4]]},"616":{"position":[[1080,4]]}}}],["v2",{"_index":1535,"t":{"624":{"position":[[12,2]]},"626":{"position":[[93,2]]}}}],["v3.0.0",{"_index":43,"t":{"477":{"position":[[492,7]]}}}],["v7.3.0",{"_index":7,"t":{"477":{"position":[[70,7]]}}}],["valid",{"_index":32,"t":{"477":{"position":[[354,9]]},"485":{"position":[[231,8]]},"499":{"position":[[966,8]]},"512":{"position":[[254,5]]},"532":{"position":[[2299,10]]},"534":{"position":[[109,5]]},"544":{"position":[[172,5]]},"562":{"position":[[189,5]]},"564":{"position":[[958,9]]},"570":{"position":[[83,5]]},"572":{"position":[[1910,8]]},"574":{"position":[[168,5],[827,8]]},"576":{"position":[[110,5]]},"588":{"position":[[756,8],[849,8]]},"594":{"position":[[595,8]]},"602":{"position":[[572,5]]},"606":{"position":[[12506,10],[12622,10],[13572,8],[13605,10],[14574,5]]}}}],["validateurl",{"_index":656,"t":{"532":{"position":[[2248,11],[2267,11]]}}}],["valu",{"_index":234,"t":{"491":{"position":[[203,5]]},"502":{"position":[[117,5]]},"504":{"position":[[723,6],[798,6],[1111,6],[1186,6]]},"506":{"position":[[143,5]]},"510":{"position":[[62,5],[191,5],[292,5],[433,5],[538,6]]},"520":{"position":[[330,6],[533,6],[554,6],[582,6]]},"522":{"position":[[60,5],[110,5],[139,5],[152,5],[190,6],[337,6],[412,5],[513,5],[654,5],[759,6]]},"528":{"position":[[215,5],[224,6],[521,5],[732,5],[790,5],[922,6],[949,6],[963,6],[979,6],[1086,6],[1131,6],[1147,6],[1217,6],[2031,5],[2040,6]]},"532":{"position":[[186,5],[319,5],[1388,5]]},"538":{"position":[[89,6],[184,5],[197,5],[235,6],[382,6]]},"544":{"position":[[250,5],[320,5],[335,5],[373,5],[481,6],[560,6],[610,5]]},"546":{"position":[[259,5]]},"562":{"position":[[423,6]]},"566":{"position":[[1011,5]]},"574":{"position":[[1539,5]]},"606":{"position":[[38,6],[3931,5]]},"608":{"position":[[795,5]]},"614":{"position":[[979,5]]},"616":{"position":[[834,5]]}}}],["values.nam",{"_index":488,"t":{"520":{"position":[[204,12]]}}}],["values/acr_valu",{"_index":366,"t":{"499":{"position":[[1041,17]]}}}],["var/www/stat",{"_index":1422,"t":{"608":{"position":[[933,16]]}}}],["variabl",{"_index":59,"t":{"477":{"position":[[710,9]]},"499":{"position":[[61,9]]},"522":{"position":[[255,9]]},"538":{"position":[[300,9]]},"550":{"position":[[189,9]]},"586":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"588":{"position":[[192,9]]},"600":{"position":[[69,9],[183,9],[209,9]]},"610":{"position":[[63,8],[238,8]]},"612":{"position":[[613,10]]},"614":{"position":[[776,9],[804,8]]},"616":{"position":[[628,9],[659,8]]},"618":{"position":[[500,9],[532,8]]},"620":{"position":[[2202,9],[2838,9],[3826,8]]}}}],["verif",{"_index":578,"t":{"530":{"position":[[364,12],[1487,13],[1598,12]]},"546":{"position":[[1543,12]]},"606":{"position":[[5858,12],[6216,13],[6581,12]]}}}],["verifi",{"_index":35,"t":{"477":{"position":[[391,9]]},"514":{"position":[[294,9]]},"530":{"position":[[530,9],[1424,8]]},"572":{"position":[[1435,9]]},"606":{"position":[[3430,9],[5815,8],[6031,9],[12093,8],[12489,6],[12605,6]]}}}],["verifieddefault",{"_index":576,"t":{"530":{"position":[[260,15]]}}}],["verify/ssl_upstream_insecure_skip_verifi",{"_index":329,"t":{"499":{"position":[[252,40]]}}}],["version",{"_index":42,"t":{"477":{"position":[[484,7]]},"483":{"position":[[679,8]]},"542":{"position":[[123,7],[404,7],[466,7]]},"558":{"position":[[581,7],[670,8],[705,7],[772,8],[869,7]]},"578":{"position":[[50,7],[111,7]]},"606":{"position":[[12950,7],[12977,7],[13627,7],[13645,7]]}}}],["version=tls1.3",{"_index":830,"t":{"558":{"position":[[615,15]]}}}],["via",{"_index":252,"t":{"491":{"position":[[717,3],[958,3]]},"499":{"position":[[1377,3],[1390,3]]},"528":{"position":[[382,3],[2202,3]]},"560":{"position":[[733,3]]},"586":{"position":[[3308,3]]},"588":{"position":[[161,3]]},"600":{"position":[[31,3]]},"606":{"position":[[338,3],[6660,3],[6865,3],[9820,3]]},"614":{"position":[[1027,3]]},"620":{"position":[[71,3],[1007,3],[2944,3],[3755,3]]},"624":{"position":[[78,3]]}}}],["visit",{"_index":1085,"t":{"584":{"position":[[1351,8]]}}}],["volum",{"_index":1435,"t":{"612":{"position":[[817,7]]}}}],["vulner",{"_index":130,"t":{"483":{"position":[[37,13],[606,13]]},"485":{"position":[[75,16],[308,15]]}}}],["wait",{"_index":764,"t":{"546":{"position":[[2541,4]]},"606":{"position":[[13283,4]]}}}],["want",{"_index":264,"t":{"491":{"position":[[1094,4]]},"544":{"position":[[574,4]]},"552":{"position":[[865,4]]},"566":{"position":[[396,4],[884,4]]},"584":{"position":[[1739,4]]},"586":{"position":[[580,4]]},"608":{"position":[[677,5]]}}}],["warn",{"_index":291,"t":{"493":{"position":[[251,8]]},"606":{"position":[[11258,9],[14155,8]]}}}],["way",{"_index":519,"t":{"528":{"position":[[328,4]]},"572":{"position":[[217,4]]},"586":{"position":[[1086,3]]}}}],["web",{"_index":899,"t":{"564":{"position":[[529,4]]},"584":{"position":[[1259,3],[2591,3],[3802,3],[3921,3]]}}}],["webapp",{"_index":936,"t":{"566":{"position":[[194,7]]}}}],["websocket",{"_index":760,"t":{"546":{"position":[[2428,10]]},"606":{"position":[[8391,10],[8415,9]]}}}],["websockets/proxy_websocket",{"_index":327,"t":{"499":{"position":[[197,27]]}}}],["well",{"_index":259,"t":{"491":{"position":[[924,4],[1145,4],[1308,5]]},"542":{"position":[[91,4]]},"606":{"position":[[2536,5],[2574,5]]}}}],["whenstream",{"_index":752,"t":{"546":{"position":[[2172,13]]}}}],["whether",{"_index":491,"t":{"520":{"position":[[318,7]]},"544":{"position":[[155,7]]},"546":{"position":[[2281,7]]},"578":{"position":[[144,7]]},"588":{"position":[[241,7]]},"606":{"position":[[10291,7]]}}}],["whitelist",{"_index":811,"t":{"552":{"position":[[954,9]]},"606":{"position":[[13662,9],[14458,9],[14809,11]]}}}],["whole",{"_index":695,"t":{"544":{"position":[[594,5]]},"624":{"position":[[236,5]]}}}],["whose",{"_index":375,"t":{"499":{"position":[[1258,5]]},"528":{"position":[[784,5]]}}}],["wide_authority_to_your_service_account",{"_index":916,"t":{"564":{"position":[[1438,38]]}}}],["window",{"_index":941,"t":{"566":{"position":[[577,8]]},"568":{"position":[[45,7]]}}}],["wish",{"_index":1094,"t":{"584":{"position":[[1839,4],[2271,4],[2364,4],[2969,4]]},"590":{"position":[[95,5]]}}}],["within",{"_index":131,"t":{"483":{"position":[[51,6]]},"489":{"position":[[568,6]]},"493":{"position":[[131,6]]},"504":{"position":[[230,6]]},"510":{"position":[[81,6]]},"520":{"position":[[234,6]]},"538":{"position":[[112,6]]},"546":{"position":[[912,6]]},"572":{"position":[[703,6]]},"584":{"position":[[4737,6]]}}}],["without",{"_index":289,"t":{"493":{"position":[[237,7]]},"504":{"position":[[307,7]]},"620":{"position":[[184,7]]},"624":{"position":[[215,7]]},"626":{"position":[[43,7]]}}}],["wizard",{"_index":963,"t":{"568":{"position":[[221,6]]}}}],["wo",{"_index":1570,"t":{"626":{"position":[[846,2],[2056,2]]}}}],["work",{"_index":115,"t":{"481":{"position":[[61,4]]},"578":{"position":[[102,4],[546,4]]},"584":{"position":[[1236,7],[1940,5],[2437,4]]},"586":{"position":[[210,4]]},"606":{"position":[[13531,5]]},"620":{"position":[[1528,4]]}}}],["write",{"_index":980,"t":{"572":{"position":[[1300,5]]}}}],["x",{"_index":802,"t":{"552":{"position":[[570,1]]},"560":{"position":[[1035,1],[1076,1]]},"574":{"position":[[1289,1]]},"606":{"position":[[6664,1],[6745,1],[6948,1],[6966,1],[6988,1],[7413,1],[7431,1],[7451,1],[7473,1],[8636,1],[8653,1],[8667,1],[8683,1],[10014,1],[10312,1],[10346,1],[10704,1],[10725,1],[10748,1],[10773,1],[10897,1],[11926,1]]},"614":{"position":[[897,1]]},"616":{"position":[[752,1]]},"620":{"position":[[399,1],[440,1],[475,1],[576,1],[737,1],[778,1],[1011,1],[1022,1],[1235,1],[1266,1],[1445,1]]},"626":{"position":[[337,1],[2001,1],[2177,1]]}}}],["x.y.z.linux",{"_index":46,"t":{"477":{"position":[[541,11]]}}}],["x509",{"_index":1158,"t":{"586":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":1358,"t":{"606":{"position":[[6718,12],[10682,12]]},"620":{"position":[[1080,12]]}}}],["xauthrequest/set_xauthrequest",{"_index":339,"t":{"499":{"position":[[502,29]]}}}],["xxx\"client_secret",{"_index":1133,"t":{"584":{"position":[[4580,18]]}}}],["xxxxx\"client_secret",{"_index":1106,"t":{"584":{"position":[[3263,20]]}}}],["yaml",{"_index":297,"t":{"493":{"position":[[464,4]]},"495":{"position":[[47,4]]},"497":{"position":[[295,4]]},"528":{"position":[[1482,4]]},"624":{"position":[[288,6]]}}}],["you'd",{"_index":979,"t":{"572":{"position":[[1166,5]]}}}],["yourcompany.com",{"_index":1292,"t":{"606":{"position":[[975,18]]}}}],["yourself",{"_index":697,"t":{"544":{"position":[[635,8]]}}}],["yyy\"pass_access_token",{"_index":1134,"t":{"584":{"position":[[4601,22]]}}}],["yyyyy\"pass_access_token",{"_index":1107,"t":{"584":{"position":[[3286,24]]}}}],["zzz\"cookie_secur",{"_index":1135,"t":{"584":{"position":[[4646,18]]}}}],["zzzzz\"skip_provider_button",{"_index":1109,"t":{"584":{"position":[[3333,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file +[{"documents":[{"i":476,"t":"Installation","u":"/oauth2-proxy/docs/7.3.x/","b":["Docs"]},{"i":478,"t":"Security","u":"/oauth2-proxy/docs/7.3.x/community/security","b":["Docs","Community"]},{"i":484,"t":"Behaviour","u":"/oauth2-proxy/docs/7.3.x/behaviour","b":["Docs"]},{"i":486,"t":"Alpha Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","b":["Docs","Configuration"]},{"i":543,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","b":["Docs","Configuration"]},{"i":581,"t":"Session Storage","u":"/oauth2-proxy/docs/7.3.x/configuration/session_storage","b":["Docs","Configuration"]},{"i":587,"t":"TLS Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/tls","b":["Docs","Configuration"]},{"i":593,"t":"Endpoints","u":"/oauth2-proxy/docs/7.3.x/features/endpoints","b":["Docs","Features"]},{"i":599,"t":"Overview","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","b":["Docs","Configuration"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/476",[0,2.222]],["t/478",[1,2.222]],["t/484",[2,2.222]],["t/486",[3,1.699,4,0.94]],["t/543",[4,0.761,5,1.375,6,1.375]],["t/581",[7,1.699,8,1.699]],["t/587",[4,0.94,9,1.699]],["t/593",[10,2.222]],["t/599",[11,2.222]]],"invertedIndex":[["alpha",{"_index":3,"t":{"486":{"position":[[0,5]]}}}],["behaviour",{"_index":2,"t":{"484":{"position":[[0,9]]}}}],["configur",{"_index":4,"t":{"486":{"position":[[6,13]]},"543":{"position":[[15,13]]},"587":{"position":[[4,13]]}}}],["endpoint",{"_index":10,"t":{"593":{"position":[[0,9]]}}}],["instal",{"_index":0,"t":{"476":{"position":[[0,12]]}}}],["oauth",{"_index":5,"t":{"543":{"position":[[0,5]]}}}],["overview",{"_index":11,"t":{"599":{"position":[[0,8]]}}}],["provid",{"_index":6,"t":{"543":{"position":[[6,8]]}}}],["secur",{"_index":1,"t":{"478":{"position":[[0,8]]}}}],["session",{"_index":7,"t":{"581":{"position":[[0,7]]}}}],["storag",{"_index":8,"t":{"581":{"position":[[8,7]]}}}],["tl",{"_index":9,"t":{"587":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":480,"t":"Security Disclosures","u":"/oauth2-proxy/docs/7.3.x/community/security","h":"#security-disclosures","p":478},{"i":482,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.3.x/community/security","h":"#how-will-we-respond-to-disclosures","p":478},{"i":488,"t":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#using-alpha-configuration","p":486},{"i":490,"t":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":486},{"i":492,"t":"Removed options","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#removed-options","p":486},{"i":494,"t":"Configuration Reference","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#configuration-reference","p":486},{"i":495,"t":"ADFSOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#adfsoptions","p":486},{"i":497,"t":"AlphaOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#alphaoptions","p":486},{"i":499,"t":"AzureOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#azureoptions","p":486},{"i":501,"t":"BitbucketOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#bitbucketoptions","p":486},{"i":503,"t":"ClaimSource","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#claimsource","p":486},{"i":505,"t":"Duration","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#duration","p":486},{"i":507,"t":"GitHubOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#githuboptions","p":486},{"i":509,"t":"GitLabOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#gitlaboptions","p":486},{"i":511,"t":"GoogleOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#googleoptions","p":486},{"i":513,"t":"Header","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#header","p":486},{"i":515,"t":"HeaderValue","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#headervalue","p":486},{"i":517,"t":"KeycloakOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#keycloakoptions","p":486},{"i":519,"t":"LoginGovOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#logingovoptions","p":486},{"i":521,"t":"LoginURLParameter","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#loginurlparameter","p":486},{"i":523,"t":"OIDCOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#oidcoptions","p":486},{"i":525,"t":"Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#provider","p":486},{"i":527,"t":"ProviderType","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#providertype","p":486},{"i":529,"t":"Providers","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#providers","p":486},{"i":531,"t":"SecretSource","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#secretsource","p":486},{"i":533,"t":"Server","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#server","p":486},{"i":535,"t":"TLS","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#tls","p":486},{"i":537,"t":"URLParameterRule","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#urlparameterrule","p":486},{"i":539,"t":"Upstream","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#upstream","p":486},{"i":541,"t":"UpstreamConfig","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#upstreamconfig","p":486},{"i":545,"t":"Google Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#google-auth-provider","p":543},{"i":547,"t":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#azure-auth-provider","p":543},{"i":549,"t":"ADFS Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#adfs-auth-provider","p":543},{"i":551,"t":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":543},{"i":553,"t":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#github-auth-provider","p":543},{"i":555,"t":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":543},{"i":557,"t":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":543},{"i":559,"t":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":543},{"i":561,"t":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":543},{"i":563,"t":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":543},{"i":565,"t":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#openid-connect-provider","p":543},{"i":567,"t":"login.gov Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#logingov-provider","p":543},{"i":569,"t":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#nextcloud-provider","p":543},{"i":571,"t":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":543},{"i":573,"t":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":543},{"i":575,"t":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":543},{"i":577,"t":"Email Authentication","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#email-authentication","p":543},{"i":579,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":543},{"i":583,"t":"Cookie Storage","u":"/oauth2-proxy/docs/7.3.x/configuration/session_storage","h":"#cookie-storage","p":581},{"i":585,"t":"Redis Storage","u":"/oauth2-proxy/docs/7.3.x/configuration/session_storage","h":"#redis-storage","p":581},{"i":589,"t":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/7.3.x/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":587},{"i":591,"t":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/7.3.x/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":587},{"i":595,"t":"Sign out","u":"/oauth2-proxy/docs/7.3.x/features/endpoints","h":"#sign-out","p":593},{"i":597,"t":"Auth","u":"/oauth2-proxy/docs/7.3.x/features/endpoints","h":"#auth","p":593},{"i":601,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#generating-a-cookie-secret","p":599},{"i":603,"t":"Config File","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#config-file","p":599},{"i":605,"t":"Command Line Options","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#command-line-options","p":599},{"i":607,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#upstreams-configuration","p":599},{"i":609,"t":"Environment variables","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#environment-variables","p":599},{"i":611,"t":"Logging Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#logging-configuration","p":599},{"i":613,"t":"Auth Log Format","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#auth-log-format","p":599},{"i":615,"t":"Request Log Format","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#request-log-format","p":599},{"i":617,"t":"Standard Log Format","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#standard-log-format","p":599},{"i":619,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":599},{"i":621,"t":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":599},{"i":623,"t":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":599},{"i":625,"t":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":599}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/480",[0,3.998,1,3.463]],["t/482",[1,3.463,2,3.998]],["t/488",[3,2.613,4,3.359,5,1.831]],["t/490",[5,1.579,6,2.896,7,2.508,8,2.896]],["t/492",[9,3.998,10,3.463]],["t/494",[5,2.18,11,3.998]],["t/495",[12,4.938]],["t/497",[13,4.938]],["t/499",[14,4.938]],["t/501",[15,4.938]],["t/503",[16,4.938]],["t/505",[17,4.938]],["t/507",[18,4.938]],["t/509",[19,4.938]],["t/511",[20,4.938]],["t/513",[21,4.938]],["t/515",[22,4.938]],["t/517",[23,4.938]],["t/519",[24,4.938]],["t/521",[25,4.938]],["t/523",[26,4.938]],["t/525",[27,1.617]],["t/527",[28,4.938]],["t/529",[27,1.617]],["t/531",[29,4.938]],["t/533",[30,4.938]],["t/535",[31,3.841]],["t/537",[32,4.938]],["t/539",[33,3.841]],["t/541",[34,4.938]],["t/545",[27,1.1,35,3.359,36,1.361]],["t/547",[27,1.1,36,1.361,37,2.909]],["t/549",[27,1.1,36,1.361,38,3.359]],["t/551",[27,1.1,36,1.361,39,3.359]],["t/553",[27,1.1,36,1.361,40,3.359]],["t/555",[27,1.1,36,1.361,41,2.909]],["t/557",[27,0.948,36,1.173,41,2.508,42,2.896]],["t/559",[27,1.1,36,1.361,43,3.359]],["t/561",[27,1.1,36,1.361,44,3.359]],["t/563",[27,0.948,37,2.508,45,2.896,46,2.508]],["t/565",[27,1.1,47,3.359,48,3.359]],["t/567",[27,1.309,49,3.998]],["t/569",[27,1.309,50,3.998]],["t/571",[27,1.1,36,1.361,51,3.359]],["t/573",[27,1.1,36,1.361,52,3.359]],["t/575",[27,1.1,36,1.361,53,3.359]],["t/577",[54,3.998,55,3.998]],["t/579",[7,2.909,27,1.1,46,2.909]],["t/583",[56,3.463,57,3.463]],["t/585",[57,3.463,58,3.998]],["t/589",[31,2.253,59,2.508,60,2.896,61,2.508]],["t/591",[31,1.766,59,1.966,61,1.966,62,2.27,63,2.27,64,1.966]],["t/595",[65,3.998,66,3.998]],["t/597",[36,2.001]],["t/601",[56,2.909,67,3.359,68,3.359]],["t/603",[69,3.998,70,3.998]],["t/605",[10,2.909,71,3.359,72,3.359]],["t/607",[5,2.18,33,3.11]],["t/609",[73,3.998,74,3.998]],["t/611",[5,2.18,75,2.847]],["t/613",[36,1.361,75,2.391,76,2.613]],["t/615",[75,2.391,76,2.613,77,3.359]],["t/617",[75,2.391,76,2.613,78,3.359]],["t/619",[3,1.98,5,1.388,64,2.204,79,2.545,80,2.545]],["t/621",[3,1.766,5,1.238,81,2.27,82,2.27,83,1.766,84,1.966]],["t/623",[83,2.253,84,2.508,85,2.896,86,2.896]],["t/625",[5,1.579,33,2.253,83,2.253,87,2.896]]],"invertedIndex":[["401",{"_index":85,"t":{"623":{"position":[[17,3]]}}}],["ad",{"_index":46,"t":{"563":{"position":[[16,2]]},"579":{"position":[[0,6]]}}}],["adf",{"_index":38,"t":{"549":{"position":[[0,4]]}}}],["adfsopt",{"_index":12,"t":{"495":{"position":[[0,11]]}}}],["alpha",{"_index":4,"t":{"488":{"position":[[6,5]]}}}],["alphaopt",{"_index":13,"t":{"497":{"position":[[0,12]]}}}],["auth",{"_index":36,"t":{"545":{"position":[[7,4]]},"547":{"position":[[6,4]]},"549":{"position":[[5,4]]},"551":{"position":[[9,4]]},"553":{"position":[[7,4]]},"555":{"position":[[9,4]]},"557":{"position":[[14,4]]},"559":{"position":[[7,4]]},"561":{"position":[[9,4]]},"571":{"position":[[13,4]]},"573":{"position":[[10,4]]},"575":{"position":[[6,4]]},"597":{"position":[[0,4]]},"613":{"position":[[0,4]]}}}],["auth_request",{"_index":79,"t":{"619":{"position":[[35,12]]}}}],["authent",{"_index":55,"t":{"577":{"position":[[6,14]]}}}],["azur",{"_index":37,"t":{"547":{"position":[[0,5]]},"563":{"position":[[10,5]]}}}],["azureopt",{"_index":14,"t":{"499":{"position":[[0,12]]}}}],["bitbucket",{"_index":52,"t":{"573":{"position":[[0,9]]}}}],["bitbucketopt",{"_index":15,"t":{"501":{"position":[[0,16]]}}}],["claimsourc",{"_index":16,"t":{"503":{"position":[[0,11]]}}}],["command",{"_index":71,"t":{"605":{"position":[[0,7]]}}}],["config",{"_index":69,"t":{"603":{"position":[[0,6]]}}}],["configur",{"_index":5,"t":{"488":{"position":[[12,13]]},"490":{"position":[[11,13]]},"494":{"position":[[0,13]]},"607":{"position":[[10,13]]},"611":{"position":[[8,13]]},"619":{"position":[[0,11]]},"621":{"position":[[0,11]]},"625":{"position":[[34,13]]}}}],["connect",{"_index":48,"t":{"565":{"position":[[7,7]]}}}],["convert",{"_index":6,"t":{"490":{"position":[[0,10]]}}}],["cooki",{"_index":56,"t":{"583":{"position":[[0,6]]},"601":{"position":[[13,6]]}}}],["digitalocean",{"_index":51,"t":{"571":{"position":[[0,12]]}}}],["direct",{"_index":80,"t":{"619":{"position":[[48,9]]}}}],["disclosur",{"_index":1,"t":{"480":{"position":[[9,11]]},"482":{"position":[[23,12]]}}}],["durat",{"_index":17,"t":{"505":{"position":[[0,8]]}}}],["e.g",{"_index":63,"t":{"591":{"position":[[32,4]]}}}],["email",{"_index":54,"t":{"577":{"position":[[0,5]]}}}],["environ",{"_index":73,"t":{"609":{"position":[[0,11]]}}}],["error",{"_index":86,"t":{"623":{"position":[[21,6]]}}}],["facebook",{"_index":39,"t":{"551":{"position":[[0,8]]}}}],["file",{"_index":70,"t":{"603":{"position":[[7,4]]}}}],["format",{"_index":76,"t":{"613":{"position":[[9,6]]},"615":{"position":[[12,6]]},"617":{"position":[[13,6]]}}}],["forwardauth",{"_index":83,"t":{"621":{"position":[[42,11]]},"623":{"position":[[0,11]]},"625":{"position":[[0,11]]}}}],["gener",{"_index":67,"t":{"601":{"position":[[0,10]]}}}],["gitea",{"_index":53,"t":{"575":{"position":[[0,5]]}}}],["github",{"_index":40,"t":{"553":{"position":[[0,6]]}}}],["githubopt",{"_index":18,"t":{"507":{"position":[[0,13]]}}}],["gitlab",{"_index":43,"t":{"559":{"position":[[0,6]]}}}],["gitlabopt",{"_index":19,"t":{"509":{"position":[[0,13]]}}}],["googl",{"_index":35,"t":{"545":{"position":[[0,6]]}}}],["googleopt",{"_index":20,"t":{"511":{"position":[[0,13]]}}}],["header",{"_index":21,"t":{"513":{"position":[[0,6]]}}}],["headervalu",{"_index":22,"t":{"515":{"position":[[0,11]]}}}],["keycloak",{"_index":41,"t":{"555":{"position":[[0,8]]},"557":{"position":[[0,8]]}}}],["keycloakopt",{"_index":23,"t":{"517":{"position":[[0,15]]}}}],["line",{"_index":72,"t":{"605":{"position":[[8,4]]}}}],["linkedin",{"_index":44,"t":{"561":{"position":[[0,8]]}}}],["log",{"_index":75,"t":{"611":{"position":[[0,7]]},"613":{"position":[[5,3]]},"615":{"position":[[8,3]]},"617":{"position":[[9,3]]}}}],["login.gov",{"_index":49,"t":{"567":{"position":[[0,9]]}}}],["logingovopt",{"_index":24,"t":{"519":{"position":[[0,15]]}}}],["loginurlparamet",{"_index":25,"t":{"521":{"position":[[0,17]]}}}],["microsoft",{"_index":45,"t":{"563":{"position":[[0,9]]}}}],["middlewar",{"_index":84,"t":{"621":{"position":[[54,10]]},"623":{"position":[[28,10]]}}}],["new",{"_index":7,"t":{"490":{"position":[[32,3]]},"579":{"position":[[9,3]]}}}],["nextcloud",{"_index":50,"t":{"569":{"position":[[0,9]]}}}],["nginx",{"_index":64,"t":{"591":{"position":[[37,5]]},"619":{"position":[[29,5]]}}}],["oauth2",{"_index":60,"t":{"589":{"position":[[17,6]]}}}],["oidc",{"_index":42,"t":{"557":{"position":[[9,4]]}}}],["oidcopt",{"_index":26,"t":{"523":{"position":[[0,11]]}}}],["openid",{"_index":47,"t":{"565":{"position":[[0,6]]}}}],["option",{"_index":10,"t":{"492":{"position":[[8,7]]},"605":{"position":[[13,7]]}}}],["out",{"_index":66,"t":{"595":{"position":[[5,3]]}}}],["provid",{"_index":27,"t":{"525":{"position":[[0,8]]},"529":{"position":[[0,9]]},"545":{"position":[[12,8]]},"547":{"position":[[11,8]]},"549":{"position":[[10,8]]},"551":{"position":[[14,8]]},"553":{"position":[[12,8]]},"555":{"position":[[14,8]]},"557":{"position":[[19,8]]},"559":{"position":[[12,8]]},"561":{"position":[[14,8]]},"563":{"position":[[19,8]]},"565":{"position":[[15,8]]},"567":{"position":[[10,8]]},"569":{"position":[[10,8]]},"571":{"position":[[18,8]]},"573":{"position":[[15,8]]},"575":{"position":[[11,8]]},"579":{"position":[[13,8]]}}}],["providertyp",{"_index":28,"t":{"527":{"position":[[0,12]]}}}],["proxi",{"_index":61,"t":{"589":{"position":[[24,5]]},"591":{"position":[[25,6]]}}}],["redi",{"_index":58,"t":{"585":{"position":[[0,5]]}}}],["refer",{"_index":11,"t":{"494":{"position":[[14,9]]}}}],["remov",{"_index":9,"t":{"492":{"position":[[0,7]]}}}],["request",{"_index":77,"t":{"615":{"position":[[0,7]]}}}],["respond",{"_index":2,"t":{"482":{"position":[[12,7]]}}}],["revers",{"_index":62,"t":{"591":{"position":[[17,7]]}}}],["secret",{"_index":68,"t":{"601":{"position":[[20,6]]}}}],["secretsourc",{"_index":29,"t":{"531":{"position":[[0,12]]}}}],["secur",{"_index":0,"t":{"480":{"position":[[0,8]]}}}],["server",{"_index":30,"t":{"533":{"position":[[0,6]]}}}],["sign",{"_index":65,"t":{"595":{"position":[[0,4]]}}}],["standard",{"_index":78,"t":{"617":{"position":[[0,8]]}}}],["static",{"_index":87,"t":{"625":{"position":[[17,6]]}}}],["storag",{"_index":57,"t":{"583":{"position":[[7,7]]},"585":{"position":[[6,7]]}}}],["structur",{"_index":8,"t":{"490":{"position":[[36,9]]}}}],["termin",{"_index":59,"t":{"589":{"position":[[0,9]]},"591":{"position":[[0,9]]}}}],["tl",{"_index":31,"t":{"535":{"position":[[0,3]]},"589":{"position":[[10,3]]},"591":{"position":[[10,3]]}}}],["traefik",{"_index":81,"t":{"621":{"position":[[29,7]]}}}],["upstream",{"_index":33,"t":{"539":{"position":[[0,8]]},"607":{"position":[[0,9]]},"625":{"position":[[24,9]]}}}],["upstreamconfig",{"_index":34,"t":{"541":{"position":[[0,14]]}}}],["urlparameterrul",{"_index":32,"t":{"537":{"position":[[0,16]]}}}],["us",{"_index":3,"t":{"488":{"position":[[0,5]]},"619":{"position":[[16,3]]},"621":{"position":[[16,3]]}}}],["v2",{"_index":82,"t":{"621":{"position":[[37,4]]}}}],["variabl",{"_index":74,"t":{"609":{"position":[[12,9]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":477,"t":"Choose how to deploy: a. Download Prebuilt Binary (current release is v7.3.0) b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available) d. Using a Kubernetes manifest (Helm) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. $ sha256sum -c sha256sum.txtoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/7.3.x/","h":"","p":476},{"i":479,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/7.3.x/community/security","h":"","p":478},{"i":481,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/7.3.x/community/security","h":"#security-disclosures","p":478},{"i":483,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.3.x/community/security","h":"#how-will-we-respond-to-disclosures","p":478},{"i":485,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/7.3.x/behaviour","h":"","p":484},{"i":487,"t":"danger This page contains documentation for alpha features. We reserve the right to make breaking changes to the features detailed within this page with no notice. Options described in this page may be changed, removed, renamed or moved without prior warning. Please beware of this before you use alpha configuration options. This page details a set of alpha configuration options in a new format. Going forward we are intending to add structured configuration in YAML format to replace the existing TOML based configuration file and flags. Below is a reference for the structure of the configuration, with AlphaOptions as the root of the configuration. When using alpha configuration, your config file will look something like below: upstreams: - id: ... ...injectRequestHeaders: - name: ... ...injectResponseHeaders: - name: ... ... Please browse the reference below for the structure of the new configuration format.","s":"Alpha Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"","p":486},{"i":489,"t":"To use the new alpha configuration, generate a YAML file based on the format described in the reference below. Provide the path to this file using the --alpha-config flag. note When using the --alpha-config flag, some options are no longer available. See removed options below for more information.","s":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#using-alpha-configuration","p":486},{"i":491,"t":"Before adding the new --alpha-config option, start OAuth2 Proxy using the convert-config-to-alpha flag to convert existing configuration to the new format. oauth2-proxy --convert-config-to-alpha --config ./path/to/existing/config.cfg This will convert any options supported by the new format to YAML and print the new configuration to STDOUT. Copy this to a new file, remove any options from your existing configuration noted in removed options and then start OAuth2 Proxy using the new config. oauth2-proxy --alpha-config ./path/to/new/config.yaml --config ./path/to/existing/config.cfg","s":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":486},{"i":493,"t":"The following flags/options and their respective environment variables are no longer available when using alpha configuration: flush-interval/flush_interval pass-host-header/pass_host_header proxy-websockets/proxy_websockets ssl-upstream-insecure-skip-verify/ssl_upstream_insecure_skip_verify upstream/upstreams pass-basic-auth/pass_basic_auth pass-access-token/pass_access_token pass-user-headers/pass_user_headers pass-authorization-header/pass_authorization_header set-basic-auth/set_basic_auth set-xauthrequest/set_xauthrequest set-authorization-header/set_authorization_header prefer-email-to-user/prefer_email_to_user basic-auth-password/basic_auth_password skip-auth-strip-headers/skip_auth_strip_headers client-id/client_id client-secret/client_secret, and client-secret-file/client_secret_file provider provider-display-name/provider_display_name provider-ca-file/provider_ca_files login-url/login_url redeem-url/redeem_url profile-url/profile_url resource validate-url/validate_url scope prompt approval-prompt/approval_prompt acr-values/acr_values user-id-claim/user_id_claim allowed-group/allowed_groups allowed-role/allowed_roles jwt-key/jwt_key jwt-key-file/jwt_key_file pubjwk-url/pubjwk_url and all provider-specific options, i.e. any option whose name includes oidc, azure, bitbucket, github, gitlab, google or keycloak. Attempting to use any of these options via flags or via config when --alpha-config is set will result in an error. info You must remove these options before starting OAuth2 Proxy with --alpha-config","s":"Removed options","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#removed-options","p":486},{"i":496,"t":"(Appears on: Provider) Field Type Description skipScope bool Skip adding the scope parameter in login requestDefault value is 'false'","s":"ADFSOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#adfsoptions","p":486},{"i":498,"t":"AlphaOptions contains alpha structured configuration options. Usage of these options allows users to access alpha features that are not available as part of the primary configuration structure for OAuth2 Proxy. danger The options within this structure are considered alpha. They may change between releases without notice. Field Type Description upstreamConfig UpstreamConfig UpstreamConfig is used to configure upstream servers.Once a user is authenticated, requests to the server will be proxied tothese upstream servers based on the path mappings defined in this list. injectRequestHeaders []Header InjectRequestHeaders is used to configure headers that should be addedto requests to upstream servers.Headers may source values from either the authenticated user's sessionor from a static secret value. injectResponseHeaders []Header InjectResponseHeaders is used to configure headers that should be addedto responses from the proxy.This is typically used when using the proxy as an external authenticationprovider in conjunction with another proxy such as NGINX and itsauth_request module.Headers may source values from either the authenticated user's sessionor from a static secret value. server Server Server is used to configure the HTTP(S) server for the proxy application.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. metricsServer Server MetricsServer is used to configure the HTTP(S) server for metrics.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. providers Providers Providers is used to configure multiple providers.","s":"AlphaOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#alphaoptions","p":486},{"i":500,"t":"(Appears on: Provider) Field Type Description tenant string Tenant directs to a tenant-specific or common (tenant-independent) endpointDefault value is 'common'","s":"AzureOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#azureoptions","p":486},{"i":502,"t":"(Appears on: Provider) Field Type Description team string Team sets restrict logins to members of this team repository string Repository sets restrict logins to user with access to this repository","s":"BitbucketOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#bitbucketoptions","p":486},{"i":504,"t":"(Appears on: HeaderValue) ClaimSource allows loading a header value from a claim within the session Field Type Description claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"ClaimSource","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#claimsource","p":486},{"i":506,"t":"(string alias)​ (Appears on: Upstream) Duration is as string representation of a period of time. A duration string is a is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\", \"-1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".","s":"Duration","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#duration","p":486},{"i":508,"t":"(Appears on: Provider) Field Type Description org string Org sets restrict logins to members of this organisation team string Team sets restrict logins to members of this team repo string Repo sets restrict logins to collaborators of this repository token string Token is the token to use when verifying repository collaboratorsit must have push access to the repository users []string Users allows users with these usernames to logineven if they do not belong to the specified org and team or collaborators","s":"GitHubOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#githuboptions","p":486},{"i":510,"t":"(Appears on: Provider) Field Type Description group []string Group sets restrict logins to members of this group projects []string Projects restricts logins to members of any of these projects","s":"GitLabOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#gitlaboptions","p":486},{"i":512,"t":"(Appears on: Provider) Field Type Description group []string Groups sets restrict logins to members of this google group adminEmail string AdminEmail is the google admin to impersonate for api calls serviceAccountJson string ServiceAccountJSON is the path to the service account json credentials","s":"GoogleOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#googleoptions","p":486},{"i":514,"t":"(Appears on: AlphaOptions) Header represents an individual header that will be added to a request or response header. Field Type Description name string Name is the header name to be used for this set of values.Names should be unique within a list of Headers. preserveRequestValue bool PreserveRequestValue determines whether any values for this headershould be preserved for the request to the upstream server.This option only applies to injected request headers.Defaults to false (headers that match this header will be stripped). values []HeaderValue Values contains the desired values for this header","s":"Header","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#header","p":486},{"i":516,"t":"(Appears on: Header) HeaderValue represents a single header value and the sources that can make up the header value Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value. claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"HeaderValue","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#headervalue","p":486},{"i":518,"t":"(Appears on: Provider) Field Type Description groups []string Group enables to restrict login to members of indicated group roles []string Role enables to restrict login to users with role (only available when using the keycloak-oidc provider)","s":"KeycloakOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#keycloakoptions","p":486},{"i":520,"t":"(Appears on: Provider) Field Type Description jwtKey string JWTKey is a private key in PEM format used to sign JWT, jwtKeyFile string JWTKeyFile is a path to the private key file in PEM format used to sign the JWT pubjwkURL string PubJWKURL is the JWK pubkey access endpoint","s":"LoginGovOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#logingovoptions","p":486},{"i":522,"t":"(Appears on: Provider) LoginURLParameter is the configuration for a single query parameter that can be passed through from the /oauth2/start endpoint to the IdP login URL. The \"default\" option specifies the default value or values (if any) that will be passed to the IdP for this parameter, and \"allow\" is a list of options for ways in which this parameter can be set or overridden via the query string to /oauth2/start. If only a default is specified and no \"allow\" then the parameter is effectively fixed - the default value will always be used and anything passed to the start URL will be ignored. If only \"allow\" is specified but no default then the parameter will only be passed on to the IdP if the caller provides it, and no value will be sent otherwise. Examples: A parameter whose value is fixed name: organizationdefault:- myorg A parameter that is not passed by default, but may be set to one of a fixed set of values name: promptallow:- value: login- value: consent- value: select_account A parameter that is passed by default but may be overridden by one of a fixed set of values name: promptdefault: [\"login\"]allow:- value: consent- value: select_account A parameter that may be overridden, but only by values that match a regular expression. For example to restrict login_hint to email addresses in your organization's domain: name: login_hintallow:- pattern: '^[^@]*@example\\.com$'# this allows at most one \"@\" sign, and requires \"example.com\" domain. Note that the YAML rules around exactly which characters are allowed and/or require escaping in different types of string literals are convoluted. For regular expressions the single quoted form is simplest as backslash is not considered to be an escape character. Alternatively use the \"chomped block\" format |-: - pattern: |- ^[^@]*@example\\.com$ The hyphen is important, a | block would have a trailing newline character. Field Type Description name string Name specifies the name of the query parameter. default []string (Optional) Default specifies a default value or values that will bepassed to the IdP if not overridden. allow []URLParameterRule (Optional) Allow specifies rules about how the default (if any) may beoverridden via the query string to /oauth2/start. Onlyvalues that match one or more of the allow rules will beforwarded to the IdP.","s":"LoginURLParameter","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#loginurlparameter","p":486},{"i":524,"t":"(Appears on: Provider) Field Type Description issuerURL string IssuerURL is the OpenID Connect issuer URLeg: https://accounts.google.com insecureAllowUnverifiedEmail bool InsecureAllowUnverifiedEmail prevents failures if an email address in an id_token is not verifieddefault set to 'false' insecureSkipIssuerVerification bool InsecureSkipIssuerVerification skips verification of ID token issuers. When false, ID Token Issuers must match the OIDC discovery URLdefault set to 'false' insecureSkipNonce bool InsecureSkipNonce skips verifying the ID Token's nonce claim that must matchthe random nonce sent in the initial OAuth flow. Otherwise, the nonce is checkedafter the initial OAuth redeem & subsequent token refreshes.default set to 'true'Warning: In a future release, this will change to 'false' by default for enhanced security. skipDiscovery bool SkipDiscovery allows to skip OIDC discovery and use manually supplied Endpointsdefault set to 'false' jwksURL string JwksURL is the OpenID Connect JWKS URLeg: https://www.googleapis.com/oauth2/v3/certs emailClaim string EmailClaim indicates which claim contains the user email,default set to 'email' groupsClaim string GroupsClaim indicates which claim contains the user groupsdefault set to 'groups' userIDClaim string UserIDClaim indicates which claim contains the user IDdefault set to 'email' audienceClaims []string AudienceClaim allows to define any claim that is verified against the client idBy default aud claim is used for verification. extraAudiences []string ExtraAudiences is a list of additional audiences that are allowedto pass verification in addition to the client id.","s":"OIDCOptions","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#oidcoptions","p":486},{"i":526,"t":"(Appears on: Providers) Provider holds all configuration for a single provider Field Type Description clientID string ClientID is the OAuth Client ID that is defined in the providerThis value is required for all providers. clientSecret string ClientSecret is the OAuth Client Secret that is defined in the providerThis value is required for all providers. clientSecretFile string ClientSecretFile is the name of the filecontaining the OAuth Client Secret, it will be used if ClientSecret is not set. keycloakConfig KeycloakOptions KeycloakConfig holds all configurations for Keycloak provider. azureConfig AzureOptions AzureConfig holds all configurations for Azure provider. ADFSConfig ADFSOptions ADFSConfig holds all configurations for ADFS provider. bitbucketConfig BitbucketOptions BitbucketConfig holds all configurations for Bitbucket provider. githubConfig GitHubOptions GitHubConfig holds all configurations for GitHubC provider. gitlabConfig GitLabOptions GitLabConfig holds all configurations for GitLab provider. googleConfig GoogleOptions GoogleConfig holds all configurations for Google provider. oidcConfig OIDCOptions OIDCConfig holds all configurations for OIDC provideror providers utilize OIDC configurations. loginGovConfig LoginGovOptions LoginGovConfig holds all configurations for LoginGov provider. id string ID should be a unique identifier for the provider.This value is required for all providers. provider ProviderType Type is the OAuth providermust be set from the supported providers group,otherwise 'Google' is set as default name string Name is the providers display nameif set, it will be shown to the users in the login page. caFiles []string CAFiles is a list of paths to CA certificates that should be used when connecting to the provider.If not specified, the default Go trust sources are used instead loginURL string LoginURL is the authentication endpoint loginURLParameters []LoginURLParameter LoginURLParameters defines the parameters that can be passed from the start URL to the IdP login URL redeemURL string RedeemURL is the token redemption endpoint profileURL string ProfileURL is the profile access endpoint resource string ProtectedResource is the resource that is protected (Azure AD and ADFS only) validateURL string ValidateURL is the access token validation endpoint scope string Scope is the OAuth scope specification allowedGroups []string AllowedGroups is a list of restrict logins to members of this group force_code_challenge_method string The forced code challenge method","s":"Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#provider","p":486},{"i":528,"t":"(string alias)​ (Appears on: Provider) ProviderType is used to enumerate the different provider type options Valid options are: adfs, azure, bitbucket, digitalocean facebook, github, gitlab, google, keycloak, keycloak-oidc, linkedin, login.gov, nextcloud and oidc.","s":"ProviderType","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#providertype","p":486},{"i":530,"t":"([]Provider alias)​ (Appears on: AlphaOptions) Providers is a collection of definitions for providers.","s":"Providers","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#providers","p":486},{"i":532,"t":"(Appears on: ClaimSource, HeaderValue, TLS) SecretSource references an individual secret value. Only one source within the struct should be defined at any time. Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value.","s":"SecretSource","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#secretsource","p":486},{"i":534,"t":"(Appears on: AlphaOptions) Server represents the configuration for an HTTP(S) server Field Type Description BindAddress string BindAddress is the address on which to serve traffic.Leave blank or set to \"-\" to disable. SecureBindAddress string SecureBindAddress is the address on which to serve secure traffic.Leave blank or set to \"-\" to disable. TLS TLS TLS contains the information for loading the certificate and key for thesecure traffic and further configuration for the TLS server.","s":"Server","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#server","p":486},{"i":536,"t":"(Appears on: Server) TLS contains the information for loading a TLS certificate and key as well as an optional minimal TLS version that is acceptable. Field Type Description Key SecretSource Key is the TLS key data to use.Typically this will come from a file. Cert SecretSource Cert is the TLS certificate data to use.Typically this will come from a file. MinVersion string MinVersion is the minimal TLS version that is acceptable.E.g. Set to \"TLS1.3\" to select TLS version 1.3","s":"TLS","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#tls","p":486},{"i":538,"t":"(Appears on: LoginURLParameter) URLParameterRule represents a rule by which query parameters passed to the /oauth2/start endpoint are checked to determine whether they are valid overrides for the given parameter passed to the IdP's login URL. Either Value or Pattern should be supplied, not both. Field Type Description value string A Value rule matches just this specific value pattern string A Pattern rule gives a regular expression that must be matched bysome substring of the value. The expression is not automaticallyanchored to the start and end of the value, if you want to restrictthe whole parameter value you must anchor it yourself with ^ and $.","s":"URLParameterRule","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#urlparameterrule","p":486},{"i":540,"t":"(Appears on: UpstreamConfig) Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path. Field Type Description id string ID should be a unique identifier for the upstream.This value is required for all upstreams. path string Path is used to map requests to the upstream server.The closest match will take precedence and all Paths must be unique.Path can also take a pattern when used with RewriteTarget.Path segments can be captured and matched using regular experessions.Eg:- ^/foo$: Match only the explicit path /foo- ^/bar/$: Match any path prefixed with /bar/- ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget rewriteTarget string RewriteTarget allows users to rewrite the request path before it is sent tothe upstream server.Use the Path to capture segments for reuse within the rewrite target.Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewritethe request /baz/abc/123 to /foo/abc/123 before proxying to theupstream server. uri string The URI of the upstream server. This may be an HTTP(S) server of a Filebased URL. It may include a path, in which case all requests will be servedunder that path.Eg:- http://localhost:8080- https://service.localhost- https://service.localhost/path- file://host/pathIf the URI's path is \"/base\" and the incoming request was for \"/dir\",the upstream request will be for \"/base/dir\". insecureSkipTLSVerify bool InsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.This option is insecure and will allow potential Man-In-The-Middle attacksbetweem OAuth2 Proxy and the usptream server.Defaults to false. static bool Static will make all requests to this upstream have a static response.The response will have a body of \"Authenticated\" and a response codematching StaticCode.If StaticCode is not set, the response will return a 200 response. staticCode int StaticCode determines the response code for the Static response.This option can only be used with Static enabled. flushInterval Duration FlushInterval is the period between flushing the response buffer whenstreaming response from the upstream.Defaults to 1 second. passHostHeader bool PassHostHeader determines whether the request host header should be proxiedto the upstream server.Defaults to true. proxyWebSockets bool ProxyWebSockets enables proxying of websockets to upstream serversDefaults to true. timeout Duration Timeout is the maximum duration the server will wait for a response from the upstream server.Defaults to 30 seconds.","s":"Upstream","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#upstream","p":486},{"i":542,"t":"(Appears on: AlphaOptions) UpstreamConfig is a collection of definitions for upstream servers. Field Type Description proxyRawPath bool ProxyRawPath will pass the raw url path to upstream allowing for url'slike: \"/%2F/\" which would otherwise be redirected to \"/\" upstreams []Upstream Upstreams represents the configuration for the upstream servers.Requests will be proxied to this upstream if the path matches the request path.","s":"UpstreamConfig","u":"/oauth2-proxy/docs/7.3.x/configuration/alpha-config","h":"#upstreamconfig","p":486},{"i":544,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure ADFS Facebook GitHub Keycloak GitLab LinkedIn Microsoft Azure AD OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket Gitea The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"","p":543},{"i":546,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"API Manager\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account: https://developers.google.com/identity/protocols/OAuth2ServiceAccount and make sure to download the json file. Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ).","s":"Google Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#google-auth-provider","p":543},{"i":548,"t":"Add an application: go to https://portal.azure.com, choose \"Azure Active Directory\" in the left menu, select \"App registrations\" and then click on \"New app registration\". Pick a name and choose \"Webapp / API\" as application type. Use https://internal.yourcompany.com as Sign-on URL. Click \"Create\". On the \"Settings\" / \"Properties\" page of the app, pick a logo and select \"Multi-tenanted\" if you want to allow users from multiple organizations to access your app. Note down the application ID. Click \"Save\". On the \"Settings\" / \"Required Permissions\" page of the app, click on \"Windows Azure Active Directory\" and then on \"Access the directory as the signed in user\". Hit \"Save\" and then then on \"Grant permissions\" (you might need another admin to do this). On the \"Settings\" / \"Reply URLs\" page of the app, add https://internal.yourcompanycom/oauth2/callback for each host that you want to protect by the oauth2 proxy. Click \"Save\". On the \"Settings\" / \"Keys\" page of the app, add a new key and note down the value after hitting \"Save\". Configure the proxy with --provider=azure --client-id= --client-secret= --oidc-issuer-url=https://sts.windows.net/{tenant-id}/ Note: When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#azure-auth-provider","p":543},{"i":550,"t":"Open the ADFS administration console on your Windows Server and add a new Application Group Provide a name for the integration, select Server Application from the Standalone applications section and click Next Follow the wizard to get the client-id, client-secret and configure the application credentials Configure the proxy with --provider=adfs --client-id= --client-secret= Note: When using the ADFS Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"ADFS Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#adfs-auth-provider","p":543},{"i":552,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":543},{"i":554,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to login even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to login with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#github-auth-provider","p":543},{"i":556,"t":"note This is the legacy provider for Keycloak, use Keycloak OIDC Auth Provider if possible. Create new client in your Keycloak realm with Access Type 'confidental' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: --provider=keycloak --client-id= --client-secret= --login-url=\"http(s):///auth/realms//protocol/openid-connect/auth\" --redeem-url=\"http(s):///auth/realms//protocol/openid-connect/token\" --profile-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --validate-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --keycloak-group= --keycloak-group= For group based authorization, the optional --keycloak-group (legacy) or --allowed-group (global standard) flags can be used to specify which groups to limit access to. If these are unset but a groups mapper is set up above in step (3), the provider will still populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response. The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":543},{"i":558,"t":"Create new client in your Keycloak realm with Access Type 'confidental', Client protocol 'openid-connect' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Create a mapper with Mapper Type 'Audience' and Included Client Audience and Included Custom Audience set to your client name. Make sure you set the following to the appropriate url: --provider=keycloak-oidc --client-id= --client-secret= --redirect-url=https://myapp.com/oauth2/callback --oidc-issuer-url=https:///realms/ --allowed-role= // Optional, required realm role --allowed-role=: // Optional, required client role","s":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":543},{"i":560,"t":"This auth provider has been tested against Gitlab version 12.X. Due to Gitlab API changes, it may not work for version prior to 12.X (see 994). Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. If you need projects filtering, add the extra read_api scope to your application. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\" If your self-hosted GitLab is on a sub-directory (e.g. domain.tld/gitlab), as opposed to its own sub-domain (e.g. gitlab.domain.tld), you may need to add a redirect from domain.tld/oauth pointing at e.g. domain.tld/gitlab/oauth.","s":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":543},{"i":562,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":543},{"i":564,"t":"For adding an application to the Microsoft Azure AD follow these steps to add an application. Take note of your TenantId if applicable for your situation. The TenantId can be used to override the default common authorization server with a tenant specific server.","s":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":543},{"i":566,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex and we will use it as an example. The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta, an example can be found below. Dex​ To configure the OIDC provider for Dex, perform the following steps: Download Dex: go get github.com/dexidp/dex See the getting started guide for more details. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Add a configuration block to the staticClients section of examples/config-dev.yaml: - id: oauth2-proxyredirectURIs:- 'http://127.0.0.1:4180/oauth2/callback'name: 'oauth2-proxy'secret: proxy Launch Dex: from $GOPATH/github.com/dexidp/dex, run: bin/dex serve examples/config-dev.yaml In a second terminal, run the oauth2-proxy with the following args: -provider oidc-provider-display-name \"My OIDC Provider\"-client-id oauth2-proxy-client-secret proxy-redirect-url http://127.0.0.1:4180/oauth2/callback-oidc-issuer-url http://127.0.0.1:5556/dex-cookie-secure=false-cookie-secret=secret-email-domain kilgore.trout To serve the current working directory as a web site under the /static endpoint, add: -upstream file://$PWD/#/static/ Test the setup by visiting http://127.0.0.1:4180 or http://127.0.0.1:4180/static . See also our local testing environment for a self-contained example using Docker and etcd as storage for Dex. Okta​ To configure the OIDC provider for Okta, perform the following steps: Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com . The client_id and client_secret are configured in the application settings. Generate a unique cookie_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#openid-connect-provider","p":543},{"i":568,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048 bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost', The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"login.gov Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#logingov-provider","p":543},{"i":570,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to setup the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#nextcloud-provider","p":543},{"i":572,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":543},{"i":574,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who has access to one selected repository use --bitbucket-repository=.","s":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":543},{"i":576,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1\"","s":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":543},{"i":578,"t":"To authorize by email domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#email-authentication","p":543},{"i":580,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/7.3.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":543},{"i":582,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/7.3.x/configuration/session_storage","h":"","p":581},{"i":584,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/7.3.x/configuration/session_storage","h":"#cookie-storage","p":581},{"i":586,"t":"The Redis Storage backend stores sessions, encrypted, in redis. Instead sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128 bit random number, hex-encoded The secret is a 128 bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.","s":"Redis Storage","u":"/oauth2-proxy/docs/7.3.x/configuration/session_storage","h":"#redis-storage","p":581},{"i":588,"t":"There are two recommended configurations: At OAuth2 Proxy At Reverse Proxy","s":"TLS Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/tls","h":"","p":587},{"i":590,"t":"Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... With this configuration approach the customization of the TLS settings is limited. The minimal acceptable TLS version can be set with --tls-min-version=TLS1.3. The defaults set TLS1.2 as the minimal version. Regardless of the minimum version configured, TLS1.3 is currently always used as the maximal version. The server side cipher suites are the defaults from crypto/tls of the currently used go version for building oauth2-proxy.","s":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/7.3.x/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":587},{"i":592,"t":"Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or ... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/7.3.x/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":587},{"i":594,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive","s":"Endpoints","u":"/oauth2-proxy/docs/7.3.x/features/endpoints","h":"","p":593},{"i":596,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored.","s":"Sign out","u":"/oauth2-proxy/docs/7.3.x/features/endpoints","h":"#sign-out","p":593},{"i":598,"t":"This endpoint returns 202 Accepted response or a 401 Unauthorized response. It can be configured using the following query parameters: allowed_groups: comma separated list of allowed groups allowed_email_domains: comma separated list of allowed email domains allowed_emails: comma separated list of allowed emails","s":"Auth","u":"/oauth2-proxy/docs/7.3.x/features/endpoints","h":"#auth","p":593},{"i":600,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"","p":599},{"i":602,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_'; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#generating-a-cookie-secret","p":599},{"i":604,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#config-file","p":599},{"i":606,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --code-challenge-method string use PKCE code challenges with the specified method. Either 'plain' or 'S256' (recommended) --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --custom-templates-dir string path to custom html templates --custom-sign-in-logo string path or a URL to an custom image for the sign_in page logo. Use \\\"-\\\" to disable default logo. --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --force-json-errors bool force JSON errors instead of HTTP error pages or redirects false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --gitlab-projects string | list restrict logins to members of any of these projects (may be given multiple times) formatted as orgname/repo=accesslevel. Access level should be a value matching Gitlab access levels, defaulted to 20 if absent --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -B for bcrypt encryption --htpasswd-user-group string | list the groups to be set on sessions for htpasswd users --http-address string [http://]: or unix:// to listen on for HTTP clients. Square brackets are required for ipv6 address, e.g. http://[::1]:4180 \"127.0.0.1:4180\" --https-address string [https://]: to listen on for HTTPS clients. Square brackets are required for ipv6 address, e.g. https://[::1]:443 \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --insecure-oidc-skip-nonce bool skip verifying the OIDC ID Token's nonce claim true --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --oidc-email-claim string which OIDC claim contains the user's email \"email\" --oidc-groups-claim string which OIDC claim contains the user groups \"groups\" --oidc-audience-claim string which OIDC claim contains the audience \"aud\" --oidc-extra-audience string | list additional audiences which are allowed to pass verification \"[]\" --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Groups, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --metrics-address string the address prometheus metrics will be scraped from \"\" --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --request-id-header string Request header to use as the request ID in logging X-Request-Id --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted and allows X-Forwarded-{Proto,Host,Uri} headers to be used on redirect selection false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Groups, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --show-debug-on-error bool show detailed error information on error pages (WARNING: this may contain sensitive information - do not use in production) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping endpoint false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string | list (DEPRECATED for --skip-auth-route) bypass authentication for requests paths that match (may be given multiple times) --skip-auth-route string | list bypass authentication for requests that match the method & path. Format: method=path_regex OR path_regex alone for all methods --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy true --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-key-file string path to private key file --tls-min-version string minimum TLS version that is acceptable, either \"TLS1.2\" or \"TLS1.3\" \"TLS1.2\" --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --upstream-timeout duration maximum amount of time the server will wait for a response from the upstream 30s --allowed-group string | list restrict logins to members of this group (may be given multiple times) --allowed-role string | list restrict logins to users with this role (may be given multiple times). Only works with the keycloak-oidc provider. --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . or a *. to allow subdomains (e.g. .example.com, *.example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. [1]: Only these providers support --cookie-refresh: GitLab, Google and OIDC [2]: When using the whitelist-domain option, any domain prefixed with a . or a *. will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URL's protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*. See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#command-line-options","p":599},{"i":608,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#upstreams-configuration","p":599},{"i":610,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside of a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#environment-variables","p":599},{"i":612,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) can be disabled with --silence-ping-logging reducing log volume. This flag appends the --ping-path to --exclude-logging-paths.","s":"Logging Configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#logging-configuration","p":599},{"i":614,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Message Authenticated via OAuth2 The details of the auth attempt. Protocol HTTP/1.0 The request protocol. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details.","s":"Auth Log Format","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#auth-log-format","p":599},{"i":616,"t":"HTTP request logs will output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#request-log-format","p":599},{"i":618,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#standard-log-format","p":599},{"i":620,"t":"The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\".","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":599},{"i":622,"t":"This option requires --reverse-proxy option to be set.","s":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":599},{"i":624,"t":"The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration: http: routers: a-service: rule: \"Host(`a-service.example.com`)\" service: a-service-backend middlewares: - oauth-errors - oauth-auth tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth: rule: \"Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true oauth-errors: errors: status: - \"401-403\" service: oauth-backend query: \"/oauth2/sign_in\"","s":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":599},{"i":626,"t":"Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint Following options need to be set on oauth2-proxy: --upstream=static://202: Configures a static response for authenticated sessions --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly http: routers: a-service-route-1: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)\" service: a-service-backend middlewares: - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" a-service-route-2: rule: \"Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)\" service: a-service-backend middlewares: - oauth-auth-wo-redirect # unauthenticated session will return a 401 tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services-oauth2-route: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth2-proxy-route: rule: \"Host(`oauth.example.com`) && PathPrefix(`/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 b-service-backend: loadBalancer: servers: - url: http://172.16.0.3:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth-redirect: forwardAuth: address: https://oauth.example.com/ trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization oauth-auth-wo-redirect: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.3.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":599}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/477",[0,3.128,1,5.028,2,3.406,3,6.496,4,6.496,5,2.906,6,4.162,7,4.344,8,3.406,9,3.406,10,1.297,11,2.424,12,4.344,13,5.78,14,4.344,15,4.344,16,4.344,17,5.028,18,0.612,19,3.406,20,3.406,21,4.344,22,1.26,23,5.78,24,4.344,25,4.344,26,4.344,27,1.912,28,3.778,29,3.778,30,4.344,31,4.344,32,1.625,33,3.778,34,2.014,35,2.906,36,2.563,37,4.344,38,4.344,39,1.2,40,2.721,41,2.19,42,2.721,43,4.344,44,4.344,45,4.344,46,4.344,47,3.778,48,2.09,49,3.406,50,1.69,51,1.833,52,1.04,53,0.906,54,1.759,55,2.09,56,2.09,57,0.975,58,2.301,59,1.833,60,3.621,61,3.778,62,1.564,63,1.912,64,2.424]],["t/479",[22,1.141,53,1.228,65,1.824,66,5.882,67,4.169,68,4.613,69,3.685,70,4.613,71,2.83,72,3.935,73,5.882,74,5.117,75,4.236,76,5.882,77,3.935,78,3.283,79,4.613,80,5.882,81,5.882]],["t/481",[18,0.451,22,1.194,34,1.484,42,2.999,53,1.285,68,4.83,75,4.435,77,3.202,82,3.202,83,4.787,84,5.358,85,5.358,86,2.414,87,3.202,88,5.638,89,3.447,90,5.924,91,4.164,92,3.634,93,4.787,94,3.858,95,4.787,96,2.536,97,4.164,98,2.999,99,4.787,100,4.787,101,4.787,102,2.824,103,4.164,104,1.598,105,3.753,106,2.414,107,3.263,108,4.787,109,4.787,110,4.787,111,2.671,112,4.787,113,4.787,114,4.787,115,4.164,116,3.753,117,4.787,118,2.303,119,4.787,120,3.753,121,3.753,122,1.484]],["t/483",[6,4.461,18,0.584,32,1.807,68,3.787,75,3.478,85,5.388,87,3.231,90,5.388,91,4.201,92,3.655,96,3.623,98,3.025,107,2.558,116,6.086,122,1.498,123,6.839,124,6.195,125,6.195,126,2.323,127,3.478,128,4.83,129,4.83,130,4.83,131,4.83,132,4.201,133,3.478,134,4.83,135,3.787,136,4.83,137,4.83,138,6.195,139,2.126,140,1.738,141,2.221,142,4.83,143,4.83,144,4.83,145,4.83,146,4.83,147,4.83,148,4.83,149,4.83,150,4.83]],["t/485",[10,1.34,18,0.43,22,1.158,39,1.153,50,1.776,52,1.075,62,1.643,82,3.053,87,3.053,111,2.547,118,2.196,151,2.49,152,1.582,153,2.693,154,2.418,155,3.523,156,1.643,157,3.97,158,3.053,159,3.053,160,2.324,161,2.542,162,1.524,163,1.365,164,3.995,165,2.809,166,2.547,167,3.97,168,2.19,169,1.849,170,4.564,171,1.603,172,4.564,173,2.547,174,1.582,175,4.564,176,4.564,177,3.053,178,2.547,179,4.564,180,2.859,181,3.053,182,3.333,183,3.164,184,2.859,185,0.821,186,2.859,187,1.849,188,1.582,189,2.301,190,1.849,191,3.287,192,3.053]],["t/487",[10,1.546,11,2.395,18,0.54,34,1.778,52,1.38,54,1.738,57,1.449,86,2.164,88,4.496,94,3.592,122,1.331,126,2.065,140,2.064,162,1.914,185,0.772,186,2.689,187,1.738,191,3.091,193,3.733,194,4.317,195,1.889,196,3.365,197,4.611,198,4.496,199,4.292,200,3.733,201,2.065,202,4.292,203,3.383,204,3.365,205,2.871,206,4.292,207,4.292,208,2.871,209,3.733,210,3.733,211,3.733,212,2.871,213,2.843,214,3.365,215,5.617,216,2.871,217,3.365,218,2.871,219,4.292,220,2.395,221,1.738,222,3.421,223,3.836,224,2.689,225,3.365,226,3.365,227,2.689,228,3.733,229,3.733,230,4.292]],["t/489",[18,0.685,27,2.431,34,2.089,39,0.957,52,0.994,54,2.728,57,1.511,65,1.712,79,4.329,140,1.987,166,3.081,197,4.863,204,4.329,205,3.694,213,2.431,216,3.694,220,3.081,221,2.728,222,3.568,223,3.694,231,3.694,232,2.236,233,3.976,234,2.784]],["t/491",[18,0.587,22,1.404,34,1.511,41,3.142,52,1.236,53,1.511,54,3.15,57,1.624,65,1.511,140,2.754,189,2.457,197,4.842,205,4.168,212,3.26,213,2.743,216,3.26,218,4.168,221,1.974,235,5.676,236,6.23,237,2.72,238,4.239,239,3.821,240,3.821,241,4.873]],["t/493",[18,0.485,22,0.998,27,1.613,32,1.371,39,1.117,41,1.848,52,0.66,53,0.765,54,2.409,57,1.447,58,1.942,59,1.547,60,2.296,79,2.874,82,2.452,92,2.162,104,1.223,107,1.942,122,1.137,152,2.354,155,3.036,156,1.852,162,1.223,163,1.539,164,3.443,171,1.381,177,2.452,185,1.161,187,1.485,197,3.979,205,2.452,212,2.452,221,1.485,242,1.057,243,3.665,244,3.665,245,2.874,246,3.665,247,1.763,248,3.665,249,3.665,250,2.874,251,3.665,252,3.665,253,4.283,254,3.665,255,1.319,256,3.665,257,3.665,258,2.476,259,3.665,260,3.665,261,3.665,262,3.665,263,3.188,264,3.665,265,3.665,266,2.874,267,3.665,268,1.778,269,3.665,270,3.665,271,1.02,272,3.665,273,2.452,274,3.665,275,2.874,276,3.665,277,1.179,278,3.665,279,2.045,280,3.665,281,2.296,282,3.665,283,2.874,284,3.665,285,1.942,286,3.188,287,3.188,288,3.665,289,3.188,290,3.665,291,3.665,292,3.665,293,3.665,294,3.665,295,1.763,296,3.665,297,2.874,298,3.665,299,2.045,300,3.188,301,1.613,302,2.045,303,2.452,304,2.296,305,2.045,306,2.045,307,2.874,308,2.476,309,3.665,310,2.296]],["t/496",[39,1.054,155,3.588,189,3.067,277,1.956,285,3.222,311,1.818,312,1.692,313,1.365,314,1.575,315,6.081,316,3.81,317,3.394,318,6.081,319,2.108,320,4.068]],["t/498",[0,3.443,6,2.381,18,0.701,22,1.266,27,1.455,39,1.066,52,1.338,53,0.69,57,1.26,64,1.845,72,2.212,86,1.667,96,2.533,97,4.159,106,1.667,132,2.876,141,1.52,151,1.789,163,0.989,168,1.742,171,1.283,185,0.86,187,2.275,188,2.638,190,2.493,191,2.381,193,2.876,195,1.455,197,3.758,198,2.592,203,1.95,208,2.212,215,4.886,220,1.845,224,2.071,228,4.159,229,4.159,232,1.339,255,1.19,271,1.33,295,2.3,312,0.92,313,0.742,314,0.856,319,2.133,321,2.876,322,2.876,323,3.306,324,2.876,325,2.381,326,4.405,327,3.306,328,3.306,329,2.876,330,2.071,331,4.781,332,3.306,333,2.995,334,3.443,335,4.781,336,2.995,337,1.59,338,3.306,339,2.876,340,3.306,341,2.876,342,2.381,343,3.306,344,3.306,345,3.443,346,3.306,347,2.411,348,3.749,349,2.83,350,4.781,351,4.159,352,4.159,353,4.781,354,2.533,355,2.995,356,4.781,357,3.306]],["t/500",[39,1.042,299,3.356,311,1.798,312,1.673,313,1.349,314,1.557,319,2.084,358,5.607,359,1.798,360,4.715,361,5.559,362,5.231,363,6.014]],["t/502",[39,1.014,102,4.397,171,1.57,185,1.255,255,2.106,277,2.244,311,1.749,312,1.628,313,1.313,314,1.515,359,2.086,364,3.208,365,2.815,366,4.986]],["t/504",[18,0.481,57,1.145,86,2.574,156,2.309,160,2.496,162,1.704,163,1.526,190,2.067,235,4.002,253,4.62,311,1.526,312,1.42,313,1.145,314,1.322,319,2.629,359,1.918,367,3.675,368,4.439,369,3.675,370,4.321,371,4.439,372,4.396,373,4.439,374,4.439,375,4.439,376,3.414,377,5.581,378,3.675,379,4.439,380,4.002,381,3.011,382,4.439,383,4.002]],["t/506",[10,1.226,32,2.045,40,3.424,57,1.226,71,3.22,72,3.656,77,3.656,187,2.214,192,3.656,311,1.634,359,2.164,384,4.286,385,5.249,386,5.465,387,4.286,388,2.895,389,5.465,390,5.465,391,5.465,392,6.694,393,5.465,394,5.465,395,5.465,396,5.465,397,5.465,398,5.249,399,4.754,400,5.465,401,5.465]],["t/508",[18,0.474,35,3.367,39,0.872,102,4.321,127,4.579,163,1.505,165,2.942,171,1.871,185,1.255,255,1.811,277,2.243,311,1.505,312,1.4,313,1.129,314,1.303,359,2.259,364,3.206,365,3.059,366,4.664,381,2.969,402,5.467,403,3.946,404,4.579,405,5.032,406,3.946,407,5.032,408,3.946,409,2.314]],["t/510",[39,1.025,67,4.179,185,1.064,277,2.258,311,1.769,312,1.646,313,1.327,314,1.532,359,2.099,364,3.228,365,3.378,410,3.296]],["t/512",[39,0.972,185,1.009,232,2.271,277,1.804,305,3.795,311,1.677,312,1.56,313,1.258,314,1.452,359,2.188,364,2.579,365,2.698,410,3.222,411,6.8,412,3.513,413,4.397,414,3.308,415,4.397,416,6.8,417,3.513,418,3.513,419,4.038,420,3.513]],["t/514",[18,0.472,57,1.124,86,2.526,106,2.526,151,2.603,154,2.653,162,2.322,185,0.901,187,2.029,189,2.526,190,3.207,195,2.205,224,3.138,266,3.928,311,1.498,312,1.394,313,1.124,314,1.297,316,3.138,319,2.534,320,3.351,337,2.41,359,1.498,367,3.607,421,3.138,422,3.928,423,5.009,424,3.351,425,6.34,426,3.351,427,3.138,428,5.009,429,5.009,430,5.009,431,5.009,432,5.009,433,5.009,434,5.009]],["t/516",[18,0.428,34,1.409,57,1.02,58,2.408,59,1.918,156,2.144,160,1.768,162,1.988,190,2.691,195,2.001,201,2.186,232,1.841,235,3.564,253,4.289,271,1.264,311,1.359,312,1.264,313,1.02,314,1.177,319,2.746,333,2.847,359,2.188,367,3.273,370,4.084,371,3.953,372,4.161,373,3.953,374,3.953,375,3.953,376,3.04,377,5.18,378,3.273,379,3.953,380,3.564,381,2.681,382,3.953,383,3.564,421,2.847,435,3.564,436,3.04,437,3.273,438,4.783,439,3.273,440,2.847,441,5.18,442,5.18]],["t/518",[18,0.537,27,2.508,39,1.189,171,1.529,277,2.208,301,2.508,306,3.179,311,1.703,312,1.585,313,1.278,314,1.475,359,2.053,364,3.157,365,2.74,410,3.244,443,3.831,444,4.955,445,5.778]],["t/520",[18,0.633,34,1.703,39,0.952,62,1.977,98,4.206,164,4.492,213,2.956,232,2.225,255,1.977,295,3.23,311,1.643,312,1.528,313,1.233,314,1.423,359,2.169,388,3.557,446,6.715,447,5.265,448,6.715,449,6.715,450,3.956,451,4.778]],["t/522",[10,1.394,18,0.412,39,0.758,41,1.477,52,0.527,57,1.303,62,1.054,63,1.926,65,0.908,104,0.978,106,1.477,116,4.554,118,2.794,133,3.15,152,2.259,153,1.728,154,2.317,162,2.255,163,2.077,169,1.772,185,1.045,213,1.289,216,1.959,233,2.109,277,1.407,300,2.548,308,2.104,311,0.876,312,0.815,313,0.982,314,0.759,317,4.034,319,2.649,324,2.548,359,1.858,364,1.347,388,1.552,409,2.998,435,3.43,452,2.297,453,3.885,454,4.105,455,5.405,456,1.174,457,2.275,458,2.297,459,5.807,460,2.929,461,2.548,462,2.929,463,2.297,464,2.929,465,2.109,466,1.959,467,2.929,468,2.929,469,2.929,470,3.805,471,4.374,472,2.929,473,2.929,474,3.805,475,2.929,476,1.409,477,2.929,478,1.772,479,2.929,480,3.43,481,4.374,482,1.959,483,3.77,484,2.929,485,2.929,486,5.235,487,2.929,488,4.374,489,1.635,490,2.929,491,2.929,492,2.929,493,2.297,494,2.929,495,2.929,496,2.297,497,2.929,498,3.43,499,2.297,500,2.297,501,2.297,502,2.929,503,2.929,504,2.548,505,2.929,506,2.929,507,2.929]],["t/524",[6,2.448,10,0.763,18,0.46,35,3.264,36,2.006,39,0.589,50,1.898,96,1.801,104,1.905,106,1.714,122,1.933,152,1.178,154,1.801,155,3.366,163,1.459,165,2.408,171,1.532,185,1.274,195,2.512,203,2.006,268,1.459,279,1.897,301,2.148,311,1.017,312,0.946,313,0.763,314,0.88,316,3.906,320,4.417,330,2.13,359,2.117,370,3.835,410,1.497,444,4.963,450,2.448,457,1.513,465,2.448,466,2.274,476,1.635,508,4.879,509,2.878,510,2.584,511,3.366,512,4.879,513,2.957,514,4.879,515,2.957,516,3.4,517,2.957,518,3.4,519,4.879,520,4.474,521,3.513,522,3.4,523,4.879,524,2.957,525,4.963,526,3.4,527,2.448,528,4.244,529,3.4,530,3.4,531,3.4,532,3.4,533,3.4,534,2.666,535,3.4,536,4.879,537,2.666,538,2.448,539,3.4,540,4.879,541,3.4,542,4.879,543,3.4,544,4.879,545,3.4,546,4.879,547,3.4,548,4.879,549,3.4,550,2.957,551,4.879,552,3.056,553,2.448,554,3.4]],["t/526",[11,1.567,18,0.481,32,1.05,39,1.341,41,1.416,50,2.374,52,1.307,62,2.046,106,2.137,122,1.583,152,0.973,162,1.704,165,1.788,168,0.87,169,2.067,171,0.753,185,1.023,189,1.416,194,1.758,232,1.137,237,1.567,255,1.525,268,1.526,271,1.179,273,1.878,275,2.201,277,1.642,281,1.758,283,3.322,285,2.704,299,1.567,301,1.865,302,2.365,303,1.878,304,1.758,305,2.365,306,1.567,311,0.839,312,0.781,313,0.951,314,0.727,317,1.567,319,1.769,330,3.197,333,1.758,355,1.758,359,2.249,364,1.291,365,1.35,409,1.291,410,1.236,424,1.878,435,2.201,452,4.002,455,2.442,456,1.137,457,1.314,510,1.487,555,7.151,556,4.237,557,4.237,558,5.103,559,4.237,560,2.807,561,4.237,562,2.807,563,4.237,564,2.807,565,4.237,566,2.807,567,3.051,568,4.237,569,2.807,570,4.237,571,2.807,572,2.807,573,4.237,574,2.807,575,4.237,576,2.807,577,4.237,578,2.807,579,2.807,580,2.807,581,4.237,582,2.807,583,2.807,584,2.442,585,2.807,586,2.442,587,2.807,588,2.807,589,2.807,590,2.442,591,4.237,592,2.807,593,2.442,594,1.878,595,4.237,596,4.237,597,2.442,598,4.237,599,2.807,600,1.878,601,4.237,602,4.237,603,2.807,604,2.201,605,1.878,606,2.442,607,2.021]],["t/528",[18,0.534,32,2.12,39,1.186,57,1.535,92,3.343,301,3.012,302,3.162,303,3.791,304,3.55,305,3.162,306,3.819,311,1.694,313,1.271,359,1.694,384,4.443,489,3.162,567,4.08,586,4.929,608,5.666,609,4.929,610,4.929,611,4.443,612,4.08,613,4.443]],["t/530",[39,1.334,224,3.966,311,1.893,384,4.964,614,5.507,615,5.507]],["t/532",[34,1.637,58,2.796,59,2.228,71,2.539,86,2.662,118,2.539,162,1.762,195,2.324,223,3.531,232,2.138,271,1.823,311,1.578,312,1.468,313,1.184,314,1.367,319,2.655,330,3.307,333,3.307,354,2.796,359,2.131,367,3.801,368,4.591,378,3.801,422,4.139,437,3.801,438,5.131,439,3.801,440,3.307,441,5.699,442,5.699,616,5.278]],["t/534",[10,1.657,52,1.161,96,2.729,185,1.161,188,2.442,195,2.268,224,3.228,234,2.598,295,2.479,311,1.541,312,1.433,313,1.156,314,1.334,345,3.71,351,5.614,352,5.614,354,3.913,355,3.228,359,1.93,369,3.71,421,3.228,476,3.105,617,4.648,618,6.454,619,6.454,620,4.648,621,5.152,622,5.152,623,5.152]],["t/536",[34,1.989,42,4.396,48,2.455,57,1.145,178,2.848,185,0.918,188,1.769,195,2.247,234,2.574,295,3.542,311,1.526,312,1.42,313,1.145,314,1.322,354,4.163,355,4.019,359,1.526,369,3.675,378,4.62,624,4.002,625,5.031,626,3.785,627,6.416,628,6.416,629,5.031,630,6.416,631,5.104,632,4.002,633,5.104]],["t/538",[10,1.394,32,1.815,41,2.446,62,1.746,133,3.493,152,2.153,154,3.291,158,3.245,277,1.561,299,2.707,311,1.451,312,1.35,313,1.089,314,1.256,317,3.825,319,2.693,348,3.804,359,1.858,421,3.039,426,3.245,427,3.039,452,3.804,453,3.245,454,3.804,456,1.302,474,5.404,480,5.374,483,4.935,504,4.22,538,3.493,634,3.804,635,4.22,636,4.851,637,4.22,638,4.851,639,4.851,640,4.851,641,3.804,642,2.862,643,4.851,644,4.22,645,4.851,646,4.851]],["t/540",[18,0.571,22,1.092,52,0.496,53,0.575,57,0.938,78,2.333,86,1.39,107,1.461,111,1.539,115,2.398,122,1.296,133,1.985,151,2.663,154,3.375,155,1.627,163,1.25,168,0.855,169,1.117,171,0.74,182,1.539,185,0.496,187,3.005,188,2.098,190,1.117,201,1.326,212,2.796,220,1.539,232,3.035,245,2.162,247,1.326,250,2.162,311,0.824,312,0.767,313,0.619,314,0.714,316,3.529,319,0.955,320,1.844,325,1.985,326,2.162,329,2.398,336,3.792,337,3.28,345,1.985,349,1.268,354,1.461,359,1.684,372,2.618,385,3.958,387,2.162,421,1.727,424,1.844,426,2.796,427,1.727,443,2.333,456,0.74,465,1.985,480,2.162,520,2.162,584,2.398,605,1.844,647,2.757,648,2.757,649,2.757,650,2.398,651,2.757,652,2.757,653,4.18,654,5.048,655,2.757,656,4.18,657,2.757,658,4.18,659,5.048,660,2.398,661,5.633,662,4.18,663,2.757,664,2.757,665,2.757,666,2.757,667,2.757,668,2.757,669,2.757,670,2.757,671,2.757,672,2.011,673,2.757,674,2.757,675,2.757,676,2.757,677,2.757,678,2.757,679,2.757,680,2.757,681,2.757,682,2.757,683,2.757,684,4.18,685,2.757,686,2.757,687,2.757,688,2.757,689,2.757,690,5.048,691,2.757,692,2.398,693,2.757,694,2.757,695,5.048,696,2.162,697,2.398,698,2.757,699,4.18,700,2.398,701,2.757,702,2.757,703,1.844,704,3.01,705,4.18,706,2.757,707,2.466,708,4.18,709,2.398,710,2.757,711,3.636,712,2.162,713,2.398,714,2.162]],["t/542",[10,1.214,22,1.049,52,0.974,151,2.024,152,1.875,154,2.866,163,1.618,174,1.875,187,3.223,188,1.875,224,3.389,232,2.918,311,1.618,312,1.505,313,1.214,314,1.401,316,3.389,326,4.243,421,3.389,456,1.452,466,3.62,614,4.706,615,4.706,715,6.653,716,4.706,717,5.411,718,5.411,719,5.411]],["t/544",[5,3.29,10,1.103,18,0.463,22,0.954,32,1.84,39,1.35,48,2.366,49,3.856,50,1.913,51,2.075,52,1.128,53,1.026,65,1.525,88,3.856,92,3.697,174,1.704,189,2.48,214,3.856,237,3.497,302,3.497,303,3.29,304,3.081,305,3.497,306,2.744,319,1.704,342,3.541,347,2.48,370,3.497,457,1.525,478,1.992,509,3.697,510,3.32,567,3.541,609,4.278,610,4.278,611,3.856,612,3.541,613,3.856,720,2.165,721,4.918,722,4.278,723,4.278,724,4.918]],["t/546",[0,5.245,2,3.203,10,1.112,22,0.792,32,1.001,34,1.72,36,2.41,39,0.463,48,1.287,50,1.928,51,1.724,53,0.852,57,0.6,65,1.72,67,3.334,71,1.287,78,1.493,89,1.926,104,1.994,106,1.349,122,1.72,135,2.098,139,2.63,140,1.784,141,1.23,152,0.927,156,1.47,158,2.733,160,1.041,161,0.963,162,1.364,165,1.129,166,1.493,168,0.829,171,1.33,174,0.927,185,0.892,200,2.327,201,2.384,218,2.733,221,2.246,227,1.676,232,1.083,242,1.429,255,0.963,258,2.384,268,1.883,271,0.744,285,1.417,299,1.493,305,3.334,342,1.926,364,1.23,365,1.287,410,2.772,412,3.474,413,2.098,414,3.524,415,2.098,417,2.559,418,3.104,419,3.568,420,3.104,443,2.28,470,2.327,476,1.287,478,2.007,489,1.493,528,2.327,534,2.098,590,2.327,637,2.327,672,1.287,703,1.79,725,2.098,726,3.47,727,2.675,728,2.327,729,2.675,730,2.327,731,4.955,732,5.546,733,1.926,734,2.327,735,2.675,736,2.675,737,3.203,738,1.926,739,2.098,740,2.327,741,2.098,742,2.675,743,3.553,744,2.327,745,2.675,746,1.676,747,2.675,748,2.327,749,4.085,750,2.098,751,2.098,752,2.327,753,1.676,754,2.675,755,1.926,756,3.315,757,2.675,758,2.327,759,2.675,760,2.098,761,2.675,762,1.676,763,1.676,764,1.926,765,4.085,766,2.675,767,2.675,768,2.675,769,1.926,770,2.675,771,2.675,772,2.098,773,2.675,774,2.327,775,2.675,776,2.675,777,2.675,778,2.098,779,2.327,780,2.098,781,2.098,782,2.675,783,2.675]],["t/548",[0,3.594,10,1.5,11,1.959,18,0.47,22,0.968,39,0.608,40,2.199,48,2.401,51,2.451,52,0.632,53,0.733,64,2.786,65,1.801,122,1.801,126,2.794,139,1.545,140,1.797,141,1.614,152,1.216,153,2.071,156,1.264,160,1.942,161,1.797,162,1.172,163,1.05,169,1.422,171,1.34,183,1.86,184,2.199,185,1.138,194,3.963,247,1.689,255,1.797,268,1.493,295,2.401,301,1.545,302,3.242,313,0.788,319,1.216,342,2.528,358,2.528,388,2.644,412,2.199,414,2.071,456,1.34,511,2.071,600,2.348,642,2.945,720,1.545,725,3.914,726,2.644,734,3.053,740,4.342,741,4.961,743,4.342,750,2.752,764,4.813,780,3.914,784,3.51,785,4.991,786,3.639,787,3.51,788,4.78,789,4.342,790,3.51,791,3.51,792,3.053,793,3.053,794,3.053,795,3.053,796,3.053,797,3.51,798,3.51,799,3.51,800,3.053,801,2.752,802,3.053,803,3.51,804,3.51,805,2.752,806,2.752,807,3.053,808,2.752,809,3.053,810,3.053,811,2.528,812,2.071,813,3.053]],["t/550",[18,0.445,22,0.916,39,1.058,48,2.273,51,3.019,52,1.099,64,3.408,65,1.465,89,3.402,122,1.894,126,2.273,140,1.7,152,1.637,153,2.787,156,1.7,160,2.376,161,2.198,162,1.577,183,2.502,184,2.959,188,2.116,242,1.362,268,2.139,271,1.314,410,2.08,420,2.959,567,4.398,726,3.235,764,3.402,772,3.704,795,4.109,800,4.109,801,4.789,802,4.109,805,3.704,806,3.704,807,4.109,808,3.704,809,4.109,810,4.109,811,3.402,812,2.787,813,4.109,814,4.724,815,4.109,816,4.724,817,3.402,818,4.109,819,4.724,820,4.724]],["t/552",[32,2.288,50,2.38,139,2.692,140,2.201,174,2.119,185,1.101,277,1.967,672,2.942,753,3.831,763,3.831,788,4.091,821,7.16,822,6.116]],["t/554",[18,0.448,32,1.226,35,2.191,39,0.823,57,1.066,65,1.016,67,1.828,86,1.652,92,4.483,98,2.052,102,4.003,104,1.093,107,2.516,127,4.886,139,2.091,140,1.179,156,1.179,163,1.833,165,2.586,168,1.016,171,1.879,185,0.855,201,1.576,213,1.442,221,1.924,237,1.828,242,1.612,255,2.52,258,1.576,277,2.252,279,1.828,285,1.735,299,1.828,364,3.297,365,2.285,366,4.796,381,2.802,402,4.806,403,2.569,404,2.359,406,2.569,408,3.724,409,2.57,456,1.5,458,2.569,478,1.327,552,2.975,720,1.442,746,2.052,753,2.052,762,2.052,763,2.052,781,2.569,794,4.861,823,3.276,824,2.191,825,2.359,826,2.569,827,3.276,828,2.569,829,2.569,830,2.849,831,3.276,832,4.132,833,2.569,834,3.738,835,3.738,836,2.849,837,4.132,838,2.849,839,3.276,840,3.276,841,3.276,842,3.276,843,5.588,844,3.276,845,3.276,846,3.276]],["t/556",[18,0.561,32,1.93,39,1.032,57,0.825,62,1.324,65,1.6,77,2.46,78,2.052,139,2.843,140,1.324,156,1.324,162,1.722,163,1.1,165,1.552,174,1.274,185,0.928,186,2.304,187,1.49,188,1.274,190,1.49,201,1.769,220,2.052,221,1.49,242,1.061,255,1.857,258,1.769,268,1.931,271,1.435,277,1.183,279,2.052,281,2.304,301,1.619,306,4.247,313,1.157,319,1.274,330,2.304,337,1.769,370,2.052,409,1.691,410,3.418,412,3.231,420,2.304,436,2.46,456,0.987,626,2.17,672,1.769,726,1.948,733,2.648,737,2.884,746,2.304,753,2.304,760,2.884,762,2.304,801,2.884,847,5.158,848,3.199,849,3.199,850,5.183,851,2.648,852,3.199,853,2.884,854,3.199,855,3.199,856,6.459,857,6.459,858,6.459,859,3.678,860,3.678,861,5.158,862,3.678,863,3.678,864,3.678,865,2.648,866,2.648,867,3.678,868,2.884,869,3.678,870,2.052,871,3.678,872,3.678]],["t/558",[10,1.29,32,1.612,57,1.29,65,1.336,78,2.405,107,3.046,122,1.336,139,2.848,140,1.551,162,2.304,163,1.719,165,1.818,169,2.329,174,1.992,185,1.035,201,2.073,242,1.243,255,1.551,268,2.294,271,1.599,301,2.531,306,2.405,313,1.452,370,2.405,410,2.531,420,2.699,445,5.413,456,1.157,509,2.542,510,2.283,511,2.542,553,4.659,672,2.073,737,3.379,746,2.699,753,2.699,762,2.699,848,5.628,849,3.748,850,6.004,851,3.103,852,3.748,854,3.748,855,5.001,873,2.883,874,2.883,875,4.309,876,4.309,877,4.309,878,4.309,879,4.309,880,4.309,881,4.309]],["t/560",[10,0.845,18,0.494,36,2.223,39,0.653,42,3.286,50,1.466,51,2.755,54,1.526,57,0.845,67,2.103,69,3.286,77,2.52,104,1.258,126,2.904,156,1.356,161,1.888,166,2.103,174,2.262,185,1.086,201,2.524,203,2.223,209,3.277,242,1.979,247,2.904,268,1.569,271,1.048,277,1.212,281,2.36,285,2.779,301,1.659,304,4.657,364,2.412,365,1.812,410,2.31,414,2.223,427,2.36,443,2.103,456,1.842,478,1.526,509,2.223,511,2.223,720,2.31,726,2.779,746,2.36,762,3.286,786,2.36,833,2.954,834,2.52,835,2.52,851,2.713,882,2.954,883,5.246,884,3.767,885,3.767,886,3.767,887,4.733,888,4.367,889,3.767,890,3.767,891,3.277,892,3.767,893,3.277,894,3.767,895,3.767,896,3.767,897,3.767,898,3.767,899,3.767,900,3.767,901,3.767,902,3.277,903,5.246,904,3.767,905,3.767,906,3.767,907,3.767,908,3.277,909,3.767]],["t/562",[10,1.484,48,2.577,50,2.573,65,1.661,67,2.99,78,2.99,139,2.358,140,1.928,169,2.17,171,1.438,174,1.856,271,1.84,285,2.838,295,3.45,312,1.49,414,3.16,456,1.438,457,1.661,611,4.201,660,4.66,725,4.201,726,2.838,738,3.858,741,4.201,753,3.356,817,3.858,825,3.858,910,5.357,911,5.357,912,5.357,913,5.357,914,4.66,915,5.752]],["t/564",[18,0.545,51,3.131,65,1.795,78,3.23,126,2.784,188,2.402,189,3.495,242,1.669,258,2.784,299,3.23,302,3.23,358,4.168,361,4.538,457,1.795,634,4.538,722,5.035,726,3.066,916,6.931,917,5.788]],["t/566",[2,1.366,5,1.166,10,1.705,11,0.972,18,0.49,19,1.366,22,1.163,27,0.767,34,0.899,36,1.028,39,1.147,40,1.091,41,1.878,48,2.319,50,0.678,51,2.741,52,1.04,53,1.252,54,1.508,57,0.836,58,0.923,62,0.627,63,2.429,65,1.346,67,0.972,69,2.333,72,1.94,78,0.972,84,1.515,86,0.879,89,1.255,94,1.091,96,0.923,104,0.582,122,1.346,126,2.319,139,1.639,140,0.627,141,0.801,152,0.604,161,1.341,162,1.449,163,0.867,165,1.224,166,2.078,169,0.706,171,0.468,173,0.972,174,1.505,185,0.936,187,0.706,188,1.671,195,1.276,196,1.366,201,1.395,204,1.366,220,1.618,222,0.923,227,1.091,231,1.94,233,2.088,234,0.879,242,1.39,255,1.341,258,2.886,268,1.556,271,1.036,273,1.166,277,0.933,285,0.923,301,2.291,312,0.485,313,0.651,314,0.451,333,1.091,336,1.091,347,1.462,370,0.972,410,1.276,414,1.028,418,1.816,424,1.166,456,1.165,457,1.495,466,1.166,478,0.706,498,1.366,509,2.197,510,2.3,511,2.197,534,1.366,552,1.091,553,1.255,600,1.94,605,1.94,617,2.088,642,1.028,672,2.319,704,1.255,707,1.711,720,0.767,726,2.3,738,2.088,744,3.776,748,1.515,756,1.94,763,2.333,764,2.088,769,1.255,772,1.366,774,2.522,786,1.091,788,2.491,789,2.522,796,2.522,811,1.255,812,1.028,817,1.255,824,1.166,826,1.366,866,1.255,874,1.166,882,2.92,887,1.366,888,1.166,914,1.515,918,1.742,919,2.522,920,1.742,921,1.742,922,1.742,923,1.742,924,1.742,925,5.204,926,5.998,927,2.899,928,1.742,929,1.742,930,1.515,931,2.522,932,1.366,933,1.742,934,2.899,935,2.899,936,1.742,937,1.742,938,1.742,939,1.742,940,1.742,941,1.742,942,1.366,943,1.742,944,1.515,945,1.742,946,1.515,947,1.742,948,1.742,949,1.742,950,1.742,951,1.742,952,1.366,953,1.742,954,1.366,955,1.742,956,1.742,957,1.742,958,1.742,959,1.366,960,1.742,961,3.776,962,2.899,963,1.742,964,2.088,965,2.899,966,1.742,967,1.515,968,1.742,969,1.742,970,2.899,971,1.742,972,1.742,973,1.742,974,1.742,975,1.742,976,1.742,977,2.899,978,1.742,979,1.742,980,1.742,981,1.515,982,1.742,983,2.522,984,1.515,985,1.515,986,1.255,987,1.742,988,2.899,989,1.742,990,1.515,991,1.742,992,3.724,993,1.742,994,2.522,995,1.515,996,1.742,997,1.515,998,1.742,999,2.899,1000,1.742,1001,1.742,1002,1.742,1003,1.742,1004,1.742,1005,1.742,1006,1.742,1007,1.742,1008,1.742]],["t/568",[1,1.983,9,2.828,10,1.572,11,1.272,18,0.34,19,3.51,20,1.787,22,1.279,27,1.003,34,1.578,39,0.961,41,1.819,48,1.097,49,2.828,51,2.34,53,0.934,57,1.004,58,2.937,59,2.147,62,1.298,69,1.428,96,1.911,98,1.428,102,1.345,104,1.494,111,1.272,118,1.097,122,0.707,135,1.787,139,1.588,152,0.79,153,1.345,155,3.002,161,1.832,163,0.682,164,2.413,165,0.962,168,0.707,169,0.923,174,1.551,182,1.272,185,0.916,188,0.79,195,1.003,201,2.448,213,1.588,223,2.413,227,1.428,231,1.525,234,1.149,237,1.272,240,1.787,242,0.657,255,1.611,258,1.097,268,1.338,271,0.634,277,0.733,279,1.272,281,1.428,295,2.448,297,1.787,301,2.902,308,1.097,347,2.257,355,1.428,359,0.682,388,1.208,404,1.641,418,2.259,436,2.413,447,3.51,450,2.597,456,1.658,458,1.787,478,0.923,482,1.525,500,1.787,509,2.128,510,1.911,511,3.002,521,3.664,537,1.787,538,1.641,612,4.246,626,1.345,642,1.345,672,1.735,720,1.003,728,1.983,730,3.137,739,1.787,762,1.428,786,1.428,788,1.525,805,1.787,815,3.137,829,1.787,836,1.983,837,1.983,873,1.525,882,1.787,887,1.787,919,1.983,930,1.983,944,1.983,946,3.137,954,1.787,959,1.787,964,1.641,981,1.983,990,1.983,994,3.893,995,1.983,1009,3.607,1010,3.607,1011,3.607,1012,2.279,1013,1.983,1014,2.279,1015,2.279,1016,2.279,1017,2.279,1018,1.641,1019,2.279,1020,2.279,1021,2.279,1022,3.607,1023,3.137,1024,2.279,1025,2.279,1026,2.279,1027,2.279,1028,1.983,1029,2.279,1030,2.279,1031,2.279,1032,2.279,1033,2.279,1034,3.607,1035,2.279,1036,1.983,1037,2.279,1038,1.983,1039,2.279,1040,2.279,1041,1.983,1042,2.279,1043,2.279,1044,1.787,1045,2.279,1046,1.983,1047,2.279,1048,2.279,1049,2.279,1050,2.279,1051,2.279,1052,2.279,1053,2.279,1054,2.279,1055,2.279,1056,2.279,1057,1.983,1058,2.279,1059,2.279,1060,2.279,1061,3.607,1062,1.983,1063,2.279,1064,2.279,1065,2.279,1066,1.787,1067,2.279,1068,1.983,1069,2.279,1070,1.983,1071,2.259,1072,2.279,1073,1.787,1074,2.279,1075,2.279,1076,1.641,1077,1.983,1078,2.279,1079,2.279,1080,2.279,1081,2.279]],["t/570",[18,0.571,32,2.266,36,2.751,39,1.165,52,0.839,53,0.973,55,2.243,56,2.243,58,2.47,59,1.968,65,1.446,87,3.119,111,2.602,122,1.878,163,1.394,168,1.446,171,1.251,174,1.616,196,3.656,223,3.119,268,2.129,271,1.685,277,1.5,279,2.602,308,2.243,409,2.144,412,3.793,427,2.921,456,1.911,493,3.656,613,6.24,672,2.243,778,4.748,902,5.85,931,4.056,1082,3.656,1083,4.663,1084,4.663,1085,4.663,1086,4.056,1087,4.663,1088,4.663,1089,4.663,1090,4.663]],["t/572",[18,0.572,22,1.178,34,1.452,39,0.811,50,1.822,51,2.563,52,0.843,53,1.406,54,1.897,55,2.253,56,2.253,57,1.512,65,1.452,122,1.883,139,2.062,140,1.686,152,1.623,154,2.481,159,3.133,162,1.563,174,2.336,185,0.843,203,2.763,242,1.351,247,2.253,268,2.132,271,1.689,312,1.303,314,1.213,347,2.361,456,1.983,457,1.452,496,3.672,720,2.062,738,3.372,824,3.133,825,3.372,853,3.672,961,4.073,1073,3.672,1091,4.683,1092,4.683,1093,4.683,1094,3.672,1095,3.672,1096,4.683,1097,4.073,1098,4.683,1099,4.683,1100,4.683]],["t/574",[10,1.487,18,0.663,22,1.152,39,0.784,48,2.857,50,1.761,52,1.069,53,1.239,57,1.333,65,1.403,102,3.504,104,1.511,118,2.177,122,1.842,126,2.177,140,1.629,152,1.568,162,1.983,163,1.353,168,1.403,171,1.215,242,1.305,255,2.386,268,2.104,271,1.652,303,4.435,347,2.282,364,2.731,365,2.177,366,3.973,418,3.72,456,1.215,457,1.403,552,2.835,780,3.549,781,4.657,817,3.259,824,3.028,851,3.259,853,3.549,915,3.937,997,3.937,1073,3.549,1094,3.549,1095,3.549,1097,3.937,1101,4.526,1102,4.526,1103,4.526,1104,4.526,1105,4.526]],["t/576",[10,1.398,22,0.945,32,1.823,39,0.844,51,2.057,57,1.093,65,1.511,122,1.932,139,2.145,140,1.754,152,1.689,174,2.159,177,3.26,231,4.168,242,1.405,247,3.482,268,2.164,271,1.733,273,3.26,277,1.568,279,2.72,349,2.241,456,1.308,672,2.344,723,6.655,763,3.053,825,3.509,826,3.821,983,4.239,984,4.239,1106,4.873,1107,4.873,1108,6.23,1109,4.873,1110,4.873,1111,4.873,1112,6.868,1113,4.873,1114,4.873,1115,4.873]],["t/578",[18,0.699,56,2.784,104,2.693,118,2.784,168,1.795,258,3.569,422,4.538,476,3.334,478,2.807,1116,5.788,1117,5.788,1118,5.035]],["t/580",[18,0.564,22,1.16,39,1.303,53,1.248,63,2.633,111,3.338,126,2.877,140,2.708,163,1.788,242,1.725,330,3.746,778,4.689,1119,5.98,1120,5.98]],["t/582",[18,0.515,22,1.06,27,2.947,53,1.141,118,2.629,120,4.286,141,2.513,151,2.045,152,1.894,160,3.011,161,2.41,163,1.634,168,1.695,171,1.467,183,3.546,184,3.424,313,1.226,325,3.936,334,3.936,349,2.513,417,3.424,457,1.695,626,3.224,812,3.224,1121,6.694,1122,3.949]],["t/584",[18,0.564,22,1.293,40,2.871,53,1.392,86,2.311,141,2.108,151,2.24,160,2.752,161,2.709,168,1.421,171,1.23,183,3.172,185,0.825,188,1.588,234,2.311,242,1.322,268,1.994,271,1.275,388,2.428,457,1.421,515,3.987,604,3.594,626,3.533,756,3.066,779,3.987,811,4.803,812,3.935,893,3.987,986,3.301,1122,4.173,1123,4.583,1124,6.152,1125,4.583,1126,4.583,1127,4.583,1128,4.583,1129,4.583,1130,4.583,1131,4.583,1132,4.583,1133,4.583,1134,4.583,1135,3.987,1136,4.583,1137,3.987]],["t/586",[18,0.651,27,1.521,52,1.036,53,0.721,55,1.662,65,1.071,75,2.487,103,3.004,105,2.708,111,1.928,121,2.708,160,2.767,161,2.072,162,1.647,165,1.458,171,0.927,183,3.852,184,4.946,185,0.622,192,3.851,221,2.691,234,1.742,242,0.996,268,1.033,271,1.602,295,1.662,308,2.374,319,1.197,321,3.004,409,1.588,424,3.301,440,3.606,456,1.545,457,1.071,465,2.487,510,3.327,527,3.553,594,3.301,600,2.311,624,4.514,642,2.038,720,1.521,746,3.091,812,3.396,986,4.146,1018,2.487,1023,4.292,1122,2.911,1138,4.934,1139,5.757,1140,5.757,1141,3.454,1142,3.004,1143,4.934,1144,4.934,1145,3.454,1146,3.454,1147,3.454,1148,3.004,1149,3.454,1150,3.454,1151,3.454,1152,3.454,1153,3.004,1154,3.454,1155,5.008,1156,4.934,1157,4.292,1158,3.454,1159,4.934,1160,3.454,1161,3.454]],["t/588",[22,1.422,52,1.146,53,1.329,755,4.586,828,4.994,1162,3.757]],["t/590",[5,3.826,9,3.352,10,1.74,11,2.386,18,0.539,22,1.334,39,0.991,42,4.493,52,1.238,53,1.436,55,2.057,56,2.057,60,2.678,104,1.427,122,1.326,161,2.059,178,2.386,185,1.16,188,1.481,226,3.352,268,1.71,271,1.591,295,2.751,347,2.156,354,3.993,457,1.773,461,3.718,625,4.484,629,4.484,632,3.352,866,3.078,874,2.86,942,3.352,1124,3.718,1163,5.719,1164,5.719,1165,3.718,1166,3.718,1167,3.718,1168,4.275,1169,3.718,1170,4.275,1171,3.718,1172,4.275,1173,3.718,1174,4.275,1175,4.275,1176,4.275,1177,4.275]],["t/592",[10,1.739,18,0.544,22,1.343,39,0.602,51,1.467,52,0.892,53,1.39,54,2.008,55,1.672,56,1.672,60,3.946,62,1.251,63,2.543,64,3.224,65,1.078,96,2.626,104,1.16,122,1.078,151,1.855,161,1.784,168,1.078,187,1.408,188,1.205,190,1.408,222,1.842,226,2.726,242,1.003,247,2.385,268,1.482,271,1.379,305,2.766,308,1.672,339,4.312,347,1.753,349,2.279,369,4.16,457,1.537,510,1.842,703,2.326,714,3.887,720,1.53,750,2.726,751,2.726,870,2.766,932,3.887,942,2.726,952,2.726,967,4.312,1018,2.503,1062,3.024,1071,2.178,1162,2.051,1165,3.024,1166,3.024,1167,3.024,1178,4.957,1179,4.957,1180,5.777,1181,4.536,1182,2.726,1183,3.476,1184,3.476,1185,3.476,1186,3.887,1187,3.476,1188,4.312,1189,4.957,1190,3.476,1191,3.476,1192,3.024,1193,3.476,1194,3.476,1195,3.476,1196,3.476,1197,3.476,1198,3.024,1199,2.726,1200,3.476,1201,3.024,1202,5.025,1203,2.326,1204,3.024,1205,4.312,1206,3.476,1207,3.476,1208,3.476,1209,3.024]],["t/594",[18,0.664,22,1.216,41,2.042,47,4.797,50,2.44,52,0.729,53,1.151,54,1.64,59,1.709,62,2.257,64,2.26,74,3.523,82,2.71,104,1.352,158,2.71,160,2.146,161,1.985,166,2.26,168,1.256,171,1.087,174,1.404,178,2.26,180,2.537,181,2.71,182,3.756,187,1.64,194,3.454,203,2.39,213,1.783,214,3.176,232,1.64,233,2.917,242,1.168,277,1.303,334,2.917,337,3.238,360,3.176,372,3.454,388,2.146,409,1.862,419,2.917,454,3.176,456,1.89,457,1.256,476,2.653,617,2.917,620,2.917,641,3.176,696,4.324,752,3.523,788,2.71,824,2.71,964,2.917,1210,3.523,1211,4.05,1212,4.05,1213,2.71,1214,4.05,1215,3.176,1216,3.523,1217,5.454,1218,3.523,1219,3.523,1220,3.176,1221,4.05,1222,5.514,1223,3.523,1224,5.514,1225,4.05,1226,2.917,1227,2.917,1228,3.176]],["t/596",[18,0.409,39,1.001,51,1.833,52,0.782,53,0.906,57,0.975,62,1.564,63,1.912,107,2.301,151,2.162,156,2.081,159,2.906,160,1.69,161,1.564,168,1.792,171,1.859,173,2.424,174,2.664,177,3.867,189,2.19,190,1.759,191,3.128,194,2.721,205,2.906,211,3.778,227,2.721,237,2.424,255,1.564,277,1.397,301,3.049,317,2.424,388,3.062,440,2.721,453,2.906,456,1.551,463,3.406,466,2.906,478,2.341,496,3.406,521,3.128,642,2.563,720,1.912,733,3.128,760,3.406,870,2.424,964,4.162,1076,3.128,1077,3.778,1137,3.778,1223,5.028,1229,4.344,1230,4.344,1231,4.344,1232,4.344,1233,4.344,1234,4.344,1235,4.344,1236,4.344,1237,4.344,1238,4.344,1239,4.344,1240,4.344,1241,3.778]],["t/598",[18,0.523,52,0.999,62,1.998,104,2.256,106,3.674,163,2.178,178,3.097,180,3.477,181,3.713,182,3.097,242,1.601,317,3.097,337,3.251,410,2.443,453,3.713,478,2.248,834,4.874,835,4.874,1227,3.996,1242,5.55,1243,5.55,1244,5.55]],["t/600",[22,1.105,34,2.129,52,1.235,53,1.189,54,2.307,55,3.302,56,3.302,57,1.54,58,3.903,59,3.11,177,3.811,185,1.025,308,2.74,650,4.955,1245,5.696,1246,5.696,1247,6.864]],["t/602",[10,1.818,17,3.904,18,0.423,28,3.904,32,1.679,55,2.159,118,2.159,126,2.159,160,1.746,161,1.616,185,0.808,222,2.378,231,3.003,271,1.249,313,1.007,437,4.253,439,4.754,440,2.812,456,1.205,500,3.519,985,3.904,1028,5.138,1248,4.488,1249,5.906,1250,4.488,1251,4.488,1252,4.488,1253,4.488,1254,4.488,1255,4.488,1256,4.488,1257,4.488,1258,4.488,1259,4.488,1260,6.602,1261,4.488,1262,5.177,1263,4.488,1264,4.488,1265,6.602,1266,4.488,1267,4.488,1268,4.488,1269,4.488,1270,4.488,1271,4.488,1272,4.488,1273,4.488,1274,4.488,1275,4.488,1276,4.488,1277,4.488,1278,3.904,1279,4.488]],["t/604",[10,1.516,18,0.523,34,2.095,53,1.158,54,2.951,55,2.67,56,2.67,57,1.245,63,2.443,71,2.67,141,2.552,217,4.352,398,4.352,409,3.35,499,4.352,501,4.352,786,3.477,1082,5.298,1262,4.352,1280,4.827,1281,4.827,1282,6.757,1283,5.55,1284,5.55]],["t/606",[5,0.374,8,0.439,10,1.459,11,0.586,18,0.619,20,0.439,22,0.724,32,0.831,34,1.645,35,1.696,36,0.62,39,0.709,42,1.174,48,0.269,50,1.29,51,0.236,52,0.456,53,0.219,54,0.426,56,0.901,57,0.793,60,0.658,61,0.487,62,1.272,64,0.829,67,0.586,69,0.35,71,1.796,82,0.374,87,0.374,92,1.31,94,0.35,96,1.177,98,0.931,102,0.876,104,1.559,106,2.629,111,0.312,118,0.715,120,1.165,121,1.165,122,0.874,126,0.505,127,1.07,139,0.463,141,1.297,151,1.951,152,1.573,154,1.343,155,2.895,156,1.805,157,0.487,158,0.994,160,1.097,161,2.075,162,0.941,163,1.316,164,2.622,165,1.857,166,1.415,167,1.932,168,1.364,169,1.247,171,1.181,173,3.412,174,1.067,178,0.586,183,0.992,184,3.569,185,0.883,186,2.339,187,1.588,188,0.364,189,0.53,190,2.217,192,0.703,194,1.391,195,0.825,198,0.824,203,0.33,210,0.914,212,0.374,213,1.355,220,0.312,221,0.426,222,0.296,225,0.439,227,0.658,232,1.987,234,1.422,237,0.586,238,0.487,239,0.824,245,0.824,247,0.715,250,1.742,253,2.388,255,1.344,258,1.069,263,1.932,266,1.165,268,1.172,271,0.618,273,0.994,275,0.824,277,1.261,279,0.586,281,0.658,283,0.824,285,0.557,286,1.63,287,0.914,289,0.487,295,1.595,297,0.439,299,1.046,301,2.336,302,0.829,304,1.174,305,1.574,306,0.312,307,0.439,308,0.901,310,1.929,312,0.156,313,0.236,314,0.145,316,3.891,319,0.364,320,3.607,325,0.403,333,0.35,334,0.403,336,0.658,337,1.595,341,1.63,347,0.282,349,2.203,354,0.992,355,1.174,358,1.349,359,2.222,361,0.824,362,0.487,364,1.416,365,1.22,366,0.994,370,1.574,372,1.174,376,0.703,381,1.664,383,2.771,385,1.742,387,0.439,388,1.177,402,0.824,403,0.439,404,0.403,406,0.439,408,0.439,409,1.021,410,1.801,412,0.658,413,0.439,414,0.33,415,0.439,417,0.658,418,0.658,419,1.349,420,0.35,426,0.374,427,0.35,438,0.403,439,0.403,440,0.35,443,0.312,445,0.824,447,0.824,450,1.349,451,0.487,456,1.51,457,1.028,463,0.439,476,1.7,478,1.657,482,0.994,489,0.312,493,0.824,509,0.33,510,2.167,511,1.664,513,0.487,517,0.487,520,1.165,521,1.07,524,0.914,525,0.914,550,1.292,552,0.35,553,1.349,593,1.63,594,1.253,597,0.487,600,0.374,604,1.988,605,0.703,606,0.914,607,1.349,612,1.07,620,2.03,624,0.824,625,0.439,626,0.33,629,0.439,632,0.439,634,0.824,635,2.678,672,0.269,697,1.292,700,0.487,703,0.703,707,2.414,709,0.914,711,0.487,712,1.469,713,0.487,714,0.439,720,0.463,726,0.296,733,0.403,739,0.439,755,0.403,756,0.994,758,0.487,763,0.35,769,0.757,792,1.292,793,0.487,812,0.62,818,0.487,829,1.165,832,0.487,833,0.824,834,0.994,835,0.994,838,0.487,865,1.349,870,2.91,873,0.374,874,1.696,888,2.844,891,1.932,932,1.469,954,1.165,986,0.403,1013,0.487,1036,0.487,1038,0.487,1044,0.439,1057,0.487,1068,0.487,1070,0.487,1071,1.588,1076,0.403,1086,0.487,1118,0.487,1122,0.33,1142,0.487,1148,0.487,1155,3.559,1157,2.205,1162,1.496,1169,0.487,1171,0.914,1173,0.487,1181,0.757,1182,0.439,1186,0.824,1188,0.487,1199,1.165,1203,2.622,1210,0.487,1213,0.994,1215,1.988,1216,0.914,1217,0.914,1218,0.487,1219,0.487,1228,1.165,1241,1.292,1285,0.559,1286,0.559,1287,2.221,1288,0.559,1289,0.559,1290,0.487,1291,0.559,1292,0.559,1293,0.559,1294,0.559,1295,0.559,1296,1.051,1297,0.559,1298,0.559,1299,1.051,1300,0.559,1301,0.559,1302,0.559,1303,0.559,1304,1.486,1305,0.559,1306,1.051,1307,0.559,1308,0.559,1309,0.559,1310,1.486,1311,0.487,1312,2.82,1313,0.559,1314,0.559,1315,0.559,1316,0.559,1317,0.559,1318,0.559,1319,1.292,1320,0.559,1321,0.559,1322,0.559,1323,0.559,1324,1.486,1325,1.486,1326,0.559,1327,0.559,1328,0.559,1329,0.559,1330,0.559,1331,0.559,1332,0.559,1333,0.559,1334,1.051,1335,1.051,1336,1.051,1337,0.559,1338,0.559,1339,0.559,1340,0.914,1341,0.824,1342,0.559,1343,0.914,1344,0.914,1345,0.559,1346,0.487,1347,1.051,1348,1.051,1349,0.559,1350,0.824,1351,0.559,1352,0.559,1353,0.559,1354,0.914,1355,0.487,1356,0.559,1357,0.559,1358,0.914,1359,0.559,1360,0.559,1361,0.559,1362,0.559,1363,0.559,1364,0.559,1365,1.486,1366,0.559,1367,0.559,1368,0.559,1369,1.873,1370,1.051,1371,0.559,1372,0.559,1373,1.486,1374,0.559,1375,0.559,1376,0.487,1377,0.559,1378,0.559,1379,1.165,1380,1.873,1381,0.559,1382,0.559,1383,0.559,1384,0.559,1385,0.559,1386,0.559,1387,0.559,1388,0.559,1389,0.559,1390,0.559,1391,0.559,1392,0.559,1393,1.051,1394,0.559,1395,0.559,1396,0.487,1397,0.559,1398,0.559,1399,0.559,1400,0.559,1401,0.559,1402,0.559,1403,0.559,1404,0.559,1405,0.559,1406,0.559,1407,0.559,1408,0.559,1409,0.487,1410,0.559,1411,0.559]],["t/608",[18,0.524,22,1.223,27,2.776,34,2.352,39,1.172,41,2.066,52,1.217,53,0.855,54,1.659,57,0.919,71,1.971,72,2.74,106,2.802,141,3.11,151,2.359,152,1.42,168,1.27,185,0.737,186,3.481,187,3.072,188,1.926,189,2.066,201,1.971,220,2.286,232,2.739,237,2.286,317,3.519,319,1.42,336,3.481,345,2.95,349,2.555,409,1.884,436,2.74,456,1.693,538,4.002,594,2.74,617,4.002,642,2.417,786,2.566,834,2.74,835,2.74,888,2.74,1379,3.212,1412,4.096,1413,4.096,1414,4.096,1415,4.096,1416,4.096,1417,4.096,1418,5.557,1419,4.096,1420,5.557,1421,4.096,1422,4.096,1423,4.096]],["t/610",[10,1.461,18,0.493,34,1.621,52,0.941,55,3.133,56,3.133,58,3.45,59,2.748,63,2.301,71,2.515,104,1.745,141,2.404,161,1.882,183,2.769,217,4.099,221,2.638,271,1.812,372,3.274,380,5.107,398,4.099,409,2.995,478,2.117,499,4.099,501,4.099,1082,5.107,1262,4.099,1280,4.547,1281,4.547,1424,5.227,1425,5.227,1426,5.227,1427,4.547,1428,5.227,1429,5.227]],["t/612",[10,1.532,18,0.532,22,0.813,34,1.979,40,3.536,52,1.148,53,0.875,55,2.017,59,1.769,62,1.509,151,2.387,156,1.509,168,1.3,171,1.125,173,4.588,213,2.485,221,1.698,232,2.286,239,3.287,313,1.266,349,1.928,443,2.339,457,1.75,489,2.339,620,4.064,712,3.287,865,4.064,1199,5.353,1213,2.804,1215,5.353,1319,3.646,1340,4.909,1341,3.287,1343,3.646,1344,5.55,1346,4.909,1350,4.426,1376,3.646,1396,3.646,1430,4.064,1431,4.192,1432,4.192,1433,4.192,1434,4.192,1435,4.192,1436,3.646]],["t/614",[10,0.78,18,0.328,22,0.674,27,1.53,52,0.892,53,0.725,59,2.092,63,1.53,70,2.726,71,1.672,94,3.105,104,1.655,118,1.672,122,1.792,151,2.725,156,2.397,166,1.94,168,2.147,169,1.408,171,1.691,173,3.864,185,0.626,190,2.34,195,2.182,213,2.773,218,2.326,221,1.408,222,2.626,242,1.003,247,2.385,268,1.728,307,3.887,308,1.672,310,2.178,314,0.9,319,1.205,359,1.039,376,2.326,381,3.716,457,1.537,476,2.385,489,1.94,498,2.726,527,2.503,607,3.57,707,2.051,868,2.726,870,1.94,873,3.316,1071,2.178,1162,2.051,1203,3.316,1213,2.326,1355,3.024,1430,2.503,1437,3.476,1438,3.024,1439,3.024,1440,3.887,1441,3.887,1442,5.222,1443,5.025,1444,4.957,1445,3.476,1446,3.476,1447,3.476,1448,3.476,1449,3.476,1450,3.476,1451,4.312,1452,3.887,1453,3.024,1454,3.024,1455,3.024,1456,3.024,1457,3.024,1458,3.024,1459,3.024,1460,3.024,1461,3.024,1462,3.024,1463,3.024,1464,3.024,1465,2.726,1466,2.726,1467,3.024,1468,3.024,1469,3.024]],["t/616",[10,0.79,18,0.332,22,0.683,27,1.55,52,0.9,59,2.111,63,1.55,70,2.761,71,2.407,104,1.176,122,1.804,151,2.906,156,1.268,169,1.426,171,0.945,173,3.536,185,0.634,187,2.357,190,2.357,213,2.789,218,2.356,221,1.426,222,1.866,232,2.026,242,1.016,247,2.799,268,1.74,314,0.912,319,1.22,337,2.407,349,2.676,376,2.356,381,3.433,437,2.536,457,1.551,476,1.694,489,1.965,527,2.536,605,2.356,607,2.536,626,2.078,672,1.694,696,2.761,704,2.536,707,2.078,870,1.965,873,3.893,1066,2.761,1071,2.206,1162,2.078,1203,3.347,1213,2.356,1226,2.536,1350,2.761,1430,2.536,1438,3.063,1439,3.063,1440,3.923,1441,3.923,1442,2.761,1451,4.352,1452,3.923,1453,3.063,1454,3.063,1455,3.063,1456,3.063,1457,3.063,1458,3.063,1459,3.063,1460,3.063,1461,3.063,1462,3.063,1463,3.063,1464,4.352,1465,2.761,1466,2.761,1467,4.352,1468,3.063,1469,3.063,1470,3.522,1471,3.522,1472,3.522,1473,3.522,1474,3.522,1475,3.522,1476,3.522,1477,5.003,1478,5.003,1479,5.003,1480,5.003,1481,3.522,1482,3.522,1483,3.522]],["t/618",[27,2.062,34,2.09,52,1.213,56,2.253,59,2.563,63,2.062,71,2.253,94,2.933,107,2.481,160,1.822,169,1.897,173,4.359,192,3.133,213,3.253,221,1.897,222,2.481,234,2.361,242,1.351,310,2.933,313,1.051,314,1.213,349,2.153,457,1.883,489,2.613,828,3.672,865,4.853,868,3.672,1181,3.372,1182,3.672,1427,4.073,1430,3.372,1440,4.762,1441,4.762,1443,5.862,1452,4.762,1465,3.672,1466,3.672,1484,4.683,1485,4.683,1486,4.683,1487,6.073,1488,6.073]],["t/620",[10,1.806,18,0.451,22,0.643,29,1.783,33,2.882,52,0.596,53,0.87,54,0.83,59,1.76,60,1.284,62,0.738,63,0.902,64,3.303,65,0.636,69,1.284,104,1.599,105,1.607,107,2.537,140,0.738,141,1.524,151,1.792,152,1.445,153,1.209,156,1.501,159,1.371,160,0.798,161,2.614,162,1.755,163,0.613,165,2.374,168,0.636,169,0.83,171,1.285,174,1.148,178,1.144,180,2.076,181,1.371,182,1.144,183,1.086,185,1.246,188,0.71,190,2.397,195,0.902,208,1.371,221,1.342,225,1.607,234,1.034,240,1.607,242,0.591,247,2.304,255,1.193,258,0.986,302,1.144,308,2.304,317,1.144,322,3.627,337,2.304,347,1.034,348,1.607,360,1.607,399,1.783,438,1.476,443,1.849,456,0.55,478,0.83,537,1.607,552,1.284,594,2.217,641,1.607,692,1.783,704,2.386,716,1.783,720,1.459,751,3.755,755,1.476,756,1.371,806,1.607,830,1.783,866,1.476,870,3.73,874,1.371,888,1.371,952,2.598,959,2.598,1018,1.476,1041,2.882,1044,1.607,1046,1.783,1066,2.598,1071,2.076,1076,1.476,1094,1.607,1095,1.607,1122,1.955,1153,1.783,1181,1.476,1186,1.607,1192,1.783,1198,3.627,1201,4.166,1202,5.925,1203,2.217,1204,2.882,1205,4.166,1220,1.607,1226,2.386,1227,1.476,1228,4.123,1278,1.783,1290,1.783,1354,1.783,1358,1.783,1409,1.783,1436,1.783,1489,2.05,1490,2.05,1491,2.05,1492,2.05,1493,2.05,1494,5.919,1495,2.05,1496,2.05,1497,2.05,1498,4.789,1499,2.05,1500,2.05,1501,3.313,1502,2.05,1503,2.05,1504,3.313,1505,2.05,1506,2.05,1507,3.313,1508,3.313,1509,2.05,1510,2.05,1511,2.05,1512,2.05,1513,4.17,1514,2.05,1515,4.17,1516,3.313,1517,3.313,1518,2.05,1519,2.05,1520,2.05,1521,1.783,1522,2.05,1523,2.05,1524,2.05,1525,3.313,1526,2.05,1527,3.313,1528,2.05,1529,3.313,1530,2.05,1531,2.05,1532,2.05,1533,2.05]],["t/622",[22,1.242,57,1.65,169,2.595,185,1.153,1162,3.78]],["t/624",[10,0.837,22,0.723,34,1.156,50,2.885,52,0.671,53,0.778,62,1.342,63,1.641,151,2.246,153,2.2,156,2.339,159,2.494,163,1.115,168,1.156,178,2.081,180,3.263,181,2.494,182,2.081,188,1.805,190,2.431,208,2.494,216,2.494,308,1.794,310,3.76,337,2.506,349,1.714,354,2.759,417,4.553,453,2.494,456,1.398,457,1.615,476,1.794,478,2.11,482,4.573,483,3.75,644,3.243,707,4.375,1122,4.033,1220,2.924,1226,2.685,1227,2.685,1442,2.924,1534,4.53,1535,3.243,1536,4.53,1537,5.652,1538,3.728,1539,3.243,1540,4.53,1541,4.53,1542,4.53,1543,4.53,1544,4.53,1545,3.728,1546,3.243,1547,4.53,1548,3.243,1549,3.243,1550,3.243,1551,3.243,1552,3.243,1553,3.243,1554,3.243,1555,3.243,1556,3.243,1557,3.243,1558,3.243,1559,3.243,1560,3.243,1561,3.243,1562,3.728]],["t/626",[8,3.903,10,1.519,18,0.469,22,0.965,34,0.836,39,0.712,50,2.555,52,0.485,53,1.318,57,0.922,62,0.97,65,0.836,151,1.537,156,2.497,160,1.598,165,1.734,168,0.836,174,2.346,180,1.688,182,1.504,185,0.739,186,1.688,188,1.725,190,2.428,208,1.803,242,0.777,255,1.479,258,1.976,268,1.228,271,1.385,310,1.688,336,1.688,337,1.297,349,1.239,354,2.949,417,4.57,426,1.803,436,1.803,443,1.504,456,1.336,457,1.726,476,1.976,478,2.255,482,4.641,483,4.009,703,1.803,707,4.092,720,1.186,769,1.941,808,2.113,870,2.778,908,2.344,1122,3.875,1135,2.344,1162,1.59,1209,2.344,1311,2.344,1341,2.113,1379,4.366,1521,2.344,1534,2.344,1535,2.344,1536,4.33,1537,5.713,1539,2.344,1540,4.33,1541,5.213,1542,4.843,1543,4.843,1544,4.843,1546,2.344,1547,4.33,1548,2.344,1549,2.344,1550,2.344,1551,2.344,1552,2.344,1553,2.344,1554,2.344,1555,2.344,1556,2.344,1557,2.344,1558,2.344,1559,2.344,1560,2.344,1561,3.573,1563,2.695,1564,2.695,1565,2.695,1566,4.108,1567,4.108,1568,2.695,1569,2.695,1570,4.108,1571,2.695,1572,2.695,1573,2.695,1574,4.108,1575,2.695]]],"invertedIndex":[["",{"_index":10,"t":{"477":{"position":[[92,1],[500,1]]},"485":{"position":[[119,1],[559,4]]},"487":{"position":[[752,3],[789,3],[827,3],[831,3]]},"506":{"position":[[234,1]]},"522":{"position":[[1423,3],[1777,1],[1779,1],[1792,1],[1843,1]]},"524":{"position":[[693,1]]},"534":{"position":[[202,1],[204,1],[331,1],[333,1]]},"538":{"position":[[649,1],[655,2]]},"542":{"position":[[259,3]]},"544":{"position":[[209,1]]},"546":{"position":[[1269,1],[2550,1],[2571,2]]},"548":{"position":[[202,1],[317,1],[526,1],[777,1],[953,1]]},"558":{"position":[[746,2],[825,2]]},"560":{"position":[[674,2]]},"562":{"position":[[366,1],[396,1]]},"566":{"position":[[39,1],[1414,1],[3059,1],[3080,1],[3140,1],[3191,1],[3193,1],[3236,1],[3238,1],[3261,1],[3284,1],[3311,1],[3331,1],[3361,1],[3493,1],[4386,1],[4407,1],[4464,1],[4520,1],[4522,1],[4560,1],[4562,1],[4578,1],[4599,1],[4624,1],[4644,1],[4665,1],[4693,1],[4770,1]]},"568":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"574":{"position":[[213,1],[238,1],[259,1]]},"576":{"position":[[400,2],[458,2]]},"590":{"position":[[227,1],[262,1],[298,1],[334,1],[369,1],[391,1],[414,1],[431,1],[449,1]]},"592":{"position":[[114,3],[750,1],[951,1],[953,1],[1165,2],[1264,1],[1299,1],[1335,1],[1357,1],[1380,1],[1397,1],[1420,1],[1438,1]]},"602":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[312,1],[320,4],[325,1],[330,1],[570,1],[697,1],[706,1],[728,1],[730,1]]},"604":{"position":[[83,1],[85,1]]},"606":{"position":[[71,2],[918,1],[1359,1],[1482,3],[1833,4],[1838,2],[1994,2],[1997,2],[2071,1],[2152,1],[2240,1],[2702,2],[3009,1],[3011,1],[3089,1],[3091,1],[3528,1],[3667,1],[3778,1],[4421,1],[4964,2],[6527,1],[6594,4],[7646,2],[7715,1],[8161,2],[8266,2],[8883,1],[9539,1],[11605,1],[11754,1],[11818,1],[11938,1],[11969,1],[13060,1],[13348,1],[13448,1],[13686,1],[13768,1],[13775,2],[13857,1],[14510,1],[14517,2],[14870,2]]},"610":{"position":[[147,1],[149,1]]},"612":{"position":[[215,1],[241,1],[278,1],[343,1]]},"614":{"position":[[927,1]]},"616":{"position":[[782,1]]},"620":{"position":[[242,1],[272,4],[317,1],[513,1],[557,1],[629,1],[640,1],[655,1],[796,1],[879,3],[912,1],[923,1],[925,1],[969,1],[988,1],[1050,1],[1282,1],[1468,1],[1644,1],[1737,1],[1803,1],[1901,1],[2080,1],[2161,1],[2266,2],[2269,3],[2273,5],[2279,1],[2396,1],[2398,1],[2494,1],[2582,1],[2612,1],[2656,4],[2665,2],[3338,1],[3419,1],[3448,2],[3451,2],[3484,1],[3496,2],[3523,2],[3556,5],[3566,1]]},"624":{"position":[[589,2]]},"626":{"position":[[154,1],[349,1],[488,2],[570,1],[757,2],[858,1],[1069,2],[1282,2]]}}}],["0",{"_index":1304,"t":{"606":{"position":[[1552,1],[5224,1],[5237,1]]}}}],["0.0.0.0:4180",{"_index":1008,"t":{"566":{"position":[[4772,14]]}}}],["0.001",{"_index":1481,"t":{"616":{"position":[[916,5]]}}}],["00010203",{"_index":1457,"t":{"614":{"position":[[1121,8]]},"616":{"position":[[984,8]]}}}],["0400",{"_index":1441,"t":{"614":{"position":[[256,5],[1301,4]]},"616":{"position":[[137,5],[1323,4]]},"618":{"position":[[267,5],[593,4]]}}}],["0405",{"_index":1458,"t":{"614":{"position":[[1130,4]]},"616":{"position":[[993,4]]}}}],["0a0b0c0d0e0f",{"_index":1461,"t":{"614":{"position":[[1145,12]]},"616":{"position":[[1008,12]]}}}],["1",{"_index":703,"t":{"540":{"position":[[2225,1]]},"546":{"position":[[2289,1]]},"592":{"position":[[1116,2]]},"606":{"position":[[1597,3],[14362,4]]},"626":{"position":[[423,2]]}}}],["1.3",{"_index":633,"t":{"536":{"position":[[474,3]]}}}],["1.5h",{"_index":395,"t":{"506":{"position":[[236,5]]}}}],["100",{"_index":1352,"t":{"606":{"position":[[5320,3]]}}}],["12",{"_index":1483,"t":{"616":{"position":[[1200,2]]}}}],["12.x",{"_index":883,"t":{"560":{"position":[[58,5],[128,4]]}}}],["123456.apps.googleusercontent.com",{"_index":1288,"t":{"606":{"position":[[592,35]]}}}],["127.0.0.1:4180",{"_index":1182,"t":{"592":{"position":[[150,14]]},"606":{"position":[[4643,16]]},"618":{"position":[[732,14]]}}}],["128",{"_index":1144,"t":{"586":{"position":[[383,3],[434,3]]}}}],["168h0m0",{"_index":1298,"t":{"606":{"position":[[1161,8]]}}}],["19/mar/2015:17:20:19",{"_index":1440,"t":{"614":{"position":[[233,21],[1279,20]]},"616":{"position":[[114,21],[1301,20]]},"618":{"position":[[244,21],[571,20]]}}}],["192",{"_index":1275,"t":{"602":{"position":[[644,3]]}}}],["1h",{"_index":759,"t":{"546":{"position":[[919,4]]}}}],["1s",{"_index":1322,"t":{"606":{"position":[[2817,4]]}}}],["2",{"_index":769,"t":{"546":{"position":[[1510,1]]},"566":{"position":[[3458,2]]},"606":{"position":[[13833,3],[14438,4]]},"626":{"position":[[717,2]]}}}],["2.0",{"_index":914,"t":{"562":{"position":[[213,3]]},"566":{"position":[[35,3]]}}}],["20",{"_index":1327,"t":{"606":{"position":[[3981,2]]}}}],["200",{"_index":696,"t":{"540":{"position":[[1941,3]]},"594":{"position":[[223,3],[336,3]]},"616":{"position":[[1249,3]]}}}],["202",{"_index":1227,"t":{"594":{"position":[[995,3]]},"598":{"position":[[22,3]]},"620":{"position":[[131,3]]},"624":{"position":[[162,3]]}}}],["2048",{"_index":1025,"t":{"568":{"position":[[1052,4]]}}}],["24",{"_index":1273,"t":{"602":{"position":[[630,2]]}}}],["2>/dev/nul",{"_index":1259,"t":{"602":{"position":[[227,11]]}}}],["2f",{"_index":718,"t":{"542":{"position":[[212,7]]}}}],["2h45m",{"_index":396,"t":{"506":{"position":[[245,8]]}}}],["3",{"_index":801,"t":{"548":{"position":[[1119,2]]},"550":{"position":[[385,2],[421,2]]},"556":{"position":[[1247,4]]}}}],["3/4",{"_index":1399,"t":{"606":{"position":[[14135,3]]}}}],["30",{"_index":714,"t":{"540":{"position":[[2598,2]]},"592":{"position":[[1138,3],[1161,3]]},"606":{"position":[[13321,3]]}}}],["300m",{"_index":394,"t":{"506":{"position":[[225,8]]}}}],["315360000",{"_index":1552,"t":{"624":{"position":[[965,9]]},"626":{"position":[[1723,9]]}}}],["32",{"_index":1265,"t":{"602":{"position":[[309,2],[578,2],[708,2]]}}}],["3650",{"_index":1037,"t":{"568":{"position":[[1175,4]]}}}],["401",{"_index":180,"t":{"485":{"position":[[403,3]]},"594":{"position":[[1022,3]]},"598":{"position":[[49,3]]},"620":{"position":[[158,3],[965,3]]},"624":{"position":[[189,3],[1254,4]]},"626":{"position":[[898,3]]}}}],["403",{"_index":1562,"t":{"624":{"position":[[1259,4]]}}}],["4180",{"_index":1187,"t":{"592":{"position":[[465,5]]}}}],["443",{"_index":1186,"t":{"592":{"position":[[395,3],[759,3]]},"606":{"position":[[4809,6],[14717,3]]},"620":{"position":[[251,3]]}}}],["4607",{"_index":1459,"t":{"614":{"position":[[1135,4]]},"616":{"position":[[998,4]]}}}],["4kb",{"_index":1501,"t":{"620":{"position":[[1733,3],[1938,4]]}}}],["5",{"_index":776,"t":{"546":{"position":[[1988,1]]}}}],["6",{"_index":803,"t":{"548":{"position":[[1155,2]]}}}],["7",{"_index":1349,"t":{"606":{"position":[[5153,1]]}}}],["74.125.224.72",{"_index":1453,"t":{"614":{"position":[[840,13]]},"616":{"position":[[695,13]]}}}],["80",{"_index":1408,"t":{"606":{"position":[[14703,3]]}}}],["8809",{"_index":1460,"t":{"614":{"position":[[1140,4]]},"616":{"position":[[1003,4]]}}}],["994",{"_index":885,"t":{"560":{"position":[[138,5]]}}}],["_",{"_index":1262,"t":{"602":{"position":[[279,3],[327,2],[732,3]]},"604":{"position":[[104,4]]},"610":{"position":[[168,4]]}}}],["__host",{"_index":1301,"t":{"606":{"position":[[1338,7]]}}}],["__secur",{"_index":1302,"t":{"606":{"position":[[1350,8]]}}}],["_oauth2_proxi",{"_index":1142,"t":{"586":{"position":[[338,14]]},"606":{"position":[[1388,15]]}}}],["_oauth2_proxy_1",{"_index":1533,"t":{"620":{"position":[[3951,18]]}}}],["abov",{"_index":868,"t":{"556":{"position":[[1233,5]]},"614":{"position":[[1542,5]]},"618":{"position":[[45,5]]}}}],["absent",{"_index":1328,"t":{"606":{"position":[[3987,6]]}}}],["accept",{"_index":178,"t":{"485":{"position":[[363,7]]},"536":{"position":[[139,11]]},"590":{"position":[[566,10]]},"594":{"position":[[999,8]]},"598":{"position":[[26,8]]},"606":{"position":[[10326,8],[12993,11]]},"620":{"position":[[135,8]]},"624":{"position":[[166,8]]}}}],["acceptable.e.g",{"_index":631,"t":{"536":{"position":[[420,15]]}}}],["access",{"_index":255,"t":{"493":{"position":[[349,6]]},"498":{"position":[[101,6]]},"502":{"position":[[171,6]]},"508":{"position":[[346,6]]},"520":{"position":[[259,6]]},"526":{"position":[[2139,6],[2286,6]]},"546":{"position":[[1746,7]]},"548":{"position":[[447,6],[622,7]]},"554":{"position":[[296,7],[924,6],[999,6],[1036,6],[1186,6],[1217,6],[1306,6]]},"556":{"position":[[138,6],[1173,6]]},"558":{"position":[[46,6]]},"566":{"position":[[2344,6],[2403,7],[2977,6]]},"568":{"position":[[305,7],[2650,6],[3170,10]]},"574":{"position":[[528,6],[638,6],[673,6]]},"596":{"position":[[214,9]]},"606":{"position":[[3481,6],[3906,6],[3953,6],[6606,6],[6676,6],[6760,6],[7562,6],[8470,6],[10883,6],[10912,6],[13592,6]]},"620":{"position":[[1306,6],[1447,6]]},"626":{"position":[[2016,6],[2192,6]]}}}],["access_by_lua_block",{"_index":1526,"t":{"620":{"position":[[3399,19]]}}}],["access_token",{"_index":1357,"t":{"606":{"position":[[6635,12]]}}}],["accompani",{"_index":831,"t":{"554":{"position":[[382,11]]}}}],["account",{"_index":418,"t":{"512":{"position":[[271,7]]},"546":{"position":[[977,7],[1091,8],[2388,7]]},"566":{"position":[[1641,8],[3747,8]]},"568":{"position":[[260,8],[737,7]]},"574":{"position":[[204,7],[487,7]]},"606":{"position":[[4186,7],[4230,7]]}}}],["acr",{"_index":289,"t":{"493":{"position":[[1037,3]]},"606":{"position":[[34,3]]}}}],["activ",{"_index":785,"t":{"548":{"position":[[66,6],[592,6]]}}}],["actual",{"_index":1095,"t":{"572":{"position":[[221,6]]},"574":{"position":[[124,6]]},"620":{"position":[[3721,6]]}}}],["ad",{"_index":189,"t":{"485":{"position":[[637,5]]},"491":{"position":[[7,6]]},"496":{"position":[[66,6]]},"514":{"position":[[79,5]]},"526":{"position":[[2230,2]]},"544":{"position":[[294,2]]},"564":{"position":[[4,6],[49,2]]},"596":{"position":[[939,5]]},"606":{"position":[[10213,2],[10928,5]]},"608":{"position":[[750,6]]}}}],["add",{"_index":126,"t":{"483":{"position":[[148,3]]},"487":{"position":[[432,3]]},"548":{"position":[[0,3],[809,3],[979,3]]},"550":{"position":[[64,3]]},"560":{"position":[[223,3],[431,3],[1312,3]]},"564":{"position":[[74,3]]},"566":{"position":[[605,3],[1296,4],[1989,3],[2336,3],[2567,3]]},"574":{"position":[[0,3]]},"580":{"position":[[80,3]]},"602":{"position":[[332,3]]},"606":{"position":[[6736,4],[14795,3]]}}}],["add_head",{"_index":1198,"t":{"592":{"position":[[888,10]]},"620":{"position":[[1608,10],[2496,10],[2539,10]]}}}],["addedto",{"_index":331,"t":{"498":{"position":[[667,7],[902,7]]}}}],["addit",{"_index":552,"t":{"524":{"position":[[1553,10],[1614,8]]},"554":{"position":[[206,10],[775,8]]},"566":{"position":[[2066,10]]},"574":{"position":[[559,10]]},"606":{"position":[[6534,10]]},"620":{"position":[[1968,10]]}}}],["addition",{"_index":1329,"t":{"606":{"position":[[4278,12]]}}}],["address",{"_index":476,"t":{"522":{"position":[[1301,9]]},"524":{"position":[[230,7]]},"534":{"position":[[146,7],[268,7]]},"546":{"position":[[1804,7]]},"578":{"position":[[95,9],[199,9]]},"594":{"position":[[465,7],[496,8]]},"606":{"position":[[4487,7],[4611,8],[4668,7],[4777,8],[5785,7],[7100,7],[8199,7],[8218,7],[14146,8],[14239,7]]},"614":{"position":[[81,7],[875,8]]},"616":{"position":[[730,8]]},"624":{"position":[[1150,8]]},"626":{"position":[[1917,8],[2082,8]]}}}],["address=\"0.0.0.0:4180",{"_index":1184,"t":{"592":{"position":[[312,22]]}}}],["address=\"http://:4180",{"_index":1185,"t":{"592":{"position":[[345,23]]}}}],["adf",{"_index":567,"t":{"526":{"position":[[739,4],[2237,4]]},"528":{"position":[[128,5]]},"544":{"position":[[232,4]]},"550":{"position":[[9,4],[445,4]]}}}],["adfsconfig",{"_index":565,"t":{"526":{"position":[[676,10],[699,10]]}}}],["adfsopt",{"_index":566,"t":{"526":{"position":[[687,11]]}}}],["admin",{"_index":412,"t":{"512":{"position":[[164,5]]},"546":{"position":[[1300,5],[1736,5],[1856,5],[1942,5]]},"548":{"position":[[740,5]]},"556":{"position":[[1482,5],[1548,7]]},"570":{"position":[[574,6],[612,6]]},"606":{"position":[[4003,5],[4033,5]]}}}],["adminemail",{"_index":411,"t":{"512":{"position":[[121,10],[139,10]]}}}],["administr",{"_index":772,"t":{"546":{"position":[[1783,14]]},"550":{"position":[[14,14]]},"566":{"position":[[1626,14]]}}}],["advisori",{"_index":123,"t":{"483":{"position":[[23,10],[182,8],[411,9]]}}}],["ae",{"_index":1274,"t":{"602":{"position":[[640,3]]}}}],["affect",{"_index":119,"t":{"481":{"position":[[688,8]]}}}],["afterward",{"_index":1231,"t":{"596":{"position":[[334,10]]}}}],["ag",{"_index":1346,"t":{"606":{"position":[[5098,3]]},"612":{"position":[[237,3],[256,5]]}}}],["again",{"_index":1230,"t":{"596":{"position":[[240,6]]}}}],["against",{"_index":36,"t":{"477":{"position":[[404,7]]},"524":{"position":[[1433,7]]},"546":{"position":[[2192,7],[2455,7]]},"560":{"position":[[35,7]]},"566":{"position":[[163,7]]},"570":{"position":[[50,7]]},"606":{"position":[[323,7],[4304,7]]}}}],["age=2592000",{"_index":1200,"t":{"592":{"position":[[929,12]]}}}],["agenc",{"_index":1010,"t":{"568":{"position":[[80,7],[718,6]]}}}],["agent",{"_index":1213,"t":{"594":{"position":[[263,6]]},"606":{"position":[[8094,5],[8114,5],[8182,6]]},"612":{"position":[[753,6]]},"614":{"position":[[1372,5]]},"616":{"position":[[1444,5]]}}}],["agre",{"_index":136,"t":{"483":{"position":[[441,6]]}}}],["agreement",{"_index":911,"t":{"562":{"position":[[124,9]]}}}],["ajax",{"_index":176,"t":{"485":{"position":[[335,4]]}}}],["algorithm:secretkey",{"_index":1375,"t":{"606":{"position":[[11400,21]]}}}],["alia",{"_index":384,"t":{"506":{"position":[[8,7]]},"528":{"position":[[8,7]]},"530":{"position":[[12,7]]}}}],["allow",{"_index":163,"t":{"485":{"position":[[143,8]]},"493":{"position":[[1087,7],[1116,7]]},"498":{"position":[[85,6]]},"504":{"position":[[38,6]]},"508":{"position":[[392,6]]},"522":{"position":[[295,7],[459,7],[609,7],[1404,6],[1529,7],[2096,5],[2132,5],[2282,5]]},"524":{"position":[[868,6],[1389,6]]},"540":{"position":[[788,6],[1613,5]]},"542":{"position":[[188,8]]},"548":{"position":[[404,5]]},"554":{"position":[[473,7],[1180,5],[1473,5],[1628,5]]},"556":{"position":[[1090,7]]},"558":{"position":[[715,7],[781,7]]},"566":{"position":[[2784,7],[4106,8]]},"568":{"position":[[2350,5]]},"570":{"position":[[23,6]]},"574":{"position":[[456,6]]},"580":{"position":[[117,5]]},"582":{"position":[[9,5]]},"598":{"position":[[175,7],[237,7],[299,7]]},"606":{"position":[[3538,5],[5734,5],[5876,5],[6565,7],[10339,6],[13327,7],[13428,7],[13693,7],[13781,5],[13894,5],[14525,5],[14627,8],[14655,8],[14767,5],[14850,5]]},"620":{"position":[[33,6]]},"624":{"position":[[38,6]]}}}],["allowed_email",{"_index":1244,"t":{"598":{"position":[[259,15]]}}}],["allowed_email_domain",{"_index":1243,"t":{"598":{"position":[[190,22]]}}}],["allowed_group",{"_index":1242,"t":{"598":{"position":[[135,15]]}}}],["allowedgroup",{"_index":602,"t":{"526":{"position":[[2371,13],[2394,13]]}}}],["allowedto",{"_index":554,"t":{"524":{"position":[[1583,9]]}}}],["alon",{"_index":1383,"t":{"606":{"position":[[11866,5]]}}}],["alpha",{"_index":197,"t":{"487":{"position":[[44,5],[297,5],[353,5],[665,5]]},"489":{"position":[[15,5],[153,5],[194,5]]},"491":{"position":[[24,5],[92,5],[189,5],[510,5]]},"493":{"position":[[106,5],[1408,5],[1524,5]]},"498":{"position":[[22,5],[108,5],[267,6]]}}}],["alphaopt",{"_index":224,"t":{"487":{"position":[[607,12]]},"498":{"position":[[0,12]]},"514":{"position":[[13,13]]},"530":{"position":[[33,13]]},"534":{"position":[[13,13]]},"542":{"position":[[13,13]]}}}],["altern",{"_index":496,"t":{"522":{"position":[[1732,13]]},"572":{"position":[[496,14]]},"596":{"position":[[523,14]]}}}],["alway",{"_index":461,"t":{"522":{"position":[[532,6]]},"590":{"position":[[745,6]]}}}],["amazon",{"_index":1178,"t":{"592":{"position":[[61,6],[255,6]]}}}],["amd64",{"_index":23,"t":{"477":{"position":[[251,7],[553,6]]}}}],["amount",{"_index":1391,"t":{"606":{"position":[[13252,6]]}}}],["anchor",{"_index":645,"t":{"538":{"position":[[625,6]]}}}],["and/or",{"_index":487,"t":{"522":{"position":[[1537,6]]}}}],["anoth",{"_index":342,"t":{"498":{"position":[[1037,7]]},"544":{"position":[[82,7]]},"546":{"position":[[176,7]]},"548":{"position":[[732,7]]}}}],["anyth",{"_index":462,"t":{"522":{"position":[[551,8]]}}}],["apach",{"_index":1433,"t":{"612":{"position":[[668,6]]}}}],["api",{"_index":414,"t":{"512":{"position":[[189,3]]},"546":{"position":[[250,4],[1263,5],[1285,5],[1326,4],[1742,3]]},"548":{"position":[[204,4]]},"560":{"position":[[78,3]]},"562":{"position":[[368,3]]},"566":{"position":[[1979,3]]},"606":{"position":[[4058,3]]}}}],["api/v1",{"_index":1115,"t":{"576":{"position":[[635,9]]}}}],["app",{"_index":788,"t":{"548":{"position":[[109,4],[152,3],[344,4],[459,4],[563,4],[804,4],[974,4]]},"552":{"position":[[16,3]]},"566":{"position":[[2215,5],[2701,4],[3925,3]]},"568":{"position":[[1334,3]]},"594":{"position":[[820,3]]}}}],["appear",{"_index":311,"t":{"496":{"position":[[0,8]]},"500":{"position":[[0,8]]},"502":{"position":[[0,8]]},"504":{"position":[[0,8]]},"506":{"position":[[16,8]]},"508":{"position":[[0,8]]},"510":{"position":[[0,8]]},"512":{"position":[[0,8]]},"514":{"position":[[0,8]]},"516":{"position":[[0,8]]},"518":{"position":[[0,8]]},"520":{"position":[[0,8]]},"522":{"position":[[0,8]]},"524":{"position":[[0,8]]},"526":{"position":[[0,8]]},"528":{"position":[[16,8]]},"530":{"position":[[20,8]]},"532":{"position":[[0,8]]},"534":{"position":[[0,8]]},"536":{"position":[[0,8]]},"538":{"position":[[0,8]]},"540":{"position":[[0,8]]},"542":{"position":[[0,8]]}}}],["append",{"_index":1436,"t":{"612":{"position":[[835,7]]},"620":{"position":[[2149,6]]}}}],["appli",{"_index":431,"t":{"514":{"position":[[428,7]]}}}],["applic",{"_index":51,"t":{"477":{"position":[[603,11]]},"544":{"position":[[35,11]]},"546":{"position":[[534,12],[547,11]]},"548":{"position":[[7,12],[212,11],[478,11]]},"550":{"position":[[74,11],[142,11],[174,12],[282,11]]},"560":{"position":[[230,12],[343,11],[468,12],[724,11]]},"564":{"position":[[14,11],[81,12],[124,10]]},"566":{"position":[[1817,13],[1890,12],[2169,11],[2255,11],[2391,11],[2542,12],[2571,12],[2668,11],[2989,12],[3549,11],[3806,12],[3876,11]]},"568":{"position":[[467,11],[559,11],[779,11],[3018,11],[3109,11]]},"572":{"position":[[19,11],[108,12]]},"576":{"position":[[13,12]]},"592":{"position":[[532,12]]},"596":{"position":[[228,11]]},"606":{"position":[[9144,10]]}}}],["application.y",{"_index":346,"t":{"498":{"position":[[1268,15]]}}}],["application/json",{"_index":179,"t":{"485":{"position":[[371,17]]}}}],["approach",{"_index":1168,"t":{"590":{"position":[[495,8]]}}}],["appropri",{"_index":746,"t":{"546":{"position":[[594,11]]},"554":{"position":[[1750,11]]},"556":{"position":[[421,11]]},"558":{"position":[[490,11]]},"560":{"position":[[1107,11]]},"586":{"position":[[1239,14],[1442,14]]}}}],["approv",{"_index":287,"t":{"493":{"position":[[1005,8]]},"606":{"position":[[76,8],[7619,8]]}}}],["approval_prompt",{"_index":1286,"t":{"606":{"position":[[105,15]]}}}],["apps/oauth2",{"_index":1085,"t":{"570":{"position":[[351,15]]}}}],["aren't",{"_index":1368,"t":{"606":{"position":[[10547,6]]}}}],["arg",{"_index":943,"t":{"566":{"position":[[949,5]]}}}],["argument",{"_index":1082,"t":{"570":{"position":[[218,9]]},"604":{"position":[[19,8],[116,8]]},"610":{"position":[[19,8],[180,8]]}}}],["arm64",{"_index":25,"t":{"477":{"position":[[269,5]]}}}],["armv6",{"_index":24,"t":{"477":{"position":[[259,5]]}}}],["around",{"_index":484,"t":{"522":{"position":[[1493,6]]}}}],["ask",{"_index":172,"t":{"485":{"position":[[256,5]]}}}],["assembl",{"_index":1267,"t":{"602":{"position":[[347,8]]}}}],["assemblynam",{"_index":1269,"t":{"602":{"position":[[390,12]]}}}],["assign",{"_index":774,"t":{"546":{"position":[[1835,6]]},"566":{"position":[[2926,11],[4073,12]]}}}],["assum",{"_index":1021,"t":{"568":{"position":[[526,6]]}}}],["attacksbetweem",{"_index":688,"t":{"540":{"position":[[1647,14]]}}}],["attempt",{"_index":307,"t":{"493":{"position":[[1338,10]]},"606":{"position":[[168,8]]},"614":{"position":[[99,10],[1062,8]]}}}],["attent",{"_index":100,"t":{"481":{"position":[[294,9]]}}}],["attribut",{"_index":1044,"t":{"568":{"position":[[1446,9]]},"606":{"position":[[1794,9]]},"620":{"position":[[2101,10]]}}}],["aud",{"_index":550,"t":{"524":{"position":[[1465,3]]},"606":{"position":[[2490,3],[6492,5],[12141,3]]}}}],["audienc",{"_index":553,"t":{"524":{"position":[[1564,9]]},"558":{"position":[[357,10],[388,8],[417,8]]},"566":{"position":[[2225,9]]},"606":{"position":[[6431,8],[6483,8],[6511,8],[6545,9]]}}}],["audienceclaim",{"_index":548,"t":{"524":{"position":[[1351,14],[1375,13]]}}}],["auth",{"_index":156,"t":{"485":{"position":[[65,4]]},"493":{"position":[[630,4],[669,4]]},"504":{"position":[[412,4],[470,4]]},"516":{"position":[[633,4],[691,4]]},"546":{"position":[[1015,4],[1271,6]]},"548":{"position":[[1240,4]]},"550":{"position":[[450,4]]},"554":{"position":[[179,4]]},"556":{"position":[[65,4]]},"560":{"position":[[5,4]]},"596":{"position":[[572,4],[633,4]]},"606":{"position":[[131,4],[184,4],[466,4],[535,4],[6747,4],[6916,4],[6942,5],[7278,4],[10706,4],[10727,4],[10750,4],[10775,4],[10899,4],[11088,4],[11113,4],[11508,4],[11587,4],[11635,4],[11736,4],[11895,4]]},"612":{"position":[[519,4]]},"614":{"position":[[606,4],[790,4],[1057,4],[1473,4],[1524,4]]},"616":{"position":[[1545,4]]},"620":{"position":[[94,5],[477,4],[578,4]]},"624":{"position":[[437,4],[631,4],[912,4],[1131,5]]},"626":{"position":[[556,4],[841,4],[1111,4],[1317,4],[1670,4],[1889,4],[2003,4],[2051,4],[2179,4]]}}}],["auth/pass_basic_auth",{"_index":254,"t":{"493":{"position":[[323,20]]}}}],["auth/set_basic_auth",{"_index":260,"t":{"493":{"position":[[478,19]]}}}],["auth_cooki",{"_index":1498,"t":{"620":{"position":[[1568,12],[1630,13],[2252,13],[2305,13]]}}}],["auth_cookie_name_0",{"_index":1507,"t":{"620":{"position":[[2285,19],[2518,20]]}}}],["auth_cookie_name_1",{"_index":1508,"t":{"620":{"position":[[2323,19],[2561,20]]}}}],["auth_cookie_name_1=$auth_cookie_name_upstream_1$1",{"_index":1509,"t":{"620":{"position":[[2343,52]]}}}],["auth_cookie_name_upstream_1",{"_index":1504,"t":{"620":{"position":[[2014,28],[2463,30]]}}}],["auth_request",{"_index":1228,"t":{"594":{"position":[[1072,12]]},"606":{"position":[[10841,12],[11051,12],[11159,12]]},"620":{"position":[[10,12],[804,12],[927,12],[1538,12],[1871,12]]}}}],["auth_request_set",{"_index":1494,"t":{"620":{"position":[[1098,16],[1157,16],[1360,16],[1551,16],[1997,16],[2857,16],[3340,16]]}}}],["authent",{"_index":168,"t":{"485":{"position":[[200,14],[294,14],[458,14],[657,14]]},"498":{"position":[[444,14],[746,13],[1134,13]]},"526":{"position":[[1871,14]]},"540":{"position":[[1833,15]]},"546":{"position":[[2497,14]]},"554":{"position":[[234,14]]},"568":{"position":[[2935,13]]},"570":{"position":[[37,12]]},"574":{"position":[[498,13]]},"578":{"position":[[111,13]]},"582":{"position":[[24,14]]},"584":{"position":[[802,12]]},"592":{"position":[[494,12]]},"594":{"position":[[109,14]]},"596":{"position":[[154,14],[294,14]]},"606":{"position":[[153,14],[224,14],[277,13],[310,12],[2159,12],[2245,12],[4291,12],[5694,14],[7224,15],[11538,14],[11654,14],[11768,14],[11946,14],[13731,15],[13910,14]]},"608":{"position":[[291,13]]},"612":{"position":[[419,15]]},"614":{"position":[[0,14],[113,13],[365,13],[440,12],[514,14],[1013,13]]},"620":{"position":[[49,12]]},"624":{"position":[[56,12]]},"626":{"position":[[273,13]]}}}],["authenticationprovid",{"_index":340,"t":{"498":{"position":[[994,22]]}}}],["autherror",{"_index":1448,"t":{"614":{"position":[[464,9]]}}}],["authfailur",{"_index":1446,"t":{"614":{"position":[[406,11]]}}}],["author",{"_index":258,"t":{"493":{"position":[[421,13],[536,13]]},"546":{"position":[[606,10],[688,10],[994,11]]},"554":{"position":[[67,13]]},"556":{"position":[[1031,14]]},"564":{"position":[[211,13]]},"566":{"position":[[1757,13],[1860,13],[1993,13],[2098,13],[2508,13],[2807,13],[3414,13],[4115,13],[4256,13]]},"568":{"position":[[3369,14]]},"578":{"position":[[3,9],[68,9],[179,9]]},"606":{"position":[[6809,13],[6869,13],[10967,13],[10997,13],[11971,13]]},"620":{"position":[[1667,13]]},"626":{"position":[[2031,13],[2207,13]]}}}],["authorizationnginx.ingress.kubernetes.io/auth",{"_index":1520,"t":{"620":{"position":[[3120,45]]}}}],["authresponsehead",{"_index":1574,"t":{"626":{"position":[[1978,20],[2154,20]]}}}],["authsuccess",{"_index":1444,"t":{"614":{"position":[[339,11],[1494,11]]}}}],["auto",{"_index":1569,"t":{"626":{"position":[[776,4]]}}}],["automat",{"_index":1229,"t":{"596":{"position":[[186,13]]}}}],["automaticallyanchor",{"_index":640,"t":{"538":{"position":[[510,21]]}}}],["avail",{"_index":27,"t":{"477":{"position":[[280,10]]},"489":{"position":[[240,10]]},"493":{"position":[[85,9]]},"498":{"position":[[136,9]]},"518":{"position":[[195,9]]},"566":{"position":[[2037,9]]},"568":{"position":[[334,9]]},"582":{"position":[[198,9],[249,9]]},"586":{"position":[[1271,9]]},"608":{"position":[[737,9],[871,9],[950,9]]},"614":{"position":[[766,9]]},"616":{"position":[[618,9]]},"618":{"position":[[490,9]]}}}],["azur",{"_index":302,"t":{"493":{"position":[[1284,6]]},"526":{"position":[[660,5],[2223,6]]},"528":{"position":[[134,6]]},"544":{"position":[[226,5],[288,5]]},"548":{"position":[[59,6],[586,5],[1234,5]]},"564":{"position":[[43,5]]},"606":{"position":[[364,5],[5954,5],[10206,6]]},"620":{"position":[[3676,7]]}}}],["azureconfig",{"_index":563,"t":{"526":{"position":[[594,11],[619,11]]}}}],["azureopt",{"_index":564,"t":{"526":{"position":[[606,12]]}}}],["b",{"_index":8,"t":{"477":{"position":[[78,2]]},"606":{"position":[[4368,1]]},"626":{"position":[[463,2],[1044,2],[1517,1]]}}}],["back",{"_index":1138,"t":{"586":{"position":[[100,4],[172,4]]}}}],["backend",{"_index":1122,"t":{"582":{"position":[[224,9],[259,8]]},"584":{"position":[[19,7],[42,7],[141,8],[366,7]]},"586":{"position":[[18,7],[1291,7]]},"606":{"position":[[10644,8]]},"620":{"position":[[1041,8],[1352,7]]},"624":{"position":[[393,7],[659,7],[769,8],[837,8],[1279,7]]},"626":{"position":[[527,7],[812,7],[1139,7],[1345,7],[1455,8],[1527,8],[1595,8]]}}}],["backport",{"_index":148,"t":{"483":{"position":[[632,8]]}}}],["backslash",{"_index":495,"t":{"522":{"position":[[1677,9]]}}}],["backup",{"_index":1344,"t":{"606":{"position":[[5034,6],[5169,7]]},"612":{"position":[[266,6],[293,9],[310,6]]}}}],["balanc",{"_index":1180,"t":{"592":{"position":[[100,10],[241,8],[290,10]]}}}],["banner",{"_index":1324,"t":{"606":{"position":[[2962,6],[2990,6],[3032,7]]}}}],["bar",{"_index":658,"t":{"540":{"position":[[603,8],[641,5]]}}}],["base",{"_index":220,"t":{"487":{"position":[[505,5]]},"489":{"position":[[57,5]]},"498":{"position":[[523,5]]},"540":{"position":[[1386,7]]},"556":{"position":[[1025,5]]},"566":{"position":[[3391,5],[3929,4]]},"606":{"position":[[13198,5]]},"608":{"position":[[1243,5]]}}}],["base/dir",{"_index":683,"t":{"540":{"position":[[1467,12]]}}}],["base64",{"_index":439,"t":{"516":{"position":[[168,6]]},"532":{"position":[[213,6]]},"602":{"position":[[241,6],[302,6],[586,6]]},"606":{"position":[[1671,6]]}}}],["base64url",{"_index":1146,"t":{"586":{"position":[[457,9]]}}}],["bash",{"_index":1250,"t":{"602":{"position":[[73,4]]}}}],["basic",{"_index":253,"t":{"493":{"position":[[317,5],[472,5],[624,5]]},"504":{"position":[[406,5],[464,5]]},"516":{"position":[[627,5],[685,5]]},"606":{"position":[[460,5],[529,5],[6910,5],[6936,5],[7272,5],[8054,5],[8141,5],[11082,5],[11107,5]]}}}],["basicauthpassword",{"_index":377,"t":{"504":{"position":[[330,17],[361,17]]},"516":{"position":[[551,17],[582,17]]}}}],["baz",{"_index":659,"t":{"540":{"position":[[648,12],[690,4],[957,11]]}}}],["baz/abc/123",{"_index":669,"t":{"540":{"position":[[1021,12]]}}}],["bcrypt",{"_index":1331,"t":{"606":{"position":[[4374,6]]}}}],["bearer",{"_index":167,"t":{"485":{"position":[[181,6]]},"606":{"position":[[2412,6],[6883,6],[11011,6],[12045,6],[12106,6]]}}}],["becom",{"_index":380,"t":{"504":{"position":[[453,6]]},"516":{"position":[[674,6]]},"610":{"position":[[417,7],[481,7]]}}}],["befor",{"_index":212,"t":{"487":{"position":[[282,6]]},"491":{"position":[[0,6]]},"493":{"position":[[1488,6]]},"540":{"position":[[829,6],[1050,6]]},"606":{"position":[[5304,6]]}}}],["beforward",{"_index":507,"t":{"522":{"position":[[2299,11]]}}}],["behind",{"_index":61,"t":{"477":{"position":[[744,6]]},"606":{"position":[[10258,6]]}}}],["believ",{"_index":83,"t":{"481":{"position":[[12,7]]}}}],["beload",{"_index":371,"t":{"504":{"position":[[204,8]]},"516":{"position":[[425,8]]}}}],["belong",{"_index":408,"t":{"508":{"position":[[454,6]]},"554":{"position":[[510,6],[1535,6]]},"606":{"position":[[3591,6]]}}}],["below",{"_index":222,"t":{"487":{"position":[[541,5],[728,6],[863,5]]},"489":{"position":[[104,6],[271,5]]},"566":{"position":[[345,6]]},"592":{"position":[[53,7]]},"602":{"position":[[50,5]]},"606":{"position":[[14892,5]]},"614":{"position":[[167,5],[324,5]]},"616":{"position":[[48,5]]},"618":{"position":[[237,6]]}}}],["beoverridden",{"_index":505,"t":{"522":{"position":[[2189,12]]}}}],["bepass",{"_index":503,"t":{"522":{"position":[[2057,8]]}}}],["between",{"_index":325,"t":{"498":{"position":[[290,7]]},"540":{"position":[[2135,7]]},"582":{"position":[[53,7]]},"606":{"position":[[2758,7]]}}}],["bewar",{"_index":211,"t":{"487":{"position":[[267,6]]},"596":{"position":[[838,6]]}}}],["bin/dex",{"_index":941,"t":{"566":{"position":[[848,7]]}}}],["binari",{"_index":4,"t":{"477":{"position":[[43,6],[160,6],[338,8]]}}}],["bindaddress",{"_index":351,"t":{"498":{"position":[[1377,11],[1685,11]]},"534":{"position":[[108,11],[127,11]]}}}],["bit",{"_index":1023,"t":{"568":{"position":[[823,4],[1057,3]]},"586":{"position":[[387,3],[438,3]]}}}],["bitbucket",{"_index":303,"t":{"493":{"position":[[1291,10]]},"526":{"position":[[832,9]]},"528":{"position":[[141,10]]},"544":{"position":[[345,9]]},"574":{"position":[[477,9],[594,9],[713,9]]}}}],["bitbucketconfig",{"_index":568,"t":{"526":{"position":[[754,15],[787,15]]}}}],["bitbucketopt",{"_index":569,"t":{"526":{"position":[[770,16]]}}}],["blank",{"_index":619,"t":{"534":{"position":[[186,5],[315,5]]}}}],["block",{"_index":498,"t":{"522":{"position":[[1763,6],[1845,5]]},"566":{"position":[[625,5]]},"614":{"position":[[294,5]]}}}],["bodi",{"_index":692,"t":{"540":{"position":[[1825,4]]},"620":{"position":[[842,4]]}}}],["bool",{"_index":316,"t":{"496":{"position":[[56,4]]},"514":{"position":[[281,4]]},"524":{"position":[[166,4],[322,4],[501,4],[849,4]]},"540":{"position":[[1502,4],[1725,4],[2250,4],[2387,4]]},"542":{"position":[[131,4]]},"606":{"position":[[144,4],[1188,4],[1703,4],[2049,4],[2289,4],[2836,4],[2890,4],[4835,4],[4997,4],[5757,4],[5871,4],[6021,4],[6619,4],[6830,4],[6921,4],[7071,4],[7332,4],[7403,4],[8402,4],[9679,4],[9798,4],[10045,4],[10238,4],[10488,4],[10695,4],[10988,4],[11093,4],[11206,4],[11445,4],[11523,4],[11914,4],[12059,4],[12246,4],[12390,4],[12496,4],[12612,4],[12711,4]]}}}],["both",{"_index":348,"t":{"498":{"position":[[1302,4],[1610,4]]},"538":{"position":[[291,5]]},"620":{"position":[[2405,4]]}}}],["bracket",{"_index":1335,"t":{"606":{"position":[[4580,8],[4746,8]]}}}],["break",{"_index":202,"t":{"487":{"position":[[89,8]]}}}],["bring",{"_index":99,"t":{"481":{"position":[[281,5]]}}}],["brows",{"_index":230,"t":{"487":{"position":[[842,6]]}}}],["browser",{"_index":1070,"t":{"568":{"position":[[2922,8]]},"606":{"position":[[14744,8]]}}}],["browserxssfilt",{"_index":1553,"t":{"624":{"position":[[975,17]]},"626":{"position":[[1733,17]]}}}],["bs=32",{"_index":1257,"t":{"602":{"position":[[213,5]]}}}],["buffer",{"_index":700,"t":{"540":{"position":[[2165,6]]},"606":{"position":[[2784,7]]}}}],["build",{"_index":9,"t":{"477":{"position":[[81,5]]},"568":{"position":[[2563,6],[2581,5]]},"590":{"position":[[881,8]]}}}],["built",{"_index":923,"t":{"566":{"position":[[157,5]]}}}],["bundl",{"_index":1045,"t":{"568":{"position":[[1456,7]]}}}],["button",{"_index":1385,"t":{"606":{"position":[[12383,6]]}}}],["button=tru",{"_index":1054,"t":{"568":{"position":[[1902,11]]}}}],["bypass",{"_index":1380,"t":{"606":{"position":[[11647,6],[11761,6],[12251,6],[13903,6]]}}}],["bysom",{"_index":638,"t":{"538":{"position":[[457,6]]}}}],["byte",{"_index":437,"t":{"516":{"position":[[145,6]]},"532":{"position":[[190,6]]},"602":{"position":[[581,4],[633,6]]},"616":{"position":[[1215,5]]}}}],["c",{"_index":17,"t":{"477":{"position":[[182,2],[513,1]]},"602":{"position":[[115,1]]}}}],["c=us/st=washington/l=dc/o=gsa/ou=18f/cn=localhost",{"_index":1040,"t":{"568":{"position":[[1193,53]]}}}],["ca",{"_index":275,"t":{"493":{"position":[[865,2]]},"526":{"position":[[1707,2]]},"606":{"position":[[7700,2],[7731,2]]}}}],["cafil",{"_index":591,"t":{"526":{"position":[[1660,7],[1677,7]]}}}],["call",{"_index":415,"t":{"512":{"position":[[193,5]]},"546":{"position":[[1929,5]]},"606":{"position":[[4062,5]]}}}],["callback",{"_index":824,"t":{"554":{"position":[[81,8]]},"566":{"position":[[594,10]]},"572":{"position":[[121,8]]},"574":{"position":[[28,9]]},"594":{"position":[[860,8]]}}}],["caller",{"_index":464,"t":{"522":{"position":[[705,6]]}}}],["capitalis",{"_index":1425,"t":{"610":{"position":[[108,12]]}}}],["captur",{"_index":654,"t":{"540":{"position":[[507,8],[699,7],[885,7]]}}}],["case",{"_index":111,"t":{"481":{"position":[[533,4]]},"485":{"position":[[398,4]]},"540":{"position":[[1214,4]]},"568":{"position":[[3451,5]]},"570":{"position":[[839,5]]},"580":{"position":[[90,4]]},"586":{"position":[[1079,5]]},"606":{"position":[[12356,4]]}}}],["caseadd",{"_index":1268,"t":{"602":{"position":[[376,7]]}}}],["center",{"_index":731,"t":{"546":{"position":[[230,6],[314,6],[421,6]]}}}],["cert",{"_index":629,"t":{"536":{"position":[[260,4],[278,4]]},"590":{"position":[[65,4],[306,4]]},"606":{"position":[[12851,4]]}}}],["cert.pem",{"_index":1035,"t":{"568":{"position":[[1160,8]]}}}],["certif",{"_index":355,"t":{"498":{"position":[[1480,11],[1788,11]]},"526":{"position":[[1710,12]]},"534":{"position":[[400,11]]},"536":{"position":[[68,11],[294,11]]},"568":{"position":[[1008,11]]},"606":{"position":[[7734,12],[12520,12],[12636,12],[12876,11]]}}}],["certresolv",{"_index":1542,"t":{"624":{"position":[[447,13],[672,13]]},"626":{"position":[[624,13],[907,13],[1152,13],[1358,13]]}}}],["challeng",{"_index":606,"t":{"526":{"position":[[2513,9]]},"606":{"position":[[744,9],[782,10]]}}}],["chang",{"_index":203,"t":{"487":{"position":[[98,7],[202,8]]},"498":{"position":[[283,6]]},"524":{"position":[[783,6]]},"560":{"position":[[82,8]]},"572":{"position":[[651,6]]},"594":{"position":[[150,7]]},"606":{"position":[[1307,7]]}}}],["channel",{"_index":1313,"t":{"606":{"position":[[2339,7]]}}}],["charact",{"_index":486,"t":{"522":{"position":[[1514,10],[1721,10],[1881,10]]}}}],["check",{"_index":158,"t":{"485":{"position":[[80,7]]},"538":{"position":[[134,7]]},"546":{"position":[[2184,7],[2447,7]]},"594":{"position":[[391,6]]},"606":{"position":[[8067,6],[8154,6],[8171,5]]}}}],["checkedaft",{"_index":530,"t":{"524":{"position":[[655,12]]}}}],["checksum",{"_index":38,"t":{"477":{"position":[[430,8]]}}}],["chomp",{"_index":497,"t":{"522":{"position":[[1754,8]]}}}],["choos",{"_index":0,"t":{"477":{"position":[[0,6]]},"498":{"position":[[1288,6],[1596,6]]},"546":{"position":[[108,6],[243,6],[286,6],[327,6],[434,6],[497,6],[522,6],[577,6],[801,6],[1278,6],[1764,6],[2020,6]]},"548":{"position":[[52,6],[187,6]]}}}],["cidr",{"_index":1394,"t":{"606":{"position":[[13879,4]]}}}],["cipher",{"_index":1175,"t":{"590":{"position":[[797,6]]}}}],["claim",{"_index":370,"t":{"504":{"position":[[75,5],[123,5],[136,5],[161,5],[393,5],[442,5]]},"516":{"position":[[344,5],[357,5],[382,5],[614,5],[663,5]]},"524":{"position":[[561,5],[1101,5],[1201,5],[1302,5],[1410,5],[1469,5]]},"544":{"position":[[477,7],[508,5]]},"556":{"position":[[361,5]]},"558":{"position":[[303,5]]},"566":{"position":[[1782,6]]},"606":{"position":[[6067,5],[6282,5],[6306,5],[6360,5],[6384,5],[6440,5],[6464,5]]}}}],["claim/user_id_claim",{"_index":291,"t":{"493":{"position":[[1067,19]]}}}],["claimsourc",{"_index":368,"t":{"504":{"position":[[26,11]]},"532":{"position":[[13,12]]}}}],["clear",{"_index":1222,"t":{"594":{"position":[[601,6],[656,5]]}}}],["click",{"_index":764,"t":{"546":{"position":[[1291,5]]},"548":{"position":[[138,5],[283,5],[494,5],[568,5],[921,5]]},"550":{"position":[[199,5]]},"566":{"position":[[1983,5],[2647,5]]}}}],["client",{"_index":268,"t":{"493":{"position":[[712,6],[732,6],[765,6]]},"524":{"position":[[1445,6],[1630,6]]},"526":{"position":[[140,6],[269,6],[441,6]]},"546":{"position":[[511,6],[834,6],[848,6],[1228,6],[1490,6],[1914,6]]},"548":{"position":[[1083,6],[1124,6]]},"550":{"position":[[239,6],[250,6],[349,6],[390,6]]},"556":{"position":[[103,6],[292,6],[460,6],[498,6]]},"558":{"position":[[11,6],[73,6],[234,6],[381,6],[438,6],[534,6],[565,6],[847,6]]},"560":{"position":[[748,6],[777,6]]},"566":{"position":[[1011,6],[1034,6],[2891,6],[2905,6],[4169,6],[4183,6]]},"568":{"position":[[1587,6],[3565,6],[3589,6]]},"570":{"position":[[414,6],[428,6],[548,6],[582,6]]},"572":{"position":[[338,6],[352,6],[442,6],[466,6]]},"574":{"position":[[275,6],[289,6],[376,6],[400,6]]},"576":{"position":[[175,6],[189,6],[355,6],[405,6]]},"584":{"position":[[187,6],[340,6],[481,6]]},"586":{"position":[[109,6]]},"590":{"position":[[435,6],[453,6]]},"592":{"position":[[1424,6],[1442,6]]},"606":{"position":[[549,6],[576,6],[630,6],[661,6],[677,6],[723,6],[4564,8],[4730,8],[8516,6],[8584,7],[12163,6],[14013,6]]},"614":{"position":[[677,11],[833,6],[1408,7]]},"616":{"position":[[413,11],[688,6],[1480,7]]},"626":{"position":[[2276,6],[2307,6]]}}}],["client'",{"_index":855,"t":{"556":{"position":[[518,8]]},"558":{"position":[[550,8],[585,8]]}}}],["client/remot",{"_index":1454,"t":{"614":{"position":[[858,13]]},"616":{"position":[[713,13]]}}}],["client_id",{"_index":983,"t":{"566":{"position":[[3499,9],[4564,13]]},"576":{"position":[[368,9]]}}}],["client_secret",{"_index":984,"t":{"566":{"position":[[3513,13]]},"576":{"position":[[422,13]]}}}],["clientid",{"_index":556,"t":{"526":{"position":[[102,8],[118,8]]}}}],["clientsecret",{"_index":558,"t":{"526":{"position":[[223,12],[243,12],[475,12]]}}}],["clientsecretfil",{"_index":559,"t":{"526":{"position":[[356,16],[380,16]]}}}],["closest",{"_index":649,"t":{"540":{"position":[[364,7]]}}}],["cloud",{"_index":1062,"t":{"568":{"position":[[2259,5]]},"592":{"position":[[80,5]]}}}],["cloud/dock",{"_index":1058,"t":{"568":{"position":[[2179,12]]}}}],["cluster",{"_index":1157,"t":{"586":{"position":[[1260,7],[1418,7]]},"606":{"position":[[8852,7],[8904,7],[8993,7],[9671,7],[9701,8],[9727,7]]}}}],["cluster=tru",{"_index":1159,"t":{"586":{"position":[[1367,12],[1515,12]]}}}],["code",{"_index":605,"t":{"526":{"position":[[2508,4]]},"540":{"position":[[2005,4]]},"566":{"position":[[2821,4],[4129,4]]},"606":{"position":[[739,4],[777,4]]},"616":{"position":[[1269,4]]}}}],["codematch",{"_index":693,"t":{"540":{"position":[[1864,12]]}}}],["collabor",{"_index":127,"t":{"483":{"position":[[161,12]]},"508":{"position":[[217,13],[494,13]]},"554":{"position":[[310,13],[550,14],[934,13],[1104,13],[1456,13],[1575,14]]},"606":{"position":[[3327,13],[3451,13],[3631,13]]}}}],["collaboratorsit",{"_index":405,"t":{"508":{"position":[[315,15]]}}}],["collect",{"_index":614,"t":{"530":{"position":[[62,10]]},"542":{"position":[[47,10]]}}}],["combin",{"_index":1396,"t":{"606":{"position":[[13961,8]]},"612":{"position":[[675,8]]}}}],["come",{"_index":628,"t":{"536":{"position":[[242,4],[338,4]]}}}],["comma",{"_index":835,"t":{"554":{"position":[[889,5],[1605,5],[1669,5]]},"560":{"position":[[1025,5]]},"598":{"position":[[151,5],[213,5],[275,5]]},"606":{"position":[[2627,5],[3281,5],[3747,5]]},"608":{"position":[[1057,5]]}}}],["command",{"_index":55,"t":{"477":{"position":[[673,7]]},"570":{"position":[[205,7]]},"572":{"position":[[693,7]]},"586":{"position":[[731,8]]},"590":{"position":[[135,7]]},"592":{"position":[[1172,7]]},"600":{"position":[[35,7],[135,7]]},"602":{"position":[[56,9]]},"604":{"position":[[6,7]]},"610":{"position":[[6,7],[365,7]]},"612":{"position":[[140,8]]}}}],["commandlin",{"_index":1069,"t":{"568":{"position":[[2830,12]]}}}],["common",{"_index":361,"t":{"500":{"position":[[99,6],[152,8]]},"564":{"position":[[204,6]]},"606":{"position":[[411,6],[449,8]]}}}],["commun",{"_index":66,"t":{"479":{"position":[[23,9]]}}}],["compat",{"_index":1356,"t":{"606":{"position":[[5973,14]]}}}],["complet",{"_index":1129,"t":{"584":{"position":[[405,10]]}}}],["compos",{"_index":103,"t":{"481":{"position":[[353,7]]},"586":{"position":[[230,8]]}}}],["compress",{"_index":1340,"t":{"606":{"position":[[4826,8],[4868,10]]},"612":{"position":[[332,10],[354,10]]}}}],["compris",{"_index":1149,"t":{"586":{"position":[[565,9]]}}}],["concurr",{"_index":1134,"t":{"584":{"position":[[628,12]]}}}],["confident",{"_index":849,"t":{"556":{"position":[[150,13]]},"558":{"position":[[58,14]]}}}],["config",{"_index":54,"t":{"477":{"position":[[660,6]]},"487":{"position":[[691,6]]},"489":{"position":[[159,6],[200,6]]},"491":{"position":[[30,6],[82,6],[179,6],[197,6],[487,7],[516,6],[551,6]]},"493":{"position":[[1394,6],[1414,6],[1530,6]]},"560":{"position":[[495,6]]},"566":{"position":[[3684,6],[4346,6],[4845,6]]},"572":{"position":[[545,6]]},"592":{"position":[[46,6],[645,6]]},"594":{"position":[[182,6]]},"600":{"position":[[82,6]]},"604":{"position":[[50,6],[162,6],[235,6]]},"606":{"position":[[861,6],[883,6]]},"608":{"position":[[1173,6]]},"620":{"position":[[2906,6]]}}}],["config=/etc/oauth2",{"_index":1284,"t":{"604":{"position":[[307,18]]}}}],["configur",{"_index":52,"t":{"477":{"position":[[631,9],[720,9]]},"485":{"position":[[518,10],[698,14]]},"487":{"position":[[303,13],[359,13],[447,13],[511,13],[587,14],[639,14],[671,14],[898,13]]},"489":{"position":[[21,14]]},"491":{"position":[[123,13],[318,13],[406,13]]},"493":{"position":[[112,14]]},"498":{"position":[[39,13],[169,13],[402,9],[634,9],[869,9],[1225,9],[1464,9],[1547,9],[1772,9],[1850,9]]},"522":{"position":[[48,13]]},"526":{"position":[[43,13],[556,14],[641,14],[720,14],[813,14],[902,14],[989,14],[1075,14],[1155,14],[1213,15],[1285,14]]},"534":{"position":[[49,13],[454,13]]},"540":{"position":[[53,13]]},"542":{"position":[[309,13]]},"544":{"position":[[105,9],[409,13]]},"548":{"position":[[1039,9]]},"550":{"position":[[268,9],[306,9]]},"566":{"position":[[360,9],[611,13],[1535,9],[1747,9],[1847,9],[2372,9],[3011,13],[3531,10]]},"570":{"position":[[165,14]]},"572":{"position":[[304,10]]},"574":{"position":[[442,13],[570,13]]},"586":{"position":[[1031,9],[1153,9],[1390,9]]},"588":{"position":[[26,15]]},"590":{"position":[[0,9],[176,13],[481,13],[713,11]]},"592":{"position":[[0,9],[1213,13]]},"594":{"position":[[832,10]]},"596":{"position":[[971,13]]},"598":{"position":[[86,10]]},"600":{"position":[[20,10],[234,13]]},"606":{"position":[[261,13],[2555,13],[9169,15],[10143,13],[12337,10],[12831,13]]},"608":{"position":[[180,10],[511,10],[775,10],[1031,10]]},"610":{"position":[[339,13]]},"612":{"position":[[67,10],[183,9],[589,12]]},"614":{"position":[[582,9],[654,10]]},"616":{"position":[[315,9],[390,10]]},"618":{"position":[[134,13],[349,9],[425,10]]},"620":{"position":[[2798,13],[3744,10]]},"624":{"position":[[295,14]]},"626":{"position":[[240,10]]}}}],["conflict",{"_index":1136,"t":{"584":{"position":[[768,9]]}}}],["conjunct",{"_index":341,"t":{"498":{"position":[[1020,11]]},"606":{"position":[[7248,11],[8964,11],[9461,11],[9621,11]]}}}],["connect",{"_index":510,"t":{"524":{"position":[[87,7],[993,7]]},"526":{"position":[[1748,10]]},"544":{"position":[[304,7],[556,7]]},"558":{"position":[[97,8]]},"566":{"position":[[7,7],[227,7],[271,7],[2635,7]]},"568":{"position":[[869,7],[913,8]]},"586":{"position":[[942,10],[970,10],[1223,10],[1426,10]]},"592":{"position":[[414,11]]},"606":{"position":[[6114,7],[7772,10],[8860,10],[8912,10],[9009,10],[9227,10],[9323,11],[9516,10],[9569,10],[9684,7],[9735,10],[9803,7],[9894,10]]}}}],["connect/auth",{"_index":859,"t":{"556":{"position":[[615,13]]}}}],["connect/token",{"_index":860,"t":{"556":{"position":[[710,14]]}}}],["connect/userinfo",{"_index":861,"t":{"556":{"position":[[807,17],[908,17]]}}}],["consent",{"_index":470,"t":{"522":{"position":[[970,7],[1138,7]]},"546":{"position":[[341,7]]}}}],["consid",{"_index":324,"t":{"498":{"position":[[256,10]]},"522":{"position":[[1694,10]]}}}],["consol",{"_index":814,"t":{"550":{"position":[[29,7]]}}}],["consum",{"_index":915,"t":{"562":{"position":[[353,8],[380,8]]},"574":{"position":[[16,8]]}}}],["contact",{"_index":1011,"t":{"568":{"position":[[96,7],[135,7]]}}}],["contain",{"_index":195,"t":{"487":{"position":[[17,8]]},"498":{"position":[[13,8]]},"514":{"position":[[561,8]]},"516":{"position":[[315,10]]},"524":{"position":[[1107,8],[1207,8],[1308,8]]},"532":{"position":[[360,10]]},"534":{"position":[[359,8]]},"536":{"position":[[25,8]]},"566":{"position":[[1466,9],[4746,10]]},"568":{"position":[[2508,8]]},"606":{"position":[[6312,8],[6390,8],[6470,8],[11277,7]]},"614":{"position":[[53,7],[305,7]]},"620":{"position":[[2217,7]]}}}],["content",{"_index":1041,"t":{"568":{"position":[[1251,8]]},"620":{"position":[[864,7],[2240,8]]}}}],["contenttypenosniff",{"_index":1554,"t":{"624":{"position":[[998,19]]},"626":{"position":[[1756,19]]}}}],["contrib",{"_index":1283,"t":{"604":{"position":[[257,7]]}}}],["control",{"_index":1366,"t":{"606":{"position":[[10282,8]]}}}],["convert",{"_index":235,"t":{"491":{"position":[[74,7],[106,7],[171,7],[244,7]]},"504":{"position":[[379,8]]},"516":{"position":[[600,8]]}}}],["convolut",{"_index":491,"t":{"522":{"position":[[1603,11]]}}}],["cooki",{"_index":161,"t":{"485":{"position":[[112,6],[122,6],[543,8],[570,6]]},"546":{"position":[[929,6]]},"548":{"position":[[1273,6],[1311,6]]},"550":{"position":[[483,6],[521,6]]},"560":{"position":[[570,6],[814,6]]},"566":{"position":[[1147,6],[1167,6],[3618,7]]},"568":{"position":[[1729,6],[1811,6],[1861,6],[3847,6]]},"582":{"position":[[122,6],[309,6]]},"584":{"position":[[4,6],[126,6],[199,7],[426,7],[518,6],[579,6]]},"586":{"position":[[139,6],[196,6],[326,6]]},"590":{"position":[[373,6],[395,6]]},"592":{"position":[[1339,6],[1361,6]]},"594":{"position":[[608,8],[674,6]]},"596":{"position":[[103,8]]},"602":{"position":[[21,6]]},"606":{"position":[[897,6],[934,6],[958,7],[1071,6],[1110,6],[1154,6],[1172,6],[1206,6],[1225,6],[1260,6],[1324,6],[1366,6],[1406,6],[1437,6],[1458,7],[1488,6],[1524,6],[1603,6],[1651,7],[1689,6],[1732,6],[1751,6],[1787,6],[10473,6],[10517,6],[10561,7],[10662,6],[10669,6],[14398,6]]},"610":{"position":[[398,6]]},"620":{"position":[[1487,6],[1623,6],[1710,7],[1847,7],[1914,7],[1979,7],[2094,6],[2131,6],[2233,6],[2414,6],[2511,6],[2554,6],[3475,8],[3728,6],[3761,6],[3810,6],[3929,6]]}}}],["cookie_secret",{"_index":985,"t":{"566":{"position":[[3589,13]]},"602":{"position":[[681,15]]}}}],["cookienam",{"_index":1140,"t":{"586":{"position":[[257,12],[301,10],[541,12]]}}}],["copi",{"_index":240,"t":{"491":{"position":[[343,4]]},"568":{"position":[[2600,4]]},"620":{"position":[[1825,6]]}}}],["coreo",{"_index":924,"t":{"566":{"position":[[171,6]]}}}],["corp.com\"]client_id",{"_index":974,"t":{"566":{"position":[[3240,20]]}}}],["corpor",{"_index":80,"t":{"479":{"position":[[218,9]]}}}],["correct",{"_index":826,"t":{"554":{"position":[[104,7]]},"566":{"position":[[545,7]]},"576":{"position":[[110,7]]}}}],["correctli",{"_index":808,"t":{"548":{"position":[[1362,10]]},"550":{"position":[[572,10]]},"626":{"position":[[382,9]]}}}],["count=1",{"_index":1258,"t":{"602":{"position":[[219,7]]}}}],["cover",{"_index":1484,"t":{"618":{"position":[[30,7]]}}}],["creat",{"_index":139,"t":{"483":{"position":[[480,6]]},"546":{"position":[[40,6],[808,8],[1074,6],[1754,6],[2010,6]]},"548":{"position":[[289,9]]},"552":{"position":[[0,6]]},"554":{"position":[[0,6],[1350,7]]},"556":{"position":[[92,6],[299,6],[487,8],[1461,6]]},"558":{"position":[[0,6],[241,6],[324,6]]},"562":{"position":[[42,6]]},"566":{"position":[[2653,6],[3002,6],[3791,6]]},"568":{"position":[[443,6],[2429,6]]},"572":{"position":[[0,6]]},"576":{"position":[[0,6]]},"606":{"position":[[1288,8],[4345,7]]}}}],["credenti",{"_index":420,"t":{"512":{"position":[[284,11]]},"546":{"position":[[293,13],[441,13],[474,12]]},"550":{"position":[[294,11]]},"556":{"position":[[270,10]]},"558":{"position":[[212,10]]},"606":{"position":[[4243,11]]}}}],["crypto/tl",{"_index":1177,"t":{"590":{"position":[[833,10]]}}}],["current",{"_index":5,"t":{"477":{"position":[[50,8]]},"544":{"position":[[517,9]]},"566":{"position":[[1228,7]]},"590":{"position":[[735,9],[851,9]]},"606":{"position":[[5930,10]]}}}],["custom",{"_index":874,"t":{"558":{"position":[[410,6]]},"566":{"position":[[2091,6]]},"590":{"position":[[508,13]]},"606":{"position":[[1843,6],[1879,6],[1903,6],[1950,6],[2976,6],[3056,6]]},"620":{"position":[[3803,6]]}}}],["cycl",{"_index":1224,"t":{"594":{"position":[[741,5],[803,6]]}}}],["d",{"_index":28,"t":{"477":{"position":[[291,2]]},"602":{"position":[[254,1]]}}}],["danger",{"_index":193,"t":{"487":{"position":[[0,6]]},"498":{"position":[[211,6]]}}}],["dashboard",{"_index":730,"t":{"546":{"position":[[220,9]]},"568":{"position":[[496,10],[798,10]]}}}],["data",{"_index":626,"t":{"536":{"position":[[210,4],[306,4]]},"556":{"position":[[1355,4]]},"568":{"position":[[426,4]]},"582":{"position":[[179,4]]},"584":{"position":[[550,4],[586,5]]},"606":{"position":[[10631,4]]},"616":{"position":[[1392,4]]}}}],["date",{"_index":1465,"t":{"614":{"position":[[1310,4]]},"616":{"position":[[1332,4]]},"618":{"position":[[602,4]]}}}],["day",{"_index":1036,"t":{"568":{"position":[[1170,4]]},"606":{"position":[[5124,4]]}}}],["dd",{"_index":1255,"t":{"602":{"position":[[194,2]]}}}],["debug",{"_index":1371,"t":{"606":{"position":[[11191,5]]}}}],["decim",{"_index":390,"t":{"506":{"position":[[153,7]]}}}],["decod",{"_index":1272,"t":{"602":{"position":[[620,6]]}}}],["decreas",{"_index":1245,"t":{"600":{"position":[[98,10]]}}}],["default",{"_index":457,"t":{"522":{"position":[[176,9],[207,7],[431,7],[513,7],[637,7],[873,8],[1031,7],[1975,7],[2003,7],[2023,7],[2168,7]]},"524":{"position":[[804,7],[1457,7]]},"526":{"position":[[1549,7],[1797,7]]},"544":{"position":[[218,7]]},"562":{"position":[[146,7]]},"564":{"position":[[196,7]]},"566":{"position":[[576,7],[1927,7],[2415,7],[2863,8],[4248,7]]},"572":{"position":[[575,8]]},"574":{"position":[[434,7]]},"582":{"position":[[316,9]]},"584":{"position":[[34,7]]},"586":{"position":[[356,8]]},"590":{"position":[[635,8],[819,8]]},"592":{"position":[[168,8],[763,7]]},"594":{"position":[[517,7]]},"606":{"position":[[24,7],[2011,7],[2327,7],[3024,7],[3104,7],[3968,9],[7822,7],[14597,8],[14668,7]]},"612":{"position":[[3,8],[627,7]]},"614":{"position":[[152,7],[636,7]]},"616":{"position":[[33,7],[372,7]]},"618":{"position":[[219,7],[407,7]]},"624":{"position":[[461,7],[686,7]]},"626":{"position":[[638,7],[921,7],[1166,7],[1372,7]]}}}],["defin",{"_index":330,"t":{"498":{"position":[[550,7]]},"524":{"position":[[1399,6]]},"526":{"position":[[158,7],[291,7],[1953,7]]},"532":{"position":[[140,7]]},"556":{"position":[[1511,6]]},"580":{"position":[[48,6]]}}}],["definit",{"_index":615,"t":{"530":{"position":[[76,11]]},"542":{"position":[[61,11]]}}}],["delay",{"_index":144,"t":{"483":{"position":[[571,5]]}}}],["demo",{"_index":1020,"t":{"568":{"position":[[512,5]]}}}],["demonstr",{"_index":112,"t":{"481":{"position":[[558,11]]}}}],["depend",{"_index":87,"t":{"481":{"position":[[85,13]]},"483":{"position":[[339,14]]},"485":{"position":[[680,10]]},"570":{"position":[[228,9]]},"606":{"position":[[7974,8]]}}}],["deploy",{"_index":1,"t":{"477":{"position":[[14,7],[737,6]]},"568":{"position":[[3075,11]]}}}],["deprec",{"_index":1378,"t":{"606":{"position":[[11612,11]]}}}],["describ",{"_index":204,"t":{"487":{"position":[[172,9]]},"489":{"position":[[77,9]]},"566":{"position":[[2156,8]]}}}],["descript",{"_index":314,"t":{"496":{"position":[[34,11]]},"498":{"position":[[334,11]]},"500":{"position":[[34,11]]},"502":{"position":[[34,11]]},"504":{"position":[[111,11]]},"508":{"position":[[34,11]]},"510":{"position":[[34,11]]},"512":{"position":[[34,11]]},"514":{"position":[[129,11]]},"516":{"position":[[127,11]]},"518":{"position":[[34,11]]},"520":{"position":[[34,11]]},"522":{"position":[[1903,11]]},"524":{"position":[[34,11]]},"526":{"position":[[90,11]]},"532":{"position":[[172,11]]},"534":{"position":[[96,11]]},"536":{"position":[[162,11]]},"538":{"position":[[308,11]]},"540":{"position":[[182,11]]},"542":{"position":[[106,11]]},"566":{"position":[[2324,11]]},"572":{"position":[[71,11]]},"606":{"position":[[12,11]]},"614":{"position":[[821,11]]},"616":{"position":[[676,11]]},"618":{"position":[[549,11]]}}}],["desir",{"_index":434,"t":{"514":{"position":[[574,7]]}}}],["detail",{"_index":94,"t":{"481":{"position":[[167,7],[457,6]]},"487":{"position":[[122,8],[336,7]]},"566":{"position":[[508,8]]},"606":{"position":[[11216,8]]},"614":{"position":[[1042,7],[1552,8]]},"618":{"position":[[751,7]]}}}],["determin",{"_index":426,"t":{"514":{"position":[[307,10]]},"538":{"position":[[145,9]]},"540":{"position":[[1981,10],[2270,10]]},"606":{"position":[[8555,9]]},"626":{"position":[[362,9]]}}}],["dev.yaml",{"_index":935,"t":{"566":{"position":[[679,9],[878,8]]}}}],["develop",{"_index":990,"t":{"566":{"position":[[3737,9]]},"568":{"position":[[315,9]]}}}],["dex",{"_index":925,"t":{"566":{"position":[[178,3],[352,4],[392,4],[435,4],[802,4],[1521,4]]}}}],["differ",{"_index":489,"t":{"522":{"position":[[1564,9]]},"528":{"position":[[77,9]]},"546":{"position":[[2146,9]]},"606":{"position":[[5905,6]]},"612":{"position":[[381,9]]},"614":{"position":[[546,9]]},"616":{"position":[[279,9]]},"618":{"position":[[313,9]]}}}],["digitalocean",{"_index":609,"t":{"528":{"position":[[152,12]]},"544":{"position":[[332,12]]}}}],["dir",{"_index":1309,"t":{"606":{"position":[[1860,3]]}}}],["dir\",th",{"_index":682,"t":{"540":{"position":[[1427,10]]}}}],["direct",{"_index":360,"t":{"500":{"position":[[67,7]]},"594":{"position":[[1085,9]]},"620":{"position":[[23,9]]}}}],["directli",{"_index":1210,"t":{"594":{"position":[[22,8]]},"606":{"position":[[12421,8]]}}}],["directori",{"_index":786,"t":{"548":{"position":[[73,10],[599,10],[634,9]]},"560":{"position":[[1201,9]]},"566":{"position":[[1244,9]]},"568":{"position":[[2480,9]]},"604":{"position":[[265,10]]},"608":{"position":[[595,9]]}}}],["disabl",{"_index":620,"t":{"534":{"position":[[209,8],[338,8]]},"594":{"position":[[505,8]]},"606":{"position":[[1557,8],[2003,7],[3016,7],[3096,7],[5229,7],[6260,8],[11450,7]]},"612":{"position":[[483,8],[767,8]]}}}],["disallow",{"_index":1212,"t":{"594":{"position":[[244,9]]}}}],["disclos",{"_index":125,"t":{"483":{"position":[[65,9],[298,9]]}}}],["disclosur",{"_index":75,"t":{"479":{"position":[[139,11]]},"481":{"position":[[194,11],[491,10]]},"483":{"position":[[129,10]]},"586":{"position":[[839,11]]}}}],["discov",{"_index":114,"t":{"481":{"position":[[590,10]]}}}],["discoveri",{"_index":521,"t":{"524":{"position":[[447,9],[888,9]]},"568":{"position":[[3252,10],[3298,9],[3485,9],[3711,9]]},"596":{"position":[[826,11]]},"606":{"position":[[6247,9],[12236,9],[12272,10]]}}}],["discret",{"_index":150,"t":{"483":{"position":[[695,10]]}}}],["discuss",{"_index":124,"t":{"483":{"position":[[47,7],[216,10]]}}}],["display",{"_index":273,"t":{"493":{"position":[[821,7]]},"526":{"position":[[1591,7]]},"566":{"position":[[979,7]]},"576":{"position":[[332,7]]},"606":{"position":[[2027,7],[2054,7],[7876,7]]}}}],["doc",{"_index":1285,"t":{"606":{"position":[[66,4]]}}}],["docker",{"_index":19,"t":{"477":{"position":[[204,6]]},"566":{"position":[[1490,6]]},"568":{"position":[[2318,6],[2556,6],[2574,6]]}}}],["document",{"_index":196,"t":{"487":{"position":[[26,13]]},"566":{"position":[[2470,13]]},"570":{"position":[[387,13]]}}}],["doesn't",{"_index":807,"t":{"548":{"position":[[1335,7]]},"550":{"position":[[545,7]]}}}],["domain",{"_index":478,"t":{"522":{"position":[[1334,7],[1460,7]]},"544":{"position":[[147,6]]},"546":{"position":[[644,6],[1054,7],[1825,6]]},"554":{"position":[[407,8]]},"560":{"position":[[1263,6]]},"566":{"position":[[1194,6]]},"568":{"position":[[3874,6]]},"578":{"position":[[22,6],[221,9]]},"596":{"position":[[854,6],[964,6]]},"598":{"position":[[251,7]]},"606":{"position":[[904,6],[941,7],[1006,6],[1078,6],[2138,6],[2198,6],[13672,6],[13701,7],[13754,6],[14468,6],[14487,6],[14562,6],[14821,7]]},"610":{"position":[[469,6]]},"620":{"position":[[548,8]]},"624":{"position":[[469,8],[694,8]]},"626":{"position":[[646,8],[929,8],[1174,8],[1380,8]]}}}],["domain.com",{"_index":1455,"t":{"614":{"position":[[964,10]]},"616":{"position":[[819,10]]}}}],["domain.tld/gitlab",{"_index":904,"t":{"560":{"position":[[1217,19]]}}}],["domain.tld/gitlab/oauth",{"_index":909,"t":{"560":{"position":[[1366,24]]}}}],["domain.tld/oauth",{"_index":907,"t":{"560":{"position":[[1332,16]]}}}],["domain=\"yourcompany.com",{"_index":1165,"t":{"590":{"position":[[237,24]]},"592":{"position":[[1274,24]]}}}],["domain=gsa.gov",{"_index":1050,"t":{"568":{"position":[[1758,14]]}}}],["domain=localhost",{"_index":1053,"t":{"568":{"position":[[1868,16]]}}}],["domain=yourcompany.com",{"_index":1116,"t":{"578":{"position":[[41,23]]}}}],["domain}/admin/oauth2/a",{"_index":998,"t":{"566":{"position":[[4314,23]]}}}],["domain}/dev/console/apps/new",{"_index":993,"t":{"566":{"position":[[3839,28]]}}}],["domain}/oauth2/default\"upstream",{"_index":1001,"t":{"566":{"position":[[4487,32]]}}}],["don't",{"_index":1354,"t":{"606":{"position":[[5762,5],[8164,6]]},"620":{"position":[[3791,5]]}}}],["done",{"_index":97,"t":{"481":{"position":[[214,4]]},"498":{"position":[[1357,4],[1665,4]]}}}],["doubl",{"_index":1221,"t":{"594":{"position":[[570,7]]}}}],["down",{"_index":743,"t":{"546":{"position":[[492,4],[2230,4]]},"548":{"position":[[469,4],[1002,4]]}}}],["download",{"_index":2,"t":{"477":{"position":[[25,8]]},"546":{"position":[[1187,8],[2268,10]]},"566":{"position":[[426,8]]}}}],["drop",{"_index":742,"t":{"546":{"position":[[487,4]]}}}],["dropdown",{"_index":729,"t":{"546":{"position":[[158,8]]}}}],["due",{"_index":884,"t":{"560":{"position":[[64,3]]}}}],["durat",{"_index":385,"t":{"506":{"position":[[39,8],[99,8]]},"540":{"position":[[2098,8],[2484,8],[2516,8]]},"606":{"position":[[1124,8],[1503,8],[1542,9],[2742,8],[13235,8]]}}}],["dure",{"_index":1450,"t":{"614":{"position":[[507,6]]}}}],["dynam",{"_index":1538,"t":{"624":{"position":[[275,7]]}}}],["e.g",{"_index":888,"t":{"560":{"position":[[359,4],[1211,5],[1270,5],[1361,4]]},"566":{"position":[[2201,4]]},"606":{"position":[[587,4],[969,5],[1469,5],[2682,4],[4620,4],[4786,4],[6134,4],[7210,4],[8348,5],[8785,4],[8928,5],[9077,5],[9585,5],[13798,5]]},"608":{"position":[[885,4]]},"620":{"position":[[3662,5]]}}}],["each",{"_index":40,"t":{"477":{"position":[[457,4]]},"506":{"position":[[170,4]]},"548":{"position":[[865,4]]},"566":{"position":[[1885,4]]},"584":{"position":[[228,4]]},"612":{"position":[[464,4],[556,4]]}}}],["echo",{"_index":1263,"t":{"602":{"position":[[283,4]]}}}],["effect",{"_index":460,"t":{"522":{"position":[[489,11]]}}}],["elb",{"_index":1179,"t":{"592":{"position":[[68,4],[262,3]]}}}],["email",{"_index":104,"t":{"481":{"position":[[364,5]]},"493":{"position":[[589,5]]},"522":{"position":[[1295,5]]},"524":{"position":[[224,5],[1146,7],[1343,7]]},"546":{"position":[[1798,5],[1862,5],[1879,5],[2039,5],[2064,5]]},"554":{"position":[[401,5]]},"560":{"position":[[296,5]]},"566":{"position":[[1188,5]]},"568":{"position":[[1479,5],[1752,5],[3868,5]]},"574":{"position":[[215,5]]},"578":{"position":[[16,5],[35,5],[89,5],[125,6],[160,5],[193,5],[215,5]]},"590":{"position":[[231,5]]},"592":{"position":[[1268,5]]},"594":{"position":[[926,5]]},"598":{"position":[[245,5],[307,6]]},"606":{"position":[[291,6],[331,6],[2132,5],[2172,6],[2262,5],[4009,5],[5751,5],[5779,5],[6276,5],[6332,5],[6338,7],[6978,5],[7057,5],[7094,5],[7188,5],[7463,5],[10763,5]]},"610":{"position":[[463,5]]},"614":{"position":[[75,5],[1448,5]]},"616":{"position":[[1520,5]]},"620":{"position":[[1024,5],[1174,6],[1268,5],[1274,7]]}}}],["email,default",{"_index":543,"t":{"524":{"position":[[1125,13]]}}}],["emailclaim",{"_index":542,"t":{"524":{"position":[[1056,10],[1074,10]]}}}],["empti",{"_index":376,"t":{"504":{"position":[[323,6]]},"516":{"position":[[544,6]]},"606":{"position":[[4947,5],[14611,5]]},"614":{"position":[[1225,5]]},"616":{"position":[[1088,5]]}}}],["enabl",{"_index":443,"t":{"518":{"position":[[68,7],[144,7]]},"540":{"position":[[2075,8],[2408,7]]},"546":{"position":[[1319,6],[1729,6]]},"560":{"position":[[256,6]]},"606":{"position":[[8407,7]]},"612":{"position":[[472,7]]},"620":{"position":[[1291,7],[1477,7]]},"626":{"position":[[318,7]]}}}],["encod",{"_index":440,"t":{"516":{"position":[[175,7]]},"532":{"position":[[220,7]]},"586":{"position":[[410,7],[467,7],[652,7]]},"596":{"position":[[432,11]]},"602":{"position":[[597,8]]},"606":{"position":[[1678,8]]}}}],["encount",{"_index":1061,"t":{"568":{"position":[[2236,9],[2400,9]]}}}],["encrypt",{"_index":986,"t":{"566":{"position":[[3606,7]]},"584":{"position":[[558,9]]},"586":{"position":[[43,10],[671,9],[740,10]]},"606":{"position":[[4381,10]]}}}],["end",{"_index":641,"t":{"538":{"position":[[549,3]]},"594":{"position":[[786,3]]},"620":{"position":[[3562,3]]}}}],["end_session_endpoint",{"_index":1239,"t":{"596":{"position":[[733,20]]}}}],["endeavour",{"_index":73,"t":{"479":{"position":[[115,9]]}}}],["endpoint",{"_index":62,"t":{"477":{"position":[[757,8]]},"485":{"position":[[768,10]]},"520":{"position":[[266,8]]},"522":{"position":[[141,8]]},"526":{"position":[[1886,8],[2086,8],[2146,8],[2310,8]]},"538":{"position":[[121,8]]},"556":{"position":[[1385,8]]},"566":{"position":[[1286,9]]},"568":{"position":[[3403,9],[3529,9]]},"592":{"position":[[558,8]]},"594":{"position":[[48,10],[69,9],[417,8]]},"596":{"position":[[62,8]]},"598":{"position":[[5,8]]},"606":{"position":[[439,9],[5709,8],[7569,8],[8024,8],[8477,9],[8730,8],[11486,8],[12263,8],[13099,9],[13616,8]]},"612":{"position":[[722,8]]},"620":{"position":[[100,9]]},"624":{"position":[[114,8]]},"626":{"position":[[156,8]]}}}],["endpointdefault",{"_index":363,"t":{"500":{"position":[[127,15]]}}}],["endpointsdefault",{"_index":539,"t":{"524":{"position":[[924,16]]}}}],["enforc",{"_index":1323,"t":{"606":{"position":[[2841,7]]}}}],["enhanc",{"_index":535,"t":{"524":{"position":[[816,8]]}}}],["ensur",{"_index":893,"t":{"560":{"position":[[519,6]]},"584":{"position":[[543,6]]}}}],["enter",{"_index":825,"t":{"554":{"position":[[94,5]]},"562":{"position":[[233,5]]},"572":{"position":[[142,6]]},"576":{"position":[[100,5]]}}}],["enterpris",{"_index":842,"t":{"554":{"position":[[1699,11]]}}}],["entri",{"_index":1330,"t":{"606":{"position":[[4329,7]]}}}],["enumer",{"_index":608,"t":{"528":{"position":[[63,9]]}}}],["env",{"_index":1063,"t":{"568":{"position":[[2325,3]]}}}],["environ",{"_index":58,"t":{"477":{"position":[[698,11]]},"493":{"position":[[49,11]]},"516":{"position":[[243,11]]},"532":{"position":[[288,11]]},"566":{"position":[[1443,11]]},"568":{"position":[[2145,11],[2192,13],[2265,12],[2291,11],[2735,11]]},"570":{"position":[[180,11]]},"600":{"position":[[57,11],[171,11],[197,11]]},"610":{"position":[[51,11],[226,11]]}}}],["equival",{"_index":1098,"t":{"572":{"position":[[519,10]]}}}],["error",{"_index":310,"t":{"493":{"position":[[1446,6]]},"606":{"position":[[2270,6],[2304,5],[2883,6],[2906,6],[2929,5],[11200,5],[11225,5],[11246,5]]},"614":{"position":[[501,5]]},"618":{"position":[[175,6]]},"624":{"position":[[422,6],[1228,7],[1236,7]]},"626":{"position":[[62,6]]}}}],["error_pag",{"_index":1493,"t":{"620":{"position":[[954,10]]}}}],["escap",{"_index":488,"t":{"522":{"position":[[1552,8],[1714,6]]}}}],["especi",{"_index":1403,"t":{"606":{"position":[[14206,10]]}}}],["etc",{"_index":1409,"t":{"606":{"position":[[14732,5]]},"620":{"position":[[2661,3]]}}}],["etc/example.cfg",{"_index":987,"t":{"566":{"position":[[3691,16]]}}}],["etc/localhost.cfg",{"_index":999,"t":{"566":{"position":[[4358,18],[4852,18]]}}}],["etcd",{"_index":955,"t":{"566":{"position":[[1501,4]]}}}],["evalu",{"_index":1397,"t":{"606":{"position":[[14040,8]]}}}],["even",{"_index":832,"t":{"554":{"position":[[490,4],[1515,4]]},"606":{"position":[[3571,4]]}}}],["event",{"_index":1466,"t":{"614":{"position":[[1339,6]]},"616":{"position":[[1361,6]]},"618":{"position":[[631,6]]}}}],["everyon",{"_index":997,"t":{"566":{"position":[[4086,8]]},"574":{"position":[[463,8]]}}}],["everyth",{"_index":1019,"t":{"568":{"position":[[407,10]]}}}],["everywher",{"_index":1074,"t":{"568":{"position":[[3230,11]]}}}],["ex",{"_index":749,"t":{"546":{"position":[[651,3],[748,3]]}}}],["exactli",{"_index":485,"t":{"522":{"position":[[1500,7]]}}}],["exampl",{"_index":63,"t":{"477":{"position":[[766,8]]},"522":{"position":[[762,9],[1261,7]]},"566":{"position":[[207,8],[324,7],[1476,7],[2206,8],[2693,7],[3868,7],[4338,7]]},"580":{"position":[[11,8]]},"592":{"position":[[37,8],[576,7],[631,7]]},"596":{"position":[[922,8]]},"604":{"position":[[210,7]]},"610":{"position":[[383,8]]},"614":{"position":[[813,7]]},"616":{"position":[[668,7]]},"618":{"position":[[541,7]]},"620":{"position":[[226,8]]},"624":{"position":[[263,8]]}}}],["example.com",{"_index":482,"t":{"522":{"position":[[1446,13]]},"568":{"position":[[3881,11]]},"606":{"position":[[13804,13],[13818,14],[14873,14]]},"624":{"position":[[486,13],[508,15],[711,13],[733,15],[1053,11]]},"626":{"position":[[663,13],[685,15],[946,13],[968,15],[1191,13],[1213,15],[1397,13],[1419,15],[1811,11]]}}}],["example.com:8080",{"_index":1411,"t":{"606":{"position":[[14829,17]]}}}],["example.oktapreview.com",{"_index":960,"t":{"566":{"position":[[1697,23]]}}}],["example\\.com",{"_index":481,"t":{"522":{"position":[[1375,23],[1795,20]]}}}],["examples/config",{"_index":934,"t":{"566":{"position":[[663,15],[862,15]]}}}],["exce",{"_index":1500,"t":{"620":{"position":[[1722,6]]}}}],["exclud",{"_index":1319,"t":{"606":{"position":[[2599,7],[2660,7],[2715,9]]},"612":{"position":[[864,7]]}}}],["exclus",{"_index":1161,"t":{"586":{"position":[[1541,10]]}}}],["exist",{"_index":218,"t":{"487":{"position":[[491,8]]},"491":{"position":[[114,8],[397,8]]},"546":{"position":[[1774,8],[2030,8]]},"614":{"position":[[920,6]]},"616":{"position":[[775,6]]}}}],["expect",{"_index":438,"t":{"516":{"position":[[158,7],[220,7],[290,7]]},"532":{"position":[[203,7],[265,7],[335,7]]},"606":{"position":[[5921,8]]},"620":{"position":[[3625,9]]}}}],["experessions.eg",{"_index":655,"t":{"540":{"position":[[542,16]]}}}],["expir",{"_index":1296,"t":{"606":{"position":[[1117,6],[1133,6]]}}}],["explicit",{"_index":657,"t":{"540":{"position":[[583,8]]}}}],["explicitli",{"_index":1447,"t":{"614":{"position":[[453,10]]}}}],["exploit",{"_index":113,"t":{"481":{"position":[[574,7]]}}}],["express",{"_index":474,"t":{"522":{"position":[[1245,11],[1627,11]]},"538":{"position":[[425,10],[492,10]]}}}],["extern",{"_index":339,"t":{"498":{"position":[[985,8]]},"592":{"position":[[227,8],[549,8]]}}}],["extra",{"_index":891,"t":{"560":{"position":[[439,5]]},"606":{"position":[[2373,5],[2444,5],[6505,5],[12187,6],[12199,5]]}}}],["extraaudi",{"_index":551,"t":{"524":{"position":[[1501,14],[1525,14]]}}}],["extract",{"_index":33,"t":{"477":{"position":[[367,10]]},"620":{"position":[[1960,7],[2082,7]]}}}],["facebook",{"_index":610,"t":{"528":{"position":[[165,9]]},"544":{"position":[[237,8]]}}}],["fail",{"_index":1355,"t":{"606":{"position":[[5768,4]]},"614":{"position":[[430,6]]}}}],["failur",{"_index":516,"t":{"524":{"position":[[209,8]]}}}],["fals",{"_index":320,"t":{"496":{"position":[[126,7]]},"514":{"position":[[476,5]]},"524":{"position":[[283,7],[403,6],[475,7],[793,7],[948,7]]},"540":{"position":[[1711,6]]},"606":{"position":[[2365,5],[2864,5],[2954,5],[4890,5],[5824,5],[5988,5],[6796,5],[6897,5],[7307,5],[9771,5],[9930,5],[10416,5],[10589,5],[10955,5],[11070,5],[11178,5],[11335,5],[11495,5],[11574,5],[12218,5],[12361,5],[12463,5],[12570,5],[12686,5]]}}}],["falseskip_provider_button",{"_index":1006,"t":{"566":{"position":[[4667,25]]}}}],["fastcgi_pass",{"_index":1512,"t":{"620":{"position":[[2642,13]]}}}],["fb",{"_index":821,"t":{"552":{"position":[[13,2],[64,2]]}}}],["featur",{"_index":198,"t":{"487":{"position":[[50,9],[113,8]]},"498":{"position":[[114,8]]},"606":{"position":[[9763,7],[9922,7]]}}}],["field",{"_index":312,"t":{"496":{"position":[[23,5]]},"498":{"position":[[323,5]]},"500":{"position":[[23,5]]},"502":{"position":[[23,5]]},"504":{"position":[[100,5]]},"508":{"position":[[23,5]]},"510":{"position":[[23,5]]},"512":{"position":[[23,5]]},"514":{"position":[[118,5]]},"516":{"position":[[116,5]]},"518":{"position":[[23,5]]},"520":{"position":[[23,5]]},"522":{"position":[[1892,5]]},"524":{"position":[[23,5]]},"526":{"position":[[79,5]]},"532":{"position":[[161,5]]},"534":{"position":[[85,5]]},"536":{"position":[[151,5]]},"538":{"position":[[297,5]]},"540":{"position":[[171,5]]},"542":{"position":[[95,5]]},"562":{"position":[[319,6]]},"566":{"position":[[3444,5]]},"572":{"position":[[135,6]]},"606":{"position":[[2494,7]]}}}],["file",{"_index":34,"t":{"477":{"position":[[382,4],[439,4],[667,5]]},"481":{"position":[[428,5]]},"487":{"position":[[525,4],[698,4]]},"489":{"position":[[52,4],[136,4]]},"491":{"position":[[362,5]]},"516":{"position":[[310,4]]},"520":{"position":[[174,4]]},"532":{"position":[[355,4]]},"536":{"position":[[254,5],[350,5]]},"546":{"position":[[1205,5],[2263,4],[2332,4],[2361,4]]},"566":{"position":[[3025,4],[4353,4]]},"568":{"position":[[2329,5],[2387,5],[2458,4],[2610,4]]},"572":{"position":[[552,5]]},"600":{"position":[[89,4],[248,4]]},"604":{"position":[[57,4],[242,4]]},"606":{"position":[[298,4],[342,4],[691,4],[707,4],[890,4],[2108,4],[4266,4],[4323,5],[4859,5],[4922,4],[5024,5],[5147,5],[5207,5],[5299,4],[5489,4],[5525,4],[7703,4],[12856,4],[12888,4],[12903,4],[12935,4],[13109,7],[13134,5]]},"608":{"position":[[123,5],[138,4],[496,4],[527,7],[579,5],[721,5],[861,5],[1180,5]]},"610":{"position":[[353,4]]},"612":{"position":[[106,4],[165,4],[205,4]]},"618":{"position":[[465,11],[638,4],[658,4]]},"624":{"position":[[283,4]]},"626":{"position":[[2321,4]]}}}],["file/client_secret_fil",{"_index":272,"t":{"493":{"position":[[779,23]]}}}],["file/jwt_key_fil",{"_index":296,"t":{"493":{"position":[[1167,17]]}}}],["file/provider_ca_fil",{"_index":276,"t":{"493":{"position":[[868,22]]}}}],["file://$pwd/#/stat",{"_index":950,"t":{"566":{"position":[[1311,21]]}}}],["file:///var/www/stat",{"_index":1417,"t":{"608":{"position":[[540,23]]}}}],["file:///var/www/static/#/stat",{"_index":1421,"t":{"608":{"position":[[890,32]]}}}],["file://host/pathif",{"_index":679,"t":{"540":{"position":[[1349,18]]}}}],["file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1068,"t":{"568":{"position":[[2781,41]]},"606":{"position":[[5610,42]]}}}],["file=/path/to/cert.key",{"_index":1164,"t":{"590":{"position":[[107,23],[346,22]]}}}],["file=/path/to/cert.pem",{"_index":1163,"t":{"590":{"position":[[70,22],[311,22]]}}}],["file=/path/to/fil",{"_index":1117,"t":{"578":{"position":[[132,18]]}}}],["filebas",{"_index":673,"t":{"540":{"position":[[1167,9]]}}}],["filecontain",{"_index":560,"t":{"526":{"position":[[416,14]]}}}],["filenam",{"_index":1343,"t":{"606":{"position":[[4906,8],[5041,9]]},"612":{"position":[[131,8]]}}}],["fill",{"_index":738,"t":{"546":{"position":[[362,4]]},"562":{"position":[[288,4]]},"566":{"position":[[2120,4],[2313,4]]},"572":{"position":[[39,4]]}}}],["filter",{"_index":890,"t":{"560":{"position":[[420,10]]}}}],["find",{"_index":805,"t":{"548":{"position":[[1302,4]]},"550":{"position":[[512,4]]},"568":{"position":[[168,4]]}}}],["firewal",{"_index":1072,"t":{"568":{"position":[[3128,8]]}}}],["first",{"_index":959,"t":{"566":{"position":[[1690,6]]},"568":{"position":[[758,6]]},"620":{"position":[[1836,5],[2121,5]]}}}],["fix",{"_index":116,"t":{"481":{"position":[[632,3]]},"483":{"position":[[55,5],[244,5],[381,5],[428,3],[472,3],[585,5],[645,3]]},"522":{"position":[[501,5],[799,5],[909,5],[1073,5]]}}}],["flag",{"_index":221,"t":{"487":{"position":[[534,6]]},"489":{"position":[[166,5],[207,5]]},"491":{"position":[[98,4]]},"493":{"position":[[1381,5]]},"546":{"position":[[1868,5],[2090,5],[2136,4],[2401,5]]},"554":{"position":[[621,5],[767,4]]},"556":{"position":[[1122,5]]},"586":{"position":[[1136,5],[1167,5],[1380,5],[1404,5],[1467,5]]},"606":{"position":[[1213,4],[1739,4]]},"610":{"position":[[412,4],[476,4]]},"612":{"position":[[830,4]]},"614":{"position":[[626,5]]},"616":{"position":[[362,5]]},"618":{"position":[[397,5]]},"620":{"position":[[1093,4],[1688,5]]}}}],["flags/opt",{"_index":243,"t":{"493":{"position":[[14,13]]}}}],["flaw",{"_index":1402,"t":{"606":{"position":[[14199,6]]}}}],["flight",{"_index":142,"t":{"483":{"position":[[541,6]]}}}],["flow",{"_index":529,"t":{"524":{"position":[[625,5]]}}}],["flush",{"_index":245,"t":{"493":{"position":[[127,5]]},"540":{"position":[[2143,8]]},"606":{"position":[[2727,5],[2766,8]]}}}],["flushinterv",{"_index":699,"t":{"540":{"position":[[2084,13],[2107,13]]}}}],["follow",{"_index":242,"t":{"493":{"position":[[4,9]]},"546":{"position":[[1331,6],[1516,9],[1664,6]]},"550":{"position":[[210,6]]},"554":{"position":[[611,9],[757,9],[1733,9]]},"556":{"position":[[404,9]]},"558":{"position":[[473,9]]},"560":{"position":[[201,6],[485,9],[584,6],[895,9],[1090,9]]},"564":{"position":[[52,6]]},"566":{"position":[[409,9],[939,9],[1585,9],[3039,10],[4715,9]]},"568":{"position":[[1530,9]]},"572":{"position":[[397,9]]},"574":{"position":[[334,9]]},"576":{"position":[[213,9]]},"580":{"position":[[0,6]]},"584":{"position":[[256,9]]},"586":{"position":[[246,10]]},"592":{"position":[[652,8]]},"594":{"position":[[38,9]]},"598":{"position":[[107,9]]},"614":{"position":[[668,8]]},"616":{"position":[[404,8]]},"618":{"position":[[439,8]]},"620":{"position":[[2788,9]]},"626":{"position":[[165,9]]}}}],["foo",{"_index":656,"t":{"540":{"position":[[560,7],[597,4]]}}}],["foo/$1",{"_index":667,"t":{"540":{"position":[[988,7]]}}}],["foo/abc/123",{"_index":670,"t":{"540":{"position":[[1037,12]]}}}],["footer",{"_index":1325,"t":{"606":{"position":[[3042,6],[3070,6],[3112,7]]}}}],["forc",{"_index":604,"t":{"526":{"position":[[2501,6]]},"584":{"position":[[784,5]]},"606":{"position":[[121,7],[952,5],[1452,5],[2824,5],[2872,5],[2895,5]]}}}],["force_code_challenge_method",{"_index":603,"t":{"526":{"position":[[2462,27]]}}}],["forcestshead",{"_index":1555,"t":{"624":{"position":[[1023,15]]},"626":{"position":[[1781,15]]}}}],["forego",{"_index":134,"t":{"483":{"position":[[391,6]]}}}],["form",{"_index":493,"t":{"522":{"position":[[1657,4]]},"570":{"position":[[318,4]]},"606":{"position":[[2044,4],[2088,4]]}}}],["format",{"_index":213,"t":{"487":{"position":[[390,7],[469,6],[912,7]]},"489":{"position":[[70,6]]},"491":{"position":[[148,7],[285,6]]},"520":{"position":[[91,6],[186,6]]},"522":{"position":[[1770,6]]},"554":{"position":[[1137,9]]},"568":{"position":[[1028,6],[2532,6]]},"594":{"position":[[957,7]]},"606":{"position":[[197,6],[3360,9],[3867,9],[5360,6],[5537,6],[10086,6],[11826,7],[12773,6]]},"612":{"position":[[602,6],[641,7]]},"614":{"position":[[173,7],[556,6],[619,6],[644,6]]},"616":{"position":[[54,7],[289,6],[355,6],[380,6]]},"618":{"position":[[112,7],[227,6],[323,6],[390,6],[415,6]]}}}],["forward",{"_index":186,"t":{"485":{"position":[[599,9]]},"487":{"position":[[404,7]]},"556":{"position":[[1291,9]]},"606":{"position":[[6666,9],[6950,9],[6968,9],[6990,9],[7415,9],[7433,9],[7453,9],[7475,9],[8638,9],[10348,9],[11928,9]]},"608":{"position":[[279,7],[462,9]]},"626":{"position":[[339,9]]}}}],["forwardauth",{"_index":1536,"t":{"624":{"position":[[15,11],[1137,12]]},"626":{"position":[[96,11],[1904,12],[2069,12]]}}}],["found",{"_index":84,"t":{"481":{"position":[[29,5],[243,5]]},"566":{"position":[[339,5]]}}}],["fraction",{"_index":391,"t":{"506":{"position":[[189,8]]}}}],["fragment",{"_index":1420,"t":{"608":{"position":[[759,8],[808,8]]}}}],["framedeni",{"_index":1559,"t":{"624":{"position":[[1109,10]]},"626":{"position":[[1867,10]]}}}],["freeform",{"_index":745,"t":{"546":{"position":[[567,9]]}}}],["fromenv",{"_index":441,"t":{"516":{"position":[[197,7],[212,7]]},"532":{"position":[[242,7],[257,7]]}}}],["fromfil",{"_index":442,"t":{"516":{"position":[[265,8],[281,8]]},"532":{"position":[[310,8],[326,8]]}}}],["full",{"_index":70,"t":{"479":{"position":[[82,4]]},"614":{"position":[[1362,4]]},"616":{"position":[[1434,4]]}}}],["function",{"_index":1563,"t":{"626":{"position":[[20,13]]}}}],["further",{"_index":623,"t":{"534":{"position":[[446,7]]}}}],["futur",{"_index":534,"t":{"524":{"position":[[757,6]]},"546":{"position":[[1244,6]]},"566":{"position":[[4219,6]]}}}],["gap",{"_index":1374,"t":{"606":{"position":[[11364,3]]}}}],["gener",{"_index":231,"t":{"489":{"position":[[36,8]]},"566":{"position":[[2768,7],[3571,8]]},"568":{"position":[[1035,9]]},"576":{"position":[[381,9],[439,9]]},"602":{"position":[[3,8]]}}}],["get",{"_index":929,"t":{"566":{"position":[[477,7]]}}}],["gitea",{"_index":723,"t":{"544":{"position":[[355,5]]},"576":{"position":[[41,5],[394,5],[452,5],[489,5],[554,5],[624,5]]}}}],["github",{"_index":92,"t":{"481":{"position":[[136,7],[729,6]]},"483":{"position":[[7,6],[109,6]]},"493":{"position":[[1302,7]]},"528":{"position":[[175,7]]},"544":{"position":[[72,6],[246,6]]},"554":{"position":[[172,6],[429,6],[628,6],[788,6],[801,6],[1069,6],[1396,6],[1612,6],[1692,6],[1801,6],[1871,6],[1946,6]]},"606":{"position":[[3122,6],[3190,6],[3289,6],[3388,6],[3509,6]]}}}],["github.com/dexidp/dex",{"_index":928,"t":{"566":{"position":[[447,21]]}}}],["github.com/oauth2",{"_index":12,"t":{"477":{"position":[[101,17]]}}}],["githubc",{"_index":572,"t":{"526":{"position":[[921,7]]}}}],["githubconfig",{"_index":570,"t":{"526":{"position":[[852,12],[879,12]]}}}],["githubopt",{"_index":571,"t":{"526":{"position":[[865,13]]}}}],["gitlab",{"_index":304,"t":{"493":{"position":[[1310,7]]},"526":{"position":[[1008,6]]},"528":{"position":[[183,7]]},"544":{"position":[[262,6]]},"560":{"position":[[43,6],[71,6],[193,7],[739,6],[915,6],[1060,7],[1149,6],[1182,6]]},"606":{"position":[[3647,6],[3755,6],[3946,6],[14414,7]]}}}],["gitlab.com",{"_index":886,"t":{"560":{"position":[[166,10]]}}}],["gitlab.domain.tld",{"_index":906,"t":{"560":{"position":[[1276,19]]}}}],["gitlabconfig",{"_index":573,"t":{"526":{"position":[[939,12],[966,12]]}}}],["gitlabopt",{"_index":574,"t":{"526":{"position":[[952,13]]}}}],["give",{"_index":637,"t":{"538":{"position":[[409,5]]},"546":{"position":[[1481,4]]}}}],["given",{"_index":635,"t":{"538":{"position":[[196,5]]},"606":{"position":[[2213,5],[3845,5],[4146,5],[7934,5],[11707,5],[13404,5],[13503,5],[13933,5]]}}}],["global",{"_index":864,"t":{"556":{"position":[[1104,7]]}}}],["gmail",{"_index":773,"t":{"546":{"position":[[1819,5]]}}}],["go",{"_index":11,"t":{"477":{"position":[[94,2]]},"487":{"position":[[398,5]]},"526":{"position":[[1805,2]]},"548":{"position":[[20,2]]},"566":{"position":[[440,2]]},"568":{"position":[[2885,2]]},"590":{"position":[[866,2]]},"606":{"position":[[384,2],[7830,2]]}}}],["googl",{"_index":305,"t":{"493":{"position":[[1318,6]]},"512":{"position":[[108,6],[157,6]]},"526":{"position":[[1094,6],[1530,8]]},"528":{"position":[[191,7]]},"544":{"position":[[63,8],[211,6]]},"546":{"position":[[4,7],[1032,6],[1849,6],[2077,6],[2373,6]]},"592":{"position":[[73,6],[269,6]]},"606":{"position":[[3996,6],[4026,6],[4070,6],[4125,6],[4171,6],[7682,6],[14422,6]]}}}],["googleconfig",{"_index":575,"t":{"526":{"position":[[1025,12],[1052,12]]}}}],["googleopt",{"_index":576,"t":{"526":{"position":[[1038,13]]}}}],["gopath/bin",{"_index":16,"t":{"477":{"position":[[170,11]]}}}],["gopath/github.com/dexidp/dex",{"_index":940,"t":{"566":{"position":[[812,30]]}}}],["govern",{"_index":1009,"t":{"568":{"position":[[41,11],[69,10]]}}}],["grab",{"_index":1075,"t":{"568":{"position":[[3360,4]]}}}],["grant",{"_index":796,"t":{"548":{"position":[[696,6]]},"566":{"position":[[2792,5],[4095,5]]}}}],["group",{"_index":410,"t":{"510":{"position":[[46,5],[61,5],[107,5]]},"512":{"position":[[46,5],[61,6],[115,5]]},"518":{"position":[[46,6],[62,5],[118,5]]},"524":{"position":[[1246,8]]},"526":{"position":[[2456,5]]},"546":{"position":[[1039,6],[2045,5],[2084,5],[2156,6],[2217,7],[2467,5]]},"550":{"position":[[86,5]]},"556":{"position":[[332,6],[372,9],[1019,5],[1070,5],[1098,5],[1157,6],[1209,6],[1301,6],[1348,6],[1408,5],[1470,5],[1532,6]]},"558":{"position":[[274,6],[314,9]]},"560":{"position":[[857,5],[995,6]]},"566":{"position":[[2958,6],[4067,5]]},"598":{"position":[[183,6]]},"606":{"position":[[3654,5],[3717,6],[4077,5],[4132,5],[4408,5],[4432,6],[6353,6],[6408,6],[6415,8],[7443,7],[10740,7],[13335,5],[13390,5]]}}}],["group,otherwis",{"_index":588,"t":{"526":{"position":[[1514,15]]}}}],["group/allowed_group",{"_index":292,"t":{"493":{"position":[[1095,20]]}}}],["group=\"mygroup,myothergroup",{"_index":901,"t":{"560":{"position":[[922,29]]}}}],["group=/oauth2/callback",{"_index":1100,"t":{"572":{"position":[[611,24]]}}}],["headers.default",{"_index":433,"t":{"514":{"position":[[456,16]]}}}],["headers/pass_user_head",{"_index":257,"t":{"493":{"position":[[390,25]]}}}],["headers/skip_auth_strip_head",{"_index":267,"t":{"493":{"position":[[680,31]]}}}],["headershould",{"_index":428,"t":{"514":{"position":[[346,12]]}}}],["headervalu",{"_index":367,"t":{"504":{"position":[[13,12]]},"514":{"position":[[540,13]]},"516":{"position":[[21,11]]},"532":{"position":[[26,12]]}}}],["health",{"_index":1216,"t":{"594":{"position":[[384,6]]},"606":{"position":[[8060,6],[8147,6]]}}}],["helm",{"_index":31,"t":{"477":{"position":[[322,6]]}}}],["here",{"_index":1015,"t":{"568":{"position":[[344,5]]}}}],["hex",{"_index":1145,"t":{"586":{"position":[[406,3]]}}}],["histor",{"_index":1123,"t":{"584":{"position":[[103,13]]}}}],["hit",{"_index":740,"t":{"546":{"position":[[404,3]]},"548":{"position":[[668,3],[1023,7]]}}}],["hold",{"_index":555,"t":{"526":{"position":[[33,5],[546,5],[631,5],[710,5],[803,5],[892,5],[979,5],[1065,5],[1145,5],[1275,5]]}}}],["homepag",{"_index":1091,"t":{"572":{"position":[[57,9]]}}}],["host",{"_index":247,"t":{"493":{"position":[[162,4]]},"540":{"position":[[2301,4]]},"548":{"position":[[870,4]]},"560":{"position":[[185,7],[1053,6],[1175,6]]},"572":{"position":[[606,4]]},"576":{"position":[[47,4],[495,4],[560,4],[630,4]]},"592":{"position":[[1006,4],[1011,6]]},"606":{"position":[[1036,4],[7320,4],[7354,4]]},"614":{"position":[[959,4],[992,4]]},"616":{"position":[[475,9],[814,4],[847,4]]},"620":{"position":[[370,4],[375,6],[708,4],[713,6]]}}}],["host(`a",{"_index":1540,"t":{"624":{"position":[[342,8],[537,8]]},"626":{"position":[[432,8],[726,8],[1013,8]]}}}],["host(`oauth.example.com",{"_index":1571,"t":{"626":{"position":[[1255,26]]}}}],["host>/api/v3",{"_index":846,"t":{"554":{"position":[[1953,13]]}}}],["host>/auth/realms//login/oauth/access_token",{"_index":845,"t":{"554":{"position":[[1878,31]]}}}],["host>/login/oauth/author",{"_index":844,"t":{"554":{"position":[[1808,28]]}}}],["host>/oauth2/callback",{"_index":1108,"t":{"576":{"position":[[144,21],[298,22]]}}}],["host>/realms/:::/sign_in",{"_index":1363,"t":{"606":{"position":[[8354,18]]}}}],["oauth2_proxy_",{"_index":1424,"t":{"610":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":1428,"t":{"610":{"position":[[425,27]]}}}],["oauth2_proxy_email_domain",{"_index":1429,"t":{"610":{"position":[[489,27]]}}}],["oauth2_proxy_jwt_key",{"_index":1043,"t":{"568":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1067,"t":{"568":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":1300,"t":{"606":{"position":[[1276,11]]}}}],["obtain",{"_index":1404,"t":{"606":{"position":[[14222,9]]}}}],["occur",{"_index":1486,"t":{"618":{"position":[[187,5]]}}}],["oidc",{"_index":301,"t":{"493":{"position":[[1278,5]]},"518":{"position":[[229,4]]},"524":{"position":[[442,4],[883,4]]},"526":{"position":[[1174,4],[1208,4]]},"528":{"position":[[218,5],[259,5]]},"548":{"position":[[1160,4]]},"556":{"position":[[60,4]]},"558":{"position":[[527,4],[653,4]]},"560":{"position":[[1126,4]]},"566":{"position":[[244,6],[374,4],[965,4],[996,4],[1105,4],[1549,4]]},"568":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"596":{"position":[[481,4],[667,4],[780,4],[889,4]]},"606":{"position":[[5729,4],[5841,4],[5886,4],[6005,4],[6045,4],[6080,4],[6171,4],[6192,4],[6242,4],[6271,4],[6301,4],[6348,4],[6379,4],[6426,4],[6459,4],[6500,4],[6840,4],[7594,4],[12231,4],[12258,4],[12315,4],[13555,4],[14433,4]]}}}],["oidc\"redirect_url",{"_index":970,"t":{"566":{"position":[[3061,18],[4388,18]]}}}],["oidc_issuer_url",{"_index":979,"t":{"566":{"position":[[3372,15]]}}}],["oidcconfig",{"_index":577,"t":{"526":{"position":[[1111,10],[1134,10]]}}}],["oidcopt",{"_index":578,"t":{"526":{"position":[[1122,11]]}}}],["ok",{"_index":47,"t":{"477":{"position":[[560,2]]},"594":{"position":[[227,2],[340,2]]}}}],["okta",{"_index":926,"t":{"566":{"position":[[315,5],[1526,5],[1567,5],[1612,4],[2465,4],[3708,4],[3834,4],[4309,4],[4482,4]]}}}],["old",{"_index":1348,"t":{"606":{"position":[[5139,3],[5199,3]]}}}],["omit",{"_index":1410,"t":{"606":{"position":[[14753,4]]}}}],["on",{"_index":118,"t":{"481":{"position":[[674,4]]},"485":{"position":[[354,3]]},"522":{"position":[[900,3],[1064,3],[1419,3],[2263,3]]},"532":{"position":[[101,3]]},"568":{"position":[[2206,3]]},"574":{"position":[[683,3]]},"578":{"position":[[156,3]]},"582":{"position":[[187,3]]},"602":{"position":[[39,3]]},"606":{"position":[[347,4],[8627,4],[12176,3]]},"614":{"position":[[313,3]]}}}],["onc",{"_index":135,"t":{"483":{"position":[[421,4]]},"546":{"position":[[2558,4]]},"568":{"position":[[2843,4]]}}}],["onlyvalu",{"_index":506,"t":{"522":{"position":[[2241,10]]}}}],["open",{"_index":89,"t":{"481":{"position":[[113,4]]},"546":{"position":[[460,4]]},"550":{"position":[[0,4]]},"566":{"position":[[106,4]]}}}],["openid",{"_index":509,"t":{"524":{"position":[[80,6],[986,6]]},"544":{"position":[[297,6],[549,6]]},"558":{"position":[[89,7]]},"560":{"position":[[276,7]]},"566":{"position":[[0,6],[220,6],[2628,6]]},"568":{"position":[[862,6],[906,6]]},"606":{"position":[[6107,6]]}}}],["openssl",{"_index":1028,"t":{"568":{"position":[[1104,7]]},"602":{"position":[[78,7],[288,7]]}}}],["oppos",{"_index":905,"t":{"560":{"position":[[1240,7]]}}}],["option",{"_index":57,"t":{"477":{"position":[[686,8]]},"487":{"position":[[164,7],[317,8],[373,7]]},"489":{"position":[[218,7],[263,7]]},"491":{"position":[[37,7],[256,7],[379,7],[437,7]]},"493":{"position":[[1233,8],[1251,6],[1369,7],[1480,7]]},"498":{"position":[[53,8],[77,7],[222,7]]},"504":{"position":[[246,8]]},"506":{"position":[[180,8]]},"514":{"position":[[416,6]]},"516":{"position":[[467,8]]},"522":{"position":[[186,6],[316,7],[1992,10],[2121,10]]},"528":{"position":[[101,7],[115,7]]},"536":{"position":[[102,8]]},"540":{"position":[[1585,6],[2039,6]]},"546":{"position":[[1062,11]]},"554":{"position":[[276,8],[362,7]]},"556":{"position":[[1050,8]]},"558":{"position":[[749,9],[828,9]]},"560":{"position":[[905,7]]},"566":{"position":[[1721,10],[2023,6],[2452,8]]},"568":{"position":[[1540,8],[2132,7],[3495,7]]},"572":{"position":[[407,8],[530,7],[706,7]]},"574":{"position":[[344,8],[584,7]]},"576":{"position":[[223,7]]},"596":{"position":[[985,6]]},"600":{"position":[[48,8],[148,7]]},"604":{"position":[[169,6]]},"606":{"position":[[0,6],[52,9],[925,8],[1428,8],[1659,11],[11557,7],[13995,10],[14298,6],[14475,7],[14920,7]]},"608":{"position":[[61,6]]},"622":{"position":[[5,6],[37,6]]},"626":{"position":[[175,7],[2326,6]]}}}],["order",{"_index":1246,"t":{"600":{"position":[[109,5]]}}}],["org",{"_index":402,"t":{"508":{"position":[[46,3],[57,3],[478,3]]},"554":{"position":[[534,3],[635,7],[795,4],[1559,3]]},"606":{"position":[[3129,3],[3615,3]]}}}],["organ",{"_index":794,"t":{"548":{"position":[[430,13]]},"554":{"position":[[259,12],[580,12],[713,12]]}}}],["organis",{"_index":403,"t":{"508":{"position":[[101,12]]},"554":{"position":[[678,12]]},"606":{"position":[[3175,12]]}}}],["organization'",{"_index":477,"t":{"522":{"position":[[1319,14]]}}}],["organizationdefault",{"_index":467,"t":{"522":{"position":[[811,20]]}}}],["orgname/repo",{"_index":838,"t":{"554":{"position":[[1150,12]]},"606":{"position":[[3373,12]]}}}],["orgname/repo=accesslevel",{"_index":1326,"t":{"606":{"position":[[3880,25]]}}}],["origin",{"_index":748,"t":{"546":{"position":[[628,7]]},"566":{"position":[[146,10]]}}}],["os,base64",{"_index":1253,"t":{"602":{"position":[[125,10]]}}}],["otherwis",{"_index":466,"t":{"522":{"position":[[751,10]]},"524":{"position":[[631,10]]},"542":{"position":[[232,9]]},"566":{"position":[[1903,10]]},"596":{"position":[[992,9]]}}}],["out",{"_index":964,"t":{"566":{"position":[[2125,3],[2318,3]]},"568":{"position":[[1156,3]]},"594":{"position":[[588,3]]},"596":{"position":[[17,4],[325,3]]}}}],["output",{"_index":1430,"t":{"612":{"position":[[34,6],[81,6]]},"614":{"position":[[142,6]]},"616":{"position":[[23,6]]},"618":{"position":[[80,6]]}}}],["outsid",{"_index":1427,"t":{"610":{"position":[[326,7]]},"618":{"position":[[193,7]]}}}],["overrid",{"_index":634,"t":{"538":{"position":[[178,9]]},"564":{"position":[[183,8]]},"606":{"position":[[7896,8],[9190,8]]}}}],["overridden",{"_index":459,"t":{"522":{"position":[[371,10],[1050,10],[1193,11],[2084,11]]}}}],["override_speci",{"_index":1279,"t":{"602":{"position":[[711,16]]}}}],["overwrit",{"_index":1247,"t":{"600":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":1119,"t":{"580":{"position":[[37,7]]}}}],["pad",{"_index":1147,"t":{"586":{"position":[[479,9]]}}}],["page",{"_index":194,"t":{"487":{"position":[[12,4],[143,4],[190,4],[331,4]]},"526":{"position":[[1654,5]]},"548":{"position":[[332,4],[551,4],[792,4],[962,4]]},"594":{"position":[[553,5],[592,4]]},"596":{"position":[[329,4]]},"606":{"position":[[1979,4],[2935,5],[7969,4],[11252,5],[12413,4]]}}}],["pair",{"_index":1148,"t":{"586":{"position":[[533,4]]},"606":{"position":[[2502,5]]}}}],["pane",{"_index":732,"t":{"546":{"position":[[237,5],[280,5],[321,5],[428,5]]}}}],["paramet",{"_index":317,"t":{"496":{"position":[[83,9]]},"522":{"position":[[81,9],[280,10],[347,9],[476,9],[654,9],[774,9],[841,9],[1003,9],[1171,9],[1964,10]]},"526":{"position":[[1965,10]]},"538":{"position":[[82,10],[202,9],[600,9]]},"596":{"position":[[364,10]]},"598":{"position":[[123,11]]},"608":{"position":[[258,10],[1096,10],[1121,9]]},"620":{"position":[[3773,10]]}}}],["part",{"_index":322,"t":{"498":{"position":[[149,4]]},"620":{"position":[[1796,6],[2177,4],[2455,4]]}}}],["particularli",{"_index":1426,"t":{"610":{"position":[[286,12]]}}}],["pass",{"_index":152,"t":{"485":{"position":[[12,7]]},"493":{"position":[[157,4],[312,4],[344,4],[380,4],[416,4]]},"522":{"position":[[103,6],[253,6],[560,6],[677,6],[863,6],[1021,6]]},"524":{"position":[[1593,4]]},"526":{"position":[[1988,6]]},"538":{"position":[[93,6],[212,6]]},"542":{"position":[[154,4]]},"546":{"position":[[2104,4]]},"548":{"position":[[1347,6]]},"550":{"position":[[557,6]]},"566":{"position":[[1795,6]]},"568":{"position":[[2283,4]]},"572":{"position":[[388,4]]},"574":{"position":[[325,4]]},"576":{"position":[[204,4]]},"582":{"position":[[276,6]]},"606":{"position":[[512,7],[6576,4],[6601,4],[6624,4],[6804,4],[6835,4],[6905,4],[6926,4],[7129,7],[7267,4],[7289,4],[7315,4],[7337,4],[7385,4],[7408,4],[10878,4]]},"608":{"position":[[71,4]]},"620":{"position":[[990,4],[1301,4],[1330,4]]}}}],["passhosthead",{"_index":705,"t":{"540":{"position":[[2235,14],[2255,14]]}}}],["password",{"_index":383,"t":{"504":{"position":[[529,8]]},"516":{"position":[[750,8]]},"606":{"position":[[471,8],[491,8],[2073,8],[9112,8],[9134,9],[9203,8],[9259,8],[9290,9],[9350,9],[9380,8]]}}}],["password/basic_auth_password",{"_index":265,"t":{"493":{"position":[[635,28]]}}}],["patch",{"_index":146,"t":{"483":{"position":[[601,7]]}}}],["path",{"_index":232,"t":{"489":{"position":[[123,4]]},"498":{"position":[[536,4]]},"512":{"position":[[251,4]]},"516":{"position":[[300,4]]},"520":{"position":[[150,4]]},"526":{"position":[[1698,5]]},"532":{"position":[[345,4]]},"540":{"position":[[140,4],[165,5],[296,4],[308,4],[407,5],[592,4],[622,4],[671,4],[721,4],[824,4],[877,4],[949,4],[1199,5],[1378,4]]},"542":{"position":[[171,4],[397,4],[422,5]]},"546":{"position":[[2349,4]]},"594":{"position":[[279,6]]},"606":{"position":[[875,4],[1413,4],[1444,4],[1871,4],[1930,4],[2615,4],[2651,5],[2709,5],[4210,4],[5501,4],[7722,5],[8003,4],[8304,4],[11682,5],[11820,5],[12868,4],[12915,4],[13117,5],[13211,4]]},"608":{"position":[[501,5],[703,4],[852,4],[1256,4]]},"612":{"position":[[854,4],[880,6]]},"616":{"position":[[177,8],[1166,4]]}}}],["path.eg",{"_index":675,"t":{"540":{"position":[[1257,8]]}}}],["path/to/cert.key",{"_index":1197,"t":{"592":{"position":[[869,18]]}}}],["path/to/cert.pem",{"_index":1195,"t":{"592":{"position":[[830,18]]}}}],["path/to/existing/config.cfg",{"_index":236,"t":{"491":{"position":[[204,29],[558,29]]}}}],["path/to/new/config.yaml",{"_index":241,"t":{"491":{"position":[[523,25]]}}}],["path/to/sit",{"_index":1511,"t":{"620":{"position":[[2623,15]]}}}],["path_regex",{"_index":1382,"t":{"606":{"position":[[11855,10]]}}}],["pathprefix",{"_index":1566,"t":{"626":{"position":[[491,16],[1285,16]]}}}],["pathprefix(`/no",{"_index":1568,"t":{"626":{"position":[[760,15]]}}}],["pathprefix(`/oauth2",{"_index":1546,"t":{"624":{"position":[[592,23]]},"626":{"position":[[1072,23]]}}}],["pattern",{"_index":480,"t":{"522":{"position":[[1366,8],[1783,8]]},"538":{"position":[[259,7],[379,7],[396,7]]},"540":{"position":[[449,7]]}}}],["pem",{"_index":447,"t":{"520":{"position":[[87,3],[182,3]]},"568":{"position":[[1023,4],[2383,3],[2528,3]]},"606":{"position":[[5356,3],[5533,3]]}}}],["per",{"_index":1118,"t":{"578":{"position":[[166,3]]},"606":{"position":[[352,3]]}}}],["perform",{"_index":927,"t":{"566":{"position":[[397,7],[1573,7]]}}}],["period",{"_index":387,"t":{"506":{"position":[[81,6]]},"540":{"position":[[2128,6]]},"606":{"position":[[2751,6]]}}}],["permiss",{"_index":780,"t":{"546":{"position":[[2239,11]]},"548":{"position":[[538,12],[703,12]]},"574":{"position":[[176,11]]}}}],["pick",{"_index":789,"t":{"548":{"position":[[171,4],[349,4]]},"566":{"position":[[2235,4],[2660,4]]}}}],["pin",{"_index":1190,"t":{"592":{"position":[[713,3]]}}}],["ping",{"_index":1215,"t":{"594":{"position":[[318,5]]},"606":{"position":[[7998,4],[8019,4],[8074,7],[8084,4],[11432,4],[11481,4]]},"612":{"position":[[716,5],[743,4],[791,4],[849,4]]}}}],["ping,/path2",{"_index":1320,"t":{"606":{"position":[[2687,14]]}}}],["pkce",{"_index":1289,"t":{"606":{"position":[[772,4]]}}}],["plain",{"_index":1290,"t":{"606":{"position":[[827,7]]},"620":{"position":[[2894,5]]}}}],["platform",{"_index":967,"t":{"566":{"position":[[2603,8]]},"592":{"position":[[86,8],[276,8]]}}}],["pleas",{"_index":88,"t":{"481":{"position":[[99,6],[144,6],[346,6],[434,6]]},"487":{"position":[[260,6],[835,6]]},"544":{"position":[[430,6]]}}}],["plural",{"_index":1281,"t":{"604":{"position":[[186,6]]},"610":{"position":[[257,6]]}}}],["poc",{"_index":1303,"t":{"606":{"position":[[1475,6]]}}}],["point",{"_index":908,"t":{"560":{"position":[[1349,8]]},"626":{"position":[[119,8]]}}}],["polici",{"_index":966,"t":{"566":{"position":[[2351,8]]}}}],["popul",{"_index":869,"t":{"556":{"position":[[1276,8]]}}}],["port",{"_index":932,"t":{"566":{"position":[[584,5]]},"592":{"position":[[390,4],[460,4]]},"606":{"position":[[14617,5],[14676,4],[14789,5],[14860,5]]}}}],["possibl",{"_index":77,"t":{"479":{"position":[[165,9]]},"481":{"position":[[467,9]]},"506":{"position":[[125,8]]},"556":{"position":[[82,9]]},"560":{"position":[[877,8]]}}}],["post",{"_index":93,"t":{"481":{"position":[[158,4]]}}}],["potenti",{"_index":115,"t":{"481":{"position":[[622,9]]},"540":{"position":[[1619,9]]}}}],["powershel",{"_index":1251,"t":{"602":{"position":[[86,10]]}}}],["pr",{"_index":91,"t":{"481":{"position":[[130,2]]},"483":{"position":[[373,3]]}}}],["prebuilt",{"_index":3,"t":{"477":{"position":[[34,8],[195,8],[329,8]]}}}],["preced",{"_index":650,"t":{"540":{"position":[[388,10]]},"600":{"position":[[118,11]]}}}],["prefer",{"_index":263,"t":{"493":{"position":[[582,6]]},"606":{"position":[[7000,9],[7050,6],[7076,6],[7485,9],[10788,9]]}}}],["preferred_usernam",{"_index":724,"t":{"544":{"position":[[489,18]]}}}],["prefix",{"_index":372,"t":{"504":{"position":[[219,6],[233,6],[255,6]]},"516":{"position":[[440,6],[454,6],[476,6]]},"540":{"position":[[627,8],[676,8]]},"594":{"position":[[136,6],[175,6]]},"606":{"position":[[1331,6],[8277,6],[13747,6],[14494,8]]},"610":{"position":[[75,9]]}}}],["preflight",{"_index":1377,"t":{"606":{"position":[[11513,9]]}}}],["prepend",{"_index":373,"t":{"504":{"position":[[275,9]]},"516":{"position":[[496,9]]}}}],["present",{"_index":120,"t":{"481":{"position":[[705,7]]},"582":{"position":[[237,7]]},"606":{"position":[[7610,8],[12533,9],[12649,9]]}}}],["preserv",{"_index":429,"t":{"514":{"position":[[362,9]]}}}],["preserverequestvalu",{"_index":425,"t":{"514":{"position":[[260,20],[286,20]]}}}],["pretti",{"_index":1083,"t":{"570":{"position":[[282,6]]}}}],["prevent",{"_index":515,"t":{"524":{"position":[[200,8]]},"584":{"position":[[460,7]]}}}],["preview",{"_index":958,"t":{"566":{"position":[[1682,7]]}}}],["previou",{"_index":149,"t":{"483":{"position":[[652,8]]}}}],["previous",{"_index":131,"t":{"483":{"position":[[287,10]]}}}],["primari",{"_index":323,"t":{"498":{"position":[[161,7]]}}}],["print",{"_index":238,"t":{"491":{"position":[[304,5]]},"606":{"position":[[13639,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":1254,"t":{"602":{"position":[[136,57]]}}}],["prior",{"_index":209,"t":{"487":{"position":[[245,5]]},"560":{"position":[[119,5]]}}}],["privat",{"_index":98,"t":{"481":{"position":[[222,8]]},"483":{"position":[[37,9]]},"520":{"position":[[72,7],[162,7]]},"554":{"position":[[1048,7]]},"568":{"position":[[1065,7]]},"606":{"position":[[5341,7],[5513,7],[12923,7]]}}}],["process",{"_index":1066,"t":{"568":{"position":[[2587,7]]},"616":{"position":[[965,8]]},"620":{"position":[[2934,9],[2980,9]]}}}],["product",{"_index":739,"t":{"546":{"position":[[370,8]]},"568":{"position":[[294,10]]},"606":{"position":[[11323,11]]}}}],["profil",{"_index":281,"t":{"493":{"position":[[933,7]]},"526":{"position":[[2131,7]]},"556":{"position":[[727,7]]},"560":{"position":[[284,7]]},"568":{"position":[[1992,7]]},"606":{"position":[[7535,7],[7554,7]]}}}],["profileurl",{"_index":598,"t":{"526":{"position":[[2095,10],[2113,10]]}}}],["project",{"_index":67,"t":{"479":{"position":[[33,8],[74,7],[204,8]]},"510":{"position":[[113,8],[131,8],[184,8]]},"546":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"554":{"position":[[13,8]]},"560":{"position":[[411,8]]},"562":{"position":[[55,8]]},"566":{"position":[[118,9]]},"606":{"position":[[3762,8],[3828,8]]}}}],["prometheu",{"_index":1218,"t":{"594":{"position":[[430,10]]},"606":{"position":[[8226,10]]}}}],["prompt",{"_index":286,"t":{"493":{"position":[[998,6]]},"606":{"position":[[85,6],[7580,6],[7599,7],[7628,6]]}}}],["prompt/approval_prompt",{"_index":288,"t":{"493":{"position":[[1014,22]]}}}],["promptallow",{"_index":469,"t":{"522":{"position":[[935,12]]}}}],["promptdefault",{"_index":472,"t":{"522":{"position":[[1099,14]]}}}],["properli",{"_index":894,"t":{"560":{"position":[[551,9]]}}}],["properti",{"_index":791,"t":{"548":{"position":[[319,12]]}}}],["propos",{"_index":129,"t":{"483":{"position":[[257,8]]}}}],["protect",{"_index":600,"t":{"526":{"position":[[2213,9]]},"548":{"position":[[892,7]]},"566":{"position":[[2189,11],[2279,8]]},"586":{"position":[[774,8]]},"606":{"position":[[10196,9]]}}}],["protectedresourc",{"_index":599,"t":{"526":{"position":[[2171,17]]}}}],["proto,host,uri",{"_index":1367,"t":{"606":{"position":[[10358,16]]}}}],["protocol",{"_index":873,"t":{"558":{"position":[[80,8]]},"568":{"position":[[842,9]]},"606":{"position":[[14694,8]]},"614":{"position":[[1071,8],[1101,9]]},"616":{"position":[[534,13],[860,8],[890,9]]}}}],["provid",{"_index":39,"t":{"477":{"position":[[444,8],[572,8],[622,8],[775,8]]},"485":{"position":[[309,8],[473,9],[740,8]]},"489":{"position":[[111,7]]},"493":{"position":[[803,8],[812,8],[856,8],[1215,8]]},"496":{"position":[[13,9]]},"498":{"position":[[1809,9],[1819,9],[1829,9],[1869,10]]},"500":{"position":[[13,9]]},"502":{"position":[[13,9]]},"508":{"position":[[13,9]]},"510":{"position":[[13,9]]},"512":{"position":[[13,9]]},"518":{"position":[[13,9],[234,9]]},"520":{"position":[[13,9]]},"522":{"position":[[13,9],[712,8]]},"524":{"position":[[13,9]]},"526":{"position":[[13,10],[24,8],[70,8],[212,10],[345,10],[584,9],[666,9],[744,9],[842,9],[929,9],[1015,9],[1101,9],[1190,9],[1313,9],[1414,10],[1425,8],[1504,9],[1581,9]]},"528":{"position":[[29,9],[87,8]]},"530":{"position":[[0,11],[47,9],[92,10]]},"544":{"position":[[54,8],[90,10],[195,9],[365,8],[400,8],[455,9],[564,9]]},"546":{"position":[[2208,8]]},"548":{"position":[[1245,8]]},"550":{"position":[[92,7],[455,8]]},"554":{"position":[[184,8],[1264,7]]},"556":{"position":[[24,8],[70,8],[1256,8]]},"560":{"position":[[10,8]]},"566":{"position":[[84,9],[133,8],[235,8],[297,9],[379,8],[553,8],[956,8],[970,8],[1001,9],[1554,8],[1918,8],[3050,8],[4377,8]]},"568":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"570":{"position":[[14,8],[125,9],[528,8]]},"572":{"position":[[378,9]]},"574":{"position":[[315,9]]},"576":{"position":[[323,8]]},"580":{"position":[[27,9],[61,8],[151,9]]},"590":{"position":[[47,9],[418,12]]},"592":{"position":[[1384,12]]},"596":{"position":[[169,8],[785,8]]},"606":{"position":[[1587,9],[2116,8],[7651,8],[7673,8],[7691,8],[7790,9],[7867,8],[7986,9],[12374,8],[12560,9],[13560,9],[14378,9],[14902,8]]},"608":{"position":[[194,9],[353,7],[691,7],[1149,9]]},"626":{"position":[[34,8],[2252,8]]}}}],["provider'",{"_index":1076,"t":{"568":{"position":[[3422,10]]},"596":{"position":[[309,10]]},"606":{"position":[[7909,10]]},"620":{"position":[[1699,10]]}}}],["provider.example.com",{"_index":1240,"t":{"596":{"position":[[894,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":1234,"t":{"596":{"position":[[486,36]]}}}],["provider.if",{"_index":592,"t":{"526":{"position":[[1766,11]]}}}],["provider.thi",{"_index":585,"t":{"526":{"position":[[1374,13]]}}}],["provider/sign_out_pag",{"_index":1237,"t":{"596":{"position":[[672,25]]}}}],["provider=\"github",{"_index":1109,"t":{"576":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":895,"t":{"560":{"position":[[605,17]]}}}],["provider=adf",{"_index":820,"t":{"550":{"position":[[333,13]]}}}],["provider=azur",{"_index":799,"t":{"548":{"position":[[1066,14]]}}}],["provider=bitbucket",{"_index":1103,"t":{"574":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":1096,"t":{"572":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":852,"t":{"556":{"position":[[440,17]]},"558":{"position":[[509,17]]}}}],["providermust",{"_index":587,"t":{"526":{"position":[[1465,12]]}}}],["provideror",{"_index":579,"t":{"526":{"position":[[1179,10]]}}}],["providers.new",{"_index":1120,"t":{"580":{"position":[[98,15]]}}}],["providerthi",{"_index":557,"t":{"526":{"position":[[173,12],[306,12]]}}}],["providertyp",{"_index":586,"t":{"526":{"position":[[1434,12]]},"528":{"position":[[39,12]]}}}],["proxi",{"_index":22,"t":{"477":{"position":[[245,5],[535,5],[648,5]]},"479":{"position":[[12,5]]},"481":{"position":[[65,5],[339,6]]},"485":{"position":[[32,5],[729,5]]},"491":{"position":[[58,5],[163,5],[467,5],[502,5]]},"493":{"position":[[191,5],[1511,5]]},"498":{"position":[[204,6],[490,7],[973,5],[1045,5],[1262,5]]},"540":{"position":[[108,7],[1057,8],[1669,5],[2416,8]]},"542":{"position":[[365,7]]},"544":{"position":[[179,5]]},"546":{"position":[[2306,5],[2422,6]]},"548":{"position":[[914,6],[1053,5]]},"550":{"position":[[320,5]]},"566":{"position":[[530,5],[789,5],[924,5],[1028,5],[1048,5],[3656,5],[3676,5],[4817,5],[4837,5]]},"568":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"572":{"position":[[206,5],[249,5]]},"574":{"position":[[108,6],[152,5]]},"576":{"position":[[238,6]]},"580":{"position":[[130,5]]},"582":{"position":[[109,5]]},"584":{"position":[[97,5],[396,5],[655,6]]},"588":{"position":[[52,5],[69,5]]},"590":{"position":[[38,5],[162,5],[221,5],[897,6]]},"592":{"position":[[133,5],[432,8],[451,5],[478,5],[1199,5],[1258,5]]},"594":{"position":[[7,5],[87,7],[169,5]]},"600":{"position":[[7,5]]},"606":{"position":[[8271,5],[8319,5],[8385,5],[8425,8],[8611,5],[10232,5],[10275,6],[12023,5],[13985,5],[14107,5],[14276,5]]},"608":{"position":[[7,5],[623,5],[978,5]]},"612":{"position":[[19,5]]},"614":{"position":[[937,5]]},"616":{"position":[[792,5]]},"620":{"position":[[192,8],[1763,5]]},"622":{"position":[[31,5]]},"624":{"position":[[223,8]]},"626":{"position":[[138,5],[208,6],[1236,5]]}}}],["proxiedto",{"_index":706,"t":{"540":{"position":[[2323,9]]}}}],["proxy'",{"_index":159,"t":{"485":{"position":[[96,7]]},"572":{"position":[[296,7]]},"596":{"position":[[91,7]]},"620":{"position":[[86,7]]},"624":{"position":[[93,7]]}}}],["proxy'secret",{"_index":938,"t":{"566":{"position":[[775,13]]}}}],["proxy.cfg",{"_index":1282,"t":{"604":{"position":[[225,9],[326,9]]}}}],["proxy.thi",{"_index":338,"t":{"498":{"position":[[929,10]]}}}],["proxy/oauth2",{"_index":13,"t":{"477":{"position":[[119,12],[232,12]]}}}],["proxy/oauth2/callback",{"_index":1093,"t":{"572":{"position":[[163,22]]}}}],["proxy/v7",{"_index":14,"t":{"477":{"position":[[132,8]]}}}],["proxy=tru",{"_index":1209,"t":{"592":{"position":[[1409,10]]},"626":{"position":[[306,11]]}}}],["proxy>/oauth2/callback",{"_index":1102,"t":{"574":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":810,"t":{"548":{"position":[[1388,17]]},"550":{"position":[[598,17]]}}}],["proxy_connect_timeout",{"_index":1206,"t":{"592":{"position":[[1094,21]]}}}],["proxy_pass",{"_index":1201,"t":{"592":{"position":[[955,10]]},"620":{"position":[[319,10],[657,10],[2584,10],[2948,10]]}}}],["proxy_pass_request_bodi",{"_index":1492,"t":{"620":{"position":[[883,23]]}}}],["proxy_read_timeout",{"_index":1208,"t":{"592":{"position":[[1142,18]]}}}],["proxy_send_timeout",{"_index":1207,"t":{"592":{"position":[[1119,18]]}}}],["proxy_set_head",{"_index":1202,"t":{"592":{"position":[[989,16],[1018,16],[1059,16]]},"620":{"position":[[353,16],[382,16],[423,16],[458,16],[559,16],[691,16],[720,16],[761,16],[847,16],[1218,16],[1249,16],[1428,16]]}}}],["proxyrawpath",{"_index":715,"t":{"542":{"position":[[118,12],[136,12]]}}}],["proxyredirecturi",{"_index":936,"t":{"566":{"position":[[702,18]]}}}],["proxyus",{"_index":1364,"t":{"606":{"position":[[8669,9]]}}}],["proxywebsocket",{"_index":708,"t":{"540":{"position":[[2371,15],[2392,15]]}}}],["pubjwk",{"_index":297,"t":{"493":{"position":[[1185,6]]},"568":{"position":[[1917,6]]},"606":{"position":[[8441,6]]}}}],["pubjwkurl",{"_index":449,"t":{"520":{"position":[[214,9],[231,9]]}}}],["pubkey",{"_index":451,"t":{"520":{"position":[[252,6]]},"606":{"position":[[8463,6]]}}}],["public",{"_index":837,"t":{"554":{"position":[[1011,6],[1229,6]]},"568":{"position":[[974,6]]}}}],["public_repo",{"_index":841,"t":{"554":{"position":[[1376,11]]}}}],["publicli",{"_index":95,"t":{"481":{"position":[[175,9]]}}}],["pull",{"_index":1462,"t":{"614":{"position":[[1173,6]]},"616":{"position":[[1036,6]]}}}],["push",{"_index":406,"t":{"508":{"position":[[341,4]]},"554":{"position":[[994,4]]},"606":{"position":[[3476,4]]}}}],["put",{"_index":15,"t":{"477":{"position":[[152,3]]}}}],["python",{"_index":1249,"t":{"602":{"position":[[66,6],[107,6]]}}}],["quay.io/oauth2",{"_index":21,"t":{"477":{"position":[[217,14]]}}}],["queri",{"_index":453,"t":{"522":{"position":[[75,5],[390,5],[1958,5],[2210,5]]},"538":{"position":[[76,5]]},"596":{"position":[[358,5]]},"598":{"position":[[117,5]]},"624":{"position":[[1287,6]]}}}],["quick",{"_index":1027,"t":{"568":{"position":[[1080,5]]}}}],["quickli",{"_index":76,"t":{"479":{"position":[[154,7]]}}}],["quot",{"_index":492,"t":{"522":{"position":[[1650,6]]}}}],["r_basicprofil",{"_index":912,"t":{"562":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":913,"t":{"562":{"position":[[187,15]]}}}],["rand",{"_index":1264,"t":{"602":{"position":[[296,4]]}}}],["random",{"_index":527,"t":{"524":{"position":[[586,6]]},"586":{"position":[[391,6],[442,6]]},"614":{"position":[[1210,6]]},"616":{"position":[[1073,6]]}}}],["random_password",{"_index":1277,"t":{"602":{"position":[[663,17]]}}}],["rang",{"_index":1395,"t":{"606":{"position":[[13884,6]]}}}],["raw",{"_index":716,"t":{"542":{"position":[[163,3]]},"620":{"position":[[2229,3]]}}}],["rd",{"_index":1232,"t":{"596":{"position":[[355,2]]}}}],["re",{"_index":1137,"t":{"584":{"position":[[799,2]]},"596":{"position":[[200,2]]}}}],["reach",{"_index":1386,"t":{"606":{"position":[[12430,5]]}}}],["read",{"_index":781,"t":{"546":{"position":[[2323,4]]},"554":{"position":[[1207,4]]},"574":{"position":[[240,4],[261,4]]}}}],["read_api",{"_index":892,"t":{"560":{"position":[[445,8]]}}}],["readi",{"_index":147,"t":{"483":{"position":[[613,6]]}}}],["real",{"_index":1071,"t":{"568":{"position":[[3070,4],[3215,4]]},"592":{"position":[[1037,4]]},"606":{"position":[[8511,4],[8569,4],[8655,4],[8685,4],[10314,4],[14008,4]]},"614":{"position":[[899,4]]},"616":{"position":[[754,4]]},"620":{"position":[[401,4],[739,4]]}}}],["realm",{"_index":848,"t":{"556":{"position":[[127,5]]},"558":{"position":[[35,5],[706,6],[768,5]]}}}],["realm>/protocol/openid",{"_index":858,"t":{"556":{"position":[[592,22],[687,22],[784,22],[885,22]]}}}],["reason",{"_index":777,"t":{"546":{"position":[[1998,6]]}}}],["recommend",{"_index":755,"t":{"546":{"position":[[867,11]]},"588":{"position":[[14,11]]},"606":{"position":[[845,13]]},"620":{"position":[[3574,11]]}}}],["redeem",{"_index":279,"t":{"493":{"position":[[911,6]]},"524":{"position":[[686,6]]},"554":{"position":[[1837,6]]},"556":{"position":[[631,6]]},"568":{"position":[[3765,6]]},"570":{"position":[[686,6]]},"576":{"position":[[527,6]]},"606":{"position":[[8695,6],[12298,6]]}}}],["redeemurl",{"_index":596,"t":{"526":{"position":[[2035,9],[2052,9]]}}}],["redempt",{"_index":597,"t":{"526":{"position":[[2075,10]]},"606":{"position":[[8719,10]]}}}],["redi",{"_index":184,"t":{"485":{"position":[[552,6]]},"548":{"position":[[1435,5]]},"550":{"position":[[645,5]]},"582":{"position":[[326,5]]},"586":{"position":[[4,5],[57,6],[606,5],[711,5],[873,5],[936,5],[964,5],[1055,5],[1112,5],[1175,5],[1208,5],[1254,5],[1357,5],[1412,5],[1475,5],[1505,5]]},"606":{"position":[[8846,5],[8898,5],[8983,5],[9003,5],[9038,5],[9055,5],[9106,5],[9128,5],[9163,5],[9221,5],[9244,5],[9275,5],[9339,5],[9374,5],[9391,5],[9425,5],[9480,5],[9501,5],[9554,5],[9640,5],[9661,5],[9695,5],[9721,5],[9779,5],[9814,5],[9846,5],[9879,5],[10653,5]]}}}],["redirect",{"_index":174,"t":{"485":{"position":[[276,10]]},"542":{"position":[[245,10]]},"544":{"position":[[123,8]]},"546":{"position":[[699,8]]},"552":{"position":[[95,8]]},"556":{"position":[[174,8]]},"558":{"position":[[116,8],[604,8]]},"560":{"position":[[322,8],[625,8],[703,8],[1318,8]]},"562":{"position":[[217,8]]},"566":{"position":[[1054,8],[2720,8],[3969,8],[4029,8]]},"568":{"position":[[1379,8],[1619,8],[3610,8]]},"570":{"position":[[448,12]]},"572":{"position":[[315,8],[562,8],[680,8]]},"576":{"position":[[87,8],[267,8]]},"594":{"position":[[713,8]]},"596":{"position":[[22,8],[269,8],[380,8],[550,8],[585,8],[646,9],[873,8],[1006,8]]},"606":{"position":[[2294,9],[2855,8],[2944,9],[8741,8],[8771,8],[10397,8],[13713,11],[14580,8]]},"620":{"position":[[490,8],[591,8]]},"626":{"position":[[0,8],[372,9],[561,8],[572,9],[781,11],[849,8],[1894,9],[2059,9]]}}}],["redis://host[:port",{"_index":1365,"t":{"606":{"position":[[8934,21],[9083,20],[9591,21]]}}}],["reduc",{"_index":1434,"t":{"612":{"position":[[804,8]]}}}],["refer",{"_index":223,"t":{"487":{"position":[[552,9],[853,9]]},"489":{"position":[[94,9]]},"532":{"position":[[57,10]]},"568":{"position":[[930,5],[1284,8]]},"570":{"position":[[367,5]]}}}],["refresh",{"_index":756,"t":{"546":{"position":[[882,7],[936,7],[2540,9]]},"566":{"position":[[2830,7],[4138,7]]},"584":{"position":[[734,10]]},"606":{"position":[[1495,7],[1512,7],[14405,8]]},"620":{"position":[[1494,8]]}}}],["refresh/access/id",{"_index":1152,"t":{"586":{"position":[[787,17]]}}}],["refreshes.default",{"_index":532,"t":{"524":{"position":[[712,17]]}}}],["regardless",{"_index":1172,"t":{"590":{"position":[[679,10]]}}}],["regex",{"_index":157,"t":{"485":{"position":[[70,6]]},"606":{"position":[[11592,5]]}}}],["regist",{"_index":49,"t":{"477":{"position":[[585,8]]},"544":{"position":[[17,8]]},"568":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":725,"t":{"546":{"position":[[16,12]]},"548":{"position":[[114,14],[156,14]]},"562":{"position":[[18,12]]}}}],["regular",{"_index":133,"t":{"483":{"position":[[365,7]]},"522":{"position":[[1237,7],[1619,7]]},"538":{"position":[[417,7]]},"540":{"position":[[534,7]]}}}],["releas",{"_index":6,"t":{"477":{"position":[[59,7],[462,7]]},"483":{"position":[[493,8],[661,9]]},"498":{"position":[[298,8]]},"524":{"position":[[764,8]]}}}],["reload",{"_index":1575,"t":{"626":{"position":[[2336,6]]}}}],["remain",{"_index":660,"t":{"540":{"position":[[711,9]]},"562":{"position":[[300,9]]}}}],["remot",{"_index":1400,"t":{"606":{"position":[[14139,6]]}}}],["remote_addr",{"_index":1204,"t":{"592":{"position":[[1045,13]]},"620":{"position":[[409,13],[747,13]]}}}],["remote_address",{"_index":1438,"t":{"614":{"position":[[181,16]]},"616":{"position":[[62,16]]}}}],["remov",{"_index":205,"t":{"487":{"position":[[211,8]]},"489":{"position":[[255,7]]},"491":{"position":[[368,6],[429,7]]},"493":{"position":[[1467,6]]},"596":{"position":[[76,7]]}}}],["renam",{"_index":206,"t":{"487":{"position":[[220,7]]}}}],["replac",{"_index":217,"t":{"487":{"position":[[479,7]]},"604":{"position":[[65,9]]},"610":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":1271,"t":{"602":{"position":[[550,19]]}}}],["repli",{"_index":797,"t":{"548":{"position":[[779,6]]}}}],["repo",{"_index":404,"t":{"508":{"position":[[176,4],[188,4]]},"554":{"position":[[1076,8]]},"568":{"position":[[2497,4]]},"606":{"position":[[3296,4]]}}}],["report",{"_index":1468,"t":{"614":{"position":[[1381,8]]},"616":{"position":[[1453,8]]}}}],["repositori",{"_index":366,"t":{"502":{"position":[[108,10],[126,10],[186,10]]},"508":{"position":[[239,10],[304,10],[360,10]]},"554":{"position":[[329,11],[953,11],[1018,10],[1056,11],[1126,10],[1236,10],[1320,11],[1445,10]]},"574":{"position":[[245,12],[696,10]]},"606":{"position":[[3349,10],[3440,10],[3495,11]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":1088,"t":{"570":{"position":[[714,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":1087,"t":{"570":{"position":[[647,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":1089,"t":{"570":{"position":[[786,39]]}}}],["url]/stat",{"_index":1423,"t":{"608":{"position":[[984,13]]}}}],["url]/var/www/stat",{"_index":1419,"t":{"608":{"position":[[629,21]]}}}],["urldefault",{"_index":522,"t":{"524":{"position":[[457,10]]}}}],["urleg",{"_index":512,"t":{"524":{"position":[[102,6],[1006,6]]}}}],["urlparameterrul",{"_index":504,"t":{"522":{"position":[[2102,18]]},"538":{"position":[[32,16]]}}}],["us",{"_index":18,"t":{"477":{"position":[[185,5],[294,5],[654,5]]},"481":{"position":[[550,4]]},"483":{"position":[[3,3],[361,3]]},"485":{"position":[[761,6]]},"487":{"position":[[293,3],[659,5]]},"489":{"position":[[3,3],[141,5],[182,5]]},"491":{"position":[[64,5],[473,5]]},"493":{"position":[[100,5],[1352,3]]},"498":{"position":[[394,4],[626,4],[861,4],[953,4],[963,5],[1217,4],[1433,3],[1539,4],[1741,3],[1842,4]]},"504":{"position":[[517,4]]},"508":{"position":[[285,3]]},"514":{"position":[[183,4]]},"516":{"position":[[738,4]]},"518":{"position":[[210,5]]},"520":{"position":[[98,4],[193,4]]},"522":{"position":[[542,4],[1746,3]]},"524":{"position":[[902,3],[1478,4]]},"526":{"position":[[467,4],[1738,4],[1826,4]]},"528":{"position":[[55,4]]},"540":{"position":[[316,4],[462,4],[528,5],[730,3],[2058,4]]},"544":{"position":[[390,5]]},"548":{"position":[[230,3],[1224,5]]},"550":{"position":[[435,5]]},"554":{"position":[[1426,3],[1686,5]]},"556":{"position":[[47,3],[1135,4],[1440,5]]},"560":{"position":[[160,5],[1042,5]]},"564":{"position":[[175,4]]},"566":{"position":[[194,3],[263,4],[566,5],[1484,5],[1617,5],[4707,3]]},"568":{"position":[[2172,3],[3211,3]]},"570":{"position":[[105,5],[276,5]]},"572":{"position":[[370,3],[670,3]]},"574":{"position":[[43,3],[307,3],[555,3],[707,3]]},"578":{"position":[[29,3],[105,3],[209,3]]},"580":{"position":[[139,3]]},"582":{"position":[[115,4]]},"584":{"position":[[78,4],[287,5]]},"586":{"position":[[863,5],[1102,3],[1118,3],[1363,3],[1481,3],[1511,3]]},"590":{"position":[[752,4],[861,4]]},"592":{"position":[[218,5],[301,3],[670,3]]},"594":{"position":[[375,3],[648,4],[774,4],[904,4],[1053,3]]},"596":{"position":[[345,5]]},"598":{"position":[[97,5]]},"602":{"position":[[35,3]]},"604":{"position":[[286,4]]},"606":{"position":[[768,3],[1049,4],[1318,3],[1990,3],[2236,3],[3005,3],[3085,3],[3421,3],[4879,5],[5002,3],[5367,4],[5544,4],[6702,4],[7086,3],[7172,3],[7240,4],[7762,4],[7851,4],[7948,4],[8045,4],[8132,4],[8547,4],[8956,4],[8989,3],[9300,4],[9368,3],[9453,4],[9486,3],[9613,4],[9646,3],[9667,3],[9754,3],[9785,3],[9913,3],[9981,3],[10389,4],[10824,7],[10866,4],[11034,7],[11142,7],[11316,3],[12548,5],[12664,5],[14289,3],[14448,5],[14866,3]]},"608":{"position":[[830,4],[1214,4]]},"610":{"position":[[299,6]]},"612":{"position":[[111,5],[735,5]]},"614":{"position":[[889,3]]},"616":{"position":[[744,3]]},"620":{"position":[[1651,5],[2677,3],[2719,3],[3589,3]]},"626":{"position":[[55,3],[330,3],[2299,3]]}}}],["usag",{"_index":321,"t":{"498":{"position":[[62,5]]},"586":{"position":[[851,6]]}}}],["use.typ",{"_index":627,"t":{"536":{"position":[[218,13],[314,13]]}}}],["user",{"_index":171,"t":{"485":{"position":[[248,4],[643,4]]},"493":{"position":[[385,4],[1059,4]]},"498":{"position":[[92,5],[436,4]]},"502":{"position":[[161,4]]},"508":{"position":[[371,5],[386,5],[399,5]]},"518":{"position":[[173,5]]},"524":{"position":[[1120,4],[1220,4],[1321,4]]},"526":{"position":[[1635,5]]},"540":{"position":[[795,5]]},"546":{"position":[[393,6],[2171,4],[2439,4]]},"548":{"position":[[410,5],[661,6]]},"554":{"position":[[436,4],[463,5],[971,5],[1196,5],[1286,4],[1481,4],[1619,8]]},"562":{"position":[[119,4]]},"566":{"position":[[2949,5]]},"570":{"position":[[58,5]]},"574":{"position":[[659,5]]},"582":{"position":[[138,4]]},"584":{"position":[[790,5]]},"586":{"position":[[184,4]]},"594":{"position":[[258,4]]},"596":{"position":[[12,4],[121,4],[282,4],[393,4]]},"606":{"position":[[3516,4],[3544,5],[4403,4],[4474,5],[6403,4],[6960,5],[7066,4],[7294,4],[7390,4],[7425,5],[8089,4],[8109,4],[8177,4],[10719,5],[13474,5]]},"612":{"position":[[748,4]]},"614":{"position":[[94,4],[356,4],[425,4],[1367,4]]},"616":{"position":[[1439,4]]},"620":{"position":[[1013,4],[1115,5],[1237,4],[1242,6]]}}}],["user'",{"_index":334,"t":{"498":{"position":[[760,6],[1148,6]]},"582":{"position":[[17,6]]},"594":{"position":[[919,6]]},"606":{"position":[[6325,6]]}}}],["user/prefer_email_to_us",{"_index":264,"t":{"493":{"position":[[598,25]]}}}],["user/settings/appl",{"_index":1106,"t":{"576":{"position":[[52,28]]}}}],["user@domain.com",{"_index":1439,"t":{"614":{"position":[[215,17]]},"616":{"position":[[96,17]]}}}],["user_ag",{"_index":1473,"t":{"616":{"position":[[195,14]]}}}],["userag",{"_index":1467,"t":{"614":{"position":[[1346,9]]},"616":{"position":[[548,14],[1418,9]]}}}],["useridclaim",{"_index":546,"t":{"524":{"position":[[1255,11],[1274,11]]}}}],["userinfo",{"_index":871,"t":{"556":{"position":[[1376,8]]}}}],["usernam",{"_index":381,"t":{"504":{"position":[[475,8]]},"508":{"position":[[416,9]]},"516":{"position":[[696,8]]},"554":{"position":[[1506,8],[1644,9]]},"606":{"position":[[2062,8],[3562,8],[7010,8],[7115,8],[7176,8],[7495,8],[10798,8]]},"614":{"position":[[63,8],[708,13],[1416,8],[1457,8]]},"616":{"position":[[444,13],[1488,8],[1529,8]]}}}],["username@email.com",{"_index":1469,"t":{"614":{"position":[[1425,18]]},"616":{"position":[[1497,18]]}}}],["usptream",{"_index":689,"t":{"540":{"position":[[1683,8]]}}}],["utc",{"_index":1345,"t":{"606":{"position":[[5062,3]]}}}],["util",{"_index":580,"t":{"526":{"position":[[1200,7]]}}}],["uuid",{"_index":1463,"t":{"614":{"position":[[1217,4]]},"616":{"position":[[1080,4]]}}}],["v2",{"_index":1535,"t":{"624":{"position":[[12,2]]},"626":{"position":[[93,2]]}}}],["v3.0.0",{"_index":43,"t":{"477":{"position":[[492,7]]}}}],["v7.3.0",{"_index":7,"t":{"477":{"position":[[70,7]]}}}],["valid",{"_index":32,"t":{"477":{"position":[[354,9]]},"483":{"position":[[231,8]]},"493":{"position":[[966,8]]},"506":{"position":[[254,5]]},"526":{"position":[[2299,10]]},"528":{"position":[[109,5]]},"538":{"position":[[172,5]]},"544":{"position":[[189,5]]},"546":{"position":[[958,9]]},"552":{"position":[[83,5]]},"554":{"position":[[1910,8]]},"556":{"position":[[168,5],[827,8]]},"558":{"position":[[110,5]]},"570":{"position":[[756,8],[849,8]]},"576":{"position":[[595,8]]},"602":{"position":[[572,5]]},"606":{"position":[[12506,10],[12622,10],[13572,8],[13605,10],[14574,5]]}}}],["validateurl",{"_index":601,"t":{"526":{"position":[[2248,11],[2267,11]]}}}],["valu",{"_index":319,"t":{"496":{"position":[[117,5]]},"498":{"position":[[723,6],[798,6],[1111,6],[1186,6]]},"500":{"position":[[143,5]]},"504":{"position":[[62,5],[191,5],[292,5],[433,5],[538,6]]},"514":{"position":[[330,6],[533,6],[554,6],[582,6]]},"516":{"position":[[60,5],[110,5],[139,5],[152,5],[190,6],[337,6],[412,5],[513,5],[654,5],[759,6]]},"522":{"position":[[215,5],[224,6],[521,5],[732,5],[790,5],[922,6],[949,6],[963,6],[979,6],[1086,6],[1131,6],[1147,6],[1217,6],[2031,5],[2040,6]]},"526":{"position":[[186,5],[319,5],[1388,5]]},"532":{"position":[[89,6],[184,5],[197,5],[235,6],[382,6]]},"538":{"position":[[250,5],[320,5],[335,5],[373,5],[481,6],[560,6],[610,5]]},"540":{"position":[[259,5]]},"544":{"position":[[423,6]]},"548":{"position":[[1011,5]]},"556":{"position":[[1539,5]]},"586":{"position":[[203,5]]},"606":{"position":[[38,6],[3931,5]]},"608":{"position":[[795,5]]},"614":{"position":[[979,5]]},"616":{"position":[[834,5]]}}}],["values.nam",{"_index":423,"t":{"514":{"position":[[204,12]]}}}],["values/acr_valu",{"_index":290,"t":{"493":{"position":[[1041,17]]}}}],["var/www/stat",{"_index":1422,"t":{"608":{"position":[[933,16]]}}}],["variabl",{"_index":59,"t":{"477":{"position":[[710,9]]},"493":{"position":[[61,9]]},"516":{"position":[[255,9]]},"532":{"position":[[300,9]]},"568":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"570":{"position":[[192,9]]},"594":{"position":[[189,9]]},"600":{"position":[[69,9],[183,9],[209,9]]},"610":{"position":[[63,8],[238,8]]},"612":{"position":[[613,10]]},"614":{"position":[[776,9],[804,8]]},"616":{"position":[[628,9],[659,8]]},"618":{"position":[[500,9],[532,8]]},"620":{"position":[[2202,9],[2838,9],[3826,8]]}}}],["verif",{"_index":520,"t":{"524":{"position":[[364,12],[1487,13],[1598,12]]},"540":{"position":[[1543,12]]},"606":{"position":[[5858,12],[6216,13],[6581,12]]}}}],["verifi",{"_index":35,"t":{"477":{"position":[[391,9]]},"508":{"position":[[294,9]]},"524":{"position":[[530,9],[1424,8]]},"554":{"position":[[1435,9]]},"606":{"position":[[3430,9],[5815,8],[6031,9],[12093,8],[12489,6],[12605,6]]}}}],["verifieddefault",{"_index":518,"t":{"524":{"position":[[260,15]]}}}],["verify/ssl_upstream_insecure_skip_verifi",{"_index":251,"t":{"493":{"position":[[252,40]]}}}],["version",{"_index":42,"t":{"477":{"position":[[484,7]]},"481":{"position":[[679,8]]},"536":{"position":[[123,7],[404,7],[466,7]]},"560":{"position":[[50,7],[111,7]]},"590":{"position":[[581,7],[670,8],[705,7],[772,8],[869,7]]},"606":{"position":[[12950,7],[12977,7],[13627,7],[13645,7]]}}}],["version=tls1.3",{"_index":1170,"t":{"590":{"position":[[615,15]]}}}],["via",{"_index":308,"t":{"493":{"position":[[1377,3],[1390,3]]},"522":{"position":[[382,3],[2202,3]]},"568":{"position":[[3308,3]]},"570":{"position":[[161,3]]},"586":{"position":[[717,3],[958,3]]},"592":{"position":[[733,3]]},"600":{"position":[[31,3]]},"606":{"position":[[338,3],[6660,3],[6865,3],[9820,3]]},"614":{"position":[[1027,3]]},"620":{"position":[[71,3],[1007,3],[2944,3],[3755,3]]},"624":{"position":[[78,3]]}}}],["visit",{"_index":951,"t":{"566":{"position":[[1351,8]]}}}],["volum",{"_index":1435,"t":{"612":{"position":[[817,7]]}}}],["vulner",{"_index":85,"t":{"481":{"position":[[37,13],[606,13]]},"483":{"position":[[75,16],[308,15]]}}}],["wait",{"_index":713,"t":{"540":{"position":[[2541,4]]},"606":{"position":[[13283,4]]}}}],["want",{"_index":642,"t":{"538":{"position":[[574,4]]},"548":{"position":[[396,4],[884,4]]},"566":{"position":[[1739,4]]},"568":{"position":[[580,4]]},"586":{"position":[[1094,4]]},"596":{"position":[[865,4]]},"608":{"position":[[677,5]]}}}],["warn",{"_index":210,"t":{"487":{"position":[[251,8]]},"606":{"position":[[11258,9],[14155,8]]}}}],["way",{"_index":458,"t":{"522":{"position":[[328,4]]},"554":{"position":[[217,4]]},"568":{"position":[[1086,3]]}}}],["web",{"_index":744,"t":{"546":{"position":[[529,4]]},"566":{"position":[[1259,3],[2591,3],[3802,3],[3921,3]]}}}],["webapp",{"_index":790,"t":{"548":{"position":[[194,7]]}}}],["websocket",{"_index":709,"t":{"540":{"position":[[2428,10]]},"606":{"position":[[8391,10],[8415,9]]}}}],["websockets/proxy_websocket",{"_index":249,"t":{"493":{"position":[[197,27]]}}}],["well",{"_index":624,"t":{"536":{"position":[[91,4]]},"586":{"position":[[924,4],[1145,4],[1308,5]]},"606":{"position":[[2536,5],[2574,5]]}}}],["whenstream",{"_index":701,"t":{"540":{"position":[[2172,13]]}}}],["whether",{"_index":427,"t":{"514":{"position":[[318,7]]},"538":{"position":[[155,7]]},"540":{"position":[[2281,7]]},"560":{"position":[[144,7]]},"570":{"position":[[241,7]]},"606":{"position":[[10291,7]]}}}],["whitelist",{"_index":1241,"t":{"596":{"position":[[954,9]]},"606":{"position":[[13662,9],[14458,9],[14809,11]]}}}],["whole",{"_index":644,"t":{"538":{"position":[[594,5]]},"624":{"position":[[236,5]]}}}],["whose",{"_index":300,"t":{"493":{"position":[[1258,5]]},"522":{"position":[[784,5]]}}}],["wide_authority_to_your_service_account",{"_index":768,"t":{"546":{"position":[[1438,38]]}}}],["window",{"_index":795,"t":{"548":{"position":[[577,8]]},"550":{"position":[[45,7]]}}}],["wish",{"_index":961,"t":{"566":{"position":[[1839,4],[2271,4],[2364,4],[2969,4]]},"572":{"position":[[95,5]]}}}],["within",{"_index":86,"t":{"481":{"position":[[51,6]]},"487":{"position":[[131,6]]},"498":{"position":[[230,6]]},"504":{"position":[[81,6]]},"514":{"position":[[234,6]]},"532":{"position":[[112,6]]},"540":{"position":[[912,6]]},"554":{"position":[[703,6]]},"566":{"position":[[4737,6]]},"584":{"position":[[568,6]]}}}],["without",{"_index":208,"t":{"487":{"position":[[237,7]]},"498":{"position":[[307,7]]},"620":{"position":[[184,7]]},"624":{"position":[[215,7]]},"626":{"position":[[43,7]]}}}],["wizard",{"_index":819,"t":{"550":{"position":[[221,6]]}}}],["wo",{"_index":1570,"t":{"626":{"position":[[846,2],[2056,2]]}}}],["work",{"_index":69,"t":{"479":{"position":[[61,4]]},"560":{"position":[[102,4],[546,4]]},"566":{"position":[[1236,7],[1940,5],[2437,4]]},"568":{"position":[[210,4]]},"606":{"position":[[13531,5]]},"620":{"position":[[1528,4]]}}}],["write",{"_index":840,"t":{"554":{"position":[[1300,5]]}}}],["x",{"_index":870,"t":{"556":{"position":[[1289,1]]},"592":{"position":[[1035,1],[1076,1]]},"596":{"position":[[570,1]]},"606":{"position":[[6664,1],[6745,1],[6948,1],[6966,1],[6988,1],[7413,1],[7431,1],[7451,1],[7473,1],[8636,1],[8653,1],[8667,1],[8683,1],[10014,1],[10312,1],[10346,1],[10704,1],[10725,1],[10748,1],[10773,1],[10897,1],[11926,1]]},"614":{"position":[[897,1]]},"616":{"position":[[752,1]]},"620":{"position":[[399,1],[440,1],[475,1],[576,1],[737,1],[778,1],[1011,1],[1022,1],[1235,1],[1266,1],[1445,1]]},"626":{"position":[[337,1],[2001,1],[2177,1]]}}}],["x.y.z.linux",{"_index":46,"t":{"477":{"position":[[541,11]]}}}],["x509",{"_index":1030,"t":{"568":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":1358,"t":{"606":{"position":[[6718,12],[10682,12]]},"620":{"position":[[1080,12]]}}}],["xauthrequest/set_xauthrequest",{"_index":261,"t":{"493":{"position":[[502,29]]}}}],["xxx\"client_secret",{"_index":1003,"t":{"566":{"position":[[4580,18]]}}}],["xxxxx\"client_secret",{"_index":975,"t":{"566":{"position":[[3263,20]]}}}],["yaml",{"_index":216,"t":{"487":{"position":[[464,4]]},"489":{"position":[[47,4]]},"491":{"position":[[295,4]]},"522":{"position":[[1482,4]]},"624":{"position":[[288,6]]}}}],["you'd",{"_index":839,"t":{"554":{"position":[[1166,5]]}}}],["yourcompany.com",{"_index":1292,"t":{"606":{"position":[[975,18]]}}}],["yourself",{"_index":646,"t":{"538":{"position":[[635,8]]}}}],["yyy\"pass_access_token",{"_index":1004,"t":{"566":{"position":[[4601,22]]}}}],["yyyyy\"pass_access_token",{"_index":976,"t":{"566":{"position":[[3286,24]]}}}],["zzz\"cookie_secur",{"_index":1005,"t":{"566":{"position":[[4646,18]]}}}],["zzzzz\"skip_provider_button",{"_index":978,"t":{"566":{"position":[[3333,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file diff --git a/docs/7.4.x/behaviour/index.html b/docs/7.4.x/behaviour/index.html index bc5f0e4d..e586c674 100644 --- a/docs/7.4.x/behaviour/index.html +++ b/docs/7.4.x/behaviour/index.html @@ -4,13 +4,13 @@ Behaviour | OAuth2 Proxy - +
    Version: 7.4.x

    Behaviour

    1. Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens).
    2. If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned)
    3. After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set
    4. The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration)

    Notice that the proxy also provides a number of useful endpoints.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/7.4.x/community/security/index.html b/docs/7.4.x/community/security/index.html index 725460e6..719b0dd5 100644 --- a/docs/7.4.x/community/security/index.html +++ b/docs/7.4.x/community/security/index.html @@ -4,7 +4,7 @@ Security | OAuth2 Proxy - + @@ -28,7 +28,7 @@ If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/7.4.x/configuration/alpha-config/index.html b/docs/7.4.x/configuration/alpha-config/index.html index 0d93e7be..7a024160 100644 --- a/docs/7.4.x/configuration/alpha-config/index.html +++ b/docs/7.4.x/configuration/alpha-config/index.html @@ -4,7 +4,7 @@ Alpha Configuration | OAuth2 Proxy - + @@ -62,7 +62,7 @@ passed to the /oauth2/start endpoint are checked to determine wheth they are valid overrides for the given parameter passed to the IdP's login URL. Either Value or Pattern should be supplied, not both.

    FieldTypeDescription
    valuestringA Value rule matches just this specific value
    patternstringA Pattern rule gives a regular expression that must be matched by
    some substring of the value. The expression is not automatically
    anchored to the start and end of the value, if you want to restrict
    the whole parameter value you must anchor it yourself with ^ and $.

    Upstream​

    (Appears on: UpstreamConfig)

    Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path.

    FieldTypeDescription
    idstringID should be a unique identifier for the upstream.
    This value is required for all upstreams.
    pathstringPath is used to map requests to the upstream server.
    The closest match will take precedence and all Paths must be unique.
    Path can also take a pattern when used with RewriteTarget.
    Path segments can be captured and matched using regular experessions.
    Eg:
    - ^/foo$: Match only the explicit path /foo
    - ^/bar/$: Match any path prefixed with /bar/
    - ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget
    rewriteTargetstringRewriteTarget allows users to rewrite the request path before it is sent to
    the upstream server.
    Use the Path to capture segments for reuse within the rewrite target.
    Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewrite
    the request /baz/abc/123 to /foo/abc/123 before proxying to the
    upstream server.
    uristringThe URI of the upstream server. This may be an HTTP(S) server of a File
    based URL. It may include a path, in which case all requests will be served
    under that path.
    Eg:
    - http://localhost:8080
    - https://service.localhost
    - https://service.localhost/path
    - file://host/path
    If the URI's path is "/base" and the incoming request was for "/dir",
    the upstream request will be for "/base/dir".
    insecureSkipTLSVerifyboolInsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.
    This option is insecure and will allow potential Man-In-The-Middle attacks
    betweem OAuth2 Proxy and the usptream server.
    Defaults to false.
    staticboolStatic will make all requests to this upstream have a static response.
    The response will have a body of "Authenticated" and a response code
    matching StaticCode.
    If StaticCode is not set, the response will return a 200 response.
    staticCodeintStaticCode determines the response code for the Static response.
    This option can only be used with Static enabled.
    flushIntervalDurationFlushInterval is the period between flushing the response buffer when
    streaming response from the upstream.
    Defaults to 1 second.
    passHostHeaderboolPassHostHeader determines whether the request host header should be proxied
    to the upstream server.
    Defaults to true.
    proxyWebSocketsboolProxyWebSockets enables proxying of websockets to upstream servers
    Defaults to true.
    timeoutDurationTimeout is the maximum duration the server will wait for a response from the upstream server.
    Defaults to 30 seconds.

    UpstreamConfig​

    (Appears on: AlphaOptions)

    UpstreamConfig is a collection of definitions for upstream servers.

    FieldTypeDescription
    proxyRawPathboolProxyRawPath will pass the raw url path to upstream allowing for url's
    like: "/%2F/" which would otherwise be redirected to "/"
    upstreams[]UpstreamUpstreams represents the configuration for the upstream servers.
    Requests will be proxied to this upstream if the path matches the request path.
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/7.4.x/configuration/oauth_provider/index.html b/docs/7.4.x/configuration/oauth_provider/index.html index 53983e55..c83c5f3c 100644 --- a/docs/7.4.x/configuration/oauth_provider/index.html +++ b/docs/7.4.x/configuration/oauth_provider/index.html @@ -4,7 +4,7 @@ OAuth Provider Configuration | OAuth2 Proxy - + @@ -59,7 +59,7 @@ to setup the client id and client secret. Your "Redirection URI" will Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/7.4.x/configuration/overview/index.html b/docs/7.4.x/configuration/overview/index.html index f24f3503..499c18ae 100644 --- a/docs/7.4.x/configuration/overview/index.html +++ b/docs/7.4.x/configuration/overview/index.html @@ -4,7 +4,7 @@ Overview | OAuth2 Proxy - + @@ -19,7 +19,7 @@ The default format is configured as follows:

    {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}}

    Available variables for request logging:

    VariableExampleDescription
    Client74.125.224.72The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true.
    Hostdomain.comThe value of the Host header.
    ProtocolHTTP/1.0The request protocol.
    RequestDuration0.001The time in seconds that a request took to process.
    RequestID00010203-0405-4607-8809-0a0b0c0d0e0fThe request ID pulled from the --request-id-header. Random UUID if empty
    RequestMethodGETThe request method.
    RequestURI"/oauth2/auth"The URI path of the request.
    ResponseSize12The size in bytes of the response.
    StatusCode200The HTTP status code of the response.
    Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
    Upstream-The upstream data of the HTTP request.
    UserAgent-The full user agent as reported by the requesting client.
    Usernameusername@email.comThe email or username of the auth request.

    Standard Log Format​

    All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below:

    [19/Mar/2015:17:20:19 -0400] [main.go:40] <MESSAGE>

    If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows:

    [{{.Timestamp}}] [{{.File}}] {{.Message}}

    Available variables for standard logging:

    VariableExampleDescription
    Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
    Filemain.go:40The file and line number of the logging statement.
    MessageHTTP: listening on 127.0.0.1:4180The details of the log statement.

    Configuring for use with the Nginx auth_request directive​

    The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example:

    server {
      listen 443 ssl;
      server_name ...;
      include ssl/ssl.conf;

      location /oauth2/ {
        proxy_pass       http://127.0.0.1:4180;
        proxy_set_header Host                    $host;
        proxy_set_header X-Real-IP               $remote_addr;
        proxy_set_header X-Scheme                $scheme;
        proxy_set_header X-Auth-Request-Redirect $request_uri;
        # or, if you are handling multiple domains:
        # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
      }
      location = /oauth2/auth {
        proxy_pass       http://127.0.0.1:4180;
        proxy_set_header Host             $host;
        proxy_set_header X-Real-IP        $remote_addr;
        proxy_set_header X-Scheme         $scheme;
        # nginx auth_request includes headers but not body
        proxy_set_header Content-Length   "";
        proxy_pass_request_body           off;
      }

      location / {
        auth_request /oauth2/auth;
        error_page 401 = /oauth2/sign_in;

        # pass information via X-User and X-Email headers to backend,
        # requires running with --set-xauthrequest flag
        auth_request_set $user   $upstream_http_x_auth_request_user;
        auth_request_set $email  $upstream_http_x_auth_request_email;
        proxy_set_header X-User  $user;
        proxy_set_header X-Email $email;

        # if you enabled --pass-access-token, this will pass the token to the backend
        auth_request_set $token  $upstream_http_x_auth_request_access_token;
        proxy_set_header X-Access-Token $token;

        # if you enabled --cookie-refresh, this is needed for it to work with auth_request
        auth_request_set $auth_cookie $upstream_http_set_cookie;
        add_header Set-Cookie $auth_cookie;

        # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
        # limit and so the OAuth2 Proxy splits these into multiple parts.
        # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
        # so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
        auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;

        # Extract the Cookie attributes from the first Set-Cookie header and append them
        # to the second part ($upstream_cookie_* variables only contain the raw cookie content)
        if ($auth_cookie ~* "(; .*)") {
            set $auth_cookie_name_0 $auth_cookie;
            set $auth_cookie_name_1 "auth_cookie_name_1=$auth_cookie_name_upstream_1$1";
        }

        # Send both Set-Cookie headers now if there was a second part
        if ($auth_cookie_name_upstream_1) {
            add_header Set-Cookie $auth_cookie_name_0;
            add_header Set-Cookie $auth_cookie_name_1;
        }

        proxy_pass http://backend/;
        # or "root /path/to/site;" or "fastcgi_pass ..." etc
      }
    }

    When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module.

    nginx.ingress.kubernetes.io/auth-response-headers: Authorization
    nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
    nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
    nginx.ingress.kubernetes.io/configuration-snippet: |
      auth_request_set $name_upstream_1 $upstream_cookie_name_1;

      access_by_lua_block {
        if ngx.var.name_upstream_1 ~= "" then
          ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
        end
      }

    It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure).

    You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be "$upstream_cookie__oauth2_proxy_1" instead of "$upstream_cookie_name_1" and the new cookie-name should be "_oauth2_proxy_1=" instead of "name_1=".

    Configuring for use with the Traefik (v2) ForwardAuth middleware​

    This option requires --reverse-proxy option to be set.

    ForwardAuth with 401 errors middleware​

    The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration:

    http:
      routers:
        a-service:
          rule: "Host(`a-service.example.com`)"
          service: a-service-backend
          middlewares:
            - oauth-errors
            - oauth-auth
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
        oauth:
          rule: "Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)"
          middlewares:
            - auth-headers
          service: oauth-backend
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"

      services:
        a-service-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.2:7555
        oauth-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.1:4180

      middlewares:
        auth-headers:
          headers:
            sslRedirect: true
            stsSeconds: 315360000
            browserXssFilter: true
            contentTypeNosniff: true
            forceSTSHeader: true
            sslHost: example.com
            stsIncludeSubdomains: true
            stsPreload: true
            frameDeny: true
        oauth-auth:
          forwardAuth:
            address: https://oauth.example.com/oauth2/auth
            trustForwardHeader: true
        oauth-errors:
          errors:
            status:
              - "401-403"
            service: oauth-backend
            query: "/oauth2/sign_in"

    ForwardAuth with static upstreams configuration​

    Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint

    Following options need to be set on oauth2-proxy:

    • --upstream=static://202: Configures a static response for authenticated sessions
    • --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly
    http:
      routers:
        a-service-route-1:
          rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)"
          service: a-service-backend
          middlewares:
            - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
        a-service-route-2:
          rule: "Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)"
          service: a-service-backend
          middlewares:
            - oauth-auth-wo-redirect # unauthenticated session will return a 401
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
        services-oauth2-route:
          rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)"
          middlewares:
            - auth-headers
          service: oauth-backend
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
        oauth2-proxy-route:
          rule: "Host(`oauth.example.com`) && PathPrefix(`/`)"
          middlewares:
            - auth-headers
          service: oauth-backend
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"

      services:
        a-service-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.2:7555
        b-service-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.3:7555
        oauth-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.1:4180

      middlewares:
        auth-headers:
          headers:
            sslRedirect: true
            stsSeconds: 315360000
            browserXssFilter: true
            contentTypeNosniff: true
            forceSTSHeader: true
            sslHost: example.com
            stsIncludeSubdomains: true
            stsPreload: true
            frameDeny: true
        oauth-auth-redirect:
          forwardAuth:
            address: https://oauth.example.com/
            trustForwardHeader: true
            authResponseHeaders:
              - X-Auth-Request-Access-Token
              - Authorization
        oauth-auth-wo-redirect:
          forwardAuth:
            address: https://oauth.example.com/oauth2/auth
            trustForwardHeader: true
            authResponseHeaders:
              - X-Auth-Request-Access-Token
              - Authorization
    note

    If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/7.4.x/configuration/session_storage/index.html b/docs/7.4.x/configuration/session_storage/index.html index ee95348b..84e8e3da 100644 --- a/docs/7.4.x/configuration/session_storage/index.html +++ b/docs/7.4.x/configuration/session_storage/index.html @@ -4,7 +4,7 @@ Session Storage | OAuth2 Proxy - + @@ -27,7 +27,7 @@ and --redis-sentinel-connection-urls appropriately.

    Redis Clu --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately.

    Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.

    Note, if Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. For example: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/7.4.x/configuration/tls/index.html b/docs/7.4.x/configuration/tls/index.html index edb0940b..5e806208 100644 --- a/docs/7.4.x/configuration/tls/index.html +++ b/docs/7.4.x/configuration/tls/index.html @@ -4,7 +4,7 @@ TLS Configuration | OAuth2 Proxy - + @@ -19,7 +19,7 @@ external load balancer like Amazon ELB or Google Platform Load Balancing) use oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/.

    An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS:

    server {
        listen 443 default ssl;
        server_name internal.yourcompany.com;
        ssl_certificate /path/to/cert.pem;
        ssl_certificate_key /path/to/cert.key;
        add_header Strict-Transport-Security max-age=2592000;

        location / {
            proxy_pass http://127.0.0.1:4180;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Scheme $scheme;
            proxy_connect_timeout 1;
            proxy_send_timeout 30;
            proxy_read_timeout 30;
        }
    }

  • The command line to run oauth2-proxy in this configuration would look like this:

    ./oauth2-proxy \
       --email-domain="yourcompany.com"  \
       --upstream=http://127.0.0.1:8080/ \
       --cookie-secret=... \
       --cookie-secure=true \
       --provider=... \
       --reverse-proxy=true \
       --client-id=... \
       --client-secret=...
    • Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/7.4.x/features/endpoints/index.html b/docs/7.4.x/features/endpoints/index.html index b0050795..77817818 100644 --- a/docs/7.4.x/features/endpoints/index.html +++ b/docs/7.4.x/features/endpoints/index.html @@ -4,13 +4,13 @@ Endpoints | OAuth2 Proxy - +
    -
    Version: 7.4.x

    Endpoints

    OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable.

    • /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info
    • /ping - returns a 200 OK response, which is intended for use with health checks
    • /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default
    • /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies)
    • /oauth2/sign_out - this URL is used to clear the session cookie
    • /oauth2/start - a URL that will redirect to start the OAuth cycle
    • /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url.
    • /oauth2/userinfo - the URL is used to return user's email from the session in JSON format.
    • /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive

    Sign out​

    To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!):

    /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page

    Alternatively, include the redirect URL in the X-Auth-Request-Redirect header:

    GET /oauth2/sign_out HTTP/1.1
    X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page
    ...

    (The "sign_out_page" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.)

    BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored. Make sure to include the actual domain and port (if needed) and not the URL (e.g "localhost:8081" instead of "http://localhost:8081").

    Auth​

    This endpoint returns 202 Accepted response or a 401 Unauthorized response.

    It can be configured using the following query parameters query parameters:

    • allowed_groups: comma separated list of allowed groups
    • allowed_email_domains: comma separated list of allowed email domains
    • allowed_emails: comma separated list of allowed emails
    Copyright © 2023 OAuth2 Proxy.
    - +
    Version: 7.4.x

    Endpoints

    OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable.

    • /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info
    • /ping - returns a 200 OK response, which is intended for use with health checks
    • /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default
    • /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies)
    • /oauth2/sign_out - this URL is used to clear the session cookie
    • /oauth2/start - a URL that will redirect to start the OAuth cycle
    • /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url.
    • /oauth2/userinfo - the URL is used to return user's email from the session in JSON format.
    • /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive

    Sign out​

    To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!):

    /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page

    Alternatively, include the redirect URL in the X-Auth-Request-Redirect header:

    GET /oauth2/sign_out HTTP/1.1
    X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page
    ...

    (The "sign_out_page" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.)

    BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored. Make sure to include the actual domain and port (if needed) and not the URL (e.g "localhost:8081" instead of "http://localhost:8081").

    Auth​

    This endpoint returns 202 Accepted response or a 401 Unauthorized response.

    It can be configured using the following query parameters:

    • allowed_groups: comma separated list of allowed groups
    • allowed_email_domains: comma separated list of allowed email domains
    • allowed_emails: comma separated list of allowed emails
    Copyright © 2023 OAuth2 Proxy.
    + \ No newline at end of file diff --git a/docs/7.4.x/index.html b/docs/7.4.x/index.html index c534b90d..9e5d655b 100644 --- a/docs/7.4.x/index.html +++ b/docs/7.4.x/index.html @@ -4,13 +4,13 @@ Installation | OAuth2 Proxy - +
    Version: 7.4.x

    Installation

    1. Choose how to deploy:

      a. Download Prebuilt Binary (current release is v7.4.0)

      b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin

      c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available)

      d. Using a Kubernetes manifest (Helm)

    Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0.

    $ sha256sum -c sha256sum.txt
    oauth2-proxy-x.y.z.linux-amd64: OK
    1. Select a Provider and Register an OAuth Application with a Provider
    2. Configure OAuth2 Proxy using config file, command line options, or environment variables
    3. Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/7.4.x/search-index.json b/docs/7.4.x/search-index.json index ae7c4ee6..6e43e613 100644 --- a/docs/7.4.x/search-index.json +++ b/docs/7.4.x/search-index.json @@ -1 +1 @@ -[{"documents":[{"i":323,"t":"Installation","u":"/oauth2-proxy/docs/7.4.x/","b":["Docs"]},{"i":325,"t":"Behaviour","u":"/oauth2-proxy/docs/7.4.x/behaviour","b":["Docs"]},{"i":327,"t":"Security","u":"/oauth2-proxy/docs/7.4.x/community/security","b":["Docs","Community"]},{"i":333,"t":"Alpha Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","b":["Docs","Configuration"]},{"i":392,"t":"Session Storage","u":"/oauth2-proxy/docs/7.4.x/configuration/session_storage","b":["Docs","Configuration"]},{"i":398,"t":"Endpoints","u":"/oauth2-proxy/docs/7.4.x/features/endpoints","b":["Docs","Features"]},{"i":404,"t":"TLS Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/tls","b":["Docs","Configuration"]},{"i":410,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","b":["Docs","Configuration"]},{"i":448,"t":"Overview","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","b":["Docs","Configuration"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/323",[0,2.222]],["t/325",[1,2.222]],["t/327",[2,2.222]],["t/333",[3,1.699,4,0.94]],["t/392",[5,1.699,6,1.699]],["t/398",[7,2.222]],["t/404",[4,0.94,8,1.699]],["t/410",[4,0.761,9,1.375,10,1.375]],["t/448",[11,2.222]]],"invertedIndex":[["alpha",{"_index":3,"t":{"333":{"position":[[0,5]]}}}],["behaviour",{"_index":1,"t":{"325":{"position":[[0,9]]}}}],["configur",{"_index":4,"t":{"333":{"position":[[6,13]]},"404":{"position":[[4,13]]},"410":{"position":[[15,13]]}}}],["endpoint",{"_index":7,"t":{"398":{"position":[[0,9]]}}}],["instal",{"_index":0,"t":{"323":{"position":[[0,12]]}}}],["oauth",{"_index":9,"t":{"410":{"position":[[0,5]]}}}],["overview",{"_index":11,"t":{"448":{"position":[[0,8]]}}}],["provid",{"_index":10,"t":{"410":{"position":[[6,8]]}}}],["secur",{"_index":2,"t":{"327":{"position":[[0,8]]}}}],["session",{"_index":5,"t":{"392":{"position":[[0,7]]}}}],["storag",{"_index":6,"t":{"392":{"position":[[8,7]]}}}],["tl",{"_index":8,"t":{"404":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":329,"t":"Security Disclosures","u":"/oauth2-proxy/docs/7.4.x/community/security","h":"#security-disclosures","p":327},{"i":331,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.4.x/community/security","h":"#how-will-we-respond-to-disclosures","p":327},{"i":335,"t":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#using-alpha-configuration","p":333},{"i":337,"t":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":333},{"i":339,"t":"Removed options","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#removed-options","p":333},{"i":341,"t":"Configuration Reference","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#configuration-reference","p":333},{"i":342,"t":"ADFSOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#adfsoptions","p":333},{"i":344,"t":"AlphaOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#alphaoptions","p":333},{"i":346,"t":"AzureOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#azureoptions","p":333},{"i":348,"t":"BitbucketOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#bitbucketoptions","p":333},{"i":350,"t":"ClaimSource","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#claimsource","p":333},{"i":352,"t":"Duration","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#duration","p":333},{"i":354,"t":"GitHubOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#githuboptions","p":333},{"i":356,"t":"GitLabOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#gitlaboptions","p":333},{"i":358,"t":"GoogleOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#googleoptions","p":333},{"i":360,"t":"Header","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#header","p":333},{"i":362,"t":"HeaderValue","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#headervalue","p":333},{"i":364,"t":"KeycloakOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#keycloakoptions","p":333},{"i":366,"t":"LoginGovOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#logingovoptions","p":333},{"i":368,"t":"LoginURLParameter","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#loginurlparameter","p":333},{"i":370,"t":"A parameter whose value is fixed","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"","p":333},{"i":372,"t":"OIDCOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#oidcoptions","p":333},{"i":374,"t":"Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#provider","p":333},{"i":376,"t":"ProviderType","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#providertype","p":333},{"i":378,"t":"Providers","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#providers","p":333},{"i":380,"t":"SecretSource","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#secretsource","p":333},{"i":382,"t":"Server","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#server","p":333},{"i":384,"t":"TLS","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#tls","p":333},{"i":386,"t":"URLParameterRule","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#urlparameterrule","p":333},{"i":388,"t":"Upstream","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#upstream","p":333},{"i":390,"t":"UpstreamConfig","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#upstreamconfig","p":333},{"i":394,"t":"Cookie Storage","u":"/oauth2-proxy/docs/7.4.x/configuration/session_storage","h":"#cookie-storage","p":392},{"i":396,"t":"Redis Storage","u":"/oauth2-proxy/docs/7.4.x/configuration/session_storage","h":"#redis-storage","p":392},{"i":400,"t":"Sign out","u":"/oauth2-proxy/docs/7.4.x/features/endpoints","h":"#sign-out","p":398},{"i":402,"t":"Auth","u":"/oauth2-proxy/docs/7.4.x/features/endpoints","h":"#auth","p":398},{"i":406,"t":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/7.4.x/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":404},{"i":408,"t":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/7.4.x/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":404},{"i":412,"t":"Google Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#google-auth-provider","p":410},{"i":414,"t":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#azure-auth-provider","p":410},{"i":416,"t":"ADFS Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#adfs-auth-provider","p":410},{"i":418,"t":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":410},{"i":420,"t":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#github-auth-provider","p":410},{"i":422,"t":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":410},{"i":424,"t":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":410},{"i":426,"t":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":410},{"i":428,"t":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":410},{"i":430,"t":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":410},{"i":432,"t":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#openid-connect-provider","p":410},{"i":434,"t":"login.gov Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#logingov-provider","p":410},{"i":436,"t":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#nextcloud-provider","p":410},{"i":438,"t":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":410},{"i":440,"t":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":410},{"i":442,"t":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":410},{"i":444,"t":"Email Authentication","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#email-authentication","p":410},{"i":446,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":410},{"i":450,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#generating-a-cookie-secret","p":448},{"i":452,"t":"Config File","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#config-file","p":448},{"i":454,"t":"Command Line Options","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#command-line-options","p":448},{"i":456,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#upstreams-configuration","p":448},{"i":458,"t":"Environment variables","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#environment-variables","p":448},{"i":460,"t":"Logging Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#logging-configuration","p":448},{"i":462,"t":"Auth Log Format","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#auth-log-format","p":448},{"i":464,"t":"Request Log Format","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#request-log-format","p":448},{"i":466,"t":"Standard Log Format","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#standard-log-format","p":448},{"i":468,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":448},{"i":470,"t":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":448},{"i":472,"t":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":448},{"i":474,"t":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":448}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/329",[0,4.031,1,3.493]],["t/331",[1,3.493,2,4.031]],["t/335",[3,2.64,4,3.39,5,1.854]],["t/337",[5,1.6,6,2.925,7,2.535,8,2.925]],["t/339",[9,4.031,10,3.493]],["t/341",[5,2.205,11,4.031]],["t/342",[12,4.97]],["t/344",[13,4.97]],["t/346",[14,4.97]],["t/348",[15,4.97]],["t/350",[16,4.97]],["t/352",[17,4.97]],["t/354",[18,4.97]],["t/356",[19,4.97]],["t/358",[20,4.97]],["t/360",[21,4.97]],["t/362",[22,4.97]],["t/364",[23,4.97]],["t/366",[24,4.97]],["t/368",[25,4.97]],["t/370",[26,2.925,27,2.925,28,2.925,29,2.925]],["t/372",[30,4.97]],["t/374",[31,1.64]],["t/376",[32,4.97]],["t/378",[31,1.64]],["t/380",[33,4.97]],["t/382",[34,4.97]],["t/384",[35,3.87]],["t/386",[36,4.97]],["t/388",[37,3.87]],["t/390",[38,4.97]],["t/394",[39,3.493,40,3.493]],["t/396",[40,3.493,41,4.031]],["t/400",[42,4.031,43,4.031]],["t/402",[44,2.025]],["t/406",[35,2.278,45,2.535,46,2.925,47,2.535]],["t/408",[35,1.788,45,1.989,47,1.989,48,2.296,49,2.296,50,1.989]],["t/412",[31,1.119,44,1.381,51,3.39]],["t/414",[31,1.119,44,1.381,52,2.938]],["t/416",[31,1.119,44,1.381,53,3.39]],["t/418",[31,1.119,44,1.381,54,3.39]],["t/420",[31,1.119,44,1.381,55,3.39]],["t/422",[31,1.119,44,1.381,56,2.938]],["t/424",[31,0.966,44,1.192,56,2.535,57,2.925]],["t/426",[31,1.119,44,1.381,58,3.39]],["t/428",[31,1.119,44,1.381,59,3.39]],["t/430",[31,0.966,52,2.535,60,2.925,61,2.535]],["t/432",[31,1.119,62,3.39,63,3.39]],["t/434",[31,1.33,64,4.031]],["t/436",[31,1.33,65,4.031]],["t/438",[31,1.119,44,1.381,66,3.39]],["t/440",[31,1.119,44,1.381,67,3.39]],["t/442",[31,1.119,44,1.381,68,3.39]],["t/444",[69,4.031,70,4.031]],["t/446",[7,2.938,31,1.119,61,2.938]],["t/450",[39,2.938,71,3.39,72,3.39]],["t/452",[73,4.031,74,4.031]],["t/454",[10,2.938,75,3.39,76,3.39]],["t/456",[5,2.205,37,3.139]],["t/458",[77,4.031,78,4.031]],["t/460",[5,2.205,79,2.874]],["t/462",[44,1.381,79,2.417,80,2.64]],["t/464",[79,2.417,80,2.64,81,3.39]],["t/466",[79,2.417,80,2.64,82,3.39]],["t/468",[3,2.003,5,1.407,50,2.229,83,2.573,84,2.573]],["t/470",[3,1.788,5,1.256,85,2.296,86,2.296,87,1.788,88,1.989]],["t/472",[87,2.278,88,2.535,89,2.925,90,2.925]],["t/474",[5,1.6,37,2.278,87,2.278,91,2.925]]],"invertedIndex":[["401",{"_index":89,"t":{"472":{"position":[[17,3]]}}}],["ad",{"_index":61,"t":{"430":{"position":[[16,2]]},"446":{"position":[[0,6]]}}}],["adf",{"_index":53,"t":{"416":{"position":[[0,4]]}}}],["adfsopt",{"_index":12,"t":{"342":{"position":[[0,11]]}}}],["alpha",{"_index":4,"t":{"335":{"position":[[6,5]]}}}],["alphaopt",{"_index":13,"t":{"344":{"position":[[0,12]]}}}],["auth",{"_index":44,"t":{"402":{"position":[[0,4]]},"412":{"position":[[7,4]]},"414":{"position":[[6,4]]},"416":{"position":[[5,4]]},"418":{"position":[[9,4]]},"420":{"position":[[7,4]]},"422":{"position":[[9,4]]},"424":{"position":[[14,4]]},"426":{"position":[[7,4]]},"428":{"position":[[9,4]]},"438":{"position":[[13,4]]},"440":{"position":[[10,4]]},"442":{"position":[[6,4]]},"462":{"position":[[0,4]]}}}],["auth_request",{"_index":83,"t":{"468":{"position":[[35,12]]}}}],["authent",{"_index":70,"t":{"444":{"position":[[6,14]]}}}],["azur",{"_index":52,"t":{"414":{"position":[[0,5]]},"430":{"position":[[10,5]]}}}],["azureopt",{"_index":14,"t":{"346":{"position":[[0,12]]}}}],["bitbucket",{"_index":67,"t":{"440":{"position":[[0,9]]}}}],["bitbucketopt",{"_index":15,"t":{"348":{"position":[[0,16]]}}}],["claimsourc",{"_index":16,"t":{"350":{"position":[[0,11]]}}}],["command",{"_index":75,"t":{"454":{"position":[[0,7]]}}}],["config",{"_index":73,"t":{"452":{"position":[[0,6]]}}}],["configur",{"_index":5,"t":{"335":{"position":[[12,13]]},"337":{"position":[[11,13]]},"341":{"position":[[0,13]]},"456":{"position":[[10,13]]},"460":{"position":[[8,13]]},"468":{"position":[[0,11]]},"470":{"position":[[0,11]]},"474":{"position":[[34,13]]}}}],["connect",{"_index":63,"t":{"432":{"position":[[7,7]]}}}],["convert",{"_index":6,"t":{"337":{"position":[[0,10]]}}}],["cooki",{"_index":39,"t":{"394":{"position":[[0,6]]},"450":{"position":[[13,6]]}}}],["digitalocean",{"_index":66,"t":{"438":{"position":[[0,12]]}}}],["direct",{"_index":84,"t":{"468":{"position":[[48,9]]}}}],["disclosur",{"_index":1,"t":{"329":{"position":[[9,11]]},"331":{"position":[[23,12]]}}}],["durat",{"_index":17,"t":{"352":{"position":[[0,8]]}}}],["e.g",{"_index":49,"t":{"408":{"position":[[32,4]]}}}],["email",{"_index":69,"t":{"444":{"position":[[0,5]]}}}],["environ",{"_index":77,"t":{"458":{"position":[[0,11]]}}}],["error",{"_index":90,"t":{"472":{"position":[[21,6]]}}}],["facebook",{"_index":54,"t":{"418":{"position":[[0,8]]}}}],["file",{"_index":74,"t":{"452":{"position":[[7,4]]}}}],["fix",{"_index":29,"t":{"370":{"position":[[27,5]]}}}],["format",{"_index":80,"t":{"462":{"position":[[9,6]]},"464":{"position":[[12,6]]},"466":{"position":[[13,6]]}}}],["forwardauth",{"_index":87,"t":{"470":{"position":[[42,11]]},"472":{"position":[[0,11]]},"474":{"position":[[0,11]]}}}],["gener",{"_index":71,"t":{"450":{"position":[[0,10]]}}}],["gitea",{"_index":68,"t":{"442":{"position":[[0,5]]}}}],["github",{"_index":55,"t":{"420":{"position":[[0,6]]}}}],["githubopt",{"_index":18,"t":{"354":{"position":[[0,13]]}}}],["gitlab",{"_index":58,"t":{"426":{"position":[[0,6]]}}}],["gitlabopt",{"_index":19,"t":{"356":{"position":[[0,13]]}}}],["googl",{"_index":51,"t":{"412":{"position":[[0,6]]}}}],["googleopt",{"_index":20,"t":{"358":{"position":[[0,13]]}}}],["header",{"_index":21,"t":{"360":{"position":[[0,6]]}}}],["headervalu",{"_index":22,"t":{"362":{"position":[[0,11]]}}}],["keycloak",{"_index":56,"t":{"422":{"position":[[0,8]]},"424":{"position":[[0,8]]}}}],["keycloakopt",{"_index":23,"t":{"364":{"position":[[0,15]]}}}],["line",{"_index":76,"t":{"454":{"position":[[8,4]]}}}],["linkedin",{"_index":59,"t":{"428":{"position":[[0,8]]}}}],["log",{"_index":79,"t":{"460":{"position":[[0,7]]},"462":{"position":[[5,3]]},"464":{"position":[[8,3]]},"466":{"position":[[9,3]]}}}],["login.gov",{"_index":64,"t":{"434":{"position":[[0,9]]}}}],["logingovopt",{"_index":24,"t":{"366":{"position":[[0,15]]}}}],["loginurlparamet",{"_index":25,"t":{"368":{"position":[[0,17]]}}}],["microsoft",{"_index":60,"t":{"430":{"position":[[0,9]]}}}],["middlewar",{"_index":88,"t":{"470":{"position":[[54,10]]},"472":{"position":[[28,10]]}}}],["new",{"_index":7,"t":{"337":{"position":[[32,3]]},"446":{"position":[[9,3]]}}}],["nextcloud",{"_index":65,"t":{"436":{"position":[[0,9]]}}}],["nginx",{"_index":50,"t":{"408":{"position":[[37,5]]},"468":{"position":[[29,5]]}}}],["oauth2",{"_index":46,"t":{"406":{"position":[[17,6]]}}}],["oidc",{"_index":57,"t":{"424":{"position":[[9,4]]}}}],["oidcopt",{"_index":30,"t":{"372":{"position":[[0,11]]}}}],["openid",{"_index":62,"t":{"432":{"position":[[0,6]]}}}],["option",{"_index":10,"t":{"339":{"position":[[8,7]]},"454":{"position":[[13,7]]}}}],["out",{"_index":43,"t":{"400":{"position":[[5,3]]}}}],["paramet",{"_index":26,"t":{"370":{"position":[[2,9]]}}}],["provid",{"_index":31,"t":{"374":{"position":[[0,8]]},"378":{"position":[[0,9]]},"412":{"position":[[12,8]]},"414":{"position":[[11,8]]},"416":{"position":[[10,8]]},"418":{"position":[[14,8]]},"420":{"position":[[12,8]]},"422":{"position":[[14,8]]},"424":{"position":[[19,8]]},"426":{"position":[[12,8]]},"428":{"position":[[14,8]]},"430":{"position":[[19,8]]},"432":{"position":[[15,8]]},"434":{"position":[[10,8]]},"436":{"position":[[10,8]]},"438":{"position":[[18,8]]},"440":{"position":[[15,8]]},"442":{"position":[[11,8]]},"446":{"position":[[13,8]]}}}],["providertyp",{"_index":32,"t":{"376":{"position":[[0,12]]}}}],["proxi",{"_index":47,"t":{"406":{"position":[[24,5]]},"408":{"position":[[25,6]]}}}],["redi",{"_index":41,"t":{"396":{"position":[[0,5]]}}}],["refer",{"_index":11,"t":{"341":{"position":[[14,9]]}}}],["remov",{"_index":9,"t":{"339":{"position":[[0,7]]}}}],["request",{"_index":81,"t":{"464":{"position":[[0,7]]}}}],["respond",{"_index":2,"t":{"331":{"position":[[12,7]]}}}],["revers",{"_index":48,"t":{"408":{"position":[[17,7]]}}}],["secret",{"_index":72,"t":{"450":{"position":[[20,6]]}}}],["secretsourc",{"_index":33,"t":{"380":{"position":[[0,12]]}}}],["secur",{"_index":0,"t":{"329":{"position":[[0,8]]}}}],["server",{"_index":34,"t":{"382":{"position":[[0,6]]}}}],["sign",{"_index":42,"t":{"400":{"position":[[0,4]]}}}],["standard",{"_index":82,"t":{"466":{"position":[[0,8]]}}}],["static",{"_index":91,"t":{"474":{"position":[[17,6]]}}}],["storag",{"_index":40,"t":{"394":{"position":[[7,7]]},"396":{"position":[[6,7]]}}}],["structur",{"_index":8,"t":{"337":{"position":[[36,9]]}}}],["termin",{"_index":45,"t":{"406":{"position":[[0,9]]},"408":{"position":[[0,9]]}}}],["tl",{"_index":35,"t":{"384":{"position":[[0,3]]},"406":{"position":[[10,3]]},"408":{"position":[[10,3]]}}}],["traefik",{"_index":85,"t":{"470":{"position":[[29,7]]}}}],["upstream",{"_index":37,"t":{"388":{"position":[[0,8]]},"456":{"position":[[0,9]]},"474":{"position":[[24,9]]}}}],["upstreamconfig",{"_index":38,"t":{"390":{"position":[[0,14]]}}}],["urlparameterrul",{"_index":36,"t":{"386":{"position":[[0,16]]}}}],["us",{"_index":3,"t":{"335":{"position":[[0,5]]},"468":{"position":[[16,3]]},"470":{"position":[[16,3]]}}}],["v2",{"_index":86,"t":{"470":{"position":[[37,4]]}}}],["valu",{"_index":28,"t":{"370":{"position":[[18,5]]}}}],["variabl",{"_index":78,"t":{"458":{"position":[[12,9]]}}}],["whose",{"_index":27,"t":{"370":{"position":[[12,5]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":324,"t":"Choose how to deploy: a. Download Prebuilt Binary (current release is v7.4.0) b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available) d. Using a Kubernetes manifest (Helm) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. $ sha256sum -c sha256sum.txtoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/7.4.x/","h":"","p":323},{"i":326,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/7.4.x/behaviour","h":"","p":325},{"i":328,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/7.4.x/community/security","h":"","p":327},{"i":330,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/7.4.x/community/security","h":"#security-disclosures","p":327},{"i":332,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.4.x/community/security","h":"#how-will-we-respond-to-disclosures","p":327},{"i":334,"t":"danger This page contains documentation for alpha features. We reserve the right to make breaking changes to the features detailed within this page with no notice. Options described in this page may be changed, removed, renamed or moved without prior warning. Please beware of this before you use alpha configuration options. This page details a set of alpha configuration options in a new format. Going forward we are intending to add structured configuration in YAML format to replace the existing TOML based configuration file and flags. Below is a reference for the structure of the configuration, with AlphaOptions as the root of the configuration. When using alpha configuration, your config file will look something like below: upstreams: - id: ... ...injectRequestHeaders: - name: ... ...injectResponseHeaders: - name: ... ... Please browse the reference below for the structure of the new configuration format.","s":"Alpha Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"","p":333},{"i":336,"t":"To use the new alpha configuration, generate a YAML file based on the format described in the reference below. Provide the path to this file using the --alpha-config flag. note When using the --alpha-config flag, some options are no longer available. See removed options below for more information.","s":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#using-alpha-configuration","p":333},{"i":338,"t":"Before adding the new --alpha-config option, start OAuth2 Proxy using the convert-config-to-alpha flag to convert existing configuration to the new format. oauth2-proxy --convert-config-to-alpha --config ./path/to/existing/config.cfg This will convert any options supported by the new format to YAML and print the new configuration to STDOUT. Copy this to a new file, remove any options from your existing configuration noted in removed options and then start OAuth2 Proxy using the new config. oauth2-proxy --alpha-config ./path/to/new/config.yaml --config ./path/to/existing/config.cfg","s":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":333},{"i":340,"t":"The following flags/options and their respective environment variables are no longer available when using alpha configuration: flush-interval/flush_interval pass-host-header/pass_host_header proxy-websockets/proxy_websockets ssl-upstream-insecure-skip-verify/ssl_upstream_insecure_skip_verify upstream/upstreams pass-basic-auth/pass_basic_auth pass-access-token/pass_access_token pass-user-headers/pass_user_headers pass-authorization-header/pass_authorization_header set-basic-auth/set_basic_auth set-xauthrequest/set_xauthrequest set-authorization-header/set_authorization_header prefer-email-to-user/prefer_email_to_user basic-auth-password/basic_auth_password skip-auth-strip-headers/skip_auth_strip_headers client-id/client_id client-secret/client_secret, and client-secret-file/client_secret_file provider provider-display-name/provider_display_name provider-ca-file/provider_ca_files login-url/login_url redeem-url/redeem_url profile-url/profile_url resource validate-url/validate_url scope prompt approval-prompt/approval_prompt acr-values/acr_values user-id-claim/user_id_claim allowed-group/allowed_groups allowed-role/allowed_roles jwt-key/jwt_key jwt-key-file/jwt_key_file pubjwk-url/pubjwk_url and all provider-specific options, i.e. any option whose name includes oidc, azure, bitbucket, github, gitlab, google or keycloak. Attempting to use any of these options via flags or via config when --alpha-config is set will result in an error. info You must remove these options before starting OAuth2 Proxy with --alpha-config","s":"Removed options","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#removed-options","p":333},{"i":343,"t":"(Appears on: Provider) Field Type Description skipScope bool Skip adding the scope parameter in login requestDefault value is 'false'","s":"ADFSOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#adfsoptions","p":333},{"i":345,"t":"AlphaOptions contains alpha structured configuration options. Usage of these options allows users to access alpha features that are not available as part of the primary configuration structure for OAuth2 Proxy. danger The options within this structure are considered alpha. They may change between releases without notice. Field Type Description upstreamConfig UpstreamConfig UpstreamConfig is used to configure upstream servers.Once a user is authenticated, requests to the server will be proxied tothese upstream servers based on the path mappings defined in this list. injectRequestHeaders []Header InjectRequestHeaders is used to configure headers that should be addedto requests to upstream servers.Headers may source values from either the authenticated user's sessionor from a static secret value. injectResponseHeaders []Header InjectResponseHeaders is used to configure headers that should be addedto responses from the proxy.This is typically used when using the proxy as an external authenticationprovider in conjunction with another proxy such as NGINX and itsauth_request module.Headers may source values from either the authenticated user's sessionor from a static secret value. server Server Server is used to configure the HTTP(S) server for the proxy application.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. metricsServer Server MetricsServer is used to configure the HTTP(S) server for metrics.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. providers Providers Providers is used to configure multiple providers.","s":"AlphaOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#alphaoptions","p":333},{"i":347,"t":"(Appears on: Provider) Field Type Description tenant string Tenant directs to a tenant-specific or common (tenant-independent) endpointDefault value is 'common' graphGroupField string GraphGroupField configures the group field to be used when building the groups list from Microsoft GraphDefault value is 'id'","s":"AzureOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#azureoptions","p":333},{"i":349,"t":"(Appears on: Provider) Field Type Description team string Team sets restrict logins to members of this team repository string Repository sets restrict logins to user with access to this repository","s":"BitbucketOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#bitbucketoptions","p":333},{"i":351,"t":"(Appears on: HeaderValue) ClaimSource allows loading a header value from a claim within the session Field Type Description claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"ClaimSource","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#claimsource","p":333},{"i":353,"t":"(string alias)​ (Appears on: Upstream) Duration is as string representation of a period of time. A duration string is a is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\", \"-1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".","s":"Duration","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#duration","p":333},{"i":355,"t":"(Appears on: Provider) Field Type Description org string Org sets restrict logins to members of this organisation team string Team sets restrict logins to members of this team repo string Repo sets restrict logins to collaborators of this repository token string Token is the token to use when verifying repository collaboratorsit must have push access to the repository users []string Users allows users with these usernames to logineven if they do not belong to the specified org and team or collaborators","s":"GitHubOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#githuboptions","p":333},{"i":357,"t":"(Appears on: Provider) Field Type Description group []string Group sets restrict logins to members of this group projects []string Projects restricts logins to members of any of these projects","s":"GitLabOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#gitlaboptions","p":333},{"i":359,"t":"(Appears on: Provider) Field Type Description group []string Groups sets restrict logins to members of this google group adminEmail string AdminEmail is the google admin to impersonate for api calls serviceAccountJson string ServiceAccountJSON is the path to the service account json credentials","s":"GoogleOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#googleoptions","p":333},{"i":361,"t":"(Appears on: AlphaOptions) Header represents an individual header that will be added to a request or response header. Field Type Description name string Name is the header name to be used for this set of values.Names should be unique within a list of Headers. preserveRequestValue bool PreserveRequestValue determines whether any values for this headershould be preserved for the request to the upstream server.This option only applies to injected request headers.Defaults to false (headers that match this header will be stripped). values []HeaderValue Values contains the desired values for this header","s":"Header","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#header","p":333},{"i":363,"t":"(Appears on: Header) HeaderValue represents a single header value and the sources that can make up the header value Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value. claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"HeaderValue","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#headervalue","p":333},{"i":365,"t":"(Appears on: Provider) Field Type Description groups []string Group enables to restrict login to members of indicated group roles []string Role enables to restrict login to users with role (only available when using the keycloak-oidc provider)","s":"KeycloakOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#keycloakoptions","p":333},{"i":367,"t":"(Appears on: Provider) Field Type Description jwtKey string JWTKey is a private key in PEM format used to sign JWT, jwtKeyFile string JWTKeyFile is a path to the private key file in PEM format used to sign the JWT pubjwkURL string PubJWKURL is the JWK pubkey access endpoint","s":"LoginGovOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#logingovoptions","p":333},{"i":369,"t":"(Appears on: Provider) LoginURLParameter is the configuration for a single query parameter that can be passed through from the /oauth2/start endpoint to the IdP login URL. The \"default\" option specifies the default value or values (if any) that will be passed to the IdP for this parameter, and \"allow\" is a list of options for ways in which this parameter can be set or overridden via the query string to /oauth2/start. If only a default is specified and no \"allow\" then the parameter is effectively fixed - the default value will always be used and anything passed to the start URL will be ignored. If only \"allow\" is specified but no default then the parameter will only be passed on to the IdP if the caller provides it, and no value will be sent otherwise. Examples:","s":"LoginURLParameter","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#loginurlparameter","p":333},{"i":371,"t":"name: organizationdefault:- myorg A parameter that is not passed by default, but may be set to one of a fixed set of values name: promptallow:- value: login- value: consent- value: select_account A parameter that is passed by default but may be overridden by one of a fixed set of values name: promptdefault: [\"login\"]allow:- value: consent- value: select_account A parameter that may be overridden, but only by values that match a regular expression. For example to restrict login_hint to email addresses in your organization's domain: name: login_hintallow:- pattern: '^[^@]*@example\\.com$'# this allows at most one \"@\" sign, and requires \"example.com\" domain. Note that the YAML rules around exactly which characters are allowed and/or require escaping in different types of string literals are convoluted. For regular expressions the single quoted form is simplest as backslash is not considered to be an escape character. Alternatively use the \"chomped block\" format |-: - pattern: |- ^[^@]*@example\\.com$ The hyphen is important, a | block would have a trailing newline character. Field Type Description name string Name specifies the name of the query parameter. default []string (Optional) Default specifies a default value or values that will bepassed to the IdP if not overridden. allow []URLParameterRule (Optional) Allow specifies rules about how the default (if any) may beoverridden via the query string to /oauth2/start. Onlyvalues that match one or more of the allow rules will beforwarded to the IdP.","s":"A parameter whose value is fixed","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"","p":333},{"i":373,"t":"(Appears on: Provider) Field Type Description issuerURL string IssuerURL is the OpenID Connect issuer URLeg: https://accounts.google.com insecureAllowUnverifiedEmail bool InsecureAllowUnverifiedEmail prevents failures if an email address in an id_token is not verifieddefault set to 'false' insecureSkipIssuerVerification bool InsecureSkipIssuerVerification skips verification of ID token issuers. When false, ID Token Issuers must match the OIDC discovery URLdefault set to 'false' insecureSkipNonce bool InsecureSkipNonce skips verifying the ID Token's nonce claim that must matchthe random nonce sent in the initial OAuth flow. Otherwise, the nonce is checkedafter the initial OAuth redeem & subsequent token refreshes.default set to 'true'Warning: In a future release, this will change to 'false' by default for enhanced security. skipDiscovery bool SkipDiscovery allows to skip OIDC discovery and use manually supplied Endpointsdefault set to 'false' jwksURL string JwksURL is the OpenID Connect JWKS URLeg: https://www.googleapis.com/oauth2/v3/certs emailClaim string EmailClaim indicates which claim contains the user email,default set to 'email' groupsClaim string GroupsClaim indicates which claim contains the user groupsdefault set to 'groups' userIDClaim string UserIDClaim indicates which claim contains the user IDdefault set to 'email' audienceClaims []string AudienceClaim allows to define any claim that is verified against the client idBy default aud claim is used for verification. extraAudiences []string ExtraAudiences is a list of additional audiences that are allowedto pass verification in addition to the client id.","s":"OIDCOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#oidcoptions","p":333},{"i":375,"t":"(Appears on: Providers) Provider holds all configuration for a single provider Field Type Description clientID string ClientID is the OAuth Client ID that is defined in the providerThis value is required for all providers. clientSecret string ClientSecret is the OAuth Client Secret that is defined in the providerThis value is required for all providers. clientSecretFile string ClientSecretFile is the name of the filecontaining the OAuth Client Secret, it will be used if ClientSecret is not set. keycloakConfig KeycloakOptions KeycloakConfig holds all configurations for Keycloak provider. azureConfig AzureOptions AzureConfig holds all configurations for Azure provider. ADFSConfig ADFSOptions ADFSConfig holds all configurations for ADFS provider. bitbucketConfig BitbucketOptions BitbucketConfig holds all configurations for Bitbucket provider. githubConfig GitHubOptions GitHubConfig holds all configurations for GitHubC provider. gitlabConfig GitLabOptions GitLabConfig holds all configurations for GitLab provider. googleConfig GoogleOptions GoogleConfig holds all configurations for Google provider. oidcConfig OIDCOptions OIDCConfig holds all configurations for OIDC provideror providers utilize OIDC configurations. loginGovConfig LoginGovOptions LoginGovConfig holds all configurations for LoginGov provider. id string ID should be a unique identifier for the provider.This value is required for all providers. provider ProviderType Type is the OAuth providermust be set from the supported providers group,otherwise 'Google' is set as default name string Name is the providers display nameif set, it will be shown to the users in the login page. caFiles []string CAFiles is a list of paths to CA certificates that should be used when connecting to the provider.If not specified, the default Go trust sources are used instead loginURL string LoginURL is the authentication endpoint loginURLParameters []LoginURLParameter LoginURLParameters defines the parameters that can be passed from the start URL to the IdP login URL redeemURL string RedeemURL is the token redemption endpoint profileURL string ProfileURL is the profile access endpoint resource string ProtectedResource is the resource that is protected (Azure AD and ADFS only) validateURL string ValidateURL is the access token validation endpoint scope string Scope is the OAuth scope specification allowedGroups []string AllowedGroups is a list of restrict logins to members of this group code_challenge_method string The code challenge method","s":"Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#provider","p":333},{"i":377,"t":"(string alias)​ (Appears on: Provider) ProviderType is used to enumerate the different provider type options Valid options are: adfs, azure, bitbucket, digitalocean facebook, github, gitlab, google, keycloak, keycloak-oidc, linkedin, login.gov, nextcloud and oidc.","s":"ProviderType","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#providertype","p":333},{"i":379,"t":"([]Provider alias)​ (Appears on: AlphaOptions) Providers is a collection of definitions for providers.","s":"Providers","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#providers","p":333},{"i":381,"t":"(Appears on: ClaimSource, HeaderValue, TLS) SecretSource references an individual secret value. Only one source within the struct should be defined at any time. Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value.","s":"SecretSource","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#secretsource","p":333},{"i":383,"t":"(Appears on: AlphaOptions) Server represents the configuration for an HTTP(S) server Field Type Description BindAddress string BindAddress is the address on which to serve traffic.Leave blank or set to \"-\" to disable. SecureBindAddress string SecureBindAddress is the address on which to serve secure traffic.Leave blank or set to \"-\" to disable. TLS TLS TLS contains the information for loading the certificate and key for thesecure traffic and further configuration for the TLS server.","s":"Server","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#server","p":333},{"i":385,"t":"(Appears on: Server) TLS contains the information for loading a TLS certificate and key as well as an optional minimal TLS version that is acceptable. Field Type Description Key SecretSource Key is the TLS key data to use.Typically this will come from a file. Cert SecretSource Cert is the TLS certificate data to use.Typically this will come from a file. MinVersion string MinVersion is the minimal TLS version that is acceptable.E.g. Set to \"TLS1.3\" to select TLS version 1.3 CipherSuites []string CipherSuites is a list of TLS cipher suites that are allowed.E.g.:- TLS_RSA_WITH_RC4_128_SHA- TLS_RSA_WITH_AES_256_GCM_SHA384If not specified, the default Go safe cipher list is used.List of valid cipher suites can be found in the crypto/tls documentation.","s":"TLS","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#tls","p":333},{"i":387,"t":"(Appears on: LoginURLParameter) URLParameterRule represents a rule by which query parameters passed to the /oauth2/start endpoint are checked to determine whether they are valid overrides for the given parameter passed to the IdP's login URL. Either Value or Pattern should be supplied, not both. Field Type Description value string A Value rule matches just this specific value pattern string A Pattern rule gives a regular expression that must be matched bysome substring of the value. The expression is not automaticallyanchored to the start and end of the value, if you want to restrictthe whole parameter value you must anchor it yourself with ^ and $.","s":"URLParameterRule","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#urlparameterrule","p":333},{"i":389,"t":"(Appears on: UpstreamConfig) Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path. Field Type Description id string ID should be a unique identifier for the upstream.This value is required for all upstreams. path string Path is used to map requests to the upstream server.The closest match will take precedence and all Paths must be unique.Path can also take a pattern when used with RewriteTarget.Path segments can be captured and matched using regular experessions.Eg:- ^/foo$: Match only the explicit path /foo- ^/bar/$: Match any path prefixed with /bar/- ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget rewriteTarget string RewriteTarget allows users to rewrite the request path before it is sent tothe upstream server.Use the Path to capture segments for reuse within the rewrite target.Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewritethe request /baz/abc/123 to /foo/abc/123 before proxying to theupstream server. uri string The URI of the upstream server. This may be an HTTP(S) server of a Filebased URL. It may include a path, in which case all requests will be servedunder that path.Eg:- http://localhost:8080- https://service.localhost- https://service.localhost/path- file://host/pathIf the URI's path is \"/base\" and the incoming request was for \"/dir\",the upstream request will be for \"/base/dir\". insecureSkipTLSVerify bool InsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.This option is insecure and will allow potential Man-In-The-Middle attacksbetweem OAuth2 Proxy and the usptream server.Defaults to false. static bool Static will make all requests to this upstream have a static response.The response will have a body of \"Authenticated\" and a response codematching StaticCode.If StaticCode is not set, the response will return a 200 response. staticCode int StaticCode determines the response code for the Static response.This option can only be used with Static enabled. flushInterval Duration FlushInterval is the period between flushing the response buffer whenstreaming response from the upstream.Defaults to 1 second. passHostHeader bool PassHostHeader determines whether the request host header should be proxiedto the upstream server.Defaults to true. proxyWebSockets bool ProxyWebSockets enables proxying of websockets to upstream serversDefaults to true. timeout Duration Timeout is the maximum duration the server will wait for a response from the upstream server.Defaults to 30 seconds.","s":"Upstream","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#upstream","p":333},{"i":391,"t":"(Appears on: AlphaOptions) UpstreamConfig is a collection of definitions for upstream servers. Field Type Description proxyRawPath bool ProxyRawPath will pass the raw url path to upstream allowing for url'slike: \"/%2F/\" which would otherwise be redirected to \"/\" upstreams []Upstream Upstreams represents the configuration for the upstream servers.Requests will be proxied to this upstream if the path matches the request path.","s":"UpstreamConfig","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#upstreamconfig","p":333},{"i":393,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/7.4.x/configuration/session_storage","h":"","p":392},{"i":395,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/7.4.x/configuration/session_storage","h":"#cookie-storage","p":392},{"i":397,"t":"The Redis Storage backend stores sessions, encrypted, in redis. Instead sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128 bit random number, hex-encoded The secret is a 128 bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive. Note, if Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. For example: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14","s":"Redis Storage","u":"/oauth2-proxy/docs/7.4.x/configuration/session_storage","h":"#redis-storage","p":392},{"i":399,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive","s":"Endpoints","u":"/oauth2-proxy/docs/7.4.x/features/endpoints","h":"","p":398},{"i":401,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored. Make sure to include the actual domain and port (if needed) and not the URL (e.g \"localhost:8081\" instead of \"http://localhost:8081\").","s":"Sign out","u":"/oauth2-proxy/docs/7.4.x/features/endpoints","h":"#sign-out","p":398},{"i":403,"t":"This endpoint returns 202 Accepted response or a 401 Unauthorized response. It can be configured using the following query parameters query parameters: allowed_groups: comma separated list of allowed groups allowed_email_domains: comma separated list of allowed email domains allowed_emails: comma separated list of allowed emails","s":"Auth","u":"/oauth2-proxy/docs/7.4.x/features/endpoints","h":"#auth","p":398},{"i":405,"t":"There are two recommended configurations: At OAuth2 Proxy At Reverse Proxy","s":"TLS Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/tls","h":"","p":404},{"i":407,"t":"Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... With this configuration approach the customization of the TLS settings is limited. The minimal acceptable TLS version can be set with --tls-min-version=TLS1.3. The defaults set TLS1.2 as the minimal version. Regardless of the minimum version configured, TLS1.3 is currently always used as the maximal version. TLS server side cipher suites can be specified with --tls-cipher-suite=TLS_RSA_WITH_RC4_128_SHA. If not specified, the defaults from crypto/tls of the currently used go version for building oauth2-proxy will be used. A complete list of valid TLS cipher suite names can be found in crypto/tls.","s":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/7.4.x/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":404},{"i":409,"t":"Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or ... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/7.4.x/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":404},{"i":411,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure ADFS Facebook GitHub Keycloak GitLab LinkedIn Microsoft Azure AD OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket Gitea The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"","p":410},{"i":413,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"APIs & Services\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account: https://developers.google.com/identity/protocols/OAuth2ServiceAccount and make sure to download the json file. Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ).","s":"Google Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#google-auth-provider","p":410},{"i":415,"t":"Add an application: go to https://portal.azure.com, choose Azure Active Directory, select App registrations and then click on New registration. Pick a name, check the supported account type(single-tenant, multi-tenant, etc). In the Redirect URI section create a new Web platform entry for each app that you want to protect by the oauth2 proxy(e.g. https://internal.yourcompanycom/oauth2/callback). Click Register. Next we need to add group read permissions for the app registration, on the API Permissions page of the app, click on Add a permission, select Microsoft Graph, then select Application permissions, then click on Group and select Group.Read.All. Hit Add permissions and then on Grant admin consent (you might need an admin to do this).**IMPORTANT**: Even if this permission is listed with **\"Admin consent required=No\"** the consent might actually be required, due to AAD policies you won't be able to see. If you get a **\"Need admin approval\"** during login, most likely this is what you're missing! Next, if you are planning to use v2.0 Azure Auth endpoint, go to the Manifest page and set \"accessTokenAcceptedVersion\": 2 in the App registration manifest file. On the Certificates & secrets page of the app, add a new client secret and note down the value after hitting Add. Configure the proxy with: for V1 Azure Auth endpoint (Azure Active Directory Endpoints - https://login.microsoftonline.com/common/oauth2/authorize) --provider=azure --client-id= --client-secret= --azure-tenant={tenant-id} --oidc-issuer-url=https://sts.windows.net/{tenant-id}/ for V2 Azure Auth endpoint (Microsoft Identity Platform Endpoints - https://login.microsoftonline.com/common/oauth2/v2.0/authorize) --provider=azure --client-id= --client-secret= --azure-tenant={tenant-id} --oidc-issuer-url=https://login.microsoftonline.com/{tenant-id}/v2.0 Notes: When using v2.0 Azure Auth endpoint (https://login.microsoftonline.com/{tenant-id}/v2.0) as --oidc_issuer_url, in conjunction with --resource flag, be sure to append /.default at the end of the resource name. See https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent#the-default-scope for more details. When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#azure-auth-provider","p":410},{"i":417,"t":"Open the ADFS administration console on your Windows Server and add a new Application Group Provide a name for the integration, select Server Application from the Standalone applications section and click Next Follow the wizard to get the client-id, client-secret and configure the application credentials Configure the proxy with --provider=adfs --client-id= --client-secret= Note: When using the ADFS Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"ADFS Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#adfs-auth-provider","p":410},{"i":419,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":410},{"i":421,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to login even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to login with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#github-auth-provider","p":410},{"i":423,"t":"note This is the legacy provider for Keycloak, use Keycloak OIDC Auth Provider if possible. Create new client in your Keycloak realm with Access Type 'confidental' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: --provider=keycloak --client-id= --client-secret= --login-url=\"http(s):///auth/realms//protocol/openid-connect/auth\" --redeem-url=\"http(s):///auth/realms//protocol/openid-connect/token\" --profile-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --validate-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --keycloak-group= --keycloak-group= For group based authorization, the optional --keycloak-group (legacy) or --allowed-group (global standard) flags can be used to specify which groups to limit access to. If these are unset but a groups mapper is set up above in step (3), the provider will still populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response. The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":410},{"i":425,"t":"Create new client in your Keycloak realm with Access Type 'confidental', Client protocol 'openid-connect' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Create a mapper with Mapper Type 'Audience' and Included Client Audience and Included Custom Audience set to your client name. Make sure you set the following to the appropriate url: --provider=keycloak-oidc --client-id= --client-secret= --redirect-url=https://myapp.com/oauth2/callback --oidc-issuer-url=https:///auth/realms/ --allowed-role= // Optional, required realm role --allowed-role=: // Optional, required client role","s":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":410},{"i":427,"t":"This auth provider has been tested against Gitlab version 12.X. Due to Gitlab API changes, it may not work for version prior to 12.X (see 994). Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. If you need projects filtering, add the extra read_api scope to your application. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\" If your self-hosted GitLab is on a sub-directory (e.g. domain.tld/gitlab), as opposed to its own sub-domain (e.g. gitlab.domain.tld), you may need to add a redirect from domain.tld/oauth pointing at e.g. domain.tld/gitlab/oauth.","s":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":410},{"i":429,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":410},{"i":431,"t":"For adding an application to the Microsoft Azure AD follow these steps to add an application. Take note of your TenantId if applicable for your situation. The TenantId can be used to override the default common authorization server with a tenant specific server.","s":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":410},{"i":433,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex and we will use it as an example. The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta, an example can be found below. Dex​ To configure the OIDC provider for Dex, perform the following steps: Download Dex: go get github.com/dexidp/dex See the getting started guide for more details. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Add a configuration block to the staticClients section of examples/config-dev.yaml: - id: oauth2-proxyredirectURIs:- 'http://127.0.0.1:4180/oauth2/callback'name: 'oauth2-proxy'secret: proxy Launch Dex: from $GOPATH/github.com/dexidp/dex, run: bin/dex serve examples/config-dev.yaml In a second terminal, run the oauth2-proxy with the following args: -provider oidc-provider-display-name \"My OIDC Provider\"-client-id oauth2-proxy-client-secret proxy-redirect-url http://127.0.0.1:4180/oauth2/callback-oidc-issuer-url http://127.0.0.1:5556/dex-cookie-secure=false-cookie-secret=secret-email-domain kilgore.trout To serve the current working directory as a web site under the /static endpoint, add: -upstream file://$PWD/#/static/ Test the setup by visiting http://127.0.0.1:4180 or http://127.0.0.1:4180/static . See also our local testing environment for a self-contained example using Docker and etcd as storage for Dex. Okta​ To configure the OIDC provider for Okta, perform the following steps: Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com . The client_id and client_secret are configured in the application settings. Generate a unique cookie_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#openid-connect-provider","p":410},{"i":435,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048 bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost', The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"login.gov Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#logingov-provider","p":410},{"i":437,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to setup the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#nextcloud-provider","p":410},{"i":439,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":410},{"i":441,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who has access to one selected repository use --bitbucket-repository=.","s":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":410},{"i":443,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1\"","s":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":410},{"i":445,"t":"To authorize by email domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#email-authentication","p":410},{"i":447,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":410},{"i":449,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"","p":448},{"i":451,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_'; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#generating-a-cookie-secret","p":448},{"i":453,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#config-file","p":448},{"i":455,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --api-route string | list return HTTP 401 instead of redirecting to authentication server if token is not valid. Format: path_regex --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --code-challenge-method string use PKCE code challenges with the specified method. Either 'plain' or 'S256' (recommended) --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --cookie-csrf-per-request bool Enable having different CSRF cookies per request, making it possible to have parallel requests. false --cookie-csrf-expire duration expire timeframe for CSRF cookie 15m --custom-templates-dir string path to custom html templates --custom-sign-in-logo string path or a URL to an custom image for the sign_in page logo. Use \\\"-\\\" to disable default logo. --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --force-json-errors bool force JSON errors instead of HTTP error pages or redirects false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --gitlab-projects string | list restrict logins to members of any of these projects (may be given multiple times) formatted as orgname/repo=accesslevel. Access level should be a value matching Gitlab access levels, defaulted to 20 if absent --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -B for bcrypt encryption --htpasswd-user-group string | list the groups to be set on sessions for htpasswd users --http-address string [http://]: or unix:// to listen on for HTTP clients. Square brackets are required for ipv6 address, e.g. http://[::1]:4180 \"127.0.0.1:4180\" --https-address string [https://]: to listen on for HTTPS clients. Square brackets are required for ipv6 address, e.g. https://[::1]:443 \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --insecure-oidc-skip-nonce bool skip verifying the OIDC ID Token's nonce claim true --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --oidc-email-claim string which OIDC claim contains the user's email \"email\" --oidc-groups-claim string which OIDC claim contains the user groups \"groups\" --oidc-audience-claim string which OIDC claim contains the audience \"aud\" --oidc-extra-audience string | list additional audiences which are allowed to pass verification \"[]\" --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Groups, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --metrics-address string the address prometheus metrics will be scraped from \"\" --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --redis-connection-idle-timeout int Redis connection idle timeout seconds. If Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. Exmpale: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14 0 --request-id-header string Request header to use as the request ID in logging X-Request-Id --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted and allows X-Forwarded-{Proto,Host,Uri} headers to be used on redirect selection false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Groups, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --show-debug-on-error bool show detailed error information on error pages (WARNING: this may contain sensitive information - do not use in production) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping endpoint false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string | list (DEPRECATED for --skip-auth-route) bypass authentication for requests paths that match (may be given multiple times) --skip-auth-route string | list bypass authentication for requests that match the method & path. Format: method=path_regex OR method!=path_regex. For all methods: path_regex OR !=path_regex --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy true --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-cipher-suite string | list Restricts TLS cipher suites used by server to those listed (e.g. TLS_RSA_WITH_RC4_128_SHA) (may be given multiple times). If not specified, the default Go safe cipher list is used. List of valid cipher suites can be found in the crypto/tls documentation. --tls-key-file string path to private key file --tls-min-version string minimum TLS version that is acceptable, either \"TLS1.2\" or \"TLS1.3\" \"TLS1.2\" --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --upstream-timeout duration maximum amount of time the server will wait for a response from the upstream 30s --allowed-group string | list restrict logins to members of this group (may be given multiple times) --allowed-role string | list restrict logins to users with this role (may be given multiple times). Only works with the keycloak-oidc provider. --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . or a *. to allow subdomains (e.g. .example.com, *.example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. [1]: Only these providers support --cookie-refresh: GitLab, Google and OIDC [2]: When using the whitelist-domain option, any domain prefixed with a . or a *. will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URL's protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*. See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#command-line-options","p":448},{"i":457,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#upstreams-configuration","p":448},{"i":459,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside of a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#environment-variables","p":448},{"i":461,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) can be disabled with --silence-ping-logging reducing log volume. This flag appends the --ping-path to --exclude-logging-paths.","s":"Logging Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#logging-configuration","p":448},{"i":463,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Message Authenticated via OAuth2 The details of the auth attempt. Protocol HTTP/1.0 The request protocol. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details.","s":"Auth Log Format","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#auth-log-format","p":448},{"i":465,"t":"HTTP request logs will output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#request-log-format","p":448},{"i":467,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#standard-log-format","p":448},{"i":469,"t":"The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\".","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":448},{"i":471,"t":"This option requires --reverse-proxy option to be set.","s":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":448},{"i":473,"t":"The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration: http: routers: a-service: rule: \"Host(`a-service.example.com`)\" service: a-service-backend middlewares: - oauth-errors - oauth-auth tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth: rule: \"Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true oauth-errors: errors: status: - \"401-403\" service: oauth-backend query: \"/oauth2/sign_in\"","s":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":448},{"i":475,"t":"Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint Following options need to be set on oauth2-proxy: --upstream=static://202: Configures a static response for authenticated sessions --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly http: routers: a-service-route-1: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)\" service: a-service-backend middlewares: - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" a-service-route-2: rule: \"Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)\" service: a-service-backend middlewares: - oauth-auth-wo-redirect # unauthenticated session will return a 401 tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services-oauth2-route: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth2-proxy-route: rule: \"Host(`oauth.example.com`) && PathPrefix(`/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 b-service-backend: loadBalancer: servers: - url: http://172.16.0.3:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth-redirect: forwardAuth: address: https://oauth.example.com/ trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization oauth-auth-wo-redirect: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":448}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/324",[0,3.166,1,5.072,2,3.446,3,6.542,4,6.542,5,2.942,6,4.202,7,4.391,8,3.446,9,3.166,10,1.323,11,2.333,12,4.391,13,5.828,14,4.391,15,4.391,16,4.391,17,5.072,18,0.574,19,3.446,20,3.446,21,4.391,22,1.286,23,5.828,24,4.391,25,4.391,26,4.391,27,1.941,28,3.821,29,3.821,30,3.821,31,4.391,32,1.531,33,3.821,34,1.971,35,2.942,36,2.597,37,4.391,38,4.391,39,1.227,40,2.756,41,2.221,42,2.756,43,4.391,44,4.391,45,4.391,46,4.391,47,3.821,48,2.12,49,3.166,50,1.718,51,1.862,52,1.026,53,0.928,54,1.718,55,2.12,56,2.12,57,0.928,58,2.333,59,1.862,60,3.658,61,3.821,62,1.531,63,1.787,64,2.457]],["t/326",[10,1.366,18,0.405,22,1.183,39,1.179,50,1.803,52,1.059,62,1.608,65,2.521,66,1.549,67,2.726,68,2.45,69,3.559,70,1.669,71,4.012,72,2.894,73,3.089,74,2.354,75,2.572,76,1.493,77,1.389,78,4.033,79,2.841,80,2.45,81,4.012,82,2.219,83,1.877,84,4.012,85,1.689,86,4.611,87,2.58,88,1.549,89,4.611,90,4.611,91,3.089,92,2.226,93,2.58,94,4.611,95,2.58,96,2.726,97,3.089,98,3.198,99,3.198,100,2.894,101,0.811,102,2.894,103,1.877,104,1.608,105,2.332,106,3.089,107,1.877,108,3.089,109,3.324,110,3.089]],["t/328",[22,1.163,53,1.25,111,1.848,112,5.917,113,4.198,114,4.644,115,3.714,116,4.644,117,2.857,118,3.965,119,5.917,120,5.149,121,4.266,122,5.917,123,3.714,124,3.311,125,4.644,126,5.917,127,5.917]],["t/330",[18,0.424,22,1.22,34,1.456,42,3.033,53,1.311,92,2.333,95,2.704,106,3.238,108,3.238,114,4.869,121,4.473,123,3.033,128,4.832,129,4.157,130,5.399,131,2.444,132,5.675,133,3.484,134,5.964,135,4.205,136,3.669,137,4.832,138,3.669,139,4.832,140,2.567,141,4.205,142,3.033,143,4.832,144,4.832,145,4.832,146,2.857,147,4.205,148,1.624,149,3.792,150,2.048,151,2.995,152,4.832,153,4.832,154,4.832,155,4.832,156,4.832,157,4.832,158,4.205,159,3.484,160,4.832,161,4.832,162,3.792,163,3.792,164,1.456]],["t/332",[6,4.499,18,0.547,32,1.7,108,3.266,114,3.826,121,3.515,130,5.43,134,5.43,135,4.242,136,3.689,140,3.656,142,3.06,151,2.353,159,5.623,164,1.469,165,6.881,166,6.239,167,6.239,168,2.353,169,3.515,170,4.874,171,4.874,172,4.874,173,4.874,174,4.242,175,3.515,176,4.874,177,3.826,178,4.874,179,4.874,180,6.239,181,2.155,182,1.765,183,2.353,184,4.874,185,4.874,186,4.874,187,4.874,188,4.874,189,4.874,190,4.874,191,4.874,192,4.874]],["t/334",[10,1.574,11,2.306,18,0.507,34,1.743,52,1.356,54,1.697,57,1.374,76,1.873,101,0.764,102,2.724,103,1.766,109,3.129,131,2.195,132,4.539,138,3.42,164,1.308,168,2.095,182,2.094,193,3.777,194,4.354,195,1.918,196,2.908,197,4.648,198,4.539,199,4.339,200,3.777,201,1.918,202,4.339,203,3.42,204,3.406,205,2.908,206,4.339,207,4.339,208,2.908,209,3.777,210,3.777,211,3.777,212,2.908,213,2.875,214,3.406,215,5.66,216,2.908,217,3.406,218,2.908,219,4.339,220,2.428,221,1.697,222,3.456,223,3.875,224,2.724,225,3.406,226,3.406,227,2.724,228,3.777,229,3.777,230,4.339]],["t/336",[18,0.641,27,2.458,34,2.041,39,0.979,52,0.979,54,2.649,57,1.431,80,2.954,111,1.737,125,4.364,182,2.013,197,4.895,204,4.364,205,3.726,213,2.458,216,3.726,220,3.111,221,2.649,222,3.599,223,3.726,231,3.726,232,2.263,233,3.726,234,2.813]],["t/338",[18,0.551,22,1.431,34,1.482,41,3.174,52,1.216,53,1.538,54,3.056,57,1.538,105,2.488,111,1.536,182,2.784,197,4.877,205,4.204,212,3.295,213,2.774,216,3.295,218,4.204,221,1.924,235,5.712,236,6.274,237,2.613,238,4.28,239,3.86,240,3.86,241,4.918]],["t/340",[18,0.456,22,1.022,27,1.642,32,1.295,39,1.144,41,1.879,52,0.654,53,0.785,54,2.346,57,1.373,58,1.973,59,1.574,60,2.331,66,2.299,69,3.074,70,1.882,76,1.203,77,1.567,78,3.484,85,1.459,91,2.488,101,1.144,103,1.511,106,2.488,125,2.914,136,2.196,148,1.248,151,1.793,164,1.119,197,4.02,205,2.488,212,2.488,221,1.452,242,1.08,243,3.713,244,3.713,245,2.914,246,3.713,247,1.879,248,3.713,249,3.713,250,2.914,251,3.713,252,3.713,253,4.325,254,3.713,255,1.397,256,3.713,257,3.713,258,2.51,259,3.713,260,3.713,261,3.713,262,3.713,263,3.232,264,3.713,265,3.713,266,2.914,267,3.713,268,1.808,269,3.713,270,3.713,271,1.006,272,3.713,273,2.488,274,3.713,275,2.914,276,3.713,277,1.119,278,3.713,279,2.078,280,3.713,281,2.331,282,3.713,283,2.678,284,3.713,285,1.879,286,3.232,287,2.914,288,3.713,289,3.232,290,3.713,291,3.713,292,3.713,293,3.713,294,3.713,295,1.879,296,3.713,297,2.914,298,3.713,299,2.078,300,3.713,301,1.642,302,2.078,303,2.488,304,2.331,305,2.078,306,2.078,307,2.914,308,2.4,309,3.713,310,2.331]],["t/343",[39,1.076,69,3.615,105,3.092,277,1.842,285,3.092,311,1.842,312,1.715,313,1.437,314,1.598,315,6.113,316,3.837,317,3.248,318,6.113,319,2.054,320,4.096]],["t/345",[0,3.486,6,2.418,18,0.656,22,1.294,27,1.483,39,1.092,52,1.316,53,0.709,57,1.198,64,1.876,65,1.819,77,1.011,82,1.771,85,1.357,101,0.851,103,2.308,104,2.669,107,2.526,109,2.418,118,2.247,131,1.696,140,2.569,141,4.208,150,1.422,174,2.918,183,1.619,193,2.918,195,1.483,197,3.8,198,2.632,203,1.983,208,2.247,215,4.935,220,1.876,224,2.105,228,4.208,229,4.208,232,1.365,255,1.262,271,1.31,295,2.446,312,0.941,313,0.789,314,0.877,319,2.086,321,2.918,322,2.918,323,3.353,324,2.918,325,2.418,326,4.451,327,3.353,328,3.353,329,2.918,330,2.105,331,4.835,332,3.353,333,3.035,334,3.486,335,4.835,336,3.035,337,1.619,338,3.353,339,2.918,340,3.353,341,2.632,342,2.632,343,3.353,344,3.353,345,3.486,346,3.353,347,2.446,348,3.795,349,2.865,350,4.835,351,4.208,352,4.208,353,4.835,354,2.569,355,2.859,356,4.835,357,3.353]],["t/347",[9,4.05,18,0.493,39,0.989,52,0.989,150,2.381,164,1.693,299,3.143,311,1.693,312,1.912,313,1.321,314,1.468,319,2.29,358,5.501,359,1.982,360,4.408,361,5.349,362,4.888,363,5.616,364,6.815,365,2.774,366,4.05,367,5.616]],["t/349",[39,1.036,85,1.651,101,1.234,146,4.427,255,2.214,277,2.112,311,1.774,312,1.651,313,1.384,314,1.539,359,2.038,368,3.236,369,2.841,370,5.016]],["t/351",[18,0.452,57,1.088,70,2.338,74,2.526,76,1.667,77,1.551,107,2.095,131,2.604,235,4.039,253,4.656,311,1.551,312,1.444,313,1.21,314,1.345,319,2.561,359,1.878,371,3.711,372,4.479,373,3.711,374,4.352,375,4.479,376,4.429,377,4.479,378,4.479,379,3.711,380,3.449,381,5.62,382,3.711,383,4.479,384,4.039,385,3.043,386,4.479,387,4.039]],["t/353",[10,1.249,32,1.92,40,3.455,57,1.163,103,2.241,110,3.689,117,3.25,118,3.689,123,3.455,311,1.659,359,2.115,388,4.32,389,5.284,390,5.505,391,4.32,392,3.08,393,5.505,394,5.505,395,5.505,396,6.732,397,5.505,398,5.505,399,5.505,400,5.505,401,5.505,402,5.284,403,4.791,404,5.505,405,5.505]],["t/355",[18,0.445,35,3.401,39,0.893,77,1.53,79,2.973,85,1.968,101,1.234,146,4.354,169,4.616,255,1.909,277,2.113,311,1.53,312,1.424,313,1.194,314,1.327,359,2.207,368,3.237,369,3.091,370,4.699,385,3.001,406,5.503,407,3.984,408,4.616,409,5.076,410,3.984,411,5.076,412,3.984,413,2.066]],["t/357",[39,1.047,101,1.047,113,4.208,277,2.126,311,1.793,312,1.669,313,1.399,314,1.555,359,2.051,365,3.061,368,3.256,369,3.406]],["t/359",[39,0.994,101,0.994,232,2.298,277,1.701,305,3.825,311,1.701,312,1.584,313,1.327,314,1.476,359,2.138,365,2.993,368,2.606,369,2.726,414,6.836,415,3.543,416,4.431,417,3.338,418,4.431,419,6.836,420,3.543,421,3.338,422,4.07,423,3.543]],["t/361",[18,0.443,57,1.068,65,2.632,68,2.684,76,2.267,101,0.889,103,2.056,105,2.556,107,3.237,131,2.556,150,2.142,195,2.234,224,3.171,266,3.965,311,1.523,312,1.418,313,1.188,314,1.321,316,3.171,319,2.47,320,3.386,337,2.439,359,1.469,371,3.643,424,3.171,425,3.965,426,5.052,427,3.386,428,6.383,429,3.386,430,3.171,431,5.052,432,5.052,433,5.052,434,5.052,435,5.052,436,5.052,437,5.052]],["t/363",[18,0.403,34,1.384,57,0.97,58,2.439,59,1.947,70,2.173,74,1.796,76,1.944,107,2.722,195,2.03,201,2.03,232,1.869,235,3.604,253,4.328,271,1.244,311,1.384,312,1.288,313,1.08,314,1.2,319,2.674,333,2.882,359,2.14,371,3.311,374,4.118,375,3.996,376,4.197,377,3.996,378,3.996,379,3.311,380,3.077,381,5.224,382,3.311,383,3.996,384,3.604,385,2.715,386,3.996,387,3.604,424,2.882,438,3.311,439,3.077,440,3.311,441,4.822,442,3.311,443,2.882,444,5.224,445,5.224]],["t/365",[18,0.503,27,2.534,39,1.214,85,1.609,277,2.079,301,2.534,306,3.208,311,1.728,312,1.609,313,1.348,314,1.499,359,2.006,365,3.013,368,3.185,369,2.768,446,3.861,447,4.989,448,5.81]],["t/367",[18,0.593,34,1.667,39,0.974,62,1.929,78,4.525,142,4.239,213,2.985,232,2.252,255,2.081,295,3.416,311,1.667,312,1.552,313,1.301,314,1.446,359,2.119,392,3.779,449,6.753,450,5.3,451,6.753,452,6.753,453,3.989,454,4.815]],["t/369",[18,0.428,39,1.098,41,2.466,52,0.858,57,1.318,62,1.7,63,1.984,66,2.438,67,2.882,77,2.074,101,0.858,150,2.067,159,3.515,277,1.469,308,2.25,311,1.469,317,3.984,319,2.438,359,1.417,413,2.801,438,3.515,455,3.826,456,3.916,457,4.499,458,5.401,459,1.751,460,2.104,461,3.826,462,4.242,463,4.874,464,4.242,465,4.874,466,3.826,467,4.874,468,3.515,469,3.266]],["t/371",[10,1.535,18,0.316,57,1.076,63,1.467,66,1.711,68,2.705,76,2.338,77,2.039,83,2.072,92,3.097,101,1.039,111,1.126,148,1.211,159,3.671,175,3.671,213,1.594,216,2.415,233,2.415,277,1.086,308,1.664,312,1.011,313,1.197,314,0.942,317,3.408,319,2.553,324,3.137,359,1.865,368,1.664,392,2.017,413,2.402,438,2.599,456,3.196,457,2.599,458,3.996,460,1.97,462,5.137,470,3.605,471,3.605,472,3.605,473,3.996,474,5.091,475,3.605,476,3.605,477,4.431,478,3.605,479,1.74,480,3.605,481,2.072,482,3.605,483,3.996,484,5.091,485,2.415,486,4.256,487,3.605,488,3.605,489,5.903,490,3.605,491,5.091,492,2.017,493,3.605,494,3.605,495,3.605,496,2.829,497,3.605,498,3.605,499,2.829,500,3.605,501,3.996,502,2.829,503,2.829,504,2.829,505,3.605,506,3.605,507,3.137,508,3.605,509,3.605,510,3.605]],["t/373",[6,2.486,10,0.782,18,0.433,35,3.305,36,2.039,39,0.607,50,1.929,66,1.158,68,1.832,69,3.406,77,1.486,79,2.442,85,1.616,101,1.254,140,1.832,148,1.935,150,1.462,164,1.894,195,2.546,203,2.039,268,1.486,279,1.929,301,2.181,311,1.039,312,0.967,313,0.811,314,0.901,316,3.946,320,4.457,330,2.164,359,2.071,365,1.403,374,3.872,447,5.012,453,2.486,460,1.384,468,2.486,469,2.31,479,1.664,511,4.932,512,2.917,513,2.621,514,3.406,515,4.932,516,3,517,4.932,518,3,519,3.447,520,3,521,3.447,522,4.932,523,4.52,524,3.556,525,3.447,526,4.932,527,3,528,5.012,529,3.447,530,2.486,531,4.293,532,3.447,533,3.447,534,3.447,535,3.447,536,3.447,537,2.706,538,3.447,539,4.932,540,2.706,541,2.486,542,3.447,543,4.932,544,3.447,545,4.932,546,3.447,547,4.932,548,3.447,549,4.932,550,3.447,551,4.932,552,3.447,553,3,554,4.932,555,3.096,556,2.486,557,3.447]],["t/375",[11,1.519,18,0.453,32,0.997,39,1.37,41,1.447,50,2.41,52,1.287,62,2.004,66,0.961,76,1.674,79,1.823,82,0.893,83,2.103,85,0.802,101,1.012,105,1.447,150,1.823,164,1.557,194,1.795,232,1.164,237,1.519,255,1.618,268,1.557,271,1.165,273,1.916,275,2.244,277,1.557,281,1.795,283,3.1,285,2.614,299,1.6,301,1.901,302,2.406,303,1.916,304,1.795,305,2.406,306,1.6,311,0.862,312,0.802,313,1.011,314,0.748,317,1.519,319,1.736,330,3.244,333,1.795,355,1.691,359,2.2,365,1.164,368,1.32,369,1.381,413,1.164,427,1.916,438,2.062,455,4.056,458,2.244,459,1.207,460,1.207,513,1.519,558,7.202,559,4.3,560,4.3,561,5.168,562,4.3,563,2.86,564,4.3,565,2.86,566,4.3,567,2.86,568,4.3,569,2.86,570,3.1,571,4.3,572,2.86,573,4.3,574,2.86,575,2.86,576,4.3,577,2.86,578,4.3,579,2.86,580,4.3,581,2.86,582,2.86,583,2.86,584,4.3,585,2.86,586,2.86,587,2.489,588,2.86,589,2.489,590,2.86,591,2.86,592,2.86,593,2.489,594,4.3,595,2.86,596,2.489,597,1.795,598,4.3,599,4.3,600,2.489,601,4.3,602,2.86,603,1.916,604,4.3,605,4.3,606,2.86,607,1.916,608,2.489,609,2.062]],["t/377",[18,0.5,32,1.989,39,1.211,57,1.454,136,3.373,301,3.041,302,3.191,303,3.822,304,3.58,305,3.191,306,3.849,311,1.719,313,1.341,359,1.658,388,4.476,492,3.191,570,4.112,589,4.964,610,5.703,611,4.964,612,4.964,613,4.476,614,4.112,615,4.476]],["t/379",[39,1.36,224,3.991,311,1.916,388,4.991,616,5.534,617,5.534]],["t/381",[34,1.603,58,2.826,59,2.255,76,1.723,92,2.568,117,2.568,131,2.691,195,2.352,223,3.565,232,2.165,271,1.785,311,1.603,312,1.493,313,1.251,314,1.391,319,2.586,330,3.339,333,3.339,354,2.826,359,2.083,371,3.836,372,4.63,382,3.836,425,4.175,440,3.836,441,5.165,442,3.836,443,3.339,444,5.737,445,5.737,618,5.32]],["t/383",[10,1.685,52,1.143,101,1.143,104,2.471,140,2.76,195,2.297,224,3.261,234,2.628,295,2.628,311,1.565,312,1.458,313,1.222,314,1.358,345,3.746,351,5.653,352,5.653,354,3.945,355,3.072,359,1.889,373,3.746,424,3.261,479,3.136,619,4.683,620,6.495,621,6.495,622,4.683,623,5.195,624,5.195,625,5.195]],["t/385",[11,2.47,32,1.621,34,1.824,42,4.223,48,2.245,57,0.982,93,2.602,101,0.818,104,1.621,129,3.115,150,2.565,195,2.055,196,3.115,234,2.352,295,3.605,311,1.401,312,1.305,313,1.093,314,1.215,354,4.155,355,3.578,359,1.76,373,3.352,382,4.363,413,1.892,460,1.305,626,3.649,627,4.749,628,3.578,629,6.051,630,6.051,631,4.749,632,6.051,633,4.649,634,3.649,635,4.649,636,6.051,637,5.28,638,4.749,639,4.649,640,4.046,641,4.649,642,4.046,643,4.649,644,3.649]],["t/387",[10,1.42,32,1.707,41,2.477,62,1.707,66,2.102,68,3.324,72,3.073,175,3.53,277,1.475,299,2.74,311,1.475,312,1.374,313,1.151,314,1.28,317,3.664,319,2.623,348,3.843,359,1.819,424,3.073,429,3.281,430,3.073,455,3.843,456,3.073,457,3.53,459,1.374,477,5.445,483,5.412,486,4.972,507,4.261,541,3.53,645,3.843,646,4.261,647,4.896,648,4.261,649,4.896,650,4.896,651,4.896,652,3.53,653,2.895,654,4.896,655,4.261,656,4.896,657,4.896]],["t/389",[18,0.536,22,1.118,52,0.493,53,0.592,57,0.895,65,2.695,68,3.413,69,1.657,77,1.276,82,0.875,83,1.14,85,0.786,95,1.568,98,1.489,101,0.493,103,3.038,104,2.13,107,1.14,124,2.369,131,1.417,151,1.353,158,2.438,164,1.276,175,2.02,201,1.239,212,2.837,220,1.568,232,3.068,245,2.199,247,1.417,250,2.199,311,0.844,312,0.786,313,0.659,314,0.732,316,3.571,319,0.941,320,1.877,325,2.02,326,2.199,329,2.438,336,3.834,337,3.316,345,2.02,349,1.293,354,1.489,359,1.654,376,2.658,389,4.006,391,2.199,424,1.759,427,1.877,429,2.837,430,1.759,446,2.369,459,0.786,468,2.02,483,2.199,523,2.199,587,2.438,607,1.877,658,2.802,659,2.802,660,2.802,661,2.438,662,2.802,663,2.802,664,4.234,665,5.104,666,2.802,667,4.234,668,2.802,669,4.234,670,5.104,671,2.438,672,5.688,673,4.234,674,2.802,675,2.802,676,2.802,677,2.802,678,2.802,679,2.802,680,2.802,681,2.802,682,2.802,683,1.955,684,2.802,685,2.802,686,2.802,687,2.802,688,2.802,689,2.802,690,2.802,691,2.802,692,2.802,693,2.802,694,2.802,695,4.234,696,2.802,697,2.802,698,2.802,699,2.802,700,2.802,701,5.104,702,2.802,703,2.438,704,2.802,705,2.802,706,5.104,707,2.199,708,2.438,709,2.802,710,4.234,711,2.438,712,2.802,713,2.802,714,1.877,715,2.837,716,4.234,717,2.802,718,2.504,719,4.234,720,2.438,721,2.802,722,3.323,723,2.199,724,2.438,725,2.199]],["t/391",[10,1.237,22,1.072,52,0.959,65,2.05,66,1.832,68,2.896,77,1.643,88,1.832,103,3.253,104,1.901,224,3.421,232,2.947,311,1.643,312,1.529,313,1.282,314,1.425,316,3.421,326,4.278,424,3.421,459,1.529,469,3.652,616,4.744,617,4.744,726,6.692,727,4.744,728,5.451,729,5.451,730,5.451]],["t/393",[18,0.483,22,1.082,27,2.976,53,1.163,65,2.071,66,1.85,74,3.04,75,2.438,77,1.659,82,1.72,85,1.545,92,2.658,99,3.577,100,3.455,162,4.32,183,2.658,313,1.294,325,3.969,334,3.969,349,2.541,420,3.455,460,1.545,628,3.255,731,6.732,732,3.255,733,3.981]],["t/395",[18,0.53,22,1.32,40,2.906,53,1.419,65,2.27,74,2.783,75,2.739,82,1.446,85,1.299,99,3.206,101,0.815,104,1.615,131,2.342,183,2.235,234,2.342,242,1.346,268,2.023,271,1.254,392,2.591,460,1.299,518,4.029,628,3.569,732,3.97,733,4.207,734,4.841,735,4.63,736,6.192,737,4.63,738,4.63,739,4.63,740,4.63,741,4.029,742,4.63,743,4.63,744,4.63,745,4.029,746,3.338,747,4.63,748,4.63,749,4.029,750,4.029,751,3.102,752,4.63,753,4.029,754,4.029]],["t/397",[18,0.609,27,1.402,52,0.967,53,0.67,54,1.24,55,1.531,57,0.981,63,1.291,74,2.717,75,1.989,76,1.504,79,1.344,85,0.89,95,1.774,99,3.784,100,5.024,101,0.967,110,3.68,111,1.45,121,2.286,147,2.76,149,2.489,151,1.531,163,2.489,221,2.517,234,1.604,242,0.922,268,0.956,271,1.488,295,1.604,308,2.143,319,1.065,321,2.76,379,2.286,413,1.291,427,3.111,443,3.447,459,1.541,460,0.89,468,2.286,513,3.69,530,3.348,597,2.914,603,2.125,626,4.311,653,1.875,722,5.277,732,3.248,733,2.745,746,3.96,755,4.643,756,5.492,757,5.492,758,3.171,759,2.76,760,4.643,761,4.643,762,4.04,763,3.171,764,3.171,765,3.171,766,2.76,767,3.171,768,2.286,769,3.171,770,3.171,771,3.171,772,2.76,773,3.171,774,4.78,775,4.643,776,2.914,777,4.04,778,3.171,779,1.402,780,4.643,781,3.171,782,3.171,783,2.76,784,4.78,785,2.76,786,2.76,787,4.04,788,2.76]],["t/399",[18,0.622,22,1.242,41,2.073,47,4.843,50,2.471,52,0.721,53,1.176,54,1.603,59,1.737,62,2.203,64,2.293,72,2.572,74,2.177,75,2.015,80,2.178,82,1.28,85,1.15,88,1.377,93,2.293,96,2.424,97,2.746,98,3.601,103,1.668,106,2.746,120,3.567,148,1.377,194,3.493,203,2.424,213,1.812,214,3.217,232,1.668,233,2.746,242,1.192,277,1.235,334,2.955,337,3.272,360,3.217,376,3.493,392,2.293,413,1.668,422,2.955,457,2.955,459,1.988,460,1.15,479,2.687,619,2.955,622,2.955,652,2.955,707,4.367,789,3.567,790,4.098,791,4.098,792,2.746,793,4.098,794,3.217,795,3.567,796,5.499,797,3.567,798,3.567,799,3.217,800,4.098,801,2.955,802,5.565,803,3.567,804,5.565,805,3.567,806,2.746,807,2.746,808,4.098,809,2.955,810,2.955,811,3.217]],["t/401",[18,0.368,39,0.994,51,1.777,52,0.738,53,0.886,57,0.886,62,1.462,63,1.706,65,2.125,70,2.046,73,2.809,74,1.639,75,1.518,82,1.765,85,1.919,87,2.345,88,2.569,91,3.786,105,2.12,107,1.706,109,3.022,151,2.728,194,2.631,201,1.853,205,2.809,211,3.648,227,2.631,237,2.227,255,1.577,277,1.263,301,3.024,317,2.227,392,3.161,443,2.631,456,2.631,459,1.793,466,3.29,469,2.809,481,2.601,499,3.29,524,3.022,597,2.631,653,2.479,754,3.648,779,2.498,801,4.074,803,4.917,812,3.29,813,4.191,814,4.191,815,3.022,816,4.191,817,4.191,818,4.191,819,4.191,820,2.345,821,4.191,822,4.191,823,4.191,824,4.191,825,4.191,826,3.648,827,3.29,828,4.191,829,3.648,830,2.345,831,2.809,832,3.022,833,2.631,834,4.191,835,4.191]],["t/403",[18,0.485,52,0.974,62,1.929,77,2.196,93,3.096,96,3.271,97,3.707,98,2.939,148,2.269,150,3.09,242,1.609,317,3.588,337,3.26,365,2.252,456,4.239,481,2.252,810,3.989,836,5.532,837,4.884,838,4.884,839,5.532,840,5.532]],["t/405",[22,1.447,52,1.126,53,1.351,841,5.019,842,4.611,843,3.782]],["t/407",[5,3.71,9,2.933,10,1.747,11,2.162,18,0.552,22,1.328,32,1.419,39,0.974,42,4.436,52,1.189,53,1.428,55,1.964,56,1.964,60,2.554,75,2.005,76,1.318,93,2.276,101,1.108,104,1.419,129,2.726,148,1.367,150,1.725,164,1.226,226,3.193,268,1.668,271,1.5,295,2.801,347,2.058,354,4.136,413,2.254,460,1.554,464,3.541,627,4.346,631,4.346,634,3.193,637,4.94,638,4.346,644,4.346,736,3.541,741,3.541,844,3.193,845,5.537,846,5.537,847,3.541,848,3.541,849,3.541,850,4.068,851,2.726,852,2.933,853,3.541,854,4.068,855,3.541,856,4.068,857,3.541,858,4.068,859,4.068]],["t/409",[10,1.768,18,0.512,22,1.37,39,0.62,51,1.494,52,0.882,53,1.417,54,1.96,55,1.702,56,1.702,60,3.985,62,1.229,63,2.373,64,3.262,65,1.885,75,1.814,82,1.101,103,1.434,104,1.229,107,1.434,111,1.101,140,2.662,148,1.184,164,1.062,222,1.872,226,2.766,242,1.025,247,2.535,268,1.51,271,1.357,305,2.804,308,1.627,339,4.361,347,1.783,349,2.313,373,4.204,460,1.406,513,1.872,714,2.362,725,3.932,768,2.541,779,1.558,820,2.804,832,3.613,843,2.084,844,2.766,847,3.067,848,3.067,849,3.067,860,5.01,861,5.01,862,3.067,863,3.932,864,5.83,865,4.578,866,2.766,867,3.524,868,3.524,869,3.524,870,3.932,871,3.524,872,3.067,873,4.361,874,5.01,875,3.524,876,3.524,877,3.067,878,3.524,879,3.524,880,3.524,881,3.524,882,3.524,883,3.067,884,2.766,885,3.524,886,2.766,887,3.067,888,2.766,889,5.074,890,2.212,891,2.362,892,3.067,893,4.361,894,3.524,895,3.524,896,3.524,897,3.067]],["t/411",[5,3.325,10,1.126,18,0.435,22,0.975,32,1.73,39,1.378,48,2.396,49,3.578,50,1.941,51,2.104,52,1.111,53,1.049,88,1.667,105,2.51,111,1.55,132,3.894,136,3.731,214,3.894,237,3.353,302,3.531,303,3.325,304,3.114,305,3.531,306,2.776,319,1.667,342,3.894,347,2.51,366,3.578,374,3.531,460,1.392,481,2.02,512,3.731,513,3.353,570,3.578,611,4.318,612,4.318,613,3.894,614,3.578,615,3.894,779,2.194,898,4.962,899,4.318,900,4.962]],["t/413",[0,5.282,2,3.243,10,1.27,22,0.812,32,0.946,34,1.686,36,2.443,39,0.477,48,1.31,50,1.957,51,1.752,53,0.873,57,0.573,66,0.911,70,1.496,72,2.593,74,1.061,75,0.982,76,1.338,79,1.15,80,1.441,82,0.847,85,1.404,88,0.911,101,0.881,111,1.748,113,3.369,117,1.31,124,1.518,133,1.956,148,2.023,150,1.15,164,1.686,177,2.129,181,2.662,182,1.812,183,1.31,200,2.361,201,2.212,218,2.768,221,2.188,227,1.703,232,1.104,242,1.455,255,1.02,258,2.416,268,1.912,271,0.735,285,1.372,299,1.518,305,3.369,342,2.129,365,2.582,368,1.252,369,1.31,415,3.512,416,2.129,417,3.561,418,2.129,420,3.141,421,2.959,422,3.608,423,3.141,446,2.312,473,2.129,479,1.31,481,2.037,492,1.518,531,2.361,537,2.129,593,2.361,648,2.361,683,1.252,714,1.818,749,2.361,751,3.353,776,1.703,805,2.361,812,2.129,830,1.518,842,1.956,872,2.361,886,2.129,901,2.129,902,3.505,903,2.712,904,2.361,905,2.712,906,2.361,907,5.004,908,5.595,909,2.712,910,2.712,911,2.712,912,3.243,913,1.956,914,2.129,915,2.361,916,2.361,917,2.712,918,3.596,919,2.129,920,2.712,921,2.712,922,2.361,923,4.131,924,1.703,925,2.712,926,2.712,927,2.361,928,2.712,929,2.712,930,1.703,931,1.956,932,4.131,933,2.712,934,2.712,935,2.712,936,1.818,937,2.712,938,2.712,939,2.129,940,2.712,941,2.361,942,2.712,943,2.361,944,2.712,945,2.129,946,2.129,947,1.956,948,2.712,949,2.712]],["t/415",[0,2.005,10,0.631,11,2.237,18,0.446,22,0.547,30,3.664,34,0.838,39,0.489,40,1.745,48,2.736,49,2.005,51,1.785,52,0.489,53,0.588,62,2.234,64,2.356,66,0.934,67,1.644,70,2.204,72,1.745,74,1.647,75,1.524,76,1.364,80,2.237,83,1.132,84,2.42,88,0.934,99,1.477,100,1.745,101,0.489,111,1.315,138,1.644,150,1.179,164,1.835,168,3.093,181,1.229,182,1.84,194,3.189,221,1.088,233,1.863,237,1.477,268,1.835,271,1.14,277,0.838,283,3.036,285,1.407,287,2.182,301,1.861,302,3.925,319,0.934,341,2.182,355,1.644,358,3.036,365,1.714,366,3.036,415,3.557,417,1.644,421,1.644,460,1.181,473,3.988,514,2.49,603,1.863,652,2.005,653,1.644,683,1.284,732,1.644,734,2.005,779,2.246,806,4.292,830,1.556,831,1.863,863,3.304,901,4.447,902,3.011,915,3.664,918,2.42,919,2.182,931,4.086,936,1.863,943,3.664,946,5.222,947,2.005,950,2.781,951,4.21,952,2.643,953,2.42,954,2.781,955,2.42,956,2.182,957,1.863,958,2.42,959,2.781,960,2.781,961,3.304,962,2.781,963,2.781,964,2.42,965,2.781,966,2.182,967,2.781,968,2.42,969,2.781,970,2.42,971,2.781,972,2.42,973,2.781,974,2.781,975,4.21,976,2.781,977,2.781,978,2.781,979,4.21,980,3.664,981,3.304,982,3.664,983,4.21,984,2.781,985,2.182,986,2.182,987,2.781,988,2.781,989,4.21,990,2.781,991,2.42,992,2.182,993,2.781,994,2.781,995,2.781,996,2.781,997,2.182,998,2.182,999,2.42,1000,2.182,1001,2.42,1002,2.42,1003,2.42]],["t/417",[18,0.419,22,0.938,39,1.083,48,2.303,51,3.05,52,1.083,64,3.443,66,1.603,67,2.82,70,1.727,74,2.406,75,2.228,76,1.545,99,2.534,100,2.994,104,2.145,111,1.49,133,3.439,164,1.854,168,2.303,182,1.727,242,1.387,268,2.168,271,1.292,365,1.941,423,2.994,570,4.436,732,2.82,734,3.439,902,3.269,931,3.439,939,3.743,957,3.196,961,3.743,980,4.151,981,4.829,982,4.151,997,3.743,998,3.743,999,4.151,1000,3.743,1001,4.151,1002,4.151,1003,4.151,1004,4.769,1005,4.769,1006,4.151,1007,4.769,1008,4.769,1009,4.769]],["t/419",[32,2.144,50,2.404,88,2.065,101,1.082,181,2.717,182,2.226,277,1.852,683,2.838,806,4.119,924,3.858,930,3.858,1010,7.192,1011,6.147]],["t/421",[18,0.422,32,1.159,35,2.227,39,0.845,57,1.015,70,1.203,77,1.863,79,2.62,82,1.038,85,1.977,101,0.845,111,1.038,113,1.86,131,1.681,136,4.518,142,2.086,146,4.041,148,1.117,151,2.319,169,4.927,181,2.124,182,1.203,201,1.469,213,1.469,221,1.879,237,1.766,242,1.64,255,2.651,258,1.604,277,2.123,279,1.86,285,1.681,299,1.86,368,3.331,369,2.319,370,4.835,385,2.841,406,4.851,407,2.608,408,2.396,410,2.608,412,3.77,413,2.296,459,1.583,461,2.608,481,1.353,555,3.015,776,2.086,779,1.469,807,2.227,830,1.86,837,3.781,838,3.781,841,2.608,924,2.086,930,2.086,947,2.396,966,3.77,1012,3.323,1013,2.396,1014,2.608,1015,3.323,1016,5.642,1017,2.608,1018,2.892,1019,3.323,1020,2.608,1021,2.608,1022,4.181,1023,2.892,1024,3.323,1025,3.323,1026,3.323,1027,3.323,1028,5.642,1029,3.323,1030,3.323,1031,3.323]],["t/423",[18,0.527,32,1.817,39,1.058,57,0.787,62,1.299,70,1.349,76,1.688,77,1.123,79,1.58,88,1.252,101,0.917,102,2.339,103,1.516,104,1.299,107,1.516,111,1.628,123,2.339,124,2.085,181,2.877,182,1.349,201,1.647,220,2.085,221,1.457,242,1.083,255,1.96,258,1.799,268,1.961,271,1.411,277,1.123,279,2.085,281,2.339,301,1.647,306,4.281,313,1.225,319,1.252,330,2.339,337,1.799,365,3.176,374,2.085,413,1.516,415,3.271,423,2.339,439,2.497,459,1.046,628,2.203,683,1.72,776,2.339,812,2.924,820,2.085,827,2.924,830,2.085,852,2.687,902,1.98,912,2.924,924,2.339,981,2.924,1032,5.211,1033,3.243,1034,3.243,1035,5.23,1036,2.687,1037,3.243,1038,2.924,1039,3.243,1040,3.243,1041,6.508,1042,5.664,1043,6.508,1044,3.726,1045,3.726,1046,5.211,1047,3.726,1048,3.726,1049,3.726,1050,2.687,1051,3.726,1052,2.924,1053,3.726,1054,3.726,1055,3.726]],["t/425",[10,1.316,32,1.519,57,1.225,76,2.25,77,1.747,79,1.847,83,2.36,88,1.948,101,1.02,111,1.361,124,2.438,151,2.799,164,1.313,181,2.881,182,1.577,201,1.926,242,1.267,255,1.639,268,2.324,271,1.57,301,2.563,306,2.438,313,1.532,365,2.36,374,2.438,423,2.734,448,5.452,459,1.222,512,2.576,513,2.315,514,2.576,556,4.699,683,2.011,776,2.734,830,2.438,851,2.919,912,3.419,924,2.734,1033,5.671,1034,3.791,1035,6.046,1036,3.141,1037,3.791,1039,3.791,1040,5.046,1042,3.791,1056,2.919,1057,4.356,1058,4.356,1059,4.356,1060,4.356,1061,4.356,1062,4.356]],["t/427",[10,0.866,18,0.465,36,2.256,39,0.672,42,3.326,50,1.493,51,2.788,54,1.493,57,0.806,70,1.382,75,1.918,80,2.027,88,2.21,101,1.071,113,2.135,115,3.326,123,2.395,148,1.282,168,2.939,201,2.342,203,2.256,209,3.321,242,2.009,247,3.079,268,1.597,271,1.033,277,1.15,281,2.395,285,2.68,301,1.687,304,4.693,365,2.156,368,2.446,369,1.842,417,2.256,430,2.395,446,2.135,459,1.939,481,1.553,512,2.256,514,2.256,745,3.321,776,2.395,779,2.342,830,2.965,833,4.127,837,2.557,838,2.557,902,2.815,952,2.395,968,3.321,1020,2.995,1036,2.751,1063,2.995,1064,5.298,1065,3.816,1066,3.816,1067,4.777,1068,3.816,1069,3.816,1070,3.321,1071,3.816,1072,3.816,1073,3.816,1074,3.816,1075,3.816,1076,3.816,1077,3.816,1078,3.816,1079,3.816,1080,3.321,1081,5.298,1082,3.816,1083,3.816,1084,3.816,1085,3.816,1086,3.321,1087,3.816]],["t/429",[10,1.51,48,2.606,50,2.602,83,2.197,85,1.515,88,1.814,111,1.686,113,3.02,124,3.02,181,2.386,182,1.954,271,1.801,285,2.731,295,3.647,312,1.515,417,3.192,459,1.515,460,1.515,613,4.236,671,4.697,901,4.236,902,2.868,913,3.892,916,4.697,924,3.388,957,3.617,1013,3.892,1088,5.397,1089,5.397,1090,5.397,1091,5.397,1092,4.697,1093,5.789]],["t/431",[18,0.511,51,3.159,104,2.429,105,3.524,111,1.819,124,3.259,168,2.812,242,1.693,258,2.812,299,3.259,302,3.259,358,4.199,361,4.57,366,4.199,460,1.634,645,4.57,902,3.094,1094,6.965,1095,5.823]],["t/433",[2,1.394,5,1.19,10,1.734,11,0.944,18,0.462,19,1.394,22,1.191,27,0.785,34,0.888,36,1.05,39,1.175,40,1.115,41,1.912,48,2.356,50,0.695,51,2.776,52,1.027,53,1.28,54,1.478,57,0.799,58,0.944,62,0.619,63,2.269,66,0.597,75,1.369,76,1.425,77,0.888,79,1.25,80,2.008,83,0.723,85,0.498,87,0.994,88,1.478,101,0.926,103,0.723,104,1.702,111,1.374,113,0.994,115,2.372,118,1.976,124,0.994,129,1.19,131,0.899,133,1.281,138,1.05,140,0.944,148,0.597,164,1.326,168,2.356,181,1.671,182,0.643,183,0.858,195,1.303,196,1.19,201,1.303,204,1.394,220,1.65,222,0.944,227,1.115,231,1.976,233,1.976,234,0.899,242,1.419,255,1.422,258,2.924,268,1.586,271,1.024,273,1.19,277,0.888,285,0.899,301,2.327,312,0.498,313,0.693,314,0.464,333,1.115,336,1.115,347,1.492,365,1.2,374,0.994,417,1.05,421,1.744,427,1.19,459,1.235,460,1.369,469,1.19,481,0.723,501,1.394,512,2.235,513,2.338,514,2.235,537,1.394,555,1.115,556,1.281,603,1.976,607,1.976,619,2.126,653,1.05,683,2.253,715,1.19,718,1.744,732,1.05,734,1.281,746,1.281,751,1.976,779,0.785,801,2.126,806,2.533,807,1.19,832,1.281,833,1.115,844,1.394,851,1.19,852,1.281,863,1.394,888,1.394,902,2.338,913,2.126,919,3.453,922,1.546,930,2.372,931,2.126,936,1.19,939,1.394,941,2.566,952,1.115,953,2.566,957,1.19,964,2.566,970,1.546,986,2.314,991,1.546,1014,1.394,1063,2.966,1067,1.394,1092,1.546,1096,1.776,1097,1.776,1098,1.776,1099,1.776,1100,1.776,1101,1.776,1102,5.263,1103,6.056,1104,2.948,1105,1.776,1106,1.776,1107,1.546,1108,2.566,1109,1.776,1110,2.948,1111,2.948,1112,1.776,1113,1.776,1114,1.776,1115,1.776,1116,1.776,1117,1.776,1118,1.776,1119,1.546,1120,1.776,1121,1.546,1122,1.776,1123,1.776,1124,1.776,1125,1.776,1126,1.776,1127,1.776,1128,1.394,1129,1.776,1130,1.776,1131,1.776,1132,1.776,1133,1.394,1134,1.776,1135,3.829,1136,2.948,1137,1.776,1138,2.948,1139,1.776,1140,1.776,1141,2.948,1142,1.776,1143,1.776,1144,1.776,1145,1.776,1146,1.776,1147,1.776,1148,2.948,1149,1.776,1150,1.776,1151,1.546,1152,1.776,1153,2.566,1154,1.546,1155,1.546,1156,1.776,1157,2.948,1158,1.776,1159,1.546,1160,1.776,1161,3.78,1162,1.776,1163,2.566,1164,1.546,1165,1.776,1166,1.546,1167,1.776,1168,2.948,1169,1.776,1170,1.776,1171,1.776,1172,1.776,1173,1.776,1174,1.776,1175,1.776,1176,1.776,1177,1.776]],["t/435",[1,2.019,9,2.639,10,1.601,11,1.233,18,0.321,19,3.558,20,1.821,22,1.306,27,1.026,34,1.551,39,0.986,41,1.852,48,1.12,49,2.639,51,2.375,53,0.958,57,0.958,58,2.976,59,2.182,62,1.276,66,0.78,67,1.372,69,3.043,75,1.863,77,0.699,78,2.453,79,0.984,82,0.725,83,0.944,88,1.523,92,1.12,95,1.298,98,1.233,101,0.906,104,0.809,115,1.456,140,1.945,142,1.456,146,1.372,148,1.523,164,0.699,177,1.821,181,1.618,195,1.026,201,2.275,213,1.618,223,2.453,227,1.456,231,1.555,234,1.174,237,1.233,240,1.821,242,0.675,255,1.705,258,1.12,268,1.366,271,0.628,277,0.699,279,1.298,281,1.456,295,2.604,297,1.821,301,2.938,308,1.071,347,2.293,355,1.372,359,0.675,392,1.298,408,1.673,421,2.164,439,2.453,450,3.558,453,2.639,459,1.748,461,1.821,481,0.944,485,1.555,503,1.821,512,2.164,513,1.945,514,3.043,524,3.711,540,1.821,541,1.673,614,4.292,628,1.372,653,1.372,683,1.69,762,3.185,768,1.673,779,1.026,801,1.673,806,1.555,815,1.673,826,2.019,830,1.298,862,2.019,890,2.297,904,2.019,906,3.185,914,1.821,952,1.456,986,1.821,997,1.821,1006,3.185,1017,1.821,1021,1.821,1022,2.019,1056,1.555,1063,1.821,1067,1.821,1107,2.019,1119,2.019,1121,3.185,1128,1.821,1133,1.821,1151,2.019,1159,2.019,1163,3.945,1164,2.019,1178,3.66,1179,3.66,1180,3.66,1181,2.32,1182,2.019,1183,2.32,1184,2.32,1185,2.32,1186,2.32,1187,2.32,1188,2.32,1189,2.32,1190,3.66,1191,2.32,1192,2.32,1193,2.32,1194,2.32,1195,2.019,1196,2.32,1197,2.32,1198,2.32,1199,2.32,1200,2.32,1201,3.66,1202,2.32,1203,2.019,1204,2.32,1205,2.019,1206,2.32,1207,2.32,1208,2.019,1209,2.32,1210,2.32,1211,1.821,1212,2.32,1213,2.019,1214,2.32,1215,2.32,1216,2.32,1217,2.32,1218,2.32,1219,2.32,1220,2.32,1221,2.32,1222,2.32,1223,2.32,1224,2.019,1225,2.32,1226,2.32,1227,2.32,1228,3.66,1229,2.32,1230,2.32,1231,2.32,1232,1.821,1233,2.32,1234,2.019,1235,2.32,1236,2.019,1237,2.32,1238,1.821,1239,2.32,1240,2.32,1241,2.32,1242,2.32,1243,2.32,1244,2.32]],["t/437",[18,0.535,32,2.128,36,2.784,39,1.191,52,0.829,53,0.995,55,2.273,56,2.273,58,2.502,59,1.996,77,1.419,82,1.471,85,1.321,88,1.582,95,2.635,108,3.155,111,1.471,164,1.839,196,3.155,223,3.155,268,2.158,271,1.653,277,1.419,279,2.635,308,2.174,413,1.916,415,3.83,430,2.955,459,2.009,496,3.696,615,6.273,683,2.174,945,4.789,1080,5.891,1108,4.098,1245,3.696,1246,4.709,1247,4.709,1248,4.709,1249,4.098,1250,4.709,1251,4.709,1252,4.709,1253,4.709]],["t/439",[18,0.537,22,1.203,34,1.425,39,0.832,50,1.85,51,2.594,52,0.832,53,1.433,54,1.85,55,2.283,56,2.283,57,1.433,66,1.589,68,2.512,73,3.169,76,1.532,88,2.279,101,0.832,111,1.477,164,1.844,181,2.091,182,1.712,203,2.796,242,1.375,247,2.392,268,2.161,271,1.657,312,1.327,314,1.236,347,2.392,459,2.084,460,1.327,499,3.711,779,2.091,807,3.169,831,3.169,913,3.41,1013,3.41,1038,3.711,1135,4.115,1238,3.711,1254,4.729,1255,4.729,1256,4.729,1257,3.711,1258,4.729,1259,4.115,1260,4.729,1261,4.729,1262,4.729]],["t/441",[10,1.515,18,0.621,22,1.177,39,0.805,48,2.89,50,1.788,52,1.054,53,1.265,57,1.265,66,1.536,76,1.939,77,1.378,82,1.428,85,1.283,92,2.208,111,1.428,146,3.54,148,1.536,164,1.804,168,2.208,182,1.656,242,1.329,255,2.511,268,2.134,271,1.621,303,4.472,347,2.313,368,2.763,369,2.208,370,4.011,421,3.54,459,1.283,460,1.283,555,2.87,807,3.064,831,3.064,946,3.589,947,4.316,957,3.064,1036,3.297,1038,3.589,1093,3.979,1166,3.979,1238,3.589,1257,3.589,1259,3.979,1263,4.572,1264,4.572,1265,4.572,1266,4.572,1267,4.572]],["t/443",[10,1.424,22,0.967,32,1.715,39,0.866,51,2.085,57,1.039,66,1.652,88,2.108,91,3.295,111,1.536,164,1.891,181,2.174,182,1.781,231,4.204,242,1.43,247,3.682,268,2.193,271,1.699,273,3.295,277,1.482,279,2.752,349,2.27,459,1.38,683,2.27,899,6.691,930,3.087,1013,3.546,1014,3.86,1153,4.28,1154,4.28,1268,4.918,1269,4.918,1270,6.274,1271,4.918,1272,4.918,1273,4.918,1274,6.91,1275,4.918,1276,4.918,1277,4.918]],["t/445",[18,0.654,56,2.812,82,1.819,92,2.812,148,2.722,258,3.598,425,4.57,479,3.363,481,2.835,1278,5.823,1279,5.823,1280,5.068]],["t/447",[18,0.528,22,1.182,39,1.33,53,1.271,63,2.447,77,1.812,95,3.365,168,2.903,182,2.735,242,1.748,330,3.774,945,4.719,1281,6.013,1282,6.013]],["t/449",[22,1.127,34,2.079,52,1.214,53,1.211,54,2.242,55,3.331,56,3.331,57,1.458,58,3.933,59,3.138,91,3.842,101,1.009,308,2.646,661,4.989,1283,5.733,1284,5.733,1285,6.9]],["t/451",[10,1.846,17,3.947,18,0.398,28,3.947,32,1.581,55,2.19,74,1.774,75,1.642,92,2.19,101,0.798,168,2.19,222,2.41,231,3.039,271,1.228,313,1.066,440,4.293,442,4.793,443,2.846,459,1.273,503,3.559,1155,3.947,1195,5.181,1286,4.535,1287,5.954,1288,4.535,1289,4.535,1290,4.535,1291,4.535,1292,4.535,1293,4.535,1294,4.535,1295,4.535,1296,4.535,1297,4.535,1298,6.647,1299,4.535,1300,5.217,1301,4.535,1302,4.535,1303,6.647,1304,4.535,1305,4.535,1306,4.535,1307,4.535,1308,4.535,1309,4.535,1310,4.535,1311,4.535,1312,4.535,1313,4.535,1314,4.535,1315,4.535,1316,3.947,1317,4.535]],["t/453",[10,1.542,18,0.49,34,2.047,53,1.181,54,2.864,55,2.698,56,2.698,57,1.181,63,2.274,117,2.698,183,2.698,217,4.386,402,4.386,413,2.98,502,4.386,504,4.386,952,3.508,1245,5.333,1300,4.386,1318,4.863,1319,4.863,1320,6.794,1321,5.588,1322,5.588]],["t/455",[5,0.361,8,0.423,10,1.481,11,0.765,18,0.582,20,0.423,22,0.719,32,0.959,34,1.578,35,1.654,36,0.601,39,0.706,42,1.141,48,0.26,50,1.268,51,0.229,52,0.434,53,0.215,54,0.563,56,0.878,57,0.812,60,0.637,61,0.469,62,1.206,64,0.805,65,2.034,66,1.5,68,1.311,69,2.858,70,1.789,71,0.469,72,0.903,74,1.075,75,2.154,76,0.89,77,1.303,78,2.574,79,1.892,80,1.311,81,1.879,82,1.394,83,1.223,85,1.213,87,3.389,88,1.089,92,0.695,93,0.568,95,0.302,96,0.319,98,0.287,99,0.966,100,3.802,101,0.888,102,2.295,103,1.564,104,0.634,105,0.514,106,0.361,107,2.201,108,0.361,110,0.681,113,0.568,115,0.339,117,1.855,123,0.339,129,0.361,136,1.277,138,0.319,140,1.147,142,0.903,146,0.851,148,1.544,150,2.358,151,0.26,162,1.129,163,1.129,164,0.828,168,0.49,169,1.038,181,0.449,183,1.451,194,1.355,195,0.804,196,0.361,198,0.797,201,0.238,203,0.319,210,0.884,212,0.361,213,1.433,220,0.302,221,0.397,222,0.287,225,0.423,227,0.637,232,1.967,234,1.391,237,0.54,238,0.469,239,0.797,245,0.797,247,0.728,250,1.695,253,2.337,255,1.376,258,1.042,263,1.879,266,1.129,268,1.158,271,0.585,273,0.964,275,0.797,277,1.158,279,0.568,281,0.637,283,0.732,285,0.514,286,1.582,287,0.797,289,0.469,295,1.639,297,0.423,299,1.017,301,2.315,302,0.805,304,1.141,305,1.538,306,0.302,307,0.423,308,0.839,310,1.886,312,0.151,313,0.239,314,0.141,316,3.895,319,0.341,320,3.623,325,0.389,333,0.339,334,0.389,336,0.637,337,1.565,341,1.427,347,0.273,349,2.231,354,1.311,355,1.075,358,1.311,359,2.161,361,0.797,362,0.469,365,1.634,368,1.496,369,1.192,370,0.964,374,1.538,376,1.141,379,0.389,380,0.681,385,1.626,387,2.713,389,1.937,391,0.423,392,1.208,406,0.797,407,0.423,408,0.389,410,0.423,412,0.423,413,1.005,415,0.637,416,0.423,417,0.601,418,0.423,420,0.637,421,0.601,422,1.311,423,0.339,429,0.361,430,0.339,441,0.389,442,0.389,443,0.339,446,0.568,448,0.797,450,0.797,453,1.311,454,0.469,459,1.561,460,0.97,466,0.423,479,1.669,481,1.634,485,0.964,492,0.568,496,0.797,512,0.319,513,2.506,514,1.626,516,0.469,520,0.469,523,1.129,524,1.038,527,0.884,528,0.884,553,1.252,555,0.339,556,1.311,596,1.582,597,1.355,600,0.469,603,0.361,607,0.681,608,0.884,609,1.311,614,1.038,622,1.982,626,0.797,627,0.423,628,0.319,631,0.423,634,0.423,637,1.427,638,1.129,640,0.469,642,0.469,644,0.423,645,0.797,646,2.82,683,0.249,708,1.582,711,0.469,714,0.681,715,0.361,718,2.373,720,0.884,722,2.543,723,1.427,724,0.469,725,0.423,732,0.601,733,0.319,746,0.389,751,0.964,753,2.148,759,0.469,766,0.469,774,3.493,777,2.148,779,0.449,783,0.469,784,1.879,785,0.469,786,0.469,787,0.884,788,0.469,789,0.469,792,0.964,794,1.937,795,0.884,796,0.884,797,0.469,798,0.469,811,1.129,815,0.389,820,2.878,827,0.423,829,1.252,832,1.311,833,2.713,837,0.964,838,0.964,842,0.389,843,1.459,851,1.654,853,0.469,855,0.884,857,0.469,865,0.732,866,0.423,870,0.797,873,0.469,884,1.129,890,1.549,891,2.574,902,0.287,914,0.423,927,0.469,930,0.339,936,0.681,955,0.469,956,0.423,958,0.469,961,0.423,966,0.423,1017,1.129,1020,0.797,1021,0.423,1023,0.469,1050,1.311,1056,0.361,1070,1.879,1128,1.129,1182,0.469,1203,0.469,1205,0.469,1211,0.423,1224,0.469,1234,0.469,1236,0.469,1249,0.469,1280,1.252,1323,0.539,1324,1.427,1325,1.439,1326,0.539,1327,2.159,1328,0.539,1329,0.539,1330,0.469,1331,0.539,1332,0.539,1333,0.539,1334,0.539,1335,0.539,1336,1.818,1337,1.016,1338,0.539,1339,1.016,1340,0.539,1341,0.539,1342,0.539,1343,0.539,1344,1.818,1345,0.539,1346,1.016,1347,0.539,1348,0.539,1349,1.818,1350,0.469,1351,0.539,1352,0.539,1353,0.539,1354,1.439,1355,1.439,1356,0.469,1357,2.749,1358,0.539,1359,0.539,1360,0.539,1361,0.539,1362,0.539,1363,0.539,1364,1.252,1365,0.539,1366,0.539,1367,0.539,1368,0.539,1369,1.439,1370,1.439,1371,0.539,1372,0.539,1373,0.539,1374,0.539,1375,0.539,1376,0.539,1377,0.539,1378,1.016,1379,1.016,1380,1.016,1381,0.539,1382,0.539,1383,0.539,1384,0.884,1385,0.797,1386,0.539,1387,0.884,1388,0.884,1389,0.539,1390,0.469,1391,1.016,1392,1.016,1393,0.539,1394,0.797,1395,0.539,1396,0.539,1397,0.539,1398,0.884,1399,0.469,1400,0.539,1401,0.539,1402,0.884,1403,0.539,1404,0.539,1405,0.539,1406,0.539,1407,0.539,1408,0.539,1409,1.439,1410,0.539,1411,0.539,1412,0.539,1413,0.539,1414,1.818,1415,1.016,1416,0.539,1417,0.539,1418,1.439,1419,0.539,1420,0.539,1421,0.469,1422,0.539,1423,0.539,1424,1.818,1425,0.539,1426,0.539,1427,0.539,1428,0.539,1429,0.539,1430,0.539,1431,0.539,1432,0.539,1433,0.539,1434,0.539,1435,0.539,1436,1.016,1437,0.539,1438,0.539,1439,0.469,1440,0.539,1441,0.539,1442,0.539,1443,0.539,1444,0.539,1445,0.539,1446,0.539,1447,0.539,1448,0.539,1449,0.539,1450,0.539,1451,0.539,1452,0.539,1453,0.539]],["t/457",[18,0.492,22,1.249,27,2.809,34,2.298,39,1.198,41,2.097,52,1.198,53,0.876,54,1.621,57,0.876,65,2.39,66,1.393,82,1.295,101,0.729,102,3.519,103,3.103,104,1.955,105,2.097,117,2.001,118,2.777,150,2.377,183,3.287,201,1.832,220,2.319,232,2.771,237,2.202,317,3.376,319,1.393,336,3.519,345,2.988,349,2.588,413,1.687,439,2.777,459,1.783,541,4.043,597,2.601,619,4.043,653,2.451,833,2.601,837,2.777,838,2.777,952,2.601,1324,3.253,1350,3.607,1454,4.144,1455,4.144,1456,4.144,1457,4.144,1458,4.144,1459,5.607,1460,4.144,1461,5.607,1462,4.144,1463,4.144,1464,4.144]],["t/459",[10,1.487,18,0.462,34,1.588,52,0.927,55,3.164,56,3.164,58,3.482,59,2.778,63,2.145,75,1.908,99,2.799,117,2.544,148,1.77,183,2.544,217,4.135,221,2.563,271,1.775,376,3.307,384,5.143,402,4.135,413,2.667,481,2.145,502,4.135,504,4.135,1245,5.143,1300,4.135,1318,4.586,1319,4.586,1465,5.269,1466,5.269,1467,5.269,1468,4.586,1469,5.269,1470,5.269]],["t/461",[10,1.56,18,0.5,22,0.834,34,1.937,40,3.574,52,1.131,53,0.896,55,2.047,59,1.797,62,1.478,65,2.418,70,1.535,82,1.324,85,1.19,87,4.619,213,2.517,221,1.658,232,2.317,239,3.328,313,1.339,349,1.957,446,2.372,460,1.598,492,2.372,622,4.105,723,3.328,792,2.841,794,5.393,884,5.393,992,3.328,1050,4.105,1364,3.69,1384,4.955,1385,3.328,1387,3.69,1388,5.594,1390,4.955,1394,4.469,1421,3.69,1439,3.69,1471,4.105,1472,4.24,1473,4.24,1474,4.24,1475,4.24,1476,4.24]],["t/463",[10,0.8,18,0.309,22,0.693,27,1.558,52,0.882,53,0.745,59,2.124,63,1.434,65,2.757,70,2.429,80,1.872,82,2.177,83,1.434,85,1.782,87,3.9,92,1.702,101,0.62,107,2.373,116,2.766,117,1.702,138,2.963,148,1.684,164,1.757,195,2.215,213,2.807,218,2.362,221,1.378,222,2.662,242,1.025,247,2.535,268,1.757,307,3.932,308,1.627,310,2.212,314,0.921,319,1.184,359,1.025,380,2.362,385,3.755,460,1.406,479,2.419,492,1.972,501,2.766,530,2.541,609,3.613,718,2.084,792,2.362,820,1.972,843,2.084,890,2.212,891,3.357,972,3.067,1052,2.766,1056,3.357,1399,3.067,1471,2.541,1477,3.524,1478,3.067,1479,3.067,1480,3.932,1481,3.932,1482,5.265,1483,5.074,1484,5.01,1485,3.524,1486,3.524,1487,3.524,1488,3.524,1489,3.524,1490,4.361,1491,3.932,1492,3.067,1493,3.067,1494,3.067,1495,3.067,1496,3.067,1497,3.067,1498,3.067,1499,3.067,1500,3.067,1501,3.067,1502,3.067,1503,3.067,1504,2.766,1505,2.766,1506,3.067,1507,3.067,1508,3.067]],["t/465",[10,0.81,18,0.313,22,0.702,27,1.578,52,0.89,59,2.144,63,1.453,65,2.937,70,1.293,83,1.453,85,1.002,87,3.573,101,0.628,103,2.39,107,2.39,116,2.802,117,2.441,148,1.199,164,1.769,213,2.823,218,2.392,221,1.396,222,1.897,232,2.058,242,1.038,247,2.97,268,1.769,314,0.933,319,1.199,337,2.441,349,2.71,380,2.392,385,3.472,440,2.574,460,1.419,479,1.723,492,1.997,530,2.574,607,2.392,609,2.574,628,2.111,683,1.648,707,2.802,715,2.392,718,2.111,792,2.392,809,2.574,820,1.997,843,2.111,890,2.241,891,3.388,1056,3.934,1232,2.802,1394,2.802,1471,2.574,1478,3.107,1479,3.107,1480,3.968,1481,3.968,1482,2.802,1490,4.4,1491,3.968,1492,3.107,1493,3.107,1494,3.107,1495,3.107,1496,3.107,1497,3.107,1498,3.107,1499,3.107,1500,3.107,1501,3.107,1502,3.107,1503,4.4,1504,2.802,1505,2.802,1506,4.4,1507,3.107,1508,3.107,1509,3.57,1510,3.57,1511,3.57,1512,3.57,1513,3.57,1514,3.57,1515,3.57,1516,5.056,1517,5.056,1518,5.056,1519,5.056,1520,3.57,1521,3.57,1522,3.57]],["t/467",[27,2.091,34,2.044,52,1.194,56,2.283,59,2.594,63,1.925,74,1.85,83,1.925,87,4.391,110,3.169,117,2.283,138,2.796,151,2.283,213,3.284,221,1.85,222,2.512,234,2.392,242,1.375,310,2.968,313,1.112,314,1.236,349,2.183,460,1.717,492,2.646,841,3.711,865,3.41,866,3.711,1050,4.891,1052,3.711,1468,4.115,1471,3.41,1480,4.802,1481,4.802,1483,5.903,1491,4.802,1504,3.711,1505,3.711,1523,4.729,1524,4.729,1525,4.729,1526,6.118,1527,6.118]],["t/469",[10,1.835,18,0.425,22,0.662,29,1.817,33,2.929,52,0.592,53,0.893,54,0.817,59,1.792,60,1.311,62,0.728,63,0.85,64,3.344,65,1.824,66,1.42,67,1.235,70,1.531,73,1.399,74,0.817,75,2.647,76,1.722,77,0.629,79,2.409,82,0.652,83,0.85,85,1.36,88,1.131,93,1.168,96,1.99,97,1.399,98,1.109,99,1.109,101,1.228,104,0.728,107,2.432,111,0.652,115,1.311,148,1.629,149,1.639,151,2.34,182,0.756,183,1.625,195,0.923,208,1.399,221,1.316,225,1.639,234,1.056,240,1.639,242,0.607,247,2.452,255,1.266,258,1.008,302,1.168,308,2.238,317,1.109,322,3.679,337,2.34,347,1.056,348,1.639,360,1.639,403,1.817,441,1.506,446,1.883,459,0.586,481,0.85,540,1.639,555,1.311,597,2.112,652,1.506,703,1.817,715,2.255,727,1.817,733,1.99,751,1.399,768,1.506,772,1.817,779,1.488,799,1.639,809,2.426,810,1.506,811,4.172,815,1.506,820,3.769,831,1.399,833,1.311,842,1.506,851,1.399,852,1.506,865,1.506,870,1.639,877,1.817,883,3.679,886,3.805,887,4.219,888,2.641,889,5.973,890,2.112,891,2.255,892,2.929,893,4.219,956,1.639,992,1.639,998,1.639,1018,1.817,1133,2.641,1208,2.929,1211,1.639,1213,1.817,1232,2.641,1257,1.639,1316,1.817,1330,1.817,1398,1.817,1402,1.817,1528,2.088,1529,2.088,1530,2.088,1531,2.088,1532,2.088,1533,5.976,1534,2.088,1535,2.088,1536,2.088,1537,4.848,1538,2.088,1539,2.088,1540,3.365,1541,2.088,1542,2.088,1543,3.365,1544,2.088,1545,2.088,1546,3.365,1547,3.365,1548,2.088,1549,2.088,1550,2.088,1551,2.088,1552,4.227,1553,2.088,1554,4.227,1555,3.365,1556,3.365,1557,2.088,1558,2.088,1559,2.088,1560,1.817,1561,2.088,1562,2.088,1563,2.088,1564,3.365,1565,2.088,1566,3.365,1567,2.088,1568,3.365,1569,2.088,1570,2.088,1571,2.088,1572,2.088]],["t/471",[22,1.265,57,1.56,83,2.618,101,1.132,843,3.804]],["t/473",[10,0.857,22,0.743,34,1.138,50,2.917,52,0.665,53,0.798,62,1.317,63,1.537,65,2.277,67,2.233,70,2.37,73,2.531,77,1.138,82,1.18,93,2.113,96,3.111,97,2.531,98,2.007,104,1.834,107,2.464,208,2.531,216,2.531,308,1.743,310,3.799,337,2.54,349,1.743,354,2.795,420,4.59,456,2.371,459,1.476,460,1.476,479,1.823,481,2.141,485,4.612,486,3.793,655,3.287,718,4.41,733,4.07,799,2.964,809,2.723,810,2.723,985,2.964,1482,2.964,1573,4.578,1574,4.578,1575,5.697,1576,3.777,1577,3.287,1578,4.578,1579,4.578,1580,4.578,1581,4.578,1582,4.578,1583,3.777,1584,3.287,1585,4.578,1586,3.287,1587,3.287,1588,3.287,1589,3.287,1590,3.287,1591,3.287,1592,3.287,1593,3.287,1594,3.287,1595,3.287,1596,3.287,1597,3.287,1598,3.287,1599,3.287,1600,3.777]],["t/475",[8,3.951,10,1.548,18,0.442,22,0.99,34,0.825,39,0.733,50,2.589,52,0.482,53,1.346,57,0.88,62,0.955,65,1.566,70,2.529,74,1.628,79,1.765,82,0.856,88,2.292,96,1.62,98,1.455,101,0.733,102,1.719,104,1.756,107,2.462,111,0.856,208,1.836,242,0.796,255,1.566,258,2.01,268,1.254,271,1.364,310,1.719,336,1.719,337,1.323,349,1.265,354,2.988,420,4.608,429,1.836,439,1.836,446,1.533,459,1.413,460,1.578,479,2.01,481,2.289,485,4.681,486,4.055,714,1.836,718,4.131,733,3.914,750,2.384,779,1.211,820,2.817,843,1.62,897,2.384,936,1.836,985,2.15,1000,2.15,1086,2.384,1324,4.414,1356,2.384,1385,2.15,1560,2.384,1573,2.384,1574,4.381,1575,5.761,1577,2.384,1578,4.381,1579,5.264,1580,4.894,1581,4.894,1582,4.894,1584,2.384,1585,4.381,1586,2.384,1587,2.384,1588,2.384,1589,2.384,1590,2.384,1591,2.384,1592,2.384,1593,2.384,1594,2.384,1595,2.384,1596,2.384,1597,2.384,1598,2.384,1599,3.623,1601,2.739,1602,2.739,1603,2.739,1604,4.163,1605,4.163,1606,2.739,1607,2.739,1608,4.163,1609,2.739,1610,2.739,1611,2.739,1612,4.163,1613,2.739]]],"invertedIndex":[["",{"_index":10,"t":{"324":{"position":[[92,1],[500,1]]},"326":{"position":[[119,1],[559,4]]},"334":{"position":[[752,3],[789,3],[827,3],[831,3]]},"353":{"position":[[234,1]]},"371":{"position":[[618,3],[972,1],[974,1],[987,1],[1038,1]]},"373":{"position":[[693,1]]},"383":{"position":[[202,1],[204,1],[331,1],[333,1]]},"387":{"position":[[649,1],[655,2]]},"391":{"position":[[259,3]]},"407":{"position":[[227,1],[262,1],[298,1],[334,1],[369,1],[391,1],[414,1],[431,1],[449,1]]},"409":{"position":[[114,3],[750,1],[951,1],[953,1],[1165,2],[1264,1],[1299,1],[1335,1],[1357,1],[1380,1],[1397,1],[1420,1],[1438,1]]},"411":{"position":[[209,1]]},"413":{"position":[[256,1],[1273,1],[2554,1],[2575,2]]},"415":{"position":[[1195,1]]},"425":{"position":[[751,2],[830,2]]},"427":{"position":[[674,2]]},"429":{"position":[[366,1],[396,1]]},"433":{"position":[[39,1],[1414,1],[3059,1],[3080,1],[3140,1],[3191,1],[3193,1],[3236,1],[3238,1],[3261,1],[3284,1],[3311,1],[3331,1],[3361,1],[3493,1],[4386,1],[4407,1],[4464,1],[4520,1],[4522,1],[4560,1],[4562,1],[4578,1],[4599,1],[4624,1],[4644,1],[4665,1],[4693,1],[4770,1]]},"435":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"441":{"position":[[213,1],[238,1],[259,1]]},"443":{"position":[[400,2],[458,2]]},"451":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[312,1],[320,4],[325,1],[330,1],[570,1],[697,1],[706,1],[728,1],[730,1]]},"453":{"position":[[83,1],[85,1]]},"455":{"position":[[71,2],[93,1],[1050,1],[1491,1],[1614,3],[1965,4],[1970,2],[2326,2],[2329,2],[2403,1],[2484,1],[2572,1],[3034,2],[3341,1],[3343,1],[3421,1],[3423,1],[3860,1],[3999,1],[4110,1],[4753,1],[5296,2],[6859,1],[6926,4],[7978,2],[8047,1],[8493,2],[8598,2],[9215,1],[9871,1],[12303,1],[12452,1],[12516,1],[12667,1],[12698,1],[13648,1],[14077,1],[14365,1],[14465,1],[14703,1],[14785,1],[14792,2],[14874,1],[15527,1],[15534,2],[15887,2]]},"459":{"position":[[147,1],[149,1]]},"461":{"position":[[215,1],[241,1],[278,1],[343,1]]},"463":{"position":[[927,1]]},"465":{"position":[[782,1]]},"469":{"position":[[242,1],[272,4],[317,1],[513,1],[557,1],[629,1],[640,1],[655,1],[796,1],[879,3],[912,1],[923,1],[925,1],[969,1],[988,1],[1050,1],[1282,1],[1468,1],[1644,1],[1737,1],[1803,1],[1901,1],[2080,1],[2161,1],[2266,2],[2269,3],[2273,5],[2279,1],[2396,1],[2398,1],[2494,1],[2582,1],[2612,1],[2656,4],[2665,2],[3338,1],[3419,1],[3448,2],[3451,2],[3484,1],[3496,2],[3523,2],[3556,5],[3566,1]]},"473":{"position":[[589,2]]},"475":{"position":[[154,1],[349,1],[488,2],[570,1],[757,2],[858,1],[1069,2],[1282,2]]}}}],["0",{"_index":1344,"t":{"455":{"position":[[1684,1],[5556,1],[5569,1],[10632,1]]}}}],["0.0.0.0:4180",{"_index":1177,"t":{"433":{"position":[[4772,14]]}}}],["0.001",{"_index":1520,"t":{"465":{"position":[[916,5]]}}}],["00010203",{"_index":1496,"t":{"463":{"position":[[1121,8]]},"465":{"position":[[984,8]]}}}],["0400",{"_index":1481,"t":{"463":{"position":[[256,5],[1301,4]]},"465":{"position":[[137,5],[1323,4]]},"467":{"position":[[267,5],[593,4]]}}}],["0405",{"_index":1497,"t":{"463":{"position":[[1130,4]]},"465":{"position":[[993,4]]}}}],["0a0b0c0d0e0f",{"_index":1500,"t":{"463":{"position":[[1145,12]]},"465":{"position":[[1008,12]]}}}],["1",{"_index":714,"t":{"389":{"position":[[2225,1]]},"409":{"position":[[1116,2]]},"413":{"position":[[2293,1]]},"455":{"position":[[1729,3],[15379,4]]},"475":{"position":[[423,2]]}}}],["1.3",{"_index":635,"t":{"385":{"position":[[474,3]]}}}],["1.5h",{"_index":399,"t":{"353":{"position":[[236,5]]}}}],["100",{"_index":1396,"t":{"455":{"position":[[5652,3]]}}}],["12",{"_index":1522,"t":{"465":{"position":[[1200,2]]}}}],["12.x",{"_index":1064,"t":{"427":{"position":[[58,5],[128,4]]}}}],["123456.apps.googleusercontent.com",{"_index":1328,"t":{"455":{"position":[[724,35]]}}}],["127.0.0.1:4180",{"_index":866,"t":{"409":{"position":[[150,14]]},"455":{"position":[[4975,16]]},"467":{"position":[[732,14]]}}}],["128",{"_index":761,"t":{"397":{"position":[[383,3],[434,3]]}}}],["15",{"_index":787,"t":{"397":{"position":[[1729,2],[1760,2]]},"455":{"position":[[10510,2],[10541,2]]}}}],["15m",{"_index":1352,"t":{"455":{"position":[[2169,3]]}}}],["168h0m0",{"_index":1338,"t":{"455":{"position":[[1293,8]]}}}],["19/mar/2015:17:20:19",{"_index":1480,"t":{"463":{"position":[[233,21],[1279,20]]},"465":{"position":[[114,21],[1301,20]]},"467":{"position":[[244,21],[571,20]]}}}],["192",{"_index":1313,"t":{"451":{"position":[[644,3]]}}}],["1h",{"_index":928,"t":{"413":{"position":[[923,4]]}}}],["1s",{"_index":1367,"t":{"455":{"position":[[3149,4]]}}}],["2",{"_index":936,"t":{"413":{"position":[[1514,1]]},"415":{"position":[[1134,1]]},"433":{"position":[[3458,2]]},"455":{"position":[[14850,3],[15455,4]]},"475":{"position":[[717,2]]}}}],["2.0",{"_index":1092,"t":{"429":{"position":[[213,3]]},"433":{"position":[[35,3]]}}}],["20",{"_index":1372,"t":{"455":{"position":[[4313,2]]}}}],["200",{"_index":707,"t":{"389":{"position":[[1941,3]]},"399":{"position":[[223,3],[336,3]]},"465":{"position":[[1249,3]]}}}],["202",{"_index":810,"t":{"399":{"position":[[995,3]]},"403":{"position":[[22,3]]},"469":{"position":[[131,3]]},"473":{"position":[[162,3]]}}}],["2048",{"_index":1192,"t":{"435":{"position":[[1052,4]]}}}],["24",{"_index":1311,"t":{"451":{"position":[[630,2]]}}}],["2>/dev/nul",{"_index":1297,"t":{"451":{"position":[[227,11]]}}}],["2f",{"_index":729,"t":{"391":{"position":[[212,7]]}}}],["2h45m",{"_index":400,"t":{"353":{"position":[[245,8]]}}}],["3",{"_index":981,"t":{"415":{"position":[[1492,2],[1800,2]]},"417":{"position":[[385,2],[421,2]]},"423":{"position":[[1247,4]]}}}],["3/4",{"_index":1442,"t":{"455":{"position":[[15152,3]]}}}],["30",{"_index":725,"t":{"389":{"position":[[2598,2]]},"409":{"position":[[1138,3],[1161,3]]},"455":{"position":[[14338,3]]}}}],["300m",{"_index":398,"t":{"353":{"position":[[225,8]]}}}],["315360000",{"_index":1590,"t":{"473":{"position":[[965,9]]},"475":{"position":[[1723,9]]}}}],["32",{"_index":1303,"t":{"451":{"position":[[309,2],[578,2],[708,2]]}}}],["3650",{"_index":1204,"t":{"435":{"position":[[1175,4]]}}}],["401",{"_index":96,"t":{"326":{"position":[[403,3]]},"399":{"position":[[1022,3]]},"403":{"position":[[49,3]]},"455":{"position":[[112,3]]},"469":{"position":[[158,3],[965,3]]},"473":{"position":[[189,3],[1254,4]]},"475":{"position":[[898,3]]}}}],["403",{"_index":1600,"t":{"473":{"position":[[1259,4]]}}}],["4180",{"_index":871,"t":{"409":{"position":[[465,5]]}}}],["443",{"_index":870,"t":{"409":{"position":[[395,3],[759,3]]},"455":{"position":[[5141,6],[15734,3]]},"469":{"position":[[251,3]]}}}],["4607",{"_index":1498,"t":{"463":{"position":[[1135,4]]},"465":{"position":[[998,4]]}}}],["4kb",{"_index":1540,"t":{"469":{"position":[[1733,3],[1938,4]]}}}],["5",{"_index":943,"t":{"413":{"position":[[1992,1]]},"415":{"position":[[1528,2],[1836,2]]}}}],["7",{"_index":1393,"t":{"455":{"position":[[5485,1]]}}}],["74.125.224.72",{"_index":1492,"t":{"463":{"position":[[840,13]]},"465":{"position":[[695,13]]}}}],["80",{"_index":1451,"t":{"455":{"position":[[15720,3]]}}}],["8809",{"_index":1499,"t":{"463":{"position":[[1140,4]]},"465":{"position":[[1003,4]]}}}],["994",{"_index":1065,"t":{"427":{"position":[[138,5]]}}}],["_",{"_index":1300,"t":{"451":{"position":[[279,3],[327,2],[732,3]]},"453":{"position":[[104,4]]},"459":{"position":[[168,4]]}}}],["__host",{"_index":1341,"t":{"455":{"position":[[1470,7]]}}}],["__secur",{"_index":1342,"t":{"455":{"position":[[1482,8]]}}}],["_oauth2_proxi",{"_index":759,"t":{"397":{"position":[[338,14]]},"455":{"position":[[1520,15]]}}}],["_oauth2_proxy_1",{"_index":1572,"t":{"469":{"position":[[3951,18]]}}}],["aad",{"_index":969,"t":{"415":{"position":[[880,3]]}}}],["abov",{"_index":1052,"t":{"423":{"position":[[1233,5]]},"463":{"position":[[1542,5]]},"467":{"position":[[45,5]]}}}],["absent",{"_index":1373,"t":{"455":{"position":[[4319,6]]}}}],["accept",{"_index":93,"t":{"326":{"position":[[363,7]]},"385":{"position":[[139,11]]},"399":{"position":[[999,8]]},"403":{"position":[[26,8]]},"407":{"position":[[566,10]]},"455":{"position":[[11024,8],[14010,11]]},"469":{"position":[[135,8]]},"473":{"position":[[166,8]]}}}],["acceptable.e.g",{"_index":633,"t":{"385":{"position":[[420,15]]}}}],["access",{"_index":255,"t":{"340":{"position":[[349,6]]},"345":{"position":[[101,6]]},"349":{"position":[[171,6]]},"355":{"position":[[346,6]]},"367":{"position":[[259,6]]},"375":{"position":[[2139,6],[2286,6]]},"401":{"position":[[214,9]]},"413":{"position":[[1750,7]]},"421":{"position":[[296,7],[924,6],[999,6],[1036,6],[1186,6],[1217,6],[1306,6]]},"423":{"position":[[138,6],[1173,6]]},"425":{"position":[[46,6]]},"433":{"position":[[2344,6],[2403,7],[2977,6]]},"435":{"position":[[305,7],[2650,6],[3170,10]]},"441":{"position":[[528,6],[638,6],[673,6]]},"455":{"position":[[3813,6],[4238,6],[4285,6],[6938,6],[7008,6],[7092,6],[7894,6],[8802,6],[11581,6],[11610,6],[14609,6]]},"469":{"position":[[1306,6],[1447,6]]},"475":{"position":[[2016,6],[2192,6]]}}}],["access_by_lua_block",{"_index":1565,"t":{"469":{"position":[[3399,19]]}}}],["access_token",{"_index":1401,"t":{"455":{"position":[[6967,12]]}}}],["accesstokenacceptedvers",{"_index":976,"t":{"415":{"position":[[1104,29]]}}}],["accompani",{"_index":1019,"t":{"421":{"position":[[382,11]]}}}],["account",{"_index":421,"t":{"359":{"position":[[271,7]]},"413":{"position":[[981,7],[1095,8],[2392,7]]},"415":{"position":[[177,7]]},"433":{"position":[[1641,8],[3747,8]]},"435":{"position":[[260,8],[737,7]]},"441":{"position":[[204,7],[487,7]]},"455":{"position":[[4518,7],[4562,7]]}}}],["acr",{"_index":289,"t":{"340":{"position":[[1037,3]]},"455":{"position":[[34,3]]}}}],["activ",{"_index":951,"t":{"415":{"position":[[65,6],[1349,6]]}}}],["actual",{"_index":831,"t":{"401":{"position":[[1057,6]]},"415":{"position":[[851,8]]},"439":{"position":[[221,6]]},"441":{"position":[[124,6]]},"469":{"position":[[3721,6]]}}}],["ad",{"_index":105,"t":{"326":{"position":[[637,5]]},"338":{"position":[[7,6]]},"343":{"position":[[66,6]]},"361":{"position":[[79,5]]},"375":{"position":[[2230,2]]},"401":{"position":[[939,5]]},"411":{"position":[[294,2]]},"431":{"position":[[4,6],[49,2]]},"455":{"position":[[10911,2],[11626,5]]},"457":{"position":[[750,6]]}}}],["add",{"_index":168,"t":{"332":{"position":[[148,3]]},"334":{"position":[[432,3]]},"415":{"position":[[0,3],[430,3],[532,3],[662,3],[1222,3],[1284,4]]},"417":{"position":[[64,3]]},"427":{"position":[[223,3],[431,3],[1312,3]]},"431":{"position":[[74,3]]},"433":{"position":[[605,3],[1296,4],[1989,3],[2336,3],[2567,3]]},"441":{"position":[[0,3]]},"447":{"position":[[80,3]]},"451":{"position":[[332,3]]},"455":{"position":[[7068,4],[15812,3]]}}}],["add_head",{"_index":883,"t":{"409":{"position":[[888,10]]},"469":{"position":[[1608,10],[2496,10],[2539,10]]}}}],["addedto",{"_index":331,"t":{"345":{"position":[[667,7],[902,7]]}}}],["addit",{"_index":555,"t":{"373":{"position":[[1553,10],[1614,8]]},"421":{"position":[[206,10],[775,8]]},"433":{"position":[[2066,10]]},"441":{"position":[[559,10]]},"455":{"position":[[6866,10]]},"469":{"position":[[1968,10]]}}}],["addition",{"_index":1374,"t":{"455":{"position":[[4610,12]]}}}],["address",{"_index":479,"t":{"371":{"position":[[496,9]]},"373":{"position":[[230,7]]},"383":{"position":[[146,7],[268,7]]},"399":{"position":[[465,7],[496,8]]},"413":{"position":[[1808,7]]},"445":{"position":[[95,9],[199,9]]},"455":{"position":[[4819,7],[4943,8],[5000,7],[5109,8],[6117,7],[7432,7],[8531,7],[8550,7],[15163,8],[15256,7]]},"463":{"position":[[81,7],[875,8]]},"465":{"position":[[730,8]]},"473":{"position":[[1150,8]]},"475":{"position":[[1917,8],[2082,8]]}}}],["address=\"0.0.0.0:4180",{"_index":868,"t":{"409":{"position":[[312,22]]}}}],["address=\"http://:4180",{"_index":869,"t":{"409":{"position":[[345,23]]}}}],["adf",{"_index":570,"t":{"375":{"position":[[739,4],[2237,4]]},"377":{"position":[[128,5]]},"411":{"position":[[232,4]]},"417":{"position":[[9,4],[445,4]]}}}],["adfsconfig",{"_index":568,"t":{"375":{"position":[[676,10],[699,10]]}}}],["adfsopt",{"_index":569,"t":{"375":{"position":[[687,11]]}}}],["admin",{"_index":415,"t":{"359":{"position":[[164,5]]},"413":{"position":[[1304,5],[1740,5],[1860,5],[1946,5]]},"415":{"position":[[696,5],[729,5],[801,8],[940,5]]},"423":{"position":[[1482,5],[1548,7]]},"437":{"position":[[574,6],[612,6]]},"455":{"position":[[4335,5],[4365,5]]}}}],["adminemail",{"_index":414,"t":{"359":{"position":[[121,10],[139,10]]}}}],["administr",{"_index":939,"t":{"413":{"position":[[1787,14]]},"417":{"position":[[14,14]]},"433":{"position":[[1626,14]]}}}],["advisori",{"_index":165,"t":{"332":{"position":[[23,10],[182,8],[411,9]]}}}],["ae",{"_index":1312,"t":{"451":{"position":[[640,3]]}}}],["affect",{"_index":161,"t":{"330":{"position":[[688,8]]}}}],["afterward",{"_index":816,"t":{"401":{"position":[[334,10]]}}}],["ag",{"_index":1390,"t":{"455":{"position":[[5430,3]]},"461":{"position":[[237,3],[256,5]]}}}],["again",{"_index":814,"t":{"401":{"position":[[240,6]]}}}],["against",{"_index":36,"t":{"324":{"position":[[404,7]]},"373":{"position":[[1433,7]]},"413":{"position":[[2196,7],[2459,7]]},"427":{"position":[[35,7]]},"433":{"position":[[163,7]]},"437":{"position":[[50,7]]},"455":{"position":[[455,7],[4636,7]]}}}],["age=2592000",{"_index":885,"t":{"409":{"position":[[929,12]]}}}],["agenc",{"_index":1179,"t":{"435":{"position":[[80,7],[718,6]]}}}],["agent",{"_index":792,"t":{"399":{"position":[[263,6]]},"455":{"position":[[8426,5],[8446,5],[8514,6]]},"461":{"position":[[753,6]]},"463":{"position":[[1372,5]]},"465":{"position":[[1444,5]]}}}],["agre",{"_index":178,"t":{"332":{"position":[[441,6]]}}}],["agreement",{"_index":1089,"t":{"429":{"position":[[124,9]]}}}],["ajax",{"_index":90,"t":{"326":{"position":[[335,4]]}}}],["algorithm:secretkey",{"_index":1420,"t":{"455":{"position":[[12098,21]]}}}],["alia",{"_index":388,"t":{"353":{"position":[[8,7]]},"377":{"position":[[8,7]]},"379":{"position":[[12,7]]}}}],["allow",{"_index":77,"t":{"326":{"position":[[143,8]]},"340":{"position":[[1087,7],[1116,7]]},"345":{"position":[[85,6]]},"351":{"position":[[38,6]]},"355":{"position":[[392,6]]},"369":{"position":[[295,7],[459,7],[609,7]]},"371":{"position":[[599,6],[724,7],[1291,5],[1327,5],[1477,5]]},"373":{"position":[[868,6],[1389,6]]},"389":{"position":[[788,6],[1613,5]]},"391":{"position":[[188,8]]},"393":{"position":[[9,5]]},"403":{"position":[[192,7],[254,7],[316,7]]},"421":{"position":[[473,7],[1180,5],[1473,5],[1628,5]]},"423":{"position":[[1090,7]]},"425":{"position":[[720,7],[786,7]]},"433":{"position":[[2784,7],[4106,8]]},"435":{"position":[[2350,5]]},"437":{"position":[[23,6]]},"441":{"position":[[456,6]]},"447":{"position":[[117,5]]},"455":{"position":[[3870,5],[6066,5],[6208,5],[6897,7],[11037,6],[14344,7],[14445,7],[14710,7],[14798,5],[14911,5],[15542,5],[15644,8],[15672,8],[15784,5],[15867,5]]},"469":{"position":[[33,6]]},"473":{"position":[[38,6]]}}}],["allowed.e.g",{"_index":639,"t":{"385":{"position":[[553,13]]}}}],["allowed_email",{"_index":840,"t":{"403":{"position":[[276,15]]}}}],["allowed_email_domain",{"_index":839,"t":{"403":{"position":[[207,22]]}}}],["allowed_group",{"_index":836,"t":{"403":{"position":[[152,15]]}}}],["allowedgroup",{"_index":605,"t":{"375":{"position":[[2371,13],[2394,13]]}}}],["allowedto",{"_index":557,"t":{"373":{"position":[[1583,9]]}}}],["alpha",{"_index":197,"t":{"334":{"position":[[44,5],[297,5],[353,5],[665,5]]},"336":{"position":[[15,5],[153,5],[194,5]]},"338":{"position":[[24,5],[92,5],[189,5],[510,5]]},"340":{"position":[[106,5],[1408,5],[1524,5]]},"345":{"position":[[22,5],[108,5],[267,6]]}}}],["alphaopt",{"_index":224,"t":{"334":{"position":[[607,12]]},"345":{"position":[[0,12]]},"361":{"position":[[13,13]]},"379":{"position":[[33,13]]},"383":{"position":[[13,13]]},"391":{"position":[[13,13]]}}}],["altern",{"_index":499,"t":{"371":{"position":[[927,13]]},"401":{"position":[[523,14]]},"439":{"position":[[496,14]]}}}],["alway",{"_index":464,"t":{"369":{"position":[[532,6]]},"407":{"position":[[745,6]]}}}],["amazon",{"_index":860,"t":{"409":{"position":[[61,6],[255,6]]}}}],["amd64",{"_index":23,"t":{"324":{"position":[[251,7],[553,6]]}}}],["amount",{"_index":1434,"t":{"455":{"position":[[14269,6]]}}}],["anchor",{"_index":656,"t":{"387":{"position":[[625,6]]}}}],["and/or",{"_index":490,"t":{"371":{"position":[[732,6]]}}}],["anoth",{"_index":342,"t":{"345":{"position":[[1037,7]]},"411":{"position":[[82,7]]},"413":{"position":[[176,7]]}}}],["anyth",{"_index":465,"t":{"369":{"position":[[551,8]]}}}],["apach",{"_index":1474,"t":{"461":{"position":[[668,6]]}}}],["api",{"_index":417,"t":{"359":{"position":[[189,3]]},"413":{"position":[[250,5],[1267,5],[1289,5],[1330,4],[1746,3]]},"415":{"position":[[490,3]]},"427":{"position":[[78,3]]},"429":{"position":[[368,3]]},"433":{"position":[[1979,3]]},"455":{"position":[[76,3],[4390,3]]}}}],["api/v1",{"_index":1277,"t":{"443":{"position":[[635,9]]}}}],["app",{"_index":806,"t":{"399":{"position":[[820,3]]},"415":{"position":[[90,3],[294,3],[465,3],[518,4],[1143,3],[1217,4]]},"419":{"position":[[16,3]]},"433":{"position":[[2215,5],[2701,4],[3925,3]]},"435":{"position":[[1334,3]]}}}],["appear",{"_index":311,"t":{"343":{"position":[[0,8]]},"347":{"position":[[0,8]]},"349":{"position":[[0,8]]},"351":{"position":[[0,8]]},"353":{"position":[[16,8]]},"355":{"position":[[0,8]]},"357":{"position":[[0,8]]},"359":{"position":[[0,8]]},"361":{"position":[[0,8]]},"363":{"position":[[0,8]]},"365":{"position":[[0,8]]},"367":{"position":[[0,8]]},"369":{"position":[[0,8]]},"373":{"position":[[0,8]]},"375":{"position":[[0,8]]},"377":{"position":[[16,8]]},"379":{"position":[[20,8]]},"381":{"position":[[0,8]]},"383":{"position":[[0,8]]},"385":{"position":[[0,8]]},"387":{"position":[[0,8]]},"389":{"position":[[0,8]]},"391":{"position":[[0,8]]}}}],["append",{"_index":992,"t":{"415":{"position":[[2101,6]]},"461":{"position":[[835,7]]},"469":{"position":[[2149,6]]}}}],["appli",{"_index":434,"t":{"361":{"position":[[428,7]]}}}],["applic",{"_index":51,"t":{"324":{"position":[[603,11]]},"401":{"position":[[228,11]]},"409":{"position":[[532,12]]},"411":{"position":[[35,11]]},"413":{"position":[[538,12],[551,11]]},"415":{"position":[[7,12],[586,11]]},"417":{"position":[[74,11],[142,11],[174,12],[282,11]]},"427":{"position":[[230,12],[343,11],[468,12],[724,11]]},"431":{"position":[[14,11],[81,12],[124,10]]},"433":{"position":[[1817,13],[1890,12],[2169,11],[2255,11],[2391,11],[2542,12],[2571,12],[2668,11],[2989,12],[3549,11],[3806,12],[3876,11]]},"435":{"position":[[467,11],[559,11],[779,11],[3018,11],[3109,11]]},"439":{"position":[[19,11],[108,12]]},"443":{"position":[[13,12]]},"455":{"position":[[9476,10]]}}}],["application.y",{"_index":346,"t":{"345":{"position":[[1268,15]]}}}],["application/json",{"_index":94,"t":{"326":{"position":[[371,17]]}}}],["approach",{"_index":850,"t":{"407":{"position":[[495,8]]}}}],["appropri",{"_index":776,"t":{"397":{"position":[[1239,14],[1442,14]]},"413":{"position":[[598,11]]},"421":{"position":[[1750,11]]},"423":{"position":[[421,11]]},"425":{"position":[[490,11]]},"427":{"position":[[1107,11]]}}}],["approv",{"_index":287,"t":{"340":{"position":[[1005,8]]},"415":{"position":[[946,11]]},"455":{"position":[[208,8],[7951,8]]}}}],["approval_prompt",{"_index":1326,"t":{"455":{"position":[[237,15]]}}}],["apps/oauth2",{"_index":1248,"t":{"437":{"position":[[351,15]]}}}],["aren't",{"_index":1413,"t":{"455":{"position":[[11245,6]]}}}],["arg",{"_index":1118,"t":{"433":{"position":[[949,5]]}}}],["argument",{"_index":1245,"t":{"437":{"position":[[218,9]]},"453":{"position":[[19,8],[116,8]]},"459":{"position":[[19,8],[180,8]]}}}],["arm64",{"_index":25,"t":{"324":{"position":[[269,5]]}}}],["armv6",{"_index":24,"t":{"324":{"position":[[259,5]]}}}],["around",{"_index":487,"t":{"371":{"position":[[688,6]]}}}],["ask",{"_index":86,"t":{"326":{"position":[[256,5]]}}}],["assembl",{"_index":1305,"t":{"451":{"position":[[347,8]]}}}],["assemblynam",{"_index":1307,"t":{"451":{"position":[[390,12]]}}}],["assign",{"_index":941,"t":{"413":{"position":[[1839,6]]},"433":{"position":[[2926,11],[4073,12]]}}}],["assum",{"_index":1189,"t":{"435":{"position":[[526,6]]}}}],["attacksbetweem",{"_index":699,"t":{"389":{"position":[[1647,14]]}}}],["attempt",{"_index":307,"t":{"340":{"position":[[1338,10]]},"455":{"position":[[300,8]]},"463":{"position":[[99,10],[1062,8]]}}}],["attent",{"_index":144,"t":{"330":{"position":[[294,9]]}}}],["attribut",{"_index":1211,"t":{"435":{"position":[[1446,9]]},"455":{"position":[[1926,9]]},"469":{"position":[[2101,10]]}}}],["aud",{"_index":553,"t":{"373":{"position":[[1465,3]]},"455":{"position":[[2822,3],[6824,5],[12870,3]]}}}],["audienc",{"_index":556,"t":{"373":{"position":[[1564,9]]},"425":{"position":[[357,10],[388,8],[417,8]]},"433":{"position":[[2225,9]]},"455":{"position":[[6763,8],[6815,8],[6843,8],[6877,9]]}}}],["audienceclaim",{"_index":551,"t":{"373":{"position":[[1351,14],[1375,13]]}}}],["auth",{"_index":70,"t":{"326":{"position":[[65,4]]},"340":{"position":[[630,4],[669,4]]},"351":{"position":[[412,4],[470,4]]},"363":{"position":[[633,4],[691,4]]},"401":{"position":[[572,4],[633,4]]},"413":{"position":[[1019,4],[1275,6]]},"415":{"position":[[1057,4],[1328,4],[1626,4],[1964,4],[2303,4]]},"417":{"position":[[450,4]]},"421":{"position":[[179,4]]},"423":{"position":[[65,4]]},"427":{"position":[[5,4]]},"455":{"position":[[263,4],[316,4],[598,4],[667,4],[7079,4],[7248,4],[7274,5],[7610,4],[11404,4],[11425,4],[11448,4],[11473,4],[11597,4],[11786,4],[11811,4],[12206,4],[12285,4],[12333,4],[12434,4],[12624,4]]},"461":{"position":[[519,4]]},"463":{"position":[[606,4],[790,4],[1057,4],[1473,4],[1524,4]]},"465":{"position":[[1545,4]]},"469":{"position":[[94,5],[477,4],[578,4]]},"473":{"position":[[437,4],[631,4],[912,4],[1131,5]]},"475":{"position":[[556,4],[841,4],[1111,4],[1317,4],[1670,4],[1889,4],[2003,4],[2051,4],[2179,4]]}}}],["auth/pass_basic_auth",{"_index":254,"t":{"340":{"position":[[323,20]]}}}],["auth/set_basic_auth",{"_index":260,"t":{"340":{"position":[[478,19]]}}}],["auth_cooki",{"_index":1537,"t":{"469":{"position":[[1568,12],[1630,13],[2252,13],[2305,13]]}}}],["auth_cookie_name_0",{"_index":1546,"t":{"469":{"position":[[2285,19],[2518,20]]}}}],["auth_cookie_name_1",{"_index":1547,"t":{"469":{"position":[[2323,19],[2561,20]]}}}],["auth_cookie_name_1=$auth_cookie_name_upstream_1$1",{"_index":1548,"t":{"469":{"position":[[2343,52]]}}}],["auth_cookie_name_upstream_1",{"_index":1543,"t":{"469":{"position":[[2014,28],[2463,30]]}}}],["auth_request",{"_index":811,"t":{"399":{"position":[[1072,12]]},"455":{"position":[[11539,12],[11749,12],[11857,12]]},"469":{"position":[[10,12],[804,12],[927,12],[1538,12],[1871,12]]}}}],["auth_request_set",{"_index":1533,"t":{"469":{"position":[[1098,16],[1157,16],[1360,16],[1551,16],[1997,16],[2857,16],[3340,16]]}}}],["authent",{"_index":82,"t":{"326":{"position":[[200,14],[294,14],[458,14],[657,14]]},"345":{"position":[[444,14],[746,13],[1134,13]]},"375":{"position":[[1871,14]]},"389":{"position":[[1833,15]]},"393":{"position":[[24,14]]},"395":{"position":[[802,12]]},"399":{"position":[[109,14]]},"401":{"position":[[154,14],[294,14]]},"409":{"position":[[494,12]]},"413":{"position":[[2501,14]]},"421":{"position":[[234,14]]},"435":{"position":[[2935,13]]},"437":{"position":[[37,12]]},"441":{"position":[[498,13]]},"445":{"position":[[111,13]]},"455":{"position":[[142,14],[285,14],[356,14],[409,13],[442,12],[2491,12],[2577,12],[4623,12],[6026,14],[7556,15],[12236,14],[12352,14],[12466,14],[12675,14],[14748,15],[14927,14]]},"457":{"position":[[291,13]]},"461":{"position":[[419,15]]},"463":{"position":[[0,14],[113,13],[365,13],[440,12],[514,14],[1013,13]]},"469":{"position":[[49,12]]},"473":{"position":[[56,12]]},"475":{"position":[[273,13]]}}}],["authenticationprovid",{"_index":340,"t":{"345":{"position":[[994,22]]}}}],["autherror",{"_index":1488,"t":{"463":{"position":[[464,9]]}}}],["authfailur",{"_index":1486,"t":{"463":{"position":[[406,11]]}}}],["author",{"_index":258,"t":{"340":{"position":[[421,13],[536,13]]},"413":{"position":[[610,10],[692,10],[998,11]]},"421":{"position":[[67,13]]},"423":{"position":[[1031,14]]},"431":{"position":[[211,13]]},"433":{"position":[[1757,13],[1860,13],[1993,13],[2098,13],[2508,13],[2807,13],[3414,13],[4115,13],[4256,13]]},"435":{"position":[[3369,14]]},"445":{"position":[[3,9],[68,9],[179,9]]},"455":{"position":[[7141,13],[7201,13],[11665,13],[11695,13],[12700,13]]},"469":{"position":[[1667,13]]},"475":{"position":[[2031,13],[2207,13]]}}}],["authorizationnginx.ingress.kubernetes.io/auth",{"_index":1559,"t":{"469":{"position":[[3120,45]]}}}],["authresponsehead",{"_index":1612,"t":{"475":{"position":[[1978,20],[2154,20]]}}}],["authsuccess",{"_index":1484,"t":{"463":{"position":[[339,11],[1494,11]]}}}],["auto",{"_index":1607,"t":{"475":{"position":[[776,4]]}}}],["automat",{"_index":813,"t":{"401":{"position":[[186,13]]}}}],["automaticallyanchor",{"_index":651,"t":{"387":{"position":[[510,21]]}}}],["avail",{"_index":27,"t":{"324":{"position":[[280,10]]},"336":{"position":[[240,10]]},"340":{"position":[[85,9]]},"345":{"position":[[136,9]]},"365":{"position":[[195,9]]},"393":{"position":[[198,9],[249,9]]},"397":{"position":[[1271,9]]},"433":{"position":[[2037,9]]},"435":{"position":[[334,9]]},"457":{"position":[[737,9],[871,9],[950,9]]},"463":{"position":[[766,9]]},"465":{"position":[[618,9]]},"467":{"position":[[490,9]]}}}],["azur",{"_index":302,"t":{"340":{"position":[[1284,6]]},"375":{"position":[[660,5],[2223,6]]},"377":{"position":[[134,6]]},"411":{"position":[[226,5],[288,5]]},"415":{"position":[[59,5],[1051,5],[1322,5],[1342,6],[1533,5],[1620,5],[1841,5],[1958,5],[2297,5]]},"431":{"position":[[43,5]]},"455":{"position":[[496,5],[6286,5],[10904,6]]},"469":{"position":[[3676,7]]}}}],["azureconfig",{"_index":566,"t":{"375":{"position":[[594,11],[619,11]]}}}],["azureopt",{"_index":567,"t":{"375":{"position":[[606,12]]}}}],["b",{"_index":8,"t":{"324":{"position":[[78,2]]},"455":{"position":[[4700,1]]},"475":{"position":[[463,2],[1044,2],[1517,1]]}}}],["back",{"_index":755,"t":{"397":{"position":[[100,4],[172,4]]}}}],["backend",{"_index":733,"t":{"393":{"position":[[224,9],[259,8]]},"395":{"position":[[19,7],[42,7],[141,8],[366,7]]},"397":{"position":[[18,7],[1291,7]]},"455":{"position":[[11342,8]]},"469":{"position":[[1041,8],[1352,7]]},"473":{"position":[[393,7],[659,7],[769,8],[837,8],[1279,7]]},"475":{"position":[[527,7],[812,7],[1139,7],[1345,7],[1455,8],[1527,8],[1595,8]]}}}],["backport",{"_index":190,"t":{"332":{"position":[[632,8]]}}}],["backslash",{"_index":498,"t":{"371":{"position":[[872,9]]}}}],["backup",{"_index":1388,"t":{"455":{"position":[[5366,6],[5501,7]]},"461":{"position":[[266,6],[293,9],[310,6]]}}}],["balanc",{"_index":864,"t":{"409":{"position":[[100,10],[241,8],[290,10]]}}}],["banner",{"_index":1369,"t":{"455":{"position":[[3294,6],[3322,6],[3364,7]]}}}],["bar",{"_index":669,"t":{"389":{"position":[[603,8],[641,5]]}}}],["base",{"_index":220,"t":{"334":{"position":[[505,5]]},"336":{"position":[[57,5]]},"345":{"position":[[523,5]]},"389":{"position":[[1386,7]]},"423":{"position":[[1025,5]]},"433":{"position":[[3391,5],[3929,4]]},"455":{"position":[[14215,5]]},"457":{"position":[[1243,5]]}}}],["base/dir",{"_index":694,"t":{"389":{"position":[[1467,12]]}}}],["base64",{"_index":442,"t":{"363":{"position":[[168,6]]},"381":{"position":[[213,6]]},"451":{"position":[[241,6],[302,6],[586,6]]},"455":{"position":[[1803,6]]}}}],["base64url",{"_index":764,"t":{"397":{"position":[[457,9]]}}}],["bash",{"_index":1288,"t":{"451":{"position":[[73,4]]}}}],["basic",{"_index":253,"t":{"340":{"position":[[317,5],[472,5],[624,5]]},"351":{"position":[[406,5],[464,5]]},"363":{"position":[[627,5],[685,5]]},"455":{"position":[[592,5],[661,5],[7242,5],[7268,5],[7604,5],[8386,5],[8473,5],[11780,5],[11805,5]]}}}],["basicauthpassword",{"_index":381,"t":{"351":{"position":[[330,17],[361,17]]},"363":{"position":[[551,17],[582,17]]}}}],["baz",{"_index":670,"t":{"389":{"position":[[648,12],[690,4],[957,11]]}}}],["baz/abc/123",{"_index":680,"t":{"389":{"position":[[1021,12]]}}}],["bcrypt",{"_index":1375,"t":{"455":{"position":[[4706,6]]}}}],["bearer",{"_index":81,"t":{"326":{"position":[[181,6]]},"455":{"position":[[2744,6],[7215,6],[11709,6],[12774,6],[12835,6]]}}}],["becom",{"_index":384,"t":{"351":{"position":[[453,6]]},"363":{"position":[[674,6]]},"459":{"position":[[417,7],[481,7]]}}}],["befor",{"_index":212,"t":{"334":{"position":[[282,6]]},"338":{"position":[[0,6]]},"340":{"position":[[1488,6]]},"389":{"position":[[829,6],[1050,6]]},"455":{"position":[[5636,6]]}}}],["beforward",{"_index":510,"t":{"371":{"position":[[1494,11]]}}}],["behind",{"_index":61,"t":{"324":{"position":[[744,6]]},"455":{"position":[[10956,6]]}}}],["believ",{"_index":128,"t":{"330":{"position":[[12,7]]}}}],["beload",{"_index":375,"t":{"351":{"position":[[204,8]]},"363":{"position":[[425,8]]}}}],["belong",{"_index":412,"t":{"355":{"position":[[454,6]]},"421":{"position":[[510,6],[1535,6]]},"455":{"position":[[3923,6]]}}}],["below",{"_index":222,"t":{"334":{"position":[[541,5],[728,6],[863,5]]},"336":{"position":[[104,6],[271,5]]},"409":{"position":[[53,7]]},"433":{"position":[[345,6]]},"451":{"position":[[50,5]]},"455":{"position":[[15909,5]]},"463":{"position":[[167,5],[324,5]]},"465":{"position":[[48,5]]},"467":{"position":[[237,6]]}}}],["beoverridden",{"_index":508,"t":{"371":{"position":[[1384,12]]}}}],["bepass",{"_index":506,"t":{"371":{"position":[[1252,8]]}}}],["between",{"_index":325,"t":{"345":{"position":[[290,7]]},"389":{"position":[[2135,7]]},"393":{"position":[[53,7]]},"455":{"position":[[3090,7]]}}}],["bewar",{"_index":211,"t":{"334":{"position":[[267,6]]},"401":{"position":[[838,6]]}}}],["bin/dex",{"_index":1117,"t":{"433":{"position":[[848,7]]}}}],["binari",{"_index":4,"t":{"324":{"position":[[43,6],[160,6],[338,8]]}}}],["bindaddress",{"_index":351,"t":{"345":{"position":[[1377,11],[1685,11]]},"383":{"position":[[108,11],[127,11]]}}}],["bit",{"_index":762,"t":{"397":{"position":[[387,3],[438,3]]},"435":{"position":[[823,4],[1057,3]]}}}],["bitbucket",{"_index":303,"t":{"340":{"position":[[1291,10]]},"375":{"position":[[832,9]]},"377":{"position":[[141,10]]},"411":{"position":[[345,9]]},"441":{"position":[[477,9],[594,9],[713,9]]}}}],["bitbucketconfig",{"_index":571,"t":{"375":{"position":[[754,15],[787,15]]}}}],["bitbucketopt",{"_index":572,"t":{"375":{"position":[[770,16]]}}}],["blank",{"_index":621,"t":{"383":{"position":[[186,5],[315,5]]}}}],["block",{"_index":501,"t":{"371":{"position":[[958,6],[1040,5]]},"433":{"position":[[625,5]]},"463":{"position":[[294,5]]}}}],["bodi",{"_index":703,"t":{"389":{"position":[[1825,4]]},"469":{"position":[[842,4]]}}}],["bool",{"_index":316,"t":{"343":{"position":[[56,4]]},"361":{"position":[[281,4]]},"373":{"position":[[166,4],[322,4],[501,4],[849,4]]},"389":{"position":[[1502,4],[1725,4],[2250,4],[2387,4]]},"391":{"position":[[131,4]]},"455":{"position":[[276,4],[1320,4],[1835,4],[1999,4],[2381,4],[2621,4],[3168,4],[3222,4],[5167,4],[5329,4],[6089,4],[6203,4],[6353,4],[6951,4],[7162,4],[7253,4],[7403,4],[7664,4],[7735,4],[8734,4],[10011,4],[10130,4],[10743,4],[10936,4],[11186,4],[11393,4],[11686,4],[11791,4],[11904,4],[12143,4],[12221,4],[12643,4],[12788,4],[12975,4],[13119,4],[13225,4],[13341,4],[13440,4]]}}}],["both",{"_index":348,"t":{"345":{"position":[[1302,4],[1610,4]]},"387":{"position":[[291,5]]},"469":{"position":[[2405,4]]}}}],["bracket",{"_index":1379,"t":{"455":{"position":[[4912,8],[5078,8]]}}}],["break",{"_index":202,"t":{"334":{"position":[[89,8]]}}}],["bring",{"_index":143,"t":{"330":{"position":[[281,5]]}}}],["brows",{"_index":230,"t":{"334":{"position":[[842,6]]}}}],["browser",{"_index":1236,"t":{"435":{"position":[[2922,8]]},"455":{"position":[[15761,8]]}}}],["browserxssfilt",{"_index":1591,"t":{"473":{"position":[[975,17]]},"475":{"position":[[1733,17]]}}}],["bs=32",{"_index":1295,"t":{"451":{"position":[[213,5]]}}}],["buffer",{"_index":711,"t":{"389":{"position":[[2165,6]]},"455":{"position":[[3116,7]]}}}],["build",{"_index":9,"t":{"324":{"position":[[81,5]]},"347":{"position":[[243,8]]},"407":{"position":[[962,8]]},"435":{"position":[[2563,6],[2581,5]]}}}],["built",{"_index":1100,"t":{"433":{"position":[[157,5]]}}}],["bundl",{"_index":1212,"t":{"435":{"position":[[1456,7]]}}}],["button",{"_index":1428,"t":{"455":{"position":[[13112,6]]}}}],["button=tru",{"_index":1221,"t":{"435":{"position":[[1902,11]]}}}],["bypass",{"_index":1424,"t":{"455":{"position":[[12345,6],[12459,6],[12980,6],[14920,6]]}}}],["bysom",{"_index":649,"t":{"387":{"position":[[457,6]]}}}],["byte",{"_index":440,"t":{"363":{"position":[[145,6]]},"381":{"position":[[190,6]]},"451":{"position":[[581,4],[633,6]]},"465":{"position":[[1215,5]]}}}],["c",{"_index":17,"t":{"324":{"position":[[182,2],[513,1]]},"451":{"position":[[115,1]]}}}],["c=us/st=washington/l=dc/o=gsa/ou=18f/cn=localhost",{"_index":1207,"t":{"435":{"position":[[1193,53]]}}}],["ca",{"_index":275,"t":{"340":{"position":[[865,2]]},"375":{"position":[[1707,2]]},"455":{"position":[[8032,2],[8063,2]]}}}],["cafil",{"_index":594,"t":{"375":{"position":[[1660,7],[1677,7]]}}}],["call",{"_index":418,"t":{"359":{"position":[[193,5]]},"413":{"position":[[1933,5]]},"455":{"position":[[4394,5]]}}}],["callback",{"_index":807,"t":{"399":{"position":[[860,8]]},"421":{"position":[[81,8]]},"433":{"position":[[594,10]]},"439":{"position":[[121,8]]},"441":{"position":[[28,9]]}}}],["caller",{"_index":467,"t":{"369":{"position":[[705,6]]}}}],["capitalis",{"_index":1466,"t":{"459":{"position":[[108,12]]}}}],["captur",{"_index":665,"t":{"389":{"position":[[507,8],[699,7],[885,7]]}}}],["case",{"_index":95,"t":{"326":{"position":[[398,4]]},"330":{"position":[[533,4]]},"389":{"position":[[1214,4]]},"397":{"position":[[1079,5]]},"435":{"position":[[3451,5]]},"437":{"position":[[839,5]]},"447":{"position":[[90,4]]},"455":{"position":[[13085,4]]}}}],["caseadd",{"_index":1306,"t":{"451":{"position":[[376,7]]}}}],["center",{"_index":907,"t":{"413":{"position":[[230,6],[318,6],[425,6]]}}}],["cert",{"_index":631,"t":{"385":{"position":[[260,4],[278,4]]},"407":{"position":[[65,4],[306,4]]},"455":{"position":[[13580,4]]}}}],["cert.pem",{"_index":1202,"t":{"435":{"position":[[1160,8]]}}}],["certif",{"_index":355,"t":{"345":{"position":[[1480,11],[1788,11]]},"375":{"position":[[1710,12]]},"383":{"position":[[400,11]]},"385":{"position":[[68,11],[294,11]]},"415":{"position":[[1182,12]]},"435":{"position":[[1008,11]]},"455":{"position":[[8066,12],[13249,12],[13365,12],[13605,11]]}}}],["certresolv",{"_index":1580,"t":{"473":{"position":[[447,13],[672,13]]},"475":{"position":[[624,13],[907,13],[1152,13],[1358,13]]}}}],["challeng",{"_index":608,"t":{"375":{"position":[[2500,9]]},"455":{"position":[[876,9],[914,10]]}}}],["chang",{"_index":203,"t":{"334":{"position":[[98,7],[202,8]]},"345":{"position":[[283,6]]},"373":{"position":[[783,6]]},"399":{"position":[[150,7]]},"427":{"position":[[82,8]]},"439":{"position":[[651,6]]},"455":{"position":[[1439,7]]}}}],["channel",{"_index":1358,"t":{"455":{"position":[[2671,7]]}}}],["charact",{"_index":489,"t":{"371":{"position":[[709,10],[916,10],[1076,10]]}}}],["check",{"_index":72,"t":{"326":{"position":[[80,7]]},"387":{"position":[[134,7]]},"399":{"position":[[391,6]]},"413":{"position":[[2188,7],[2451,7]]},"415":{"position":[[157,5]]},"455":{"position":[[8399,6],[8486,6],[8503,5]]}}}],["checkedaft",{"_index":533,"t":{"373":{"position":[[655,12]]}}}],["checksum",{"_index":38,"t":{"324":{"position":[[430,8]]}}}],["chomp",{"_index":500,"t":{"371":{"position":[[949,8]]}}}],["choos",{"_index":0,"t":{"324":{"position":[[0,6]]},"345":{"position":[[1288,6],[1596,6]]},"413":{"position":[[108,6],[243,6],[290,6],[331,6],[438,6],[501,6],[526,6],[581,6],[805,6],[1282,6],[1768,6],[2024,6]]},"415":{"position":[[52,6]]}}}],["cidr",{"_index":1437,"t":{"455":{"position":[[14896,4]]}}}],["cipher",{"_index":637,"t":{"385":{"position":[[530,6],[663,6],[697,6]]},"407":{"position":[[797,6],[839,6],[1027,6]]},"455":{"position":[[13628,6],[13669,6],[13815,6],[13850,6]]}}}],["ciphersuit",{"_index":636,"t":{"385":{"position":[[478,12],[500,12]]}}}],["claim",{"_index":374,"t":{"351":{"position":[[75,5],[123,5],[136,5],[161,5],[393,5],[442,5]]},"363":{"position":[[344,5],[357,5],[382,5],[614,5],[663,5]]},"373":{"position":[[561,5],[1101,5],[1201,5],[1302,5],[1410,5],[1469,5]]},"411":{"position":[[477,7],[508,5]]},"423":{"position":[[361,5]]},"425":{"position":[[303,5]]},"433":{"position":[[1782,6]]},"455":{"position":[[6399,5],[6614,5],[6638,5],[6692,5],[6716,5],[6772,5],[6796,5]]}}}],["claim/user_id_claim",{"_index":291,"t":{"340":{"position":[[1067,19]]}}}],["claimsourc",{"_index":372,"t":{"351":{"position":[[26,11]]},"381":{"position":[[13,12]]}}}],["clear",{"_index":802,"t":{"399":{"position":[[601,6],[656,5]]}}}],["click",{"_index":931,"t":{"413":{"position":[[1295,5]]},"415":{"position":[[117,5],[398,5],[523,5],[616,5]]},"417":{"position":[[199,5]]},"433":{"position":[[1983,5],[2647,5]]}}}],["client",{"_index":268,"t":{"340":{"position":[[712,6],[732,6],[765,6]]},"373":{"position":[[1445,6],[1630,6]]},"375":{"position":[[140,6],[269,6],[441,6]]},"395":{"position":[[187,6],[340,6],[481,6]]},"397":{"position":[[109,6]]},"407":{"position":[[435,6],[453,6]]},"409":{"position":[[1424,6],[1442,6]]},"413":{"position":[[515,6],[838,6],[852,6],[1232,6],[1494,6],[1918,6]]},"415":{"position":[[1232,6],[1456,6],[1497,6],[1764,6],[1805,6]]},"417":{"position":[[239,6],[250,6],[349,6],[390,6]]},"423":{"position":[[103,6],[292,6],[460,6],[498,6]]},"425":{"position":[[11,6],[73,6],[234,6],[381,6],[438,6],[534,6],[565,6],[852,6]]},"427":{"position":[[748,6],[777,6]]},"433":{"position":[[1011,6],[1034,6],[2891,6],[2905,6],[4169,6],[4183,6]]},"435":{"position":[[1587,6],[3565,6],[3589,6]]},"437":{"position":[[414,6],[428,6],[548,6],[582,6]]},"439":{"position":[[338,6],[352,6],[442,6],[466,6]]},"441":{"position":[[275,6],[289,6],[376,6],[400,6]]},"443":{"position":[[175,6],[189,6],[355,6],[405,6]]},"455":{"position":[[681,6],[708,6],[762,6],[793,6],[809,6],[855,6],[4896,8],[5062,8],[8848,6],[8916,7],[12892,6],[15030,6]]},"463":{"position":[[677,11],[833,6],[1408,7]]},"465":{"position":[[413,11],[688,6],[1480,7]]},"475":{"position":[[2276,6],[2307,6]]}}}],["client'",{"_index":1040,"t":{"423":{"position":[[518,8]]},"425":{"position":[[550,8],[585,8]]}}}],["client/remot",{"_index":1493,"t":{"463":{"position":[[858,13]]},"465":{"position":[[713,13]]}}}],["client_id",{"_index":1153,"t":{"433":{"position":[[3499,9],[4564,13]]},"443":{"position":[[368,9]]}}}],["client_secret",{"_index":1154,"t":{"433":{"position":[[3513,13]]},"443":{"position":[[422,13]]}}}],["clientid",{"_index":559,"t":{"375":{"position":[[102,8],[118,8]]}}}],["clientsecret",{"_index":561,"t":{"375":{"position":[[223,12],[243,12],[475,12]]}}}],["clientsecretfil",{"_index":562,"t":{"375":{"position":[[356,16],[380,16]]}}}],["closest",{"_index":660,"t":{"389":{"position":[[364,7]]}}}],["cloud",{"_index":862,"t":{"409":{"position":[[80,5]]},"435":{"position":[[2259,5]]}}}],["cloud/dock",{"_index":1225,"t":{"435":{"position":[[2179,12]]}}}],["cluster",{"_index":777,"t":{"397":{"position":[[1260,7],[1418,7]]},"455":{"position":[[9184,7],[9236,7],[9325,7],[10003,7],[10033,8],[10059,7]]}}}],["cluster=tru",{"_index":780,"t":{"397":{"position":[[1367,12],[1515,12]]}}}],["code",{"_index":607,"t":{"375":{"position":[[2495,4]]},"389":{"position":[[2005,4]]},"433":{"position":[[2821,4],[4129,4]]},"455":{"position":[[871,4],[909,4]]},"465":{"position":[[1269,4]]}}}],["code_challenge_method",{"_index":606,"t":{"375":{"position":[[2462,21]]}}}],["codematch",{"_index":704,"t":{"389":{"position":[[1864,12]]}}}],["collabor",{"_index":169,"t":{"332":{"position":[[161,12]]},"355":{"position":[[217,13],[494,13]]},"421":{"position":[[310,13],[550,14],[934,13],[1104,13],[1456,13],[1575,14]]},"455":{"position":[[3659,13],[3783,13],[3963,13]]}}}],["collaboratorsit",{"_index":409,"t":{"355":{"position":[[315,15]]}}}],["collect",{"_index":616,"t":{"379":{"position":[[62,10]]},"391":{"position":[[47,10]]}}}],["combin",{"_index":1439,"t":{"455":{"position":[[14978,8]]},"461":{"position":[[675,8]]}}}],["come",{"_index":630,"t":{"385":{"position":[[242,4],[338,4]]}}}],["comma",{"_index":837,"t":{"403":{"position":[[168,5],[230,5],[292,5]]},"421":{"position":[[889,5],[1605,5],[1669,5]]},"427":{"position":[[1025,5]]},"455":{"position":[[2959,5],[3613,5],[4079,5]]},"457":{"position":[[1057,5]]}}}],["command",{"_index":55,"t":{"324":{"position":[[673,7]]},"397":{"position":[[731,8]]},"407":{"position":[[135,7]]},"409":{"position":[[1172,7]]},"437":{"position":[[205,7]]},"439":{"position":[[693,7]]},"449":{"position":[[35,7],[135,7]]},"451":{"position":[[56,9]]},"453":{"position":[[6,7]]},"459":{"position":[[6,7],[365,7]]},"461":{"position":[[140,8]]}}}],["commandlin",{"_index":1235,"t":{"435":{"position":[[2830,12]]}}}],["common",{"_index":361,"t":{"347":{"position":[[99,6],[152,8]]},"431":{"position":[[204,6]]},"455":{"position":[[543,6],[581,8]]}}}],["commun",{"_index":112,"t":{"328":{"position":[[23,9]]}}}],["compat",{"_index":1400,"t":{"455":{"position":[[6305,14]]}}}],["complet",{"_index":741,"t":{"395":{"position":[[405,10]]},"407":{"position":[[1000,8]]}}}],["compos",{"_index":147,"t":{"330":{"position":[[353,7]]},"397":{"position":[[230,8]]}}}],["compress",{"_index":1384,"t":{"455":{"position":[[5158,8],[5200,10]]},"461":{"position":[[332,10],[354,10]]}}}],["compris",{"_index":767,"t":{"397":{"position":[[565,9]]}}}],["concurr",{"_index":748,"t":{"395":{"position":[[628,12]]}}}],["confident",{"_index":1034,"t":{"423":{"position":[[150,13]]},"425":{"position":[[58,14]]}}}],["config",{"_index":54,"t":{"324":{"position":[[660,6]]},"334":{"position":[[691,6]]},"336":{"position":[[159,6],[200,6]]},"338":{"position":[[30,6],[82,6],[179,6],[197,6],[487,7],[516,6],[551,6]]},"340":{"position":[[1394,6],[1414,6],[1530,6]]},"397":{"position":[[1741,6]]},"399":{"position":[[182,6]]},"409":{"position":[[46,6],[645,6]]},"427":{"position":[[495,6]]},"433":{"position":[[3684,6],[4346,6],[4845,6]]},"439":{"position":[[545,6]]},"449":{"position":[[82,6]]},"453":{"position":[[50,6],[162,6],[235,6]]},"455":{"position":[[993,6],[1015,6],[10522,6]]},"457":{"position":[[1173,6]]},"469":{"position":[[2906,6]]}}}],["config=/etc/oauth2",{"_index":1322,"t":{"453":{"position":[[307,18]]}}}],["configur",{"_index":52,"t":{"324":{"position":[[631,9],[720,9]]},"326":{"position":[[518,10],[698,14]]},"334":{"position":[[303,13],[359,13],[447,13],[511,13],[587,14],[639,14],[671,14],[898,13]]},"336":{"position":[[21,14]]},"338":{"position":[[123,13],[318,13],[406,13]]},"340":{"position":[[112,14]]},"345":{"position":[[39,13],[169,13],[402,9],[634,9],[869,9],[1225,9],[1464,9],[1547,9],[1772,9],[1850,9]]},"347":{"position":[[200,10]]},"369":{"position":[[48,13]]},"375":{"position":[[43,13],[556,14],[641,14],[720,14],[813,14],[902,14],[989,14],[1075,14],[1155,14],[1213,15],[1285,14]]},"383":{"position":[[49,13],[454,13]]},"389":{"position":[[53,13]]},"391":{"position":[[309,13]]},"397":{"position":[[1031,9],[1153,9],[1390,9]]},"399":{"position":[[832,10]]},"401":{"position":[[971,13]]},"403":{"position":[[86,10]]},"405":{"position":[[26,15]]},"407":{"position":[[0,9],[176,13],[481,13],[713,11]]},"409":{"position":[[0,9],[1213,13]]},"411":{"position":[[105,9],[409,13]]},"415":{"position":[[1289,9]]},"417":{"position":[[268,9],[306,9]]},"433":{"position":[[360,9],[611,13],[1535,9],[1747,9],[1847,9],[2372,9],[3011,13],[3531,10]]},"437":{"position":[[165,14]]},"439":{"position":[[304,10]]},"441":{"position":[[442,13],[570,13]]},"449":{"position":[[20,10],[234,13]]},"455":{"position":[[393,13],[2887,13],[9501,15],[10841,13],[13066,10],[13560,13]]},"457":{"position":[[180,10],[511,10],[775,10],[1031,10]]},"459":{"position":[[339,13]]},"461":{"position":[[67,10],[183,9],[589,12]]},"463":{"position":[[582,9],[654,10]]},"465":{"position":[[315,9],[390,10]]},"467":{"position":[[134,13],[349,9],[425,10]]},"469":{"position":[[2798,13],[3744,10]]},"473":{"position":[[295,14]]},"475":{"position":[[240,10]]}}}],["conflict",{"_index":752,"t":{"395":{"position":[[768,9]]}}}],["conjunct",{"_index":341,"t":{"345":{"position":[[1020,11]]},"415":{"position":[[2056,11]]},"455":{"position":[[7580,11],[9296,11],[9793,11],[9953,11]]}}}],["connect",{"_index":513,"t":{"373":{"position":[[87,7],[993,7]]},"375":{"position":[[1748,10]]},"397":{"position":[[942,10],[970,10],[1223,10],[1426,10],[1614,10],[1775,10],[1824,10]]},"409":{"position":[[414,11]]},"411":{"position":[[304,7],[556,7]]},"425":{"position":[[97,8]]},"433":{"position":[[7,7],[227,7],[271,7],[2635,7]]},"435":{"position":[[869,7],[913,8]]},"455":{"position":[[6446,7],[8104,10],[9192,10],[9244,10],[9341,10],[9559,10],[9655,11],[9848,10],[9901,10],[10016,7],[10067,10],[10135,7],[10226,10],[10276,10],[10310,10],[10399,10],[10556,10],[10605,10]]}}}],["connect/auth",{"_index":1044,"t":{"423":{"position":[[615,13]]}}}],["connect/token",{"_index":1045,"t":{"423":{"position":[[710,14]]}}}],["connect/userinfo",{"_index":1046,"t":{"423":{"position":[[807,17],[908,17]]}}}],["consent",{"_index":473,"t":{"371":{"position":[[165,7],[333,7]]},"413":{"position":[[345,7]]},"415":{"position":[[702,7],[810,7],[837,7]]}}}],["consent#th",{"_index":996,"t":{"415":{"position":[[2238,11]]}}}],["consid",{"_index":324,"t":{"345":{"position":[[256,10]]},"371":{"position":[[889,10]]}}}],["consol",{"_index":1004,"t":{"417":{"position":[[29,7]]}}}],["consum",{"_index":1093,"t":{"429":{"position":[[353,8],[380,8]]},"441":{"position":[[16,8]]}}}],["contact",{"_index":1180,"t":{"435":{"position":[[96,7],[135,7]]}}}],["contain",{"_index":195,"t":{"334":{"position":[[17,8]]},"345":{"position":[[13,8]]},"361":{"position":[[561,8]]},"363":{"position":[[315,10]]},"373":{"position":[[1107,8],[1207,8],[1308,8]]},"381":{"position":[[360,10]]},"383":{"position":[[359,8]]},"385":{"position":[[25,8]]},"433":{"position":[[1466,9],[4746,10]]},"435":{"position":[[2508,8]]},"455":{"position":[[6644,8],[6722,8],[6802,8],[11975,7]]},"463":{"position":[[53,7],[305,7]]},"469":{"position":[[2217,7]]}}}],["content",{"_index":1208,"t":{"435":{"position":[[1251,8]]},"469":{"position":[[864,7],[2240,8]]}}}],["contenttypenosniff",{"_index":1592,"t":{"473":{"position":[[998,19]]},"475":{"position":[[1756,19]]}}}],["contrib",{"_index":1321,"t":{"453":{"position":[[257,7]]}}}],["control",{"_index":1411,"t":{"455":{"position":[[10980,8]]}}}],["convert",{"_index":235,"t":{"338":{"position":[[74,7],[106,7],[171,7],[244,7]]},"351":{"position":[[379,8]]},"363":{"position":[[600,8]]}}}],["convolut",{"_index":494,"t":{"371":{"position":[[798,11]]}}}],["cooki",{"_index":75,"t":{"326":{"position":[[112,6],[122,6],[543,8],[570,6]]},"393":{"position":[[122,6],[309,6]]},"395":{"position":[[4,6],[126,6],[199,7],[426,7],[518,6],[579,6]]},"397":{"position":[[139,6],[196,6],[326,6]]},"399":{"position":[[608,8],[674,6]]},"401":{"position":[[103,8]]},"407":{"position":[[373,6],[395,6]]},"409":{"position":[[1339,6],[1361,6]]},"413":{"position":[[933,6]]},"415":{"position":[[2336,6],[2374,6]]},"417":{"position":[[483,6],[521,6]]},"427":{"position":[[570,6],[814,6]]},"433":{"position":[[1147,6],[1167,6],[3618,7]]},"435":{"position":[[1729,6],[1811,6],[1861,6],[3847,6]]},"451":{"position":[[21,6]]},"455":{"position":[[1029,6],[1066,6],[1090,7],[1203,6],[1242,6],[1286,6],[1304,6],[1338,6],[1357,6],[1392,6],[1456,6],[1498,6],[1538,6],[1569,6],[1590,7],[1620,6],[1656,6],[1735,6],[1783,7],[1821,6],[1864,6],[1883,6],[1919,6],[1975,6],[2033,7],[2108,6],[2162,6],[11171,6],[11215,6],[11259,7],[11360,6],[11367,6],[15415,6]]},"459":{"position":[[398,6]]},"469":{"position":[[1487,6],[1623,6],[1710,7],[1847,7],[1914,7],[1979,7],[2094,6],[2131,6],[2233,6],[2414,6],[2511,6],[2554,6],[3475,8],[3728,6],[3761,6],[3810,6],[3929,6]]}}}],["cookie_secret",{"_index":1155,"t":{"433":{"position":[[3589,13]]},"451":{"position":[[681,15]]}}}],["cookienam",{"_index":757,"t":{"397":{"position":[[257,12],[301,10],[541,12]]}}}],["copi",{"_index":240,"t":{"338":{"position":[[343,4]]},"435":{"position":[[2600,4]]},"469":{"position":[[1825,6]]}}}],["coreo",{"_index":1101,"t":{"433":{"position":[[171,6]]}}}],["corp.com\"]client_id",{"_index":1145,"t":{"433":{"position":[[3240,20]]}}}],["corpor",{"_index":126,"t":{"328":{"position":[[218,9]]}}}],["correct",{"_index":1014,"t":{"421":{"position":[[104,7]]},"433":{"position":[[545,7]]},"443":{"position":[[110,7]]}}}],["correctli",{"_index":1000,"t":{"415":{"position":[[2425,10]]},"417":{"position":[[572,10]]},"475":{"position":[[382,9]]}}}],["count=1",{"_index":1296,"t":{"451":{"position":[[219,7]]}}}],["cover",{"_index":1523,"t":{"467":{"position":[[30,7]]}}}],["creat",{"_index":181,"t":{"332":{"position":[[480,6]]},"413":{"position":[[40,6],[812,8],[1078,6],[1758,6],[2014,6]]},"415":{"position":[[253,6]]},"419":{"position":[[0,6]]},"421":{"position":[[0,6],[1350,7]]},"423":{"position":[[92,6],[299,6],[487,8],[1461,6]]},"425":{"position":[[0,6],[241,6],[324,6]]},"429":{"position":[[42,6]]},"433":{"position":[[2653,6],[3002,6],[3791,6]]},"435":{"position":[[443,6],[2429,6]]},"439":{"position":[[0,6]]},"443":{"position":[[0,6]]},"455":{"position":[[1420,8],[4677,7]]}}}],["credenti",{"_index":423,"t":{"359":{"position":[[284,11]]},"413":{"position":[[297,13],[445,13],[478,12]]},"417":{"position":[[294,11]]},"423":{"position":[[270,10]]},"425":{"position":[[212,10]]},"455":{"position":[[4575,11]]}}}],["crypto/tl",{"_index":644,"t":{"385":{"position":[[731,10]]},"407":{"position":[[914,10],[1062,11]]},"455":{"position":[[13884,10]]}}}],["csrf",{"_index":1349,"t":{"455":{"position":[[1982,4],[2028,4],[2115,4],[2157,4]]}}}],["current",{"_index":5,"t":{"324":{"position":[[50,8]]},"407":{"position":[[735,9],[932,9]]},"411":{"position":[[517,9]]},"433":{"position":[[1228,7]]},"455":{"position":[[6262,10]]}}}],["custom",{"_index":851,"t":{"407":{"position":[[508,13]]},"425":{"position":[[410,6]]},"433":{"position":[[2091,6]]},"455":{"position":[[2175,6],[2211,6],[2235,6],[2282,6],[3308,6],[3388,6]]},"469":{"position":[[3803,6]]}}}],["cycl",{"_index":804,"t":{"399":{"position":[[741,5],[803,6]]}}}],["d",{"_index":28,"t":{"324":{"position":[[291,2]]},"451":{"position":[[254,1]]}}}],["danger",{"_index":193,"t":{"334":{"position":[[0,6]]},"345":{"position":[[211,6]]}}}],["dashboard",{"_index":906,"t":{"413":{"position":[[220,9]]},"435":{"position":[[496,10],[798,10]]}}}],["data",{"_index":628,"t":{"385":{"position":[[210,4],[306,4]]},"393":{"position":[[179,4]]},"395":{"position":[[550,4],[586,5]]},"423":{"position":[[1355,4]]},"435":{"position":[[426,4]]},"455":{"position":[[11329,4]]},"465":{"position":[[1392,4]]}}}],["date",{"_index":1504,"t":{"463":{"position":[[1310,4]]},"465":{"position":[[1332,4]]},"467":{"position":[[602,4]]}}}],["day",{"_index":1203,"t":{"435":{"position":[[1170,4]]},"455":{"position":[[5456,4]]}}}],["dd",{"_index":1293,"t":{"451":{"position":[[194,2]]}}}],["debug",{"_index":1416,"t":{"455":{"position":[[11889,5]]}}}],["decim",{"_index":394,"t":{"353":{"position":[[153,7]]}}}],["decod",{"_index":1310,"t":{"451":{"position":[[620,6]]}}}],["decreas",{"_index":1283,"t":{"449":{"position":[[98,10]]}}}],["default",{"_index":460,"t":{"369":{"position":[[176,9],[207,7],[431,7],[513,7],[637,7]]},"371":{"position":[[68,8],[226,7],[1170,7],[1198,7],[1218,7],[1363,7]]},"373":{"position":[[804,7],[1457,7]]},"375":{"position":[[1549,7],[1797,7]]},"385":{"position":[[647,7]]},"393":{"position":[[316,9]]},"395":{"position":[[34,7]]},"397":{"position":[[356,8]]},"399":{"position":[[517,7]]},"407":{"position":[[635,8],[900,8]]},"409":{"position":[[168,8],[763,7]]},"411":{"position":[[218,7]]},"415":{"position":[[2108,9],[2250,7]]},"429":{"position":[[146,7]]},"431":{"position":[[196,7]]},"433":{"position":[[576,7],[1927,7],[2415,7],[2863,8],[4248,7]]},"439":{"position":[[575,8]]},"441":{"position":[[434,7]]},"455":{"position":[[24,7],[2343,7],[2659,7],[3356,7],[3436,7],[4300,9],[8154,7],[13799,7],[15614,8],[15685,7]]},"461":{"position":[[3,8],[627,7]]},"463":{"position":[[152,7],[636,7]]},"465":{"position":[[33,7],[372,7]]},"467":{"position":[[219,7],[407,7]]},"473":{"position":[[461,7],[686,7]]},"475":{"position":[[638,7],[921,7],[1166,7],[1372,7]]}}}],["defin",{"_index":330,"t":{"345":{"position":[[550,7]]},"373":{"position":[[1399,6]]},"375":{"position":[[158,7],[291,7],[1953,7]]},"381":{"position":[[140,7]]},"423":{"position":[[1511,6]]},"447":{"position":[[48,6]]}}}],["definit",{"_index":617,"t":{"379":{"position":[[76,11]]},"391":{"position":[[61,11]]}}}],["delay",{"_index":186,"t":{"332":{"position":[[571,5]]}}}],["demo",{"_index":1188,"t":{"435":{"position":[[512,5]]}}}],["demonstr",{"_index":155,"t":{"330":{"position":[[558,11]]}}}],["depend",{"_index":108,"t":{"326":{"position":[[680,10]]},"330":{"position":[[85,13]]},"332":{"position":[[339,14]]},"437":{"position":[[228,9]]},"455":{"position":[[8306,8]]}}}],["deploy",{"_index":1,"t":{"324":{"position":[[14,7],[737,6]]},"435":{"position":[[3075,11]]}}}],["deprec",{"_index":1423,"t":{"455":{"position":[[12310,11]]}}}],["describ",{"_index":204,"t":{"334":{"position":[[172,9]]},"336":{"position":[[77,9]]},"433":{"position":[[2156,8]]}}}],["descript",{"_index":314,"t":{"343":{"position":[[34,11]]},"345":{"position":[[334,11]]},"347":{"position":[[34,11]]},"349":{"position":[[34,11]]},"351":{"position":[[111,11]]},"355":{"position":[[34,11]]},"357":{"position":[[34,11]]},"359":{"position":[[34,11]]},"361":{"position":[[129,11]]},"363":{"position":[[127,11]]},"365":{"position":[[34,11]]},"367":{"position":[[34,11]]},"371":{"position":[[1098,11]]},"373":{"position":[[34,11]]},"375":{"position":[[90,11]]},"381":{"position":[[172,11]]},"383":{"position":[[96,11]]},"385":{"position":[[162,11]]},"387":{"position":[[308,11]]},"389":{"position":[[182,11]]},"391":{"position":[[106,11]]},"433":{"position":[[2324,11]]},"439":{"position":[[71,11]]},"455":{"position":[[12,11]]},"463":{"position":[[821,11]]},"465":{"position":[[676,11]]},"467":{"position":[[549,11]]}}}],["desir",{"_index":437,"t":{"361":{"position":[[574,7]]}}}],["detail",{"_index":138,"t":{"330":{"position":[[167,7],[457,6]]},"334":{"position":[[122,8],[336,7]]},"415":{"position":[[2273,8]]},"433":{"position":[[508,8]]},"455":{"position":[[11914,8]]},"463":{"position":[[1042,7],[1552,8]]},"467":{"position":[[751,7]]}}}],["determin",{"_index":429,"t":{"361":{"position":[[307,10]]},"387":{"position":[[145,9]]},"389":{"position":[[1981,10],[2270,10]]},"455":{"position":[[8887,9]]},"475":{"position":[[362,9]]}}}],["dev.yaml",{"_index":1111,"t":{"433":{"position":[[679,9],[878,8]]}}}],["develop",{"_index":1159,"t":{"433":{"position":[[3737,9]]},"435":{"position":[[315,9]]}}}],["dex",{"_index":1102,"t":{"433":{"position":[[178,3],[352,4],[392,4],[435,4],[802,4],[1521,4]]}}}],["differ",{"_index":492,"t":{"371":{"position":[[759,9]]},"377":{"position":[[77,9]]},"413":{"position":[[2150,9]]},"455":{"position":[[2018,9],[6237,6]]},"461":{"position":[[381,9]]},"463":{"position":[[546,9]]},"465":{"position":[[279,9]]},"467":{"position":[[313,9]]}}}],["digitalocean",{"_index":611,"t":{"377":{"position":[[152,12]]},"411":{"position":[[332,12]]}}}],["dir",{"_index":1353,"t":{"455":{"position":[[2192,3]]}}}],["dir\",th",{"_index":693,"t":{"389":{"position":[[1427,10]]}}}],["direct",{"_index":360,"t":{"347":{"position":[[67,7]]},"399":{"position":[[1085,9]]},"469":{"position":[[23,9]]}}}],["directli",{"_index":789,"t":{"399":{"position":[[22,8]]},"455":{"position":[[13150,8]]}}}],["directori",{"_index":952,"t":{"415":{"position":[[72,10],[1356,9]]},"427":{"position":[[1201,9]]},"433":{"position":[[1244,9]]},"435":{"position":[[2480,9]]},"453":{"position":[[265,10]]},"457":{"position":[[595,9]]}}}],["directory/develop/v2",{"_index":995,"t":{"415":{"position":[[2201,20]]}}}],["disabl",{"_index":622,"t":{"383":{"position":[[209,8],[338,8]]},"399":{"position":[[505,8]]},"455":{"position":[[1689,8],[2335,7],[3348,7],[3428,7],[5561,7],[6592,8],[12148,7]]},"461":{"position":[[483,8],[767,8]]}}}],["disallow",{"_index":791,"t":{"399":{"position":[[244,9]]}}}],["disclos",{"_index":167,"t":{"332":{"position":[[65,9],[298,9]]}}}],["disclosur",{"_index":121,"t":{"328":{"position":[[139,11]]},"330":{"position":[[194,11],[491,10]]},"332":{"position":[[129,10]]},"397":{"position":[[839,11]]}}}],["discov",{"_index":157,"t":{"330":{"position":[[590,10]]}}}],["discoveri",{"_index":524,"t":{"373":{"position":[[447,9],[888,9]]},"401":{"position":[[826,11]]},"435":{"position":[[3252,10],[3298,9],[3485,9],[3711,9]]},"455":{"position":[[6579,9],[12965,9],[13001,10]]}}}],["discret",{"_index":192,"t":{"332":{"position":[[695,10]]}}}],["discuss",{"_index":166,"t":{"332":{"position":[[47,7],[216,10]]}}}],["display",{"_index":273,"t":{"340":{"position":[[821,7]]},"375":{"position":[[1591,7]]},"433":{"position":[[979,7]]},"443":{"position":[[332,7]]},"455":{"position":[[2359,7],[2386,7],[8208,7]]}}}],["doc",{"_index":1323,"t":{"455":{"position":[[66,4]]}}}],["docker",{"_index":19,"t":{"324":{"position":[[204,6]]},"433":{"position":[[1490,6]]},"435":{"position":[[2318,6],[2556,6],[2574,6]]}}}],["document",{"_index":196,"t":{"334":{"position":[[26,13]]},"385":{"position":[[742,14]]},"433":{"position":[[2470,13]]},"437":{"position":[[387,13]]},"455":{"position":[[13895,14]]}}}],["doesn't",{"_index":999,"t":{"415":{"position":[[2398,7]]},"417":{"position":[[545,7]]}}}],["domain",{"_index":481,"t":{"371":{"position":[[529,7],[655,7]]},"401":{"position":[[854,6],[964,6],[1064,6]]},"403":{"position":[[268,7]]},"411":{"position":[[147,6]]},"413":{"position":[[648,6],[1058,7],[1829,6]]},"421":{"position":[[407,8]]},"427":{"position":[[1263,6]]},"433":{"position":[[1194,6]]},"435":{"position":[[3874,6]]},"445":{"position":[[22,6],[221,9]]},"455":{"position":[[1036,6],[1073,7],[1138,6],[1210,6],[2470,6],[2530,6],[14689,6],[14718,7],[14771,6],[15485,6],[15504,6],[15579,6],[15838,7]]},"459":{"position":[[469,6]]},"469":{"position":[[548,8]]},"473":{"position":[[469,8],[694,8]]},"475":{"position":[[646,8],[929,8],[1174,8],[1380,8]]}}}],["domain.com",{"_index":1494,"t":{"463":{"position":[[964,10]]},"465":{"position":[[819,10]]}}}],["domain.tld/gitlab",{"_index":1082,"t":{"427":{"position":[[1217,19]]}}}],["domain.tld/gitlab/oauth",{"_index":1087,"t":{"427":{"position":[[1366,24]]}}}],["domain.tld/oauth",{"_index":1085,"t":{"427":{"position":[[1332,16]]}}}],["domain=\"yourcompany.com",{"_index":847,"t":{"407":{"position":[[237,24]]},"409":{"position":[[1274,24]]}}}],["domain=gsa.gov",{"_index":1217,"t":{"435":{"position":[[1758,14]]}}}],["domain=localhost",{"_index":1220,"t":{"435":{"position":[[1868,16]]}}}],["domain=yourcompany.com",{"_index":1278,"t":{"445":{"position":[[41,23]]}}}],["domain}/admin/oauth2/a",{"_index":1167,"t":{"433":{"position":[[4314,23]]}}}],["domain}/dev/console/apps/new",{"_index":1162,"t":{"433":{"position":[[3839,28]]}}}],["domain}/oauth2/default\"upstream",{"_index":1170,"t":{"433":{"position":[[4487,32]]}}}],["don't",{"_index":1398,"t":{"455":{"position":[[6094,5],[8496,6]]},"469":{"position":[[3791,5]]}}}],["done",{"_index":141,"t":{"330":{"position":[[214,4]]},"345":{"position":[[1357,4],[1665,4]]}}}],["doubl",{"_index":800,"t":{"399":{"position":[[570,7]]}}}],["down",{"_index":918,"t":{"413":{"position":[[496,4],[2234,4]]},"415":{"position":[[1255,4]]}}}],["download",{"_index":2,"t":{"324":{"position":[[25,8]]},"413":{"position":[[1191,8],[2272,10]]},"433":{"position":[[426,8]]}}}],["drop",{"_index":917,"t":{"413":{"position":[[491,4]]}}}],["dropdown",{"_index":905,"t":{"413":{"position":[[158,8]]}}}],["due",{"_index":968,"t":{"415":{"position":[[873,3]]},"427":{"position":[[64,3]]}}}],["durat",{"_index":389,"t":{"353":{"position":[[39,8],[99,8]]},"389":{"position":[[2098,8],[2484,8],[2516,8]]},"455":{"position":[[1256,8],[1635,8],[1674,9],[2127,8],[3074,8],[14252,8]]}}}],["dure",{"_index":972,"t":{"415":{"position":[[958,6]]},"463":{"position":[[507,6]]}}}],["dynam",{"_index":1576,"t":{"473":{"position":[[275,7]]}}}],["e.g",{"_index":833,"t":{"401":{"position":[[1108,4]]},"427":{"position":[[359,4],[1211,5],[1270,5],[1361,4]]},"433":{"position":[[2201,4]]},"455":{"position":[[719,4],[1101,5],[1601,5],[3014,4],[4952,4],[5118,4],[6466,4],[7542,4],[8680,5],[9117,4],[9260,5],[9409,5],[9917,5],[13714,5],[14815,5]]},"457":{"position":[[885,4]]},"469":{"position":[[3662,5]]}}}],["each",{"_index":40,"t":{"324":{"position":[[457,4]]},"353":{"position":[[170,4]]},"395":{"position":[[228,4]]},"415":{"position":[[289,4]]},"433":{"position":[[1885,4]]},"461":{"position":[[464,4],[556,4]]}}}],["echo",{"_index":1301,"t":{"451":{"position":[[283,4]]}}}],["effect",{"_index":463,"t":{"369":{"position":[[489,11]]}}}],["elb",{"_index":861,"t":{"409":{"position":[[68,4],[262,3]]}}}],["email",{"_index":148,"t":{"330":{"position":[[364,5]]},"340":{"position":[[589,5]]},"371":{"position":[[490,5]]},"373":{"position":[[224,5],[1146,7],[1343,7]]},"399":{"position":[[926,5]]},"403":{"position":[[262,5],[324,6]]},"407":{"position":[[231,5]]},"409":{"position":[[1268,5]]},"413":{"position":[[1802,5],[1866,5],[1883,5],[2043,5],[2068,5]]},"421":{"position":[[401,5]]},"427":{"position":[[296,5]]},"433":{"position":[[1188,5]]},"435":{"position":[[1479,5],[1752,5],[3868,5]]},"441":{"position":[[215,5]]},"445":{"position":[[16,5],[35,5],[89,5],[125,6],[160,5],[193,5],[215,5]]},"455":{"position":[[423,6],[463,6],[2464,5],[2504,6],[2594,5],[4341,5],[6083,5],[6111,5],[6608,5],[6664,5],[6670,7],[7310,5],[7389,5],[7426,5],[7520,5],[7795,5],[11461,5]]},"459":{"position":[[463,5]]},"463":{"position":[[75,5],[1448,5]]},"465":{"position":[[1520,5]]},"469":{"position":[[1024,5],[1174,6],[1268,5],[1274,7]]}}}],["email,default",{"_index":546,"t":{"373":{"position":[[1125,13]]}}}],["emailclaim",{"_index":545,"t":{"373":{"position":[[1056,10],[1074,10]]}}}],["empti",{"_index":380,"t":{"351":{"position":[[323,6]]},"363":{"position":[[544,6]]},"455":{"position":[[5279,5],[15628,5]]},"463":{"position":[[1225,5]]},"465":{"position":[[1088,5]]}}}],["enabl",{"_index":446,"t":{"365":{"position":[[68,7],[144,7]]},"389":{"position":[[2075,8],[2408,7]]},"413":{"position":[[1323,6],[1733,6]]},"427":{"position":[[256,6]]},"455":{"position":[[2004,6],[8739,7]]},"461":{"position":[[472,7]]},"469":{"position":[[1291,7],[1477,7]]},"475":{"position":[[318,7]]}}}],["encod",{"_index":443,"t":{"363":{"position":[[175,7]]},"381":{"position":[[220,7]]},"397":{"position":[[410,7],[467,7],[652,7]]},"401":{"position":[[432,11]]},"451":{"position":[[597,8]]},"455":{"position":[[1810,8]]}}}],["encount",{"_index":1228,"t":{"435":{"position":[[2236,9],[2400,9]]}}}],["encrypt",{"_index":746,"t":{"395":{"position":[[558,9]]},"397":{"position":[[43,10],[671,9],[740,10]]},"433":{"position":[[3606,7]]},"455":{"position":[[4713,10]]}}}],["end",{"_index":652,"t":{"387":{"position":[[549,3]]},"399":{"position":[[786,3]]},"415":{"position":[[2125,3]]},"469":{"position":[[3562,3]]}}}],["end_session_endpoint",{"_index":825,"t":{"401":{"position":[[733,20]]}}}],["endeavour",{"_index":119,"t":{"328":{"position":[[115,9]]}}}],["endpoint",{"_index":62,"t":{"324":{"position":[[757,8]]},"326":{"position":[[768,10]]},"367":{"position":[[266,8]]},"369":{"position":[[141,8]]},"375":{"position":[[1886,8],[2086,8],[2146,8],[2310,8]]},"387":{"position":[[121,8]]},"399":{"position":[[48,10],[69,9],[417,8]]},"401":{"position":[[62,8]]},"403":{"position":[[5,8]]},"409":{"position":[[558,8]]},"415":{"position":[[1062,9],[1333,8],[1366,9],[1631,8],[1669,9],[1969,8]]},"423":{"position":[[1385,8]]},"433":{"position":[[1286,9]]},"435":{"position":[[3403,9],[3529,9]]},"455":{"position":[[571,9],[6041,8],[7901,8],[8356,8],[8809,9],[9062,8],[12184,8],[12992,8],[14116,9],[14633,8]]},"461":{"position":[[722,8]]},"469":{"position":[[100,9]]},"473":{"position":[[114,8]]},"475":{"position":[[156,8]]}}}],["endpointdefault",{"_index":363,"t":{"347":{"position":[[127,15]]}}}],["endpointsdefault",{"_index":542,"t":{"373":{"position":[[924,16]]}}}],["enforc",{"_index":1368,"t":{"455":{"position":[[3173,7]]}}}],["enhanc",{"_index":538,"t":{"373":{"position":[[816,8]]}}}],["ensur",{"_index":745,"t":{"395":{"position":[[543,6]]},"427":{"position":[[519,6]]}}}],["enter",{"_index":1013,"t":{"421":{"position":[[94,5]]},"429":{"position":[[233,5]]},"439":{"position":[[142,6]]},"443":{"position":[[100,5]]}}}],["enterpris",{"_index":1027,"t":{"421":{"position":[[1699,11]]}}}],["entri",{"_index":958,"t":{"415":{"position":[[279,5]]},"455":{"position":[[4661,7]]}}}],["enumer",{"_index":610,"t":{"377":{"position":[[63,9]]}}}],["env",{"_index":1229,"t":{"435":{"position":[[2325,3]]}}}],["environ",{"_index":58,"t":{"324":{"position":[[698,11]]},"340":{"position":[[49,11]]},"363":{"position":[[243,11]]},"381":{"position":[[288,11]]},"433":{"position":[[1443,11]]},"435":{"position":[[2145,11],[2192,13],[2265,12],[2291,11],[2735,11]]},"437":{"position":[[180,11]]},"449":{"position":[[57,11],[171,11],[197,11]]},"459":{"position":[[51,11],[226,11]]}}}],["equival",{"_index":1260,"t":{"439":{"position":[[519,10]]}}}],["error",{"_index":310,"t":{"340":{"position":[[1446,6]]},"455":{"position":[[2602,6],[2636,5],[3215,6],[3238,6],[3261,5],[11898,5],[11923,5],[11944,5]]},"463":{"position":[[501,5]]},"467":{"position":[[175,6]]},"473":{"position":[[422,6],[1228,7],[1236,7]]},"475":{"position":[[62,6]]}}}],["error_pag",{"_index":1532,"t":{"469":{"position":[[954,10]]}}}],["escap",{"_index":491,"t":{"371":{"position":[[747,8],[909,6]]}}}],["especi",{"_index":1446,"t":{"455":{"position":[[15223,10]]}}}],["etc",{"_index":956,"t":{"415":{"position":[[219,5]]},"455":{"position":[[15749,5]]},"469":{"position":[[2661,3]]}}}],["etc/example.cfg",{"_index":1156,"t":{"433":{"position":[[3691,16]]}}}],["etc/localhost.cfg",{"_index":1168,"t":{"433":{"position":[[4358,18],[4852,18]]}}}],["etcd",{"_index":1129,"t":{"433":{"position":[[1501,4]]}}}],["evalu",{"_index":1440,"t":{"455":{"position":[[15057,8]]}}}],["even",{"_index":966,"t":{"415":{"position":[[762,4]]},"421":{"position":[[490,4],[1515,4]]},"455":{"position":[[3903,4]]}}}],["event",{"_index":1505,"t":{"463":{"position":[[1339,6]]},"465":{"position":[[1361,6]]},"467":{"position":[[631,6]]}}}],["everyon",{"_index":1166,"t":{"433":{"position":[[4086,8]]},"441":{"position":[[463,8]]}}}],["everyth",{"_index":1187,"t":{"435":{"position":[[407,10]]}}}],["everywher",{"_index":1239,"t":{"435":{"position":[[3230,11]]}}}],["ex",{"_index":923,"t":{"413":{"position":[[655,3],[752,3]]}}}],["exactli",{"_index":488,"t":{"371":{"position":[[695,7]]}}}],["exampl",{"_index":63,"t":{"324":{"position":[[766,8]]},"369":{"position":[[762,9]]},"371":{"position":[[456,7]]},"397":{"position":[[1682,8]]},"401":{"position":[[922,8]]},"409":{"position":[[37,8],[576,7],[631,7]]},"433":{"position":[[207,8],[324,7],[1476,7],[2206,8],[2693,7],[3868,7],[4338,7]]},"447":{"position":[[11,8]]},"453":{"position":[[210,7]]},"459":{"position":[[383,8]]},"463":{"position":[[813,7]]},"465":{"position":[[668,7]]},"467":{"position":[[541,7]]},"469":{"position":[[226,8]]},"473":{"position":[[263,8]]}}}],["example.com",{"_index":485,"t":{"371":{"position":[[641,13]]},"435":{"position":[[3881,11]]},"455":{"position":[[14821,13],[14835,14],[15890,14]]},"473":{"position":[[486,13],[508,15],[711,13],[733,15],[1053,11]]},"475":{"position":[[663,13],[685,15],[946,13],[968,15],[1191,13],[1213,15],[1397,13],[1419,15],[1811,11]]}}}],["example.com:8080",{"_index":1453,"t":{"455":{"position":[[15846,17]]}}}],["example.oktapreview.com",{"_index":1134,"t":{"433":{"position":[[1697,23]]}}}],["example\\.com",{"_index":484,"t":{"371":{"position":[[570,23],[990,20]]}}}],["examples/config",{"_index":1110,"t":{"433":{"position":[[663,15],[862,15]]}}}],["exce",{"_index":1539,"t":{"469":{"position":[[1722,6]]}}}],["exclud",{"_index":1364,"t":{"455":{"position":[[2931,7],[2992,7],[3047,9]]},"461":{"position":[[864,7]]}}}],["exclus",{"_index":782,"t":{"397":{"position":[[1541,10]]}}}],["exist",{"_index":218,"t":{"334":{"position":[[491,8]]},"338":{"position":[[114,8],[397,8]]},"413":{"position":[[1778,8],[2034,8]]},"463":{"position":[[920,6]]},"465":{"position":[[775,6]]}}}],["exmpal",{"_index":1410,"t":{"455":{"position":[[10463,8]]}}}],["expect",{"_index":441,"t":{"363":{"position":[[158,7],[220,7],[290,7]]},"381":{"position":[[203,7],[265,7],[335,7]]},"455":{"position":[[6253,8]]},"469":{"position":[[3625,9]]}}}],["experessions.eg",{"_index":666,"t":{"389":{"position":[[542,16]]}}}],["expir",{"_index":1336,"t":{"455":{"position":[[1249,6],[1265,6],[2120,6],[2136,6]]}}}],["explicit",{"_index":668,"t":{"389":{"position":[[583,8]]}}}],["explicitli",{"_index":1487,"t":{"463":{"position":[[453,10]]}}}],["exploit",{"_index":156,"t":{"330":{"position":[[574,7]]}}}],["express",{"_index":477,"t":{"371":{"position":[[440,11],[822,11]]},"387":{"position":[[425,10],[492,10]]}}}],["extern",{"_index":339,"t":{"345":{"position":[[985,8]]},"409":{"position":[[227,8],[549,8]]}}}],["extra",{"_index":1070,"t":{"427":{"position":[[439,5]]},"455":{"position":[[2705,5],[2776,5],[6837,5],[12916,6],[12928,5]]}}}],["extraaudi",{"_index":554,"t":{"373":{"position":[[1501,14],[1525,14]]}}}],["extract",{"_index":33,"t":{"324":{"position":[[367,10]]},"469":{"position":[[1960,7],[2082,7]]}}}],["facebook",{"_index":612,"t":{"377":{"position":[[165,9]]},"411":{"position":[[237,8]]}}}],["fail",{"_index":1399,"t":{"455":{"position":[[6100,4]]},"463":{"position":[[430,6]]}}}],["failur",{"_index":519,"t":{"373":{"position":[[209,8]]}}}],["fals",{"_index":320,"t":{"343":{"position":[[126,7]]},"361":{"position":[[476,5]]},"373":{"position":[[283,7],[403,6],[475,7],[793,7],[948,7]]},"389":{"position":[[1711,6]]},"455":{"position":[[2100,5],[2697,5],[3196,5],[3286,5],[5222,5],[6156,5],[6320,5],[7128,5],[7229,5],[7639,5],[10103,5],[10262,5],[11114,5],[11287,5],[11653,5],[11768,5],[11876,5],[12033,5],[12193,5],[12272,5],[12947,5],[13090,5],[13192,5],[13299,5],[13415,5]]}}}],["falseskip_provider_button",{"_index":1175,"t":{"433":{"position":[[4667,25]]}}}],["fastcgi_pass",{"_index":1551,"t":{"469":{"position":[[2642,13]]}}}],["fb",{"_index":1010,"t":{"419":{"position":[[13,2],[64,2]]}}}],["featur",{"_index":198,"t":{"334":{"position":[[50,9],[113,8]]},"345":{"position":[[114,8]]},"455":{"position":[[10095,7],[10254,7]]}}}],["field",{"_index":312,"t":{"343":{"position":[[23,5]]},"345":{"position":[[323,5]]},"347":{"position":[[23,5],[221,5]]},"349":{"position":[[23,5]]},"351":{"position":[[100,5]]},"355":{"position":[[23,5]]},"357":{"position":[[23,5]]},"359":{"position":[[23,5]]},"361":{"position":[[118,5]]},"363":{"position":[[116,5]]},"365":{"position":[[23,5]]},"367":{"position":[[23,5]]},"371":{"position":[[1087,5]]},"373":{"position":[[23,5]]},"375":{"position":[[79,5]]},"381":{"position":[[161,5]]},"383":{"position":[[85,5]]},"385":{"position":[[151,5]]},"387":{"position":[[297,5]]},"389":{"position":[[171,5]]},"391":{"position":[[95,5]]},"429":{"position":[[319,6]]},"433":{"position":[[3444,5]]},"439":{"position":[[135,6]]},"455":{"position":[[2826,7]]}}}],["file",{"_index":34,"t":{"324":{"position":[[382,4],[439,4],[667,5]]},"330":{"position":[[428,5]]},"334":{"position":[[525,4],[698,4]]},"336":{"position":[[52,4],[136,4]]},"338":{"position":[[362,5]]},"363":{"position":[[310,4]]},"367":{"position":[[174,4]]},"381":{"position":[[355,4]]},"385":{"position":[[254,5],[350,5]]},"413":{"position":[[1209,5],[2267,4],[2336,4],[2365,4]]},"415":{"position":[[1169,5]]},"433":{"position":[[3025,4],[4353,4]]},"435":{"position":[[2329,5],[2387,5],[2458,4],[2610,4]]},"439":{"position":[[552,5]]},"449":{"position":[[89,4],[248,4]]},"453":{"position":[[57,4],[242,4]]},"455":{"position":[[430,4],[474,4],[823,4],[839,4],[1022,4],[2440,4],[4598,4],[4655,5],[5191,5],[5254,4],[5356,5],[5479,5],[5539,5],[5631,4],[5821,4],[5857,4],[8035,4],[13585,4],[13617,4],[13920,4],[13952,4],[14126,7],[14151,5]]},"457":{"position":[[123,5],[138,4],[496,4],[527,7],[579,5],[721,5],[861,5],[1180,5]]},"459":{"position":[[353,4]]},"461":{"position":[[106,4],[165,4],[205,4]]},"467":{"position":[[465,11],[638,4],[658,4]]},"473":{"position":[[283,4]]},"475":{"position":[[2321,4]]}}}],["file/client_secret_fil",{"_index":272,"t":{"340":{"position":[[779,23]]}}}],["file/jwt_key_fil",{"_index":296,"t":{"340":{"position":[[1167,17]]}}}],["file/provider_ca_fil",{"_index":276,"t":{"340":{"position":[[868,22]]}}}],["file://$pwd/#/stat",{"_index":1125,"t":{"433":{"position":[[1311,21]]}}}],["file:///var/www/stat",{"_index":1458,"t":{"457":{"position":[[540,23]]}}}],["file:///var/www/static/#/stat",{"_index":1462,"t":{"457":{"position":[[890,32]]}}}],["file://host/pathif",{"_index":690,"t":{"389":{"position":[[1349,18]]}}}],["file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1234,"t":{"435":{"position":[[2781,41]]},"455":{"position":[[5942,42]]}}}],["file=/path/to/cert.key",{"_index":846,"t":{"407":{"position":[[107,23],[346,22]]}}}],["file=/path/to/cert.pem",{"_index":845,"t":{"407":{"position":[[70,22],[311,22]]}}}],["file=/path/to/fil",{"_index":1279,"t":{"445":{"position":[[132,18]]}}}],["filebas",{"_index":684,"t":{"389":{"position":[[1167,9]]}}}],["filecontain",{"_index":563,"t":{"375":{"position":[[416,14]]}}}],["filenam",{"_index":1387,"t":{"455":{"position":[[5238,8],[5373,9]]},"461":{"position":[[131,8]]}}}],["fill",{"_index":913,"t":{"413":{"position":[[366,4]]},"429":{"position":[[288,4]]},"433":{"position":[[2120,4],[2313,4]]},"439":{"position":[[39,4]]}}}],["filter",{"_index":1069,"t":{"427":{"position":[[420,10]]}}}],["find",{"_index":997,"t":{"415":{"position":[[2365,4]]},"417":{"position":[[512,4]]},"435":{"position":[[168,4]]}}}],["firewal",{"_index":1237,"t":{"435":{"position":[[3128,8]]}}}],["first",{"_index":1133,"t":{"433":{"position":[[1690,6]]},"435":{"position":[[758,6]]},"469":{"position":[[1836,5],[2121,5]]}}}],["fix",{"_index":159,"t":{"330":{"position":[[632,3]]},"332":{"position":[[55,5],[244,5],[381,5],[428,3],[472,3],[585,5],[645,3]]},"369":{"position":[[501,5]]},"371":{"position":[[104,5],[268,5]]}}}],["flag",{"_index":221,"t":{"334":{"position":[[534,6]]},"336":{"position":[[166,5],[207,5]]},"338":{"position":[[98,4]]},"340":{"position":[[1381,5]]},"397":{"position":[[1136,5],[1167,5],[1380,5],[1404,5],[1467,5]]},"413":{"position":[[1872,5],[2094,5],[2140,4],[2405,5]]},"415":{"position":[[2084,5]]},"421":{"position":[[621,5],[767,4]]},"423":{"position":[[1122,5]]},"455":{"position":[[1345,4],[1871,4]]},"459":{"position":[[412,4],[476,4]]},"461":{"position":[[830,4]]},"463":{"position":[[626,5]]},"465":{"position":[[362,5]]},"467":{"position":[[397,5]]},"469":{"position":[[1093,4],[1688,5]]}}}],["flags/opt",{"_index":243,"t":{"340":{"position":[[14,13]]}}}],["flaw",{"_index":1445,"t":{"455":{"position":[[15216,6]]}}}],["flight",{"_index":184,"t":{"332":{"position":[[541,6]]}}}],["flow",{"_index":532,"t":{"373":{"position":[[625,5]]}}}],["flush",{"_index":245,"t":{"340":{"position":[[127,5]]},"389":{"position":[[2143,8]]},"455":{"position":[[3059,5],[3098,8]]}}}],["flushinterv",{"_index":710,"t":{"389":{"position":[[2084,13],[2107,13]]}}}],["follow",{"_index":242,"t":{"340":{"position":[[4,9]]},"395":{"position":[[256,9]]},"397":{"position":[[246,10]]},"399":{"position":[[38,9]]},"403":{"position":[[107,9]]},"409":{"position":[[652,8]]},"413":{"position":[[1335,6],[1520,9],[1668,6]]},"417":{"position":[[210,6]]},"421":{"position":[[611,9],[757,9],[1733,9]]},"423":{"position":[[404,9]]},"425":{"position":[[473,9]]},"427":{"position":[[201,6],[485,9],[584,6],[895,9],[1090,9]]},"431":{"position":[[52,6]]},"433":{"position":[[409,9],[939,9],[1585,9],[3039,10],[4715,9]]},"435":{"position":[[1530,9]]},"439":{"position":[[397,9]]},"441":{"position":[[334,9]]},"443":{"position":[[213,9]]},"447":{"position":[[0,6]]},"463":{"position":[[668,8]]},"465":{"position":[[404,8]]},"467":{"position":[[439,8]]},"469":{"position":[[2788,9]]},"475":{"position":[[165,9]]}}}],["foo",{"_index":667,"t":{"389":{"position":[[560,7],[597,4]]}}}],["foo/$1",{"_index":678,"t":{"389":{"position":[[988,7]]}}}],["foo/abc/123",{"_index":681,"t":{"389":{"position":[[1037,12]]}}}],["footer",{"_index":1370,"t":{"455":{"position":[[3374,6],[3402,6],[3444,7]]}}}],["forc",{"_index":753,"t":{"395":{"position":[[784,5]]},"455":{"position":[[253,7],[1084,5],[1584,5],[3156,5],[3204,5],[3227,5]]}}}],["forcestshead",{"_index":1593,"t":{"473":{"position":[[1023,15]]},"475":{"position":[[1781,15]]}}}],["forego",{"_index":176,"t":{"332":{"position":[[391,6]]}}}],["form",{"_index":496,"t":{"371":{"position":[[852,4]]},"437":{"position":[[318,4]]},"455":{"position":[[2376,4],[2420,4]]}}}],["format",{"_index":213,"t":{"334":{"position":[[390,7],[469,6],[912,7]]},"336":{"position":[[70,6]]},"338":{"position":[[148,7],[285,6]]},"367":{"position":[[91,6],[186,6]]},"371":{"position":[[965,6]]},"399":{"position":[[957,7]]},"421":{"position":[[1137,9]]},"435":{"position":[[1028,6],[2532,6]]},"455":{"position":[[187,7],[329,6],[3692,9],[4199,9],[5692,6],[5869,6],[10784,6],[12524,7],[13502,6]]},"461":{"position":[[602,6],[641,7]]},"463":{"position":[[173,7],[556,6],[619,6],[644,6]]},"465":{"position":[[54,7],[289,6],[355,6],[380,6]]},"467":{"position":[[112,7],[227,6],[323,6],[390,6],[415,6]]}}}],["forward",{"_index":102,"t":{"326":{"position":[[599,9]]},"334":{"position":[[404,7]]},"423":{"position":[[1291,9]]},"455":{"position":[[6998,9],[7282,9],[7300,9],[7322,9],[7747,9],[7765,9],[7785,9],[7807,9],[8970,9],[11046,9],[12657,9]]},"457":{"position":[[279,7],[462,9]]},"475":{"position":[[339,9]]}}}],["forwardauth",{"_index":1574,"t":{"473":{"position":[[15,11],[1137,12]]},"475":{"position":[[96,11],[1904,12],[2069,12]]}}}],["found",{"_index":129,"t":{"330":{"position":[[29,5],[243,5]]},"385":{"position":[[718,5]]},"407":{"position":[[1053,5]]},"433":{"position":[[339,5]]},"455":{"position":[[13871,5]]}}}],["fraction",{"_index":395,"t":{"353":{"position":[[189,8]]}}}],["fragment",{"_index":1461,"t":{"457":{"position":[[759,8],[808,8]]}}}],["framedeni",{"_index":1597,"t":{"473":{"position":[[1109,10]]},"475":{"position":[[1867,10]]}}}],["freeform",{"_index":920,"t":{"413":{"position":[[571,9]]}}}],["fromenv",{"_index":444,"t":{"363":{"position":[[197,7],[212,7]]},"381":{"position":[[242,7],[257,7]]}}}],["fromfil",{"_index":445,"t":{"363":{"position":[[265,8],[281,8]]},"381":{"position":[[310,8],[326,8]]}}}],["full",{"_index":116,"t":{"328":{"position":[[82,4]]},"463":{"position":[[1362,4]]},"465":{"position":[[1434,4]]}}}],["function",{"_index":1601,"t":{"475":{"position":[[20,13]]}}}],["further",{"_index":625,"t":{"383":{"position":[[446,7]]}}}],["futur",{"_index":537,"t":{"373":{"position":[[757,6]]},"413":{"position":[[1248,6]]},"433":{"position":[[4219,6]]}}}],["gap",{"_index":1419,"t":{"455":{"position":[[12062,3]]}}}],["gener",{"_index":231,"t":{"336":{"position":[[36,8]]},"433":{"position":[[2768,7],[3571,8]]},"435":{"position":[[1035,9]]},"443":{"position":[[381,9],[439,9]]},"451":{"position":[[3,8]]}}}],["get",{"_index":1106,"t":{"433":{"position":[[477,7]]}}}],["gitea",{"_index":899,"t":{"411":{"position":[[355,5]]},"443":{"position":[[41,5],[394,5],[452,5],[489,5],[554,5],[624,5]]}}}],["github",{"_index":136,"t":{"330":{"position":[[136,7],[729,6]]},"332":{"position":[[7,6],[109,6]]},"340":{"position":[[1302,7]]},"377":{"position":[[175,7]]},"411":{"position":[[72,6],[246,6]]},"421":{"position":[[172,6],[429,6],[628,6],[788,6],[801,6],[1069,6],[1396,6],[1612,6],[1692,6],[1801,6],[1871,6],[1946,6]]},"455":{"position":[[3454,6],[3522,6],[3621,6],[3720,6],[3841,6]]}}}],["github.com/dexidp/dex",{"_index":1105,"t":{"433":{"position":[[447,21]]}}}],["github.com/oauth2",{"_index":12,"t":{"324":{"position":[[101,17]]}}}],["githubc",{"_index":575,"t":{"375":{"position":[[921,7]]}}}],["githubconfig",{"_index":573,"t":{"375":{"position":[[852,12],[879,12]]}}}],["githubopt",{"_index":574,"t":{"375":{"position":[[865,13]]}}}],["gitlab",{"_index":304,"t":{"340":{"position":[[1310,7]]},"375":{"position":[[1008,6]]},"377":{"position":[[183,7]]},"411":{"position":[[262,6]]},"427":{"position":[[43,6],[71,6],[193,7],[739,6],[915,6],[1060,7],[1149,6],[1182,6]]},"455":{"position":[[3979,6],[4087,6],[4278,6],[15431,7]]}}}],["gitlab.com",{"_index":1066,"t":{"427":{"position":[[166,10]]}}}],["gitlab.domain.tld",{"_index":1084,"t":{"427":{"position":[[1276,19]]}}}],["gitlabconfig",{"_index":576,"t":{"375":{"position":[[939,12],[966,12]]}}}],["gitlabopt",{"_index":577,"t":{"375":{"position":[[952,13]]}}}],["give",{"_index":648,"t":{"387":{"position":[[409,5]]},"413":{"position":[[1485,4]]}}}],["given",{"_index":646,"t":{"387":{"position":[[196,5]]},"455":{"position":[[2545,5],[4177,5],[4478,5],[8266,5],[12405,5],[13754,5],[14421,5],[14520,5],[14950,5]]}}}],["global",{"_index":1049,"t":{"423":{"position":[[1104,7]]}}}],["gmail",{"_index":940,"t":{"413":{"position":[[1823,5]]}}}],["go",{"_index":11,"t":{"324":{"position":[[94,2]]},"334":{"position":[[398,5]]},"375":{"position":[[1805,2]]},"385":{"position":[[655,2]]},"407":{"position":[[947,2]]},"415":{"position":[[20,2],[1072,2]]},"433":{"position":[[440,2]]},"435":{"position":[[2885,2]]},"455":{"position":[[516,2],[8162,2],[13807,2]]}}}],["googl",{"_index":305,"t":{"340":{"position":[[1318,6]]},"359":{"position":[[108,6],[157,6]]},"375":{"position":[[1094,6],[1530,8]]},"377":{"position":[[191,7]]},"409":{"position":[[73,6],[269,6]]},"411":{"position":[[63,8],[211,6]]},"413":{"position":[[4,7],[1036,6],[1853,6],[2081,6],[2377,6]]},"455":{"position":[[4328,6],[4358,6],[4402,6],[4457,6],[4503,6],[8014,6],[15439,6]]}}}],["googleconfig",{"_index":578,"t":{"375":{"position":[[1025,12],[1052,12]]}}}],["googleopt",{"_index":579,"t":{"375":{"position":[[1038,13]]}}}],["gopath/bin",{"_index":16,"t":{"324":{"position":[[170,11]]}}}],["gopath/github.com/dexidp/dex",{"_index":1116,"t":{"433":{"position":[[812,30]]}}}],["govern",{"_index":1178,"t":{"435":{"position":[[41,11],[69,10]]}}}],["grab",{"_index":1240,"t":{"435":{"position":[[3360,4]]}}}],["grant",{"_index":964,"t":{"415":{"position":[[690,5]]},"433":{"position":[[2792,5],[4095,5]]}}}],["graph",{"_index":962,"t":{"415":{"position":[[567,6]]}}}],["graphdefault",{"_index":367,"t":{"347":{"position":[[283,12]]}}}],["graphgroupfield",{"_index":364,"t":{"347":{"position":[[161,15],[184,15]]}}}],["group",{"_index":365,"t":{"347":{"position":[[215,5],[256,6]]},"357":{"position":[[46,5],[61,5],[107,5]]},"359":{"position":[[46,5],[61,6],[115,5]]},"365":{"position":[[46,6],[62,5],[118,5]]},"373":{"position":[[1246,8]]},"375":{"position":[[2456,5]]},"403":{"position":[[200,6]]},"413":{"position":[[1043,6],[2049,5],[2088,5],[2160,6],[2221,7],[2471,5]]},"415":{"position":[[434,5],[625,5]]},"417":{"position":[[86,5]]},"423":{"position":[[332,6],[372,9],[1019,5],[1070,5],[1098,5],[1157,6],[1209,6],[1301,6],[1348,6],[1408,5],[1470,5],[1532,6]]},"425":{"position":[[274,6],[314,9]]},"427":{"position":[[857,5],[995,6]]},"433":{"position":[[2958,6],[4067,5]]},"455":{"position":[[3986,5],[4049,6],[4409,5],[4464,5],[4740,5],[4764,6],[6685,6],[6740,6],[6747,8],[7775,7],[11438,7],[14352,5],[14407,5]]}}}],["group,otherwis",{"_index":591,"t":{"375":{"position":[[1514,15]]}}}],["group.read.al",{"_index":963,"t":{"415":{"position":[[642,15]]}}}],["group/allowed_group",{"_index":292,"t":{"340":{"position":[[1095,20]]}}}],["group=\"mygroup,myothergroup",{"_index":1079,"t":{"427":{"position":[[922,29]]}}}],["group=/oauth2/callback",{"_index":1262,"t":{"439":{"position":[[611,24]]}}}],["headers.default",{"_index":436,"t":{"361":{"position":[[456,16]]}}}],["headers/pass_user_head",{"_index":257,"t":{"340":{"position":[[390,25]]}}}],["headers/skip_auth_strip_head",{"_index":267,"t":{"340":{"position":[[680,31]]}}}],["headershould",{"_index":431,"t":{"361":{"position":[[346,12]]}}}],["headervalu",{"_index":371,"t":{"351":{"position":[[13,12]]},"361":{"position":[[540,13]]},"363":{"position":[[21,11]]},"381":{"position":[[26,12]]}}}],["health",{"_index":795,"t":{"399":{"position":[[384,6]]},"455":{"position":[[8392,6],[8479,6]]}}}],["helm",{"_index":31,"t":{"324":{"position":[[322,6]]}}}],["here",{"_index":1184,"t":{"435":{"position":[[344,5]]}}}],["hex",{"_index":763,"t":{"397":{"position":[[406,3]]}}}],["histor",{"_index":735,"t":{"395":{"position":[[103,13]]}}}],["hit",{"_index":915,"t":{"413":{"position":[[408,3]]},"415":{"position":[[658,3],[1276,7]]}}}],["hold",{"_index":558,"t":{"375":{"position":[[33,5],[546,5],[631,5],[710,5],[803,5],[892,5],[979,5],[1065,5],[1145,5],[1275,5]]}}}],["homepag",{"_index":1254,"t":{"439":{"position":[[57,9]]}}}],["host",{"_index":247,"t":{"340":{"position":[[162,4]]},"389":{"position":[[2301,4]]},"409":{"position":[[1006,4],[1011,6]]},"427":{"position":[[185,7],[1053,6],[1175,6]]},"439":{"position":[[606,4]]},"443":{"position":[[47,4],[495,4],[560,4],[630,4]]},"455":{"position":[[1168,4],[7652,4],[7686,4]]},"463":{"position":[[959,4],[992,4]]},"465":{"position":[[475,9],[814,4],[847,4]]},"469":{"position":[[370,4],[375,6],[708,4],[713,6]]}}}],["host(`a",{"_index":1578,"t":{"473":{"position":[[342,8],[537,8]]},"475":{"position":[[432,8],[726,8],[1013,8]]}}}],["host(`oauth.example.com",{"_index":1609,"t":{"475":{"position":[[1255,26]]}}}],["host>/api/v3",{"_index":1031,"t":{"421":{"position":[[1953,13]]}}}],["host>/auth/realms//login/oauth/access_token",{"_index":1030,"t":{"421":{"position":[[1878,31]]}}}],["host>/login/oauth/author",{"_index":1029,"t":{"421":{"position":[[1808,28]]}}}],["host>/oauth2/callback",{"_index":1270,"t":{"443":{"position":[[144,21],[298,22]]}}}],["host_head",{"_index":1509,"t":{"465":{"position":[[143,13]]}}}],["hostnam",{"_index":1238,"t":{"435":{"position":[[3220,9]]},"439":{"position":[[228,8]]},"441":{"position":[[131,8]]}}}],["hosts.thi",{"_index":696,"t":{"389":{"position":[[1574,10]]}}}],["hour",{"_index":949,"t":{"413":{"position":[[2570,4]]}}}],["hst",{"_index":876,"t":{"409":{"position":[[737,5]]}}}],["htaccess",{"_index":1405,"t":{"455":{"position":[[7547,8]]}}}],["html",{"_index":1354,"t":{"455":{"position":[[2218,4],[3315,6],[3395,6]]}}}],["htpasswd",{"_index":1357,"t":{"455":{"position":[[2367,8],[2431,8],[4589,8],[4646,8],[4690,8],[4726,8],[4797,8]]}}}],["http",{"_index":349,"t":{"345":{"position":[[1307,4],[1316,5],[1615,4],[1624,5]]},"389":{"position":[[1568,5]]},"393":{"position":[[70,4]]},"409":{"position":[[307,4],[340,4]]},"443":{"position":[[26,9]]},"455":{"position":[[107,4],[656,4],[1851,6],[3162,5],[3181,5],[3256,4],[4814,4],[4891,4],[4994,5],[5056,5],[7263,4],[11800,4],[13283,5],[13399,5],[14088,4],[15099,4],[15272,4],[15728,5],[15742,6]]},"457":{"position":[[151,4],[160,5]]},"461":{"position":[[439,4]]},"465":{"position":[[0,4],[1257,4],[1404,4]]},"467":{"position":[[713,5]]},"473":{"position":[[310,5]]},"475":{"position":[[392,5]]}}}],["http(",{"_index":345,"t":{"345":{"position":[[1239,7],[1561,7]]},"383":{"position":[[70,7]]},"389":{"position":[[1147,7]]},"457":{"position":[[91,7]]}}}],["http/1.0",{"_index":1495,"t":{"463":{"position":[[1080,8]]},"465":{"position":[[869,8]]}}}],["http/1.1",{"_index":1511,"t":{"465":{"position":[[186,8]]}}}],["http/1.1x",{"_index":821,"t":{"401":{"position":[[623,9]]}}}],["http://0.0.0.0:8080\"]email_domain",{"_index":1171,"t":{"433":{"position":[[4524,35]]}}}],["http://127.0.0.1:4180",{"_index":888,"t":{"409":{"position":[[966,22]]},"433":{"position":[[1360,21]]},"469":{"position":[[330,22],[668,22]]}}}],["http://127.0.0.1:4180/oauth2/callback",{"_index":1119,"t":{"433":{"position":[[1067,37]]},"435":{"position":[[3623,37]]}}}],["http://127.0.0.1:4180/oauth2/callback'nam",{"_index":1113,"t":{"433":{"position":[[722,44]]}}}],["http://127.0.0.1:4180/static",{"_index":1127,"t":{"433":{"position":[[1385,28]]}}}],["http://127.0.0.1:5556",{"_index":1241,"t":{"435":{"position":[[3678,21]]}}}],["http://127.0.0.1:5556/author",{"_index":1242,"t":{"435":{"position":[[3732,31]]}}}],["http://127.0.0.1:5556/dex",{"_index":1120,"t":{"433":{"position":[[1121,25]]}}}],["http://127.0.0.1:5556/key",{"_index":1244,"t":{"435":{"position":[[3819,26]]}}}],["http://127.0.0.1:5556/token",{"_index":1243,"t":{"435":{"position":[[3776,27]]}}}],["http://127.0.0.1:8080",{"_index":1455,"t":{"457":{"position":[[218,22]]}}}],["http://127.0.0.1:8080/some/path",{"_index":1456,"t":{"457":{"position":[[361,32]]}}}],["http://172.16.0.1:4180",{"_index":1587,"t":{"473":{"position":[[876,22]]},"475":{"position":[[1634,22]]}}}],["http://172.16.0.2:7555",{"_index":1586,"t":{"473":{"position":[[808,22]]},"475":{"position":[[1494,22]]}}}],["http://172.16.0.3:7555",{"_index":1610,"t":{"475":{"position":[[1566,22]]}}}],["http://[::1]:4180",{"_index":1381,"t":{"455":{"position":[[4957,17]]}}}],["http://[oauth2",{"_index":1459,"t":{"457":{"position":[[608,14],[963,14]]}}}],["http://]:::/sign_in",{"_index":1407,"t":{"455":{"position":[[8686,18]]}}}],["oauth2_proxy_",{"_index":1465,"t":{"459":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":1469,"t":{"459":{"position":[[425,27]]}}}],["oauth2_proxy_email_domain",{"_index":1470,"t":{"459":{"position":[[489,27]]}}}],["oauth2_proxy_jwt_key",{"_index":1210,"t":{"435":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1233,"t":{"435":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":1340,"t":{"455":{"position":[[1408,11]]}}}],["obtain",{"_index":1447,"t":{"455":{"position":[[15239,9]]}}}],["occur",{"_index":1525,"t":{"467":{"position":[[187,5]]}}}],["oidc",{"_index":301,"t":{"340":{"position":[[1278,5]]},"365":{"position":[[229,4]]},"373":{"position":[[442,4],[883,4]]},"375":{"position":[[1174,4],[1208,4]]},"377":{"position":[[218,5],[259,5]]},"401":{"position":[[481,4],[667,4],[780,4],[889,4]]},"415":{"position":[[1560,4],[1868,4]]},"423":{"position":[[60,4]]},"425":{"position":[[527,4],[653,4]]},"427":{"position":[[1126,4]]},"433":{"position":[[244,6],[374,4],[965,4],[996,4],[1105,4],[1549,4]]},"435":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"455":{"position":[[6061,4],[6173,4],[6218,4],[6337,4],[6377,4],[6412,4],[6503,4],[6524,4],[6574,4],[6603,4],[6633,4],[6680,4],[6711,4],[6758,4],[6791,4],[6832,4],[7172,4],[7926,4],[12960,4],[12987,4],[13044,4],[14572,4],[15450,4]]}}}],["oidc\"redirect_url",{"_index":1141,"t":{"433":{"position":[[3061,18],[4388,18]]}}}],["oidc_issuer_url",{"_index":991,"t":{"415":{"position":[[2036,16]]},"433":{"position":[[3372,15]]}}}],["oidcconfig",{"_index":580,"t":{"375":{"position":[[1111,10],[1134,10]]}}}],["oidcopt",{"_index":581,"t":{"375":{"position":[[1122,11]]}}}],["ok",{"_index":47,"t":{"324":{"position":[[560,2]]},"399":{"position":[[227,2],[340,2]]}}}],["okta",{"_index":1103,"t":{"433":{"position":[[315,5],[1526,5],[1567,5],[1612,4],[2465,4],[3708,4],[3834,4],[4309,4],[4482,4]]}}}],["old",{"_index":1392,"t":{"455":{"position":[[5471,3],[5531,3]]}}}],["omit",{"_index":1452,"t":{"455":{"position":[[15770,4]]}}}],["on",{"_index":92,"t":{"326":{"position":[[354,3]]},"330":{"position":[[674,4]]},"371":{"position":[[95,3],[259,3],[614,3],[1458,3]]},"381":{"position":[[101,3]]},"393":{"position":[[187,3]]},"435":{"position":[[2206,3]]},"441":{"position":[[683,3]]},"445":{"position":[[156,3]]},"451":{"position":[[39,3]]},"455":{"position":[[479,4],[8959,4],[12905,3]]},"463":{"position":[[313,3]]}}}],["onc",{"_index":177,"t":{"332":{"position":[[421,4]]},"413":{"position":[[2562,4]]},"435":{"position":[[2843,4]]}}}],["onlyvalu",{"_index":509,"t":{"371":{"position":[[1436,10]]}}}],["open",{"_index":133,"t":{"330":{"position":[[113,4]]},"413":{"position":[[464,4]]},"417":{"position":[[0,4]]},"433":{"position":[[106,4]]}}}],["openid",{"_index":512,"t":{"373":{"position":[[80,6],[986,6]]},"411":{"position":[[297,6],[549,6]]},"425":{"position":[[89,7]]},"427":{"position":[[276,7]]},"433":{"position":[[0,6],[220,6],[2628,6]]},"435":{"position":[[862,6],[906,6]]},"455":{"position":[[6439,6]]}}}],["openssl",{"_index":1195,"t":{"435":{"position":[[1104,7]]},"451":{"position":[[78,7],[288,7]]}}}],["oppos",{"_index":1083,"t":{"427":{"position":[[1240,7]]}}}],["option",{"_index":57,"t":{"324":{"position":[[686,8]]},"334":{"position":[[164,7],[317,8],[373,7]]},"336":{"position":[[218,7],[263,7]]},"338":{"position":[[37,7],[256,7],[379,7],[437,7]]},"340":{"position":[[1233,8],[1251,6],[1369,7],[1480,7]]},"345":{"position":[[53,8],[77,7],[222,7]]},"351":{"position":[[246,8]]},"353":{"position":[[180,8]]},"361":{"position":[[416,6]]},"363":{"position":[[467,8]]},"369":{"position":[[186,6],[316,7]]},"371":{"position":[[1187,10],[1316,10]]},"377":{"position":[[101,7],[115,7]]},"385":{"position":[[102,8]]},"389":{"position":[[1585,6],[2039,6]]},"397":{"position":[[1575,6],[1670,7]]},"401":{"position":[[985,6]]},"413":{"position":[[1066,11]]},"421":{"position":[[276,8],[362,7]]},"423":{"position":[[1050,8]]},"425":{"position":[[754,9],[833,9]]},"427":{"position":[[905,7]]},"433":{"position":[[1721,10],[2023,6],[2452,8]]},"435":{"position":[[1540,8],[2132,7],[3495,7]]},"439":{"position":[[407,8],[530,7],[706,7]]},"441":{"position":[[344,8],[584,7]]},"443":{"position":[[223,7]]},"449":{"position":[[48,8],[148,7]]},"453":{"position":[[169,6]]},"455":{"position":[[0,6],[52,9],[1057,8],[1560,8],[1791,11],[10360,6],[10455,7],[12255,7],[15012,10],[15315,6],[15492,7],[15937,7]]},"457":{"position":[[61,6]]},"471":{"position":[[5,6],[37,6]]},"475":{"position":[[175,7],[2326,6]]}}}],["order",{"_index":1284,"t":{"449":{"position":[[109,5]]}}}],["org",{"_index":406,"t":{"355":{"position":[[46,3],[57,3],[478,3]]},"421":{"position":[[534,3],[635,7],[795,4],[1559,3]]},"455":{"position":[[3461,3],[3947,3]]}}}],["organ",{"_index":1016,"t":{"421":{"position":[[259,12],[580,12],[713,12]]}}}],["organis",{"_index":407,"t":{"355":{"position":[[101,12]]},"421":{"position":[[678,12]]},"455":{"position":[[3507,12]]}}}],["organization'",{"_index":480,"t":{"371":{"position":[[514,14]]}}}],["organizationdefault",{"_index":470,"t":{"371":{"position":[[6,20]]}}}],["orgname/repo",{"_index":1023,"t":{"421":{"position":[[1150,12]]},"455":{"position":[[3705,12]]}}}],["orgname/repo=accesslevel",{"_index":1371,"t":{"455":{"position":[[4212,25]]}}}],["origin",{"_index":922,"t":{"413":{"position":[[632,7]]},"433":{"position":[[146,10]]}}}],["os,base64",{"_index":1291,"t":{"451":{"position":[[125,10]]}}}],["otherwis",{"_index":469,"t":{"369":{"position":[[751,10]]},"373":{"position":[[631,10]]},"391":{"position":[[232,9]]},"401":{"position":[[992,9]]},"433":{"position":[[1903,10]]}}}],["out",{"_index":801,"t":{"399":{"position":[[588,3]]},"401":{"position":[[17,4],[325,3]]},"433":{"position":[[2125,3],[2318,3]]},"435":{"position":[[1156,3]]}}}],["output",{"_index":1471,"t":{"461":{"position":[[34,6],[81,6]]},"463":{"position":[[142,6]]},"465":{"position":[[23,6]]},"467":{"position":[[80,6]]}}}],["outsid",{"_index":1468,"t":{"459":{"position":[[326,7]]},"467":{"position":[[193,7]]}}}],["overrid",{"_index":645,"t":{"387":{"position":[[178,9]]},"431":{"position":[[183,8]]},"455":{"position":[[8228,8],[9522,8]]}}}],["overridden",{"_index":462,"t":{"369":{"position":[[371,10]]},"371":{"position":[[245,10],[388,11],[1279,11]]}}}],["override_speci",{"_index":1317,"t":{"451":{"position":[[711,16]]}}}],["overwrit",{"_index":1285,"t":{"449":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":1281,"t":{"447":{"position":[[37,7]]}}}],["pad",{"_index":765,"t":{"397":{"position":[[479,9]]}}}],["page",{"_index":194,"t":{"334":{"position":[[12,4],[143,4],[190,4],[331,4]]},"375":{"position":[[1654,5]]},"399":{"position":[[553,5],[592,4]]},"401":{"position":[[329,4]]},"415":{"position":[[506,4],[1091,4],[1205,4]]},"455":{"position":[[2311,4],[3267,5],[8301,4],[11950,5],[13142,4]]}}}],["pair",{"_index":766,"t":{"397":{"position":[[533,4]]},"455":{"position":[[2834,5]]}}}],["pane",{"_index":908,"t":{"413":{"position":[[237,5],[284,5],[325,5],[432,5]]}}}],["parallel",{"_index":1351,"t":{"455":{"position":[[2081,8]]}}}],["paramet",{"_index":317,"t":{"343":{"position":[[83,9]]},"369":{"position":[[81,9],[280,10],[347,9],[476,9],[654,9]]},"371":{"position":[[36,9],[198,9],[366,9],[1159,10]]},"375":{"position":[[1965,10]]},"387":{"position":[[82,10],[202,9],[600,9]]},"401":{"position":[[364,10]]},"403":{"position":[[123,10],[140,11]]},"457":{"position":[[258,10],[1096,10],[1121,9]]},"469":{"position":[[3773,10]]}}}],["part",{"_index":322,"t":{"345":{"position":[[149,4]]},"469":{"position":[[1796,6],[2177,4],[2455,4]]}}}],["particularli",{"_index":1467,"t":{"459":{"position":[[286,12]]}}}],["pass",{"_index":66,"t":{"326":{"position":[[12,7]]},"340":{"position":[[157,4],[312,4],[344,4],[380,4],[416,4]]},"369":{"position":[[103,6],[253,6],[560,6],[677,6]]},"371":{"position":[[58,6],[216,6]]},"373":{"position":[[1593,4]]},"375":{"position":[[1988,6]]},"387":{"position":[[93,6],[212,6]]},"391":{"position":[[154,4]]},"393":{"position":[[276,6]]},"413":{"position":[[2108,4]]},"415":{"position":[[2410,6]]},"417":{"position":[[557,6]]},"433":{"position":[[1795,6]]},"435":{"position":[[2283,4]]},"439":{"position":[[388,4]]},"441":{"position":[[325,4]]},"443":{"position":[[204,4]]},"455":{"position":[[644,7],[6908,4],[6933,4],[6956,4],[7136,4],[7167,4],[7237,4],[7258,4],[7461,7],[7599,4],[7621,4],[7647,4],[7669,4],[7717,4],[7740,4],[11576,4]]},"457":{"position":[[71,4]]},"469":{"position":[[990,4],[1301,4],[1330,4]]}}}],["passhosthead",{"_index":716,"t":{"389":{"position":[[2235,14],[2255,14]]}}}],["password",{"_index":387,"t":{"351":{"position":[[529,8]]},"363":{"position":[[750,8]]},"455":{"position":[[603,8],[623,8],[2405,8],[9444,8],[9466,9],[9535,8],[9591,8],[9622,9],[9682,9],[9712,8]]}}}],["password/basic_auth_password",{"_index":265,"t":{"340":{"position":[[635,28]]}}}],["patch",{"_index":188,"t":{"332":{"position":[[601,7]]}}}],["path",{"_index":232,"t":{"336":{"position":[[123,4]]},"345":{"position":[[536,4]]},"359":{"position":[[251,4]]},"363":{"position":[[300,4]]},"367":{"position":[[150,4]]},"375":{"position":[[1698,5]]},"381":{"position":[[345,4]]},"389":{"position":[[140,4],[165,5],[296,4],[308,4],[407,5],[592,4],[622,4],[671,4],[721,4],[824,4],[877,4],[949,4],[1199,5],[1378,4]]},"391":{"position":[[171,4],[397,4],[422,5]]},"399":{"position":[[279,6]]},"413":{"position":[[2353,4]]},"455":{"position":[[1007,4],[1545,4],[1576,4],[2203,4],[2262,4],[2947,4],[2983,5],[3041,5],[4542,4],[5833,4],[8054,5],[8335,4],[8636,4],[12380,5],[12518,5],[13597,4],[13932,4],[14134,5],[14228,4]]},"457":{"position":[[501,5],[703,4],[852,4],[1256,4]]},"461":{"position":[[854,4],[880,6]]},"465":{"position":[[177,8],[1166,4]]}}}],["path.eg",{"_index":686,"t":{"389":{"position":[[1257,8]]}}}],["path/to/cert.key",{"_index":882,"t":{"409":{"position":[[869,18]]}}}],["path/to/cert.pem",{"_index":880,"t":{"409":{"position":[[830,18]]}}}],["path/to/existing/config.cfg",{"_index":236,"t":{"338":{"position":[[204,29],[558,29]]}}}],["path/to/new/config.yaml",{"_index":241,"t":{"338":{"position":[[523,25]]}}}],["path/to/sit",{"_index":1550,"t":{"469":{"position":[[2623,15]]}}}],["path_regex",{"_index":1325,"t":{"455":{"position":[[195,10],[12590,10],[12604,12]]}}}],["pathprefix",{"_index":1604,"t":{"475":{"position":[[491,16],[1285,16]]}}}],["pathprefix(`/no",{"_index":1606,"t":{"475":{"position":[[760,15]]}}}],["pathprefix(`/oauth2",{"_index":1584,"t":{"473":{"position":[[592,23]]},"475":{"position":[[1072,23]]}}}],["pattern",{"_index":483,"t":{"371":{"position":[[561,8],[978,8]]},"387":{"position":[[259,7],[379,7],[396,7]]},"389":{"position":[[449,7]]}}}],["pem",{"_index":450,"t":{"367":{"position":[[87,3],[182,3]]},"435":{"position":[[1023,4],[2383,3],[2528,3]]},"455":{"position":[[5688,3],[5865,3]]}}}],["per",{"_index":1280,"t":{"445":{"position":[[166,3]]},"455":{"position":[[484,3],[1987,3],[2041,3]]}}}],["perform",{"_index":1104,"t":{"433":{"position":[[397,7],[1573,7]]}}}],["period",{"_index":391,"t":{"353":{"position":[[81,6]]},"389":{"position":[[2128,6]]},"455":{"position":[[3083,6]]}}}],["permiss",{"_index":946,"t":{"413":{"position":[[2243,11]]},"415":{"position":[[445,11],[494,11],[538,11],[598,12],[666,11],[775,10],[2222,11]]},"441":{"position":[[176,11]]}}}],["pick",{"_index":953,"t":{"415":{"position":[[144,4]]},"433":{"position":[[2235,4],[2660,4]]}}}],["pin",{"_index":875,"t":{"409":{"position":[[713,3]]}}}],["ping",{"_index":794,"t":{"399":{"position":[[318,5]]},"455":{"position":[[8330,4],[8351,4],[8406,7],[8416,4],[12130,4],[12179,4]]},"461":{"position":[[716,5],[743,4],[791,4],[849,4]]}}}],["ping,/path2",{"_index":1365,"t":{"455":{"position":[[3019,14]]}}}],["pkce",{"_index":1329,"t":{"455":{"position":[[904,4]]}}}],["plain",{"_index":1330,"t":{"455":{"position":[[959,7]]},"469":{"position":[[2894,5]]}}}],["plan",{"_index":974,"t":{"415":{"position":[[1030,8]]}}}],["platform",{"_index":863,"t":{"409":{"position":[[86,8],[276,8]]},"415":{"position":[[270,8],[1660,8]]},"433":{"position":[[2603,8]]}}}],["pleas",{"_index":132,"t":{"330":{"position":[[99,6],[144,6],[346,6],[434,6]]},"334":{"position":[[260,6],[835,6]]},"411":{"position":[[430,6]]}}}],["plural",{"_index":1319,"t":{"453":{"position":[[186,6]]},"459":{"position":[[257,6]]}}}],["poc",{"_index":1343,"t":{"455":{"position":[[1607,6]]}}}],["point",{"_index":1086,"t":{"427":{"position":[[1349,8]]},"475":{"position":[[119,8]]}}}],["polici",{"_index":970,"t":{"415":{"position":[[884,8]]},"433":{"position":[[2351,8]]}}}],["popul",{"_index":1053,"t":{"423":{"position":[[1276,8]]}}}],["port",{"_index":832,"t":{"401":{"position":[[1075,4]]},"409":{"position":[[390,4],[460,4]]},"433":{"position":[[584,5]]},"455":{"position":[[15634,5],[15693,4],[15806,5],[15877,5]]}}}],["possibl",{"_index":123,"t":{"328":{"position":[[165,9]]},"330":{"position":[[467,9]]},"353":{"position":[[125,8]]},"423":{"position":[[82,9]]},"427":{"position":[[877,8]]},"455":{"position":[[2064,8]]}}}],["post",{"_index":137,"t":{"330":{"position":[[158,4]]}}}],["potenti",{"_index":158,"t":{"330":{"position":[[622,9]]},"389":{"position":[[1619,9]]}}}],["powershel",{"_index":1289,"t":{"451":{"position":[[86,10]]}}}],["pr",{"_index":135,"t":{"330":{"position":[[130,2]]},"332":{"position":[[373,3]]}}}],["prebuilt",{"_index":3,"t":{"324":{"position":[[34,8],[195,8],[329,8]]}}}],["preced",{"_index":661,"t":{"389":{"position":[[388,10]]},"449":{"position":[[118,11]]}}}],["prefer",{"_index":263,"t":{"340":{"position":[[582,6]]},"455":{"position":[[7332,9],[7382,6],[7408,6],[7817,9],[11486,9]]}}}],["preferred_usernam",{"_index":900,"t":{"411":{"position":[[489,18]]}}}],["prefix",{"_index":376,"t":{"351":{"position":[[219,6],[233,6],[255,6]]},"363":{"position":[[440,6],[454,6],[476,6]]},"389":{"position":[[627,8],[676,8]]},"399":{"position":[[136,6],[175,6]]},"455":{"position":[[1463,6],[8609,6],[14764,6],[15511,8]]},"459":{"position":[[75,9]]}}}],["preflight",{"_index":1422,"t":{"455":{"position":[[12211,9]]}}}],["prepend",{"_index":377,"t":{"351":{"position":[[275,9]]},"363":{"position":[[496,9]]}}}],["present",{"_index":162,"t":{"330":{"position":[[705,7]]},"393":{"position":[[237,7]]},"455":{"position":[[7942,8],[13262,9],[13378,9]]}}}],["preserv",{"_index":432,"t":{"361":{"position":[[362,9]]}}}],["preserverequestvalu",{"_index":428,"t":{"361":{"position":[[260,20],[286,20]]}}}],["pretti",{"_index":1246,"t":{"437":{"position":[[282,6]]}}}],["prevent",{"_index":518,"t":{"373":{"position":[[200,8]]},"395":{"position":[[460,7]]}}}],["preview",{"_index":1132,"t":{"433":{"position":[[1682,7]]}}}],["previou",{"_index":191,"t":{"332":{"position":[[652,8]]}}}],["previous",{"_index":173,"t":{"332":{"position":[[287,10]]}}}],["primari",{"_index":323,"t":{"345":{"position":[[161,7]]}}}],["print",{"_index":238,"t":{"338":{"position":[[304,5]]},"455":{"position":[[14656,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":1292,"t":{"451":{"position":[[136,57]]}}}],["prior",{"_index":209,"t":{"334":{"position":[[245,5]]},"427":{"position":[[119,5]]}}}],["privat",{"_index":142,"t":{"330":{"position":[[222,8]]},"332":{"position":[[37,9]]},"367":{"position":[[72,7],[162,7]]},"421":{"position":[[1048,7]]},"435":{"position":[[1065,7]]},"455":{"position":[[5673,7],[5845,7],[13940,7]]}}}],["process",{"_index":1232,"t":{"435":{"position":[[2587,7]]},"465":{"position":[[965,8]]},"469":{"position":[[2934,9],[2980,9]]}}}],["product",{"_index":914,"t":{"413":{"position":[[374,8]]},"435":{"position":[[294,10]]},"455":{"position":[[12021,11]]}}}],["profil",{"_index":281,"t":{"340":{"position":[[933,7]]},"375":{"position":[[2131,7]]},"423":{"position":[[727,7]]},"427":{"position":[[284,7]]},"435":{"position":[[1992,7]]},"455":{"position":[[7867,7],[7886,7]]}}}],["profileurl",{"_index":601,"t":{"375":{"position":[[2095,10],[2113,10]]}}}],["project",{"_index":113,"t":{"328":{"position":[[33,8],[74,7],[204,8]]},"357":{"position":[[113,8],[131,8],[184,8]]},"413":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"421":{"position":[[13,8]]},"427":{"position":[[411,8]]},"429":{"position":[[55,8]]},"433":{"position":[[118,9]]},"455":{"position":[[4094,8],[4160,8]]}}}],["prometheu",{"_index":797,"t":{"399":{"position":[[430,10]]},"455":{"position":[[8558,10]]}}}],["prompt",{"_index":286,"t":{"340":{"position":[[998,6]]},"455":{"position":[[217,6],[7912,6],[7931,7],[7960,6]]}}}],["prompt/approval_prompt",{"_index":288,"t":{"340":{"position":[[1014,22]]}}}],["promptallow",{"_index":472,"t":{"371":{"position":[[130,12]]}}}],["promptdefault",{"_index":475,"t":{"371":{"position":[[294,14]]}}}],["properli",{"_index":1072,"t":{"427":{"position":[[551,9]]}}}],["propos",{"_index":171,"t":{"332":{"position":[[257,8]]}}}],["protect",{"_index":603,"t":{"375":{"position":[[2213,9]]},"397":{"position":[[774,8]]},"415":{"position":[[315,7]]},"433":{"position":[[2189,11],[2279,8]]},"455":{"position":[[10894,9]]}}}],["protectedresourc",{"_index":602,"t":{"375":{"position":[[2171,17]]}}}],["proto,host,uri",{"_index":1412,"t":{"455":{"position":[[11056,16]]}}}],["protocol",{"_index":1056,"t":{"425":{"position":[[80,8]]},"435":{"position":[[842,9]]},"455":{"position":[[15711,8]]},"463":{"position":[[1071,8],[1101,9]]},"465":{"position":[[534,13],[860,8],[890,9]]}}}],["provid",{"_index":39,"t":{"324":{"position":[[444,8],[572,8],[622,8],[775,8]]},"326":{"position":[[309,8],[473,9],[740,8]]},"336":{"position":[[111,7]]},"340":{"position":[[803,8],[812,8],[856,8],[1215,8]]},"343":{"position":[[13,9]]},"345":{"position":[[1809,9],[1819,9],[1829,9],[1869,10]]},"347":{"position":[[13,9]]},"349":{"position":[[13,9]]},"355":{"position":[[13,9]]},"357":{"position":[[13,9]]},"359":{"position":[[13,9]]},"365":{"position":[[13,9],[234,9]]},"367":{"position":[[13,9]]},"369":{"position":[[13,9],[712,8]]},"373":{"position":[[13,9]]},"375":{"position":[[13,10],[24,8],[70,8],[212,10],[345,10],[584,9],[666,9],[744,9],[842,9],[929,9],[1015,9],[1101,9],[1190,9],[1313,9],[1414,10],[1425,8],[1504,9],[1581,9]]},"377":{"position":[[29,9],[87,8]]},"379":{"position":[[0,11],[47,9],[92,10]]},"401":{"position":[[169,8],[785,8]]},"407":{"position":[[47,9],[418,12]]},"409":{"position":[[1384,12]]},"411":{"position":[[54,8],[90,10],[195,9],[365,8],[400,8],[455,9],[564,9]]},"413":{"position":[[2212,8]]},"415":{"position":[[2308,8]]},"417":{"position":[[92,7],[455,8]]},"421":{"position":[[184,8],[1264,7]]},"423":{"position":[[24,8],[70,8],[1256,8]]},"427":{"position":[[10,8]]},"433":{"position":[[84,9],[133,8],[235,8],[297,9],[379,8],[553,8],[956,8],[970,8],[1001,9],[1554,8],[1918,8],[3050,8],[4377,8]]},"435":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"437":{"position":[[14,8],[125,9],[528,8]]},"439":{"position":[[378,9]]},"441":{"position":[[315,9]]},"443":{"position":[[323,8]]},"447":{"position":[[27,9],[61,8],[151,9]]},"455":{"position":[[1719,9],[2448,8],[7983,8],[8005,8],[8023,8],[8122,9],[8199,8],[8318,9],[13103,8],[13289,9],[14577,9],[15395,9],[15919,8]]},"457":{"position":[[194,9],[353,7],[691,7],[1149,9]]},"475":{"position":[[34,8],[2252,8]]}}}],["provider'",{"_index":815,"t":{"401":{"position":[[309,10]]},"435":{"position":[[3422,10]]},"455":{"position":[[8241,10]]},"469":{"position":[[1699,10]]}}}],["provider.example.com",{"_index":828,"t":{"401":{"position":[[894,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":819,"t":{"401":{"position":[[486,36]]}}}],["provider.if",{"_index":595,"t":{"375":{"position":[[1766,11]]}}}],["provider.thi",{"_index":588,"t":{"375":{"position":[[1374,13]]}}}],["provider/sign_out_pag",{"_index":823,"t":{"401":{"position":[[672,25]]}}}],["provider=\"github",{"_index":1271,"t":{"443":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":1073,"t":{"427":{"position":[[605,17]]}}}],["provider=adf",{"_index":1009,"t":{"417":{"position":[[333,13]]}}}],["provider=azur",{"_index":979,"t":{"415":{"position":[[1439,14],[1747,14]]}}}],["provider=bitbucket",{"_index":1265,"t":{"441":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":1258,"t":{"439":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":1037,"t":{"423":{"position":[[440,17]]},"425":{"position":[[509,17]]}}}],["providermust",{"_index":590,"t":{"375":{"position":[[1465,12]]}}}],["provideror",{"_index":582,"t":{"375":{"position":[[1179,10]]}}}],["providers.new",{"_index":1282,"t":{"447":{"position":[[98,15]]}}}],["providerthi",{"_index":560,"t":{"375":{"position":[[173,12],[306,12]]}}}],["providertyp",{"_index":589,"t":{"375":{"position":[[1434,12]]},"377":{"position":[[39,12]]}}}],["proxi",{"_index":22,"t":{"324":{"position":[[245,5],[535,5],[648,5]]},"326":{"position":[[32,5],[729,5]]},"328":{"position":[[12,5]]},"330":{"position":[[65,5],[339,6]]},"338":{"position":[[58,5],[163,5],[467,5],[502,5]]},"340":{"position":[[191,5],[1511,5]]},"345":{"position":[[204,6],[490,7],[973,5],[1045,5],[1262,5]]},"389":{"position":[[108,7],[1057,8],[1669,5],[2416,8]]},"391":{"position":[[365,7]]},"393":{"position":[[109,5]]},"395":{"position":[[97,5],[396,5],[655,6]]},"399":{"position":[[7,5],[87,7],[169,5]]},"405":{"position":[[52,5],[69,5]]},"407":{"position":[[38,5],[162,5],[221,5],[978,5]]},"409":{"position":[[133,5],[432,8],[451,5],[478,5],[1199,5],[1258,5]]},"411":{"position":[[179,5]]},"413":{"position":[[2310,5],[2426,6]]},"415":{"position":[[1303,5]]},"417":{"position":[[320,5]]},"433":{"position":[[530,5],[789,5],[924,5],[1028,5],[1048,5],[3656,5],[3676,5],[4817,5],[4837,5]]},"435":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"439":{"position":[[206,5],[249,5]]},"441":{"position":[[108,6],[152,5]]},"443":{"position":[[238,6]]},"447":{"position":[[130,5]]},"449":{"position":[[7,5]]},"455":{"position":[[8603,5],[8651,5],[8717,5],[8757,8],[8943,5],[10930,5],[10973,6],[12752,5],[15002,5],[15124,5],[15293,5]]},"457":{"position":[[7,5],[623,5],[978,5]]},"461":{"position":[[19,5]]},"463":{"position":[[937,5]]},"465":{"position":[[792,5]]},"469":{"position":[[192,8],[1763,5]]},"471":{"position":[[31,5]]},"473":{"position":[[223,8]]},"475":{"position":[[138,5],[208,6],[1236,5]]}}}],["proxiedto",{"_index":717,"t":{"389":{"position":[[2323,9]]}}}],["proxy'",{"_index":73,"t":{"326":{"position":[[96,7]]},"401":{"position":[[91,7]]},"439":{"position":[[296,7]]},"469":{"position":[[86,7]]},"473":{"position":[[93,7]]}}}],["proxy'secret",{"_index":1114,"t":{"433":{"position":[[775,13]]}}}],["proxy(e.g",{"_index":959,"t":{"415":{"position":[[337,10]]}}}],["proxy.cfg",{"_index":1320,"t":{"453":{"position":[[225,9],[326,9]]}}}],["proxy.thi",{"_index":338,"t":{"345":{"position":[[929,10]]}}}],["proxy/oauth2",{"_index":13,"t":{"324":{"position":[[119,12],[232,12]]}}}],["proxy/oauth2/callback",{"_index":1256,"t":{"439":{"position":[[163,22]]}}}],["proxy/v7",{"_index":14,"t":{"324":{"position":[[132,8]]}}}],["proxy=tru",{"_index":897,"t":{"409":{"position":[[1409,10]]},"475":{"position":[[306,11]]}}}],["proxy>/oauth2/callback",{"_index":1264,"t":{"441":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":1002,"t":{"415":{"position":[[2451,17]]},"417":{"position":[[598,17]]}}}],["proxy_connect_timeout",{"_index":894,"t":{"409":{"position":[[1094,21]]}}}],["proxy_pass",{"_index":887,"t":{"409":{"position":[[955,10]]},"469":{"position":[[319,10],[657,10],[2584,10],[2948,10]]}}}],["proxy_pass_request_bodi",{"_index":1531,"t":{"469":{"position":[[883,23]]}}}],["proxy_read_timeout",{"_index":896,"t":{"409":{"position":[[1142,18]]}}}],["proxy_send_timeout",{"_index":895,"t":{"409":{"position":[[1119,18]]}}}],["proxy_set_head",{"_index":889,"t":{"409":{"position":[[989,16],[1018,16],[1059,16]]},"469":{"position":[[353,16],[382,16],[423,16],[458,16],[559,16],[691,16],[720,16],[761,16],[847,16],[1218,16],[1249,16],[1428,16]]}}}],["proxyrawpath",{"_index":726,"t":{"391":{"position":[[118,12],[136,12]]}}}],["proxyredirecturi",{"_index":1112,"t":{"433":{"position":[[702,18]]}}}],["proxyus",{"_index":1408,"t":{"455":{"position":[[9001,9]]}}}],["proxywebsocket",{"_index":719,"t":{"389":{"position":[[2371,15],[2392,15]]}}}],["pubjwk",{"_index":297,"t":{"340":{"position":[[1185,6]]},"435":{"position":[[1917,6]]},"455":{"position":[[8773,6]]}}}],["pubjwkurl",{"_index":452,"t":{"367":{"position":[[214,9],[231,9]]}}}],["pubkey",{"_index":454,"t":{"367":{"position":[[252,6]]},"455":{"position":[[8795,6]]}}}],["public",{"_index":1022,"t":{"421":{"position":[[1011,6],[1229,6]]},"435":{"position":[[974,6]]}}}],["public_repo",{"_index":1026,"t":{"421":{"position":[[1376,11]]}}}],["publicli",{"_index":139,"t":{"330":{"position":[[175,9]]}}}],["pull",{"_index":1501,"t":{"463":{"position":[[1173,6]]},"465":{"position":[[1036,6]]}}}],["push",{"_index":410,"t":{"355":{"position":[[341,4]]},"421":{"position":[[994,4]]},"455":{"position":[[3808,4]]}}}],["put",{"_index":15,"t":{"324":{"position":[[152,3]]}}}],["python",{"_index":1287,"t":{"451":{"position":[[66,6],[107,6]]}}}],["quay.io/oauth2",{"_index":21,"t":{"324":{"position":[[217,14]]}}}],["queri",{"_index":456,"t":{"369":{"position":[[75,5],[390,5]]},"371":{"position":[[1153,5],[1405,5]]},"387":{"position":[[76,5]]},"401":{"position":[[358,5]]},"403":{"position":[[117,5],[134,5]]},"473":{"position":[[1287,6]]}}}],["quick",{"_index":1194,"t":{"435":{"position":[[1080,5]]}}}],["quickli",{"_index":122,"t":{"328":{"position":[[154,7]]}}}],["quot",{"_index":495,"t":{"371":{"position":[[845,6]]}}}],["r_basicprofil",{"_index":1090,"t":{"429":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":1091,"t":{"429":{"position":[[187,15]]}}}],["rand",{"_index":1302,"t":{"451":{"position":[[296,4]]}}}],["random",{"_index":530,"t":{"373":{"position":[[586,6]]},"397":{"position":[[391,6],[442,6]]},"463":{"position":[[1210,6]]},"465":{"position":[[1073,6]]}}}],["random_password",{"_index":1315,"t":{"451":{"position":[[663,17]]}}}],["rang",{"_index":1438,"t":{"455":{"position":[[14901,6]]}}}],["raw",{"_index":727,"t":{"391":{"position":[[163,3]]},"469":{"position":[[2229,3]]}}}],["rd",{"_index":817,"t":{"401":{"position":[[355,2]]}}}],["re",{"_index":754,"t":{"395":{"position":[[799,2]]},"401":{"position":[[200,2]]}}}],["reach",{"_index":1429,"t":{"455":{"position":[[13159,5]]}}}],["read",{"_index":947,"t":{"413":{"position":[[2327,4]]},"415":{"position":[[440,4]]},"421":{"position":[[1207,4]]},"441":{"position":[[240,4],[261,4]]}}}],["read_api",{"_index":1071,"t":{"427":{"position":[[445,8]]}}}],["readi",{"_index":189,"t":{"332":{"position":[[613,6]]}}}],["real",{"_index":890,"t":{"409":{"position":[[1037,4]]},"435":{"position":[[3070,4],[3215,4]]},"455":{"position":[[8843,4],[8901,4],[8987,4],[9017,4],[11012,4],[15025,4]]},"463":{"position":[[899,4]]},"465":{"position":[[754,4]]},"469":{"position":[[401,4],[739,4]]}}}],["realm",{"_index":1033,"t":{"423":{"position":[[127,5]]},"425":{"position":[[35,5],[711,6],[773,5]]}}}],["realm>/protocol/openid",{"_index":1043,"t":{"423":{"position":[[592,22],[687,22],[784,22],[885,22]]}}}],["reason",{"_index":944,"t":{"413":{"position":[[2002,6]]}}}],["recommend",{"_index":842,"t":{"405":{"position":[[14,11]]},"413":{"position":[[871,11]]},"455":{"position":[[977,13]]},"469":{"position":[[3574,11]]}}}],["redeem",{"_index":279,"t":{"340":{"position":[[911,6]]},"373":{"position":[[686,6]]},"421":{"position":[[1837,6]]},"423":{"position":[[631,6]]},"435":{"position":[[3765,6]]},"437":{"position":[[686,6]]},"443":{"position":[[527,6]]},"455":{"position":[[9027,6],[13027,6]]}}}],["redeemurl",{"_index":599,"t":{"375":{"position":[[2035,9],[2052,9]]}}}],["redempt",{"_index":600,"t":{"375":{"position":[[2075,10]]},"455":{"position":[[9051,10]]}}}],["redi",{"_index":100,"t":{"326":{"position":[[552,6]]},"393":{"position":[[326,5]]},"397":{"position":[[4,5],[57,6],[606,5],[711,5],[873,5],[936,5],[964,5],[1055,5],[1112,5],[1175,5],[1208,5],[1254,5],[1357,5],[1412,5],[1475,5],[1505,5],[1561,5],[1608,5],[1656,5],[1769,5],[1818,5]]},"415":{"position":[[2498,5]]},"417":{"position":[[645,5]]},"455":{"position":[[9178,5],[9230,5],[9315,5],[9335,5],[9370,5],[9387,5],[9438,5],[9460,5],[9495,5],[9553,5],[9576,5],[9607,5],[9671,5],[9706,5],[9723,5],[9757,5],[9812,5],[9833,5],[9886,5],[9972,5],[9993,5],[10027,5],[10053,5],[10111,5],[10146,5],[10178,5],[10211,5],[10270,5],[10304,5],[10346,5],[10393,5],[10441,5],[10550,5],[10599,5],[11351,5]]}}}],["redirect",{"_index":88,"t":{"326":{"position":[[276,10]]},"391":{"position":[[245,10]]},"399":{"position":[[713,8]]},"401":{"position":[[22,8],[269,8],[380,8],[550,8],[585,8],[646,9],[873,8],[1006,8]]},"411":{"position":[[123,8]]},"413":{"position":[[703,8]]},"415":{"position":[[232,8]]},"419":{"position":[[95,8]]},"423":{"position":[[174,8]]},"425":{"position":[[116,8],[604,8]]},"427":{"position":[[322,8],[625,8],[703,8],[1318,8]]},"429":{"position":[[217,8]]},"433":{"position":[[1054,8],[2720,8],[3969,8],[4029,8]]},"435":{"position":[[1379,8],[1619,8],[3610,8]]},"437":{"position":[[448,12]]},"439":{"position":[[315,8],[562,8],[680,8]]},"443":{"position":[[87,8],[267,8]]},"455":{"position":[[127,11],[2626,9],[3187,8],[3276,9],[9073,8],[9103,8],[11095,8],[14730,11],[15597,8]]},"469":{"position":[[490,8],[591,8]]},"475":{"position":[[0,8],[372,9],[561,8],[572,9],[781,11],[849,8],[1894,9],[2059,9]]}}}],["redis.conf",{"_index":786,"t":{"397":{"position":[[1701,10]]},"455":{"position":[[10482,10]]}}}],["redis://host[:port",{"_index":1409,"t":{"455":{"position":[[9266,21],[9415,20],[9923,21]]}}}],["reduc",{"_index":1475,"t":{"461":{"position":[[804,8]]}}}],["refer",{"_index":223,"t":{"334":{"position":[[552,9],[853,9]]},"336":{"position":[[94,9]]},"381":{"position":[[57,10]]},"435":{"position":[[930,5],[1284,8]]},"437":{"position":[[367,5]]}}}],["refresh",{"_index":751,"t":{"395":{"position":[[734,10]]},"413":{"position":[[886,7],[940,7],[2544,9]]},"433":{"position":[[2830,7],[4138,7]]},"455":{"position":[[1627,7],[1644,7],[15422,8]]},"469":{"position":[[1494,8]]}}}],["refresh/access/id",{"_index":771,"t":{"397":{"position":[[787,17]]}}}],["refreshes.default",{"_index":535,"t":{"373":{"position":[[712,17]]}}}],["regardless",{"_index":856,"t":{"407":{"position":[[679,10]]}}}],["regex",{"_index":71,"t":{"326":{"position":[[70,6]]},"455":{"position":[[12290,5]]}}}],["regist",{"_index":49,"t":{"324":{"position":[[585,8]]},"411":{"position":[[17,8]]},"415":{"position":[[404,9]]},"435":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":901,"t":{"413":{"position":[[16,12]]},"415":{"position":[[94,13],[130,13],[469,13],[1147,12]]},"429":{"position":[[18,12]]}}}],["regular",{"_index":175,"t":{"332":{"position":[[365,7]]},"371":{"position":[[432,7],[814,7]]},"387":{"position":[[417,7]]},"389":{"position":[[534,7]]}}}],["releas",{"_index":6,"t":{"324":{"position":[[59,7],[462,7]]},"332":{"position":[[493,8],[661,9]]},"345":{"position":[[298,8]]},"373":{"position":[[764,8]]}}}],["reload",{"_index":1613,"t":{"475":{"position":[[2336,6]]}}}],["remain",{"_index":671,"t":{"389":{"position":[[711,9]]},"429":{"position":[[300,9]]}}}],["remot",{"_index":1443,"t":{"455":{"position":[[15156,6]]}}}],["remote_addr",{"_index":892,"t":{"409":{"position":[[1045,13]]},"469":{"position":[[409,13],[747,13]]}}}],["remote_address",{"_index":1478,"t":{"463":{"position":[[181,16]]},"465":{"position":[[62,16]]}}}],["remov",{"_index":205,"t":{"334":{"position":[[211,8]]},"336":{"position":[[255,7]]},"338":{"position":[[368,6],[429,7]]},"340":{"position":[[1467,6]]},"401":{"position":[[76,7]]}}}],["renam",{"_index":206,"t":{"334":{"position":[[220,7]]}}}],["replac",{"_index":217,"t":{"334":{"position":[[479,7]]},"453":{"position":[[65,9]]},"459":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":1309,"t":{"451":{"position":[[550,19]]}}}],["repo",{"_index":408,"t":{"355":{"position":[[176,4],[188,4]]},"421":{"position":[[1076,8]]},"435":{"position":[[2497,4]]},"455":{"position":[[3628,4]]}}}],["report",{"_index":1507,"t":{"463":{"position":[[1381,8]]},"465":{"position":[[1453,8]]}}}],["repositori",{"_index":370,"t":{"349":{"position":[[108,10],[126,10],[186,10]]},"355":{"position":[[239,10],[304,10],[360,10]]},"421":{"position":[[329,11],[953,11],[1018,10],[1056,11],[1126,10],[1236,10],[1320,11],[1445,10]]},"441":{"position":[[245,12],[696,10]]},"455":{"position":[[3681,10],[3772,10],[3827,11]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":1251,"t":{"437":{"position":[[714,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":1250,"t":{"437":{"position":[[647,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":1252,"t":{"437":{"position":[[786,39]]}}}],["url]/stat",{"_index":1464,"t":{"457":{"position":[[984,13]]}}}],["url]/var/www/stat",{"_index":1460,"t":{"457":{"position":[[629,21]]}}}],["urldefault",{"_index":525,"t":{"373":{"position":[[457,10]]}}}],["urleg",{"_index":515,"t":{"373":{"position":[[102,6],[1006,6]]}}}],["urlparameterrul",{"_index":507,"t":{"371":{"position":[[1297,18]]},"387":{"position":[[32,16]]}}}],["us",{"_index":18,"t":{"324":{"position":[[185,5],[294,5],[654,5]]},"326":{"position":[[761,6]]},"330":{"position":[[550,4]]},"332":{"position":[[3,3],[361,3]]},"334":{"position":[[293,3],[659,5]]},"336":{"position":[[3,3],[141,5],[182,5]]},"338":{"position":[[64,5],[473,5]]},"340":{"position":[[100,5],[1352,3]]},"345":{"position":[[394,4],[626,4],[861,4],[953,4],[963,5],[1217,4],[1433,3],[1539,4],[1741,3],[1842,4]]},"347":{"position":[[233,4]]},"351":{"position":[[517,4]]},"355":{"position":[[285,3]]},"361":{"position":[[183,4]]},"363":{"position":[[738,4]]},"365":{"position":[[210,5]]},"367":{"position":[[98,4],[193,4]]},"369":{"position":[[542,4]]},"371":{"position":[[941,3]]},"373":{"position":[[902,3],[1478,4]]},"375":{"position":[[467,4],[1738,4],[1826,4]]},"377":{"position":[[55,4]]},"389":{"position":[[316,4],[462,4],[528,5],[730,3],[2058,4]]},"393":{"position":[[115,4]]},"395":{"position":[[78,4],[287,5]]},"397":{"position":[[863,5],[1102,3],[1118,3],[1363,3],[1481,3],[1511,3],[1735,5]]},"399":{"position":[[375,3],[648,4],[774,4],[904,4],[1053,3]]},"401":{"position":[[345,5]]},"403":{"position":[[97,5]]},"407":{"position":[[752,4],[942,4],[992,5]]},"409":{"position":[[218,5],[301,3],[670,3]]},"411":{"position":[[390,5]]},"415":{"position":[[1042,3],[1947,5],[2287,5]]},"417":{"position":[[435,5]]},"421":{"position":[[1426,3],[1686,5]]},"423":{"position":[[47,3],[1135,4],[1440,5]]},"427":{"position":[[160,5],[1042,5]]},"431":{"position":[[175,4]]},"433":{"position":[[194,3],[263,4],[566,5],[1484,5],[1617,5],[4707,3]]},"435":{"position":[[2172,3],[3211,3]]},"437":{"position":[[105,5],[276,5]]},"439":{"position":[[370,3],[670,3]]},"441":{"position":[[43,3],[307,3],[555,3],[707,3]]},"445":{"position":[[29,3],[105,3],[209,3]]},"447":{"position":[[139,3]]},"451":{"position":[[35,3]]},"453":{"position":[[286,4]]},"455":{"position":[[900,3],[1181,4],[1450,3],[2322,3],[2568,3],[3337,3],[3417,3],[3753,3],[5211,5],[5334,3],[5699,4],[5876,4],[7034,4],[7418,3],[7504,3],[7572,4],[8094,4],[8183,4],[8280,4],[8377,4],[8464,4],[8879,4],[9288,4],[9321,3],[9632,4],[9700,3],[9785,4],[9818,3],[9945,4],[9978,3],[9999,3],[10086,3],[10117,3],[10245,3],[10516,5],[10679,3],[11087,4],[11522,7],[11564,4],[11732,7],[11840,7],[12014,3],[13277,5],[13393,5],[13683,4],[13830,5],[15306,3],[15465,5],[15883,3]]},"457":{"position":[[830,4],[1214,4]]},"459":{"position":[[299,6]]},"461":{"position":[[111,5],[735,5]]},"463":{"position":[[889,3]]},"465":{"position":[[744,3]]},"469":{"position":[[1651,5],[2677,3],[2719,3],[3589,3]]},"475":{"position":[[55,3],[330,3],[2299,3]]}}}],["us/azure/act",{"_index":994,"t":{"415":{"position":[[2185,15]]}}}],["usag",{"_index":321,"t":{"345":{"position":[[62,5]]},"397":{"position":[[851,6]]}}}],["use.typ",{"_index":629,"t":{"385":{"position":[[218,13],[314,13]]}}}],["used.list",{"_index":643,"t":{"385":{"position":[[678,9]]}}}],["user",{"_index":85,"t":{"326":{"position":[[248,4],[643,4]]},"340":{"position":[[385,4],[1059,4]]},"345":{"position":[[92,5],[436,4]]},"349":{"position":[[161,4]]},"355":{"position":[[371,5],[386,5],[399,5]]},"365":{"position":[[173,5]]},"373":{"position":[[1120,4],[1220,4],[1321,4]]},"375":{"position":[[1635,5]]},"389":{"position":[[795,5]]},"393":{"position":[[138,4]]},"395":{"position":[[790,5]]},"397":{"position":[[184,4]]},"399":{"position":[[258,4]]},"401":{"position":[[12,4],[121,4],[282,4],[393,4]]},"413":{"position":[[397,6],[2175,4],[2443,4]]},"421":{"position":[[436,4],[463,5],[971,5],[1196,5],[1286,4],[1481,4],[1619,8]]},"429":{"position":[[119,4]]},"433":{"position":[[2949,5]]},"437":{"position":[[58,5]]},"441":{"position":[[659,5]]},"455":{"position":[[3848,4],[3876,5],[4735,4],[4806,5],[6735,4],[7292,5],[7398,4],[7626,4],[7722,4],[7757,5],[8421,4],[8441,4],[8509,4],[11417,5],[14491,5]]},"461":{"position":[[748,4]]},"463":{"position":[[94,4],[356,4],[425,4],[1367,4]]},"465":{"position":[[1439,4]]},"469":{"position":[[1013,4],[1115,5],[1237,4],[1242,6]]}}}],["user'",{"_index":334,"t":{"345":{"position":[[760,6],[1148,6]]},"393":{"position":[[17,6]]},"399":{"position":[[919,6]]},"455":{"position":[[6657,6]]}}}],["user/prefer_email_to_us",{"_index":264,"t":{"340":{"position":[[598,25]]}}}],["user/settings/appl",{"_index":1268,"t":{"443":{"position":[[52,28]]}}}],["user@domain.com",{"_index":1479,"t":{"463":{"position":[[215,17]]},"465":{"position":[[96,17]]}}}],["user_ag",{"_index":1512,"t":{"465":{"position":[[195,14]]}}}],["userag",{"_index":1506,"t":{"463":{"position":[[1346,9]]},"465":{"position":[[548,14],[1418,9]]}}}],["useridclaim",{"_index":549,"t":{"373":{"position":[[1255,11],[1274,11]]}}}],["userinfo",{"_index":1054,"t":{"423":{"position":[[1376,8]]}}}],["usernam",{"_index":385,"t":{"351":{"position":[[475,8]]},"355":{"position":[[416,9]]},"363":{"position":[[696,8]]},"421":{"position":[[1506,8],[1644,9]]},"455":{"position":[[2394,8],[3894,8],[7342,8],[7447,8],[7508,8],[7827,8],[11496,8]]},"463":{"position":[[63,8],[708,13],[1416,8],[1457,8]]},"465":{"position":[[444,13],[1488,8],[1529,8]]}}}],["username@email.com",{"_index":1508,"t":{"463":{"position":[[1425,18]]},"465":{"position":[[1497,18]]}}}],["usptream",{"_index":700,"t":{"389":{"position":[[1683,8]]}}}],["utc",{"_index":1389,"t":{"455":{"position":[[5394,3]]}}}],["util",{"_index":583,"t":{"375":{"position":[[1200,7]]}}}],["uuid",{"_index":1502,"t":{"463":{"position":[[1217,4]]},"465":{"position":[[1080,4]]}}}],["v1",{"_index":977,"t":{"415":{"position":[[1319,2]]}}}],["v2",{"_index":985,"t":{"415":{"position":[[1617,2]]},"473":{"position":[[12,2]]},"475":{"position":[[93,2]]}}}],["v2.0",{"_index":975,"t":{"415":{"position":[[1046,4],[1953,4]]}}}],["v3.0.0",{"_index":43,"t":{"324":{"position":[[492,7]]}}}],["v7.4.0",{"_index":7,"t":{"324":{"position":[[70,7]]}}}],["valid",{"_index":32,"t":{"324":{"position":[[354,9]]},"332":{"position":[[231,8]]},"340":{"position":[[966,8]]},"353":{"position":[[254,5]]},"375":{"position":[[2299,10]]},"377":{"position":[[109,5]]},"385":{"position":[[691,5]]},"387":{"position":[[172,5]]},"407":{"position":[[1017,5]]},"411":{"position":[[189,5]]},"413":{"position":[[962,9]]},"419":{"position":[[83,5]]},"421":{"position":[[1910,8]]},"423":{"position":[[168,5],[827,8]]},"425":{"position":[[110,5]]},"437":{"position":[[756,8],[849,8]]},"443":{"position":[[595,8]]},"451":{"position":[[572,5]]},"455":{"position":[[180,6],[13235,10],[13351,10],[13844,5],[14589,8],[14622,10],[15591,5]]}}}],["validateurl",{"_index":604,"t":{"375":{"position":[[2248,11],[2267,11]]}}}],["valu",{"_index":319,"t":{"343":{"position":[[117,5]]},"345":{"position":[[723,6],[798,6],[1111,6],[1186,6]]},"347":{"position":[[143,5],[296,5]]},"351":{"position":[[62,5],[191,5],[292,5],[433,5],[538,6]]},"361":{"position":[[330,6],[533,6],[554,6],[582,6]]},"363":{"position":[[60,5],[110,5],[139,5],[152,5],[190,6],[337,6],[412,5],[513,5],[654,5],[759,6]]},"369":{"position":[[215,5],[224,6],[521,5],[732,5]]},"371":{"position":[[117,6],[144,6],[158,6],[174,6],[281,6],[326,6],[342,6],[412,6],[1226,5],[1235,6]]},"375":{"position":[[186,5],[319,5],[1388,5]]},"381":{"position":[[89,6],[184,5],[197,5],[235,6],[382,6]]},"387":{"position":[[250,5],[320,5],[335,5],[373,5],[481,6],[560,6],[610,5]]},"389":{"position":[[259,5]]},"397":{"position":[[203,5]]},"411":{"position":[[423,6]]},"415":{"position":[[1264,5]]},"423":{"position":[[1539,5]]},"455":{"position":[[38,6],[4263,5]]},"457":{"position":[[795,5]]},"463":{"position":[[979,5]]},"465":{"position":[[834,5]]}}}],["values.nam",{"_index":426,"t":{"361":{"position":[[204,12]]}}}],["values/acr_valu",{"_index":290,"t":{"340":{"position":[[1041,17]]}}}],["var/www/stat",{"_index":1463,"t":{"457":{"position":[[933,16]]}}}],["variabl",{"_index":59,"t":{"324":{"position":[[710,9]]},"340":{"position":[[61,9]]},"363":{"position":[[255,9]]},"381":{"position":[[300,9]]},"399":{"position":[[189,9]]},"435":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"437":{"position":[[192,9]]},"449":{"position":[[69,9],[183,9],[209,9]]},"459":{"position":[[63,8],[238,8]]},"461":{"position":[[613,10]]},"463":{"position":[[776,9],[804,8]]},"465":{"position":[[628,9],[659,8]]},"467":{"position":[[500,9],[532,8]]},"469":{"position":[[2202,9],[2838,9],[3826,8]]}}}],["verif",{"_index":523,"t":{"373":{"position":[[364,12],[1487,13],[1598,12]]},"389":{"position":[[1543,12]]},"455":{"position":[[6190,12],[6548,13],[6913,12]]}}}],["verifi",{"_index":35,"t":{"324":{"position":[[391,9]]},"355":{"position":[[294,9]]},"373":{"position":[[530,9],[1424,8]]},"421":{"position":[[1435,9]]},"455":{"position":[[3762,9],[6147,8],[6363,9],[12822,8],[13218,6],[13334,6]]}}}],["verifieddefault",{"_index":521,"t":{"373":{"position":[[260,15]]}}}],["verify/ssl_upstream_insecure_skip_verifi",{"_index":251,"t":{"340":{"position":[[252,40]]}}}],["version",{"_index":42,"t":{"324":{"position":[[484,7]]},"330":{"position":[[679,8]]},"385":{"position":[[123,7],[404,7],[466,7]]},"407":{"position":[[581,7],[670,8],[705,7],[772,8],[950,7]]},"427":{"position":[[50,7],[111,7]]},"455":{"position":[[13967,7],[13994,7],[14644,7],[14662,7]]}}}],["version=tls1.3",{"_index":854,"t":{"407":{"position":[[615,15]]}}}],["via",{"_index":308,"t":{"340":{"position":[[1377,3],[1390,3]]},"369":{"position":[[382,3]]},"371":{"position":[[1397,3]]},"397":{"position":[[717,3],[958,3]]},"409":{"position":[[733,3]]},"435":{"position":[[3308,3]]},"437":{"position":[[161,3]]},"449":{"position":[[31,3]]},"455":{"position":[[470,3],[6992,3],[7197,3],[10152,3]]},"463":{"position":[[1027,3]]},"469":{"position":[[71,3],[1007,3],[2944,3],[3755,3]]},"473":{"position":[[78,3]]}}}],["visit",{"_index":1126,"t":{"433":{"position":[[1351,8]]}}}],["volum",{"_index":1476,"t":{"461":{"position":[[817,7]]}}}],["vulner",{"_index":130,"t":{"330":{"position":[[37,13],[606,13]]},"332":{"position":[[75,16],[308,15]]}}}],["wait",{"_index":724,"t":{"389":{"position":[[2541,4]]},"455":{"position":[[14300,4]]}}}],["want",{"_index":653,"t":{"387":{"position":[[574,4]]},"397":{"position":[[1094,4]]},"401":{"position":[[865,4]]},"415":{"position":[[307,4]]},"433":{"position":[[1739,4]]},"435":{"position":[[580,4]]},"457":{"position":[[677,5]]}}}],["warn",{"_index":210,"t":{"334":{"position":[[251,8]]},"455":{"position":[[11956,9],[15172,8]]}}}],["way",{"_index":461,"t":{"369":{"position":[[328,4]]},"421":{"position":[[217,4]]},"435":{"position":[[1086,3]]}}}],["web",{"_index":919,"t":{"413":{"position":[[533,4]]},"415":{"position":[[266,3]]},"433":{"position":[[1259,3],[2591,3],[3802,3],[3921,3]]}}}],["websocket",{"_index":720,"t":{"389":{"position":[[2428,10]]},"455":{"position":[[8723,10],[8747,9]]}}}],["websockets/proxy_websocket",{"_index":249,"t":{"340":{"position":[[197,27]]}}}],["well",{"_index":626,"t":{"385":{"position":[[91,4]]},"397":{"position":[[924,4],[1145,4],[1308,5]]},"455":{"position":[[2868,5],[2906,5]]}}}],["whenstream",{"_index":712,"t":{"389":{"position":[[2172,13]]}}}],["whether",{"_index":430,"t":{"361":{"position":[[318,7]]},"387":{"position":[[155,7]]},"389":{"position":[[2281,7]]},"427":{"position":[[144,7]]},"437":{"position":[[241,7]]},"455":{"position":[[10989,7]]}}}],["whitelist",{"_index":829,"t":{"401":{"position":[[954,9]]},"455":{"position":[[14679,9],[15475,9],[15826,11]]}}}],["whole",{"_index":655,"t":{"387":{"position":[[594,5]]},"473":{"position":[[236,5]]}}}],["whose",{"_index":300,"t":{"340":{"position":[[1258,5]]}}}],["wide_authority_to_your_service_account",{"_index":935,"t":{"413":{"position":[[1442,38]]}}}],["window",{"_index":1005,"t":{"417":{"position":[[45,7]]}}}],["wish",{"_index":1135,"t":{"433":{"position":[[1839,4],[2271,4],[2364,4],[2969,4]]},"439":{"position":[[95,5]]}}}],["within",{"_index":131,"t":{"330":{"position":[[51,6]]},"334":{"position":[[131,6]]},"345":{"position":[[230,6]]},"351":{"position":[[81,6]]},"361":{"position":[[234,6]]},"381":{"position":[[112,6]]},"389":{"position":[[912,6]]},"395":{"position":[[568,6]]},"421":{"position":[[703,6]]},"433":{"position":[[4737,6]]}}}],["without",{"_index":208,"t":{"334":{"position":[[237,7]]},"345":{"position":[[307,7]]},"469":{"position":[[184,7]]},"473":{"position":[[215,7]]},"475":{"position":[[43,7]]}}}],["wizard",{"_index":1008,"t":{"417":{"position":[[221,6]]}}}],["wo",{"_index":1608,"t":{"475":{"position":[[846,2],[2056,2]]}}}],["won't",{"_index":971,"t":{"415":{"position":[[897,5]]}}}],["work",{"_index":115,"t":{"328":{"position":[[61,4]]},"427":{"position":[[102,4],[546,4]]},"433":{"position":[[1236,7],[1940,5],[2437,4]]},"435":{"position":[[210,4]]},"455":{"position":[[14548,5]]},"469":{"position":[[1528,4]]}}}],["write",{"_index":1025,"t":{"421":{"position":[[1300,5]]}}}],["x",{"_index":820,"t":{"401":{"position":[[570,1]]},"409":{"position":[[1035,1],[1076,1]]},"423":{"position":[[1289,1]]},"455":{"position":[[6996,1],[7077,1],[7280,1],[7298,1],[7320,1],[7745,1],[7763,1],[7783,1],[7805,1],[8968,1],[8985,1],[8999,1],[9015,1],[10712,1],[11010,1],[11044,1],[11402,1],[11423,1],[11446,1],[11471,1],[11595,1],[12655,1]]},"463":{"position":[[897,1]]},"465":{"position":[[752,1]]},"469":{"position":[[399,1],[440,1],[475,1],[576,1],[737,1],[778,1],[1011,1],[1022,1],[1235,1],[1266,1],[1445,1]]},"475":{"position":[[337,1],[2001,1],[2177,1]]}}}],["x.y.z.linux",{"_index":46,"t":{"324":{"position":[[541,11]]}}}],["x509",{"_index":1197,"t":{"435":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":1402,"t":{"455":{"position":[[7050,12],[11380,12]]},"469":{"position":[[1080,12]]}}}],["xauthrequest/set_xauthrequest",{"_index":261,"t":{"340":{"position":[[502,29]]}}}],["xxx\"client_secret",{"_index":1172,"t":{"433":{"position":[[4580,18]]}}}],["xxxxx\"client_secret",{"_index":1146,"t":{"433":{"position":[[3263,20]]}}}],["yaml",{"_index":216,"t":{"334":{"position":[[464,4]]},"336":{"position":[[47,4]]},"338":{"position":[[295,4]]},"371":{"position":[[677,4]]},"473":{"position":[[288,6]]}}}],["you'd",{"_index":1024,"t":{"421":{"position":[[1166,5]]}}}],["you'r",{"_index":973,"t":{"415":{"position":[[997,6]]}}}],["yourcompany.com",{"_index":1332,"t":{"455":{"position":[[1107,18]]}}}],["yourself",{"_index":657,"t":{"387":{"position":[[635,8]]}}}],["yyy\"pass_access_token",{"_index":1173,"t":{"433":{"position":[[4601,22]]}}}],["yyyyy\"pass_access_token",{"_index":1147,"t":{"433":{"position":[[3286,24]]}}}],["zero",{"_index":783,"t":{"397":{"position":[[1596,5]]},"455":{"position":[[10381,5]]}}}],["zzz\"cookie_secur",{"_index":1174,"t":{"433":{"position":[[4646,18]]}}}],["zzzzz\"skip_provider_button",{"_index":1149,"t":{"433":{"position":[[3333,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file +[{"documents":[{"i":323,"t":"Installation","u":"/oauth2-proxy/docs/7.4.x/","b":["Docs"]},{"i":325,"t":"Security","u":"/oauth2-proxy/docs/7.4.x/community/security","b":["Docs","Community"]},{"i":331,"t":"Alpha Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","b":["Docs","Configuration"]},{"i":390,"t":"Session Storage","u":"/oauth2-proxy/docs/7.4.x/configuration/session_storage","b":["Docs","Configuration"]},{"i":396,"t":"TLS Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/tls","b":["Docs","Configuration"]},{"i":402,"t":"Endpoints","u":"/oauth2-proxy/docs/7.4.x/features/endpoints","b":["Docs","Features"]},{"i":408,"t":"Behaviour","u":"/oauth2-proxy/docs/7.4.x/behaviour","b":["Docs"]},{"i":410,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","b":["Docs","Configuration"]},{"i":448,"t":"Overview","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","b":["Docs","Configuration"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/323",[0,2.222]],["t/325",[1,2.222]],["t/331",[2,1.699,3,0.94]],["t/390",[4,1.699,5,1.699]],["t/396",[3,0.94,6,1.699]],["t/402",[7,2.222]],["t/408",[8,2.222]],["t/410",[3,0.761,9,1.375,10,1.375]],["t/448",[11,2.222]]],"invertedIndex":[["alpha",{"_index":2,"t":{"331":{"position":[[0,5]]}}}],["behaviour",{"_index":8,"t":{"408":{"position":[[0,9]]}}}],["configur",{"_index":3,"t":{"331":{"position":[[6,13]]},"396":{"position":[[4,13]]},"410":{"position":[[15,13]]}}}],["endpoint",{"_index":7,"t":{"402":{"position":[[0,9]]}}}],["instal",{"_index":0,"t":{"323":{"position":[[0,12]]}}}],["oauth",{"_index":9,"t":{"410":{"position":[[0,5]]}}}],["overview",{"_index":11,"t":{"448":{"position":[[0,8]]}}}],["provid",{"_index":10,"t":{"410":{"position":[[6,8]]}}}],["secur",{"_index":1,"t":{"325":{"position":[[0,8]]}}}],["session",{"_index":4,"t":{"390":{"position":[[0,7]]}}}],["storag",{"_index":5,"t":{"390":{"position":[[8,7]]}}}],["tl",{"_index":6,"t":{"396":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":327,"t":"Security Disclosures","u":"/oauth2-proxy/docs/7.4.x/community/security","h":"#security-disclosures","p":325},{"i":329,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.4.x/community/security","h":"#how-will-we-respond-to-disclosures","p":325},{"i":333,"t":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#using-alpha-configuration","p":331},{"i":335,"t":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":331},{"i":337,"t":"Removed options","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#removed-options","p":331},{"i":339,"t":"Configuration Reference","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#configuration-reference","p":331},{"i":340,"t":"ADFSOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#adfsoptions","p":331},{"i":342,"t":"AlphaOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#alphaoptions","p":331},{"i":344,"t":"AzureOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#azureoptions","p":331},{"i":346,"t":"BitbucketOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#bitbucketoptions","p":331},{"i":348,"t":"ClaimSource","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#claimsource","p":331},{"i":350,"t":"Duration","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#duration","p":331},{"i":352,"t":"GitHubOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#githuboptions","p":331},{"i":354,"t":"GitLabOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#gitlaboptions","p":331},{"i":356,"t":"GoogleOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#googleoptions","p":331},{"i":358,"t":"Header","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#header","p":331},{"i":360,"t":"HeaderValue","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#headervalue","p":331},{"i":362,"t":"KeycloakOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#keycloakoptions","p":331},{"i":364,"t":"LoginGovOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#logingovoptions","p":331},{"i":366,"t":"LoginURLParameter","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#loginurlparameter","p":331},{"i":368,"t":"A parameter whose value is fixed","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"","p":331},{"i":370,"t":"OIDCOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#oidcoptions","p":331},{"i":372,"t":"Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#provider","p":331},{"i":374,"t":"ProviderType","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#providertype","p":331},{"i":376,"t":"Providers","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#providers","p":331},{"i":378,"t":"SecretSource","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#secretsource","p":331},{"i":380,"t":"Server","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#server","p":331},{"i":382,"t":"TLS","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#tls","p":331},{"i":384,"t":"URLParameterRule","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#urlparameterrule","p":331},{"i":386,"t":"Upstream","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#upstream","p":331},{"i":388,"t":"UpstreamConfig","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#upstreamconfig","p":331},{"i":392,"t":"Cookie Storage","u":"/oauth2-proxy/docs/7.4.x/configuration/session_storage","h":"#cookie-storage","p":390},{"i":394,"t":"Redis Storage","u":"/oauth2-proxy/docs/7.4.x/configuration/session_storage","h":"#redis-storage","p":390},{"i":398,"t":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/7.4.x/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":396},{"i":400,"t":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/7.4.x/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":396},{"i":404,"t":"Sign out","u":"/oauth2-proxy/docs/7.4.x/features/endpoints","h":"#sign-out","p":402},{"i":406,"t":"Auth","u":"/oauth2-proxy/docs/7.4.x/features/endpoints","h":"#auth","p":402},{"i":412,"t":"Google Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#google-auth-provider","p":410},{"i":414,"t":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#azure-auth-provider","p":410},{"i":416,"t":"ADFS Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#adfs-auth-provider","p":410},{"i":418,"t":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":410},{"i":420,"t":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#github-auth-provider","p":410},{"i":422,"t":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":410},{"i":424,"t":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":410},{"i":426,"t":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":410},{"i":428,"t":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":410},{"i":430,"t":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":410},{"i":432,"t":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#openid-connect-provider","p":410},{"i":434,"t":"login.gov Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#logingov-provider","p":410},{"i":436,"t":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#nextcloud-provider","p":410},{"i":438,"t":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":410},{"i":440,"t":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":410},{"i":442,"t":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":410},{"i":444,"t":"Email Authentication","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#email-authentication","p":410},{"i":446,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":410},{"i":450,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#generating-a-cookie-secret","p":448},{"i":452,"t":"Config File","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#config-file","p":448},{"i":454,"t":"Command Line Options","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#command-line-options","p":448},{"i":456,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#upstreams-configuration","p":448},{"i":458,"t":"Environment variables","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#environment-variables","p":448},{"i":460,"t":"Logging Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#logging-configuration","p":448},{"i":462,"t":"Auth Log Format","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#auth-log-format","p":448},{"i":464,"t":"Request Log Format","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#request-log-format","p":448},{"i":466,"t":"Standard Log Format","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#standard-log-format","p":448},{"i":468,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":448},{"i":470,"t":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":448},{"i":472,"t":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":448},{"i":474,"t":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":448}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/327",[0,4.031,1,3.493]],["t/329",[1,3.493,2,4.031]],["t/333",[3,2.64,4,3.39,5,1.854]],["t/335",[5,1.6,6,2.925,7,2.535,8,2.925]],["t/337",[9,4.031,10,3.493]],["t/339",[5,2.205,11,4.031]],["t/340",[12,4.97]],["t/342",[13,4.97]],["t/344",[14,4.97]],["t/346",[15,4.97]],["t/348",[16,4.97]],["t/350",[17,4.97]],["t/352",[18,4.97]],["t/354",[19,4.97]],["t/356",[20,4.97]],["t/358",[21,4.97]],["t/360",[22,4.97]],["t/362",[23,4.97]],["t/364",[24,4.97]],["t/366",[25,4.97]],["t/368",[26,2.925,27,2.925,28,2.925,29,2.925]],["t/370",[30,4.97]],["t/372",[31,1.64]],["t/374",[32,4.97]],["t/376",[31,1.64]],["t/378",[33,4.97]],["t/380",[34,4.97]],["t/382",[35,3.87]],["t/384",[36,4.97]],["t/386",[37,3.87]],["t/388",[38,4.97]],["t/392",[39,3.493,40,3.493]],["t/394",[40,3.493,41,4.031]],["t/398",[35,2.278,42,2.535,43,2.925,44,2.535]],["t/400",[35,1.788,42,1.989,44,1.989,45,2.296,46,2.296,47,1.989]],["t/404",[48,4.031,49,4.031]],["t/406",[50,2.025]],["t/412",[31,1.119,50,1.381,51,3.39]],["t/414",[31,1.119,50,1.381,52,2.938]],["t/416",[31,1.119,50,1.381,53,3.39]],["t/418",[31,1.119,50,1.381,54,3.39]],["t/420",[31,1.119,50,1.381,55,3.39]],["t/422",[31,1.119,50,1.381,56,2.938]],["t/424",[31,0.966,50,1.192,56,2.535,57,2.925]],["t/426",[31,1.119,50,1.381,58,3.39]],["t/428",[31,1.119,50,1.381,59,3.39]],["t/430",[31,0.966,52,2.535,60,2.925,61,2.535]],["t/432",[31,1.119,62,3.39,63,3.39]],["t/434",[31,1.33,64,4.031]],["t/436",[31,1.33,65,4.031]],["t/438",[31,1.119,50,1.381,66,3.39]],["t/440",[31,1.119,50,1.381,67,3.39]],["t/442",[31,1.119,50,1.381,68,3.39]],["t/444",[69,4.031,70,4.031]],["t/446",[7,2.938,31,1.119,61,2.938]],["t/450",[39,2.938,71,3.39,72,3.39]],["t/452",[73,4.031,74,4.031]],["t/454",[10,2.938,75,3.39,76,3.39]],["t/456",[5,2.205,37,3.139]],["t/458",[77,4.031,78,4.031]],["t/460",[5,2.205,79,2.874]],["t/462",[50,1.381,79,2.417,80,2.64]],["t/464",[79,2.417,80,2.64,81,3.39]],["t/466",[79,2.417,80,2.64,82,3.39]],["t/468",[3,2.003,5,1.407,47,2.229,83,2.573,84,2.573]],["t/470",[3,1.788,5,1.256,85,2.296,86,2.296,87,1.788,88,1.989]],["t/472",[87,2.278,88,2.535,89,2.925,90,2.925]],["t/474",[5,1.6,37,2.278,87,2.278,91,2.925]]],"invertedIndex":[["401",{"_index":89,"t":{"472":{"position":[[17,3]]}}}],["ad",{"_index":61,"t":{"430":{"position":[[16,2]]},"446":{"position":[[0,6]]}}}],["adf",{"_index":53,"t":{"416":{"position":[[0,4]]}}}],["adfsopt",{"_index":12,"t":{"340":{"position":[[0,11]]}}}],["alpha",{"_index":4,"t":{"333":{"position":[[6,5]]}}}],["alphaopt",{"_index":13,"t":{"342":{"position":[[0,12]]}}}],["auth",{"_index":50,"t":{"406":{"position":[[0,4]]},"412":{"position":[[7,4]]},"414":{"position":[[6,4]]},"416":{"position":[[5,4]]},"418":{"position":[[9,4]]},"420":{"position":[[7,4]]},"422":{"position":[[9,4]]},"424":{"position":[[14,4]]},"426":{"position":[[7,4]]},"428":{"position":[[9,4]]},"438":{"position":[[13,4]]},"440":{"position":[[10,4]]},"442":{"position":[[6,4]]},"462":{"position":[[0,4]]}}}],["auth_request",{"_index":83,"t":{"468":{"position":[[35,12]]}}}],["authent",{"_index":70,"t":{"444":{"position":[[6,14]]}}}],["azur",{"_index":52,"t":{"414":{"position":[[0,5]]},"430":{"position":[[10,5]]}}}],["azureopt",{"_index":14,"t":{"344":{"position":[[0,12]]}}}],["bitbucket",{"_index":67,"t":{"440":{"position":[[0,9]]}}}],["bitbucketopt",{"_index":15,"t":{"346":{"position":[[0,16]]}}}],["claimsourc",{"_index":16,"t":{"348":{"position":[[0,11]]}}}],["command",{"_index":75,"t":{"454":{"position":[[0,7]]}}}],["config",{"_index":73,"t":{"452":{"position":[[0,6]]}}}],["configur",{"_index":5,"t":{"333":{"position":[[12,13]]},"335":{"position":[[11,13]]},"339":{"position":[[0,13]]},"456":{"position":[[10,13]]},"460":{"position":[[8,13]]},"468":{"position":[[0,11]]},"470":{"position":[[0,11]]},"474":{"position":[[34,13]]}}}],["connect",{"_index":63,"t":{"432":{"position":[[7,7]]}}}],["convert",{"_index":6,"t":{"335":{"position":[[0,10]]}}}],["cooki",{"_index":39,"t":{"392":{"position":[[0,6]]},"450":{"position":[[13,6]]}}}],["digitalocean",{"_index":66,"t":{"438":{"position":[[0,12]]}}}],["direct",{"_index":84,"t":{"468":{"position":[[48,9]]}}}],["disclosur",{"_index":1,"t":{"327":{"position":[[9,11]]},"329":{"position":[[23,12]]}}}],["durat",{"_index":17,"t":{"350":{"position":[[0,8]]}}}],["e.g",{"_index":46,"t":{"400":{"position":[[32,4]]}}}],["email",{"_index":69,"t":{"444":{"position":[[0,5]]}}}],["environ",{"_index":77,"t":{"458":{"position":[[0,11]]}}}],["error",{"_index":90,"t":{"472":{"position":[[21,6]]}}}],["facebook",{"_index":54,"t":{"418":{"position":[[0,8]]}}}],["file",{"_index":74,"t":{"452":{"position":[[7,4]]}}}],["fix",{"_index":29,"t":{"368":{"position":[[27,5]]}}}],["format",{"_index":80,"t":{"462":{"position":[[9,6]]},"464":{"position":[[12,6]]},"466":{"position":[[13,6]]}}}],["forwardauth",{"_index":87,"t":{"470":{"position":[[42,11]]},"472":{"position":[[0,11]]},"474":{"position":[[0,11]]}}}],["gener",{"_index":71,"t":{"450":{"position":[[0,10]]}}}],["gitea",{"_index":68,"t":{"442":{"position":[[0,5]]}}}],["github",{"_index":55,"t":{"420":{"position":[[0,6]]}}}],["githubopt",{"_index":18,"t":{"352":{"position":[[0,13]]}}}],["gitlab",{"_index":58,"t":{"426":{"position":[[0,6]]}}}],["gitlabopt",{"_index":19,"t":{"354":{"position":[[0,13]]}}}],["googl",{"_index":51,"t":{"412":{"position":[[0,6]]}}}],["googleopt",{"_index":20,"t":{"356":{"position":[[0,13]]}}}],["header",{"_index":21,"t":{"358":{"position":[[0,6]]}}}],["headervalu",{"_index":22,"t":{"360":{"position":[[0,11]]}}}],["keycloak",{"_index":56,"t":{"422":{"position":[[0,8]]},"424":{"position":[[0,8]]}}}],["keycloakopt",{"_index":23,"t":{"362":{"position":[[0,15]]}}}],["line",{"_index":76,"t":{"454":{"position":[[8,4]]}}}],["linkedin",{"_index":59,"t":{"428":{"position":[[0,8]]}}}],["log",{"_index":79,"t":{"460":{"position":[[0,7]]},"462":{"position":[[5,3]]},"464":{"position":[[8,3]]},"466":{"position":[[9,3]]}}}],["login.gov",{"_index":64,"t":{"434":{"position":[[0,9]]}}}],["logingovopt",{"_index":24,"t":{"364":{"position":[[0,15]]}}}],["loginurlparamet",{"_index":25,"t":{"366":{"position":[[0,17]]}}}],["microsoft",{"_index":60,"t":{"430":{"position":[[0,9]]}}}],["middlewar",{"_index":88,"t":{"470":{"position":[[54,10]]},"472":{"position":[[28,10]]}}}],["new",{"_index":7,"t":{"335":{"position":[[32,3]]},"446":{"position":[[9,3]]}}}],["nextcloud",{"_index":65,"t":{"436":{"position":[[0,9]]}}}],["nginx",{"_index":47,"t":{"400":{"position":[[37,5]]},"468":{"position":[[29,5]]}}}],["oauth2",{"_index":43,"t":{"398":{"position":[[17,6]]}}}],["oidc",{"_index":57,"t":{"424":{"position":[[9,4]]}}}],["oidcopt",{"_index":30,"t":{"370":{"position":[[0,11]]}}}],["openid",{"_index":62,"t":{"432":{"position":[[0,6]]}}}],["option",{"_index":10,"t":{"337":{"position":[[8,7]]},"454":{"position":[[13,7]]}}}],["out",{"_index":49,"t":{"404":{"position":[[5,3]]}}}],["paramet",{"_index":26,"t":{"368":{"position":[[2,9]]}}}],["provid",{"_index":31,"t":{"372":{"position":[[0,8]]},"376":{"position":[[0,9]]},"412":{"position":[[12,8]]},"414":{"position":[[11,8]]},"416":{"position":[[10,8]]},"418":{"position":[[14,8]]},"420":{"position":[[12,8]]},"422":{"position":[[14,8]]},"424":{"position":[[19,8]]},"426":{"position":[[12,8]]},"428":{"position":[[14,8]]},"430":{"position":[[19,8]]},"432":{"position":[[15,8]]},"434":{"position":[[10,8]]},"436":{"position":[[10,8]]},"438":{"position":[[18,8]]},"440":{"position":[[15,8]]},"442":{"position":[[11,8]]},"446":{"position":[[13,8]]}}}],["providertyp",{"_index":32,"t":{"374":{"position":[[0,12]]}}}],["proxi",{"_index":44,"t":{"398":{"position":[[24,5]]},"400":{"position":[[25,6]]}}}],["redi",{"_index":41,"t":{"394":{"position":[[0,5]]}}}],["refer",{"_index":11,"t":{"339":{"position":[[14,9]]}}}],["remov",{"_index":9,"t":{"337":{"position":[[0,7]]}}}],["request",{"_index":81,"t":{"464":{"position":[[0,7]]}}}],["respond",{"_index":2,"t":{"329":{"position":[[12,7]]}}}],["revers",{"_index":45,"t":{"400":{"position":[[17,7]]}}}],["secret",{"_index":72,"t":{"450":{"position":[[20,6]]}}}],["secretsourc",{"_index":33,"t":{"378":{"position":[[0,12]]}}}],["secur",{"_index":0,"t":{"327":{"position":[[0,8]]}}}],["server",{"_index":34,"t":{"380":{"position":[[0,6]]}}}],["sign",{"_index":48,"t":{"404":{"position":[[0,4]]}}}],["standard",{"_index":82,"t":{"466":{"position":[[0,8]]}}}],["static",{"_index":91,"t":{"474":{"position":[[17,6]]}}}],["storag",{"_index":40,"t":{"392":{"position":[[7,7]]},"394":{"position":[[6,7]]}}}],["structur",{"_index":8,"t":{"335":{"position":[[36,9]]}}}],["termin",{"_index":42,"t":{"398":{"position":[[0,9]]},"400":{"position":[[0,9]]}}}],["tl",{"_index":35,"t":{"382":{"position":[[0,3]]},"398":{"position":[[10,3]]},"400":{"position":[[10,3]]}}}],["traefik",{"_index":85,"t":{"470":{"position":[[29,7]]}}}],["upstream",{"_index":37,"t":{"386":{"position":[[0,8]]},"456":{"position":[[0,9]]},"474":{"position":[[24,9]]}}}],["upstreamconfig",{"_index":38,"t":{"388":{"position":[[0,14]]}}}],["urlparameterrul",{"_index":36,"t":{"384":{"position":[[0,16]]}}}],["us",{"_index":3,"t":{"333":{"position":[[0,5]]},"468":{"position":[[16,3]]},"470":{"position":[[16,3]]}}}],["v2",{"_index":86,"t":{"470":{"position":[[37,4]]}}}],["valu",{"_index":28,"t":{"368":{"position":[[18,5]]}}}],["variabl",{"_index":78,"t":{"458":{"position":[[12,9]]}}}],["whose",{"_index":27,"t":{"368":{"position":[[12,5]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":324,"t":"Choose how to deploy: a. Download Prebuilt Binary (current release is v7.4.0) b. Build with $ go get github.com/oauth2-proxy/oauth2-proxy/v7 which will put the binary in $GOPATH/bin c. Using the prebuilt docker image quay.io/oauth2-proxy/oauth2-proxy (AMD64, ARMv6 and ARM64 tags available) d. Using a Kubernetes manifest (Helm) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. $ sha256sum -c sha256sum.txtoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/7.4.x/","h":"","p":323},{"i":326,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/7.4.x/community/security","h":"","p":325},{"i":328,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/7.4.x/community/security","h":"#security-disclosures","p":325},{"i":330,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/7.4.x/community/security","h":"#how-will-we-respond-to-disclosures","p":325},{"i":332,"t":"danger This page contains documentation for alpha features. We reserve the right to make breaking changes to the features detailed within this page with no notice. Options described in this page may be changed, removed, renamed or moved without prior warning. Please beware of this before you use alpha configuration options. This page details a set of alpha configuration options in a new format. Going forward we are intending to add structured configuration in YAML format to replace the existing TOML based configuration file and flags. Below is a reference for the structure of the configuration, with AlphaOptions as the root of the configuration. When using alpha configuration, your config file will look something like below: upstreams: - id: ... ...injectRequestHeaders: - name: ... ...injectResponseHeaders: - name: ... ... Please browse the reference below for the structure of the new configuration format.","s":"Alpha Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"","p":331},{"i":334,"t":"To use the new alpha configuration, generate a YAML file based on the format described in the reference below. Provide the path to this file using the --alpha-config flag. note When using the --alpha-config flag, some options are no longer available. See removed options below for more information.","s":"Using Alpha Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#using-alpha-configuration","p":331},{"i":336,"t":"Before adding the new --alpha-config option, start OAuth2 Proxy using the convert-config-to-alpha flag to convert existing configuration to the new format. oauth2-proxy --convert-config-to-alpha --config ./path/to/existing/config.cfg This will convert any options supported by the new format to YAML and print the new configuration to STDOUT. Copy this to a new file, remove any options from your existing configuration noted in removed options and then start OAuth2 Proxy using the new config. oauth2-proxy --alpha-config ./path/to/new/config.yaml --config ./path/to/existing/config.cfg","s":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":331},{"i":338,"t":"The following flags/options and their respective environment variables are no longer available when using alpha configuration: flush-interval/flush_interval pass-host-header/pass_host_header proxy-websockets/proxy_websockets ssl-upstream-insecure-skip-verify/ssl_upstream_insecure_skip_verify upstream/upstreams pass-basic-auth/pass_basic_auth pass-access-token/pass_access_token pass-user-headers/pass_user_headers pass-authorization-header/pass_authorization_header set-basic-auth/set_basic_auth set-xauthrequest/set_xauthrequest set-authorization-header/set_authorization_header prefer-email-to-user/prefer_email_to_user basic-auth-password/basic_auth_password skip-auth-strip-headers/skip_auth_strip_headers client-id/client_id client-secret/client_secret, and client-secret-file/client_secret_file provider provider-display-name/provider_display_name provider-ca-file/provider_ca_files login-url/login_url redeem-url/redeem_url profile-url/profile_url resource validate-url/validate_url scope prompt approval-prompt/approval_prompt acr-values/acr_values user-id-claim/user_id_claim allowed-group/allowed_groups allowed-role/allowed_roles jwt-key/jwt_key jwt-key-file/jwt_key_file pubjwk-url/pubjwk_url and all provider-specific options, i.e. any option whose name includes oidc, azure, bitbucket, github, gitlab, google or keycloak. Attempting to use any of these options via flags or via config when --alpha-config is set will result in an error. info You must remove these options before starting OAuth2 Proxy with --alpha-config","s":"Removed options","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#removed-options","p":331},{"i":341,"t":"(Appears on: Provider) Field Type Description skipScope bool Skip adding the scope parameter in login requestDefault value is 'false'","s":"ADFSOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#adfsoptions","p":331},{"i":343,"t":"AlphaOptions contains alpha structured configuration options. Usage of these options allows users to access alpha features that are not available as part of the primary configuration structure for OAuth2 Proxy. danger The options within this structure are considered alpha. They may change between releases without notice. Field Type Description upstreamConfig UpstreamConfig UpstreamConfig is used to configure upstream servers.Once a user is authenticated, requests to the server will be proxied tothese upstream servers based on the path mappings defined in this list. injectRequestHeaders []Header InjectRequestHeaders is used to configure headers that should be addedto requests to upstream servers.Headers may source values from either the authenticated user's sessionor from a static secret value. injectResponseHeaders []Header InjectResponseHeaders is used to configure headers that should be addedto responses from the proxy.This is typically used when using the proxy as an external authenticationprovider in conjunction with another proxy such as NGINX and itsauth_request module.Headers may source values from either the authenticated user's sessionor from a static secret value. server Server Server is used to configure the HTTP(S) server for the proxy application.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. metricsServer Server MetricsServer is used to configure the HTTP(S) server for metrics.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. providers Providers Providers is used to configure multiple providers.","s":"AlphaOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#alphaoptions","p":331},{"i":345,"t":"(Appears on: Provider) Field Type Description tenant string Tenant directs to a tenant-specific or common (tenant-independent) endpointDefault value is 'common' graphGroupField string GraphGroupField configures the group field to be used when building the groups list from Microsoft GraphDefault value is 'id'","s":"AzureOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#azureoptions","p":331},{"i":347,"t":"(Appears on: Provider) Field Type Description team string Team sets restrict logins to members of this team repository string Repository sets restrict logins to user with access to this repository","s":"BitbucketOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#bitbucketoptions","p":331},{"i":349,"t":"(Appears on: HeaderValue) ClaimSource allows loading a header value from a claim within the session Field Type Description claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"ClaimSource","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#claimsource","p":331},{"i":351,"t":"(string alias)​ (Appears on: Upstream) Duration is as string representation of a period of time. A duration string is a is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\", \"-1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".","s":"Duration","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#duration","p":331},{"i":353,"t":"(Appears on: Provider) Field Type Description org string Org sets restrict logins to members of this organisation team string Team sets restrict logins to members of this team repo string Repo sets restrict logins to collaborators of this repository token string Token is the token to use when verifying repository collaboratorsit must have push access to the repository users []string Users allows users with these usernames to logineven if they do not belong to the specified org and team or collaborators","s":"GitHubOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#githuboptions","p":331},{"i":355,"t":"(Appears on: Provider) Field Type Description group []string Group sets restrict logins to members of this group projects []string Projects restricts logins to members of any of these projects","s":"GitLabOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#gitlaboptions","p":331},{"i":357,"t":"(Appears on: Provider) Field Type Description group []string Groups sets restrict logins to members of this google group adminEmail string AdminEmail is the google admin to impersonate for api calls serviceAccountJson string ServiceAccountJSON is the path to the service account json credentials","s":"GoogleOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#googleoptions","p":331},{"i":359,"t":"(Appears on: AlphaOptions) Header represents an individual header that will be added to a request or response header. Field Type Description name string Name is the header name to be used for this set of values.Names should be unique within a list of Headers. preserveRequestValue bool PreserveRequestValue determines whether any values for this headershould be preserved for the request to the upstream server.This option only applies to injected request headers.Defaults to false (headers that match this header will be stripped). values []HeaderValue Values contains the desired values for this header","s":"Header","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#header","p":331},{"i":361,"t":"(Appears on: Header) HeaderValue represents a single header value and the sources that can make up the header value Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value. claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"HeaderValue","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#headervalue","p":331},{"i":363,"t":"(Appears on: Provider) Field Type Description groups []string Group enables to restrict login to members of indicated group roles []string Role enables to restrict login to users with role (only available when using the keycloak-oidc provider)","s":"KeycloakOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#keycloakoptions","p":331},{"i":365,"t":"(Appears on: Provider) Field Type Description jwtKey string JWTKey is a private key in PEM format used to sign JWT, jwtKeyFile string JWTKeyFile is a path to the private key file in PEM format used to sign the JWT pubjwkURL string PubJWKURL is the JWK pubkey access endpoint","s":"LoginGovOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#logingovoptions","p":331},{"i":367,"t":"(Appears on: Provider) LoginURLParameter is the configuration for a single query parameter that can be passed through from the /oauth2/start endpoint to the IdP login URL. The \"default\" option specifies the default value or values (if any) that will be passed to the IdP for this parameter, and \"allow\" is a list of options for ways in which this parameter can be set or overridden via the query string to /oauth2/start. If only a default is specified and no \"allow\" then the parameter is effectively fixed - the default value will always be used and anything passed to the start URL will be ignored. If only \"allow\" is specified but no default then the parameter will only be passed on to the IdP if the caller provides it, and no value will be sent otherwise. Examples:","s":"LoginURLParameter","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#loginurlparameter","p":331},{"i":369,"t":"name: organizationdefault:- myorg A parameter that is not passed by default, but may be set to one of a fixed set of values name: promptallow:- value: login- value: consent- value: select_account A parameter that is passed by default but may be overridden by one of a fixed set of values name: promptdefault: [\"login\"]allow:- value: consent- value: select_account A parameter that may be overridden, but only by values that match a regular expression. For example to restrict login_hint to email addresses in your organization's domain: name: login_hintallow:- pattern: '^[^@]*@example\\.com$'# this allows at most one \"@\" sign, and requires \"example.com\" domain. Note that the YAML rules around exactly which characters are allowed and/or require escaping in different types of string literals are convoluted. For regular expressions the single quoted form is simplest as backslash is not considered to be an escape character. Alternatively use the \"chomped block\" format |-: - pattern: |- ^[^@]*@example\\.com$ The hyphen is important, a | block would have a trailing newline character. Field Type Description name string Name specifies the name of the query parameter. default []string (Optional) Default specifies a default value or values that will bepassed to the IdP if not overridden. allow []URLParameterRule (Optional) Allow specifies rules about how the default (if any) may beoverridden via the query string to /oauth2/start. Onlyvalues that match one or more of the allow rules will beforwarded to the IdP.","s":"A parameter whose value is fixed","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"","p":331},{"i":371,"t":"(Appears on: Provider) Field Type Description issuerURL string IssuerURL is the OpenID Connect issuer URLeg: https://accounts.google.com insecureAllowUnverifiedEmail bool InsecureAllowUnverifiedEmail prevents failures if an email address in an id_token is not verifieddefault set to 'false' insecureSkipIssuerVerification bool InsecureSkipIssuerVerification skips verification of ID token issuers. When false, ID Token Issuers must match the OIDC discovery URLdefault set to 'false' insecureSkipNonce bool InsecureSkipNonce skips verifying the ID Token's nonce claim that must matchthe random nonce sent in the initial OAuth flow. Otherwise, the nonce is checkedafter the initial OAuth redeem & subsequent token refreshes.default set to 'true'Warning: In a future release, this will change to 'false' by default for enhanced security. skipDiscovery bool SkipDiscovery allows to skip OIDC discovery and use manually supplied Endpointsdefault set to 'false' jwksURL string JwksURL is the OpenID Connect JWKS URLeg: https://www.googleapis.com/oauth2/v3/certs emailClaim string EmailClaim indicates which claim contains the user email,default set to 'email' groupsClaim string GroupsClaim indicates which claim contains the user groupsdefault set to 'groups' userIDClaim string UserIDClaim indicates which claim contains the user IDdefault set to 'email' audienceClaims []string AudienceClaim allows to define any claim that is verified against the client idBy default aud claim is used for verification. extraAudiences []string ExtraAudiences is a list of additional audiences that are allowedto pass verification in addition to the client id.","s":"OIDCOptions","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#oidcoptions","p":331},{"i":373,"t":"(Appears on: Providers) Provider holds all configuration for a single provider Field Type Description clientID string ClientID is the OAuth Client ID that is defined in the providerThis value is required for all providers. clientSecret string ClientSecret is the OAuth Client Secret that is defined in the providerThis value is required for all providers. clientSecretFile string ClientSecretFile is the name of the filecontaining the OAuth Client Secret, it will be used if ClientSecret is not set. keycloakConfig KeycloakOptions KeycloakConfig holds all configurations for Keycloak provider. azureConfig AzureOptions AzureConfig holds all configurations for Azure provider. ADFSConfig ADFSOptions ADFSConfig holds all configurations for ADFS provider. bitbucketConfig BitbucketOptions BitbucketConfig holds all configurations for Bitbucket provider. githubConfig GitHubOptions GitHubConfig holds all configurations for GitHubC provider. gitlabConfig GitLabOptions GitLabConfig holds all configurations for GitLab provider. googleConfig GoogleOptions GoogleConfig holds all configurations for Google provider. oidcConfig OIDCOptions OIDCConfig holds all configurations for OIDC provideror providers utilize OIDC configurations. loginGovConfig LoginGovOptions LoginGovConfig holds all configurations for LoginGov provider. id string ID should be a unique identifier for the provider.This value is required for all providers. provider ProviderType Type is the OAuth providermust be set from the supported providers group,otherwise 'Google' is set as default name string Name is the providers display nameif set, it will be shown to the users in the login page. caFiles []string CAFiles is a list of paths to CA certificates that should be used when connecting to the provider.If not specified, the default Go trust sources are used instead loginURL string LoginURL is the authentication endpoint loginURLParameters []LoginURLParameter LoginURLParameters defines the parameters that can be passed from the start URL to the IdP login URL redeemURL string RedeemURL is the token redemption endpoint profileURL string ProfileURL is the profile access endpoint resource string ProtectedResource is the resource that is protected (Azure AD and ADFS only) validateURL string ValidateURL is the access token validation endpoint scope string Scope is the OAuth scope specification allowedGroups []string AllowedGroups is a list of restrict logins to members of this group code_challenge_method string The code challenge method","s":"Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#provider","p":331},{"i":375,"t":"(string alias)​ (Appears on: Provider) ProviderType is used to enumerate the different provider type options Valid options are: adfs, azure, bitbucket, digitalocean facebook, github, gitlab, google, keycloak, keycloak-oidc, linkedin, login.gov, nextcloud and oidc.","s":"ProviderType","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#providertype","p":331},{"i":377,"t":"([]Provider alias)​ (Appears on: AlphaOptions) Providers is a collection of definitions for providers.","s":"Providers","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#providers","p":331},{"i":379,"t":"(Appears on: ClaimSource, HeaderValue, TLS) SecretSource references an individual secret value. Only one source within the struct should be defined at any time. Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value.","s":"SecretSource","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#secretsource","p":331},{"i":381,"t":"(Appears on: AlphaOptions) Server represents the configuration for an HTTP(S) server Field Type Description BindAddress string BindAddress is the address on which to serve traffic.Leave blank or set to \"-\" to disable. SecureBindAddress string SecureBindAddress is the address on which to serve secure traffic.Leave blank or set to \"-\" to disable. TLS TLS TLS contains the information for loading the certificate and key for thesecure traffic and further configuration for the TLS server.","s":"Server","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#server","p":331},{"i":383,"t":"(Appears on: Server) TLS contains the information for loading a TLS certificate and key as well as an optional minimal TLS version that is acceptable. Field Type Description Key SecretSource Key is the TLS key data to use.Typically this will come from a file. Cert SecretSource Cert is the TLS certificate data to use.Typically this will come from a file. MinVersion string MinVersion is the minimal TLS version that is acceptable.E.g. Set to \"TLS1.3\" to select TLS version 1.3 CipherSuites []string CipherSuites is a list of TLS cipher suites that are allowed.E.g.:- TLS_RSA_WITH_RC4_128_SHA- TLS_RSA_WITH_AES_256_GCM_SHA384If not specified, the default Go safe cipher list is used.List of valid cipher suites can be found in the crypto/tls documentation.","s":"TLS","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#tls","p":331},{"i":385,"t":"(Appears on: LoginURLParameter) URLParameterRule represents a rule by which query parameters passed to the /oauth2/start endpoint are checked to determine whether they are valid overrides for the given parameter passed to the IdP's login URL. Either Value or Pattern should be supplied, not both. Field Type Description value string A Value rule matches just this specific value pattern string A Pattern rule gives a regular expression that must be matched bysome substring of the value. The expression is not automaticallyanchored to the start and end of the value, if you want to restrictthe whole parameter value you must anchor it yourself with ^ and $.","s":"URLParameterRule","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#urlparameterrule","p":331},{"i":387,"t":"(Appears on: UpstreamConfig) Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path. Field Type Description id string ID should be a unique identifier for the upstream.This value is required for all upstreams. path string Path is used to map requests to the upstream server.The closest match will take precedence and all Paths must be unique.Path can also take a pattern when used with RewriteTarget.Path segments can be captured and matched using regular experessions.Eg:- ^/foo$: Match only the explicit path /foo- ^/bar/$: Match any path prefixed with /bar/- ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget rewriteTarget string RewriteTarget allows users to rewrite the request path before it is sent tothe upstream server.Use the Path to capture segments for reuse within the rewrite target.Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewritethe request /baz/abc/123 to /foo/abc/123 before proxying to theupstream server. uri string The URI of the upstream server. This may be an HTTP(S) server of a Filebased URL. It may include a path, in which case all requests will be servedunder that path.Eg:- http://localhost:8080- https://service.localhost- https://service.localhost/path- file://host/pathIf the URI's path is \"/base\" and the incoming request was for \"/dir\",the upstream request will be for \"/base/dir\". insecureSkipTLSVerify bool InsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.This option is insecure and will allow potential Man-In-The-Middle attacksbetweem OAuth2 Proxy and the usptream server.Defaults to false. static bool Static will make all requests to this upstream have a static response.The response will have a body of \"Authenticated\" and a response codematching StaticCode.If StaticCode is not set, the response will return a 200 response. staticCode int StaticCode determines the response code for the Static response.This option can only be used with Static enabled. flushInterval Duration FlushInterval is the period between flushing the response buffer whenstreaming response from the upstream.Defaults to 1 second. passHostHeader bool PassHostHeader determines whether the request host header should be proxiedto the upstream server.Defaults to true. proxyWebSockets bool ProxyWebSockets enables proxying of websockets to upstream serversDefaults to true. timeout Duration Timeout is the maximum duration the server will wait for a response from the upstream server.Defaults to 30 seconds.","s":"Upstream","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#upstream","p":331},{"i":389,"t":"(Appears on: AlphaOptions) UpstreamConfig is a collection of definitions for upstream servers. Field Type Description proxyRawPath bool ProxyRawPath will pass the raw url path to upstream allowing for url'slike: \"/%2F/\" which would otherwise be redirected to \"/\" upstreams []Upstream Upstreams represents the configuration for the upstream servers.Requests will be proxied to this upstream if the path matches the request path.","s":"UpstreamConfig","u":"/oauth2-proxy/docs/7.4.x/configuration/alpha-config","h":"#upstreamconfig","p":331},{"i":391,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/7.4.x/configuration/session_storage","h":"","p":390},{"i":393,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/7.4.x/configuration/session_storage","h":"#cookie-storage","p":390},{"i":395,"t":"The Redis Storage backend stores sessions, encrypted, in redis. Instead sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128 bit random number, hex-encoded The secret is a 128 bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive. Note, if Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. For example: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14","s":"Redis Storage","u":"/oauth2-proxy/docs/7.4.x/configuration/session_storage","h":"#redis-storage","p":390},{"i":397,"t":"There are two recommended configurations: At OAuth2 Proxy At Reverse Proxy","s":"TLS Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/tls","h":"","p":396},{"i":399,"t":"Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... With this configuration approach the customization of the TLS settings is limited. The minimal acceptable TLS version can be set with --tls-min-version=TLS1.3. The defaults set TLS1.2 as the minimal version. Regardless of the minimum version configured, TLS1.3 is currently always used as the maximal version. TLS server side cipher suites can be specified with --tls-cipher-suite=TLS_RSA_WITH_RC4_128_SHA. If not specified, the defaults from crypto/tls of the currently used go version for building oauth2-proxy will be used. A complete list of valid TLS cipher suite names can be found in crypto/tls.","s":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/7.4.x/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":396},{"i":401,"t":"Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or ... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/7.4.x/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":396},{"i":403,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive","s":"Endpoints","u":"/oauth2-proxy/docs/7.4.x/features/endpoints","h":"","p":402},{"i":405,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored. Make sure to include the actual domain and port (if needed) and not the URL (e.g \"localhost:8081\" instead of \"http://localhost:8081\").","s":"Sign out","u":"/oauth2-proxy/docs/7.4.x/features/endpoints","h":"#sign-out","p":402},{"i":407,"t":"This endpoint returns 202 Accepted response or a 401 Unauthorized response. It can be configured using the following query parameters: allowed_groups: comma separated list of allowed groups allowed_email_domains: comma separated list of allowed email domains allowed_emails: comma separated list of allowed emails","s":"Auth","u":"/oauth2-proxy/docs/7.4.x/features/endpoints","h":"#auth","p":402},{"i":409,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/7.4.x/behaviour","h":"","p":408},{"i":411,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure ADFS Facebook GitHub Keycloak GitLab LinkedIn Microsoft Azure AD OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket Gitea The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"","p":410},{"i":413,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"APIs & Services\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account: https://developers.google.com/identity/protocols/OAuth2ServiceAccount and make sure to download the json file. Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ).","s":"Google Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#google-auth-provider","p":410},{"i":415,"t":"Add an application: go to https://portal.azure.com, choose Azure Active Directory, select App registrations and then click on New registration. Pick a name, check the supported account type(single-tenant, multi-tenant, etc). In the Redirect URI section create a new Web platform entry for each app that you want to protect by the oauth2 proxy(e.g. https://internal.yourcompanycom/oauth2/callback). Click Register. Next we need to add group read permissions for the app registration, on the API Permissions page of the app, click on Add a permission, select Microsoft Graph, then select Application permissions, then click on Group and select Group.Read.All. Hit Add permissions and then on Grant admin consent (you might need an admin to do this).**IMPORTANT**: Even if this permission is listed with **\"Admin consent required=No\"** the consent might actually be required, due to AAD policies you won't be able to see. If you get a **\"Need admin approval\"** during login, most likely this is what you're missing! Next, if you are planning to use v2.0 Azure Auth endpoint, go to the Manifest page and set \"accessTokenAcceptedVersion\": 2 in the App registration manifest file. On the Certificates & secrets page of the app, add a new client secret and note down the value after hitting Add. Configure the proxy with: for V1 Azure Auth endpoint (Azure Active Directory Endpoints - https://login.microsoftonline.com/common/oauth2/authorize) --provider=azure --client-id= --client-secret= --azure-tenant={tenant-id} --oidc-issuer-url=https://sts.windows.net/{tenant-id}/ for V2 Azure Auth endpoint (Microsoft Identity Platform Endpoints - https://login.microsoftonline.com/common/oauth2/v2.0/authorize) --provider=azure --client-id= --client-secret= --azure-tenant={tenant-id} --oidc-issuer-url=https://login.microsoftonline.com/{tenant-id}/v2.0 Notes: When using v2.0 Azure Auth endpoint (https://login.microsoftonline.com/{tenant-id}/v2.0) as --oidc_issuer_url, in conjunction with --resource flag, be sure to append /.default at the end of the resource name. See https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent#the-default-scope for more details. When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#azure-auth-provider","p":410},{"i":417,"t":"Open the ADFS administration console on your Windows Server and add a new Application Group Provide a name for the integration, select Server Application from the Standalone applications section and click Next Follow the wizard to get the client-id, client-secret and configure the application credentials Configure the proxy with --provider=adfs --client-id= --client-secret= Note: When using the ADFS Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"ADFS Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#adfs-auth-provider","p":410},{"i":419,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#facebook-auth-provider","p":410},{"i":421,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to login even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to login with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#github-auth-provider","p":410},{"i":423,"t":"note This is the legacy provider for Keycloak, use Keycloak OIDC Auth Provider if possible. Create new client in your Keycloak realm with Access Type 'confidental' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: --provider=keycloak --client-id= --client-secret= --login-url=\"http(s):///auth/realms//protocol/openid-connect/auth\" --redeem-url=\"http(s):///auth/realms//protocol/openid-connect/token\" --profile-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --validate-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --keycloak-group= --keycloak-group= For group based authorization, the optional --keycloak-group (legacy) or --allowed-group (global standard) flags can be used to specify which groups to limit access to. If these are unset but a groups mapper is set up above in step (3), the provider will still populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response. The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#keycloak-auth-provider","p":410},{"i":425,"t":"Create new client in your Keycloak realm with Access Type 'confidental', Client protocol 'openid-connect' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Create a mapper with Mapper Type 'Audience' and Included Client Audience and Included Custom Audience set to your client name. Make sure you set the following to the appropriate url: --provider=keycloak-oidc --client-id= --client-secret= --redirect-url=https://myapp.com/oauth2/callback --oidc-issuer-url=https:///auth/realms/ --allowed-role= // Optional, required realm role --allowed-role=: // Optional, required client role","s":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":410},{"i":427,"t":"This auth provider has been tested against Gitlab version 12.X. Due to Gitlab API changes, it may not work for version prior to 12.X (see 994). Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. If you need projects filtering, add the extra read_api scope to your application. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\" If your self-hosted GitLab is on a sub-directory (e.g. domain.tld/gitlab), as opposed to its own sub-domain (e.g. gitlab.domain.tld), you may need to add a redirect from domain.tld/oauth pointing at e.g. domain.tld/gitlab/oauth.","s":"GitLab Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#gitlab-auth-provider","p":410},{"i":429,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#linkedin-auth-provider","p":410},{"i":431,"t":"For adding an application to the Microsoft Azure AD follow these steps to add an application. Take note of your TenantId if applicable for your situation. The TenantId can be used to override the default common authorization server with a tenant specific server.","s":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":410},{"i":433,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex and we will use it as an example. The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta, an example can be found below. Dex​ To configure the OIDC provider for Dex, perform the following steps: Download Dex: go get github.com/dexidp/dex See the getting started guide for more details. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Add a configuration block to the staticClients section of examples/config-dev.yaml: - id: oauth2-proxyredirectURIs:- 'http://127.0.0.1:4180/oauth2/callback'name: 'oauth2-proxy'secret: proxy Launch Dex: from $GOPATH/github.com/dexidp/dex, run: bin/dex serve examples/config-dev.yaml In a second terminal, run the oauth2-proxy with the following args: -provider oidc-provider-display-name \"My OIDC Provider\"-client-id oauth2-proxy-client-secret proxy-redirect-url http://127.0.0.1:4180/oauth2/callback-oidc-issuer-url http://127.0.0.1:5556/dex-cookie-secure=false-cookie-secret=secret-email-domain kilgore.trout To serve the current working directory as a web site under the /static endpoint, add: -upstream file://$PWD/#/static/ Test the setup by visiting http://127.0.0.1:4180 or http://127.0.0.1:4180/static . See also our local testing environment for a self-contained example using Docker and etcd as storage for Dex. Okta​ To configure the OIDC provider for Okta, perform the following steps: Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com . The client_id and client_secret are configured in the application settings. Generate a unique cookie_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#openid-connect-provider","p":410},{"i":435,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048 bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost', The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"login.gov Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#logingov-provider","p":410},{"i":437,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to setup the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"Nextcloud Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#nextcloud-provider","p":410},{"i":439,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":410},{"i":441,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who has access to one selected repository use --bitbucket-repository=.","s":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":410},{"i":443,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1\"","s":"Gitea Auth Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#gitea-auth-provider","p":410},{"i":445,"t":"To authorize by email domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#email-authentication","p":410},{"i":447,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/7.4.x/configuration/oauth_provider","h":"#adding-a-new-provider","p":410},{"i":449,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"","p":448},{"i":451,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_'; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#generating-a-cookie-secret","p":448},{"i":453,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#config-file","p":448},{"i":455,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --api-route string | list return HTTP 401 instead of redirecting to authentication server if token is not valid. Format: path_regex --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --code-challenge-method string use PKCE code challenges with the specified method. Either 'plain' or 'S256' (recommended) --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --cookie-csrf-per-request bool Enable having different CSRF cookies per request, making it possible to have parallel requests. false --cookie-csrf-expire duration expire timeframe for CSRF cookie 15m --custom-templates-dir string path to custom html templates --custom-sign-in-logo string path or a URL to an custom image for the sign_in page logo. Use \\\"-\\\" to disable default logo. --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --force-json-errors bool force JSON errors instead of HTTP error pages or redirects false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --gitlab-projects string | list restrict logins to members of any of these projects (may be given multiple times) formatted as orgname/repo=accesslevel. Access level should be a value matching Gitlab access levels, defaulted to 20 if absent --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -B for bcrypt encryption --htpasswd-user-group string | list the groups to be set on sessions for htpasswd users --http-address string [http://]: or unix:// to listen on for HTTP clients. Square brackets are required for ipv6 address, e.g. http://[::1]:4180 \"127.0.0.1:4180\" --https-address string [https://]: to listen on for HTTPS clients. Square brackets are required for ipv6 address, e.g. https://[::1]:443 \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --insecure-oidc-skip-nonce bool skip verifying the OIDC ID Token's nonce claim true --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --oidc-email-claim string which OIDC claim contains the user's email \"email\" --oidc-groups-claim string which OIDC claim contains the user groups \"groups\" --oidc-audience-claim string which OIDC claim contains the audience \"aud\" --oidc-extra-audience string | list additional audiences which are allowed to pass verification \"[]\" --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Groups, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --metrics-address string the address prometheus metrics will be scraped from \"\" --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --redis-connection-idle-timeout int Redis connection idle timeout seconds. If Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. Exmpale: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14 0 --request-id-header string Request header to use as the request ID in logging X-Request-Id --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted and allows X-Forwarded-{Proto,Host,Uri} headers to be used on redirect selection false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Groups, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --show-debug-on-error bool show detailed error information on error pages (WARNING: this may contain sensitive information - do not use in production) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping endpoint false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string | list (DEPRECATED for --skip-auth-route) bypass authentication for requests paths that match (may be given multiple times) --skip-auth-route string | list bypass authentication for requests that match the method & path. Format: method=path_regex OR method!=path_regex. For all methods: path_regex OR !=path_regex --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy true --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-cipher-suite string | list Restricts TLS cipher suites used by server to those listed (e.g. TLS_RSA_WITH_RC4_128_SHA) (may be given multiple times). If not specified, the default Go safe cipher list is used. List of valid cipher suites can be found in the crypto/tls documentation. --tls-key-file string path to private key file --tls-min-version string minimum TLS version that is acceptable, either \"TLS1.2\" or \"TLS1.3\" \"TLS1.2\" --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --upstream-timeout duration maximum amount of time the server will wait for a response from the upstream 30s --allowed-group string | list restrict logins to members of this group (may be given multiple times) --allowed-role string | list restrict logins to users with this role (may be given multiple times). Only works with the keycloak-oidc provider. --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . or a *. to allow subdomains (e.g. .example.com, *.example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. [1]: Only these providers support --cookie-refresh: GitLab, Google and OIDC [2]: When using the whitelist-domain option, any domain prefixed with a . or a *. will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URL's protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*. See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#command-line-options","p":448},{"i":457,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#upstreams-configuration","p":448},{"i":459,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside of a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#environment-variables","p":448},{"i":461,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) can be disabled with --silence-ping-logging reducing log volume. This flag appends the --ping-path to --exclude-logging-paths.","s":"Logging Configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#logging-configuration","p":448},{"i":463,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Message Authenticated via OAuth2 The details of the auth attempt. Protocol HTTP/1.0 The request protocol. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details.","s":"Auth Log Format","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#auth-log-format","p":448},{"i":465,"t":"HTTP request logs will output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#request-log-format","p":448},{"i":467,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#standard-log-format","p":448},{"i":469,"t":"The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\".","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":448},{"i":471,"t":"This option requires --reverse-proxy option to be set.","s":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":448},{"i":473,"t":"The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration: http: routers: a-service: rule: \"Host(`a-service.example.com`)\" service: a-service-backend middlewares: - oauth-errors - oauth-auth tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth: rule: \"Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true oauth-errors: errors: status: - \"401-403\" service: oauth-backend query: \"/oauth2/sign_in\"","s":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":448},{"i":475,"t":"Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint Following options need to be set on oauth2-proxy: --upstream=static://202: Configures a static response for authenticated sessions --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly http: routers: a-service-route-1: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)\" service: a-service-backend middlewares: - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" a-service-route-2: rule: \"Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)\" service: a-service-backend middlewares: - oauth-auth-wo-redirect # unauthenticated session will return a 401 tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services-oauth2-route: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth2-proxy-route: rule: \"Host(`oauth.example.com`) && PathPrefix(`/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 b-service-backend: loadBalancer: servers: - url: http://172.16.0.3:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth-redirect: forwardAuth: address: https://oauth.example.com/ trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization oauth-auth-wo-redirect: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/7.4.x/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":448}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/324",[0,3.166,1,5.072,2,3.446,3,6.542,4,6.542,5,2.942,6,4.202,7,4.391,8,3.446,9,3.166,10,1.323,11,2.333,12,4.391,13,5.828,14,4.391,15,4.391,16,4.391,17,5.072,18,0.574,19,3.446,20,3.446,21,4.391,22,1.286,23,5.828,24,4.391,25,4.391,26,4.391,27,1.941,28,3.821,29,3.821,30,3.821,31,4.391,32,1.531,33,3.821,34,1.971,35,2.942,36,2.596,37,4.391,38,4.391,39,1.226,40,2.756,41,2.221,42,2.756,43,4.391,44,4.391,45,4.391,46,4.391,47,3.821,48,2.12,49,3.166,50,1.717,51,1.861,52,1.026,53,0.928,54,1.717,55,2.12,56,2.12,57,0.928,58,2.333,59,1.861,60,3.658,61,3.821,62,1.531,63,1.787,64,2.457]],["t/326",[22,1.163,53,1.25,65,1.848,66,5.917,67,4.198,68,4.644,69,3.714,70,4.644,71,2.857,72,3.965,73,5.917,74,5.149,75,4.266,76,5.917,77,3.714,78,3.311,79,4.644,80,5.917,81,5.917]],["t/328",[18,0.424,22,1.22,34,1.456,42,3.033,53,1.311,68,4.869,75,4.473,77,3.033,82,3.238,83,4.832,84,4.157,85,5.399,86,2.444,87,3.238,88,5.675,89,3.484,90,5.964,91,4.205,92,3.669,93,4.832,94,3.669,95,4.832,96,2.567,97,4.205,98,3.033,99,4.832,100,4.832,101,4.832,102,2.857,103,4.205,104,1.624,105,3.792,106,2.048,107,2.995,108,4.832,109,4.832,110,4.832,111,2.704,112,4.832,113,4.832,114,4.832,115,4.205,116,3.484,117,4.832,118,2.333,119,4.832,120,3.792,121,3.792,122,1.456]],["t/330",[6,4.498,18,0.547,32,1.7,68,3.826,75,3.514,85,5.43,87,3.266,90,5.43,91,4.242,92,3.689,96,3.656,98,3.059,107,2.353,116,5.623,122,1.469,123,6.881,124,6.239,125,6.239,126,2.353,127,3.514,128,4.874,129,4.874,130,4.874,131,4.874,132,4.242,133,3.514,134,4.874,135,3.826,136,4.874,137,4.874,138,6.239,139,2.155,140,1.765,141,2.353,142,4.874,143,4.874,144,4.874,145,4.874,146,4.874,147,4.874,148,4.874,149,4.874,150,4.874]],["t/332",[10,1.574,11,2.305,18,0.507,34,1.742,52,1.356,54,1.697,57,1.374,86,2.195,88,4.538,94,3.419,122,1.308,126,2.095,140,2.094,151,3.776,152,4.353,153,1.918,154,2.908,155,4.648,156,4.538,157,4.339,158,3.776,159,1.918,160,4.339,161,3.419,162,3.129,163,3.406,164,2.908,165,4.339,166,4.339,167,2.908,168,3.776,169,3.776,170,3.776,171,2.908,172,0.764,173,2.875,174,2.724,175,3.406,176,5.66,177,2.908,178,3.406,179,2.908,180,4.339,181,2.428,182,1.697,183,3.455,184,3.875,185,2.724,186,3.406,187,3.406,188,2.724,189,1.766,190,3.776,191,1.873,192,3.776,193,4.339]],["t/334",[18,0.641,27,2.458,34,2.041,39,0.979,52,0.979,54,2.649,57,1.431,65,1.737,79,4.364,140,2.013,155,4.895,163,4.364,164,3.726,173,2.458,177,3.726,181,3.111,182,2.649,183,3.599,184,3.726,194,3.726,195,2.263,196,2.954,197,3.726,198,2.813]],["t/336",[18,0.551,22,1.431,34,1.482,41,3.174,52,1.216,53,1.538,54,3.056,57,1.538,65,1.536,140,2.784,155,4.877,164,4.204,171,3.295,173,2.774,177,3.295,179,4.204,182,1.923,199,2.488,200,5.712,201,6.274,202,2.613,203,4.28,204,3.86,205,3.86,206,4.917]],["t/338",[18,0.456,22,1.022,27,1.641,32,1.295,39,1.144,41,1.878,52,0.653,53,0.785,54,2.346,57,1.373,58,1.973,59,1.574,60,2.331,79,2.914,82,2.488,92,2.196,104,1.248,107,1.793,122,1.119,155,4.019,164,2.488,171,2.488,172,1.144,182,1.452,189,1.511,191,1.203,207,1.08,208,3.713,209,3.713,210,2.914,211,3.713,212,2.298,213,1.878,214,3.713,215,3.713,216,2.914,217,3.074,218,3.713,219,3.713,220,4.325,221,3.713,222,1.397,223,3.713,224,1.459,225,3.713,226,2.51,227,3.713,228,3.713,229,3.713,230,3.713,231,3.231,232,3.713,233,1.882,234,3.713,235,2.914,236,3.713,237,1.808,238,3.713,239,3.713,240,1.006,241,3.713,242,2.488,243,3.713,244,2.914,245,3.713,246,1.119,247,3.713,248,2.078,249,3.713,250,2.331,251,3.713,252,2.677,253,3.713,254,1.878,255,3.231,256,2.914,257,3.713,258,3.231,259,3.713,260,3.713,261,1.566,262,3.713,263,3.713,264,3.483,265,3.713,266,1.878,267,3.713,268,2.914,269,3.713,270,2.078,271,2.488,272,3.713,273,1.641,274,2.078,275,2.488,276,2.331,277,2.078,278,2.078,279,2.914,280,2.4,281,3.713,282,2.331]],["t/341",[39,1.076,199,3.092,217,3.615,246,1.842,254,3.092,283,1.842,284,1.715,285,1.437,286,1.598,287,6.113,288,3.837,289,3.248,290,6.113,291,2.054,292,4.096]],["t/343",[0,3.486,6,2.418,18,0.656,22,1.294,27,1.482,39,1.092,52,1.316,53,0.709,57,1.198,64,1.876,72,2.247,86,1.696,96,2.569,97,4.208,106,1.421,132,2.918,141,1.619,151,2.918,153,1.482,155,3.8,156,2.632,161,1.983,162,2.418,167,2.247,172,0.851,176,4.935,181,1.876,185,2.105,189,2.308,190,4.208,192,4.208,195,1.365,222,1.261,224,1.357,240,1.309,261,1.01,266,2.446,284,0.941,285,0.788,286,0.877,291,2.086,293,2.918,294,2.918,295,3.353,296,2.918,297,2.418,298,4.45,299,3.353,300,1.771,301,1.819,302,2.669,303,3.353,304,2.918,305,2.105,306,2.526,307,4.835,308,3.353,309,3.035,310,3.486,311,4.835,312,3.035,313,1.619,314,3.353,315,2.918,316,3.353,317,2.632,318,2.632,319,3.353,320,3.353,321,3.486,322,3.353,323,2.446,324,3.795,325,2.865,326,4.835,327,4.208,328,4.208,329,4.835,330,2.569,331,2.859,332,4.835,333,3.353]],["t/345",[9,4.05,18,0.493,39,0.988,52,0.988,106,2.381,122,1.692,270,3.143,283,1.692,284,1.912,285,1.321,286,1.468,291,2.29,334,5.501,335,1.982,336,4.408,337,5.349,338,4.888,339,5.616,340,6.815,341,2.774,342,4.05,343,5.616]],["t/347",[39,1.036,102,4.427,172,1.234,222,2.214,224,1.651,246,2.112,283,1.773,284,1.651,285,1.384,286,1.539,335,2.038,344,3.236,345,2.841,346,5.016]],["t/349",[18,0.452,57,1.087,86,2.603,191,1.667,200,4.039,220,4.656,233,2.338,261,1.551,283,1.551,284,1.444,285,1.21,286,1.345,291,2.561,306,2.095,335,1.878,347,3.711,348,4.479,349,3.711,350,4.352,351,2.526,352,4.479,353,4.429,354,4.479,355,4.479,356,3.711,357,3.448,358,5.62,359,3.711,360,4.479,361,4.039,362,3.043,363,4.479,364,4.039]],["t/351",[10,1.249,32,1.92,40,3.455,57,1.163,71,3.25,72,3.689,77,3.455,189,2.24,283,1.659,335,2.115,365,4.32,366,5.284,367,5.505,368,4.32,369,3.08,370,5.505,371,5.505,372,3.689,373,5.505,374,6.732,375,5.505,376,5.505,377,5.505,378,5.505,379,5.505,380,5.284,381,4.791,382,5.505,383,5.505]],["t/353",[18,0.445,35,3.401,39,0.893,102,4.354,127,4.615,172,1.234,222,1.909,224,1.968,246,2.113,261,1.529,283,1.529,284,1.424,285,1.193,286,1.327,335,2.207,344,3.237,345,3.09,346,4.698,362,3.001,384,5.503,385,3.983,386,4.615,387,2.973,388,5.075,389,3.983,390,5.075,391,3.983,392,2.066]],["t/355",[39,1.047,67,4.208,172,1.047,246,2.126,283,1.793,284,1.669,285,1.399,286,1.555,335,2.051,341,3.061,344,3.256,345,3.406]],["t/357",[39,0.994,172,0.994,195,2.298,246,1.701,277,3.825,283,1.701,284,1.584,285,1.327,286,1.476,335,2.138,341,2.993,344,2.606,345,2.725,393,6.836,394,3.543,395,4.43,396,3.338,397,4.43,398,6.836,399,3.543,400,3.338,401,4.07,402,3.543]],["t/359",[18,0.443,57,1.068,86,2.556,106,2.142,153,2.234,172,0.889,185,3.171,189,2.056,191,2.266,199,2.556,235,3.965,283,1.522,284,1.418,285,1.188,286,1.321,288,3.171,291,2.47,292,3.385,301,2.632,306,3.237,313,2.439,335,1.469,347,3.643,403,3.171,404,3.965,405,5.052,406,3.385,407,6.383,408,3.385,409,3.171,410,5.052,411,5.052,412,5.052,413,5.052,414,5.052,415,5.052,416,2.684,417,5.052]],["t/361",[18,0.403,34,1.383,57,0.97,58,2.439,59,1.946,153,2.03,159,2.03,191,1.944,195,1.869,200,3.603,220,4.328,233,2.173,240,1.243,283,1.383,284,1.288,285,1.08,286,1.2,291,2.674,306,2.722,309,2.882,335,2.14,347,3.31,350,4.118,351,1.796,352,3.996,353,4.197,354,3.996,355,3.996,356,3.31,357,3.076,358,5.223,359,3.31,360,3.996,361,3.603,362,2.715,363,3.996,364,3.603,403,2.882,418,3.31,419,3.076,420,3.31,421,4.821,422,3.31,423,2.882,424,5.223,425,5.223]],["t/363",[18,0.503,27,2.534,39,1.214,224,1.609,246,2.079,273,2.534,278,3.208,283,1.728,284,1.609,285,1.348,286,1.499,335,2.006,341,3.013,344,3.185,345,2.768,426,3.861,427,4.989,428,5.81]],["t/365",[18,0.593,34,1.667,39,0.974,62,1.929,98,4.238,173,2.985,195,2.252,222,2.081,264,4.525,266,3.416,283,1.667,284,1.552,285,1.301,286,1.446,335,2.119,369,3.779,429,6.753,430,5.3,431,6.753,432,6.753,433,3.989,434,4.815]],["t/367",[18,0.428,39,1.098,41,2.466,52,0.858,57,1.318,62,1.7,63,1.984,106,2.066,116,3.514,172,0.858,212,2.438,246,1.469,261,2.074,280,2.25,283,1.469,289,3.984,291,2.438,335,1.417,392,2.801,418,3.514,435,3.826,436,3.916,437,2.882,438,4.498,439,5.4,440,1.751,441,2.104,442,3.826,443,4.242,444,4.874,445,4.242,446,4.874,447,3.826,448,4.874,449,3.514,450,3.266]],["t/369",[10,1.535,18,0.316,57,1.076,63,1.467,65,1.126,104,1.211,116,3.671,118,3.096,133,3.671,172,1.039,173,1.593,177,2.415,191,2.338,197,2.415,212,1.711,246,1.086,261,2.039,280,1.664,284,1.011,285,1.197,286,0.942,289,3.408,291,2.553,296,3.137,335,1.865,344,1.664,369,2.017,392,2.402,416,2.705,418,2.599,436,3.195,438,2.599,439,3.995,441,1.97,443,5.137,451,3.604,452,3.604,453,3.604,454,3.995,455,5.091,456,3.604,457,3.604,458,4.43,459,3.604,460,1.74,461,3.604,462,2.072,463,3.604,464,3.995,465,5.091,466,2.072,467,2.415,468,4.256,469,3.604,470,3.604,471,5.902,472,3.604,473,5.091,474,2.017,475,3.604,476,3.604,477,3.604,478,2.829,479,3.604,480,3.604,481,2.829,482,3.604,483,3.995,484,2.829,485,2.829,486,2.829,487,3.604,488,3.604,489,3.137,490,3.604,491,3.604,492,3.604]],["t/371",[6,2.485,10,0.782,18,0.433,35,3.305,36,2.038,39,0.607,50,1.929,96,1.831,104,1.935,106,1.461,122,1.894,153,2.546,161,2.038,172,1.254,212,1.158,217,3.405,224,1.616,237,1.486,248,1.929,261,1.486,273,2.18,283,1.039,284,0.967,285,0.811,286,0.901,288,3.945,292,4.457,305,2.164,335,2.071,341,1.403,350,3.872,387,2.441,416,1.831,427,5.012,433,2.485,441,1.384,449,2.485,450,2.31,460,1.664,493,4.932,494,2.916,495,2.62,496,3.405,497,4.932,498,3,499,4.932,500,3,501,3.447,502,3,503,3.447,504,4.932,505,4.52,506,3.556,507,3.447,508,4.932,509,3,510,5.012,511,3.447,512,2.485,513,4.292,514,3.447,515,3.447,516,3.447,517,3.447,518,3.447,519,2.705,520,3.447,521,4.932,522,2.705,523,2.485,524,3.447,525,4.932,526,3.447,527,4.932,528,3.447,529,4.932,530,3.447,531,4.932,532,3.447,533,4.932,534,3.447,535,3,536,4.932,537,3.096,538,2.485,539,3.447]],["t/373",[11,1.519,18,0.453,32,0.997,39,1.37,41,1.446,50,2.41,52,1.287,62,2.004,106,1.823,122,1.557,152,1.795,172,1.011,191,1.674,195,1.164,199,1.446,202,1.519,212,0.961,222,1.617,224,0.802,237,1.557,240,1.164,242,1.916,244,2.244,246,1.557,250,1.795,252,3.1,254,2.614,270,1.6,273,1.901,274,2.406,275,1.916,276,1.795,277,2.406,278,1.6,283,0.862,284,0.802,285,1.011,286,0.747,289,1.519,291,1.736,300,0.893,305,3.243,309,1.795,331,1.691,335,2.2,341,1.164,344,1.32,345,1.38,387,1.823,392,1.164,406,1.916,418,2.062,435,4.056,439,2.244,440,1.206,441,1.206,466,2.103,495,1.519,540,7.202,541,4.3,542,4.3,543,5.167,544,4.3,545,2.859,546,4.3,547,2.859,548,4.3,549,2.859,550,4.3,551,2.859,552,3.1,553,4.3,554,2.859,555,4.3,556,2.859,557,2.859,558,4.3,559,2.859,560,4.3,561,2.859,562,4.3,563,2.859,564,2.859,565,2.859,566,4.3,567,2.859,568,2.859,569,2.488,570,2.859,571,2.488,572,2.859,573,2.859,574,2.859,575,2.488,576,4.3,577,2.859,578,2.488,579,1.795,580,4.3,581,4.3,582,2.488,583,4.3,584,2.859,585,1.916,586,4.3,587,4.3,588,2.859,589,1.916,590,2.488,591,2.062]],["t/375",[18,0.5,32,1.989,39,1.211,57,1.454,92,3.372,273,3.041,274,3.191,275,3.822,276,3.58,277,3.191,278,3.849,283,1.719,285,1.341,335,1.658,365,4.476,474,3.191,552,4.112,571,4.963,592,5.703,593,4.963,594,4.963,595,4.476,596,4.112,597,4.476]],["t/377",[39,1.36,185,3.991,283,1.916,365,4.991,598,5.534,599,5.534]],["t/379",[34,1.603,58,2.826,59,2.255,71,2.568,86,2.691,118,2.568,153,2.352,184,3.564,191,1.723,195,2.165,240,1.785,283,1.603,284,1.493,285,1.251,286,1.391,291,2.586,305,3.339,309,3.339,330,2.826,335,2.083,347,3.835,348,4.629,359,3.835,404,4.175,420,3.835,421,5.165,422,3.835,423,3.339,424,5.737,425,5.737,600,5.319]],["t/381",[10,1.685,52,1.143,96,2.76,153,2.296,172,1.143,185,3.26,198,2.628,266,2.628,283,1.565,284,1.458,285,1.221,286,1.358,302,2.471,321,3.745,327,5.653,328,5.653,330,3.945,331,3.072,335,1.889,349,3.745,403,3.26,460,3.136,601,4.683,602,6.495,603,6.495,604,4.683,605,5.194,606,5.194,607,5.194]],["t/383",[11,2.47,32,1.621,34,1.823,42,4.223,48,2.245,57,0.982,84,3.115,106,2.565,153,2.055,154,3.115,172,0.818,198,2.352,266,3.605,283,1.401,284,1.305,285,1.093,286,1.215,302,1.621,330,4.155,331,3.578,335,1.759,349,3.352,359,4.363,392,1.892,441,1.305,608,3.649,609,4.749,610,2.601,611,3.578,612,6.051,613,6.051,614,4.749,615,6.051,616,4.649,617,3.649,618,4.649,619,6.051,620,5.28,621,4.749,622,4.649,623,4.046,624,4.649,625,4.046,626,4.649,627,3.649]],["t/385",[10,1.42,32,1.707,41,2.477,62,1.707,133,3.53,212,2.102,246,1.475,270,2.739,283,1.475,284,1.374,285,1.151,286,1.28,289,3.664,291,2.623,324,3.842,335,1.819,403,3.073,408,3.281,409,3.073,416,3.324,435,3.842,436,3.073,438,3.53,440,1.374,458,5.445,464,5.412,468,4.972,489,4.261,523,3.53,628,3.073,629,3.842,630,4.261,631,4.896,632,4.261,633,4.896,634,4.896,635,4.896,636,3.53,637,2.895,638,4.896,639,4.261,640,4.896,641,4.896]],["t/387",[18,0.536,22,1.118,52,0.493,53,0.592,57,0.895,78,2.369,86,1.417,107,1.352,111,1.567,115,2.438,122,1.276,133,2.02,159,1.238,171,2.837,172,0.493,181,1.567,189,3.037,195,3.068,210,2.199,213,1.417,216,2.199,217,1.657,224,0.786,261,1.276,283,0.844,284,0.786,285,0.659,286,0.732,288,3.57,291,0.941,292,1.877,297,2.02,298,2.199,300,0.875,301,2.695,302,2.13,304,2.438,306,1.14,312,3.834,313,3.316,321,2.02,325,1.293,330,1.488,335,1.654,353,2.657,366,4.006,368,2.199,403,1.758,406,1.877,408,2.837,409,1.758,416,3.413,426,2.369,440,0.786,449,2.02,464,2.199,466,1.14,505,2.199,569,2.438,589,1.877,642,2.801,643,2.801,644,2.801,645,2.438,646,2.801,647,2.801,648,4.234,649,5.104,650,2.801,651,4.234,652,2.801,653,4.234,654,5.104,655,2.438,656,5.688,657,4.234,658,2.801,659,2.801,660,2.801,661,2.801,662,2.801,663,2.801,664,2.801,665,2.801,666,2.801,667,1.954,668,2.801,669,2.801,670,2.801,671,2.801,672,2.801,673,2.801,674,2.801,675,2.801,676,2.801,677,2.801,678,2.801,679,4.234,680,2.801,681,2.801,682,2.801,683,2.801,684,2.801,685,5.104,686,2.801,687,2.438,688,2.801,689,2.801,690,5.104,691,1.488,692,2.199,693,2.438,694,2.801,695,4.234,696,2.438,697,2.801,698,2.801,699,1.877,700,2.837,701,4.234,702,2.801,703,2.504,704,4.234,705,2.438,706,2.801,707,3.323,708,2.199,709,2.438,710,2.199]],["t/389",[10,1.237,22,1.072,52,0.959,185,3.421,189,3.253,195,2.947,212,1.831,261,1.642,283,1.642,284,1.529,285,1.282,286,1.425,288,3.421,298,4.278,301,2.05,302,1.901,403,3.421,416,2.896,440,1.529,450,3.652,598,4.743,599,4.743,711,6.691,712,4.743,713,5.45,714,5.45,715,1.831,716,5.45]],["t/391",[18,0.483,22,1.082,27,2.976,53,1.163,118,2.658,120,4.32,141,2.658,212,1.85,224,1.545,261,1.659,285,1.294,297,3.969,300,1.72,301,2.071,310,3.969,325,2.541,351,3.04,399,3.455,441,1.545,611,3.255,717,6.732,718,2.438,719,3.577,720,3.255,721,3.981,722,3.455]],["t/393",[18,0.53,22,1.32,40,2.906,53,1.419,86,2.342,141,2.235,172,0.815,198,2.342,207,1.346,224,1.299,237,2.023,240,1.254,300,1.446,301,2.27,302,1.614,351,2.783,369,2.59,441,1.299,500,4.029,611,3.568,718,2.739,719,3.206,720,3.97,721,4.207,723,4.841,724,4.629,725,6.191,726,4.629,727,4.629,728,4.629,729,4.629,730,4.029,731,4.629,732,4.629,733,4.629,734,4.029,735,3.338,736,4.629,737,4.629,738,4.029,739,4.029,740,3.102,741,4.629,742,4.029,743,4.029]],["t/395",[18,0.609,27,1.402,52,0.967,53,0.67,54,1.24,55,1.531,57,0.981,63,1.29,65,1.45,75,2.286,103,2.759,105,2.488,107,1.531,111,1.774,121,2.488,172,0.967,182,2.517,191,1.504,198,1.604,207,0.922,224,0.89,237,0.955,240,1.487,266,1.604,280,2.143,291,1.065,293,2.759,351,2.717,356,2.286,372,3.68,387,1.344,392,1.29,406,3.111,423,3.447,440,1.541,441,0.89,449,2.286,495,3.69,512,3.347,579,2.914,585,2.125,608,4.311,637,1.875,707,5.276,718,1.989,719,3.784,720,3.248,721,2.745,722,5.024,735,3.96,744,4.642,745,5.492,746,5.492,747,3.17,748,2.759,749,4.642,750,4.642,751,4.04,752,3.17,753,3.17,754,3.17,755,2.759,756,3.17,757,2.286,758,3.17,759,3.17,760,3.17,761,2.759,762,3.17,763,4.78,764,4.642,765,2.914,766,4.04,767,3.17,768,1.402,769,4.642,770,3.17,771,3.17,772,2.759,773,4.78,774,2.759,775,2.759,776,4.04,777,2.759]],["t/397",[22,1.447,52,1.126,53,1.351,778,5.019,779,4.611,780,3.782]],["t/399",[5,3.71,9,2.933,10,1.747,11,2.161,18,0.552,22,1.328,32,1.419,39,0.974,42,4.436,52,1.189,53,1.428,55,1.964,56,1.964,60,2.553,84,2.726,104,1.367,106,1.725,122,1.226,172,1.108,187,3.193,191,1.318,237,1.668,240,1.499,266,2.801,302,1.419,323,2.058,330,4.136,392,2.253,441,1.554,445,3.54,609,4.345,610,2.276,614,4.345,617,3.193,620,4.94,621,4.345,627,4.345,718,2.005,725,3.54,730,3.54,781,3.193,782,5.536,783,5.536,784,3.54,785,3.54,786,3.54,787,4.068,788,2.726,789,2.933,790,3.54,791,4.068,792,3.54,793,4.068,794,3.54,795,4.068,796,4.068]],["t/401",[10,1.768,18,0.512,22,1.37,39,0.62,51,1.494,52,0.882,53,1.417,54,1.96,55,1.701,56,1.701,60,3.985,62,1.229,63,2.373,64,3.262,65,1.101,96,2.662,104,1.184,122,1.062,183,1.872,187,2.766,189,1.434,207,1.025,213,2.535,237,1.51,240,1.357,277,2.803,280,1.627,300,1.101,301,1.885,302,1.229,306,1.434,315,4.36,323,1.783,325,2.313,349,4.203,441,1.406,495,1.872,699,2.361,710,3.932,718,1.814,757,2.541,768,1.558,780,2.084,781,2.766,784,3.067,785,3.067,786,3.067,797,5.01,798,5.01,799,3.067,800,3.932,801,5.83,802,4.578,803,2.766,804,3.524,805,3.524,806,3.524,807,3.612,808,3.932,809,3.524,810,3.067,811,4.36,812,5.01,813,3.524,814,3.524,815,3.067,816,3.524,817,3.524,818,3.524,819,3.524,820,3.524,821,3.067,822,2.766,823,3.524,824,2.766,825,3.067,826,2.766,827,5.073,828,2.803,829,2.212,830,2.361,831,3.067,832,4.36,833,3.524,834,3.524,835,3.524,836,3.067]],["t/403",[18,0.622,22,1.242,41,2.073,47,4.843,50,2.471,52,0.721,53,1.176,54,1.603,59,1.737,62,2.203,64,2.293,74,3.566,82,2.746,104,1.377,152,3.493,161,2.423,173,1.812,175,3.216,189,1.668,195,1.668,196,2.177,197,2.746,207,1.192,224,1.15,246,1.235,300,1.28,310,2.955,313,3.272,336,3.216,351,2.176,353,3.493,369,2.293,392,1.668,401,2.955,438,2.955,440,1.988,441,1.15,460,2.686,601,2.955,604,2.955,610,2.293,628,2.572,636,2.955,691,3.601,692,4.367,715,1.377,718,2.015,837,3.566,838,4.098,839,4.098,840,2.746,841,4.098,842,3.216,843,3.566,844,5.498,845,3.566,846,3.566,847,3.216,848,4.098,849,2.955,850,5.564,851,3.566,852,5.564,853,3.566,854,2.746,855,2.746,856,4.098,857,2.955,858,2.955,859,2.423,860,2.746,861,3.216]],["t/405",[18,0.368,39,0.994,51,1.777,52,0.738,53,0.886,57,0.886,62,1.462,63,1.706,107,2.728,152,2.631,159,1.853,162,3.022,164,2.808,170,3.648,188,2.631,199,2.12,202,2.227,222,1.577,224,1.919,233,2.046,246,1.263,271,3.786,273,3.024,289,2.227,300,1.765,301,2.125,306,1.706,351,1.639,369,3.161,423,2.631,436,2.631,440,1.793,447,3.289,450,2.808,462,2.601,481,3.289,506,3.022,579,2.631,637,2.478,715,2.569,718,1.518,743,3.648,768,2.498,807,3.022,828,2.345,849,4.074,851,4.917,862,2.808,863,3.289,864,2.345,865,4.191,866,4.191,867,3.022,868,4.191,869,4.191,870,4.191,871,4.191,872,4.191,873,4.191,874,4.191,875,4.191,876,4.191,877,3.648,878,3.289,879,4.191,880,3.648,881,2.345,882,2.808,883,2.631,884,4.191,885,4.191]],["t/407",[18,0.49,52,0.983,62,1.949,104,2.283,106,3.104,207,1.625,261,2.206,289,2.969,313,3.28,341,2.274,436,3.507,462,2.274,610,3.127,691,2.969,858,4.029,859,3.304,860,3.744,886,5.588,887,4.906,888,4.906,889,5.588,890,5.588]],["t/409",[10,1.366,18,0.405,22,1.183,39,1.179,50,1.803,52,1.059,62,1.608,82,3.089,87,3.089,111,2.58,118,2.226,162,3.324,172,0.811,174,2.894,189,1.876,191,1.493,196,2.449,199,2.332,212,1.549,217,3.559,224,1.689,233,1.669,261,1.389,264,4.033,271,3.089,300,2.219,301,2.521,302,1.608,306,1.876,351,2.354,372,3.089,387,2.841,416,2.449,437,2.726,466,1.876,610,2.58,628,2.894,691,3.198,715,1.549,718,2.572,719,3.198,722,2.894,859,2.726,860,3.089,862,3.089,864,2.58,891,4.012,892,4.012,893,4.012,894,4.61,895,4.61,896,4.61,897,4.61]],["t/411",[5,3.325,10,1.126,18,0.435,22,0.975,32,1.73,39,1.378,48,2.395,49,3.578,50,1.941,51,2.103,52,1.111,53,1.048,65,1.55,88,3.894,92,3.731,175,3.894,199,2.51,202,3.353,274,3.531,275,3.325,276,3.114,277,3.531,278,2.776,291,1.667,318,3.894,323,2.51,342,3.578,350,3.531,441,1.392,462,2.019,494,3.731,495,3.353,552,3.578,593,4.318,594,4.318,595,3.894,596,3.578,597,3.894,715,1.667,768,2.193,898,4.962,899,4.318,900,4.962]],["t/413",[0,5.281,2,3.242,10,1.27,22,0.812,32,0.946,34,1.686,36,2.443,39,0.477,48,1.309,50,1.957,51,1.751,53,0.873,57,0.573,65,1.748,67,3.369,71,1.309,78,1.518,89,1.956,104,2.023,106,1.15,122,1.686,135,2.129,139,2.662,140,1.812,141,1.309,158,2.36,159,2.212,172,0.881,179,2.768,182,2.188,188,1.702,191,1.338,195,1.104,196,1.441,207,1.455,212,0.911,222,1.02,224,1.404,226,2.416,233,1.496,237,1.912,240,0.735,254,1.372,270,1.518,277,3.369,300,0.847,318,2.129,341,2.582,344,1.252,345,1.309,351,1.061,387,1.15,394,3.512,395,2.129,396,3.561,397,2.129,399,3.141,400,2.959,401,3.608,402,3.141,426,2.312,454,2.129,460,1.309,462,2.037,474,1.518,513,2.36,519,2.129,575,2.36,628,2.593,632,2.36,667,1.252,699,1.817,715,0.911,718,0.982,738,2.36,740,3.353,765,1.702,779,1.956,810,2.36,824,2.129,853,2.36,863,2.129,881,1.518,901,2.129,902,3.505,903,2.712,904,2.36,905,2.712,906,2.36,907,5.004,908,5.595,909,2.712,910,2.712,911,2.712,912,3.242,913,1.956,914,2.129,915,2.36,916,2.36,917,2.712,918,3.595,919,2.129,920,2.712,921,2.712,922,2.36,923,4.131,924,1.702,925,2.712,926,2.712,927,2.36,928,2.712,929,2.712,930,1.702,931,1.956,932,4.131,933,2.712,934,2.712,935,2.712,936,1.817,937,2.712,938,2.712,939,2.129,940,2.712,941,2.36,942,2.712,943,2.36,944,2.712,945,2.129,946,2.129,947,1.956,948,2.712,949,2.712]],["t/415",[0,2.005,10,0.631,11,2.237,18,0.446,22,0.547,30,3.664,34,0.838,39,0.489,40,1.745,48,2.736,49,2.005,51,1.785,52,0.489,53,0.588,62,2.234,64,2.356,65,1.315,94,1.644,106,1.179,122,1.834,126,3.092,139,1.229,140,1.84,152,3.189,172,0.489,182,1.087,191,1.364,196,2.237,197,1.863,202,1.477,212,0.934,233,2.204,237,1.834,240,1.14,246,0.838,252,3.035,254,1.407,256,2.182,273,1.861,274,3.925,291,0.934,317,2.182,331,1.644,334,3.035,341,1.713,342,3.035,351,1.647,394,3.557,396,1.644,400,1.644,437,1.644,441,1.181,454,3.987,466,1.132,496,2.489,585,1.863,628,1.745,636,2.005,637,1.644,667,1.283,715,0.934,718,1.524,719,1.477,720,1.644,722,1.745,723,2.005,768,2.246,800,3.304,854,4.292,881,1.556,882,1.863,893,2.42,901,4.447,902,3.011,915,3.664,918,2.42,919,2.182,931,4.086,936,1.863,943,3.664,946,5.222,947,2.005,950,2.78,951,4.21,952,2.642,953,2.42,954,2.78,955,2.42,956,2.182,957,1.863,958,2.42,959,2.78,960,2.78,961,3.304,962,2.78,963,2.78,964,2.42,965,2.78,966,2.182,967,2.78,968,2.42,969,2.78,970,2.42,971,2.78,972,2.42,973,2.78,974,2.78,975,4.21,976,2.78,977,2.78,978,2.78,979,4.21,980,3.664,981,3.304,982,3.664,983,4.21,984,2.78,985,2.182,986,2.182,987,2.78,988,2.78,989,4.21,990,2.78,991,2.42,992,2.182,993,2.78,994,2.78,995,2.78,996,2.78,997,2.182,998,2.182,999,2.42,1000,2.182,1001,2.42,1002,2.42,1003,2.42]],["t/417",[18,0.419,22,0.938,39,1.083,48,2.303,51,3.05,52,1.083,64,3.442,65,1.49,89,3.439,122,1.854,126,2.303,140,1.727,191,1.545,207,1.387,212,1.603,233,1.727,237,2.168,240,1.292,302,2.145,341,1.941,351,2.406,402,2.993,437,2.82,552,4.436,718,2.228,719,2.534,720,2.82,722,2.993,723,3.439,902,3.269,931,3.439,939,3.743,957,3.196,961,3.743,980,4.151,981,4.828,982,4.151,997,3.743,998,3.743,999,4.151,1000,3.743,1001,4.151,1002,4.151,1003,4.151,1004,4.769,1005,4.769,1006,4.151,1007,4.769,1008,4.769,1009,4.769]],["t/419",[32,2.143,50,2.404,139,2.717,140,2.226,172,1.082,246,1.852,667,2.837,715,2.065,854,4.119,924,3.858,930,3.858,1010,7.191,1011,6.147]],["t/421",[18,0.422,32,1.159,35,2.227,39,0.845,57,1.015,65,1.038,67,1.859,86,1.681,92,4.518,98,2.086,102,4.041,104,1.117,107,2.319,127,4.927,139,2.124,140,1.203,159,1.469,172,0.845,173,1.469,182,1.879,202,1.765,207,1.64,222,2.651,224,1.977,226,1.604,233,1.203,246,2.123,248,1.859,254,1.681,261,1.862,270,1.859,300,1.038,344,3.331,345,2.319,346,4.834,362,2.84,384,4.851,385,2.608,386,2.396,387,2.62,389,2.608,391,3.77,392,2.296,440,1.583,442,2.608,462,1.352,537,3.015,765,2.086,768,1.469,778,2.608,855,2.227,881,1.859,887,3.78,888,3.78,924,2.086,930,2.086,947,2.396,966,3.77,1012,3.323,1013,2.396,1014,2.608,1015,3.323,1016,5.641,1017,2.608,1018,2.892,1019,3.323,1020,2.608,1021,2.608,1022,4.18,1023,2.892,1024,3.323,1025,3.323,1026,3.323,1027,3.323,1028,5.641,1029,3.323,1030,3.323,1031,3.323]],["t/423",[18,0.527,32,1.817,39,1.058,57,0.787,62,1.299,65,1.628,77,2.338,78,2.085,139,2.877,140,1.349,159,1.647,172,0.917,174,2.338,181,2.085,182,1.457,189,1.516,191,1.688,207,1.083,222,1.96,226,1.799,233,1.349,237,1.961,240,1.411,246,1.123,248,2.085,250,2.338,261,1.123,273,1.647,278,4.281,285,1.225,291,1.252,302,1.299,305,2.338,306,1.516,313,1.799,341,3.176,350,2.085,387,1.579,392,1.516,394,3.271,402,2.338,419,2.496,440,1.045,611,2.203,667,1.72,715,1.252,765,2.338,789,2.686,828,2.085,863,2.924,878,2.924,881,2.085,902,1.979,912,2.924,924,2.338,981,2.924,1032,5.211,1033,3.242,1034,3.242,1035,5.23,1036,2.686,1037,3.242,1038,2.924,1039,3.242,1040,3.242,1041,6.508,1042,5.664,1043,6.508,1044,3.726,1045,3.726,1046,5.211,1047,3.726,1048,3.726,1049,3.726,1050,2.686,1051,3.726,1052,2.924,1053,3.726,1054,3.726,1055,3.726]],["t/425",[10,1.316,32,1.519,57,1.225,65,1.361,78,2.438,107,2.799,122,1.313,139,2.881,140,1.577,159,1.926,172,1.02,191,2.25,207,1.267,222,1.639,237,2.324,240,1.57,261,1.747,273,2.563,278,2.438,285,1.532,341,2.36,350,2.438,387,1.847,402,2.734,428,5.452,440,1.222,466,2.36,494,2.576,495,2.314,496,2.576,538,4.698,667,2.011,715,1.948,765,2.734,788,2.919,881,2.438,912,3.419,924,2.734,1033,5.671,1034,3.791,1035,6.046,1036,3.141,1037,3.791,1039,3.791,1040,5.046,1042,3.791,1056,2.919,1057,4.356,1058,4.356,1059,4.356,1060,4.356,1061,4.356,1062,4.356]],["t/427",[10,0.866,18,0.465,36,2.256,39,0.672,42,3.325,50,1.492,51,2.788,54,1.492,57,0.806,67,2.135,69,3.325,77,2.395,104,1.282,126,2.938,159,2.342,161,2.256,168,3.321,172,1.071,196,2.027,207,2.009,213,3.079,233,1.382,237,1.596,240,1.033,246,1.15,250,2.395,254,2.68,273,1.687,276,4.693,341,2.156,344,2.446,345,1.842,396,2.256,409,2.395,426,2.135,440,1.939,462,1.553,494,2.256,496,2.256,715,2.209,718,1.918,734,3.321,765,2.395,768,2.342,881,2.964,883,4.127,887,2.557,888,2.557,902,2.815,952,2.395,968,3.321,1020,2.995,1036,2.751,1063,2.995,1064,5.298,1065,3.815,1066,3.815,1067,4.777,1068,3.815,1069,3.815,1070,3.321,1071,3.815,1072,3.815,1073,3.815,1074,3.815,1075,3.815,1076,3.815,1077,3.815,1078,3.815,1079,3.815,1080,3.321,1081,5.298,1082,3.815,1083,3.815,1084,3.815,1085,3.815,1086,3.321,1087,3.815]],["t/429",[10,1.51,48,2.606,50,2.602,65,1.686,67,3.02,78,3.02,139,2.386,140,1.954,224,1.514,240,1.801,254,2.73,266,3.647,284,1.514,396,3.192,440,1.514,441,1.514,466,2.197,595,4.236,655,4.697,715,1.814,901,4.236,902,2.868,913,3.892,916,4.697,924,3.388,957,3.617,1013,3.892,1088,5.397,1089,5.397,1090,5.397,1091,5.397,1092,4.697,1093,5.788]],["t/431",[18,0.511,51,3.159,65,1.819,78,3.258,126,2.811,199,3.524,207,1.693,226,2.811,270,3.258,274,3.258,302,2.429,334,4.199,337,4.57,342,4.199,441,1.634,629,4.57,902,3.094,1094,6.965,1095,5.823]],["t/433",[2,1.394,5,1.19,10,1.734,11,0.944,18,0.462,19,1.394,22,1.19,27,0.785,34,0.888,36,1.05,39,1.175,40,1.115,41,1.912,48,2.356,50,0.695,51,2.776,52,1.027,53,1.28,54,1.478,57,0.799,58,0.944,62,0.619,63,2.269,65,1.374,67,0.994,69,2.372,72,1.975,78,0.994,84,1.19,86,0.899,89,1.281,94,1.05,96,0.944,104,0.597,122,1.326,126,2.356,139,1.671,140,0.643,141,0.858,153,1.303,154,1.19,159,1.303,163,1.394,172,0.926,181,1.65,183,0.944,188,1.115,189,0.723,191,1.425,194,1.975,196,2.008,197,1.975,198,0.899,207,1.419,212,0.597,222,1.422,224,0.498,226,2.923,237,1.586,240,1.024,242,1.19,246,0.888,254,0.899,261,0.888,273,2.327,284,0.498,285,0.693,286,0.464,302,1.702,309,1.115,312,1.115,323,1.491,341,1.2,350,0.994,387,1.25,396,1.05,400,1.743,406,1.19,440,1.234,441,1.369,450,1.19,462,0.723,466,0.723,483,1.394,494,2.235,495,2.337,496,2.235,519,1.394,537,1.115,538,1.281,585,1.975,589,1.975,601,2.126,637,1.05,667,2.253,700,1.19,703,1.743,715,1.478,718,1.368,720,1.05,723,1.281,735,1.281,740,1.975,768,0.785,781,1.394,788,1.19,789,1.281,800,1.394,807,1.281,826,1.394,849,2.126,854,2.532,855,1.19,864,0.994,883,1.115,902,2.337,913,2.126,919,3.453,922,1.546,930,2.372,931,2.126,936,1.19,939,1.394,941,2.566,952,1.115,953,2.566,957,1.19,964,2.566,970,1.546,986,2.314,991,1.546,1014,1.394,1063,2.966,1067,1.394,1092,1.546,1096,1.776,1097,1.776,1098,1.776,1099,1.776,1100,1.776,1101,1.776,1102,5.263,1103,6.055,1104,2.948,1105,1.776,1106,1.776,1107,1.546,1108,2.566,1109,1.776,1110,2.948,1111,2.948,1112,1.776,1113,1.776,1114,1.776,1115,1.776,1116,1.776,1117,1.776,1118,1.776,1119,1.546,1120,1.776,1121,1.546,1122,1.776,1123,1.776,1124,1.776,1125,1.776,1126,1.776,1127,1.776,1128,1.394,1129,1.776,1130,1.776,1131,1.776,1132,1.776,1133,1.394,1134,1.776,1135,3.829,1136,2.948,1137,1.776,1138,2.948,1139,1.776,1140,1.776,1141,2.948,1142,1.776,1143,1.776,1144,1.776,1145,1.776,1146,1.776,1147,1.776,1148,2.948,1149,1.776,1150,1.776,1151,1.546,1152,1.776,1153,2.566,1154,1.546,1155,1.546,1156,1.776,1157,2.948,1158,1.776,1159,1.546,1160,1.776,1161,3.779,1162,1.776,1163,2.566,1164,1.546,1165,1.776,1166,1.546,1167,1.776,1168,2.948,1169,1.776,1170,1.776,1171,1.776,1172,1.776,1173,1.776,1174,1.776,1175,1.776,1176,1.776,1177,1.776]],["t/435",[1,2.019,9,2.639,10,1.601,11,1.233,18,0.321,19,3.557,20,1.821,22,1.306,27,1.026,34,1.551,39,0.986,41,1.851,48,1.12,49,2.639,51,2.374,53,0.958,57,0.958,58,2.976,59,2.182,62,1.276,69,1.456,96,1.944,98,1.456,102,1.372,104,1.523,111,1.298,118,1.12,122,0.699,135,1.821,139,1.618,153,1.026,159,2.275,172,0.906,173,1.618,184,2.452,188,1.456,194,1.554,198,1.174,202,1.233,205,1.821,207,0.675,212,0.779,217,3.043,222,1.705,226,1.12,237,1.366,240,0.628,246,0.699,248,1.298,250,1.456,261,0.699,264,2.452,266,2.603,268,1.821,273,2.938,280,1.071,300,0.725,302,0.809,323,2.293,331,1.372,335,0.675,369,1.298,386,1.673,387,0.983,400,2.164,419,2.452,430,3.557,433,2.639,437,1.372,440,1.748,442,1.821,462,0.944,466,0.944,467,1.554,485,1.821,494,2.164,495,1.944,496,3.043,506,3.71,522,1.821,523,1.673,596,4.291,611,1.372,637,1.372,667,1.689,691,1.233,715,1.523,718,1.863,751,3.185,757,1.673,768,1.026,799,2.019,829,2.297,849,1.673,854,1.554,867,1.673,877,2.019,881,1.298,904,2.019,906,3.185,914,1.821,952,1.456,986,1.821,997,1.821,1006,3.185,1017,1.821,1021,1.821,1022,2.019,1056,1.554,1063,1.821,1067,1.821,1107,2.019,1119,2.019,1121,3.185,1128,1.821,1133,1.821,1151,2.019,1159,2.019,1163,3.944,1164,2.019,1178,3.66,1179,3.66,1180,3.66,1181,2.32,1182,2.019,1183,2.32,1184,2.32,1185,2.32,1186,2.32,1187,2.32,1188,2.32,1189,2.32,1190,3.66,1191,2.32,1192,2.32,1193,2.32,1194,2.32,1195,2.019,1196,2.32,1197,2.32,1198,2.32,1199,2.32,1200,2.32,1201,3.66,1202,2.32,1203,2.019,1204,2.32,1205,2.019,1206,2.32,1207,2.32,1208,2.019,1209,2.32,1210,2.32,1211,1.821,1212,2.32,1213,2.019,1214,2.32,1215,2.32,1216,2.32,1217,2.32,1218,2.32,1219,2.32,1220,2.32,1221,2.32,1222,2.32,1223,2.32,1224,2.019,1225,2.32,1226,2.32,1227,2.32,1228,3.66,1229,2.32,1230,2.32,1231,2.32,1232,1.821,1233,2.32,1234,2.019,1235,2.32,1236,2.019,1237,2.32,1238,1.821,1239,2.32,1240,2.32,1241,2.32,1242,2.32,1243,2.32,1244,2.32]],["t/437",[18,0.535,32,2.128,36,2.784,39,1.191,52,0.829,53,0.995,55,2.273,56,2.273,58,2.502,59,1.996,65,1.471,87,3.155,111,2.635,122,1.839,154,3.155,184,3.155,224,1.321,237,2.158,240,1.652,246,1.419,248,2.635,261,1.419,280,2.173,300,1.471,392,1.916,394,3.83,409,2.955,440,2.009,478,3.695,597,6.273,667,2.173,715,1.582,945,4.789,1080,5.891,1108,4.098,1245,3.695,1246,4.708,1247,4.708,1248,4.708,1249,4.098,1250,4.708,1251,4.708,1252,4.708,1253,4.708]],["t/439",[18,0.537,22,1.203,34,1.425,39,0.832,50,1.849,51,2.594,52,0.832,53,1.433,54,1.849,55,2.283,56,2.283,57,1.433,65,1.477,122,1.844,139,2.09,140,1.712,161,2.796,172,0.832,191,1.532,207,1.375,212,1.589,213,2.392,237,2.161,240,1.657,284,1.327,286,1.236,323,2.392,416,2.512,440,2.084,441,1.327,481,3.711,715,2.279,768,2.09,855,3.168,862,3.168,882,3.168,913,3.409,1013,3.409,1038,3.711,1135,4.115,1238,3.711,1254,4.728,1255,4.728,1256,4.728,1257,3.711,1258,4.728,1259,4.115,1260,4.728,1261,4.728,1262,4.728]],["t/441",[10,1.515,18,0.621,22,1.177,39,0.805,48,2.89,50,1.788,52,1.053,53,1.265,57,1.265,65,1.428,102,3.54,104,1.536,118,2.207,122,1.804,126,2.207,140,1.656,191,1.939,207,1.329,212,1.536,222,2.511,224,1.283,237,2.134,240,1.621,261,1.378,275,4.472,300,1.428,323,2.313,344,2.763,345,2.207,346,4.011,400,3.54,440,1.283,441,1.283,537,2.87,855,3.064,882,3.064,946,3.588,947,4.316,957,3.064,1036,3.297,1038,3.588,1093,3.979,1166,3.979,1238,3.588,1257,3.588,1259,3.979,1263,4.572,1264,4.572,1265,4.572,1266,4.572,1267,4.572]],["t/443",[10,1.424,22,0.967,32,1.715,39,0.865,51,2.085,57,1.039,65,1.536,122,1.891,139,2.174,140,1.781,194,4.204,207,1.43,212,1.652,213,3.682,237,2.193,240,1.699,242,3.295,246,1.482,248,2.752,271,3.295,325,2.27,440,1.38,667,2.27,715,2.108,899,6.691,930,3.087,1013,3.546,1014,3.86,1153,4.28,1154,4.28,1268,4.917,1269,4.917,1270,6.274,1271,4.917,1272,4.917,1273,4.917,1274,6.909,1275,4.917,1276,4.917,1277,4.917]],["t/445",[18,0.654,56,2.811,104,2.722,118,2.811,226,3.598,300,1.819,404,4.57,460,3.363,462,2.835,1278,5.823,1279,5.823,1280,5.068]],["t/447",[18,0.528,22,1.182,39,1.33,53,1.271,63,2.447,111,3.365,126,2.903,140,2.735,207,1.748,261,1.812,305,3.774,945,4.719,1281,6.013,1282,6.013]],["t/449",[22,1.127,34,2.079,52,1.214,53,1.211,54,2.242,55,3.331,56,3.331,57,1.458,58,3.933,59,3.138,172,1.009,271,3.841,280,2.646,645,4.989,1283,5.733,1284,5.733,1285,6.9]],["t/451",[10,1.846,17,3.946,18,0.398,28,3.946,32,1.581,55,2.189,118,2.189,126,2.189,172,0.798,183,2.409,194,3.039,240,1.228,285,1.066,351,1.774,420,4.293,422,4.793,423,2.846,440,1.272,485,3.559,718,1.642,1155,3.946,1195,5.181,1286,4.535,1287,5.953,1288,4.535,1289,4.535,1290,4.535,1291,4.535,1292,4.535,1293,4.535,1294,4.535,1295,4.535,1296,4.535,1297,4.535,1298,6.647,1299,4.535,1300,5.217,1301,4.535,1302,4.535,1303,6.647,1304,4.535,1305,4.535,1306,4.535,1307,4.535,1308,4.535,1309,4.535,1310,4.535,1311,4.535,1312,4.535,1313,4.535,1314,4.535,1315,4.535,1316,3.946,1317,4.535]],["t/453",[10,1.542,18,0.49,34,2.047,53,1.181,54,2.863,55,2.698,56,2.698,57,1.181,63,2.274,71,2.698,141,2.698,178,4.386,380,4.386,392,2.98,484,4.386,486,4.386,952,3.507,1245,5.332,1300,4.386,1318,4.863,1319,4.863,1320,6.794,1321,5.588,1322,5.588]],["t/455",[5,0.361,8,0.423,10,1.481,11,0.764,18,0.582,20,0.423,22,0.719,32,0.958,34,1.578,35,1.654,36,0.6,39,0.706,42,1.141,48,0.26,50,1.267,51,0.229,52,0.434,53,0.215,54,0.563,56,0.878,57,0.812,60,0.637,61,0.469,62,1.205,64,0.805,67,0.568,69,0.338,71,1.855,77,0.338,82,0.361,84,0.361,87,0.361,92,1.277,94,0.319,96,1.147,98,0.903,102,0.851,104,1.543,106,2.358,107,0.26,111,0.302,118,0.695,120,1.129,121,1.129,122,0.828,126,0.49,127,1.037,139,0.449,141,1.451,152,1.355,153,0.804,154,0.361,156,0.797,159,0.238,161,0.319,169,0.884,171,0.361,172,0.888,173,1.432,174,2.295,181,0.302,182,0.397,183,0.287,186,0.423,188,0.637,189,1.563,191,0.89,195,1.967,196,1.311,198,1.39,199,0.514,202,0.539,203,0.469,204,0.797,210,0.797,212,1.499,213,0.728,216,1.694,217,2.858,220,2.336,222,1.376,224,1.213,226,1.042,231,1.879,233,1.789,235,1.129,237,1.158,240,0.585,242,0.964,244,0.797,246,1.158,248,0.568,250,0.637,252,0.732,254,0.514,255,1.582,256,0.797,258,0.469,261,1.303,264,2.574,266,1.639,268,0.423,270,1.017,273,2.314,274,0.805,276,1.141,277,1.538,278,0.302,279,0.423,280,0.839,282,1.886,284,0.151,285,0.239,286,0.141,288,3.894,291,0.341,292,3.623,297,0.389,300,1.394,301,2.034,302,0.634,306,2.2,309,0.338,310,0.389,312,0.637,313,1.564,317,1.427,323,0.273,325,2.231,330,1.311,331,1.075,334,1.311,335,2.161,337,0.797,338,0.469,341,1.633,344,1.496,345,1.191,346,0.964,350,1.538,351,1.075,353,1.141,356,0.389,357,0.68,362,1.625,364,2.713,366,1.937,368,0.423,369,1.208,372,0.68,384,0.797,385,0.423,386,0.389,387,1.892,389,0.423,391,0.423,392,1.004,394,0.637,395,0.423,396,0.6,397,0.423,399,0.637,400,0.6,401,1.311,402,0.338,408,0.361,409,0.338,416,1.311,421,0.389,422,0.389,423,0.338,426,0.568,428,0.797,430,0.797,433,1.311,434,0.469,440,1.56,441,0.97,447,0.423,460,1.669,462,1.633,466,1.223,467,0.964,474,0.568,478,0.797,494,0.319,495,2.506,496,1.625,498,0.469,502,0.469,505,1.129,506,1.037,509,0.884,510,0.884,535,1.252,537,0.338,538,1.311,578,1.582,579,1.355,582,0.469,585,0.361,589,0.68,590,0.884,591,1.311,596,1.037,604,1.982,608,0.797,609,0.423,610,0.568,611,0.319,614,0.423,617,0.423,620,1.427,621,1.129,623,0.469,625,0.469,627,0.423,628,0.903,629,0.797,630,2.82,667,0.249,691,0.287,693,1.582,696,0.469,699,0.68,700,0.361,703,2.373,705,0.884,707,2.543,708,1.427,709,0.469,710,0.423,715,1.089,718,2.154,719,0.966,720,0.6,721,0.319,722,3.802,735,0.389,740,0.964,742,2.148,748,0.469,755,0.469,763,3.493,766,2.148,768,0.449,772,0.469,773,1.879,774,0.469,775,0.469,776,0.884,777,0.469,779,0.389,780,1.459,788,1.654,790,0.469,792,0.884,794,0.469,802,0.732,803,0.423,807,1.311,808,0.797,811,0.469,822,1.129,828,2.878,829,1.549,830,2.574,837,0.469,840,0.964,842,1.937,843,0.884,844,0.884,845,0.469,846,0.469,859,0.319,861,1.129,864,3.389,867,0.389,878,0.423,880,1.252,883,2.713,887,0.964,888,0.964,891,0.469,892,1.879,902,0.287,914,0.423,927,0.469,930,0.338,936,0.68,955,0.469,956,0.423,958,0.469,961,0.423,966,0.423,1017,1.129,1020,0.797,1021,0.423,1023,0.469,1050,1.311,1056,0.361,1070,1.879,1128,1.129,1182,0.469,1203,0.469,1205,0.469,1211,0.423,1224,0.469,1234,0.469,1236,0.469,1249,0.469,1280,1.252,1323,0.539,1324,1.427,1325,1.439,1326,0.539,1327,2.159,1328,0.539,1329,0.539,1330,0.469,1331,0.539,1332,0.539,1333,0.539,1334,0.539,1335,0.539,1336,1.818,1337,1.015,1338,0.539,1339,1.015,1340,0.539,1341,0.539,1342,0.539,1343,0.539,1344,1.818,1345,0.539,1346,1.015,1347,0.539,1348,0.539,1349,1.818,1350,0.469,1351,0.539,1352,0.539,1353,0.539,1354,1.439,1355,1.439,1356,0.469,1357,2.748,1358,0.539,1359,0.539,1360,0.539,1361,0.539,1362,0.539,1363,0.539,1364,1.252,1365,0.539,1366,0.539,1367,0.539,1368,0.539,1369,1.439,1370,1.439,1371,0.539,1372,0.539,1373,0.539,1374,0.539,1375,0.539,1376,0.539,1377,0.539,1378,1.015,1379,1.015,1380,1.015,1381,0.539,1382,0.539,1383,0.539,1384,0.884,1385,0.797,1386,0.539,1387,0.884,1388,0.884,1389,0.539,1390,0.469,1391,1.015,1392,1.015,1393,0.539,1394,0.797,1395,0.539,1396,0.539,1397,0.539,1398,0.884,1399,0.469,1400,0.539,1401,0.539,1402,0.884,1403,0.539,1404,0.539,1405,0.539,1406,0.539,1407,0.539,1408,0.539,1409,1.439,1410,0.539,1411,0.539,1412,0.539,1413,0.539,1414,1.818,1415,1.015,1416,0.539,1417,0.539,1418,1.439,1419,0.539,1420,0.539,1421,0.469,1422,0.539,1423,0.539,1424,1.818,1425,0.539,1426,0.539,1427,0.539,1428,0.539,1429,0.539,1430,0.539,1431,0.539,1432,0.539,1433,0.539,1434,0.539,1435,0.539,1436,1.015,1437,0.539,1438,0.539,1439,0.469,1440,0.539,1441,0.539,1442,0.539,1443,0.539,1444,0.539,1445,0.539,1446,0.539,1447,0.539,1448,0.539,1449,0.539,1450,0.539,1451,0.539,1452,0.539,1453,0.539]],["t/457",[18,0.492,22,1.249,27,2.809,34,2.298,39,1.198,41,2.096,52,1.198,53,0.876,54,1.621,57,0.876,71,2.001,72,2.777,106,2.377,141,3.287,159,1.832,172,0.729,174,3.519,181,2.319,189,3.103,195,2.771,199,2.096,202,2.202,212,1.393,289,3.376,291,1.393,300,1.295,301,2.39,302,1.955,312,3.519,321,2.988,325,2.588,392,1.687,419,2.777,440,1.783,523,4.043,579,2.601,601,4.043,637,2.451,883,2.601,887,2.777,888,2.777,952,2.601,1324,3.252,1350,3.607,1454,4.144,1455,4.144,1456,4.144,1457,4.144,1458,4.144,1459,5.607,1460,4.144,1461,5.607,1462,4.144,1463,4.144,1464,4.144]],["t/459",[10,1.487,18,0.462,34,1.588,52,0.927,55,3.164,56,3.164,58,3.482,59,2.778,63,2.144,71,2.544,104,1.77,141,2.544,178,4.135,182,2.563,240,1.775,353,3.307,361,5.143,380,4.135,392,2.667,462,2.144,484,4.135,486,4.135,718,1.908,719,2.799,1245,5.143,1300,4.135,1318,4.585,1319,4.585,1465,5.269,1466,5.269,1467,5.269,1468,4.585,1469,5.269,1470,5.269]],["t/461",[10,1.559,18,0.5,22,0.833,34,1.937,40,3.573,52,1.131,53,0.896,55,2.047,59,1.797,62,1.478,173,2.517,182,1.658,195,2.317,204,3.327,224,1.19,233,1.535,285,1.339,300,1.324,301,2.418,325,1.957,426,2.372,441,1.598,474,2.372,604,4.105,708,3.327,822,5.393,840,2.841,842,5.393,864,4.619,992,3.327,1050,4.105,1364,3.689,1384,4.955,1385,3.327,1387,3.689,1388,5.594,1390,4.955,1394,4.468,1421,3.689,1439,3.689,1471,4.105,1472,4.239,1473,4.239,1474,4.239,1475,4.239,1476,4.239]],["t/463",[10,0.8,18,0.309,22,0.693,27,1.558,52,0.882,53,0.745,59,2.124,63,1.434,70,2.766,71,1.701,94,2.963,104,1.683,118,1.701,122,1.757,153,2.215,172,0.62,173,2.807,179,2.361,182,1.378,183,2.662,196,1.872,207,1.025,213,2.535,224,1.782,233,2.429,237,1.757,279,3.932,280,1.627,282,2.212,286,0.921,291,1.184,300,2.177,301,2.757,306,2.373,335,1.025,357,2.361,362,3.754,441,1.406,460,2.419,466,1.434,474,1.972,483,2.766,512,2.541,591,3.612,703,2.084,780,2.084,828,1.972,829,2.212,830,3.357,840,2.361,864,3.9,972,3.067,1052,2.766,1056,3.357,1399,3.067,1471,2.541,1477,3.524,1478,3.067,1479,3.067,1480,3.932,1481,3.932,1482,5.264,1483,5.073,1484,5.01,1485,3.524,1486,3.524,1487,3.524,1488,3.524,1489,3.524,1490,4.36,1491,3.932,1492,3.067,1493,3.067,1494,3.067,1495,3.067,1496,3.067,1497,3.067,1498,3.067,1499,3.067,1500,3.067,1501,3.067,1502,3.067,1503,3.067,1504,2.766,1505,2.766,1506,3.067,1507,3.067,1508,3.067]],["t/465",[10,0.81,18,0.313,22,0.702,27,1.578,52,0.89,59,2.143,63,1.453,70,2.801,71,2.441,104,1.199,122,1.769,172,0.628,173,2.823,179,2.392,182,1.396,183,1.896,189,2.39,195,2.058,207,1.038,213,2.97,224,1.002,233,1.292,237,1.769,286,0.933,291,1.199,301,2.937,306,2.39,313,2.441,325,2.71,357,2.392,362,3.472,420,2.574,441,1.419,460,1.723,466,1.453,474,1.997,512,2.574,589,2.392,591,2.574,611,2.111,667,1.648,692,2.801,700,2.392,703,2.111,780,2.111,828,1.997,829,2.24,830,3.388,840,2.392,857,2.574,864,3.573,1056,3.934,1232,2.801,1394,2.801,1471,2.574,1478,3.106,1479,3.106,1480,3.968,1481,3.968,1482,2.801,1490,4.4,1491,3.968,1492,3.106,1493,3.106,1494,3.106,1495,3.106,1496,3.106,1497,3.106,1498,3.106,1499,3.106,1500,3.106,1501,3.106,1502,3.106,1503,4.4,1504,2.801,1505,2.801,1506,4.4,1507,3.106,1508,3.106,1509,3.569,1510,3.569,1511,3.569,1512,3.569,1513,3.569,1514,3.569,1515,3.569,1516,5.056,1517,5.056,1518,5.056,1519,5.056,1520,3.569,1521,3.569,1522,3.569]],["t/467",[27,2.09,34,2.044,52,1.194,56,2.283,59,2.594,63,1.925,71,2.283,94,2.796,107,2.283,173,3.284,182,1.849,183,2.512,198,2.392,207,1.375,282,2.968,285,1.112,286,1.236,325,2.183,351,1.849,372,3.168,441,1.717,466,1.925,474,2.646,778,3.711,802,3.409,803,3.711,864,4.391,1050,4.89,1052,3.711,1468,4.115,1471,3.409,1480,4.802,1481,4.802,1483,5.903,1491,4.802,1504,3.711,1505,3.711,1523,4.728,1524,4.728,1525,4.728,1526,6.118,1527,6.118]],["t/469",[10,1.835,18,0.425,22,0.662,29,1.817,33,2.928,52,0.592,53,0.893,54,0.817,59,1.792,60,1.31,62,0.728,63,0.85,64,3.344,65,0.652,69,1.31,104,1.629,105,1.639,107,2.34,140,0.756,141,1.625,153,0.923,167,1.399,172,1.227,182,1.316,186,1.639,191,1.722,198,1.056,205,1.639,207,0.607,212,1.42,213,2.452,222,1.266,224,1.36,226,1.008,233,1.53,261,0.629,274,1.168,280,2.238,289,1.109,294,3.678,300,0.652,301,1.824,302,0.728,306,2.432,313,2.34,323,1.056,324,1.639,336,1.639,351,0.817,381,1.817,387,2.409,421,1.505,426,1.883,437,1.235,440,0.586,462,0.85,466,0.85,522,1.639,537,1.31,579,2.112,610,1.168,636,1.505,687,1.817,691,1.109,700,2.255,712,1.817,715,1.131,718,2.647,719,1.109,721,1.99,740,1.399,757,1.505,761,1.817,768,1.488,779,1.505,788,1.399,789,1.505,802,1.505,808,1.639,815,1.817,821,3.678,824,3.804,825,4.218,826,2.641,827,5.973,828,3.769,829,2.112,830,2.255,831,2.928,832,4.218,847,1.639,857,2.426,858,1.505,859,1.99,860,1.399,861,4.172,862,1.399,867,1.505,882,1.399,883,1.31,956,1.639,992,1.639,998,1.639,1018,1.817,1133,2.641,1208,2.928,1211,1.639,1213,1.817,1232,2.641,1257,1.639,1316,1.817,1330,1.817,1398,1.817,1402,1.817,1528,2.088,1529,2.088,1530,2.088,1531,2.088,1532,2.088,1533,5.975,1534,2.088,1535,2.088,1536,2.088,1537,4.847,1538,2.088,1539,2.088,1540,3.365,1541,2.088,1542,2.088,1543,3.365,1544,2.088,1545,2.088,1546,3.365,1547,3.365,1548,2.088,1549,2.088,1550,2.088,1551,2.088,1552,4.227,1553,2.088,1554,4.227,1555,3.365,1556,3.365,1557,2.088,1558,2.088,1559,2.088,1560,1.817,1561,2.088,1562,2.088,1563,2.088,1564,3.365,1565,2.088,1566,3.365,1567,2.088,1568,3.365,1569,2.088,1570,2.088,1571,2.088,1572,2.088]],["t/471",[22,1.265,57,1.56,172,1.132,466,2.618,780,3.804]],["t/473",[10,0.857,22,0.742,34,1.138,50,2.917,52,0.665,53,0.798,62,1.317,63,1.537,167,2.531,177,2.531,233,2.37,261,1.138,280,1.743,282,3.799,300,1.18,301,2.277,302,1.834,306,2.464,313,2.54,325,1.743,330,2.795,399,4.59,436,2.37,437,2.233,440,1.476,441,1.476,460,1.823,462,2.141,467,4.612,468,3.793,610,2.113,639,3.287,691,2.006,703,4.41,721,4.07,847,2.964,857,2.723,858,2.723,859,3.111,860,2.531,862,2.531,985,2.964,1482,2.964,1573,4.578,1574,4.578,1575,5.697,1576,3.776,1577,3.287,1578,4.578,1579,4.578,1580,4.578,1581,4.578,1582,4.578,1583,3.776,1584,3.287,1585,4.578,1586,3.287,1587,3.287,1588,3.287,1589,3.287,1590,3.287,1591,3.287,1592,3.287,1593,3.287,1594,3.287,1595,3.287,1596,3.287,1597,3.287,1598,3.287,1599,3.287,1600,3.776]],["t/475",[8,3.951,10,1.548,18,0.442,22,0.99,34,0.825,39,0.733,50,2.589,52,0.482,53,1.346,57,0.88,62,0.955,65,0.856,167,1.835,172,0.733,174,1.719,207,0.796,222,1.566,226,2.009,233,2.529,237,1.254,240,1.363,282,1.719,300,0.856,301,1.566,302,1.755,306,2.461,312,1.719,313,1.322,325,1.264,330,2.988,351,1.628,387,1.765,399,4.608,408,1.835,419,1.835,426,1.533,440,1.413,441,1.578,460,2.009,462,2.289,467,4.681,468,4.054,691,1.455,699,1.835,703,4.131,715,2.292,721,3.914,739,2.384,768,1.211,780,1.62,828,2.817,836,2.384,859,1.62,936,1.835,985,2.15,1000,2.15,1086,2.384,1324,4.413,1356,2.384,1385,2.15,1560,2.384,1573,2.384,1574,4.381,1575,5.76,1577,2.384,1578,4.381,1579,5.263,1580,4.894,1581,4.894,1582,4.894,1584,2.384,1585,4.381,1586,2.384,1587,2.384,1588,2.384,1589,2.384,1590,2.384,1591,2.384,1592,2.384,1593,2.384,1594,2.384,1595,2.384,1596,2.384,1597,2.384,1598,2.384,1599,3.622,1601,2.739,1602,2.739,1603,2.739,1604,4.162,1605,4.162,1606,2.739,1607,2.739,1608,4.162,1609,2.739,1610,2.739,1611,2.739,1612,4.162,1613,2.739]]],"invertedIndex":[["",{"_index":10,"t":{"324":{"position":[[92,1],[500,1]]},"332":{"position":[[752,3],[789,3],[827,3],[831,3]]},"351":{"position":[[234,1]]},"369":{"position":[[618,3],[972,1],[974,1],[987,1],[1038,1]]},"371":{"position":[[693,1]]},"381":{"position":[[202,1],[204,1],[331,1],[333,1]]},"385":{"position":[[649,1],[655,2]]},"389":{"position":[[259,3]]},"399":{"position":[[227,1],[262,1],[298,1],[334,1],[369,1],[391,1],[414,1],[431,1],[449,1]]},"401":{"position":[[114,3],[750,1],[951,1],[953,1],[1165,2],[1264,1],[1299,1],[1335,1],[1357,1],[1380,1],[1397,1],[1420,1],[1438,1]]},"409":{"position":[[119,1],[559,4]]},"411":{"position":[[209,1]]},"413":{"position":[[256,1],[1273,1],[2554,1],[2575,2]]},"415":{"position":[[1195,1]]},"425":{"position":[[751,2],[830,2]]},"427":{"position":[[674,2]]},"429":{"position":[[366,1],[396,1]]},"433":{"position":[[39,1],[1414,1],[3059,1],[3080,1],[3140,1],[3191,1],[3193,1],[3236,1],[3238,1],[3261,1],[3284,1],[3311,1],[3331,1],[3361,1],[3493,1],[4386,1],[4407,1],[4464,1],[4520,1],[4522,1],[4560,1],[4562,1],[4578,1],[4599,1],[4624,1],[4644,1],[4665,1],[4693,1],[4770,1]]},"435":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"441":{"position":[[213,1],[238,1],[259,1]]},"443":{"position":[[400,2],[458,2]]},"451":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[312,1],[320,4],[325,1],[330,1],[570,1],[697,1],[706,1],[728,1],[730,1]]},"453":{"position":[[83,1],[85,1]]},"455":{"position":[[71,2],[93,1],[1050,1],[1491,1],[1614,3],[1965,4],[1970,2],[2326,2],[2329,2],[2403,1],[2484,1],[2572,1],[3034,2],[3341,1],[3343,1],[3421,1],[3423,1],[3860,1],[3999,1],[4110,1],[4753,1],[5296,2],[6859,1],[6926,4],[7978,2],[8047,1],[8493,2],[8598,2],[9215,1],[9871,1],[12303,1],[12452,1],[12516,1],[12667,1],[12698,1],[13648,1],[14077,1],[14365,1],[14465,1],[14703,1],[14785,1],[14792,2],[14874,1],[15527,1],[15534,2],[15887,2]]},"459":{"position":[[147,1],[149,1]]},"461":{"position":[[215,1],[241,1],[278,1],[343,1]]},"463":{"position":[[927,1]]},"465":{"position":[[782,1]]},"469":{"position":[[242,1],[272,4],[317,1],[513,1],[557,1],[629,1],[640,1],[655,1],[796,1],[879,3],[912,1],[923,1],[925,1],[969,1],[988,1],[1050,1],[1282,1],[1468,1],[1644,1],[1737,1],[1803,1],[1901,1],[2080,1],[2161,1],[2266,2],[2269,3],[2273,5],[2279,1],[2396,1],[2398,1],[2494,1],[2582,1],[2612,1],[2656,4],[2665,2],[3338,1],[3419,1],[3448,2],[3451,2],[3484,1],[3496,2],[3523,2],[3556,5],[3566,1]]},"473":{"position":[[589,2]]},"475":{"position":[[154,1],[349,1],[488,2],[570,1],[757,2],[858,1],[1069,2],[1282,2]]}}}],["0",{"_index":1344,"t":{"455":{"position":[[1684,1],[5556,1],[5569,1],[10632,1]]}}}],["0.0.0.0:4180",{"_index":1177,"t":{"433":{"position":[[4772,14]]}}}],["0.001",{"_index":1520,"t":{"465":{"position":[[916,5]]}}}],["00010203",{"_index":1496,"t":{"463":{"position":[[1121,8]]},"465":{"position":[[984,8]]}}}],["0400",{"_index":1481,"t":{"463":{"position":[[256,5],[1301,4]]},"465":{"position":[[137,5],[1323,4]]},"467":{"position":[[267,5],[593,4]]}}}],["0405",{"_index":1497,"t":{"463":{"position":[[1130,4]]},"465":{"position":[[993,4]]}}}],["0a0b0c0d0e0f",{"_index":1500,"t":{"463":{"position":[[1145,12]]},"465":{"position":[[1008,12]]}}}],["1",{"_index":699,"t":{"387":{"position":[[2225,1]]},"401":{"position":[[1116,2]]},"413":{"position":[[2293,1]]},"455":{"position":[[1729,3],[15379,4]]},"475":{"position":[[423,2]]}}}],["1.3",{"_index":618,"t":{"383":{"position":[[474,3]]}}}],["1.5h",{"_index":377,"t":{"351":{"position":[[236,5]]}}}],["100",{"_index":1396,"t":{"455":{"position":[[5652,3]]}}}],["12",{"_index":1522,"t":{"465":{"position":[[1200,2]]}}}],["12.x",{"_index":1064,"t":{"427":{"position":[[58,5],[128,4]]}}}],["123456.apps.googleusercontent.com",{"_index":1328,"t":{"455":{"position":[[724,35]]}}}],["127.0.0.1:4180",{"_index":803,"t":{"401":{"position":[[150,14]]},"455":{"position":[[4975,16]]},"467":{"position":[[732,14]]}}}],["128",{"_index":750,"t":{"395":{"position":[[383,3],[434,3]]}}}],["15",{"_index":776,"t":{"395":{"position":[[1729,2],[1760,2]]},"455":{"position":[[10510,2],[10541,2]]}}}],["15m",{"_index":1352,"t":{"455":{"position":[[2169,3]]}}}],["168h0m0",{"_index":1338,"t":{"455":{"position":[[1293,8]]}}}],["19/mar/2015:17:20:19",{"_index":1480,"t":{"463":{"position":[[233,21],[1279,20]]},"465":{"position":[[114,21],[1301,20]]},"467":{"position":[[244,21],[571,20]]}}}],["192",{"_index":1313,"t":{"451":{"position":[[644,3]]}}}],["1h",{"_index":928,"t":{"413":{"position":[[923,4]]}}}],["1s",{"_index":1367,"t":{"455":{"position":[[3149,4]]}}}],["2",{"_index":936,"t":{"413":{"position":[[1514,1]]},"415":{"position":[[1134,1]]},"433":{"position":[[3458,2]]},"455":{"position":[[14850,3],[15455,4]]},"475":{"position":[[717,2]]}}}],["2.0",{"_index":1092,"t":{"429":{"position":[[213,3]]},"433":{"position":[[35,3]]}}}],["20",{"_index":1372,"t":{"455":{"position":[[4313,2]]}}}],["200",{"_index":692,"t":{"387":{"position":[[1941,3]]},"403":{"position":[[223,3],[336,3]]},"465":{"position":[[1249,3]]}}}],["202",{"_index":858,"t":{"403":{"position":[[995,3]]},"407":{"position":[[22,3]]},"469":{"position":[[131,3]]},"473":{"position":[[162,3]]}}}],["2048",{"_index":1192,"t":{"435":{"position":[[1052,4]]}}}],["24",{"_index":1311,"t":{"451":{"position":[[630,2]]}}}],["2>/dev/nul",{"_index":1297,"t":{"451":{"position":[[227,11]]}}}],["2f",{"_index":714,"t":{"389":{"position":[[212,7]]}}}],["2h45m",{"_index":378,"t":{"351":{"position":[[245,8]]}}}],["3",{"_index":981,"t":{"415":{"position":[[1492,2],[1800,2]]},"417":{"position":[[385,2],[421,2]]},"423":{"position":[[1247,4]]}}}],["3/4",{"_index":1442,"t":{"455":{"position":[[15152,3]]}}}],["30",{"_index":710,"t":{"387":{"position":[[2598,2]]},"401":{"position":[[1138,3],[1161,3]]},"455":{"position":[[14338,3]]}}}],["300m",{"_index":376,"t":{"351":{"position":[[225,8]]}}}],["315360000",{"_index":1590,"t":{"473":{"position":[[965,9]]},"475":{"position":[[1723,9]]}}}],["32",{"_index":1303,"t":{"451":{"position":[[309,2],[578,2],[708,2]]}}}],["3650",{"_index":1204,"t":{"435":{"position":[[1175,4]]}}}],["401",{"_index":859,"t":{"403":{"position":[[1022,3]]},"407":{"position":[[49,3]]},"409":{"position":[[403,3]]},"455":{"position":[[112,3]]},"469":{"position":[[158,3],[965,3]]},"473":{"position":[[189,3],[1254,4]]},"475":{"position":[[898,3]]}}}],["403",{"_index":1600,"t":{"473":{"position":[[1259,4]]}}}],["4180",{"_index":809,"t":{"401":{"position":[[465,5]]}}}],["443",{"_index":808,"t":{"401":{"position":[[395,3],[759,3]]},"455":{"position":[[5141,6],[15734,3]]},"469":{"position":[[251,3]]}}}],["4607",{"_index":1498,"t":{"463":{"position":[[1135,4]]},"465":{"position":[[998,4]]}}}],["4kb",{"_index":1540,"t":{"469":{"position":[[1733,3],[1938,4]]}}}],["5",{"_index":943,"t":{"413":{"position":[[1992,1]]},"415":{"position":[[1528,2],[1836,2]]}}}],["7",{"_index":1393,"t":{"455":{"position":[[5485,1]]}}}],["74.125.224.72",{"_index":1492,"t":{"463":{"position":[[840,13]]},"465":{"position":[[695,13]]}}}],["80",{"_index":1451,"t":{"455":{"position":[[15720,3]]}}}],["8809",{"_index":1499,"t":{"463":{"position":[[1140,4]]},"465":{"position":[[1003,4]]}}}],["994",{"_index":1065,"t":{"427":{"position":[[138,5]]}}}],["_",{"_index":1300,"t":{"451":{"position":[[279,3],[327,2],[732,3]]},"453":{"position":[[104,4]]},"459":{"position":[[168,4]]}}}],["__host",{"_index":1341,"t":{"455":{"position":[[1470,7]]}}}],["__secur",{"_index":1342,"t":{"455":{"position":[[1482,8]]}}}],["_oauth2_proxi",{"_index":748,"t":{"395":{"position":[[338,14]]},"455":{"position":[[1520,15]]}}}],["_oauth2_proxy_1",{"_index":1572,"t":{"469":{"position":[[3951,18]]}}}],["aad",{"_index":969,"t":{"415":{"position":[[880,3]]}}}],["abov",{"_index":1052,"t":{"423":{"position":[[1233,5]]},"463":{"position":[[1542,5]]},"467":{"position":[[45,5]]}}}],["absent",{"_index":1373,"t":{"455":{"position":[[4319,6]]}}}],["accept",{"_index":610,"t":{"383":{"position":[[139,11]]},"399":{"position":[[566,10]]},"403":{"position":[[999,8]]},"407":{"position":[[26,8]]},"409":{"position":[[363,7]]},"455":{"position":[[11024,8],[14010,11]]},"469":{"position":[[135,8]]},"473":{"position":[[166,8]]}}}],["acceptable.e.g",{"_index":616,"t":{"383":{"position":[[420,15]]}}}],["access",{"_index":222,"t":{"338":{"position":[[349,6]]},"343":{"position":[[101,6]]},"347":{"position":[[171,6]]},"353":{"position":[[346,6]]},"365":{"position":[[259,6]]},"373":{"position":[[2139,6],[2286,6]]},"405":{"position":[[214,9]]},"413":{"position":[[1750,7]]},"421":{"position":[[296,7],[924,6],[999,6],[1036,6],[1186,6],[1217,6],[1306,6]]},"423":{"position":[[138,6],[1173,6]]},"425":{"position":[[46,6]]},"433":{"position":[[2344,6],[2403,7],[2977,6]]},"435":{"position":[[305,7],[2650,6],[3170,10]]},"441":{"position":[[528,6],[638,6],[673,6]]},"455":{"position":[[3813,6],[4238,6],[4285,6],[6938,6],[7008,6],[7092,6],[7894,6],[8802,6],[11581,6],[11610,6],[14609,6]]},"469":{"position":[[1306,6],[1447,6]]},"475":{"position":[[2016,6],[2192,6]]}}}],["access_by_lua_block",{"_index":1565,"t":{"469":{"position":[[3399,19]]}}}],["access_token",{"_index":1401,"t":{"455":{"position":[[6967,12]]}}}],["accesstokenacceptedvers",{"_index":976,"t":{"415":{"position":[[1104,29]]}}}],["accompani",{"_index":1019,"t":{"421":{"position":[[382,11]]}}}],["account",{"_index":400,"t":{"357":{"position":[[271,7]]},"413":{"position":[[981,7],[1095,8],[2392,7]]},"415":{"position":[[177,7]]},"433":{"position":[[1641,8],[3747,8]]},"435":{"position":[[260,8],[737,7]]},"441":{"position":[[204,7],[487,7]]},"455":{"position":[[4518,7],[4562,7]]}}}],["acr",{"_index":258,"t":{"338":{"position":[[1037,3]]},"455":{"position":[[34,3]]}}}],["activ",{"_index":951,"t":{"415":{"position":[[65,6],[1349,6]]}}}],["actual",{"_index":882,"t":{"405":{"position":[[1057,6]]},"415":{"position":[[851,8]]},"439":{"position":[[221,6]]},"441":{"position":[[124,6]]},"469":{"position":[[3721,6]]}}}],["ad",{"_index":199,"t":{"336":{"position":[[7,6]]},"341":{"position":[[66,6]]},"359":{"position":[[79,5]]},"373":{"position":[[2230,2]]},"405":{"position":[[939,5]]},"409":{"position":[[637,5]]},"411":{"position":[[294,2]]},"431":{"position":[[4,6],[49,2]]},"455":{"position":[[10911,2],[11626,5]]},"457":{"position":[[750,6]]}}}],["add",{"_index":126,"t":{"330":{"position":[[148,3]]},"332":{"position":[[432,3]]},"415":{"position":[[0,3],[430,3],[532,3],[662,3],[1222,3],[1284,4]]},"417":{"position":[[64,3]]},"427":{"position":[[223,3],[431,3],[1312,3]]},"431":{"position":[[74,3]]},"433":{"position":[[605,3],[1296,4],[1989,3],[2336,3],[2567,3]]},"441":{"position":[[0,3]]},"447":{"position":[[80,3]]},"451":{"position":[[332,3]]},"455":{"position":[[7068,4],[15812,3]]}}}],["add_head",{"_index":821,"t":{"401":{"position":[[888,10]]},"469":{"position":[[1608,10],[2496,10],[2539,10]]}}}],["addedto",{"_index":307,"t":{"343":{"position":[[667,7],[902,7]]}}}],["addit",{"_index":537,"t":{"371":{"position":[[1553,10],[1614,8]]},"421":{"position":[[206,10],[775,8]]},"433":{"position":[[2066,10]]},"441":{"position":[[559,10]]},"455":{"position":[[6866,10]]},"469":{"position":[[1968,10]]}}}],["addition",{"_index":1374,"t":{"455":{"position":[[4610,12]]}}}],["address",{"_index":460,"t":{"369":{"position":[[496,9]]},"371":{"position":[[230,7]]},"381":{"position":[[146,7],[268,7]]},"403":{"position":[[465,7],[496,8]]},"413":{"position":[[1808,7]]},"445":{"position":[[95,9],[199,9]]},"455":{"position":[[4819,7],[4943,8],[5000,7],[5109,8],[6117,7],[7432,7],[8531,7],[8550,7],[15163,8],[15256,7]]},"463":{"position":[[81,7],[875,8]]},"465":{"position":[[730,8]]},"473":{"position":[[1150,8]]},"475":{"position":[[1917,8],[2082,8]]}}}],["address=\"0.0.0.0:4180",{"_index":805,"t":{"401":{"position":[[312,22]]}}}],["address=\"http://:4180",{"_index":806,"t":{"401":{"position":[[345,23]]}}}],["adf",{"_index":552,"t":{"373":{"position":[[739,4],[2237,4]]},"375":{"position":[[128,5]]},"411":{"position":[[232,4]]},"417":{"position":[[9,4],[445,4]]}}}],["adfsconfig",{"_index":550,"t":{"373":{"position":[[676,10],[699,10]]}}}],["adfsopt",{"_index":551,"t":{"373":{"position":[[687,11]]}}}],["admin",{"_index":394,"t":{"357":{"position":[[164,5]]},"413":{"position":[[1304,5],[1740,5],[1860,5],[1946,5]]},"415":{"position":[[696,5],[729,5],[801,8],[940,5]]},"423":{"position":[[1482,5],[1548,7]]},"437":{"position":[[574,6],[612,6]]},"455":{"position":[[4335,5],[4365,5]]}}}],["adminemail",{"_index":393,"t":{"357":{"position":[[121,10],[139,10]]}}}],["administr",{"_index":939,"t":{"413":{"position":[[1787,14]]},"417":{"position":[[14,14]]},"433":{"position":[[1626,14]]}}}],["advisori",{"_index":123,"t":{"330":{"position":[[23,10],[182,8],[411,9]]}}}],["ae",{"_index":1312,"t":{"451":{"position":[[640,3]]}}}],["affect",{"_index":119,"t":{"328":{"position":[[688,8]]}}}],["afterward",{"_index":868,"t":{"405":{"position":[[334,10]]}}}],["ag",{"_index":1390,"t":{"455":{"position":[[5430,3]]},"461":{"position":[[237,3],[256,5]]}}}],["again",{"_index":866,"t":{"405":{"position":[[240,6]]}}}],["against",{"_index":36,"t":{"324":{"position":[[404,7]]},"371":{"position":[[1433,7]]},"413":{"position":[[2196,7],[2459,7]]},"427":{"position":[[35,7]]},"433":{"position":[[163,7]]},"437":{"position":[[50,7]]},"455":{"position":[[455,7],[4636,7]]}}}],["age=2592000",{"_index":823,"t":{"401":{"position":[[929,12]]}}}],["agenc",{"_index":1179,"t":{"435":{"position":[[80,7],[718,6]]}}}],["agent",{"_index":840,"t":{"403":{"position":[[263,6]]},"455":{"position":[[8426,5],[8446,5],[8514,6]]},"461":{"position":[[753,6]]},"463":{"position":[[1372,5]]},"465":{"position":[[1444,5]]}}}],["agre",{"_index":136,"t":{"330":{"position":[[441,6]]}}}],["agreement",{"_index":1089,"t":{"429":{"position":[[124,9]]}}}],["ajax",{"_index":896,"t":{"409":{"position":[[335,4]]}}}],["algorithm:secretkey",{"_index":1420,"t":{"455":{"position":[[12098,21]]}}}],["alia",{"_index":365,"t":{"351":{"position":[[8,7]]},"375":{"position":[[8,7]]},"377":{"position":[[12,7]]}}}],["allow",{"_index":261,"t":{"338":{"position":[[1087,7],[1116,7]]},"343":{"position":[[85,6]]},"349":{"position":[[38,6]]},"353":{"position":[[392,6]]},"367":{"position":[[295,7],[459,7],[609,7]]},"369":{"position":[[599,6],[724,7],[1291,5],[1327,5],[1477,5]]},"371":{"position":[[868,6],[1389,6]]},"387":{"position":[[788,6],[1613,5]]},"389":{"position":[[188,8]]},"391":{"position":[[9,5]]},"407":{"position":[[175,7],[237,7],[299,7]]},"409":{"position":[[143,8]]},"421":{"position":[[473,7],[1180,5],[1473,5],[1628,5]]},"423":{"position":[[1090,7]]},"425":{"position":[[720,7],[786,7]]},"433":{"position":[[2784,7],[4106,8]]},"435":{"position":[[2350,5]]},"437":{"position":[[23,6]]},"441":{"position":[[456,6]]},"447":{"position":[[117,5]]},"455":{"position":[[3870,5],[6066,5],[6208,5],[6897,7],[11037,6],[14344,7],[14445,7],[14710,7],[14798,5],[14911,5],[15542,5],[15644,8],[15672,8],[15784,5],[15867,5]]},"469":{"position":[[33,6]]},"473":{"position":[[38,6]]}}}],["allowed.e.g",{"_index":622,"t":{"383":{"position":[[553,13]]}}}],["allowed_email",{"_index":890,"t":{"407":{"position":[[259,15]]}}}],["allowed_email_domain",{"_index":889,"t":{"407":{"position":[[190,22]]}}}],["allowed_group",{"_index":886,"t":{"407":{"position":[[135,15]]}}}],["allowedgroup",{"_index":587,"t":{"373":{"position":[[2371,13],[2394,13]]}}}],["allowedto",{"_index":539,"t":{"371":{"position":[[1583,9]]}}}],["alpha",{"_index":155,"t":{"332":{"position":[[44,5],[297,5],[353,5],[665,5]]},"334":{"position":[[15,5],[153,5],[194,5]]},"336":{"position":[[24,5],[92,5],[189,5],[510,5]]},"338":{"position":[[106,5],[1408,5],[1524,5]]},"343":{"position":[[22,5],[108,5],[267,6]]}}}],["alphaopt",{"_index":185,"t":{"332":{"position":[[607,12]]},"343":{"position":[[0,12]]},"359":{"position":[[13,13]]},"377":{"position":[[33,13]]},"381":{"position":[[13,13]]},"389":{"position":[[13,13]]}}}],["altern",{"_index":481,"t":{"369":{"position":[[927,13]]},"405":{"position":[[523,14]]},"439":{"position":[[496,14]]}}}],["alway",{"_index":445,"t":{"367":{"position":[[532,6]]},"399":{"position":[[745,6]]}}}],["amazon",{"_index":797,"t":{"401":{"position":[[61,6],[255,6]]}}}],["amd64",{"_index":23,"t":{"324":{"position":[[251,7],[553,6]]}}}],["amount",{"_index":1434,"t":{"455":{"position":[[14269,6]]}}}],["anchor",{"_index":640,"t":{"385":{"position":[[625,6]]}}}],["and/or",{"_index":472,"t":{"369":{"position":[[732,6]]}}}],["anoth",{"_index":318,"t":{"343":{"position":[[1037,7]]},"411":{"position":[[82,7]]},"413":{"position":[[176,7]]}}}],["anyth",{"_index":446,"t":{"367":{"position":[[551,8]]}}}],["apach",{"_index":1474,"t":{"461":{"position":[[668,6]]}}}],["api",{"_index":396,"t":{"357":{"position":[[189,3]]},"413":{"position":[[250,5],[1267,5],[1289,5],[1330,4],[1746,3]]},"415":{"position":[[490,3]]},"427":{"position":[[78,3]]},"429":{"position":[[368,3]]},"433":{"position":[[1979,3]]},"455":{"position":[[76,3],[4390,3]]}}}],["api/v1",{"_index":1277,"t":{"443":{"position":[[635,9]]}}}],["app",{"_index":854,"t":{"403":{"position":[[820,3]]},"415":{"position":[[90,3],[294,3],[465,3],[518,4],[1143,3],[1217,4]]},"419":{"position":[[16,3]]},"433":{"position":[[2215,5],[2701,4],[3925,3]]},"435":{"position":[[1334,3]]}}}],["appear",{"_index":283,"t":{"341":{"position":[[0,8]]},"345":{"position":[[0,8]]},"347":{"position":[[0,8]]},"349":{"position":[[0,8]]},"351":{"position":[[16,8]]},"353":{"position":[[0,8]]},"355":{"position":[[0,8]]},"357":{"position":[[0,8]]},"359":{"position":[[0,8]]},"361":{"position":[[0,8]]},"363":{"position":[[0,8]]},"365":{"position":[[0,8]]},"367":{"position":[[0,8]]},"371":{"position":[[0,8]]},"373":{"position":[[0,8]]},"375":{"position":[[16,8]]},"377":{"position":[[20,8]]},"379":{"position":[[0,8]]},"381":{"position":[[0,8]]},"383":{"position":[[0,8]]},"385":{"position":[[0,8]]},"387":{"position":[[0,8]]},"389":{"position":[[0,8]]}}}],["append",{"_index":992,"t":{"415":{"position":[[2101,6]]},"461":{"position":[[835,7]]},"469":{"position":[[2149,6]]}}}],["appli",{"_index":413,"t":{"359":{"position":[[428,7]]}}}],["applic",{"_index":51,"t":{"324":{"position":[[603,11]]},"401":{"position":[[532,12]]},"405":{"position":[[228,11]]},"411":{"position":[[35,11]]},"413":{"position":[[538,12],[551,11]]},"415":{"position":[[7,12],[586,11]]},"417":{"position":[[74,11],[142,11],[174,12],[282,11]]},"427":{"position":[[230,12],[343,11],[468,12],[724,11]]},"431":{"position":[[14,11],[81,12],[124,10]]},"433":{"position":[[1817,13],[1890,12],[2169,11],[2255,11],[2391,11],[2542,12],[2571,12],[2668,11],[2989,12],[3549,11],[3806,12],[3876,11]]},"435":{"position":[[467,11],[559,11],[779,11],[3018,11],[3109,11]]},"439":{"position":[[19,11],[108,12]]},"443":{"position":[[13,12]]},"455":{"position":[[9476,10]]}}}],["application.y",{"_index":322,"t":{"343":{"position":[[1268,15]]}}}],["application/json",{"_index":897,"t":{"409":{"position":[[371,17]]}}}],["approach",{"_index":787,"t":{"399":{"position":[[495,8]]}}}],["appropri",{"_index":765,"t":{"395":{"position":[[1239,14],[1442,14]]},"413":{"position":[[598,11]]},"421":{"position":[[1750,11]]},"423":{"position":[[421,11]]},"425":{"position":[[490,11]]},"427":{"position":[[1107,11]]}}}],["approv",{"_index":256,"t":{"338":{"position":[[1005,8]]},"415":{"position":[[946,11]]},"455":{"position":[[208,8],[7951,8]]}}}],["approval_prompt",{"_index":1326,"t":{"455":{"position":[[237,15]]}}}],["apps/oauth2",{"_index":1248,"t":{"437":{"position":[[351,15]]}}}],["aren't",{"_index":1413,"t":{"455":{"position":[[11245,6]]}}}],["arg",{"_index":1118,"t":{"433":{"position":[[949,5]]}}}],["argument",{"_index":1245,"t":{"437":{"position":[[218,9]]},"453":{"position":[[19,8],[116,8]]},"459":{"position":[[19,8],[180,8]]}}}],["arm64",{"_index":25,"t":{"324":{"position":[[269,5]]}}}],["armv6",{"_index":24,"t":{"324":{"position":[[259,5]]}}}],["around",{"_index":469,"t":{"369":{"position":[[688,6]]}}}],["ask",{"_index":894,"t":{"409":{"position":[[256,5]]}}}],["assembl",{"_index":1305,"t":{"451":{"position":[[347,8]]}}}],["assemblynam",{"_index":1307,"t":{"451":{"position":[[390,12]]}}}],["assign",{"_index":941,"t":{"413":{"position":[[1839,6]]},"433":{"position":[[2926,11],[4073,12]]}}}],["assum",{"_index":1189,"t":{"435":{"position":[[526,6]]}}}],["attacksbetweem",{"_index":683,"t":{"387":{"position":[[1647,14]]}}}],["attempt",{"_index":279,"t":{"338":{"position":[[1338,10]]},"455":{"position":[[300,8]]},"463":{"position":[[99,10],[1062,8]]}}}],["attent",{"_index":100,"t":{"328":{"position":[[294,9]]}}}],["attribut",{"_index":1211,"t":{"435":{"position":[[1446,9]]},"455":{"position":[[1926,9]]},"469":{"position":[[2101,10]]}}}],["aud",{"_index":535,"t":{"371":{"position":[[1465,3]]},"455":{"position":[[2822,3],[6824,5],[12870,3]]}}}],["audienc",{"_index":538,"t":{"371":{"position":[[1564,9]]},"425":{"position":[[357,10],[388,8],[417,8]]},"433":{"position":[[2225,9]]},"455":{"position":[[6763,8],[6815,8],[6843,8],[6877,9]]}}}],["audienceclaim",{"_index":533,"t":{"371":{"position":[[1351,14],[1375,13]]}}}],["auth",{"_index":233,"t":{"338":{"position":[[630,4],[669,4]]},"349":{"position":[[412,4],[470,4]]},"361":{"position":[[633,4],[691,4]]},"405":{"position":[[572,4],[633,4]]},"409":{"position":[[65,4]]},"413":{"position":[[1019,4],[1275,6]]},"415":{"position":[[1057,4],[1328,4],[1626,4],[1964,4],[2303,4]]},"417":{"position":[[450,4]]},"421":{"position":[[179,4]]},"423":{"position":[[65,4]]},"427":{"position":[[5,4]]},"455":{"position":[[263,4],[316,4],[598,4],[667,4],[7079,4],[7248,4],[7274,5],[7610,4],[11404,4],[11425,4],[11448,4],[11473,4],[11597,4],[11786,4],[11811,4],[12206,4],[12285,4],[12333,4],[12434,4],[12624,4]]},"461":{"position":[[519,4]]},"463":{"position":[[606,4],[790,4],[1057,4],[1473,4],[1524,4]]},"465":{"position":[[1545,4]]},"469":{"position":[[94,5],[477,4],[578,4]]},"473":{"position":[[437,4],[631,4],[912,4],[1131,5]]},"475":{"position":[[556,4],[841,4],[1111,4],[1317,4],[1670,4],[1889,4],[2003,4],[2051,4],[2179,4]]}}}],["auth/pass_basic_auth",{"_index":221,"t":{"338":{"position":[[323,20]]}}}],["auth/set_basic_auth",{"_index":228,"t":{"338":{"position":[[478,19]]}}}],["auth_cooki",{"_index":1537,"t":{"469":{"position":[[1568,12],[1630,13],[2252,13],[2305,13]]}}}],["auth_cookie_name_0",{"_index":1546,"t":{"469":{"position":[[2285,19],[2518,20]]}}}],["auth_cookie_name_1",{"_index":1547,"t":{"469":{"position":[[2323,19],[2561,20]]}}}],["auth_cookie_name_1=$auth_cookie_name_upstream_1$1",{"_index":1548,"t":{"469":{"position":[[2343,52]]}}}],["auth_cookie_name_upstream_1",{"_index":1543,"t":{"469":{"position":[[2014,28],[2463,30]]}}}],["auth_request",{"_index":861,"t":{"403":{"position":[[1072,12]]},"455":{"position":[[11539,12],[11749,12],[11857,12]]},"469":{"position":[[10,12],[804,12],[927,12],[1538,12],[1871,12]]}}}],["auth_request_set",{"_index":1533,"t":{"469":{"position":[[1098,16],[1157,16],[1360,16],[1551,16],[1997,16],[2857,16],[3340,16]]}}}],["authent",{"_index":300,"t":{"343":{"position":[[444,14],[746,13],[1134,13]]},"373":{"position":[[1871,14]]},"387":{"position":[[1833,15]]},"391":{"position":[[24,14]]},"393":{"position":[[802,12]]},"401":{"position":[[494,12]]},"403":{"position":[[109,14]]},"405":{"position":[[154,14],[294,14]]},"409":{"position":[[200,14],[294,14],[458,14],[657,14]]},"413":{"position":[[2501,14]]},"421":{"position":[[234,14]]},"435":{"position":[[2935,13]]},"437":{"position":[[37,12]]},"441":{"position":[[498,13]]},"445":{"position":[[111,13]]},"455":{"position":[[142,14],[285,14],[356,14],[409,13],[442,12],[2491,12],[2577,12],[4623,12],[6026,14],[7556,15],[12236,14],[12352,14],[12466,14],[12675,14],[14748,15],[14927,14]]},"457":{"position":[[291,13]]},"461":{"position":[[419,15]]},"463":{"position":[[0,14],[113,13],[365,13],[440,12],[514,14],[1013,13]]},"469":{"position":[[49,12]]},"473":{"position":[[56,12]]},"475":{"position":[[273,13]]}}}],["authenticationprovid",{"_index":316,"t":{"343":{"position":[[994,22]]}}}],["autherror",{"_index":1488,"t":{"463":{"position":[[464,9]]}}}],["authfailur",{"_index":1486,"t":{"463":{"position":[[406,11]]}}}],["author",{"_index":226,"t":{"338":{"position":[[421,13],[536,13]]},"413":{"position":[[610,10],[692,10],[998,11]]},"421":{"position":[[67,13]]},"423":{"position":[[1031,14]]},"431":{"position":[[211,13]]},"433":{"position":[[1757,13],[1860,13],[1993,13],[2098,13],[2508,13],[2807,13],[3414,13],[4115,13],[4256,13]]},"435":{"position":[[3369,14]]},"445":{"position":[[3,9],[68,9],[179,9]]},"455":{"position":[[7141,13],[7201,13],[11665,13],[11695,13],[12700,13]]},"469":{"position":[[1667,13]]},"475":{"position":[[2031,13],[2207,13]]}}}],["authorizationnginx.ingress.kubernetes.io/auth",{"_index":1559,"t":{"469":{"position":[[3120,45]]}}}],["authresponsehead",{"_index":1612,"t":{"475":{"position":[[1978,20],[2154,20]]}}}],["authsuccess",{"_index":1484,"t":{"463":{"position":[[339,11],[1494,11]]}}}],["auto",{"_index":1607,"t":{"475":{"position":[[776,4]]}}}],["automat",{"_index":865,"t":{"405":{"position":[[186,13]]}}}],["automaticallyanchor",{"_index":635,"t":{"385":{"position":[[510,21]]}}}],["avail",{"_index":27,"t":{"324":{"position":[[280,10]]},"334":{"position":[[240,10]]},"338":{"position":[[85,9]]},"343":{"position":[[136,9]]},"363":{"position":[[195,9]]},"391":{"position":[[198,9],[249,9]]},"395":{"position":[[1271,9]]},"433":{"position":[[2037,9]]},"435":{"position":[[334,9]]},"457":{"position":[[737,9],[871,9],[950,9]]},"463":{"position":[[766,9]]},"465":{"position":[[618,9]]},"467":{"position":[[490,9]]}}}],["azur",{"_index":274,"t":{"338":{"position":[[1284,6]]},"373":{"position":[[660,5],[2223,6]]},"375":{"position":[[134,6]]},"411":{"position":[[226,5],[288,5]]},"415":{"position":[[59,5],[1051,5],[1322,5],[1342,6],[1533,5],[1620,5],[1841,5],[1958,5],[2297,5]]},"431":{"position":[[43,5]]},"455":{"position":[[496,5],[6286,5],[10904,6]]},"469":{"position":[[3676,7]]}}}],["azureconfig",{"_index":548,"t":{"373":{"position":[[594,11],[619,11]]}}}],["azureopt",{"_index":549,"t":{"373":{"position":[[606,12]]}}}],["b",{"_index":8,"t":{"324":{"position":[[78,2]]},"455":{"position":[[4700,1]]},"475":{"position":[[463,2],[1044,2],[1517,1]]}}}],["back",{"_index":744,"t":{"395":{"position":[[100,4],[172,4]]}}}],["backend",{"_index":721,"t":{"391":{"position":[[224,9],[259,8]]},"393":{"position":[[19,7],[42,7],[141,8],[366,7]]},"395":{"position":[[18,7],[1291,7]]},"455":{"position":[[11342,8]]},"469":{"position":[[1041,8],[1352,7]]},"473":{"position":[[393,7],[659,7],[769,8],[837,8],[1279,7]]},"475":{"position":[[527,7],[812,7],[1139,7],[1345,7],[1455,8],[1527,8],[1595,8]]}}}],["backport",{"_index":148,"t":{"330":{"position":[[632,8]]}}}],["backslash",{"_index":480,"t":{"369":{"position":[[872,9]]}}}],["backup",{"_index":1388,"t":{"455":{"position":[[5366,6],[5501,7]]},"461":{"position":[[266,6],[293,9],[310,6]]}}}],["balanc",{"_index":801,"t":{"401":{"position":[[100,10],[241,8],[290,10]]}}}],["banner",{"_index":1369,"t":{"455":{"position":[[3294,6],[3322,6],[3364,7]]}}}],["bar",{"_index":653,"t":{"387":{"position":[[603,8],[641,5]]}}}],["base",{"_index":181,"t":{"332":{"position":[[505,5]]},"334":{"position":[[57,5]]},"343":{"position":[[523,5]]},"387":{"position":[[1386,7]]},"423":{"position":[[1025,5]]},"433":{"position":[[3391,5],[3929,4]]},"455":{"position":[[14215,5]]},"457":{"position":[[1243,5]]}}}],["base/dir",{"_index":678,"t":{"387":{"position":[[1467,12]]}}}],["base64",{"_index":422,"t":{"361":{"position":[[168,6]]},"379":{"position":[[213,6]]},"451":{"position":[[241,6],[302,6],[586,6]]},"455":{"position":[[1803,6]]}}}],["base64url",{"_index":753,"t":{"395":{"position":[[457,9]]}}}],["bash",{"_index":1288,"t":{"451":{"position":[[73,4]]}}}],["basic",{"_index":220,"t":{"338":{"position":[[317,5],[472,5],[624,5]]},"349":{"position":[[406,5],[464,5]]},"361":{"position":[[627,5],[685,5]]},"455":{"position":[[592,5],[661,5],[7242,5],[7268,5],[7604,5],[8386,5],[8473,5],[11780,5],[11805,5]]}}}],["basicauthpassword",{"_index":358,"t":{"349":{"position":[[330,17],[361,17]]},"361":{"position":[[551,17],[582,17]]}}}],["baz",{"_index":654,"t":{"387":{"position":[[648,12],[690,4],[957,11]]}}}],["baz/abc/123",{"_index":664,"t":{"387":{"position":[[1021,12]]}}}],["bcrypt",{"_index":1375,"t":{"455":{"position":[[4706,6]]}}}],["bearer",{"_index":892,"t":{"409":{"position":[[181,6]]},"455":{"position":[[2744,6],[7215,6],[11709,6],[12774,6],[12835,6]]}}}],["becom",{"_index":361,"t":{"349":{"position":[[453,6]]},"361":{"position":[[674,6]]},"459":{"position":[[417,7],[481,7]]}}}],["befor",{"_index":171,"t":{"332":{"position":[[282,6]]},"336":{"position":[[0,6]]},"338":{"position":[[1488,6]]},"387":{"position":[[829,6],[1050,6]]},"455":{"position":[[5636,6]]}}}],["beforward",{"_index":492,"t":{"369":{"position":[[1494,11]]}}}],["behind",{"_index":61,"t":{"324":{"position":[[744,6]]},"455":{"position":[[10956,6]]}}}],["believ",{"_index":83,"t":{"328":{"position":[[12,7]]}}}],["beload",{"_index":352,"t":{"349":{"position":[[204,8]]},"361":{"position":[[425,8]]}}}],["belong",{"_index":391,"t":{"353":{"position":[[454,6]]},"421":{"position":[[510,6],[1535,6]]},"455":{"position":[[3923,6]]}}}],["below",{"_index":183,"t":{"332":{"position":[[541,5],[728,6],[863,5]]},"334":{"position":[[104,6],[271,5]]},"401":{"position":[[53,7]]},"433":{"position":[[345,6]]},"451":{"position":[[50,5]]},"455":{"position":[[15909,5]]},"463":{"position":[[167,5],[324,5]]},"465":{"position":[[48,5]]},"467":{"position":[[237,6]]}}}],["beoverridden",{"_index":490,"t":{"369":{"position":[[1384,12]]}}}],["bepass",{"_index":488,"t":{"369":{"position":[[1252,8]]}}}],["between",{"_index":297,"t":{"343":{"position":[[290,7]]},"387":{"position":[[2135,7]]},"391":{"position":[[53,7]]},"455":{"position":[[3090,7]]}}}],["bewar",{"_index":170,"t":{"332":{"position":[[267,6]]},"405":{"position":[[838,6]]}}}],["bin/dex",{"_index":1117,"t":{"433":{"position":[[848,7]]}}}],["binari",{"_index":4,"t":{"324":{"position":[[43,6],[160,6],[338,8]]}}}],["bindaddress",{"_index":327,"t":{"343":{"position":[[1377,11],[1685,11]]},"381":{"position":[[108,11],[127,11]]}}}],["bit",{"_index":751,"t":{"395":{"position":[[387,3],[438,3]]},"435":{"position":[[823,4],[1057,3]]}}}],["bitbucket",{"_index":275,"t":{"338":{"position":[[1291,10]]},"373":{"position":[[832,9]]},"375":{"position":[[141,10]]},"411":{"position":[[345,9]]},"441":{"position":[[477,9],[594,9],[713,9]]}}}],["bitbucketconfig",{"_index":553,"t":{"373":{"position":[[754,15],[787,15]]}}}],["bitbucketopt",{"_index":554,"t":{"373":{"position":[[770,16]]}}}],["blank",{"_index":603,"t":{"381":{"position":[[186,5],[315,5]]}}}],["block",{"_index":483,"t":{"369":{"position":[[958,6],[1040,5]]},"433":{"position":[[625,5]]},"463":{"position":[[294,5]]}}}],["bodi",{"_index":687,"t":{"387":{"position":[[1825,4]]},"469":{"position":[[842,4]]}}}],["bool",{"_index":288,"t":{"341":{"position":[[56,4]]},"359":{"position":[[281,4]]},"371":{"position":[[166,4],[322,4],[501,4],[849,4]]},"387":{"position":[[1502,4],[1725,4],[2250,4],[2387,4]]},"389":{"position":[[131,4]]},"455":{"position":[[276,4],[1320,4],[1835,4],[1999,4],[2381,4],[2621,4],[3168,4],[3222,4],[5167,4],[5329,4],[6089,4],[6203,4],[6353,4],[6951,4],[7162,4],[7253,4],[7403,4],[7664,4],[7735,4],[8734,4],[10011,4],[10130,4],[10743,4],[10936,4],[11186,4],[11393,4],[11686,4],[11791,4],[11904,4],[12143,4],[12221,4],[12643,4],[12788,4],[12975,4],[13119,4],[13225,4],[13341,4],[13440,4]]}}}],["both",{"_index":324,"t":{"343":{"position":[[1302,4],[1610,4]]},"385":{"position":[[291,5]]},"469":{"position":[[2405,4]]}}}],["bracket",{"_index":1379,"t":{"455":{"position":[[4912,8],[5078,8]]}}}],["break",{"_index":160,"t":{"332":{"position":[[89,8]]}}}],["bring",{"_index":99,"t":{"328":{"position":[[281,5]]}}}],["brows",{"_index":193,"t":{"332":{"position":[[842,6]]}}}],["browser",{"_index":1236,"t":{"435":{"position":[[2922,8]]},"455":{"position":[[15761,8]]}}}],["browserxssfilt",{"_index":1591,"t":{"473":{"position":[[975,17]]},"475":{"position":[[1733,17]]}}}],["bs=32",{"_index":1295,"t":{"451":{"position":[[213,5]]}}}],["buffer",{"_index":696,"t":{"387":{"position":[[2165,6]]},"455":{"position":[[3116,7]]}}}],["build",{"_index":9,"t":{"324":{"position":[[81,5]]},"345":{"position":[[243,8]]},"399":{"position":[[962,8]]},"435":{"position":[[2563,6],[2581,5]]}}}],["built",{"_index":1100,"t":{"433":{"position":[[157,5]]}}}],["bundl",{"_index":1212,"t":{"435":{"position":[[1456,7]]}}}],["button",{"_index":1428,"t":{"455":{"position":[[13112,6]]}}}],["button=tru",{"_index":1221,"t":{"435":{"position":[[1902,11]]}}}],["bypass",{"_index":1424,"t":{"455":{"position":[[12345,6],[12459,6],[12980,6],[14920,6]]}}}],["bysom",{"_index":633,"t":{"385":{"position":[[457,6]]}}}],["byte",{"_index":420,"t":{"361":{"position":[[145,6]]},"379":{"position":[[190,6]]},"451":{"position":[[581,4],[633,6]]},"465":{"position":[[1215,5]]}}}],["c",{"_index":17,"t":{"324":{"position":[[182,2],[513,1]]},"451":{"position":[[115,1]]}}}],["c=us/st=washington/l=dc/o=gsa/ou=18f/cn=localhost",{"_index":1207,"t":{"435":{"position":[[1193,53]]}}}],["ca",{"_index":244,"t":{"338":{"position":[[865,2]]},"373":{"position":[[1707,2]]},"455":{"position":[[8032,2],[8063,2]]}}}],["cafil",{"_index":576,"t":{"373":{"position":[[1660,7],[1677,7]]}}}],["call",{"_index":397,"t":{"357":{"position":[[193,5]]},"413":{"position":[[1933,5]]},"455":{"position":[[4394,5]]}}}],["callback",{"_index":855,"t":{"403":{"position":[[860,8]]},"421":{"position":[[81,8]]},"433":{"position":[[594,10]]},"439":{"position":[[121,8]]},"441":{"position":[[28,9]]}}}],["caller",{"_index":448,"t":{"367":{"position":[[705,6]]}}}],["capitalis",{"_index":1466,"t":{"459":{"position":[[108,12]]}}}],["captur",{"_index":649,"t":{"387":{"position":[[507,8],[699,7],[885,7]]}}}],["case",{"_index":111,"t":{"328":{"position":[[533,4]]},"387":{"position":[[1214,4]]},"395":{"position":[[1079,5]]},"409":{"position":[[398,4]]},"435":{"position":[[3451,5]]},"437":{"position":[[839,5]]},"447":{"position":[[90,4]]},"455":{"position":[[13085,4]]}}}],["caseadd",{"_index":1306,"t":{"451":{"position":[[376,7]]}}}],["center",{"_index":907,"t":{"413":{"position":[[230,6],[318,6],[425,6]]}}}],["cert",{"_index":614,"t":{"383":{"position":[[260,4],[278,4]]},"399":{"position":[[65,4],[306,4]]},"455":{"position":[[13580,4]]}}}],["cert.pem",{"_index":1202,"t":{"435":{"position":[[1160,8]]}}}],["certif",{"_index":331,"t":{"343":{"position":[[1480,11],[1788,11]]},"373":{"position":[[1710,12]]},"381":{"position":[[400,11]]},"383":{"position":[[68,11],[294,11]]},"415":{"position":[[1182,12]]},"435":{"position":[[1008,11]]},"455":{"position":[[8066,12],[13249,12],[13365,12],[13605,11]]}}}],["certresolv",{"_index":1580,"t":{"473":{"position":[[447,13],[672,13]]},"475":{"position":[[624,13],[907,13],[1152,13],[1358,13]]}}}],["challeng",{"_index":590,"t":{"373":{"position":[[2500,9]]},"455":{"position":[[876,9],[914,10]]}}}],["chang",{"_index":161,"t":{"332":{"position":[[98,7],[202,8]]},"343":{"position":[[283,6]]},"371":{"position":[[783,6]]},"403":{"position":[[150,7]]},"427":{"position":[[82,8]]},"439":{"position":[[651,6]]},"455":{"position":[[1439,7]]}}}],["channel",{"_index":1358,"t":{"455":{"position":[[2671,7]]}}}],["charact",{"_index":471,"t":{"369":{"position":[[709,10],[916,10],[1076,10]]}}}],["check",{"_index":628,"t":{"385":{"position":[[134,7]]},"403":{"position":[[391,6]]},"409":{"position":[[80,7]]},"413":{"position":[[2188,7],[2451,7]]},"415":{"position":[[157,5]]},"455":{"position":[[8399,6],[8486,6],[8503,5]]}}}],["checkedaft",{"_index":515,"t":{"371":{"position":[[655,12]]}}}],["checksum",{"_index":38,"t":{"324":{"position":[[430,8]]}}}],["chomp",{"_index":482,"t":{"369":{"position":[[949,8]]}}}],["choos",{"_index":0,"t":{"324":{"position":[[0,6]]},"343":{"position":[[1288,6],[1596,6]]},"413":{"position":[[108,6],[243,6],[290,6],[331,6],[438,6],[501,6],[526,6],[581,6],[805,6],[1282,6],[1768,6],[2024,6]]},"415":{"position":[[52,6]]}}}],["cidr",{"_index":1437,"t":{"455":{"position":[[14896,4]]}}}],["cipher",{"_index":620,"t":{"383":{"position":[[530,6],[663,6],[697,6]]},"399":{"position":[[797,6],[839,6],[1027,6]]},"455":{"position":[[13628,6],[13669,6],[13815,6],[13850,6]]}}}],["ciphersuit",{"_index":619,"t":{"383":{"position":[[478,12],[500,12]]}}}],["claim",{"_index":350,"t":{"349":{"position":[[75,5],[123,5],[136,5],[161,5],[393,5],[442,5]]},"361":{"position":[[344,5],[357,5],[382,5],[614,5],[663,5]]},"371":{"position":[[561,5],[1101,5],[1201,5],[1302,5],[1410,5],[1469,5]]},"411":{"position":[[477,7],[508,5]]},"423":{"position":[[361,5]]},"425":{"position":[[303,5]]},"433":{"position":[[1782,6]]},"455":{"position":[[6399,5],[6614,5],[6638,5],[6692,5],[6716,5],[6772,5],[6796,5]]}}}],["claim/user_id_claim",{"_index":260,"t":{"338":{"position":[[1067,19]]}}}],["claimsourc",{"_index":348,"t":{"349":{"position":[[26,11]]},"379":{"position":[[13,12]]}}}],["clear",{"_index":850,"t":{"403":{"position":[[601,6],[656,5]]}}}],["click",{"_index":931,"t":{"413":{"position":[[1295,5]]},"415":{"position":[[117,5],[398,5],[523,5],[616,5]]},"417":{"position":[[199,5]]},"433":{"position":[[1983,5],[2647,5]]}}}],["client",{"_index":237,"t":{"338":{"position":[[712,6],[732,6],[765,6]]},"371":{"position":[[1445,6],[1630,6]]},"373":{"position":[[140,6],[269,6],[441,6]]},"393":{"position":[[187,6],[340,6],[481,6]]},"395":{"position":[[109,6]]},"399":{"position":[[435,6],[453,6]]},"401":{"position":[[1424,6],[1442,6]]},"413":{"position":[[515,6],[838,6],[852,6],[1232,6],[1494,6],[1918,6]]},"415":{"position":[[1232,6],[1456,6],[1497,6],[1764,6],[1805,6]]},"417":{"position":[[239,6],[250,6],[349,6],[390,6]]},"423":{"position":[[103,6],[292,6],[460,6],[498,6]]},"425":{"position":[[11,6],[73,6],[234,6],[381,6],[438,6],[534,6],[565,6],[852,6]]},"427":{"position":[[748,6],[777,6]]},"433":{"position":[[1011,6],[1034,6],[2891,6],[2905,6],[4169,6],[4183,6]]},"435":{"position":[[1587,6],[3565,6],[3589,6]]},"437":{"position":[[414,6],[428,6],[548,6],[582,6]]},"439":{"position":[[338,6],[352,6],[442,6],[466,6]]},"441":{"position":[[275,6],[289,6],[376,6],[400,6]]},"443":{"position":[[175,6],[189,6],[355,6],[405,6]]},"455":{"position":[[681,6],[708,6],[762,6],[793,6],[809,6],[855,6],[4896,8],[5062,8],[8848,6],[8916,7],[12892,6],[15030,6]]},"463":{"position":[[677,11],[833,6],[1408,7]]},"465":{"position":[[413,11],[688,6],[1480,7]]},"475":{"position":[[2276,6],[2307,6]]}}}],["client'",{"_index":1040,"t":{"423":{"position":[[518,8]]},"425":{"position":[[550,8],[585,8]]}}}],["client/remot",{"_index":1493,"t":{"463":{"position":[[858,13]]},"465":{"position":[[713,13]]}}}],["client_id",{"_index":1153,"t":{"433":{"position":[[3499,9],[4564,13]]},"443":{"position":[[368,9]]}}}],["client_secret",{"_index":1154,"t":{"433":{"position":[[3513,13]]},"443":{"position":[[422,13]]}}}],["clientid",{"_index":541,"t":{"373":{"position":[[102,8],[118,8]]}}}],["clientsecret",{"_index":543,"t":{"373":{"position":[[223,12],[243,12],[475,12]]}}}],["clientsecretfil",{"_index":544,"t":{"373":{"position":[[356,16],[380,16]]}}}],["closest",{"_index":644,"t":{"387":{"position":[[364,7]]}}}],["cloud",{"_index":799,"t":{"401":{"position":[[80,5]]},"435":{"position":[[2259,5]]}}}],["cloud/dock",{"_index":1225,"t":{"435":{"position":[[2179,12]]}}}],["cluster",{"_index":766,"t":{"395":{"position":[[1260,7],[1418,7]]},"455":{"position":[[9184,7],[9236,7],[9325,7],[10003,7],[10033,8],[10059,7]]}}}],["cluster=tru",{"_index":769,"t":{"395":{"position":[[1367,12],[1515,12]]}}}],["code",{"_index":589,"t":{"373":{"position":[[2495,4]]},"387":{"position":[[2005,4]]},"433":{"position":[[2821,4],[4129,4]]},"455":{"position":[[871,4],[909,4]]},"465":{"position":[[1269,4]]}}}],["code_challenge_method",{"_index":588,"t":{"373":{"position":[[2462,21]]}}}],["codematch",{"_index":688,"t":{"387":{"position":[[1864,12]]}}}],["collabor",{"_index":127,"t":{"330":{"position":[[161,12]]},"353":{"position":[[217,13],[494,13]]},"421":{"position":[[310,13],[550,14],[934,13],[1104,13],[1456,13],[1575,14]]},"455":{"position":[[3659,13],[3783,13],[3963,13]]}}}],["collaboratorsit",{"_index":388,"t":{"353":{"position":[[315,15]]}}}],["collect",{"_index":598,"t":{"377":{"position":[[62,10]]},"389":{"position":[[47,10]]}}}],["combin",{"_index":1439,"t":{"455":{"position":[[14978,8]]},"461":{"position":[[675,8]]}}}],["come",{"_index":613,"t":{"383":{"position":[[242,4],[338,4]]}}}],["comma",{"_index":887,"t":{"407":{"position":[[151,5],[213,5],[275,5]]},"421":{"position":[[889,5],[1605,5],[1669,5]]},"427":{"position":[[1025,5]]},"455":{"position":[[2959,5],[3613,5],[4079,5]]},"457":{"position":[[1057,5]]}}}],["command",{"_index":55,"t":{"324":{"position":[[673,7]]},"395":{"position":[[731,8]]},"399":{"position":[[135,7]]},"401":{"position":[[1172,7]]},"437":{"position":[[205,7]]},"439":{"position":[[693,7]]},"449":{"position":[[35,7],[135,7]]},"451":{"position":[[56,9]]},"453":{"position":[[6,7]]},"459":{"position":[[6,7],[365,7]]},"461":{"position":[[140,8]]}}}],["commandlin",{"_index":1235,"t":{"435":{"position":[[2830,12]]}}}],["common",{"_index":337,"t":{"345":{"position":[[99,6],[152,8]]},"431":{"position":[[204,6]]},"455":{"position":[[543,6],[581,8]]}}}],["commun",{"_index":66,"t":{"326":{"position":[[23,9]]}}}],["compat",{"_index":1400,"t":{"455":{"position":[[6305,14]]}}}],["complet",{"_index":730,"t":{"393":{"position":[[405,10]]},"399":{"position":[[1000,8]]}}}],["compos",{"_index":103,"t":{"328":{"position":[[353,7]]},"395":{"position":[[230,8]]}}}],["compress",{"_index":1384,"t":{"455":{"position":[[5158,8],[5200,10]]},"461":{"position":[[332,10],[354,10]]}}}],["compris",{"_index":756,"t":{"395":{"position":[[565,9]]}}}],["concurr",{"_index":737,"t":{"393":{"position":[[628,12]]}}}],["confident",{"_index":1034,"t":{"423":{"position":[[150,13]]},"425":{"position":[[58,14]]}}}],["config",{"_index":54,"t":{"324":{"position":[[660,6]]},"332":{"position":[[691,6]]},"334":{"position":[[159,6],[200,6]]},"336":{"position":[[30,6],[82,6],[179,6],[197,6],[487,7],[516,6],[551,6]]},"338":{"position":[[1394,6],[1414,6],[1530,6]]},"395":{"position":[[1741,6]]},"401":{"position":[[46,6],[645,6]]},"403":{"position":[[182,6]]},"427":{"position":[[495,6]]},"433":{"position":[[3684,6],[4346,6],[4845,6]]},"439":{"position":[[545,6]]},"449":{"position":[[82,6]]},"453":{"position":[[50,6],[162,6],[235,6]]},"455":{"position":[[993,6],[1015,6],[10522,6]]},"457":{"position":[[1173,6]]},"469":{"position":[[2906,6]]}}}],["config=/etc/oauth2",{"_index":1322,"t":{"453":{"position":[[307,18]]}}}],["configur",{"_index":52,"t":{"324":{"position":[[631,9],[720,9]]},"332":{"position":[[303,13],[359,13],[447,13],[511,13],[587,14],[639,14],[671,14],[898,13]]},"334":{"position":[[21,14]]},"336":{"position":[[123,13],[318,13],[406,13]]},"338":{"position":[[112,14]]},"343":{"position":[[39,13],[169,13],[402,9],[634,9],[869,9],[1225,9],[1464,9],[1547,9],[1772,9],[1850,9]]},"345":{"position":[[200,10]]},"367":{"position":[[48,13]]},"373":{"position":[[43,13],[556,14],[641,14],[720,14],[813,14],[902,14],[989,14],[1075,14],[1155,14],[1213,15],[1285,14]]},"381":{"position":[[49,13],[454,13]]},"387":{"position":[[53,13]]},"389":{"position":[[309,13]]},"395":{"position":[[1031,9],[1153,9],[1390,9]]},"397":{"position":[[26,15]]},"399":{"position":[[0,9],[176,13],[481,13],[713,11]]},"401":{"position":[[0,9],[1213,13]]},"403":{"position":[[832,10]]},"405":{"position":[[971,13]]},"407":{"position":[[86,10]]},"409":{"position":[[518,10],[698,14]]},"411":{"position":[[105,9],[409,13]]},"415":{"position":[[1289,9]]},"417":{"position":[[268,9],[306,9]]},"433":{"position":[[360,9],[611,13],[1535,9],[1747,9],[1847,9],[2372,9],[3011,13],[3531,10]]},"437":{"position":[[165,14]]},"439":{"position":[[304,10]]},"441":{"position":[[442,13],[570,13]]},"449":{"position":[[20,10],[234,13]]},"455":{"position":[[393,13],[2887,13],[9501,15],[10841,13],[13066,10],[13560,13]]},"457":{"position":[[180,10],[511,10],[775,10],[1031,10]]},"459":{"position":[[339,13]]},"461":{"position":[[67,10],[183,9],[589,12]]},"463":{"position":[[582,9],[654,10]]},"465":{"position":[[315,9],[390,10]]},"467":{"position":[[134,13],[349,9],[425,10]]},"469":{"position":[[2798,13],[3744,10]]},"473":{"position":[[295,14]]},"475":{"position":[[240,10]]}}}],["conflict",{"_index":741,"t":{"393":{"position":[[768,9]]}}}],["conjunct",{"_index":317,"t":{"343":{"position":[[1020,11]]},"415":{"position":[[2056,11]]},"455":{"position":[[7580,11],[9296,11],[9793,11],[9953,11]]}}}],["connect",{"_index":495,"t":{"371":{"position":[[87,7],[993,7]]},"373":{"position":[[1748,10]]},"395":{"position":[[942,10],[970,10],[1223,10],[1426,10],[1614,10],[1775,10],[1824,10]]},"401":{"position":[[414,11]]},"411":{"position":[[304,7],[556,7]]},"425":{"position":[[97,8]]},"433":{"position":[[7,7],[227,7],[271,7],[2635,7]]},"435":{"position":[[869,7],[913,8]]},"455":{"position":[[6446,7],[8104,10],[9192,10],[9244,10],[9341,10],[9559,10],[9655,11],[9848,10],[9901,10],[10016,7],[10067,10],[10135,7],[10226,10],[10276,10],[10310,10],[10399,10],[10556,10],[10605,10]]}}}],["connect/auth",{"_index":1044,"t":{"423":{"position":[[615,13]]}}}],["connect/token",{"_index":1045,"t":{"423":{"position":[[710,14]]}}}],["connect/userinfo",{"_index":1046,"t":{"423":{"position":[[807,17],[908,17]]}}}],["consent",{"_index":454,"t":{"369":{"position":[[165,7],[333,7]]},"413":{"position":[[345,7]]},"415":{"position":[[702,7],[810,7],[837,7]]}}}],["consent#th",{"_index":996,"t":{"415":{"position":[[2238,11]]}}}],["consid",{"_index":296,"t":{"343":{"position":[[256,10]]},"369":{"position":[[889,10]]}}}],["consol",{"_index":1004,"t":{"417":{"position":[[29,7]]}}}],["consum",{"_index":1093,"t":{"429":{"position":[[353,8],[380,8]]},"441":{"position":[[16,8]]}}}],["contact",{"_index":1180,"t":{"435":{"position":[[96,7],[135,7]]}}}],["contain",{"_index":153,"t":{"332":{"position":[[17,8]]},"343":{"position":[[13,8]]},"359":{"position":[[561,8]]},"361":{"position":[[315,10]]},"371":{"position":[[1107,8],[1207,8],[1308,8]]},"379":{"position":[[360,10]]},"381":{"position":[[359,8]]},"383":{"position":[[25,8]]},"433":{"position":[[1466,9],[4746,10]]},"435":{"position":[[2508,8]]},"455":{"position":[[6644,8],[6722,8],[6802,8],[11975,7]]},"463":{"position":[[53,7],[305,7]]},"469":{"position":[[2217,7]]}}}],["content",{"_index":1208,"t":{"435":{"position":[[1251,8]]},"469":{"position":[[864,7],[2240,8]]}}}],["contenttypenosniff",{"_index":1592,"t":{"473":{"position":[[998,19]]},"475":{"position":[[1756,19]]}}}],["contrib",{"_index":1321,"t":{"453":{"position":[[257,7]]}}}],["control",{"_index":1411,"t":{"455":{"position":[[10980,8]]}}}],["convert",{"_index":200,"t":{"336":{"position":[[74,7],[106,7],[171,7],[244,7]]},"349":{"position":[[379,8]]},"361":{"position":[[600,8]]}}}],["convolut",{"_index":476,"t":{"369":{"position":[[798,11]]}}}],["cooki",{"_index":718,"t":{"391":{"position":[[122,6],[309,6]]},"393":{"position":[[4,6],[126,6],[199,7],[426,7],[518,6],[579,6]]},"395":{"position":[[139,6],[196,6],[326,6]]},"399":{"position":[[373,6],[395,6]]},"401":{"position":[[1339,6],[1361,6]]},"403":{"position":[[608,8],[674,6]]},"405":{"position":[[103,8]]},"409":{"position":[[112,6],[122,6],[543,8],[570,6]]},"413":{"position":[[933,6]]},"415":{"position":[[2336,6],[2374,6]]},"417":{"position":[[483,6],[521,6]]},"427":{"position":[[570,6],[814,6]]},"433":{"position":[[1147,6],[1167,6],[3618,7]]},"435":{"position":[[1729,6],[1811,6],[1861,6],[3847,6]]},"451":{"position":[[21,6]]},"455":{"position":[[1029,6],[1066,6],[1090,7],[1203,6],[1242,6],[1286,6],[1304,6],[1338,6],[1357,6],[1392,6],[1456,6],[1498,6],[1538,6],[1569,6],[1590,7],[1620,6],[1656,6],[1735,6],[1783,7],[1821,6],[1864,6],[1883,6],[1919,6],[1975,6],[2033,7],[2108,6],[2162,6],[11171,6],[11215,6],[11259,7],[11360,6],[11367,6],[15415,6]]},"459":{"position":[[398,6]]},"469":{"position":[[1487,6],[1623,6],[1710,7],[1847,7],[1914,7],[1979,7],[2094,6],[2131,6],[2233,6],[2414,6],[2511,6],[2554,6],[3475,8],[3728,6],[3761,6],[3810,6],[3929,6]]}}}],["cookie_secret",{"_index":1155,"t":{"433":{"position":[[3589,13]]},"451":{"position":[[681,15]]}}}],["cookienam",{"_index":746,"t":{"395":{"position":[[257,12],[301,10],[541,12]]}}}],["copi",{"_index":205,"t":{"336":{"position":[[343,4]]},"435":{"position":[[2600,4]]},"469":{"position":[[1825,6]]}}}],["coreo",{"_index":1101,"t":{"433":{"position":[[171,6]]}}}],["corp.com\"]client_id",{"_index":1145,"t":{"433":{"position":[[3240,20]]}}}],["corpor",{"_index":80,"t":{"326":{"position":[[218,9]]}}}],["correct",{"_index":1014,"t":{"421":{"position":[[104,7]]},"433":{"position":[[545,7]]},"443":{"position":[[110,7]]}}}],["correctli",{"_index":1000,"t":{"415":{"position":[[2425,10]]},"417":{"position":[[572,10]]},"475":{"position":[[382,9]]}}}],["count=1",{"_index":1296,"t":{"451":{"position":[[219,7]]}}}],["cover",{"_index":1523,"t":{"467":{"position":[[30,7]]}}}],["creat",{"_index":139,"t":{"330":{"position":[[480,6]]},"413":{"position":[[40,6],[812,8],[1078,6],[1758,6],[2014,6]]},"415":{"position":[[253,6]]},"419":{"position":[[0,6]]},"421":{"position":[[0,6],[1350,7]]},"423":{"position":[[92,6],[299,6],[487,8],[1461,6]]},"425":{"position":[[0,6],[241,6],[324,6]]},"429":{"position":[[42,6]]},"433":{"position":[[2653,6],[3002,6],[3791,6]]},"435":{"position":[[443,6],[2429,6]]},"439":{"position":[[0,6]]},"443":{"position":[[0,6]]},"455":{"position":[[1420,8],[4677,7]]}}}],["credenti",{"_index":402,"t":{"357":{"position":[[284,11]]},"413":{"position":[[297,13],[445,13],[478,12]]},"417":{"position":[[294,11]]},"423":{"position":[[270,10]]},"425":{"position":[[212,10]]},"455":{"position":[[4575,11]]}}}],["crypto/tl",{"_index":627,"t":{"383":{"position":[[731,10]]},"399":{"position":[[914,10],[1062,11]]},"455":{"position":[[13884,10]]}}}],["csrf",{"_index":1349,"t":{"455":{"position":[[1982,4],[2028,4],[2115,4],[2157,4]]}}}],["current",{"_index":5,"t":{"324":{"position":[[50,8]]},"399":{"position":[[735,9],[932,9]]},"411":{"position":[[517,9]]},"433":{"position":[[1228,7]]},"455":{"position":[[6262,10]]}}}],["custom",{"_index":788,"t":{"399":{"position":[[508,13]]},"425":{"position":[[410,6]]},"433":{"position":[[2091,6]]},"455":{"position":[[2175,6],[2211,6],[2235,6],[2282,6],[3308,6],[3388,6]]},"469":{"position":[[3803,6]]}}}],["cycl",{"_index":852,"t":{"403":{"position":[[741,5],[803,6]]}}}],["d",{"_index":28,"t":{"324":{"position":[[291,2]]},"451":{"position":[[254,1]]}}}],["danger",{"_index":151,"t":{"332":{"position":[[0,6]]},"343":{"position":[[211,6]]}}}],["dashboard",{"_index":906,"t":{"413":{"position":[[220,9]]},"435":{"position":[[496,10],[798,10]]}}}],["data",{"_index":611,"t":{"383":{"position":[[210,4],[306,4]]},"391":{"position":[[179,4]]},"393":{"position":[[550,4],[586,5]]},"423":{"position":[[1355,4]]},"435":{"position":[[426,4]]},"455":{"position":[[11329,4]]},"465":{"position":[[1392,4]]}}}],["date",{"_index":1504,"t":{"463":{"position":[[1310,4]]},"465":{"position":[[1332,4]]},"467":{"position":[[602,4]]}}}],["day",{"_index":1203,"t":{"435":{"position":[[1170,4]]},"455":{"position":[[5456,4]]}}}],["dd",{"_index":1293,"t":{"451":{"position":[[194,2]]}}}],["debug",{"_index":1416,"t":{"455":{"position":[[11889,5]]}}}],["decim",{"_index":371,"t":{"351":{"position":[[153,7]]}}}],["decod",{"_index":1310,"t":{"451":{"position":[[620,6]]}}}],["decreas",{"_index":1283,"t":{"449":{"position":[[98,10]]}}}],["default",{"_index":441,"t":{"367":{"position":[[176,9],[207,7],[431,7],[513,7],[637,7]]},"369":{"position":[[68,8],[226,7],[1170,7],[1198,7],[1218,7],[1363,7]]},"371":{"position":[[804,7],[1457,7]]},"373":{"position":[[1549,7],[1797,7]]},"383":{"position":[[647,7]]},"391":{"position":[[316,9]]},"393":{"position":[[34,7]]},"395":{"position":[[356,8]]},"399":{"position":[[635,8],[900,8]]},"401":{"position":[[168,8],[763,7]]},"403":{"position":[[517,7]]},"411":{"position":[[218,7]]},"415":{"position":[[2108,9],[2250,7]]},"429":{"position":[[146,7]]},"431":{"position":[[196,7]]},"433":{"position":[[576,7],[1927,7],[2415,7],[2863,8],[4248,7]]},"439":{"position":[[575,8]]},"441":{"position":[[434,7]]},"455":{"position":[[24,7],[2343,7],[2659,7],[3356,7],[3436,7],[4300,9],[8154,7],[13799,7],[15614,8],[15685,7]]},"461":{"position":[[3,8],[627,7]]},"463":{"position":[[152,7],[636,7]]},"465":{"position":[[33,7],[372,7]]},"467":{"position":[[219,7],[407,7]]},"473":{"position":[[461,7],[686,7]]},"475":{"position":[[638,7],[921,7],[1166,7],[1372,7]]}}}],["defin",{"_index":305,"t":{"343":{"position":[[550,7]]},"371":{"position":[[1399,6]]},"373":{"position":[[158,7],[291,7],[1953,7]]},"379":{"position":[[140,7]]},"423":{"position":[[1511,6]]},"447":{"position":[[48,6]]}}}],["definit",{"_index":599,"t":{"377":{"position":[[76,11]]},"389":{"position":[[61,11]]}}}],["delay",{"_index":144,"t":{"330":{"position":[[571,5]]}}}],["demo",{"_index":1188,"t":{"435":{"position":[[512,5]]}}}],["demonstr",{"_index":112,"t":{"328":{"position":[[558,11]]}}}],["depend",{"_index":87,"t":{"328":{"position":[[85,13]]},"330":{"position":[[339,14]]},"409":{"position":[[680,10]]},"437":{"position":[[228,9]]},"455":{"position":[[8306,8]]}}}],["deploy",{"_index":1,"t":{"324":{"position":[[14,7],[737,6]]},"435":{"position":[[3075,11]]}}}],["deprec",{"_index":1423,"t":{"455":{"position":[[12310,11]]}}}],["describ",{"_index":163,"t":{"332":{"position":[[172,9]]},"334":{"position":[[77,9]]},"433":{"position":[[2156,8]]}}}],["descript",{"_index":286,"t":{"341":{"position":[[34,11]]},"343":{"position":[[334,11]]},"345":{"position":[[34,11]]},"347":{"position":[[34,11]]},"349":{"position":[[111,11]]},"353":{"position":[[34,11]]},"355":{"position":[[34,11]]},"357":{"position":[[34,11]]},"359":{"position":[[129,11]]},"361":{"position":[[127,11]]},"363":{"position":[[34,11]]},"365":{"position":[[34,11]]},"369":{"position":[[1098,11]]},"371":{"position":[[34,11]]},"373":{"position":[[90,11]]},"379":{"position":[[172,11]]},"381":{"position":[[96,11]]},"383":{"position":[[162,11]]},"385":{"position":[[308,11]]},"387":{"position":[[182,11]]},"389":{"position":[[106,11]]},"433":{"position":[[2324,11]]},"439":{"position":[[71,11]]},"455":{"position":[[12,11]]},"463":{"position":[[821,11]]},"465":{"position":[[676,11]]},"467":{"position":[[549,11]]}}}],["desir",{"_index":417,"t":{"359":{"position":[[574,7]]}}}],["detail",{"_index":94,"t":{"328":{"position":[[167,7],[457,6]]},"332":{"position":[[122,8],[336,7]]},"415":{"position":[[2273,8]]},"433":{"position":[[508,8]]},"455":{"position":[[11914,8]]},"463":{"position":[[1042,7],[1552,8]]},"467":{"position":[[751,7]]}}}],["determin",{"_index":408,"t":{"359":{"position":[[307,10]]},"385":{"position":[[145,9]]},"387":{"position":[[1981,10],[2270,10]]},"455":{"position":[[8887,9]]},"475":{"position":[[362,9]]}}}],["dev.yaml",{"_index":1111,"t":{"433":{"position":[[679,9],[878,8]]}}}],["develop",{"_index":1159,"t":{"433":{"position":[[3737,9]]},"435":{"position":[[315,9]]}}}],["dex",{"_index":1102,"t":{"433":{"position":[[178,3],[352,4],[392,4],[435,4],[802,4],[1521,4]]}}}],["differ",{"_index":474,"t":{"369":{"position":[[759,9]]},"375":{"position":[[77,9]]},"413":{"position":[[2150,9]]},"455":{"position":[[2018,9],[6237,6]]},"461":{"position":[[381,9]]},"463":{"position":[[546,9]]},"465":{"position":[[279,9]]},"467":{"position":[[313,9]]}}}],["digitalocean",{"_index":593,"t":{"375":{"position":[[152,12]]},"411":{"position":[[332,12]]}}}],["dir",{"_index":1353,"t":{"455":{"position":[[2192,3]]}}}],["dir\",th",{"_index":677,"t":{"387":{"position":[[1427,10]]}}}],["direct",{"_index":336,"t":{"345":{"position":[[67,7]]},"403":{"position":[[1085,9]]},"469":{"position":[[23,9]]}}}],["directli",{"_index":837,"t":{"403":{"position":[[22,8]]},"455":{"position":[[13150,8]]}}}],["directori",{"_index":952,"t":{"415":{"position":[[72,10],[1356,9]]},"427":{"position":[[1201,9]]},"433":{"position":[[1244,9]]},"435":{"position":[[2480,9]]},"453":{"position":[[265,10]]},"457":{"position":[[595,9]]}}}],["directory/develop/v2",{"_index":995,"t":{"415":{"position":[[2201,20]]}}}],["disabl",{"_index":604,"t":{"381":{"position":[[209,8],[338,8]]},"403":{"position":[[505,8]]},"455":{"position":[[1689,8],[2335,7],[3348,7],[3428,7],[5561,7],[6592,8],[12148,7]]},"461":{"position":[[483,8],[767,8]]}}}],["disallow",{"_index":839,"t":{"403":{"position":[[244,9]]}}}],["disclos",{"_index":125,"t":{"330":{"position":[[65,9],[298,9]]}}}],["disclosur",{"_index":75,"t":{"326":{"position":[[139,11]]},"328":{"position":[[194,11],[491,10]]},"330":{"position":[[129,10]]},"395":{"position":[[839,11]]}}}],["discov",{"_index":114,"t":{"328":{"position":[[590,10]]}}}],["discoveri",{"_index":506,"t":{"371":{"position":[[447,9],[888,9]]},"405":{"position":[[826,11]]},"435":{"position":[[3252,10],[3298,9],[3485,9],[3711,9]]},"455":{"position":[[6579,9],[12965,9],[13001,10]]}}}],["discret",{"_index":150,"t":{"330":{"position":[[695,10]]}}}],["discuss",{"_index":124,"t":{"330":{"position":[[47,7],[216,10]]}}}],["display",{"_index":242,"t":{"338":{"position":[[821,7]]},"373":{"position":[[1591,7]]},"433":{"position":[[979,7]]},"443":{"position":[[332,7]]},"455":{"position":[[2359,7],[2386,7],[8208,7]]}}}],["doc",{"_index":1323,"t":{"455":{"position":[[66,4]]}}}],["docker",{"_index":19,"t":{"324":{"position":[[204,6]]},"433":{"position":[[1490,6]]},"435":{"position":[[2318,6],[2556,6],[2574,6]]}}}],["document",{"_index":154,"t":{"332":{"position":[[26,13]]},"383":{"position":[[742,14]]},"433":{"position":[[2470,13]]},"437":{"position":[[387,13]]},"455":{"position":[[13895,14]]}}}],["doesn't",{"_index":999,"t":{"415":{"position":[[2398,7]]},"417":{"position":[[545,7]]}}}],["domain",{"_index":462,"t":{"369":{"position":[[529,7],[655,7]]},"405":{"position":[[854,6],[964,6],[1064,6]]},"407":{"position":[[251,7]]},"411":{"position":[[147,6]]},"413":{"position":[[648,6],[1058,7],[1829,6]]},"421":{"position":[[407,8]]},"427":{"position":[[1263,6]]},"433":{"position":[[1194,6]]},"435":{"position":[[3874,6]]},"445":{"position":[[22,6],[221,9]]},"455":{"position":[[1036,6],[1073,7],[1138,6],[1210,6],[2470,6],[2530,6],[14689,6],[14718,7],[14771,6],[15485,6],[15504,6],[15579,6],[15838,7]]},"459":{"position":[[469,6]]},"469":{"position":[[548,8]]},"473":{"position":[[469,8],[694,8]]},"475":{"position":[[646,8],[929,8],[1174,8],[1380,8]]}}}],["domain.com",{"_index":1494,"t":{"463":{"position":[[964,10]]},"465":{"position":[[819,10]]}}}],["domain.tld/gitlab",{"_index":1082,"t":{"427":{"position":[[1217,19]]}}}],["domain.tld/gitlab/oauth",{"_index":1087,"t":{"427":{"position":[[1366,24]]}}}],["domain.tld/oauth",{"_index":1085,"t":{"427":{"position":[[1332,16]]}}}],["domain=\"yourcompany.com",{"_index":784,"t":{"399":{"position":[[237,24]]},"401":{"position":[[1274,24]]}}}],["domain=gsa.gov",{"_index":1217,"t":{"435":{"position":[[1758,14]]}}}],["domain=localhost",{"_index":1220,"t":{"435":{"position":[[1868,16]]}}}],["domain=yourcompany.com",{"_index":1278,"t":{"445":{"position":[[41,23]]}}}],["domain}/admin/oauth2/a",{"_index":1167,"t":{"433":{"position":[[4314,23]]}}}],["domain}/dev/console/apps/new",{"_index":1162,"t":{"433":{"position":[[3839,28]]}}}],["domain}/oauth2/default\"upstream",{"_index":1170,"t":{"433":{"position":[[4487,32]]}}}],["don't",{"_index":1398,"t":{"455":{"position":[[6094,5],[8496,6]]},"469":{"position":[[3791,5]]}}}],["done",{"_index":97,"t":{"328":{"position":[[214,4]]},"343":{"position":[[1357,4],[1665,4]]}}}],["doubl",{"_index":848,"t":{"403":{"position":[[570,7]]}}}],["down",{"_index":918,"t":{"413":{"position":[[496,4],[2234,4]]},"415":{"position":[[1255,4]]}}}],["download",{"_index":2,"t":{"324":{"position":[[25,8]]},"413":{"position":[[1191,8],[2272,10]]},"433":{"position":[[426,8]]}}}],["drop",{"_index":917,"t":{"413":{"position":[[491,4]]}}}],["dropdown",{"_index":905,"t":{"413":{"position":[[158,8]]}}}],["due",{"_index":968,"t":{"415":{"position":[[873,3]]},"427":{"position":[[64,3]]}}}],["durat",{"_index":366,"t":{"351":{"position":[[39,8],[99,8]]},"387":{"position":[[2098,8],[2484,8],[2516,8]]},"455":{"position":[[1256,8],[1635,8],[1674,9],[2127,8],[3074,8],[14252,8]]}}}],["dure",{"_index":972,"t":{"415":{"position":[[958,6]]},"463":{"position":[[507,6]]}}}],["dynam",{"_index":1576,"t":{"473":{"position":[[275,7]]}}}],["e.g",{"_index":883,"t":{"405":{"position":[[1108,4]]},"427":{"position":[[359,4],[1211,5],[1270,5],[1361,4]]},"433":{"position":[[2201,4]]},"455":{"position":[[719,4],[1101,5],[1601,5],[3014,4],[4952,4],[5118,4],[6466,4],[7542,4],[8680,5],[9117,4],[9260,5],[9409,5],[9917,5],[13714,5],[14815,5]]},"457":{"position":[[885,4]]},"469":{"position":[[3662,5]]}}}],["each",{"_index":40,"t":{"324":{"position":[[457,4]]},"351":{"position":[[170,4]]},"393":{"position":[[228,4]]},"415":{"position":[[289,4]]},"433":{"position":[[1885,4]]},"461":{"position":[[464,4],[556,4]]}}}],["echo",{"_index":1301,"t":{"451":{"position":[[283,4]]}}}],["effect",{"_index":444,"t":{"367":{"position":[[489,11]]}}}],["elb",{"_index":798,"t":{"401":{"position":[[68,4],[262,3]]}}}],["email",{"_index":104,"t":{"328":{"position":[[364,5]]},"338":{"position":[[589,5]]},"369":{"position":[[490,5]]},"371":{"position":[[224,5],[1146,7],[1343,7]]},"399":{"position":[[231,5]]},"401":{"position":[[1268,5]]},"403":{"position":[[926,5]]},"407":{"position":[[245,5],[307,6]]},"413":{"position":[[1802,5],[1866,5],[1883,5],[2043,5],[2068,5]]},"421":{"position":[[401,5]]},"427":{"position":[[296,5]]},"433":{"position":[[1188,5]]},"435":{"position":[[1479,5],[1752,5],[3868,5]]},"441":{"position":[[215,5]]},"445":{"position":[[16,5],[35,5],[89,5],[125,6],[160,5],[193,5],[215,5]]},"455":{"position":[[423,6],[463,6],[2464,5],[2504,6],[2594,5],[4341,5],[6083,5],[6111,5],[6608,5],[6664,5],[6670,7],[7310,5],[7389,5],[7426,5],[7520,5],[7795,5],[11461,5]]},"459":{"position":[[463,5]]},"463":{"position":[[75,5],[1448,5]]},"465":{"position":[[1520,5]]},"469":{"position":[[1024,5],[1174,6],[1268,5],[1274,7]]}}}],["email,default",{"_index":528,"t":{"371":{"position":[[1125,13]]}}}],["emailclaim",{"_index":527,"t":{"371":{"position":[[1056,10],[1074,10]]}}}],["empti",{"_index":357,"t":{"349":{"position":[[323,6]]},"361":{"position":[[544,6]]},"455":{"position":[[5279,5],[15628,5]]},"463":{"position":[[1225,5]]},"465":{"position":[[1088,5]]}}}],["enabl",{"_index":426,"t":{"363":{"position":[[68,7],[144,7]]},"387":{"position":[[2075,8],[2408,7]]},"413":{"position":[[1323,6],[1733,6]]},"427":{"position":[[256,6]]},"455":{"position":[[2004,6],[8739,7]]},"461":{"position":[[472,7]]},"469":{"position":[[1291,7],[1477,7]]},"475":{"position":[[318,7]]}}}],["encod",{"_index":423,"t":{"361":{"position":[[175,7]]},"379":{"position":[[220,7]]},"395":{"position":[[410,7],[467,7],[652,7]]},"405":{"position":[[432,11]]},"451":{"position":[[597,8]]},"455":{"position":[[1810,8]]}}}],["encount",{"_index":1228,"t":{"435":{"position":[[2236,9],[2400,9]]}}}],["encrypt",{"_index":735,"t":{"393":{"position":[[558,9]]},"395":{"position":[[43,10],[671,9],[740,10]]},"433":{"position":[[3606,7]]},"455":{"position":[[4713,10]]}}}],["end",{"_index":636,"t":{"385":{"position":[[549,3]]},"403":{"position":[[786,3]]},"415":{"position":[[2125,3]]},"469":{"position":[[3562,3]]}}}],["end_session_endpoint",{"_index":876,"t":{"405":{"position":[[733,20]]}}}],["endeavour",{"_index":73,"t":{"326":{"position":[[115,9]]}}}],["endpoint",{"_index":62,"t":{"324":{"position":[[757,8]]},"365":{"position":[[266,8]]},"367":{"position":[[141,8]]},"373":{"position":[[1886,8],[2086,8],[2146,8],[2310,8]]},"385":{"position":[[121,8]]},"401":{"position":[[558,8]]},"403":{"position":[[48,10],[69,9],[417,8]]},"405":{"position":[[62,8]]},"407":{"position":[[5,8]]},"409":{"position":[[768,10]]},"415":{"position":[[1062,9],[1333,8],[1366,9],[1631,8],[1669,9],[1969,8]]},"423":{"position":[[1385,8]]},"433":{"position":[[1286,9]]},"435":{"position":[[3403,9],[3529,9]]},"455":{"position":[[571,9],[6041,8],[7901,8],[8356,8],[8809,9],[9062,8],[12184,8],[12992,8],[14116,9],[14633,8]]},"461":{"position":[[722,8]]},"469":{"position":[[100,9]]},"473":{"position":[[114,8]]},"475":{"position":[[156,8]]}}}],["endpointdefault",{"_index":339,"t":{"345":{"position":[[127,15]]}}}],["endpointsdefault",{"_index":524,"t":{"371":{"position":[[924,16]]}}}],["enforc",{"_index":1368,"t":{"455":{"position":[[3173,7]]}}}],["enhanc",{"_index":520,"t":{"371":{"position":[[816,8]]}}}],["ensur",{"_index":734,"t":{"393":{"position":[[543,6]]},"427":{"position":[[519,6]]}}}],["enter",{"_index":1013,"t":{"421":{"position":[[94,5]]},"429":{"position":[[233,5]]},"439":{"position":[[142,6]]},"443":{"position":[[100,5]]}}}],["enterpris",{"_index":1027,"t":{"421":{"position":[[1699,11]]}}}],["entri",{"_index":958,"t":{"415":{"position":[[279,5]]},"455":{"position":[[4661,7]]}}}],["enumer",{"_index":592,"t":{"375":{"position":[[63,9]]}}}],["env",{"_index":1229,"t":{"435":{"position":[[2325,3]]}}}],["environ",{"_index":58,"t":{"324":{"position":[[698,11]]},"338":{"position":[[49,11]]},"361":{"position":[[243,11]]},"379":{"position":[[288,11]]},"433":{"position":[[1443,11]]},"435":{"position":[[2145,11],[2192,13],[2265,12],[2291,11],[2735,11]]},"437":{"position":[[180,11]]},"449":{"position":[[57,11],[171,11],[197,11]]},"459":{"position":[[51,11],[226,11]]}}}],["equival",{"_index":1260,"t":{"439":{"position":[[519,10]]}}}],["error",{"_index":282,"t":{"338":{"position":[[1446,6]]},"455":{"position":[[2602,6],[2636,5],[3215,6],[3238,6],[3261,5],[11898,5],[11923,5],[11944,5]]},"463":{"position":[[501,5]]},"467":{"position":[[175,6]]},"473":{"position":[[422,6],[1228,7],[1236,7]]},"475":{"position":[[62,6]]}}}],["error_pag",{"_index":1532,"t":{"469":{"position":[[954,10]]}}}],["escap",{"_index":473,"t":{"369":{"position":[[747,8],[909,6]]}}}],["especi",{"_index":1446,"t":{"455":{"position":[[15223,10]]}}}],["etc",{"_index":956,"t":{"415":{"position":[[219,5]]},"455":{"position":[[15749,5]]},"469":{"position":[[2661,3]]}}}],["etc/example.cfg",{"_index":1156,"t":{"433":{"position":[[3691,16]]}}}],["etc/localhost.cfg",{"_index":1168,"t":{"433":{"position":[[4358,18],[4852,18]]}}}],["etcd",{"_index":1129,"t":{"433":{"position":[[1501,4]]}}}],["evalu",{"_index":1440,"t":{"455":{"position":[[15057,8]]}}}],["even",{"_index":966,"t":{"415":{"position":[[762,4]]},"421":{"position":[[490,4],[1515,4]]},"455":{"position":[[3903,4]]}}}],["event",{"_index":1505,"t":{"463":{"position":[[1339,6]]},"465":{"position":[[1361,6]]},"467":{"position":[[631,6]]}}}],["everyon",{"_index":1166,"t":{"433":{"position":[[4086,8]]},"441":{"position":[[463,8]]}}}],["everyth",{"_index":1187,"t":{"435":{"position":[[407,10]]}}}],["everywher",{"_index":1239,"t":{"435":{"position":[[3230,11]]}}}],["ex",{"_index":923,"t":{"413":{"position":[[655,3],[752,3]]}}}],["exactli",{"_index":470,"t":{"369":{"position":[[695,7]]}}}],["exampl",{"_index":63,"t":{"324":{"position":[[766,8]]},"367":{"position":[[762,9]]},"369":{"position":[[456,7]]},"395":{"position":[[1682,8]]},"401":{"position":[[37,8],[576,7],[631,7]]},"405":{"position":[[922,8]]},"433":{"position":[[207,8],[324,7],[1476,7],[2206,8],[2693,7],[3868,7],[4338,7]]},"447":{"position":[[11,8]]},"453":{"position":[[210,7]]},"459":{"position":[[383,8]]},"463":{"position":[[813,7]]},"465":{"position":[[668,7]]},"467":{"position":[[541,7]]},"469":{"position":[[226,8]]},"473":{"position":[[263,8]]}}}],["example.com",{"_index":467,"t":{"369":{"position":[[641,13]]},"435":{"position":[[3881,11]]},"455":{"position":[[14821,13],[14835,14],[15890,14]]},"473":{"position":[[486,13],[508,15],[711,13],[733,15],[1053,11]]},"475":{"position":[[663,13],[685,15],[946,13],[968,15],[1191,13],[1213,15],[1397,13],[1419,15],[1811,11]]}}}],["example.com:8080",{"_index":1453,"t":{"455":{"position":[[15846,17]]}}}],["example.oktapreview.com",{"_index":1134,"t":{"433":{"position":[[1697,23]]}}}],["example\\.com",{"_index":465,"t":{"369":{"position":[[570,23],[990,20]]}}}],["examples/config",{"_index":1110,"t":{"433":{"position":[[663,15],[862,15]]}}}],["exce",{"_index":1539,"t":{"469":{"position":[[1722,6]]}}}],["exclud",{"_index":1364,"t":{"455":{"position":[[2931,7],[2992,7],[3047,9]]},"461":{"position":[[864,7]]}}}],["exclus",{"_index":771,"t":{"395":{"position":[[1541,10]]}}}],["exist",{"_index":179,"t":{"332":{"position":[[491,8]]},"336":{"position":[[114,8],[397,8]]},"413":{"position":[[1778,8],[2034,8]]},"463":{"position":[[920,6]]},"465":{"position":[[775,6]]}}}],["exmpal",{"_index":1410,"t":{"455":{"position":[[10463,8]]}}}],["expect",{"_index":421,"t":{"361":{"position":[[158,7],[220,7],[290,7]]},"379":{"position":[[203,7],[265,7],[335,7]]},"455":{"position":[[6253,8]]},"469":{"position":[[3625,9]]}}}],["experessions.eg",{"_index":650,"t":{"387":{"position":[[542,16]]}}}],["expir",{"_index":1336,"t":{"455":{"position":[[1249,6],[1265,6],[2120,6],[2136,6]]}}}],["explicit",{"_index":652,"t":{"387":{"position":[[583,8]]}}}],["explicitli",{"_index":1487,"t":{"463":{"position":[[453,10]]}}}],["exploit",{"_index":113,"t":{"328":{"position":[[574,7]]}}}],["express",{"_index":458,"t":{"369":{"position":[[440,11],[822,11]]},"385":{"position":[[425,10],[492,10]]}}}],["extern",{"_index":315,"t":{"343":{"position":[[985,8]]},"401":{"position":[[227,8],[549,8]]}}}],["extra",{"_index":1070,"t":{"427":{"position":[[439,5]]},"455":{"position":[[2705,5],[2776,5],[6837,5],[12916,6],[12928,5]]}}}],["extraaudi",{"_index":536,"t":{"371":{"position":[[1501,14],[1525,14]]}}}],["extract",{"_index":33,"t":{"324":{"position":[[367,10]]},"469":{"position":[[1960,7],[2082,7]]}}}],["facebook",{"_index":594,"t":{"375":{"position":[[165,9]]},"411":{"position":[[237,8]]}}}],["fail",{"_index":1399,"t":{"455":{"position":[[6100,4]]},"463":{"position":[[430,6]]}}}],["failur",{"_index":501,"t":{"371":{"position":[[209,8]]}}}],["fals",{"_index":292,"t":{"341":{"position":[[126,7]]},"359":{"position":[[476,5]]},"371":{"position":[[283,7],[403,6],[475,7],[793,7],[948,7]]},"387":{"position":[[1711,6]]},"455":{"position":[[2100,5],[2697,5],[3196,5],[3286,5],[5222,5],[6156,5],[6320,5],[7128,5],[7229,5],[7639,5],[10103,5],[10262,5],[11114,5],[11287,5],[11653,5],[11768,5],[11876,5],[12033,5],[12193,5],[12272,5],[12947,5],[13090,5],[13192,5],[13299,5],[13415,5]]}}}],["falseskip_provider_button",{"_index":1175,"t":{"433":{"position":[[4667,25]]}}}],["fastcgi_pass",{"_index":1551,"t":{"469":{"position":[[2642,13]]}}}],["fb",{"_index":1010,"t":{"419":{"position":[[13,2],[64,2]]}}}],["featur",{"_index":156,"t":{"332":{"position":[[50,9],[113,8]]},"343":{"position":[[114,8]]},"455":{"position":[[10095,7],[10254,7]]}}}],["field",{"_index":284,"t":{"341":{"position":[[23,5]]},"343":{"position":[[323,5]]},"345":{"position":[[23,5],[221,5]]},"347":{"position":[[23,5]]},"349":{"position":[[100,5]]},"353":{"position":[[23,5]]},"355":{"position":[[23,5]]},"357":{"position":[[23,5]]},"359":{"position":[[118,5]]},"361":{"position":[[116,5]]},"363":{"position":[[23,5]]},"365":{"position":[[23,5]]},"369":{"position":[[1087,5]]},"371":{"position":[[23,5]]},"373":{"position":[[79,5]]},"379":{"position":[[161,5]]},"381":{"position":[[85,5]]},"383":{"position":[[151,5]]},"385":{"position":[[297,5]]},"387":{"position":[[171,5]]},"389":{"position":[[95,5]]},"429":{"position":[[319,6]]},"433":{"position":[[3444,5]]},"439":{"position":[[135,6]]},"455":{"position":[[2826,7]]}}}],["file",{"_index":34,"t":{"324":{"position":[[382,4],[439,4],[667,5]]},"328":{"position":[[428,5]]},"332":{"position":[[525,4],[698,4]]},"334":{"position":[[52,4],[136,4]]},"336":{"position":[[362,5]]},"361":{"position":[[310,4]]},"365":{"position":[[174,4]]},"379":{"position":[[355,4]]},"383":{"position":[[254,5],[350,5]]},"413":{"position":[[1209,5],[2267,4],[2336,4],[2365,4]]},"415":{"position":[[1169,5]]},"433":{"position":[[3025,4],[4353,4]]},"435":{"position":[[2329,5],[2387,5],[2458,4],[2610,4]]},"439":{"position":[[552,5]]},"449":{"position":[[89,4],[248,4]]},"453":{"position":[[57,4],[242,4]]},"455":{"position":[[430,4],[474,4],[823,4],[839,4],[1022,4],[2440,4],[4598,4],[4655,5],[5191,5],[5254,4],[5356,5],[5479,5],[5539,5],[5631,4],[5821,4],[5857,4],[8035,4],[13585,4],[13617,4],[13920,4],[13952,4],[14126,7],[14151,5]]},"457":{"position":[[123,5],[138,4],[496,4],[527,7],[579,5],[721,5],[861,5],[1180,5]]},"459":{"position":[[353,4]]},"461":{"position":[[106,4],[165,4],[205,4]]},"467":{"position":[[465,11],[638,4],[658,4]]},"473":{"position":[[283,4]]},"475":{"position":[[2321,4]]}}}],["file/client_secret_fil",{"_index":241,"t":{"338":{"position":[[779,23]]}}}],["file/jwt_key_fil",{"_index":267,"t":{"338":{"position":[[1167,17]]}}}],["file/provider_ca_fil",{"_index":245,"t":{"338":{"position":[[868,22]]}}}],["file://$pwd/#/stat",{"_index":1125,"t":{"433":{"position":[[1311,21]]}}}],["file:///var/www/stat",{"_index":1458,"t":{"457":{"position":[[540,23]]}}}],["file:///var/www/static/#/stat",{"_index":1462,"t":{"457":{"position":[[890,32]]}}}],["file://host/pathif",{"_index":674,"t":{"387":{"position":[[1349,18]]}}}],["file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1234,"t":{"435":{"position":[[2781,41]]},"455":{"position":[[5942,42]]}}}],["file=/path/to/cert.key",{"_index":783,"t":{"399":{"position":[[107,23],[346,22]]}}}],["file=/path/to/cert.pem",{"_index":782,"t":{"399":{"position":[[70,22],[311,22]]}}}],["file=/path/to/fil",{"_index":1279,"t":{"445":{"position":[[132,18]]}}}],["filebas",{"_index":668,"t":{"387":{"position":[[1167,9]]}}}],["filecontain",{"_index":545,"t":{"373":{"position":[[416,14]]}}}],["filenam",{"_index":1387,"t":{"455":{"position":[[5238,8],[5373,9]]},"461":{"position":[[131,8]]}}}],["fill",{"_index":913,"t":{"413":{"position":[[366,4]]},"429":{"position":[[288,4]]},"433":{"position":[[2120,4],[2313,4]]},"439":{"position":[[39,4]]}}}],["filter",{"_index":1069,"t":{"427":{"position":[[420,10]]}}}],["find",{"_index":997,"t":{"415":{"position":[[2365,4]]},"417":{"position":[[512,4]]},"435":{"position":[[168,4]]}}}],["firewal",{"_index":1237,"t":{"435":{"position":[[3128,8]]}}}],["first",{"_index":1133,"t":{"433":{"position":[[1690,6]]},"435":{"position":[[758,6]]},"469":{"position":[[1836,5],[2121,5]]}}}],["fix",{"_index":116,"t":{"328":{"position":[[632,3]]},"330":{"position":[[55,5],[244,5],[381,5],[428,3],[472,3],[585,5],[645,3]]},"367":{"position":[[501,5]]},"369":{"position":[[104,5],[268,5]]}}}],["flag",{"_index":182,"t":{"332":{"position":[[534,6]]},"334":{"position":[[166,5],[207,5]]},"336":{"position":[[98,4]]},"338":{"position":[[1381,5]]},"395":{"position":[[1136,5],[1167,5],[1380,5],[1404,5],[1467,5]]},"413":{"position":[[1872,5],[2094,5],[2140,4],[2405,5]]},"415":{"position":[[2084,5]]},"421":{"position":[[621,5],[767,4]]},"423":{"position":[[1122,5]]},"455":{"position":[[1345,4],[1871,4]]},"459":{"position":[[412,4],[476,4]]},"461":{"position":[[830,4]]},"463":{"position":[[626,5]]},"465":{"position":[[362,5]]},"467":{"position":[[397,5]]},"469":{"position":[[1093,4],[1688,5]]}}}],["flags/opt",{"_index":208,"t":{"338":{"position":[[14,13]]}}}],["flaw",{"_index":1445,"t":{"455":{"position":[[15216,6]]}}}],["flight",{"_index":142,"t":{"330":{"position":[[541,6]]}}}],["flow",{"_index":514,"t":{"371":{"position":[[625,5]]}}}],["flush",{"_index":210,"t":{"338":{"position":[[127,5]]},"387":{"position":[[2143,8]]},"455":{"position":[[3059,5],[3098,8]]}}}],["flushinterv",{"_index":695,"t":{"387":{"position":[[2084,13],[2107,13]]}}}],["follow",{"_index":207,"t":{"338":{"position":[[4,9]]},"393":{"position":[[256,9]]},"395":{"position":[[246,10]]},"401":{"position":[[652,8]]},"403":{"position":[[38,9]]},"407":{"position":[[107,9]]},"413":{"position":[[1335,6],[1520,9],[1668,6]]},"417":{"position":[[210,6]]},"421":{"position":[[611,9],[757,9],[1733,9]]},"423":{"position":[[404,9]]},"425":{"position":[[473,9]]},"427":{"position":[[201,6],[485,9],[584,6],[895,9],[1090,9]]},"431":{"position":[[52,6]]},"433":{"position":[[409,9],[939,9],[1585,9],[3039,10],[4715,9]]},"435":{"position":[[1530,9]]},"439":{"position":[[397,9]]},"441":{"position":[[334,9]]},"443":{"position":[[213,9]]},"447":{"position":[[0,6]]},"463":{"position":[[668,8]]},"465":{"position":[[404,8]]},"467":{"position":[[439,8]]},"469":{"position":[[2788,9]]},"475":{"position":[[165,9]]}}}],["foo",{"_index":651,"t":{"387":{"position":[[560,7],[597,4]]}}}],["foo/$1",{"_index":662,"t":{"387":{"position":[[988,7]]}}}],["foo/abc/123",{"_index":665,"t":{"387":{"position":[[1037,12]]}}}],["footer",{"_index":1370,"t":{"455":{"position":[[3374,6],[3402,6],[3444,7]]}}}],["forc",{"_index":742,"t":{"393":{"position":[[784,5]]},"455":{"position":[[253,7],[1084,5],[1584,5],[3156,5],[3204,5],[3227,5]]}}}],["forcestshead",{"_index":1593,"t":{"473":{"position":[[1023,15]]},"475":{"position":[[1781,15]]}}}],["forego",{"_index":134,"t":{"330":{"position":[[391,6]]}}}],["form",{"_index":478,"t":{"369":{"position":[[852,4]]},"437":{"position":[[318,4]]},"455":{"position":[[2376,4],[2420,4]]}}}],["format",{"_index":173,"t":{"332":{"position":[[390,7],[469,6],[912,7]]},"334":{"position":[[70,6]]},"336":{"position":[[148,7],[285,6]]},"365":{"position":[[91,6],[186,6]]},"369":{"position":[[965,6]]},"403":{"position":[[957,7]]},"421":{"position":[[1137,9]]},"435":{"position":[[1028,6],[2532,6]]},"455":{"position":[[187,7],[329,6],[3692,9],[4199,9],[5692,6],[5869,6],[10784,6],[12524,7],[13502,6]]},"461":{"position":[[602,6],[641,7]]},"463":{"position":[[173,7],[556,6],[619,6],[644,6]]},"465":{"position":[[54,7],[289,6],[355,6],[380,6]]},"467":{"position":[[112,7],[227,6],[323,6],[390,6],[415,6]]}}}],["forward",{"_index":174,"t":{"332":{"position":[[404,7]]},"409":{"position":[[599,9]]},"423":{"position":[[1291,9]]},"455":{"position":[[6998,9],[7282,9],[7300,9],[7322,9],[7747,9],[7765,9],[7785,9],[7807,9],[8970,9],[11046,9],[12657,9]]},"457":{"position":[[279,7],[462,9]]},"475":{"position":[[339,9]]}}}],["forwardauth",{"_index":1574,"t":{"473":{"position":[[15,11],[1137,12]]},"475":{"position":[[96,11],[1904,12],[2069,12]]}}}],["found",{"_index":84,"t":{"328":{"position":[[29,5],[243,5]]},"383":{"position":[[718,5]]},"399":{"position":[[1053,5]]},"433":{"position":[[339,5]]},"455":{"position":[[13871,5]]}}}],["fraction",{"_index":373,"t":{"351":{"position":[[189,8]]}}}],["fragment",{"_index":1461,"t":{"457":{"position":[[759,8],[808,8]]}}}],["framedeni",{"_index":1597,"t":{"473":{"position":[[1109,10]]},"475":{"position":[[1867,10]]}}}],["freeform",{"_index":920,"t":{"413":{"position":[[571,9]]}}}],["fromenv",{"_index":424,"t":{"361":{"position":[[197,7],[212,7]]},"379":{"position":[[242,7],[257,7]]}}}],["fromfil",{"_index":425,"t":{"361":{"position":[[265,8],[281,8]]},"379":{"position":[[310,8],[326,8]]}}}],["full",{"_index":70,"t":{"326":{"position":[[82,4]]},"463":{"position":[[1362,4]]},"465":{"position":[[1434,4]]}}}],["function",{"_index":1601,"t":{"475":{"position":[[20,13]]}}}],["further",{"_index":607,"t":{"381":{"position":[[446,7]]}}}],["futur",{"_index":519,"t":{"371":{"position":[[757,6]]},"413":{"position":[[1248,6]]},"433":{"position":[[4219,6]]}}}],["gap",{"_index":1419,"t":{"455":{"position":[[12062,3]]}}}],["gener",{"_index":194,"t":{"334":{"position":[[36,8]]},"433":{"position":[[2768,7],[3571,8]]},"435":{"position":[[1035,9]]},"443":{"position":[[381,9],[439,9]]},"451":{"position":[[3,8]]}}}],["get",{"_index":1106,"t":{"433":{"position":[[477,7]]}}}],["gitea",{"_index":899,"t":{"411":{"position":[[355,5]]},"443":{"position":[[41,5],[394,5],[452,5],[489,5],[554,5],[624,5]]}}}],["github",{"_index":92,"t":{"328":{"position":[[136,7],[729,6]]},"330":{"position":[[7,6],[109,6]]},"338":{"position":[[1302,7]]},"375":{"position":[[175,7]]},"411":{"position":[[72,6],[246,6]]},"421":{"position":[[172,6],[429,6],[628,6],[788,6],[801,6],[1069,6],[1396,6],[1612,6],[1692,6],[1801,6],[1871,6],[1946,6]]},"455":{"position":[[3454,6],[3522,6],[3621,6],[3720,6],[3841,6]]}}}],["github.com/dexidp/dex",{"_index":1105,"t":{"433":{"position":[[447,21]]}}}],["github.com/oauth2",{"_index":12,"t":{"324":{"position":[[101,17]]}}}],["githubc",{"_index":557,"t":{"373":{"position":[[921,7]]}}}],["githubconfig",{"_index":555,"t":{"373":{"position":[[852,12],[879,12]]}}}],["githubopt",{"_index":556,"t":{"373":{"position":[[865,13]]}}}],["gitlab",{"_index":276,"t":{"338":{"position":[[1310,7]]},"373":{"position":[[1008,6]]},"375":{"position":[[183,7]]},"411":{"position":[[262,6]]},"427":{"position":[[43,6],[71,6],[193,7],[739,6],[915,6],[1060,7],[1149,6],[1182,6]]},"455":{"position":[[3979,6],[4087,6],[4278,6],[15431,7]]}}}],["gitlab.com",{"_index":1066,"t":{"427":{"position":[[166,10]]}}}],["gitlab.domain.tld",{"_index":1084,"t":{"427":{"position":[[1276,19]]}}}],["gitlabconfig",{"_index":558,"t":{"373":{"position":[[939,12],[966,12]]}}}],["gitlabopt",{"_index":559,"t":{"373":{"position":[[952,13]]}}}],["give",{"_index":632,"t":{"385":{"position":[[409,5]]},"413":{"position":[[1485,4]]}}}],["given",{"_index":630,"t":{"385":{"position":[[196,5]]},"455":{"position":[[2545,5],[4177,5],[4478,5],[8266,5],[12405,5],[13754,5],[14421,5],[14520,5],[14950,5]]}}}],["global",{"_index":1049,"t":{"423":{"position":[[1104,7]]}}}],["gmail",{"_index":940,"t":{"413":{"position":[[1823,5]]}}}],["go",{"_index":11,"t":{"324":{"position":[[94,2]]},"332":{"position":[[398,5]]},"373":{"position":[[1805,2]]},"383":{"position":[[655,2]]},"399":{"position":[[947,2]]},"415":{"position":[[20,2],[1072,2]]},"433":{"position":[[440,2]]},"435":{"position":[[2885,2]]},"455":{"position":[[516,2],[8162,2],[13807,2]]}}}],["googl",{"_index":277,"t":{"338":{"position":[[1318,6]]},"357":{"position":[[108,6],[157,6]]},"373":{"position":[[1094,6],[1530,8]]},"375":{"position":[[191,7]]},"401":{"position":[[73,6],[269,6]]},"411":{"position":[[63,8],[211,6]]},"413":{"position":[[4,7],[1036,6],[1853,6],[2081,6],[2377,6]]},"455":{"position":[[4328,6],[4358,6],[4402,6],[4457,6],[4503,6],[8014,6],[15439,6]]}}}],["googleconfig",{"_index":560,"t":{"373":{"position":[[1025,12],[1052,12]]}}}],["googleopt",{"_index":561,"t":{"373":{"position":[[1038,13]]}}}],["gopath/bin",{"_index":16,"t":{"324":{"position":[[170,11]]}}}],["gopath/github.com/dexidp/dex",{"_index":1116,"t":{"433":{"position":[[812,30]]}}}],["govern",{"_index":1178,"t":{"435":{"position":[[41,11],[69,10]]}}}],["grab",{"_index":1240,"t":{"435":{"position":[[3360,4]]}}}],["grant",{"_index":964,"t":{"415":{"position":[[690,5]]},"433":{"position":[[2792,5],[4095,5]]}}}],["graph",{"_index":962,"t":{"415":{"position":[[567,6]]}}}],["graphdefault",{"_index":343,"t":{"345":{"position":[[283,12]]}}}],["graphgroupfield",{"_index":340,"t":{"345":{"position":[[161,15],[184,15]]}}}],["group",{"_index":341,"t":{"345":{"position":[[215,5],[256,6]]},"355":{"position":[[46,5],[61,5],[107,5]]},"357":{"position":[[46,5],[61,6],[115,5]]},"363":{"position":[[46,6],[62,5],[118,5]]},"371":{"position":[[1246,8]]},"373":{"position":[[2456,5]]},"407":{"position":[[183,6]]},"413":{"position":[[1043,6],[2049,5],[2088,5],[2160,6],[2221,7],[2471,5]]},"415":{"position":[[434,5],[625,5]]},"417":{"position":[[86,5]]},"423":{"position":[[332,6],[372,9],[1019,5],[1070,5],[1098,5],[1157,6],[1209,6],[1301,6],[1348,6],[1408,5],[1470,5],[1532,6]]},"425":{"position":[[274,6],[314,9]]},"427":{"position":[[857,5],[995,6]]},"433":{"position":[[2958,6],[4067,5]]},"455":{"position":[[3986,5],[4049,6],[4409,5],[4464,5],[4740,5],[4764,6],[6685,6],[6740,6],[6747,8],[7775,7],[11438,7],[14352,5],[14407,5]]}}}],["group,otherwis",{"_index":573,"t":{"373":{"position":[[1514,15]]}}}],["group.read.al",{"_index":963,"t":{"415":{"position":[[642,15]]}}}],["group/allowed_group",{"_index":262,"t":{"338":{"position":[[1095,20]]}}}],["group=\"mygroup,myothergroup",{"_index":1079,"t":{"427":{"position":[[922,29]]}}}],["group=/oauth2/callback",{"_index":1262,"t":{"439":{"position":[[611,24]]}}}],["headers.default",{"_index":415,"t":{"359":{"position":[[456,16]]}}}],["headers/pass_user_head",{"_index":225,"t":{"338":{"position":[[390,25]]}}}],["headers/skip_auth_strip_head",{"_index":236,"t":{"338":{"position":[[680,31]]}}}],["headershould",{"_index":410,"t":{"359":{"position":[[346,12]]}}}],["headervalu",{"_index":347,"t":{"349":{"position":[[13,12]]},"359":{"position":[[540,13]]},"361":{"position":[[21,11]]},"379":{"position":[[26,12]]}}}],["health",{"_index":843,"t":{"403":{"position":[[384,6]]},"455":{"position":[[8392,6],[8479,6]]}}}],["helm",{"_index":31,"t":{"324":{"position":[[322,6]]}}}],["here",{"_index":1184,"t":{"435":{"position":[[344,5]]}}}],["hex",{"_index":752,"t":{"395":{"position":[[406,3]]}}}],["histor",{"_index":724,"t":{"393":{"position":[[103,13]]}}}],["hit",{"_index":915,"t":{"413":{"position":[[408,3]]},"415":{"position":[[658,3],[1276,7]]}}}],["hold",{"_index":540,"t":{"373":{"position":[[33,5],[546,5],[631,5],[710,5],[803,5],[892,5],[979,5],[1065,5],[1145,5],[1275,5]]}}}],["homepag",{"_index":1254,"t":{"439":{"position":[[57,9]]}}}],["host",{"_index":213,"t":{"338":{"position":[[162,4]]},"387":{"position":[[2301,4]]},"401":{"position":[[1006,4],[1011,6]]},"427":{"position":[[185,7],[1053,6],[1175,6]]},"439":{"position":[[606,4]]},"443":{"position":[[47,4],[495,4],[560,4],[630,4]]},"455":{"position":[[1168,4],[7652,4],[7686,4]]},"463":{"position":[[959,4],[992,4]]},"465":{"position":[[475,9],[814,4],[847,4]]},"469":{"position":[[370,4],[375,6],[708,4],[713,6]]}}}],["host(`a",{"_index":1578,"t":{"473":{"position":[[342,8],[537,8]]},"475":{"position":[[432,8],[726,8],[1013,8]]}}}],["host(`oauth.example.com",{"_index":1609,"t":{"475":{"position":[[1255,26]]}}}],["host>/api/v3",{"_index":1031,"t":{"421":{"position":[[1953,13]]}}}],["host>/auth/realms//login/oauth/access_token",{"_index":1030,"t":{"421":{"position":[[1878,31]]}}}],["host>/login/oauth/author",{"_index":1029,"t":{"421":{"position":[[1808,28]]}}}],["host>/oauth2/callback",{"_index":1270,"t":{"443":{"position":[[144,21],[298,22]]}}}],["host_head",{"_index":1509,"t":{"465":{"position":[[143,13]]}}}],["hostnam",{"_index":1238,"t":{"435":{"position":[[3220,9]]},"439":{"position":[[228,8]]},"441":{"position":[[131,8]]}}}],["hosts.thi",{"_index":680,"t":{"387":{"position":[[1574,10]]}}}],["hour",{"_index":949,"t":{"413":{"position":[[2570,4]]}}}],["hst",{"_index":814,"t":{"401":{"position":[[737,5]]}}}],["htaccess",{"_index":1405,"t":{"455":{"position":[[7547,8]]}}}],["html",{"_index":1354,"t":{"455":{"position":[[2218,4],[3315,6],[3395,6]]}}}],["htpasswd",{"_index":1357,"t":{"455":{"position":[[2367,8],[2431,8],[4589,8],[4646,8],[4690,8],[4726,8],[4797,8]]}}}],["http",{"_index":325,"t":{"343":{"position":[[1307,4],[1316,5],[1615,4],[1624,5]]},"387":{"position":[[1568,5]]},"391":{"position":[[70,4]]},"401":{"position":[[307,4],[340,4]]},"443":{"position":[[26,9]]},"455":{"position":[[107,4],[656,4],[1851,6],[3162,5],[3181,5],[3256,4],[4814,4],[4891,4],[4994,5],[5056,5],[7263,4],[11800,4],[13283,5],[13399,5],[14088,4],[15099,4],[15272,4],[15728,5],[15742,6]]},"457":{"position":[[151,4],[160,5]]},"461":{"position":[[439,4]]},"465":{"position":[[0,4],[1257,4],[1404,4]]},"467":{"position":[[713,5]]},"473":{"position":[[310,5]]},"475":{"position":[[392,5]]}}}],["http(",{"_index":321,"t":{"343":{"position":[[1239,7],[1561,7]]},"381":{"position":[[70,7]]},"387":{"position":[[1147,7]]},"457":{"position":[[91,7]]}}}],["http/1.0",{"_index":1495,"t":{"463":{"position":[[1080,8]]},"465":{"position":[[869,8]]}}}],["http/1.1",{"_index":1511,"t":{"465":{"position":[[186,8]]}}}],["http/1.1x",{"_index":872,"t":{"405":{"position":[[623,9]]}}}],["http://0.0.0.0:8080\"]email_domain",{"_index":1171,"t":{"433":{"position":[[4524,35]]}}}],["http://127.0.0.1:4180",{"_index":826,"t":{"401":{"position":[[966,22]]},"433":{"position":[[1360,21]]},"469":{"position":[[330,22],[668,22]]}}}],["http://127.0.0.1:4180/oauth2/callback",{"_index":1119,"t":{"433":{"position":[[1067,37]]},"435":{"position":[[3623,37]]}}}],["http://127.0.0.1:4180/oauth2/callback'nam",{"_index":1113,"t":{"433":{"position":[[722,44]]}}}],["http://127.0.0.1:4180/static",{"_index":1127,"t":{"433":{"position":[[1385,28]]}}}],["http://127.0.0.1:5556",{"_index":1241,"t":{"435":{"position":[[3678,21]]}}}],["http://127.0.0.1:5556/author",{"_index":1242,"t":{"435":{"position":[[3732,31]]}}}],["http://127.0.0.1:5556/dex",{"_index":1120,"t":{"433":{"position":[[1121,25]]}}}],["http://127.0.0.1:5556/key",{"_index":1244,"t":{"435":{"position":[[3819,26]]}}}],["http://127.0.0.1:5556/token",{"_index":1243,"t":{"435":{"position":[[3776,27]]}}}],["http://127.0.0.1:8080",{"_index":1455,"t":{"457":{"position":[[218,22]]}}}],["http://127.0.0.1:8080/some/path",{"_index":1456,"t":{"457":{"position":[[361,32]]}}}],["http://172.16.0.1:4180",{"_index":1587,"t":{"473":{"position":[[876,22]]},"475":{"position":[[1634,22]]}}}],["http://172.16.0.2:7555",{"_index":1586,"t":{"473":{"position":[[808,22]]},"475":{"position":[[1494,22]]}}}],["http://172.16.0.3:7555",{"_index":1610,"t":{"475":{"position":[[1566,22]]}}}],["http://[::1]:4180",{"_index":1381,"t":{"455":{"position":[[4957,17]]}}}],["http://[oauth2",{"_index":1459,"t":{"457":{"position":[[608,14],[963,14]]}}}],["http://]:::/sign_in",{"_index":1407,"t":{"455":{"position":[[8686,18]]}}}],["oauth2_proxy_",{"_index":1465,"t":{"459":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":1469,"t":{"459":{"position":[[425,27]]}}}],["oauth2_proxy_email_domain",{"_index":1470,"t":{"459":{"position":[[489,27]]}}}],["oauth2_proxy_jwt_key",{"_index":1210,"t":{"435":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1233,"t":{"435":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":1340,"t":{"455":{"position":[[1408,11]]}}}],["obtain",{"_index":1447,"t":{"455":{"position":[[15239,9]]}}}],["occur",{"_index":1525,"t":{"467":{"position":[[187,5]]}}}],["oidc",{"_index":273,"t":{"338":{"position":[[1278,5]]},"363":{"position":[[229,4]]},"371":{"position":[[442,4],[883,4]]},"373":{"position":[[1174,4],[1208,4]]},"375":{"position":[[218,5],[259,5]]},"405":{"position":[[481,4],[667,4],[780,4],[889,4]]},"415":{"position":[[1560,4],[1868,4]]},"423":{"position":[[60,4]]},"425":{"position":[[527,4],[653,4]]},"427":{"position":[[1126,4]]},"433":{"position":[[244,6],[374,4],[965,4],[996,4],[1105,4],[1549,4]]},"435":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"455":{"position":[[6061,4],[6173,4],[6218,4],[6337,4],[6377,4],[6412,4],[6503,4],[6524,4],[6574,4],[6603,4],[6633,4],[6680,4],[6711,4],[6758,4],[6791,4],[6832,4],[7172,4],[7926,4],[12960,4],[12987,4],[13044,4],[14572,4],[15450,4]]}}}],["oidc\"redirect_url",{"_index":1141,"t":{"433":{"position":[[3061,18],[4388,18]]}}}],["oidc_issuer_url",{"_index":991,"t":{"415":{"position":[[2036,16]]},"433":{"position":[[3372,15]]}}}],["oidcconfig",{"_index":562,"t":{"373":{"position":[[1111,10],[1134,10]]}}}],["oidcopt",{"_index":563,"t":{"373":{"position":[[1122,11]]}}}],["ok",{"_index":47,"t":{"324":{"position":[[560,2]]},"403":{"position":[[227,2],[340,2]]}}}],["okta",{"_index":1103,"t":{"433":{"position":[[315,5],[1526,5],[1567,5],[1612,4],[2465,4],[3708,4],[3834,4],[4309,4],[4482,4]]}}}],["old",{"_index":1392,"t":{"455":{"position":[[5471,3],[5531,3]]}}}],["omit",{"_index":1452,"t":{"455":{"position":[[15770,4]]}}}],["on",{"_index":118,"t":{"328":{"position":[[674,4]]},"369":{"position":[[95,3],[259,3],[614,3],[1458,3]]},"379":{"position":[[101,3]]},"391":{"position":[[187,3]]},"409":{"position":[[354,3]]},"435":{"position":[[2206,3]]},"441":{"position":[[683,3]]},"445":{"position":[[156,3]]},"451":{"position":[[39,3]]},"455":{"position":[[479,4],[8959,4],[12905,3]]},"463":{"position":[[313,3]]}}}],["onc",{"_index":135,"t":{"330":{"position":[[421,4]]},"413":{"position":[[2562,4]]},"435":{"position":[[2843,4]]}}}],["onlyvalu",{"_index":491,"t":{"369":{"position":[[1436,10]]}}}],["open",{"_index":89,"t":{"328":{"position":[[113,4]]},"413":{"position":[[464,4]]},"417":{"position":[[0,4]]},"433":{"position":[[106,4]]}}}],["openid",{"_index":494,"t":{"371":{"position":[[80,6],[986,6]]},"411":{"position":[[297,6],[549,6]]},"425":{"position":[[89,7]]},"427":{"position":[[276,7]]},"433":{"position":[[0,6],[220,6],[2628,6]]},"435":{"position":[[862,6],[906,6]]},"455":{"position":[[6439,6]]}}}],["openssl",{"_index":1195,"t":{"435":{"position":[[1104,7]]},"451":{"position":[[78,7],[288,7]]}}}],["oppos",{"_index":1083,"t":{"427":{"position":[[1240,7]]}}}],["option",{"_index":57,"t":{"324":{"position":[[686,8]]},"332":{"position":[[164,7],[317,8],[373,7]]},"334":{"position":[[218,7],[263,7]]},"336":{"position":[[37,7],[256,7],[379,7],[437,7]]},"338":{"position":[[1233,8],[1251,6],[1369,7],[1480,7]]},"343":{"position":[[53,8],[77,7],[222,7]]},"349":{"position":[[246,8]]},"351":{"position":[[180,8]]},"359":{"position":[[416,6]]},"361":{"position":[[467,8]]},"367":{"position":[[186,6],[316,7]]},"369":{"position":[[1187,10],[1316,10]]},"375":{"position":[[101,7],[115,7]]},"383":{"position":[[102,8]]},"387":{"position":[[1585,6],[2039,6]]},"395":{"position":[[1575,6],[1670,7]]},"405":{"position":[[985,6]]},"413":{"position":[[1066,11]]},"421":{"position":[[276,8],[362,7]]},"423":{"position":[[1050,8]]},"425":{"position":[[754,9],[833,9]]},"427":{"position":[[905,7]]},"433":{"position":[[1721,10],[2023,6],[2452,8]]},"435":{"position":[[1540,8],[2132,7],[3495,7]]},"439":{"position":[[407,8],[530,7],[706,7]]},"441":{"position":[[344,8],[584,7]]},"443":{"position":[[223,7]]},"449":{"position":[[48,8],[148,7]]},"453":{"position":[[169,6]]},"455":{"position":[[0,6],[52,9],[1057,8],[1560,8],[1791,11],[10360,6],[10455,7],[12255,7],[15012,10],[15315,6],[15492,7],[15937,7]]},"457":{"position":[[61,6]]},"471":{"position":[[5,6],[37,6]]},"475":{"position":[[175,7],[2326,6]]}}}],["order",{"_index":1284,"t":{"449":{"position":[[109,5]]}}}],["org",{"_index":384,"t":{"353":{"position":[[46,3],[57,3],[478,3]]},"421":{"position":[[534,3],[635,7],[795,4],[1559,3]]},"455":{"position":[[3461,3],[3947,3]]}}}],["organ",{"_index":1016,"t":{"421":{"position":[[259,12],[580,12],[713,12]]}}}],["organis",{"_index":385,"t":{"353":{"position":[[101,12]]},"421":{"position":[[678,12]]},"455":{"position":[[3507,12]]}}}],["organization'",{"_index":461,"t":{"369":{"position":[[514,14]]}}}],["organizationdefault",{"_index":451,"t":{"369":{"position":[[6,20]]}}}],["orgname/repo",{"_index":1023,"t":{"421":{"position":[[1150,12]]},"455":{"position":[[3705,12]]}}}],["orgname/repo=accesslevel",{"_index":1371,"t":{"455":{"position":[[4212,25]]}}}],["origin",{"_index":922,"t":{"413":{"position":[[632,7]]},"433":{"position":[[146,10]]}}}],["os,base64",{"_index":1291,"t":{"451":{"position":[[125,10]]}}}],["otherwis",{"_index":450,"t":{"367":{"position":[[751,10]]},"371":{"position":[[631,10]]},"389":{"position":[[232,9]]},"405":{"position":[[992,9]]},"433":{"position":[[1903,10]]}}}],["out",{"_index":849,"t":{"403":{"position":[[588,3]]},"405":{"position":[[17,4],[325,3]]},"433":{"position":[[2125,3],[2318,3]]},"435":{"position":[[1156,3]]}}}],["output",{"_index":1471,"t":{"461":{"position":[[34,6],[81,6]]},"463":{"position":[[142,6]]},"465":{"position":[[23,6]]},"467":{"position":[[80,6]]}}}],["outsid",{"_index":1468,"t":{"459":{"position":[[326,7]]},"467":{"position":[[193,7]]}}}],["overrid",{"_index":629,"t":{"385":{"position":[[178,9]]},"431":{"position":[[183,8]]},"455":{"position":[[8228,8],[9522,8]]}}}],["overridden",{"_index":443,"t":{"367":{"position":[[371,10]]},"369":{"position":[[245,10],[388,11],[1279,11]]}}}],["override_speci",{"_index":1317,"t":{"451":{"position":[[711,16]]}}}],["overwrit",{"_index":1285,"t":{"449":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":1281,"t":{"447":{"position":[[37,7]]}}}],["pad",{"_index":754,"t":{"395":{"position":[[479,9]]}}}],["page",{"_index":152,"t":{"332":{"position":[[12,4],[143,4],[190,4],[331,4]]},"373":{"position":[[1654,5]]},"403":{"position":[[553,5],[592,4]]},"405":{"position":[[329,4]]},"415":{"position":[[506,4],[1091,4],[1205,4]]},"455":{"position":[[2311,4],[3267,5],[8301,4],[11950,5],[13142,4]]}}}],["pair",{"_index":755,"t":{"395":{"position":[[533,4]]},"455":{"position":[[2834,5]]}}}],["pane",{"_index":908,"t":{"413":{"position":[[237,5],[284,5],[325,5],[432,5]]}}}],["parallel",{"_index":1351,"t":{"455":{"position":[[2081,8]]}}}],["paramet",{"_index":289,"t":{"341":{"position":[[83,9]]},"367":{"position":[[81,9],[280,10],[347,9],[476,9],[654,9]]},"369":{"position":[[36,9],[198,9],[366,9],[1159,10]]},"373":{"position":[[1965,10]]},"385":{"position":[[82,10],[202,9],[600,9]]},"405":{"position":[[364,10]]},"407":{"position":[[123,11]]},"457":{"position":[[258,10],[1096,10],[1121,9]]},"469":{"position":[[3773,10]]}}}],["part",{"_index":294,"t":{"343":{"position":[[149,4]]},"469":{"position":[[1796,6],[2177,4],[2455,4]]}}}],["particularli",{"_index":1467,"t":{"459":{"position":[[286,12]]}}}],["pass",{"_index":212,"t":{"338":{"position":[[157,4],[312,4],[344,4],[380,4],[416,4]]},"367":{"position":[[103,6],[253,6],[560,6],[677,6]]},"369":{"position":[[58,6],[216,6]]},"371":{"position":[[1593,4]]},"373":{"position":[[1988,6]]},"385":{"position":[[93,6],[212,6]]},"389":{"position":[[154,4]]},"391":{"position":[[276,6]]},"409":{"position":[[12,7]]},"413":{"position":[[2108,4]]},"415":{"position":[[2410,6]]},"417":{"position":[[557,6]]},"433":{"position":[[1795,6]]},"435":{"position":[[2283,4]]},"439":{"position":[[388,4]]},"441":{"position":[[325,4]]},"443":{"position":[[204,4]]},"455":{"position":[[644,7],[6908,4],[6933,4],[6956,4],[7136,4],[7167,4],[7237,4],[7258,4],[7461,7],[7599,4],[7621,4],[7647,4],[7669,4],[7717,4],[7740,4],[11576,4]]},"457":{"position":[[71,4]]},"469":{"position":[[990,4],[1301,4],[1330,4]]}}}],["passhosthead",{"_index":701,"t":{"387":{"position":[[2235,14],[2255,14]]}}}],["password",{"_index":364,"t":{"349":{"position":[[529,8]]},"361":{"position":[[750,8]]},"455":{"position":[[603,8],[623,8],[2405,8],[9444,8],[9466,9],[9535,8],[9591,8],[9622,9],[9682,9],[9712,8]]}}}],["password/basic_auth_password",{"_index":234,"t":{"338":{"position":[[635,28]]}}}],["patch",{"_index":146,"t":{"330":{"position":[[601,7]]}}}],["path",{"_index":195,"t":{"334":{"position":[[123,4]]},"343":{"position":[[536,4]]},"357":{"position":[[251,4]]},"361":{"position":[[300,4]]},"365":{"position":[[150,4]]},"373":{"position":[[1698,5]]},"379":{"position":[[345,4]]},"387":{"position":[[140,4],[165,5],[296,4],[308,4],[407,5],[592,4],[622,4],[671,4],[721,4],[824,4],[877,4],[949,4],[1199,5],[1378,4]]},"389":{"position":[[171,4],[397,4],[422,5]]},"403":{"position":[[279,6]]},"413":{"position":[[2353,4]]},"455":{"position":[[1007,4],[1545,4],[1576,4],[2203,4],[2262,4],[2947,4],[2983,5],[3041,5],[4542,4],[5833,4],[8054,5],[8335,4],[8636,4],[12380,5],[12518,5],[13597,4],[13932,4],[14134,5],[14228,4]]},"457":{"position":[[501,5],[703,4],[852,4],[1256,4]]},"461":{"position":[[854,4],[880,6]]},"465":{"position":[[177,8],[1166,4]]}}}],["path.eg",{"_index":670,"t":{"387":{"position":[[1257,8]]}}}],["path/to/cert.key",{"_index":820,"t":{"401":{"position":[[869,18]]}}}],["path/to/cert.pem",{"_index":818,"t":{"401":{"position":[[830,18]]}}}],["path/to/existing/config.cfg",{"_index":201,"t":{"336":{"position":[[204,29],[558,29]]}}}],["path/to/new/config.yaml",{"_index":206,"t":{"336":{"position":[[523,25]]}}}],["path/to/sit",{"_index":1550,"t":{"469":{"position":[[2623,15]]}}}],["path_regex",{"_index":1325,"t":{"455":{"position":[[195,10],[12590,10],[12604,12]]}}}],["pathprefix",{"_index":1604,"t":{"475":{"position":[[491,16],[1285,16]]}}}],["pathprefix(`/no",{"_index":1606,"t":{"475":{"position":[[760,15]]}}}],["pathprefix(`/oauth2",{"_index":1584,"t":{"473":{"position":[[592,23]]},"475":{"position":[[1072,23]]}}}],["pattern",{"_index":464,"t":{"369":{"position":[[561,8],[978,8]]},"385":{"position":[[259,7],[379,7],[396,7]]},"387":{"position":[[449,7]]}}}],["pem",{"_index":430,"t":{"365":{"position":[[87,3],[182,3]]},"435":{"position":[[1023,4],[2383,3],[2528,3]]},"455":{"position":[[5688,3],[5865,3]]}}}],["per",{"_index":1280,"t":{"445":{"position":[[166,3]]},"455":{"position":[[484,3],[1987,3],[2041,3]]}}}],["perform",{"_index":1104,"t":{"433":{"position":[[397,7],[1573,7]]}}}],["period",{"_index":368,"t":{"351":{"position":[[81,6]]},"387":{"position":[[2128,6]]},"455":{"position":[[3083,6]]}}}],["permiss",{"_index":946,"t":{"413":{"position":[[2243,11]]},"415":{"position":[[445,11],[494,11],[538,11],[598,12],[666,11],[775,10],[2222,11]]},"441":{"position":[[176,11]]}}}],["pick",{"_index":953,"t":{"415":{"position":[[144,4]]},"433":{"position":[[2235,4],[2660,4]]}}}],["pin",{"_index":813,"t":{"401":{"position":[[713,3]]}}}],["ping",{"_index":842,"t":{"403":{"position":[[318,5]]},"455":{"position":[[8330,4],[8351,4],[8406,7],[8416,4],[12130,4],[12179,4]]},"461":{"position":[[716,5],[743,4],[791,4],[849,4]]}}}],["ping,/path2",{"_index":1365,"t":{"455":{"position":[[3019,14]]}}}],["pkce",{"_index":1329,"t":{"455":{"position":[[904,4]]}}}],["plain",{"_index":1330,"t":{"455":{"position":[[959,7]]},"469":{"position":[[2894,5]]}}}],["plan",{"_index":974,"t":{"415":{"position":[[1030,8]]}}}],["platform",{"_index":800,"t":{"401":{"position":[[86,8],[276,8]]},"415":{"position":[[270,8],[1660,8]]},"433":{"position":[[2603,8]]}}}],["pleas",{"_index":88,"t":{"328":{"position":[[99,6],[144,6],[346,6],[434,6]]},"332":{"position":[[260,6],[835,6]]},"411":{"position":[[430,6]]}}}],["plural",{"_index":1319,"t":{"453":{"position":[[186,6]]},"459":{"position":[[257,6]]}}}],["poc",{"_index":1343,"t":{"455":{"position":[[1607,6]]}}}],["point",{"_index":1086,"t":{"427":{"position":[[1349,8]]},"475":{"position":[[119,8]]}}}],["polici",{"_index":970,"t":{"415":{"position":[[884,8]]},"433":{"position":[[2351,8]]}}}],["popul",{"_index":1053,"t":{"423":{"position":[[1276,8]]}}}],["port",{"_index":807,"t":{"401":{"position":[[390,4],[460,4]]},"405":{"position":[[1075,4]]},"433":{"position":[[584,5]]},"455":{"position":[[15634,5],[15693,4],[15806,5],[15877,5]]}}}],["possibl",{"_index":77,"t":{"326":{"position":[[165,9]]},"328":{"position":[[467,9]]},"351":{"position":[[125,8]]},"423":{"position":[[82,9]]},"427":{"position":[[877,8]]},"455":{"position":[[2064,8]]}}}],["post",{"_index":93,"t":{"328":{"position":[[158,4]]}}}],["potenti",{"_index":115,"t":{"328":{"position":[[622,9]]},"387":{"position":[[1619,9]]}}}],["powershel",{"_index":1289,"t":{"451":{"position":[[86,10]]}}}],["pr",{"_index":91,"t":{"328":{"position":[[130,2]]},"330":{"position":[[373,3]]}}}],["prebuilt",{"_index":3,"t":{"324":{"position":[[34,8],[195,8],[329,8]]}}}],["preced",{"_index":645,"t":{"387":{"position":[[388,10]]},"449":{"position":[[118,11]]}}}],["prefer",{"_index":231,"t":{"338":{"position":[[582,6]]},"455":{"position":[[7332,9],[7382,6],[7408,6],[7817,9],[11486,9]]}}}],["preferred_usernam",{"_index":900,"t":{"411":{"position":[[489,18]]}}}],["prefix",{"_index":353,"t":{"349":{"position":[[219,6],[233,6],[255,6]]},"361":{"position":[[440,6],[454,6],[476,6]]},"387":{"position":[[627,8],[676,8]]},"403":{"position":[[136,6],[175,6]]},"455":{"position":[[1463,6],[8609,6],[14764,6],[15511,8]]},"459":{"position":[[75,9]]}}}],["preflight",{"_index":1422,"t":{"455":{"position":[[12211,9]]}}}],["prepend",{"_index":354,"t":{"349":{"position":[[275,9]]},"361":{"position":[[496,9]]}}}],["present",{"_index":120,"t":{"328":{"position":[[705,7]]},"391":{"position":[[237,7]]},"455":{"position":[[7942,8],[13262,9],[13378,9]]}}}],["preserv",{"_index":411,"t":{"359":{"position":[[362,9]]}}}],["preserverequestvalu",{"_index":407,"t":{"359":{"position":[[260,20],[286,20]]}}}],["pretti",{"_index":1246,"t":{"437":{"position":[[282,6]]}}}],["prevent",{"_index":500,"t":{"371":{"position":[[200,8]]},"393":{"position":[[460,7]]}}}],["preview",{"_index":1132,"t":{"433":{"position":[[1682,7]]}}}],["previou",{"_index":149,"t":{"330":{"position":[[652,8]]}}}],["previous",{"_index":131,"t":{"330":{"position":[[287,10]]}}}],["primari",{"_index":295,"t":{"343":{"position":[[161,7]]}}}],["print",{"_index":203,"t":{"336":{"position":[[304,5]]},"455":{"position":[[14656,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":1292,"t":{"451":{"position":[[136,57]]}}}],["prior",{"_index":168,"t":{"332":{"position":[[245,5]]},"427":{"position":[[119,5]]}}}],["privat",{"_index":98,"t":{"328":{"position":[[222,8]]},"330":{"position":[[37,9]]},"365":{"position":[[72,7],[162,7]]},"421":{"position":[[1048,7]]},"435":{"position":[[1065,7]]},"455":{"position":[[5673,7],[5845,7],[13940,7]]}}}],["process",{"_index":1232,"t":{"435":{"position":[[2587,7]]},"465":{"position":[[965,8]]},"469":{"position":[[2934,9],[2980,9]]}}}],["product",{"_index":914,"t":{"413":{"position":[[374,8]]},"435":{"position":[[294,10]]},"455":{"position":[[12021,11]]}}}],["profil",{"_index":250,"t":{"338":{"position":[[933,7]]},"373":{"position":[[2131,7]]},"423":{"position":[[727,7]]},"427":{"position":[[284,7]]},"435":{"position":[[1992,7]]},"455":{"position":[[7867,7],[7886,7]]}}}],["profileurl",{"_index":583,"t":{"373":{"position":[[2095,10],[2113,10]]}}}],["project",{"_index":67,"t":{"326":{"position":[[33,8],[74,7],[204,8]]},"355":{"position":[[113,8],[131,8],[184,8]]},"413":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"421":{"position":[[13,8]]},"427":{"position":[[411,8]]},"429":{"position":[[55,8]]},"433":{"position":[[118,9]]},"455":{"position":[[4094,8],[4160,8]]}}}],["prometheu",{"_index":845,"t":{"403":{"position":[[430,10]]},"455":{"position":[[8558,10]]}}}],["prompt",{"_index":255,"t":{"338":{"position":[[998,6]]},"455":{"position":[[217,6],[7912,6],[7931,7],[7960,6]]}}}],["prompt/approval_prompt",{"_index":257,"t":{"338":{"position":[[1014,22]]}}}],["promptallow",{"_index":453,"t":{"369":{"position":[[130,12]]}}}],["promptdefault",{"_index":456,"t":{"369":{"position":[[294,14]]}}}],["properli",{"_index":1072,"t":{"427":{"position":[[551,9]]}}}],["propos",{"_index":129,"t":{"330":{"position":[[257,8]]}}}],["protect",{"_index":585,"t":{"373":{"position":[[2213,9]]},"395":{"position":[[774,8]]},"415":{"position":[[315,7]]},"433":{"position":[[2189,11],[2279,8]]},"455":{"position":[[10894,9]]}}}],["protectedresourc",{"_index":584,"t":{"373":{"position":[[2171,17]]}}}],["proto,host,uri",{"_index":1412,"t":{"455":{"position":[[11056,16]]}}}],["protocol",{"_index":1056,"t":{"425":{"position":[[80,8]]},"435":{"position":[[842,9]]},"455":{"position":[[15711,8]]},"463":{"position":[[1071,8],[1101,9]]},"465":{"position":[[534,13],[860,8],[890,9]]}}}],["provid",{"_index":39,"t":{"324":{"position":[[444,8],[572,8],[622,8],[775,8]]},"334":{"position":[[111,7]]},"338":{"position":[[803,8],[812,8],[856,8],[1215,8]]},"341":{"position":[[13,9]]},"343":{"position":[[1809,9],[1819,9],[1829,9],[1869,10]]},"345":{"position":[[13,9]]},"347":{"position":[[13,9]]},"353":{"position":[[13,9]]},"355":{"position":[[13,9]]},"357":{"position":[[13,9]]},"363":{"position":[[13,9],[234,9]]},"365":{"position":[[13,9]]},"367":{"position":[[13,9],[712,8]]},"371":{"position":[[13,9]]},"373":{"position":[[13,10],[24,8],[70,8],[212,10],[345,10],[584,9],[666,9],[744,9],[842,9],[929,9],[1015,9],[1101,9],[1190,9],[1313,9],[1414,10],[1425,8],[1504,9],[1581,9]]},"375":{"position":[[29,9],[87,8]]},"377":{"position":[[0,11],[47,9],[92,10]]},"399":{"position":[[47,9],[418,12]]},"401":{"position":[[1384,12]]},"405":{"position":[[169,8],[785,8]]},"409":{"position":[[309,8],[473,9],[740,8]]},"411":{"position":[[54,8],[90,10],[195,9],[365,8],[400,8],[455,9],[564,9]]},"413":{"position":[[2212,8]]},"415":{"position":[[2308,8]]},"417":{"position":[[92,7],[455,8]]},"421":{"position":[[184,8],[1264,7]]},"423":{"position":[[24,8],[70,8],[1256,8]]},"427":{"position":[[10,8]]},"433":{"position":[[84,9],[133,8],[235,8],[297,9],[379,8],[553,8],[956,8],[970,8],[1001,9],[1554,8],[1918,8],[3050,8],[4377,8]]},"435":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"437":{"position":[[14,8],[125,9],[528,8]]},"439":{"position":[[378,9]]},"441":{"position":[[315,9]]},"443":{"position":[[323,8]]},"447":{"position":[[27,9],[61,8],[151,9]]},"455":{"position":[[1719,9],[2448,8],[7983,8],[8005,8],[8023,8],[8122,9],[8199,8],[8318,9],[13103,8],[13289,9],[14577,9],[15395,9],[15919,8]]},"457":{"position":[[194,9],[353,7],[691,7],[1149,9]]},"475":{"position":[[34,8],[2252,8]]}}}],["provider'",{"_index":867,"t":{"405":{"position":[[309,10]]},"435":{"position":[[3422,10]]},"455":{"position":[[8241,10]]},"469":{"position":[[1699,10]]}}}],["provider.example.com",{"_index":879,"t":{"405":{"position":[[894,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":871,"t":{"405":{"position":[[486,36]]}}}],["provider.if",{"_index":577,"t":{"373":{"position":[[1766,11]]}}}],["provider.thi",{"_index":570,"t":{"373":{"position":[[1374,13]]}}}],["provider/sign_out_pag",{"_index":874,"t":{"405":{"position":[[672,25]]}}}],["provider=\"github",{"_index":1271,"t":{"443":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":1073,"t":{"427":{"position":[[605,17]]}}}],["provider=adf",{"_index":1009,"t":{"417":{"position":[[333,13]]}}}],["provider=azur",{"_index":979,"t":{"415":{"position":[[1439,14],[1747,14]]}}}],["provider=bitbucket",{"_index":1265,"t":{"441":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":1258,"t":{"439":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":1037,"t":{"423":{"position":[[440,17]]},"425":{"position":[[509,17]]}}}],["providermust",{"_index":572,"t":{"373":{"position":[[1465,12]]}}}],["provideror",{"_index":564,"t":{"373":{"position":[[1179,10]]}}}],["providers.new",{"_index":1282,"t":{"447":{"position":[[98,15]]}}}],["providerthi",{"_index":542,"t":{"373":{"position":[[173,12],[306,12]]}}}],["providertyp",{"_index":571,"t":{"373":{"position":[[1434,12]]},"375":{"position":[[39,12]]}}}],["proxi",{"_index":22,"t":{"324":{"position":[[245,5],[535,5],[648,5]]},"326":{"position":[[12,5]]},"328":{"position":[[65,5],[339,6]]},"336":{"position":[[58,5],[163,5],[467,5],[502,5]]},"338":{"position":[[191,5],[1511,5]]},"343":{"position":[[204,6],[490,7],[973,5],[1045,5],[1262,5]]},"387":{"position":[[108,7],[1057,8],[1669,5],[2416,8]]},"389":{"position":[[365,7]]},"391":{"position":[[109,5]]},"393":{"position":[[97,5],[396,5],[655,6]]},"397":{"position":[[52,5],[69,5]]},"399":{"position":[[38,5],[162,5],[221,5],[978,5]]},"401":{"position":[[133,5],[432,8],[451,5],[478,5],[1199,5],[1258,5]]},"403":{"position":[[7,5],[87,7],[169,5]]},"409":{"position":[[32,5],[729,5]]},"411":{"position":[[179,5]]},"413":{"position":[[2310,5],[2426,6]]},"415":{"position":[[1303,5]]},"417":{"position":[[320,5]]},"433":{"position":[[530,5],[789,5],[924,5],[1028,5],[1048,5],[3656,5],[3676,5],[4817,5],[4837,5]]},"435":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"439":{"position":[[206,5],[249,5]]},"441":{"position":[[108,6],[152,5]]},"443":{"position":[[238,6]]},"447":{"position":[[130,5]]},"449":{"position":[[7,5]]},"455":{"position":[[8603,5],[8651,5],[8717,5],[8757,8],[8943,5],[10930,5],[10973,6],[12752,5],[15002,5],[15124,5],[15293,5]]},"457":{"position":[[7,5],[623,5],[978,5]]},"461":{"position":[[19,5]]},"463":{"position":[[937,5]]},"465":{"position":[[792,5]]},"469":{"position":[[192,8],[1763,5]]},"471":{"position":[[31,5]]},"473":{"position":[[223,8]]},"475":{"position":[[138,5],[208,6],[1236,5]]}}}],["proxiedto",{"_index":702,"t":{"387":{"position":[[2323,9]]}}}],["proxy'",{"_index":862,"t":{"405":{"position":[[91,7]]},"409":{"position":[[96,7]]},"439":{"position":[[296,7]]},"469":{"position":[[86,7]]},"473":{"position":[[93,7]]}}}],["proxy'secret",{"_index":1114,"t":{"433":{"position":[[775,13]]}}}],["proxy(e.g",{"_index":959,"t":{"415":{"position":[[337,10]]}}}],["proxy.cfg",{"_index":1320,"t":{"453":{"position":[[225,9],[326,9]]}}}],["proxy.thi",{"_index":314,"t":{"343":{"position":[[929,10]]}}}],["proxy/oauth2",{"_index":13,"t":{"324":{"position":[[119,12],[232,12]]}}}],["proxy/oauth2/callback",{"_index":1256,"t":{"439":{"position":[[163,22]]}}}],["proxy/v7",{"_index":14,"t":{"324":{"position":[[132,8]]}}}],["proxy=tru",{"_index":836,"t":{"401":{"position":[[1409,10]]},"475":{"position":[[306,11]]}}}],["proxy>/oauth2/callback",{"_index":1264,"t":{"441":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":1002,"t":{"415":{"position":[[2451,17]]},"417":{"position":[[598,17]]}}}],["proxy_connect_timeout",{"_index":833,"t":{"401":{"position":[[1094,21]]}}}],["proxy_pass",{"_index":825,"t":{"401":{"position":[[955,10]]},"469":{"position":[[319,10],[657,10],[2584,10],[2948,10]]}}}],["proxy_pass_request_bodi",{"_index":1531,"t":{"469":{"position":[[883,23]]}}}],["proxy_read_timeout",{"_index":835,"t":{"401":{"position":[[1142,18]]}}}],["proxy_send_timeout",{"_index":834,"t":{"401":{"position":[[1119,18]]}}}],["proxy_set_head",{"_index":827,"t":{"401":{"position":[[989,16],[1018,16],[1059,16]]},"469":{"position":[[353,16],[382,16],[423,16],[458,16],[559,16],[691,16],[720,16],[761,16],[847,16],[1218,16],[1249,16],[1428,16]]}}}],["proxyrawpath",{"_index":711,"t":{"389":{"position":[[118,12],[136,12]]}}}],["proxyredirecturi",{"_index":1112,"t":{"433":{"position":[[702,18]]}}}],["proxyus",{"_index":1408,"t":{"455":{"position":[[9001,9]]}}}],["proxywebsocket",{"_index":704,"t":{"387":{"position":[[2371,15],[2392,15]]}}}],["pubjwk",{"_index":268,"t":{"338":{"position":[[1185,6]]},"435":{"position":[[1917,6]]},"455":{"position":[[8773,6]]}}}],["pubjwkurl",{"_index":432,"t":{"365":{"position":[[214,9],[231,9]]}}}],["pubkey",{"_index":434,"t":{"365":{"position":[[252,6]]},"455":{"position":[[8795,6]]}}}],["public",{"_index":1022,"t":{"421":{"position":[[1011,6],[1229,6]]},"435":{"position":[[974,6]]}}}],["public_repo",{"_index":1026,"t":{"421":{"position":[[1376,11]]}}}],["publicli",{"_index":95,"t":{"328":{"position":[[175,9]]}}}],["pull",{"_index":1501,"t":{"463":{"position":[[1173,6]]},"465":{"position":[[1036,6]]}}}],["push",{"_index":389,"t":{"353":{"position":[[341,4]]},"421":{"position":[[994,4]]},"455":{"position":[[3808,4]]}}}],["put",{"_index":15,"t":{"324":{"position":[[152,3]]}}}],["python",{"_index":1287,"t":{"451":{"position":[[66,6],[107,6]]}}}],["quay.io/oauth2",{"_index":21,"t":{"324":{"position":[[217,14]]}}}],["queri",{"_index":436,"t":{"367":{"position":[[75,5],[390,5]]},"369":{"position":[[1153,5],[1405,5]]},"385":{"position":[[76,5]]},"405":{"position":[[358,5]]},"407":{"position":[[117,5]]},"473":{"position":[[1287,6]]}}}],["quick",{"_index":1194,"t":{"435":{"position":[[1080,5]]}}}],["quickli",{"_index":76,"t":{"326":{"position":[[154,7]]}}}],["quot",{"_index":477,"t":{"369":{"position":[[845,6]]}}}],["r_basicprofil",{"_index":1090,"t":{"429":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":1091,"t":{"429":{"position":[[187,15]]}}}],["rand",{"_index":1302,"t":{"451":{"position":[[296,4]]}}}],["random",{"_index":512,"t":{"371":{"position":[[586,6]]},"395":{"position":[[391,6],[442,6]]},"463":{"position":[[1210,6]]},"465":{"position":[[1073,6]]}}}],["random_password",{"_index":1315,"t":{"451":{"position":[[663,17]]}}}],["rang",{"_index":1438,"t":{"455":{"position":[[14901,6]]}}}],["raw",{"_index":712,"t":{"389":{"position":[[163,3]]},"469":{"position":[[2229,3]]}}}],["rd",{"_index":869,"t":{"405":{"position":[[355,2]]}}}],["re",{"_index":743,"t":{"393":{"position":[[799,2]]},"405":{"position":[[200,2]]}}}],["reach",{"_index":1429,"t":{"455":{"position":[[13159,5]]}}}],["read",{"_index":947,"t":{"413":{"position":[[2327,4]]},"415":{"position":[[440,4]]},"421":{"position":[[1207,4]]},"441":{"position":[[240,4],[261,4]]}}}],["read_api",{"_index":1071,"t":{"427":{"position":[[445,8]]}}}],["readi",{"_index":147,"t":{"330":{"position":[[613,6]]}}}],["real",{"_index":829,"t":{"401":{"position":[[1037,4]]},"435":{"position":[[3070,4],[3215,4]]},"455":{"position":[[8843,4],[8901,4],[8987,4],[9017,4],[11012,4],[15025,4]]},"463":{"position":[[899,4]]},"465":{"position":[[754,4]]},"469":{"position":[[401,4],[739,4]]}}}],["realm",{"_index":1033,"t":{"423":{"position":[[127,5]]},"425":{"position":[[35,5],[711,6],[773,5]]}}}],["realm>/protocol/openid",{"_index":1043,"t":{"423":{"position":[[592,22],[687,22],[784,22],[885,22]]}}}],["reason",{"_index":944,"t":{"413":{"position":[[2002,6]]}}}],["recommend",{"_index":779,"t":{"397":{"position":[[14,11]]},"413":{"position":[[871,11]]},"455":{"position":[[977,13]]},"469":{"position":[[3574,11]]}}}],["redeem",{"_index":248,"t":{"338":{"position":[[911,6]]},"371":{"position":[[686,6]]},"421":{"position":[[1837,6]]},"423":{"position":[[631,6]]},"435":{"position":[[3765,6]]},"437":{"position":[[686,6]]},"443":{"position":[[527,6]]},"455":{"position":[[9027,6],[13027,6]]}}}],["redeemurl",{"_index":581,"t":{"373":{"position":[[2035,9],[2052,9]]}}}],["redempt",{"_index":582,"t":{"373":{"position":[[2075,10]]},"455":{"position":[[9051,10]]}}}],["redi",{"_index":722,"t":{"391":{"position":[[326,5]]},"395":{"position":[[4,5],[57,6],[606,5],[711,5],[873,5],[936,5],[964,5],[1055,5],[1112,5],[1175,5],[1208,5],[1254,5],[1357,5],[1412,5],[1475,5],[1505,5],[1561,5],[1608,5],[1656,5],[1769,5],[1818,5]]},"409":{"position":[[552,6]]},"415":{"position":[[2498,5]]},"417":{"position":[[645,5]]},"455":{"position":[[9178,5],[9230,5],[9315,5],[9335,5],[9370,5],[9387,5],[9438,5],[9460,5],[9495,5],[9553,5],[9576,5],[9607,5],[9671,5],[9706,5],[9723,5],[9757,5],[9812,5],[9833,5],[9886,5],[9972,5],[9993,5],[10027,5],[10053,5],[10111,5],[10146,5],[10178,5],[10211,5],[10270,5],[10304,5],[10346,5],[10393,5],[10441,5],[10550,5],[10599,5],[11351,5]]}}}],["redirect",{"_index":715,"t":{"389":{"position":[[245,10]]},"403":{"position":[[713,8]]},"405":{"position":[[22,8],[269,8],[380,8],[550,8],[585,8],[646,9],[873,8],[1006,8]]},"409":{"position":[[276,10]]},"411":{"position":[[123,8]]},"413":{"position":[[703,8]]},"415":{"position":[[232,8]]},"419":{"position":[[95,8]]},"423":{"position":[[174,8]]},"425":{"position":[[116,8],[604,8]]},"427":{"position":[[322,8],[625,8],[703,8],[1318,8]]},"429":{"position":[[217,8]]},"433":{"position":[[1054,8],[2720,8],[3969,8],[4029,8]]},"435":{"position":[[1379,8],[1619,8],[3610,8]]},"437":{"position":[[448,12]]},"439":{"position":[[315,8],[562,8],[680,8]]},"443":{"position":[[87,8],[267,8]]},"455":{"position":[[127,11],[2626,9],[3187,8],[3276,9],[9073,8],[9103,8],[11095,8],[14730,11],[15597,8]]},"469":{"position":[[490,8],[591,8]]},"475":{"position":[[0,8],[372,9],[561,8],[572,9],[781,11],[849,8],[1894,9],[2059,9]]}}}],["redis.conf",{"_index":775,"t":{"395":{"position":[[1701,10]]},"455":{"position":[[10482,10]]}}}],["redis://host[:port",{"_index":1409,"t":{"455":{"position":[[9266,21],[9415,20],[9923,21]]}}}],["reduc",{"_index":1475,"t":{"461":{"position":[[804,8]]}}}],["refer",{"_index":184,"t":{"332":{"position":[[552,9],[853,9]]},"334":{"position":[[94,9]]},"379":{"position":[[57,10]]},"435":{"position":[[930,5],[1284,8]]},"437":{"position":[[367,5]]}}}],["refresh",{"_index":740,"t":{"393":{"position":[[734,10]]},"413":{"position":[[886,7],[940,7],[2544,9]]},"433":{"position":[[2830,7],[4138,7]]},"455":{"position":[[1627,7],[1644,7],[15422,8]]},"469":{"position":[[1494,8]]}}}],["refresh/access/id",{"_index":760,"t":{"395":{"position":[[787,17]]}}}],["refreshes.default",{"_index":517,"t":{"371":{"position":[[712,17]]}}}],["regardless",{"_index":793,"t":{"399":{"position":[[679,10]]}}}],["regex",{"_index":891,"t":{"409":{"position":[[70,6]]},"455":{"position":[[12290,5]]}}}],["regist",{"_index":49,"t":{"324":{"position":[[585,8]]},"411":{"position":[[17,8]]},"415":{"position":[[404,9]]},"435":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":901,"t":{"413":{"position":[[16,12]]},"415":{"position":[[94,13],[130,13],[469,13],[1147,12]]},"429":{"position":[[18,12]]}}}],["regular",{"_index":133,"t":{"330":{"position":[[365,7]]},"369":{"position":[[432,7],[814,7]]},"385":{"position":[[417,7]]},"387":{"position":[[534,7]]}}}],["releas",{"_index":6,"t":{"324":{"position":[[59,7],[462,7]]},"330":{"position":[[493,8],[661,9]]},"343":{"position":[[298,8]]},"371":{"position":[[764,8]]}}}],["reload",{"_index":1613,"t":{"475":{"position":[[2336,6]]}}}],["remain",{"_index":655,"t":{"387":{"position":[[711,9]]},"429":{"position":[[300,9]]}}}],["remot",{"_index":1443,"t":{"455":{"position":[[15156,6]]}}}],["remote_addr",{"_index":831,"t":{"401":{"position":[[1045,13]]},"469":{"position":[[409,13],[747,13]]}}}],["remote_address",{"_index":1478,"t":{"463":{"position":[[181,16]]},"465":{"position":[[62,16]]}}}],["remov",{"_index":164,"t":{"332":{"position":[[211,8]]},"334":{"position":[[255,7]]},"336":{"position":[[368,6],[429,7]]},"338":{"position":[[1467,6]]},"405":{"position":[[76,7]]}}}],["renam",{"_index":165,"t":{"332":{"position":[[220,7]]}}}],["replac",{"_index":178,"t":{"332":{"position":[[479,7]]},"453":{"position":[[65,9]]},"459":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":1309,"t":{"451":{"position":[[550,19]]}}}],["repo",{"_index":386,"t":{"353":{"position":[[176,4],[188,4]]},"421":{"position":[[1076,8]]},"435":{"position":[[2497,4]]},"455":{"position":[[3628,4]]}}}],["report",{"_index":1507,"t":{"463":{"position":[[1381,8]]},"465":{"position":[[1453,8]]}}}],["repositori",{"_index":346,"t":{"347":{"position":[[108,10],[126,10],[186,10]]},"353":{"position":[[239,10],[304,10],[360,10]]},"421":{"position":[[329,11],[953,11],[1018,10],[1056,11],[1126,10],[1236,10],[1320,11],[1445,10]]},"441":{"position":[[245,12],[696,10]]},"455":{"position":[[3681,10],[3772,10],[3827,11]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":1251,"t":{"437":{"position":[[714,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":1250,"t":{"437":{"position":[[647,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":1252,"t":{"437":{"position":[[786,39]]}}}],["url]/stat",{"_index":1464,"t":{"457":{"position":[[984,13]]}}}],["url]/var/www/stat",{"_index":1460,"t":{"457":{"position":[[629,21]]}}}],["urldefault",{"_index":507,"t":{"371":{"position":[[457,10]]}}}],["urleg",{"_index":497,"t":{"371":{"position":[[102,6],[1006,6]]}}}],["urlparameterrul",{"_index":489,"t":{"369":{"position":[[1297,18]]},"385":{"position":[[32,16]]}}}],["us",{"_index":18,"t":{"324":{"position":[[185,5],[294,5],[654,5]]},"328":{"position":[[550,4]]},"330":{"position":[[3,3],[361,3]]},"332":{"position":[[293,3],[659,5]]},"334":{"position":[[3,3],[141,5],[182,5]]},"336":{"position":[[64,5],[473,5]]},"338":{"position":[[100,5],[1352,3]]},"343":{"position":[[394,4],[626,4],[861,4],[953,4],[963,5],[1217,4],[1433,3],[1539,4],[1741,3],[1842,4]]},"345":{"position":[[233,4]]},"349":{"position":[[517,4]]},"353":{"position":[[285,3]]},"359":{"position":[[183,4]]},"361":{"position":[[738,4]]},"363":{"position":[[210,5]]},"365":{"position":[[98,4],[193,4]]},"367":{"position":[[542,4]]},"369":{"position":[[941,3]]},"371":{"position":[[902,3],[1478,4]]},"373":{"position":[[467,4],[1738,4],[1826,4]]},"375":{"position":[[55,4]]},"387":{"position":[[316,4],[462,4],[528,5],[730,3],[2058,4]]},"391":{"position":[[115,4]]},"393":{"position":[[78,4],[287,5]]},"395":{"position":[[863,5],[1102,3],[1118,3],[1363,3],[1481,3],[1511,3],[1735,5]]},"399":{"position":[[752,4],[942,4],[992,5]]},"401":{"position":[[218,5],[301,3],[670,3]]},"403":{"position":[[375,3],[648,4],[774,4],[904,4],[1053,3]]},"405":{"position":[[345,5]]},"407":{"position":[[97,5]]},"409":{"position":[[761,6]]},"411":{"position":[[390,5]]},"415":{"position":[[1042,3],[1947,5],[2287,5]]},"417":{"position":[[435,5]]},"421":{"position":[[1426,3],[1686,5]]},"423":{"position":[[47,3],[1135,4],[1440,5]]},"427":{"position":[[160,5],[1042,5]]},"431":{"position":[[175,4]]},"433":{"position":[[194,3],[263,4],[566,5],[1484,5],[1617,5],[4707,3]]},"435":{"position":[[2172,3],[3211,3]]},"437":{"position":[[105,5],[276,5]]},"439":{"position":[[370,3],[670,3]]},"441":{"position":[[43,3],[307,3],[555,3],[707,3]]},"445":{"position":[[29,3],[105,3],[209,3]]},"447":{"position":[[139,3]]},"451":{"position":[[35,3]]},"453":{"position":[[286,4]]},"455":{"position":[[900,3],[1181,4],[1450,3],[2322,3],[2568,3],[3337,3],[3417,3],[3753,3],[5211,5],[5334,3],[5699,4],[5876,4],[7034,4],[7418,3],[7504,3],[7572,4],[8094,4],[8183,4],[8280,4],[8377,4],[8464,4],[8879,4],[9288,4],[9321,3],[9632,4],[9700,3],[9785,4],[9818,3],[9945,4],[9978,3],[9999,3],[10086,3],[10117,3],[10245,3],[10516,5],[10679,3],[11087,4],[11522,7],[11564,4],[11732,7],[11840,7],[12014,3],[13277,5],[13393,5],[13683,4],[13830,5],[15306,3],[15465,5],[15883,3]]},"457":{"position":[[830,4],[1214,4]]},"459":{"position":[[299,6]]},"461":{"position":[[111,5],[735,5]]},"463":{"position":[[889,3]]},"465":{"position":[[744,3]]},"469":{"position":[[1651,5],[2677,3],[2719,3],[3589,3]]},"475":{"position":[[55,3],[330,3],[2299,3]]}}}],["us/azure/act",{"_index":994,"t":{"415":{"position":[[2185,15]]}}}],["usag",{"_index":293,"t":{"343":{"position":[[62,5]]},"395":{"position":[[851,6]]}}}],["use.typ",{"_index":612,"t":{"383":{"position":[[218,13],[314,13]]}}}],["used.list",{"_index":626,"t":{"383":{"position":[[678,9]]}}}],["user",{"_index":224,"t":{"338":{"position":[[385,4],[1059,4]]},"343":{"position":[[92,5],[436,4]]},"347":{"position":[[161,4]]},"353":{"position":[[371,5],[386,5],[399,5]]},"363":{"position":[[173,5]]},"371":{"position":[[1120,4],[1220,4],[1321,4]]},"373":{"position":[[1635,5]]},"387":{"position":[[795,5]]},"391":{"position":[[138,4]]},"393":{"position":[[790,5]]},"395":{"position":[[184,4]]},"403":{"position":[[258,4]]},"405":{"position":[[12,4],[121,4],[282,4],[393,4]]},"409":{"position":[[248,4],[643,4]]},"413":{"position":[[397,6],[2175,4],[2443,4]]},"421":{"position":[[436,4],[463,5],[971,5],[1196,5],[1286,4],[1481,4],[1619,8]]},"429":{"position":[[119,4]]},"433":{"position":[[2949,5]]},"437":{"position":[[58,5]]},"441":{"position":[[659,5]]},"455":{"position":[[3848,4],[3876,5],[4735,4],[4806,5],[6735,4],[7292,5],[7398,4],[7626,4],[7722,4],[7757,5],[8421,4],[8441,4],[8509,4],[11417,5],[14491,5]]},"461":{"position":[[748,4]]},"463":{"position":[[94,4],[356,4],[425,4],[1367,4]]},"465":{"position":[[1439,4]]},"469":{"position":[[1013,4],[1115,5],[1237,4],[1242,6]]}}}],["user'",{"_index":310,"t":{"343":{"position":[[760,6],[1148,6]]},"391":{"position":[[17,6]]},"403":{"position":[[919,6]]},"455":{"position":[[6657,6]]}}}],["user/prefer_email_to_us",{"_index":232,"t":{"338":{"position":[[598,25]]}}}],["user/settings/appl",{"_index":1268,"t":{"443":{"position":[[52,28]]}}}],["user@domain.com",{"_index":1479,"t":{"463":{"position":[[215,17]]},"465":{"position":[[96,17]]}}}],["user_ag",{"_index":1512,"t":{"465":{"position":[[195,14]]}}}],["userag",{"_index":1506,"t":{"463":{"position":[[1346,9]]},"465":{"position":[[548,14],[1418,9]]}}}],["useridclaim",{"_index":531,"t":{"371":{"position":[[1255,11],[1274,11]]}}}],["userinfo",{"_index":1054,"t":{"423":{"position":[[1376,8]]}}}],["usernam",{"_index":362,"t":{"349":{"position":[[475,8]]},"353":{"position":[[416,9]]},"361":{"position":[[696,8]]},"421":{"position":[[1506,8],[1644,9]]},"455":{"position":[[2394,8],[3894,8],[7342,8],[7447,8],[7508,8],[7827,8],[11496,8]]},"463":{"position":[[63,8],[708,13],[1416,8],[1457,8]]},"465":{"position":[[444,13],[1488,8],[1529,8]]}}}],["username@email.com",{"_index":1508,"t":{"463":{"position":[[1425,18]]},"465":{"position":[[1497,18]]}}}],["usptream",{"_index":684,"t":{"387":{"position":[[1683,8]]}}}],["utc",{"_index":1389,"t":{"455":{"position":[[5394,3]]}}}],["util",{"_index":565,"t":{"373":{"position":[[1200,7]]}}}],["uuid",{"_index":1502,"t":{"463":{"position":[[1217,4]]},"465":{"position":[[1080,4]]}}}],["v1",{"_index":977,"t":{"415":{"position":[[1319,2]]}}}],["v2",{"_index":985,"t":{"415":{"position":[[1617,2]]},"473":{"position":[[12,2]]},"475":{"position":[[93,2]]}}}],["v2.0",{"_index":975,"t":{"415":{"position":[[1046,4],[1953,4]]}}}],["v3.0.0",{"_index":43,"t":{"324":{"position":[[492,7]]}}}],["v7.4.0",{"_index":7,"t":{"324":{"position":[[70,7]]}}}],["valid",{"_index":32,"t":{"324":{"position":[[354,9]]},"330":{"position":[[231,8]]},"338":{"position":[[966,8]]},"351":{"position":[[254,5]]},"373":{"position":[[2299,10]]},"375":{"position":[[109,5]]},"383":{"position":[[691,5]]},"385":{"position":[[172,5]]},"399":{"position":[[1017,5]]},"411":{"position":[[189,5]]},"413":{"position":[[962,9]]},"419":{"position":[[83,5]]},"421":{"position":[[1910,8]]},"423":{"position":[[168,5],[827,8]]},"425":{"position":[[110,5]]},"437":{"position":[[756,8],[849,8]]},"443":{"position":[[595,8]]},"451":{"position":[[572,5]]},"455":{"position":[[180,6],[13235,10],[13351,10],[13844,5],[14589,8],[14622,10],[15591,5]]}}}],["validateurl",{"_index":586,"t":{"373":{"position":[[2248,11],[2267,11]]}}}],["valu",{"_index":291,"t":{"341":{"position":[[117,5]]},"343":{"position":[[723,6],[798,6],[1111,6],[1186,6]]},"345":{"position":[[143,5],[296,5]]},"349":{"position":[[62,5],[191,5],[292,5],[433,5],[538,6]]},"359":{"position":[[330,6],[533,6],[554,6],[582,6]]},"361":{"position":[[60,5],[110,5],[139,5],[152,5],[190,6],[337,6],[412,5],[513,5],[654,5],[759,6]]},"367":{"position":[[215,5],[224,6],[521,5],[732,5]]},"369":{"position":[[117,6],[144,6],[158,6],[174,6],[281,6],[326,6],[342,6],[412,6],[1226,5],[1235,6]]},"373":{"position":[[186,5],[319,5],[1388,5]]},"379":{"position":[[89,6],[184,5],[197,5],[235,6],[382,6]]},"385":{"position":[[250,5],[320,5],[335,5],[373,5],[481,6],[560,6],[610,5]]},"387":{"position":[[259,5]]},"395":{"position":[[203,5]]},"411":{"position":[[423,6]]},"415":{"position":[[1264,5]]},"423":{"position":[[1539,5]]},"455":{"position":[[38,6],[4263,5]]},"457":{"position":[[795,5]]},"463":{"position":[[979,5]]},"465":{"position":[[834,5]]}}}],["values.nam",{"_index":405,"t":{"359":{"position":[[204,12]]}}}],["values/acr_valu",{"_index":259,"t":{"338":{"position":[[1041,17]]}}}],["var/www/stat",{"_index":1463,"t":{"457":{"position":[[933,16]]}}}],["variabl",{"_index":59,"t":{"324":{"position":[[710,9]]},"338":{"position":[[61,9]]},"361":{"position":[[255,9]]},"379":{"position":[[300,9]]},"403":{"position":[[189,9]]},"435":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"437":{"position":[[192,9]]},"449":{"position":[[69,9],[183,9],[209,9]]},"459":{"position":[[63,8],[238,8]]},"461":{"position":[[613,10]]},"463":{"position":[[776,9],[804,8]]},"465":{"position":[[628,9],[659,8]]},"467":{"position":[[500,9],[532,8]]},"469":{"position":[[2202,9],[2838,9],[3826,8]]}}}],["verif",{"_index":505,"t":{"371":{"position":[[364,12],[1487,13],[1598,12]]},"387":{"position":[[1543,12]]},"455":{"position":[[6190,12],[6548,13],[6913,12]]}}}],["verifi",{"_index":35,"t":{"324":{"position":[[391,9]]},"353":{"position":[[294,9]]},"371":{"position":[[530,9],[1424,8]]},"421":{"position":[[1435,9]]},"455":{"position":[[3762,9],[6147,8],[6363,9],[12822,8],[13218,6],[13334,6]]}}}],["verifieddefault",{"_index":503,"t":{"371":{"position":[[260,15]]}}}],["verify/ssl_upstream_insecure_skip_verifi",{"_index":218,"t":{"338":{"position":[[252,40]]}}}],["version",{"_index":42,"t":{"324":{"position":[[484,7]]},"328":{"position":[[679,8]]},"383":{"position":[[123,7],[404,7],[466,7]]},"399":{"position":[[581,7],[670,8],[705,7],[772,8],[950,7]]},"427":{"position":[[50,7],[111,7]]},"455":{"position":[[13967,7],[13994,7],[14644,7],[14662,7]]}}}],["version=tls1.3",{"_index":791,"t":{"399":{"position":[[615,15]]}}}],["via",{"_index":280,"t":{"338":{"position":[[1377,3],[1390,3]]},"367":{"position":[[382,3]]},"369":{"position":[[1397,3]]},"395":{"position":[[717,3],[958,3]]},"401":{"position":[[733,3]]},"435":{"position":[[3308,3]]},"437":{"position":[[161,3]]},"449":{"position":[[31,3]]},"455":{"position":[[470,3],[6992,3],[7197,3],[10152,3]]},"463":{"position":[[1027,3]]},"469":{"position":[[71,3],[1007,3],[2944,3],[3755,3]]},"473":{"position":[[78,3]]}}}],["visit",{"_index":1126,"t":{"433":{"position":[[1351,8]]}}}],["volum",{"_index":1476,"t":{"461":{"position":[[817,7]]}}}],["vulner",{"_index":85,"t":{"328":{"position":[[37,13],[606,13]]},"330":{"position":[[75,16],[308,15]]}}}],["wait",{"_index":709,"t":{"387":{"position":[[2541,4]]},"455":{"position":[[14300,4]]}}}],["want",{"_index":637,"t":{"385":{"position":[[574,4]]},"395":{"position":[[1094,4]]},"405":{"position":[[865,4]]},"415":{"position":[[307,4]]},"433":{"position":[[1739,4]]},"435":{"position":[[580,4]]},"457":{"position":[[677,5]]}}}],["warn",{"_index":169,"t":{"332":{"position":[[251,8]]},"455":{"position":[[11956,9],[15172,8]]}}}],["way",{"_index":442,"t":{"367":{"position":[[328,4]]},"421":{"position":[[217,4]]},"435":{"position":[[1086,3]]}}}],["web",{"_index":919,"t":{"413":{"position":[[533,4]]},"415":{"position":[[266,3]]},"433":{"position":[[1259,3],[2591,3],[3802,3],[3921,3]]}}}],["websocket",{"_index":705,"t":{"387":{"position":[[2428,10]]},"455":{"position":[[8723,10],[8747,9]]}}}],["websockets/proxy_websocket",{"_index":215,"t":{"338":{"position":[[197,27]]}}}],["well",{"_index":608,"t":{"383":{"position":[[91,4]]},"395":{"position":[[924,4],[1145,4],[1308,5]]},"455":{"position":[[2868,5],[2906,5]]}}}],["whenstream",{"_index":697,"t":{"387":{"position":[[2172,13]]}}}],["whether",{"_index":409,"t":{"359":{"position":[[318,7]]},"385":{"position":[[155,7]]},"387":{"position":[[2281,7]]},"427":{"position":[[144,7]]},"437":{"position":[[241,7]]},"455":{"position":[[10989,7]]}}}],["whitelist",{"_index":880,"t":{"405":{"position":[[954,9]]},"455":{"position":[[14679,9],[15475,9],[15826,11]]}}}],["whole",{"_index":639,"t":{"385":{"position":[[594,5]]},"473":{"position":[[236,5]]}}}],["whose",{"_index":272,"t":{"338":{"position":[[1258,5]]}}}],["wide_authority_to_your_service_account",{"_index":935,"t":{"413":{"position":[[1442,38]]}}}],["window",{"_index":1005,"t":{"417":{"position":[[45,7]]}}}],["wish",{"_index":1135,"t":{"433":{"position":[[1839,4],[2271,4],[2364,4],[2969,4]]},"439":{"position":[[95,5]]}}}],["within",{"_index":86,"t":{"328":{"position":[[51,6]]},"332":{"position":[[131,6]]},"343":{"position":[[230,6]]},"349":{"position":[[81,6]]},"359":{"position":[[234,6]]},"379":{"position":[[112,6]]},"387":{"position":[[912,6]]},"393":{"position":[[568,6]]},"421":{"position":[[703,6]]},"433":{"position":[[4737,6]]}}}],["without",{"_index":167,"t":{"332":{"position":[[237,7]]},"343":{"position":[[307,7]]},"469":{"position":[[184,7]]},"473":{"position":[[215,7]]},"475":{"position":[[43,7]]}}}],["wizard",{"_index":1008,"t":{"417":{"position":[[221,6]]}}}],["wo",{"_index":1608,"t":{"475":{"position":[[846,2],[2056,2]]}}}],["won't",{"_index":971,"t":{"415":{"position":[[897,5]]}}}],["work",{"_index":69,"t":{"326":{"position":[[61,4]]},"427":{"position":[[102,4],[546,4]]},"433":{"position":[[1236,7],[1940,5],[2437,4]]},"435":{"position":[[210,4]]},"455":{"position":[[14548,5]]},"469":{"position":[[1528,4]]}}}],["write",{"_index":1025,"t":{"421":{"position":[[1300,5]]}}}],["x",{"_index":828,"t":{"401":{"position":[[1035,1],[1076,1]]},"405":{"position":[[570,1]]},"423":{"position":[[1289,1]]},"455":{"position":[[6996,1],[7077,1],[7280,1],[7298,1],[7320,1],[7745,1],[7763,1],[7783,1],[7805,1],[8968,1],[8985,1],[8999,1],[9015,1],[10712,1],[11010,1],[11044,1],[11402,1],[11423,1],[11446,1],[11471,1],[11595,1],[12655,1]]},"463":{"position":[[897,1]]},"465":{"position":[[752,1]]},"469":{"position":[[399,1],[440,1],[475,1],[576,1],[737,1],[778,1],[1011,1],[1022,1],[1235,1],[1266,1],[1445,1]]},"475":{"position":[[337,1],[2001,1],[2177,1]]}}}],["x.y.z.linux",{"_index":46,"t":{"324":{"position":[[541,11]]}}}],["x509",{"_index":1197,"t":{"435":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":1402,"t":{"455":{"position":[[7050,12],[11380,12]]},"469":{"position":[[1080,12]]}}}],["xauthrequest/set_xauthrequest",{"_index":229,"t":{"338":{"position":[[502,29]]}}}],["xxx\"client_secret",{"_index":1172,"t":{"433":{"position":[[4580,18]]}}}],["xxxxx\"client_secret",{"_index":1146,"t":{"433":{"position":[[3263,20]]}}}],["yaml",{"_index":177,"t":{"332":{"position":[[464,4]]},"334":{"position":[[47,4]]},"336":{"position":[[295,4]]},"369":{"position":[[677,4]]},"473":{"position":[[288,6]]}}}],["you'd",{"_index":1024,"t":{"421":{"position":[[1166,5]]}}}],["you'r",{"_index":973,"t":{"415":{"position":[[997,6]]}}}],["yourcompany.com",{"_index":1332,"t":{"455":{"position":[[1107,18]]}}}],["yourself",{"_index":641,"t":{"385":{"position":[[635,8]]}}}],["yyy\"pass_access_token",{"_index":1173,"t":{"433":{"position":[[4601,22]]}}}],["yyyyy\"pass_access_token",{"_index":1147,"t":{"433":{"position":[[3286,24]]}}}],["zero",{"_index":772,"t":{"395":{"position":[[1596,5]]},"455":{"position":[[10381,5]]}}}],["zzz\"cookie_secur",{"_index":1174,"t":{"433":{"position":[[4646,18]]}}}],["zzzzz\"skip_provider_button",{"_index":1149,"t":{"433":{"position":[[3333,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file diff --git a/docs/behaviour/index.html b/docs/behaviour/index.html index 764da315..c8ebe7a0 100644 --- a/docs/behaviour/index.html +++ b/docs/behaviour/index.html @@ -4,13 +4,13 @@ Behaviour | OAuth2 Proxy - +
    Version: 7.5.x

    Behaviour

    1. Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens).
    2. If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned)
    3. After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set
    4. The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration)

    Notice that the proxy also provides a number of useful endpoints.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/community/contribution/index.html b/docs/community/contribution/index.html index 56408027..8d45cca1 100644 --- a/docs/community/contribution/index.html +++ b/docs/community/contribution/index.html @@ -4,14 +4,14 @@ Contribution Guide | OAuth2 Proxy - +
    Version: 7.5.x

    Contribution Guide

    We track bugs and issues using Github.

    If you find a bug, please open an Issue. When opening an Issue or Pull Request please follow the preconfigured template and take special note of the checkboxes.

    If you want to fix a bug, add a new feature or extend existing functionality, please create a fork, create a feature branch and open a PR back to this repo. Please mention open bug issue number(s) within your PR if applicable.

    We suggest using Visual Studio Code with the official Go for Visual Studio Code extension.

    Go version

    This project is currently still using go 1.19. You can follow the installation guide for go here. And you can find go version 1.19 in the archived section here.

    Preparing your fork

    Clone your fork, create a feature branch and update the depedencies to get started.

    git clone git@github.com:<YOUR_FORK>/oauth2-proxy
    cd oauth2-proxy
    git branch feature/<BRANCH_NAME>
    git push --set-upstream origin feature/<BRANCH_NAME>
    go mod download

    Testing / Debugging

    For starting oauth2-proxy locally open the debugging tab and create the launch.json and select Go: Launch Package.

    Debugging Tab

    {
        "version": "0.2.0",
        "configurations": [
            {
                "name": "Launch OAuth2-Proxy with Dex",
                "type": "go",
                "request": "launch",
                "mode": "auto",
                "program": "${workspaceFolder}",
                "args": [
                    "--config",
                    // The following configuration contains settings for a locally deployed 
                    // upstream and dex as an idetity provider
                    "contrib/local-environment/oauth2-proxy.cfg"
                ]
            },
            {
                "name": "Launch OAuth2-Proxy with Keycloak",
                "type": "go",
                "request": "launch",
                "mode": "auto",
                "program": "${workspaceFolder}",
                "args": [
                    "--config",
                    // The following configuration contains settings for a locally deployed 
                    // upstream and keycloak as an idetity provider
                    "contrib/local-environment/oauth2-proxy-keycloak.cfg"
                ]
            }
        ]
    }

    Before you can start your local version of oauth2-proxy, you will have to use the provided docker compose files to start a local upstream service and identity provider. We suggest using httpbin as your upstream for testing as it allows for request and response introspection of all things HTTP.

    Open a terminal and switch to the contrib/local-environment directory.

    • Dex as your IdP: docker compose -f docker-compose.yaml up dex etcd httpbin
    • Keycloak as your IdP: docker compose -f docker-compose-keycloak.yaml up keycloak httpbin

    The username for both is admin@example.com and password is password.

    Start oauth2-proxy from the debug tab and open http://oauth2-proxy.localtest.me:4180/ for testing.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/community/security/index.html b/docs/community/security/index.html index b0255ad7..158cccaf 100644 --- a/docs/community/security/index.html +++ b/docs/community/security/index.html @@ -4,7 +4,7 @@ Security | OAuth2 Proxy - + @@ -28,7 +28,7 @@ If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/configuration/alpha-config/index.html b/docs/configuration/alpha-config/index.html index 9ede5250..2c4208bc 100644 --- a/docs/configuration/alpha-config/index.html +++ b/docs/configuration/alpha-config/index.html @@ -4,7 +4,7 @@ Alpha Configuration | OAuth2 Proxy - + @@ -62,7 +62,7 @@ passed to the /oauth2/start endpoint are checked to determine wheth they are valid overrides for the given parameter passed to the IdP's login URL. Either Value or Pattern should be supplied, not both.

    FieldTypeDescription
    valuestringA Value rule matches just this specific value
    patternstringA Pattern rule gives a regular expression that must be matched by
    some substring of the value. The expression is not automatically
    anchored to the start and end of the value, if you want to restrict
    the whole parameter value you must anchor it yourself with ^ and $.

    Upstream​

    (Appears on: UpstreamConfig)

    Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path.

    FieldTypeDescription
    idstringID should be a unique identifier for the upstream.
    This value is required for all upstreams.
    pathstringPath is used to map requests to the upstream server.
    The closest match will take precedence and all Paths must be unique.
    Path can also take a pattern when used with RewriteTarget.
    Path segments can be captured and matched using regular experessions.
    Eg:
    - ^/foo$: Match only the explicit path /foo
    - ^/bar/$: Match any path prefixed with /bar/
    - ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget
    rewriteTargetstringRewriteTarget allows users to rewrite the request path before it is sent to
    the upstream server.
    Use the Path to capture segments for reuse within the rewrite target.
    Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewrite
    the request /baz/abc/123 to /foo/abc/123 before proxying to the
    upstream server.
    uristringThe URI of the upstream server. This may be an HTTP(S) server of a File
    based URL. It may include a path, in which case all requests will be served
    under that path.
    Eg:
    - http://localhost:8080
    - https://service.localhost
    - https://service.localhost/path
    - file://host/path
    If the URI's path is "/base" and the incoming request was for "/dir",
    the upstream request will be for "/base/dir".
    insecureSkipTLSVerifyboolInsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.
    This option is insecure and will allow potential Man-In-The-Middle attacks
    betweem OAuth2 Proxy and the usptream server.
    Defaults to false.
    staticboolStatic will make all requests to this upstream have a static response.
    The response will have a body of "Authenticated" and a response code
    matching StaticCode.
    If StaticCode is not set, the response will return a 200 response.
    staticCodeintStaticCode determines the response code for the Static response.
    This option can only be used with Static enabled.
    flushIntervalDurationFlushInterval is the period between flushing the response buffer when
    streaming response from the upstream.
    Defaults to 1 second.
    passHostHeaderboolPassHostHeader determines whether the request host header should be proxied
    to the upstream server.
    Defaults to true.
    proxyWebSocketsboolProxyWebSockets enables proxying of websockets to upstream servers
    Defaults to true.
    timeoutDurationTimeout is the maximum duration the server will wait for a response from the upstream server.
    Defaults to 30 seconds.

    UpstreamConfig​

    (Appears on: AlphaOptions)

    UpstreamConfig is a collection of definitions for upstream servers.

    FieldTypeDescription
    proxyRawPathboolProxyRawPath will pass the raw url path to upstream allowing for url's
    like: "/%2F/" which would otherwise be redirected to "/"
    upstreams[]UpstreamUpstreams represents the configuration for the upstream servers.
    Requests will be proxied to this upstream if the path matches the request path.
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/configuration/oauth_provider/index.html b/docs/configuration/oauth_provider/index.html index c62734db..be3fbf6d 100644 --- a/docs/configuration/oauth_provider/index.html +++ b/docs/configuration/oauth_provider/index.html @@ -4,7 +4,7 @@ OAuth Provider Configuration | OAuth2 Proxy - + @@ -72,7 +72,7 @@ to setup the client id and client secret. Your "Redirection URI" will Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/configuration/overview/index.html b/docs/configuration/overview/index.html index 3cf1c1b5..3c98daff 100644 --- a/docs/configuration/overview/index.html +++ b/docs/configuration/overview/index.html @@ -4,7 +4,7 @@ Overview | OAuth2 Proxy - + @@ -19,7 +19,7 @@ The default format is configured as follows:

    {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}}

    Available variables for request logging:

    VariableExampleDescription
    Client74.125.224.72The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true.
    Hostdomain.comThe value of the Host header.
    ProtocolHTTP/1.0The request protocol.
    RequestDuration0.001The time in seconds that a request took to process.
    RequestID00010203-0405-4607-8809-0a0b0c0d0e0fThe request ID pulled from the --request-id-header. Random UUID if empty
    RequestMethodGETThe request method.
    RequestURI"/oauth2/auth"The URI path of the request.
    ResponseSize12The size in bytes of the response.
    StatusCode200The HTTP status code of the response.
    Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
    Upstream-The upstream data of the HTTP request.
    UserAgent-The full user agent as reported by the requesting client.
    Usernameusername@email.comThe email or username of the auth request.

    Standard Log Format​

    All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below:

    [19/Mar/2015:17:20:19 -0400] [main.go:40] <MESSAGE>

    If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows:

    [{{.Timestamp}}] [{{.File}}] {{.Message}}

    Available variables for standard logging:

    VariableExampleDescription
    Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
    Filemain.go:40The file and line number of the logging statement.
    MessageHTTP: listening on 127.0.0.1:4180The details of the log statement.

    Configuring for use with the Nginx auth_request directive​

    The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example:

    server {
      listen 443 ssl;
      server_name ...;
      include ssl/ssl.conf;

      location /oauth2/ {
        proxy_pass       http://127.0.0.1:4180;
        proxy_set_header Host                    $host;
        proxy_set_header X-Real-IP               $remote_addr;
        proxy_set_header X-Scheme                $scheme;
        proxy_set_header X-Auth-Request-Redirect $request_uri;
        # or, if you are handling multiple domains:
        # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
      }
      location = /oauth2/auth {
        proxy_pass       http://127.0.0.1:4180;
        proxy_set_header Host             $host;
        proxy_set_header X-Real-IP        $remote_addr;
        proxy_set_header X-Scheme         $scheme;
        # nginx auth_request includes headers but not body
        proxy_set_header Content-Length   "";
        proxy_pass_request_body           off;
      }

      location / {
        auth_request /oauth2/auth;
        error_page 401 = /oauth2/sign_in;

        # pass information via X-User and X-Email headers to backend,
        # requires running with --set-xauthrequest flag
        auth_request_set $user   $upstream_http_x_auth_request_user;
        auth_request_set $email  $upstream_http_x_auth_request_email;
        proxy_set_header X-User  $user;
        proxy_set_header X-Email $email;

        # if you enabled --pass-access-token, this will pass the token to the backend
        auth_request_set $token  $upstream_http_x_auth_request_access_token;
        proxy_set_header X-Access-Token $token;

        # if you enabled --cookie-refresh, this is needed for it to work with auth_request
        auth_request_set $auth_cookie $upstream_http_set_cookie;
        add_header Set-Cookie $auth_cookie;

        # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
        # limit and so the OAuth2 Proxy splits these into multiple parts.
        # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
        # so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
        auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;

        # Extract the Cookie attributes from the first Set-Cookie header and append them
        # to the second part ($upstream_cookie_* variables only contain the raw cookie content)
        if ($auth_cookie ~* "(; .*)") {
            set $auth_cookie_name_0 $auth_cookie;
            set $auth_cookie_name_1 "auth_cookie_name_1=$auth_cookie_name_upstream_1$1";
        }

        # Send both Set-Cookie headers now if there was a second part
        if ($auth_cookie_name_upstream_1) {
            add_header Set-Cookie $auth_cookie_name_0;
            add_header Set-Cookie $auth_cookie_name_1;
        }

        proxy_pass http://backend/;
        # or "root /path/to/site;" or "fastcgi_pass ..." etc
      }
    }

    When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module.

    nginx.ingress.kubernetes.io/auth-response-headers: Authorization
    nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
    nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
    nginx.ingress.kubernetes.io/configuration-snippet: |
      auth_request_set $name_upstream_1 $upstream_cookie_name_1;

      access_by_lua_block {
        if ngx.var.name_upstream_1 ~= "" then
          ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
        end
      }

    It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure).

    You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be "$upstream_cookie__oauth2_proxy_1" instead of "$upstream_cookie_name_1" and the new cookie-name should be "_oauth2_proxy_1=" instead of "name_1=".

    Configuring for use with the Traefik (v2) ForwardAuth middleware​

    This option requires --reverse-proxy option to be set.

    ForwardAuth with 401 errors middleware​

    The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration:

    http:
      routers:
        a-service:
          rule: "Host(`a-service.example.com`)"
          service: a-service-backend
          middlewares:
            - oauth-errors
            - oauth-auth
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
        oauth:
          rule: "Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)"
          middlewares:
            - auth-headers
          service: oauth-backend
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"

      services:
        a-service-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.2:7555
        oauth-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.1:4180

      middlewares:
        auth-headers:
          headers:
            sslRedirect: true
            stsSeconds: 315360000
            browserXssFilter: true
            contentTypeNosniff: true
            forceSTSHeader: true
            sslHost: example.com
            stsIncludeSubdomains: true
            stsPreload: true
            frameDeny: true
        oauth-auth:
          forwardAuth:
            address: https://oauth.example.com/oauth2/auth
            trustForwardHeader: true
        oauth-errors:
          errors:
            status:
              - "401-403"
            service: oauth-backend
            query: "/oauth2/sign_in?rd={url}"

    ForwardAuth with static upstreams configuration​

    Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint

    Following options need to be set on oauth2-proxy:

    • --upstream=static://202: Configures a static response for authenticated sessions
    • --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly
    http:
      routers:
        a-service-route-1:
          rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)"
          service: a-service-backend
          middlewares:
            - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
        a-service-route-2:
          rule: "Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)"
          service: a-service-backend
          middlewares:
            - oauth-auth-wo-redirect # unauthenticated session will return a 401
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
        services-oauth2-route:
          rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)"
          middlewares:
            - auth-headers
          service: oauth-backend
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
        oauth2-proxy-route:
          rule: "Host(`oauth.example.com`) && PathPrefix(`/`)"
          middlewares:
            - auth-headers
          service: oauth-backend
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"

      services:
        a-service-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.2:7555
        b-service-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.3:7555
        oauth-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.1:4180

      middlewares:
        auth-headers:
          headers:
            sslRedirect: true
            stsSeconds: 315360000
            browserXssFilter: true
            contentTypeNosniff: true
            forceSTSHeader: true
            sslHost: example.com
            stsIncludeSubdomains: true
            stsPreload: true
            frameDeny: true
        oauth-auth-redirect:
          forwardAuth:
            address: https://oauth.example.com/
            trustForwardHeader: true
            authResponseHeaders:
              - X-Auth-Request-Access-Token
              - Authorization
        oauth-auth-wo-redirect:
          forwardAuth:
            address: https://oauth.example.com/oauth2/auth
            trustForwardHeader: true
            authResponseHeaders:
              - X-Auth-Request-Access-Token
              - Authorization
    note

    If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/configuration/session_storage/index.html b/docs/configuration/session_storage/index.html index 687a5f30..d29cd791 100644 --- a/docs/configuration/session_storage/index.html +++ b/docs/configuration/session_storage/index.html @@ -4,7 +4,7 @@ Session Storage | OAuth2 Proxy - + @@ -36,7 +36,7 @@ and --redis-sentinel-connection-urls appropriately.

    Redis Clu --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately.

    Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.

    Note, if Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. For example: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/configuration/tls/index.html b/docs/configuration/tls/index.html index 98fc8946..ad334e72 100644 --- a/docs/configuration/tls/index.html +++ b/docs/configuration/tls/index.html @@ -4,7 +4,7 @@ TLS Configuration | OAuth2 Proxy - + @@ -19,7 +19,7 @@ external load balancer like Amazon ELB or Google Platform Load Balancing) use oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/.

    An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS:

    server {
        listen 443 default ssl;
        server_name internal.yourcompany.com;
        ssl_certificate /path/to/cert.pem;
        ssl_certificate_key /path/to/cert.key;
        add_header Strict-Transport-Security max-age=2592000;

        location / {
            proxy_pass http://127.0.0.1:4180;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Scheme $scheme;
            proxy_connect_timeout 1;
            proxy_send_timeout 30;
            proxy_read_timeout 30;
        }
    }

  • The command line to run oauth2-proxy in this configuration would look like this:

    ./oauth2-proxy \
       --email-domain="yourcompany.com"  \
       --upstream=http://127.0.0.1:8080/ \
       --cookie-secret=... \
       --cookie-secure=true \
       --provider=... \
       --reverse-proxy=true \
       --client-id=... \
       --client-secret=...
    • Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/features/endpoints/index.html b/docs/features/endpoints/index.html index 2cf73aea..1d51e770 100644 --- a/docs/features/endpoints/index.html +++ b/docs/features/endpoints/index.html @@ -4,13 +4,13 @@ Endpoints | OAuth2 Proxy - +
    -
    Version: 7.5.x

    Endpoints

    OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable.

    • /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info
    • /ping - returns a 200 OK response, which is intended for use with health checks
    • /ready - returns a 200 OK response if all the underlying connections (e.g., Redis store) are connected
    • /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default
    • /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies)
    • /oauth2/sign_out - this URL is used to clear the session cookie
    • /oauth2/start - a URL that will redirect to start the OAuth cycle
    • /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url.
    • /oauth2/userinfo - the URL is used to return user's email from the session in JSON format.
    • /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive
    • /oauth2/static/* - stylesheets and other dependencies used in the sign_in and error pages

    Sign out​

    To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!):

    /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page

    Alternatively, include the redirect URL in the X-Auth-Request-Redirect header:

    GET /oauth2/sign_out HTTP/1.1
    X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page
    ...

    (The "sign_out_page" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.)

    BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored. Make sure to include the actual domain and port (if needed) and not the URL (e.g "localhost:8081" instead of "http://localhost:8081").

    Auth​

    This endpoint returns 202 Accepted response or a 401 Unauthorized response.

    It can be configured using the following query parameters query parameters:

    • allowed_groups: comma separated list of allowed groups
    • allowed_email_domains: comma separated list of allowed email domains
    • allowed_emails: comma separated list of allowed emails
    Copyright © 2023 OAuth2 Proxy.
    - +
    Version: 7.5.x

    Endpoints

    OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable.

    • /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info
    • /ping - returns a 200 OK response, which is intended for use with health checks
    • /ready - returns a 200 OK response if all the underlying connections (e.g., Redis store) are connected
    • /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default
    • /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies)
    • /oauth2/sign_out - this URL is used to clear the session cookie
    • /oauth2/start - a URL that will redirect to start the OAuth cycle
    • /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url.
    • /oauth2/userinfo - the URL is used to return user's email from the session in JSON format.
    • /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive
    • /oauth2/static/* - stylesheets and other dependencies used in the sign_in and error pages

    Sign out​

    To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!):

    /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page

    Alternatively, include the redirect URL in the X-Auth-Request-Redirect header:

    GET /oauth2/sign_out HTTP/1.1
    X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page
    ...

    (The "sign_out_page" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.)

    BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored. Make sure to include the actual domain and port (if needed) and not the URL (e.g "localhost:8081" instead of "http://localhost:8081").

    Auth​

    This endpoint returns 202 Accepted response or a 401 Unauthorized response.

    It can be configured using the following query parameters:

    • allowed_groups: comma separated list of allowed groups
    • allowed_email_domains: comma separated list of allowed email domains
    • allowed_emails: comma separated list of allowed emails
    Copyright © 2023 OAuth2 Proxy.
    + \ No newline at end of file diff --git a/docs/index.html b/docs/index.html index 04606e71..98e1fb98 100644 --- a/docs/index.html +++ b/docs/index.html @@ -4,13 +4,13 @@ Installation | OAuth2 Proxy - +
    Version: 7.5.x

    Installation

    1. Choose how to deploy:

      a. Using a Prebuilt Binary (current release is v7.5.1)

      b. Using Go to install the latest release

      $ go install github.com/oauth2-proxy/oauth2-proxy/v7@latest
      # which will put the binary in `$GOROOT/bin`

      c. Using a Prebuilt Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available)

      d. Using a Pre-Release Nightly Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available)

      e. Using the official Kubernetes manifest (Helm)

      Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0.

      sha256sum -c sha256sum.txt 2>&1 | grep OK
      oauth2-proxy-x.y.z.linux-amd64: OK

    2. Select a Provider and Register an OAuth Application with a Provider

    3. Configure OAuth2 Proxy using config file, command line options, or environment variables

    4. Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/behaviour/index.html b/docs/next/behaviour/index.html index cdecfa8f..b7d044e8 100644 --- a/docs/next/behaviour/index.html +++ b/docs/next/behaviour/index.html @@ -4,13 +4,13 @@ Behaviour | OAuth2 Proxy - +
    Version: Next

    Behaviour

    1. Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens).
    2. If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned)
    3. After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set
    4. The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration)

    Notice that the proxy also provides a number of useful endpoints.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/community/contribution/index.html b/docs/next/community/contribution/index.html index 5b5507a8..0ac398e1 100644 --- a/docs/next/community/contribution/index.html +++ b/docs/next/community/contribution/index.html @@ -4,14 +4,14 @@ Contribution Guide | OAuth2 Proxy - +
    Version: Next

    Contribution Guide

    We track bugs and issues using Github.

    If you find a bug, please open an Issue. When opening an Issue or Pull Request please follow the preconfigured template and take special note of the checkboxes.

    If you want to fix a bug, add a new feature or extend existing functionality, please create a fork, create a feature branch and open a PR back to this repo. Please mention open bug issue number(s) within your PR if applicable.

    We suggest using Visual Studio Code with the official Go for Visual Studio Code extension.

    Go version

    This project is currently still using go 1.19. You can follow the installation guide for go here. And you can find go version 1.19 in the archived section here.

    Preparing your fork

    Clone your fork, create a feature branch and update the depedencies to get started.

    git clone git@github.com:<YOUR_FORK>/oauth2-proxy
    cd oauth2-proxy
    git branch feature/<BRANCH_NAME>
    git push --set-upstream origin feature/<BRANCH_NAME>
    go mod download

    Testing / Debugging

    For starting oauth2-proxy locally open the debugging tab and create the launch.json and select Go: Launch Package.

    Debugging Tab

    {
        "version": "0.2.0",
        "configurations": [
            {
                "name": "Launch OAuth2-Proxy with Dex",
                "type": "go",
                "request": "launch",
                "mode": "auto",
                "program": "${workspaceFolder}",
                "args": [
                    "--config",
                    // The following configuration contains settings for a locally deployed 
                    // upstream and dex as an idetity provider
                    "contrib/local-environment/oauth2-proxy.cfg"
                ]
            },
            {
                "name": "Launch OAuth2-Proxy with Keycloak",
                "type": "go",
                "request": "launch",
                "mode": "auto",
                "program": "${workspaceFolder}",
                "args": [
                    "--config",
                    // The following configuration contains settings for a locally deployed 
                    // upstream and keycloak as an idetity provider
                    "contrib/local-environment/oauth2-proxy-keycloak.cfg"
                ]
            }
        ]
    }

    Before you can start your local version of oauth2-proxy, you will have to use the provided docker compose files to start a local upstream service and identity provider. We suggest using httpbin as your upstream for testing as it allows for request and response introspection of all things HTTP.

    Open a terminal and switch to the contrib/local-environment directory.

    • Dex as your IdP: docker compose -f docker-compose.yaml up dex etcd httpbin
    • Keycloak as your IdP: docker compose -f docker-compose-keycloak.yaml up keycloak httpbin

    The username for both is admin@example.com and password is password.

    Start oauth2-proxy from the debug tab and open http://oauth2-proxy.localtest.me:4180/ for testing.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/community/security/index.html b/docs/next/community/security/index.html index e33635bc..96eea998 100644 --- a/docs/next/community/security/index.html +++ b/docs/next/community/security/index.html @@ -4,7 +4,7 @@ Security | OAuth2 Proxy - + @@ -28,7 +28,7 @@ If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/alpha-config/index.html b/docs/next/configuration/alpha-config/index.html index e93a977f..dcf0708a 100644 --- a/docs/next/configuration/alpha-config/index.html +++ b/docs/next/configuration/alpha-config/index.html @@ -4,7 +4,7 @@ Alpha Configuration | OAuth2 Proxy - + @@ -62,7 +62,7 @@ passed to the /oauth2/start endpoint are checked to determine wheth they are valid overrides for the given parameter passed to the IdP's login URL. Either Value or Pattern should be supplied, not both.

    FieldTypeDescription
    valuestringA Value rule matches just this specific value
    patternstringA Pattern rule gives a regular expression that must be matched by
    some substring of the value. The expression is not automatically
    anchored to the start and end of the value, if you want to restrict
    the whole parameter value you must anchor it yourself with ^ and $.

    Upstream​

    (Appears on: UpstreamConfig)

    Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path.

    FieldTypeDescription
    idstringID should be a unique identifier for the upstream.
    This value is required for all upstreams.
    pathstringPath is used to map requests to the upstream server.
    The closest match will take precedence and all Paths must be unique.
    Path can also take a pattern when used with RewriteTarget.
    Path segments can be captured and matched using regular experessions.
    Eg:
    - ^/foo$: Match only the explicit path /foo
    - ^/bar/$: Match any path prefixed with /bar/
    - ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget
    rewriteTargetstringRewriteTarget allows users to rewrite the request path before it is sent to
    the upstream server.
    Use the Path to capture segments for reuse within the rewrite target.
    Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewrite
    the request /baz/abc/123 to /foo/abc/123 before proxying to the
    upstream server.
    uristringThe URI of the upstream server. This may be an HTTP(S) server of a File
    based URL. It may include a path, in which case all requests will be served
    under that path.
    Eg:
    - http://localhost:8080
    - https://service.localhost
    - https://service.localhost/path
    - file://host/path
    If the URI's path is "/base" and the incoming request was for "/dir",
    the upstream request will be for "/base/dir".
    insecureSkipTLSVerifyboolInsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.
    This option is insecure and will allow potential Man-In-The-Middle attacks
    between OAuth2 Proxy and the upstream server.
    Defaults to false.
    staticboolStatic will make all requests to this upstream have a static response.
    The response will have a body of "Authenticated" and a response code
    matching StaticCode.
    If StaticCode is not set, the response will return a 200 response.
    staticCodeintStaticCode determines the response code for the Static response.
    This option can only be used with Static enabled.
    flushIntervalDurationFlushInterval is the period between flushing the response buffer when
    streaming response from the upstream.
    Defaults to 1 second.
    passHostHeaderboolPassHostHeader determines whether the request host header should be proxied
    to the upstream server.
    Defaults to true.
    proxyWebSocketsboolProxyWebSockets enables proxying of websockets to upstream servers
    Defaults to true.
    timeoutDurationTimeout is the maximum duration the server will wait for a response from the upstream server.
    Defaults to 30 seconds.

    UpstreamConfig​

    (Appears on: AlphaOptions)

    UpstreamConfig is a collection of definitions for upstream servers.

    FieldTypeDescription
    proxyRawPathboolProxyRawPath will pass the raw url path to upstream allowing for urls
    like: "/%2F/" which would otherwise be redirected to "/"
    upstreams[]UpstreamUpstreams represents the configuration for the upstream servers.
    Requests will be proxied to this upstream if the path matches the request path.
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/overview/index.html b/docs/next/configuration/overview/index.html index 6a9a01fc..1ee1a706 100644 --- a/docs/next/configuration/overview/index.html +++ b/docs/next/configuration/overview/index.html @@ -4,7 +4,7 @@ Overview | OAuth2 Proxy - + @@ -19,7 +19,7 @@ The default format is configured as follows:

    {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}}

    Available variables for request logging:

    VariableExampleDescription
    Client74.125.224.72The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true.
    Hostdomain.comThe value of the Host header.
    ProtocolHTTP/1.0The request protocol.
    RequestDuration0.001The time in seconds that a request took to process.
    RequestID00010203-0405-4607-8809-0a0b0c0d0e0fThe request ID pulled from the --request-id-header. Random UUID if empty
    RequestMethodGETThe request method.
    RequestURI"/oauth2/auth"The URI path of the request.
    ResponseSize12The size in bytes of the response.
    StatusCode200The HTTP status code of the response.
    Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
    Upstream-The upstream data of the HTTP request.
    UserAgent-The full user agent as reported by the requesting client.
    Usernameusername@email.comThe email or username of the auth request.

    Standard Log Format​

    All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below:

    [19/Mar/2015:17:20:19 -0400] [main.go:40] <MESSAGE>

    If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows:

    [{{.Timestamp}}] [{{.File}}] {{.Message}}

    Available variables for standard logging:

    VariableExampleDescription
    Timestamp19/Mar/2015:17:20:19 -0400The date and time of the logging event.
    Filemain.go:40The file and line number of the logging statement.
    MessageHTTP: listening on 127.0.0.1:4180The details of the log statement.

    Configuring for use with the Nginx auth_request directive​

    This option requires --reverse-proxy option to be set.

    The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example:

    server {
      listen 443 ssl;
      server_name ...;
      include ssl/ssl.conf;

      location /oauth2/ {
        proxy_pass       http://127.0.0.1:4180;
        proxy_set_header Host                    $host;
        proxy_set_header X-Real-IP               $remote_addr;
        proxy_set_header X-Auth-Request-Redirect $request_uri;
        # or, if you are handling multiple domains:
        # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
      }
      location = /oauth2/auth {
        proxy_pass       http://127.0.0.1:4180;
        proxy_set_header Host             $host;
        proxy_set_header X-Real-IP        $remote_addr;
        proxy_set_header X-Forwarded-Uri  $request_uri;
        # nginx auth_request includes headers but not body
        proxy_set_header Content-Length   "";
        proxy_pass_request_body           off;
      }

      location / {
        auth_request /oauth2/auth;
        error_page 401 = /oauth2/sign_in;

        # pass information via X-User and X-Email headers to backend,
        # requires running with --set-xauthrequest flag
        auth_request_set $user   $upstream_http_x_auth_request_user;
        auth_request_set $email  $upstream_http_x_auth_request_email;
        proxy_set_header X-User  $user;
        proxy_set_header X-Email $email;

        # if you enabled --pass-access-token, this will pass the token to the backend
        auth_request_set $token  $upstream_http_x_auth_request_access_token;
        proxy_set_header X-Access-Token $token;

        # if you enabled --cookie-refresh, this is needed for it to work with auth_request
        auth_request_set $auth_cookie $upstream_http_set_cookie;
        add_header Set-Cookie $auth_cookie;

        # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
        # limit and so the OAuth2 Proxy splits these into multiple parts.
        # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
        # so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
        auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;

        # Extract the Cookie attributes from the first Set-Cookie header and append them
        # to the second part ($upstream_cookie_* variables only contain the raw cookie content)
        if ($auth_cookie ~* "(; .*)") {
            set $auth_cookie_name_0 $auth_cookie;
            set $auth_cookie_name_1 "auth_cookie_name_1=$auth_cookie_name_upstream_1$1";
        }

        # Send both Set-Cookie headers now if there was a second part
        if ($auth_cookie_name_upstream_1) {
            add_header Set-Cookie $auth_cookie_name_0;
            add_header Set-Cookie $auth_cookie_name_1;
        }

        proxy_pass http://backend/;
        # or "root /path/to/site;" or "fastcgi_pass ..." etc
      }
    }

    When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module.

    nginx.ingress.kubernetes.io/auth-response-headers: Authorization
    nginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uri
    nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth
    nginx.ingress.kubernetes.io/configuration-snippet: |
      auth_request_set $name_upstream_1 $upstream_cookie_name_1;

      access_by_lua_block {
        if ngx.var.name_upstream_1 ~= "" then
          ngx.header["Set-Cookie"] = "name_1=" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match("(; .*)")
        end
      }

    It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure).

    You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be "$upstream_cookie__oauth2_proxy_1" instead of "$upstream_cookie_name_1" and the new cookie-name should be "_oauth2_proxy_1=" instead of "name_1=".

    Configuring for use with the Traefik (v2) ForwardAuth middleware​

    This option requires --reverse-proxy option to be set.

    ForwardAuth with 401 errors middleware​

    The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration:

    http:
      routers:
        a-service:
          rule: "Host(`a-service.example.com`)"
          service: a-service-backend
          middlewares:
            - oauth-errors
            - oauth-auth
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
        oauth:
          rule: "Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)"
          middlewares:
            - auth-headers
          service: oauth-backend
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"

      services:
        a-service-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.2:7555
        oauth-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.1:4180

      middlewares:
        auth-headers:
          headers:
            sslRedirect: true
            stsSeconds: 315360000
            browserXssFilter: true
            contentTypeNosniff: true
            forceSTSHeader: true
            sslHost: example.com
            stsIncludeSubdomains: true
            stsPreload: true
            frameDeny: true
        oauth-auth:
          forwardAuth:
            address: https://oauth.example.com/oauth2/auth
            trustForwardHeader: true
        oauth-errors:
          errors:
            status:
              - "401-403"
            service: oauth-backend
            query: "/oauth2/sign_in?rd={url}"

    ForwardAuth with static upstreams configuration​

    Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint

    Following options need to be set on oauth2-proxy:

    • --upstream=static://202: Configures a static response for authenticated sessions
    • --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly
    http:
      routers:
        a-service-route-1:
          rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)"
          service: a-service-backend
          middlewares:
            - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
        a-service-route-2:
          rule: "Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)"
          service: a-service-backend
          middlewares:
            - oauth-auth-wo-redirect # unauthenticated session will return a 401
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
        services-oauth2-route:
          rule: "Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)"
          middlewares:
            - auth-headers
          service: oauth-backend
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"
        oauth2-proxy-route:
          rule: "Host(`oauth.example.com`) && PathPrefix(`/`)"
          middlewares:
            - auth-headers
          service: oauth-backend
          tls:
            certResolver: default
            domains:
              - main: "example.com"
                sans:
                  - "*.example.com"

      services:
        a-service-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.2:7555
        b-service-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.3:7555
        oauth-backend:
          loadBalancer:
            servers:
              - url: http://172.16.0.1:4180

      middlewares:
        auth-headers:
          headers:
            sslRedirect: true
            stsSeconds: 315360000
            browserXssFilter: true
            contentTypeNosniff: true
            forceSTSHeader: true
            sslHost: example.com
            stsIncludeSubdomains: true
            stsPreload: true
            frameDeny: true
        oauth-auth-redirect:
          forwardAuth:
            address: https://oauth.example.com/
            trustForwardHeader: true
            authResponseHeaders:
              - X-Auth-Request-Access-Token
              - Authorization
        oauth-auth-wo-redirect:
          forwardAuth:
            address: https://oauth.example.com/oauth2/auth
            trustForwardHeader: true
            authResponseHeaders:
              - X-Auth-Request-Access-Token
              - Authorization
    note

    If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/adfs/index.html b/docs/next/configuration/providers/adfs/index.html index 5940f4b3..b67fa145 100644 --- a/docs/next/configuration/providers/adfs/index.html +++ b/docs/next/configuration/providers/adfs/index.html @@ -4,7 +4,7 @@ ADFS | OAuth2 Proxy - + @@ -12,7 +12,7 @@
    Version: Next

    ADFS

    1. Open the ADFS administration console on your Windows Server and add a new Application Group
    2. Provide a name for the integration, select Server Application from the Standalone applications section and click Next
    3. Follow the wizard to get the client-id, client-secret and configure the application credentials
    4. Configure the proxy with
       --provider=adfs
       --client-id=<application ID from step 3>
       --client-secret=<value from step 3>

    Note: When using the ADFS Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/azure/index.html b/docs/next/configuration/providers/azure/index.html index 2fbb4e34..9d375d27 100644 --- a/docs/next/configuration/providers/azure/index.html +++ b/docs/next/configuration/providers/azure/index.html @@ -4,7 +4,7 @@ Azure | OAuth2 Proxy - + @@ -20,7 +20,7 @@ with --resource flag, be sure to append /.default at t https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent#the-default-scope for more details.
  • When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.
    • Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/azure_ad/index.html b/docs/next/configuration/providers/azure_ad/index.html index 5c29277f..6bc5f9cd 100644 --- a/docs/next/configuration/providers/azure_ad/index.html +++ b/docs/next/configuration/providers/azure_ad/index.html @@ -4,14 +4,14 @@ Microsoft Azure AD | OAuth2 Proxy - +
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/bitbucket/index.html b/docs/next/configuration/providers/bitbucket/index.html index 8743e88b..00bdd563 100644 --- a/docs/next/configuration/providers/bitbucket/index.html +++ b/docs/next/configuration/providers/bitbucket/index.html @@ -4,7 +4,7 @@ BitBucket | OAuth2 Proxy - + @@ -13,7 +13,7 @@ hostname that oauth2-proxy is running on.
  • In Permissions section select:
    • Account -> Email
    • Team membership -> Read
    • Repositories -> Read
  • Note the Client ID and Client Secret.

    • To use the provider, pass the following options:

       --provider=bitbucket
       --client-id=<Client ID>
       --client-secret=<Client Secret>

    The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=<Team name>. To restrict the access to only these users who have access to one selected repository use --bitbucket-repository=<Repository name>.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/digitalocean/index.html b/docs/next/configuration/providers/digitalocean/index.html index 03ed51d9..27863b24 100644 --- a/docs/next/configuration/providers/digitalocean/index.html +++ b/docs/next/configuration/providers/digitalocean/index.html @@ -4,7 +4,7 @@ DigitalOcean | OAuth2 Proxy - + @@ -12,7 +12,7 @@
    Version: Next

    DigitalOcean

    1. Create a new OAuth application
      • You can fill in the name, homepage, and description however you wish.
      • In the "Application callback URL" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL.
    2. Note the Client ID and Client Secret.

    To use the provider, pass the following options:

       --provider=digitalocean
       --client-id=<Client ID>
       --client-secret=<Client Secret>

    Alternatively, set the equivalent options in the config file. The redirect URL defaults to https://<requested host header>/oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/facebook/index.html b/docs/next/configuration/providers/facebook/index.html index a9c4057b..e2a42b0d 100644 --- a/docs/next/configuration/providers/facebook/index.html +++ b/docs/next/configuration/providers/facebook/index.html @@ -4,13 +4,13 @@ Facebook | OAuth2 Proxy - +
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/gitea/index.html b/docs/next/configuration/providers/gitea/index.html index 93f8d302..9cff349e 100644 --- a/docs/next/configuration/providers/gitea/index.html +++ b/docs/next/configuration/providers/gitea/index.html @@ -4,13 +4,13 @@ Gitea | OAuth2 Proxy - +
    Version: Next

    Gitea

    1. Create a new application: https://< your gitea host >/user/settings/applications
    2. Under Redirect URI enter the correct URL i.e. https://<proxied host>/oauth2/callback
    3. Note the Client ID and Client Secret.
    4. Pass the following options to the proxy:
        --provider="github"
        --redirect-url="https://<proxied host>/oauth2/callback"
        --provider-display-name="Gitea"
        --client-id="< client_id as generated by Gitea >"
        --client-secret="< client_secret as generated by Gitea >"
        --login-url="https://< your gitea host >/login/oauth/authorize"
        --redeem-url="https://< your gitea host >/login/oauth/access_token"
        --validate-url="https://< your gitea host >/api/v1/user/emails"
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/github/index.html b/docs/next/configuration/providers/github/index.html index 6b7920de..4f160d6d 100644 --- a/docs/next/configuration/providers/github/index.html +++ b/docs/next/configuration/providers/github/index.html @@ -4,7 +4,7 @@ GitHub | OAuth2 Proxy - + @@ -16,7 +16,7 @@ public repository or any access to a private repository:

    token for a user that has write access to the repository. The token must be created with at least the public_repo scope:

    -github-token="": the token to use when verifying repository collaborators

    To allow a user to log in with their username even if they do not belong to the specified org and team or collaborators, separated by a comma

    -github-user="": allow logins by username, separated by a comma

    If you are using GitHub enterprise, make sure you set the following to the appropriate url:

    -login-url="http(s)://<enterprise github host>/login/oauth/authorize"
    -redeem-url="http(s)://<enterprise github host>/login/oauth/access_token"
    -validate-url="http(s)://<enterprise github host>/api/v3"
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/gitlab/index.html b/docs/next/configuration/providers/gitlab/index.html index aefbca4b..9d74c898 100644 --- a/docs/next/configuration/providers/gitlab/index.html +++ b/docs/next/configuration/providers/gitlab/index.html @@ -4,7 +4,7 @@ GitLab | OAuth2 Proxy - + @@ -16,7 +16,7 @@ least the openid, profile and email scope https://myapp.com/oauth2/callback.

    If you need projects filtering, add the extra read_api scope to your application.

    The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps

        --provider="gitlab"
        --redirect-url="https://myapp.com/oauth2/callback" // Should be the same as the redirect url for the application in gitlab
        --client-id=GITLAB_CLIENT_ID
        --client-secret=GITLAB_CLIENT_SECRET
        --cookie-secret=COOKIE_SECRET

    Restricting by group membership is possible with the following option:

    --gitlab-group="mygroup,myothergroup": restrict logins to members of any of these groups (slug), separated by a comma

    If you are using self-hosted GitLab, make sure you set the following to the appropriate URL:

    --oidc-issuer-url="<your gitlab url>"

    If your self-hosted GitLab is on a subdirectory (e.g. domain.tld/gitlab), as opposed to its own subdomain (e.g. gitlab.domain.tld), you may need to add a redirect from domain.tld/oauth pointing at e.g. domain.tld/gitlab/oauth.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/google/index.html b/docs/next/configuration/providers/google/index.html index 3135af78..8dcb8026 100644 --- a/docs/next/configuration/providers/google/index.html +++ b/docs/next/configuration/providers/google/index.html @@ -4,7 +4,7 @@ Google (default) | OAuth2 Proxy - + @@ -24,7 +24,7 @@ refreshed ( about once an hour ).

    providers.New() to allow oauth2-proxy to use the new Provider.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/keycloak/index.html b/docs/next/configuration/providers/keycloak/index.html index 1dea329d..3a285108 100644 --- a/docs/next/configuration/providers/keycloak/index.html +++ b/docs/next/configuration/providers/keycloak/index.html @@ -4,7 +4,7 @@ Keycloak | OAuth2 Proxy - + @@ -14,7 +14,7 @@ flags can be used to specify which groups to limit access to.

    If these are populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response.

    The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/keycloak_oidc/index.html b/docs/next/configuration/providers/keycloak_oidc/index.html index a927f787..98d96ba8 100644 --- a/docs/next/configuration/providers/keycloak_oidc/index.html +++ b/docs/next/configuration/providers/keycloak_oidc/index.html @@ -4,7 +4,7 @@ Keycloak OIDC | OAuth2 Proxy - + @@ -38,7 +38,7 @@ and you should now have a client that maps group memberships into the JWT tokens these steps: Clients -> <your client's id> -> Client scopes -> Evaluate.
    Select a realm user and optional scope parameters such as groups, and generate the JSON representation of an access or id token to examine its contents.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/linkedin/index.html b/docs/next/configuration/providers/linkedin/index.html index 865e88e1..f9175d8c 100644 --- a/docs/next/configuration/providers/linkedin/index.html +++ b/docs/next/configuration/providers/linkedin/index.html @@ -4,13 +4,13 @@ LinkedIn | OAuth2 Proxy - +
    Version: Next

    LinkedIn

    For LinkedIn, the registration steps are:

    1. Create a new project: https://www.linkedin.com/secure/developer
    2. In the OAuth User Agreement section:
      • In default scope, select r_basicprofile and r_emailaddress.
      • In "OAuth 2.0 Redirect URLs", enter https://internal.yourcompany.com/oauth2/callback
    3. Fill in the remaining required fields and Save.
    4. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/login_gov/index.html b/docs/next/configuration/providers/login_gov/index.html index 9923db3f..245d246a 100644 --- a/docs/next/configuration/providers/login_gov/index.html +++ b/docs/next/configuration/providers/login_gov/index.html @@ -4,7 +4,7 @@ Login.gov | OAuth2 Proxy - + @@ -31,7 +31,7 @@ application running on http://localhost:3000/. In a real deploymen your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere.

    Skip OIDC discovery​

    Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata.

    In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually:

        -provider oidc
        -client-id oauth2-proxy
        -client-secret proxy
        -redirect-url http://127.0.0.1:4180/oauth2/callback
        -oidc-issuer-url http://127.0.0.1:5556
        -skip-oidc-discovery
        -login-url http://127.0.0.1:5556/authorize
        -redeem-url http://127.0.0.1:5556/token
        -oidc-jwks-url http://127.0.0.1:5556/keys
        -cookie-secure=false
        -email-domain example.com
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/nextcloud/index.html b/docs/next/configuration/providers/nextcloud/index.html index ace2ceeb..4b2d3ea2 100644 --- a/docs/next/configuration/providers/nextcloud/index.html +++ b/docs/next/configuration/providers/nextcloud/index.html @@ -4,7 +4,7 @@ NextCloud | OAuth2 Proxy - + @@ -17,7 +17,7 @@ form /index.php/apps/oauth2/* or /apps/oauth2/*.

    to set up the client id and client secret. Your "Redirection URI" will be https://internalapp.yourcompany.com/oauth2/callback.

        -provider nextcloud
        -client-id <from nextcloud admin>
        -client-secret <from nextcloud admin>
        -login-url="<your nextcloud url>/index.php/apps/oauth2/authorize"
        -redeem-url="<your nextcloud url>/index.php/apps/oauth2/api/v1/token"
        -validate-url="<your nextcloud url>/ocs/v2.php/cloud/user?format=json"

    Note: in all cases the validate-url will not have the index.php.

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/providers/openid_connect/index.html b/docs/next/configuration/providers/openid_connect/index.html index 24bf29d6..809e28a5 100644 --- a/docs/next/configuration/providers/openid_connect/index.html +++ b/docs/next/configuration/providers/openid_connect/index.html @@ -4,7 +4,7 @@ OpenID Connect | OAuth2 Proxy - + @@ -17,7 +17,7 @@ authorization server.
  • Fill out the Name with something See Okta documentation for more information on Authorization Servers

  • Navigate to Applications then select Add Application.

    • Select Web for the Platform setting.
    • Select OpenID Connect and click Create
    • Pick an Application Name such as Example App.
    • Set the Login redirect URI to https://example.corp.com.
    • Under General set the Allowed grant types to Authorization Code and Refresh Token.
    • Leave the rest as default, taking note of the Client ID and Client Secret.
    • Under Assignments select the users or groups you wish to access your application.

  • Create a configuration file like the following:

    provider = "oidc"
    redirect_url = "https://example.corp.com/oauth2/callback"
    oidc_issuer_url = "https://corp.okta.com/oauth2/abCd1234"
    upstreams = [
        "https://example.corp.com"
    ]
    email_domains = [
        "corp.com"
    ]
    client_id = "XXXXX"
    client_secret = "YYYYY"
    pass_access_token = true
    cookie_secret = "ZZZZZ"
    skip_provider_button = true

    • The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com. The client_id and client_secret are configured in the application settings. Generate a unique cookie_secret to encrypt the cookie.

    Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg

    Okta - localhost​

    1. Signup for developer account: https://developer.okta.com/signup/
    2. Create New Web Application: https://${your-okta-domain}/dev/console/apps/new
    3. Example Application Settings for localhost:
      • Name: My Web App
      • Base URIs: http://localhost:4180/
      • Login redirect URIs: http://localhost:4180/oauth2/callback
      • Logout redirect URIs: http://localhost:4180/
      • Group assignments: Everyone
      • Grant type allowed: Authorization Code and Refresh Token
    4. Make note of the Client ID and Client secret, they are needed in a future step
    5. Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as
    6. Example config file /etc/localhost.cfg
      provider = "oidc"
      redirect_url = "http://localhost:4180/oauth2/callback"
      oidc_issuer_url = "https://${your-okta-domain}/oauth2/default"
      upstreams = [
          "http://0.0.0.0:8080"
      ]
      email_domains = [
          "*"
      ]
      client_id = "XXX"
      client_secret = "YYY"
      pass_access_token = true
      cookie_secret = "ZZZ"
      cookie_secure = false
      skip_provider_button = true
      # Note: use the following for testing within a container
      # http_address = "0.0.0.0:4180"
    7. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/session_storage/index.html b/docs/next/configuration/session_storage/index.html index d92c9fa8..4f19283c 100644 --- a/docs/next/configuration/session_storage/index.html +++ b/docs/next/configuration/session_storage/index.html @@ -4,7 +4,7 @@ Session Storage | OAuth2 Proxy - + @@ -37,7 +37,7 @@ and --redis-sentinel-connection-urls appropriately.

    Redis Clu --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately.

    Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive.

    Note, if Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. For example: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/configuration/tls/index.html b/docs/next/configuration/tls/index.html index 1d0fee1f..981177f7 100644 --- a/docs/next/configuration/tls/index.html +++ b/docs/next/configuration/tls/index.html @@ -4,7 +4,7 @@ TLS Configuration | OAuth2 Proxy - + @@ -19,7 +19,7 @@ external load balancer like Amazon ELB or Google Platform Load Balancing) use oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/.

    An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS:

    server {
        listen 443 default ssl;
        server_name internal.yourcompany.com;
        ssl_certificate /path/to/cert.pem;
        ssl_certificate_key /path/to/cert.key;
        add_header Strict-Transport-Security max-age=2592000;

        location / {
            proxy_pass http://127.0.0.1:4180;
            proxy_set_header Host $host;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_connect_timeout 1;
            proxy_send_timeout 30;
            proxy_read_timeout 30;
        }
    }

  • The command line to run oauth2-proxy in this configuration would look like this:

    ./oauth2-proxy \
       --email-domain="yourcompany.com"  \
       --upstream=http://127.0.0.1:8080/ \
       --cookie-secret=... \
       --cookie-secure=true \
       --provider=... \
       --reverse-proxy=true \
       --client-id=... \
       --client-secret=...
    • Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/features/endpoints/index.html b/docs/next/features/endpoints/index.html index 79887b43..3fdb0c4b 100644 --- a/docs/next/features/endpoints/index.html +++ b/docs/next/features/endpoints/index.html @@ -4,13 +4,13 @@ Endpoints | OAuth2 Proxy - +
    Version: Next

    Endpoints

    OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable.

    • /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info
    • /ping - returns a 200 OK response, which is intended for use with health checks
    • /ready - returns a 200 OK response if all the underlying connections (e.g., Redis store) are connected
    • /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default
    • /oauth2/sign_in - the login page, which also doubles as a sign-out page (it clears cookies)
    • /oauth2/sign_out - this URL is used to clear the session cookie
    • /oauth2/start - a URL that will redirect to start the OAuth cycle
    • /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url.
    • /oauth2/userinfo - the URL is used to return user's email from the session in JSON format.
    • /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive
    • /oauth2/static/* - stylesheets and other dependencies used in the sign_in and error pages

    Sign out​

    To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign-out page afterward using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!):

    /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page

    Alternatively, include the redirect URL in the X-Auth-Request-Redirect header:

    GET /oauth2/sign_out HTTP/1.1
    X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page
    ...

    (The "sign_out_page" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.)

    BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored. Make sure to include the actual domain and port (if needed) and not the URL (e.g "localhost:8081" instead of "http://localhost:8081").

    Auth​

    This endpoint returns 202 Accepted response or a 401 Unauthorized response.

    It can be configured using the following query parameters:

    • allowed_groups: comma separated list of allowed groups
    • allowed_email_domains: comma separated list of allowed email domains
    • allowed_emails: comma separated list of allowed emails
    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/index.html b/docs/next/index.html index 8ff49a02..c5aa9bad 100644 --- a/docs/next/index.html +++ b/docs/next/index.html @@ -4,13 +4,13 @@ Installation | OAuth2 Proxy - +
    Version: Next

    Installation

    1. Choose how to deploy:

      a. Using a Prebuilt Binary (current release is v7.5.1)

      b. Using Go to install the latest release

      $ go install github.com/oauth2-proxy/oauth2-proxy/v7@latest
      # which will put the binary in `$GOROOT/bin`

      c. Using a Prebuilt Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available)

      d. Using a Pre-Release Nightly Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available)

      e. Using the official Kubernetes manifest (Helm)

      Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0.

      $ sha256sum -c sha256sum.txt
      oauth2-proxy-x.y.z.linux-amd64: OK

    2. Select a Provider and Register an OAuth Application with a Provider

    3. Configure OAuth2 Proxy using config file, command line options, or environment variables

    4. Configure SSL or Deploy behind an SSL endpoint (example provided for Nginx)

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/docs/next/search-index.json b/docs/next/search-index.json index eaf8f6a2..cf974c39 100644 --- a/docs/next/search-index.json +++ b/docs/next/search-index.json @@ -1 +1 @@ -[{"documents":[{"i":1,"t":"Installation","u":"/oauth2-proxy/docs/next/","b":["Docs"]},{"i":3,"t":"Behaviour","u":"/oauth2-proxy/docs/next/behaviour","b":["Docs"]},{"i":5,"t":"Contribution Guide","u":"/oauth2-proxy/docs/next/community/contribution","b":["Docs","Community"]},{"i":13,"t":"Security","u":"/oauth2-proxy/docs/next/community/security","b":["Docs","Community"]},{"i":19,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/next/configuration/providers/","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":25,"t":"Alpha Configuration","u":"/oauth2-proxy/docs/next/configuration/alpha-config","b":["Docs","Configuration"]},{"i":84,"t":"ADFS","u":"/oauth2-proxy/docs/next/configuration/providers/adfs","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":86,"t":"Azure","u":"/oauth2-proxy/docs/next/configuration/providers/azure","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":88,"t":"Microsoft Azure AD","u":"/oauth2-proxy/docs/next/configuration/providers/azure_ad","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":90,"t":"DigitalOcean","u":"/oauth2-proxy/docs/next/configuration/providers/digitalocean","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":92,"t":"BitBucket","u":"/oauth2-proxy/docs/next/configuration/providers/bitbucket","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":94,"t":"Facebook","u":"/oauth2-proxy/docs/next/configuration/providers/facebook","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":96,"t":"Gitea","u":"/oauth2-proxy/docs/next/configuration/providers/gitea","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":98,"t":"Overview","u":"/oauth2-proxy/docs/next/configuration/overview","b":["Docs","Configuration"]},{"i":126,"t":"GitLab","u":"/oauth2-proxy/docs/next/configuration/providers/gitlab","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":128,"t":"GitHub","u":"/oauth2-proxy/docs/next/configuration/providers/github","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":130,"t":"Google (default)","u":"/oauth2-proxy/docs/next/configuration/providers/google","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":132,"t":"Keycloak","u":"/oauth2-proxy/docs/next/configuration/providers/keycloak","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":134,"t":"Keycloak OIDC","u":"/oauth2-proxy/docs/next/configuration/providers/keycloak_oidc","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":136,"t":"LinkedIn","u":"/oauth2-proxy/docs/next/configuration/providers/linkedin","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":138,"t":"Login.gov","u":"/oauth2-proxy/docs/next/configuration/providers/login_gov","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":140,"t":"Session Storage","u":"/oauth2-proxy/docs/next/configuration/session_storage","b":["Docs","Configuration"]},{"i":146,"t":"OpenID Connect","u":"/oauth2-proxy/docs/next/configuration/providers/openid_connect","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":148,"t":"NextCloud","u":"/oauth2-proxy/docs/next/configuration/providers/nextcloud","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":150,"t":"TLS Configuration","u":"/oauth2-proxy/docs/next/configuration/tls","b":["Docs","Configuration"]},{"i":156,"t":"Endpoints","u":"/oauth2-proxy/docs/next/features/endpoints","b":["Docs","Features"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/1",[0,3.291]],["t/3",[1,3.291]],["t/5",[2,2.479,3,2.479]],["t/13",[4,3.291]],["t/19",[5,1.989,6,1.989,7,1.406]],["t/25",[7,1.752,8,2.479]],["t/84",[9,3.291]],["t/86",[10,2.709]],["t/88",[10,1.637,11,1.989,12,1.989]],["t/90",[13,3.291]],["t/92",[14,3.291]],["t/94",[15,3.291]],["t/96",[16,3.291]],["t/98",[17,3.291]],["t/126",[18,3.291]],["t/128",[19,3.291]],["t/130",[20,2.479,21,2.479]],["t/132",[22,2.709]],["t/134",[22,2.041,23,2.479]],["t/136",[24,3.291]],["t/138",[25,3.291]],["t/140",[26,2.479,27,2.479]],["t/146",[28,2.479,29,2.479]],["t/148",[30,3.291]],["t/150",[7,1.752,31,2.479]],["t/156",[32,3.291]]],"invertedIndex":[["ad",{"_index":12,"t":{"88":{"position":[[16,2]]}}}],["adf",{"_index":9,"t":{"84":{"position":[[0,4]]}}}],["alpha",{"_index":8,"t":{"25":{"position":[[0,5]]}}}],["azur",{"_index":10,"t":{"86":{"position":[[0,5]]},"88":{"position":[[10,5]]}}}],["behaviour",{"_index":1,"t":{"3":{"position":[[0,9]]}}}],["bitbucket",{"_index":14,"t":{"92":{"position":[[0,9]]}}}],["configur",{"_index":7,"t":{"19":{"position":[[15,13]]},"25":{"position":[[6,13]]},"150":{"position":[[4,13]]}}}],["connect",{"_index":29,"t":{"146":{"position":[[7,7]]}}}],["contribut",{"_index":2,"t":{"5":{"position":[[0,12]]}}}],["default",{"_index":21,"t":{"130":{"position":[[7,9]]}}}],["digitalocean",{"_index":13,"t":{"90":{"position":[[0,12]]}}}],["endpoint",{"_index":32,"t":{"156":{"position":[[0,9]]}}}],["facebook",{"_index":15,"t":{"94":{"position":[[0,8]]}}}],["gitea",{"_index":16,"t":{"96":{"position":[[0,5]]}}}],["github",{"_index":19,"t":{"128":{"position":[[0,6]]}}}],["gitlab",{"_index":18,"t":{"126":{"position":[[0,6]]}}}],["googl",{"_index":20,"t":{"130":{"position":[[0,6]]}}}],["guid",{"_index":3,"t":{"5":{"position":[[13,5]]}}}],["instal",{"_index":0,"t":{"1":{"position":[[0,12]]}}}],["keycloak",{"_index":22,"t":{"132":{"position":[[0,8]]},"134":{"position":[[0,8]]}}}],["linkedin",{"_index":24,"t":{"136":{"position":[[0,8]]}}}],["login.gov",{"_index":25,"t":{"138":{"position":[[0,9]]}}}],["microsoft",{"_index":11,"t":{"88":{"position":[[0,9]]}}}],["nextcloud",{"_index":30,"t":{"148":{"position":[[0,9]]}}}],["oauth",{"_index":5,"t":{"19":{"position":[[0,5]]}}}],["oidc",{"_index":23,"t":{"134":{"position":[[9,4]]}}}],["openid",{"_index":28,"t":{"146":{"position":[[0,6]]}}}],["overview",{"_index":17,"t":{"98":{"position":[[0,8]]}}}],["provid",{"_index":6,"t":{"19":{"position":[[6,8]]}}}],["secur",{"_index":4,"t":{"13":{"position":[[0,8]]}}}],["session",{"_index":26,"t":{"140":{"position":[[0,7]]}}}],["storag",{"_index":27,"t":{"140":{"position":[[8,7]]}}}],["tl",{"_index":31,"t":{"150":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":7,"t":"Go version","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":5},{"i":9,"t":"Preparing your fork","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":5},{"i":11,"t":"Testing / Debugging","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":5},{"i":15,"t":"Security Disclosures","u":"/oauth2-proxy/docs/next/community/security","h":"#security-disclosures","p":13},{"i":17,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/next/community/security","h":"#how-will-we-respond-to-disclosures","p":13},{"i":21,"t":"Email Authentication","u":"/oauth2-proxy/docs/next/configuration/providers/","h":"#email-authentication","p":19},{"i":23,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/next/configuration/providers/","h":"#adding-a-new-provider","p":19},{"i":27,"t":"Using Alpha Configuration","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#using-alpha-configuration","p":25},{"i":29,"t":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":25},{"i":31,"t":"Removed options","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#removed-options","p":25},{"i":33,"t":"Configuration Reference","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#configuration-reference","p":25},{"i":34,"t":"ADFSOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#adfsoptions","p":25},{"i":36,"t":"AlphaOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#alphaoptions","p":25},{"i":38,"t":"AzureOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#azureoptions","p":25},{"i":40,"t":"BitbucketOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#bitbucketoptions","p":25},{"i":42,"t":"ClaimSource","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#claimsource","p":25},{"i":44,"t":"Duration","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#duration","p":25},{"i":46,"t":"GitHubOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#githuboptions","p":25},{"i":48,"t":"GitLabOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#gitlaboptions","p":25},{"i":50,"t":"GoogleOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#googleoptions","p":25},{"i":52,"t":"Header","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#header","p":25},{"i":54,"t":"HeaderValue","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#headervalue","p":25},{"i":56,"t":"KeycloakOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#keycloakoptions","p":25},{"i":58,"t":"LoginGovOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#logingovoptions","p":25},{"i":60,"t":"LoginURLParameter","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#loginurlparameter","p":25},{"i":62,"t":"A parameter whose value is fixed","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"","p":25},{"i":64,"t":"OIDCOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#oidcoptions","p":25},{"i":66,"t":"Provider","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#provider","p":25},{"i":68,"t":"ProviderType","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#providertype","p":25},{"i":70,"t":"Providers","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#providers","p":25},{"i":72,"t":"SecretSource","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#secretsource","p":25},{"i":74,"t":"Server","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#server","p":25},{"i":76,"t":"TLS","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#tls","p":25},{"i":78,"t":"URLParameterRule","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#urlparameterrule","p":25},{"i":80,"t":"Upstream","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#upstream","p":25},{"i":82,"t":"UpstreamConfig","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#upstreamconfig","p":25},{"i":100,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#generating-a-cookie-secret","p":98},{"i":102,"t":"Config File","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#config-file","p":98},{"i":104,"t":"Command Line Options","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#command-line-options","p":98},{"i":106,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#upstreams-configuration","p":98},{"i":108,"t":"Environment variables","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#environment-variables","p":98},{"i":110,"t":"Logging Configuration","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#logging-configuration","p":98},{"i":112,"t":"Auth Log Format","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#auth-log-format","p":98},{"i":114,"t":"Request Log Format","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#request-log-format","p":98},{"i":116,"t":"Standard Log Format","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#standard-log-format","p":98},{"i":118,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":98},{"i":120,"t":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":98},{"i":122,"t":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":98},{"i":124,"t":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":98},{"i":142,"t":"Cookie Storage","u":"/oauth2-proxy/docs/next/configuration/session_storage","h":"#cookie-storage","p":140},{"i":144,"t":"Redis Storage","u":"/oauth2-proxy/docs/next/configuration/session_storage","h":"#redis-storage","p":140},{"i":152,"t":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/next/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":150},{"i":154,"t":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/next/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":150},{"i":158,"t":"Sign out","u":"/oauth2-proxy/docs/next/features/endpoints","h":"#sign-out","p":156},{"i":160,"t":"Auth","u":"/oauth2-proxy/docs/next/features/endpoints","h":"#auth","p":156}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/7",[0,3.673,1,3.673]],["t/9",[2,3.673,3,3.673]],["t/11",[4,3.06,5,3.06,6,3.06]],["t/15",[7,3.673,8,3.154]],["t/17",[8,3.154,9,3.673]],["t/21",[10,3.673,11,3.673]],["t/23",[12,3.06,13,2.628,14,2.344]],["t/27",[15,2.344,16,3.06,17,1.594]],["t/29",[13,2.252,17,1.366,18,2.622,19,2.622]],["t/31",[20,3.673,21,3.154]],["t/33",[17,1.913,22,3.673]],["t/34",[23,4.592]],["t/36",[24,4.592]],["t/38",[25,4.592]],["t/40",[26,4.592]],["t/42",[27,4.592]],["t/44",[28,4.592]],["t/46",[29,4.592]],["t/48",[30,4.592]],["t/50",[31,4.592]],["t/52",[32,4.592]],["t/54",[33,4.592]],["t/56",[34,4.592]],["t/58",[35,4.592]],["t/60",[36,4.592]],["t/62",[37,2.622,38,2.622,39,2.622,40,2.622]],["t/64",[41,4.592]],["t/66",[14,3.517]],["t/68",[42,4.592]],["t/70",[14,3.517]],["t/72",[43,4.592]],["t/74",[44,4.592]],["t/76",[45,3.517]],["t/78",[46,4.592]],["t/80",[47,3.517]],["t/82",[48,4.592]],["t/100",[49,3.06,50,2.628,51,3.06]],["t/102",[52,3.673,53,3.673]],["t/104",[21,2.628,54,3.06,55,3.06]],["t/106",[17,1.913,47,2.813]],["t/108",[56,3.673,57,3.673]],["t/110",[17,1.913,58,2.558]],["t/112",[58,2.131,59,2.628,60,2.344]],["t/114",[58,2.131,60,2.344,61,3.06]],["t/116",[58,2.131,60,2.344,62,3.06]],["t/118",[15,1.757,17,1.195,63,1.971,64,2.294,65,2.294]],["t/120",[15,1.562,17,1.062,66,2.039,67,2.039,68,1.562,69,1.751]],["t/122",[68,2.009,69,2.252,70,2.622,71,2.622]],["t/124",[17,1.366,47,2.009,68,2.009,72,2.622]],["t/142",[50,3.154,73,3.154]],["t/144",[73,3.154,74,3.673]],["t/152",[45,2.009,75,2.252,76,2.622,77,2.252]],["t/154",[45,1.562,63,1.751,75,1.751,77,1.751,78,2.039,79,2.039]],["t/158",[80,3.673,81,3.673]],["t/160",[59,3.944]]],"invertedIndex":[["",{"_index":5,"t":{"11":{"position":[[8,1]]}}}],["401",{"_index":70,"t":{"122":{"position":[[17,3]]}}}],["ad",{"_index":12,"t":{"23":{"position":[[0,6]]}}}],["adfsopt",{"_index":23,"t":{"34":{"position":[[0,11]]}}}],["alpha",{"_index":16,"t":{"27":{"position":[[6,5]]}}}],["alphaopt",{"_index":24,"t":{"36":{"position":[[0,12]]}}}],["auth",{"_index":59,"t":{"112":{"position":[[0,4]]},"160":{"position":[[0,4]]}}}],["auth_request",{"_index":64,"t":{"118":{"position":[[35,12]]}}}],["authent",{"_index":11,"t":{"21":{"position":[[6,14]]}}}],["azureopt",{"_index":25,"t":{"38":{"position":[[0,12]]}}}],["bitbucketopt",{"_index":26,"t":{"40":{"position":[[0,16]]}}}],["claimsourc",{"_index":27,"t":{"42":{"position":[[0,11]]}}}],["command",{"_index":54,"t":{"104":{"position":[[0,7]]}}}],["config",{"_index":52,"t":{"102":{"position":[[0,6]]}}}],["configur",{"_index":17,"t":{"27":{"position":[[12,13]]},"29":{"position":[[11,13]]},"33":{"position":[[0,13]]},"106":{"position":[[10,13]]},"110":{"position":[[8,13]]},"118":{"position":[[0,11]]},"120":{"position":[[0,11]]},"124":{"position":[[34,13]]}}}],["convert",{"_index":18,"t":{"29":{"position":[[0,10]]}}}],["cooki",{"_index":50,"t":{"100":{"position":[[13,6]]},"142":{"position":[[0,6]]}}}],["debug",{"_index":6,"t":{"11":{"position":[[10,9]]}}}],["direct",{"_index":65,"t":{"118":{"position":[[48,9]]}}}],["disclosur",{"_index":8,"t":{"15":{"position":[[9,11]]},"17":{"position":[[23,12]]}}}],["durat",{"_index":28,"t":{"44":{"position":[[0,8]]}}}],["e.g",{"_index":79,"t":{"154":{"position":[[32,4]]}}}],["email",{"_index":10,"t":{"21":{"position":[[0,5]]}}}],["environ",{"_index":56,"t":{"108":{"position":[[0,11]]}}}],["error",{"_index":71,"t":{"122":{"position":[[21,6]]}}}],["file",{"_index":53,"t":{"102":{"position":[[7,4]]}}}],["fix",{"_index":40,"t":{"62":{"position":[[27,5]]}}}],["fork",{"_index":3,"t":{"9":{"position":[[15,4]]}}}],["format",{"_index":60,"t":{"112":{"position":[[9,6]]},"114":{"position":[[12,6]]},"116":{"position":[[13,6]]}}}],["forwardauth",{"_index":68,"t":{"120":{"position":[[42,11]]},"122":{"position":[[0,11]]},"124":{"position":[[0,11]]}}}],["gener",{"_index":49,"t":{"100":{"position":[[0,10]]}}}],["githubopt",{"_index":29,"t":{"46":{"position":[[0,13]]}}}],["gitlabopt",{"_index":30,"t":{"48":{"position":[[0,13]]}}}],["go",{"_index":0,"t":{"7":{"position":[[0,2]]}}}],["googleopt",{"_index":31,"t":{"50":{"position":[[0,13]]}}}],["header",{"_index":32,"t":{"52":{"position":[[0,6]]}}}],["headervalu",{"_index":33,"t":{"54":{"position":[[0,11]]}}}],["keycloakopt",{"_index":34,"t":{"56":{"position":[[0,15]]}}}],["line",{"_index":55,"t":{"104":{"position":[[8,4]]}}}],["log",{"_index":58,"t":{"110":{"position":[[0,7]]},"112":{"position":[[5,3]]},"114":{"position":[[8,3]]},"116":{"position":[[9,3]]}}}],["logingovopt",{"_index":35,"t":{"58":{"position":[[0,15]]}}}],["loginurlparamet",{"_index":36,"t":{"60":{"position":[[0,17]]}}}],["middlewar",{"_index":69,"t":{"120":{"position":[[54,10]]},"122":{"position":[[28,10]]}}}],["new",{"_index":13,"t":{"23":{"position":[[9,3]]},"29":{"position":[[32,3]]}}}],["nginx",{"_index":63,"t":{"118":{"position":[[29,5]]},"154":{"position":[[37,5]]}}}],["oauth2",{"_index":76,"t":{"152":{"position":[[17,6]]}}}],["oidcopt",{"_index":41,"t":{"64":{"position":[[0,11]]}}}],["option",{"_index":21,"t":{"31":{"position":[[8,7]]},"104":{"position":[[13,7]]}}}],["out",{"_index":81,"t":{"158":{"position":[[5,3]]}}}],["paramet",{"_index":37,"t":{"62":{"position":[[2,9]]}}}],["prepar",{"_index":2,"t":{"9":{"position":[[0,9]]}}}],["provid",{"_index":14,"t":{"23":{"position":[[13,8]]},"66":{"position":[[0,8]]},"70":{"position":[[0,9]]}}}],["providertyp",{"_index":42,"t":{"68":{"position":[[0,12]]}}}],["proxi",{"_index":77,"t":{"152":{"position":[[24,5]]},"154":{"position":[[25,6]]}}}],["redi",{"_index":74,"t":{"144":{"position":[[0,5]]}}}],["refer",{"_index":22,"t":{"33":{"position":[[14,9]]}}}],["remov",{"_index":20,"t":{"31":{"position":[[0,7]]}}}],["request",{"_index":61,"t":{"114":{"position":[[0,7]]}}}],["respond",{"_index":9,"t":{"17":{"position":[[12,7]]}}}],["revers",{"_index":78,"t":{"154":{"position":[[17,7]]}}}],["secret",{"_index":51,"t":{"100":{"position":[[20,6]]}}}],["secretsourc",{"_index":43,"t":{"72":{"position":[[0,12]]}}}],["secur",{"_index":7,"t":{"15":{"position":[[0,8]]}}}],["server",{"_index":44,"t":{"74":{"position":[[0,6]]}}}],["sign",{"_index":80,"t":{"158":{"position":[[0,4]]}}}],["standard",{"_index":62,"t":{"116":{"position":[[0,8]]}}}],["static",{"_index":72,"t":{"124":{"position":[[17,6]]}}}],["storag",{"_index":73,"t":{"142":{"position":[[7,7]]},"144":{"position":[[6,7]]}}}],["structur",{"_index":19,"t":{"29":{"position":[[36,9]]}}}],["termin",{"_index":75,"t":{"152":{"position":[[0,9]]},"154":{"position":[[0,9]]}}}],["test",{"_index":4,"t":{"11":{"position":[[0,7]]}}}],["tl",{"_index":45,"t":{"76":{"position":[[0,3]]},"152":{"position":[[10,3]]},"154":{"position":[[10,3]]}}}],["traefik",{"_index":66,"t":{"120":{"position":[[29,7]]}}}],["upstream",{"_index":47,"t":{"80":{"position":[[0,8]]},"106":{"position":[[0,9]]},"124":{"position":[[24,9]]}}}],["upstreamconfig",{"_index":48,"t":{"82":{"position":[[0,14]]}}}],["urlparameterrul",{"_index":46,"t":{"78":{"position":[[0,16]]}}}],["us",{"_index":15,"t":{"27":{"position":[[0,5]]},"118":{"position":[[16,3]]},"120":{"position":[[16,3]]}}}],["v2",{"_index":67,"t":{"120":{"position":[[37,4]]}}}],["valu",{"_index":39,"t":{"62":{"position":[[18,5]]}}}],["variabl",{"_index":57,"t":{"108":{"position":[[12,9]]}}}],["version",{"_index":1,"t":{"7":{"position":[[3,7]]}}}],["whose",{"_index":38,"t":{"62":{"position":[[12,5]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":2,"t":"Choose how to deploy: a. Using a Prebuilt Binary (current release is v7.5.1) b. Using Go to install the latest release $ go install github.com/oauth2-proxy/oauth2-proxy/v7@latest# which will put the binary in `$GOROOT/bin` c. Using a Prebuilt Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available) d. Using a Pre-Release Nightly Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available) e. Using the official Kubernetes manifest (Helm) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. $ sha256sum -c sha256sum.txtoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind an SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/next/","h":"","p":1},{"i":4,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/next/behaviour","h":"","p":3},{"i":6,"t":"We track bugs and issues using Github. If you find a bug, please open an Issue. When opening an Issue or Pull Request please follow the preconfigured template and take special note of the checkboxes. If you want to fix a bug, add a new feature or extend existing functionality, please create a fork, create a feature branch and open a PR back to this repo. Please mention open bug issue number(s) within your PR if applicable. We suggest using Visual Studio Code with the official Go for Visual Studio Code extension.","s":"Contribution Guide","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":5},{"i":8,"t":"This project is currently still using go 1.19. You can follow the installation guide for go here. And you can find go version 1.19 in the archived section here.","s":"Go version","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":5},{"i":10,"t":"Clone your fork, create a feature branch and update the depedencies to get started. git clone git@github.com:/oauth2-proxycd oauth2-proxygit branch feature/git push --set-upstream origin feature/go mod download","s":"Preparing your fork","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":5},{"i":12,"t":"For starting oauth2-proxy locally open the debugging tab and create the launch.json and select Go: Launch Package. { \"version\": \"0.2.0\", \"configurations\": [ { \"name\": \"Launch OAuth2-Proxy with Dex\", \"type\": \"go\", \"request\": \"launch\", \"mode\": \"auto\", \"program\": \"${workspaceFolder}\", \"args\": [ \"--config\", // The following configuration contains settings for a locally deployed // upstream and dex as an idetity provider \"contrib/local-environment/oauth2-proxy.cfg\" ] }, { \"name\": \"Launch OAuth2-Proxy with Keycloak\", \"type\": \"go\", \"request\": \"launch\", \"mode\": \"auto\", \"program\": \"${workspaceFolder}\", \"args\": [ \"--config\", // The following configuration contains settings for a locally deployed // upstream and keycloak as an idetity provider \"contrib/local-environment/oauth2-proxy-keycloak.cfg\" ] } ]} Before you can start your local version of oauth2-proxy, you will have to use the provided docker compose files to start a local upstream service and identity provider. We suggest using httpbin as your upstream for testing as it allows for request and response introspection of all things HTTP. Open a terminal and switch to the contrib/local-environment directory. Dex as your IdP: docker compose -f docker-compose.yaml up dex etcd httpbin Keycloak as your IdP: docker compose -f docker-compose-keycloak.yaml up keycloak httpbin The username for both is admin@example.com and password is password. Start oauth2-proxy from the debug tab and open http://oauth2-proxy.localtest.me:4180/ for testing.","s":"Testing / Debugging","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":5},{"i":14,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/next/community/security","h":"","p":13},{"i":16,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/next/community/security","h":"#security-disclosures","p":13},{"i":18,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/next/community/security","h":"#how-will-we-respond-to-disclosures","p":13},{"i":20,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure ADFS Facebook GitHub Gitea Keycloak/Keycloak OIDC GitLab LinkedIn Microsoft Azure AD OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/next/configuration/providers/","h":"","p":19},{"i":22,"t":"To authorize a specific email-domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/next/configuration/providers/","h":"#email-authentication","p":19},{"i":24,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/next/configuration/providers/","h":"#adding-a-new-provider","p":19},{"i":26,"t":"danger This page contains documentation for alpha features. We reserve the right to make breaking changes to the features detailed within this page with no notice. Options described in this page may be changed, removed, renamed or moved without prior warning. Please beware of this before you use alpha configuration options. This page details a set of alpha configuration options in a new format. Going forward we are intending to add structured configuration in YAML format to replace the existing TOML based configuration file and flags. Below is a reference for the structure of the configuration, with AlphaOptions as the root of the configuration. When using alpha configuration, your config file will look something like below: upstreams: - id: ... ...: ...injectRequestHeaders: - name: ... ...: ...injectResponseHeaders: - name: ... ...: ... Please browse the reference below for the structure of the new configuration format.","s":"Alpha Configuration","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"","p":25},{"i":28,"t":"To use the new alpha configuration, generate a YAML file based on the format described in the reference below. Provide the path to this file using the --alpha-config flag. note When using the --alpha-config flag, some options are no longer available. See removed options below for more information.","s":"Using Alpha Configuration","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#using-alpha-configuration","p":25},{"i":30,"t":"Before adding the new --alpha-config option, start OAuth2 Proxy using the convert-config-to-alpha flag to convert existing configuration to the new format. oauth2-proxy --convert-config-to-alpha --config ./path/to/existing/config.cfg This will convert any options supported by the new format to YAML and print the new configuration to STDOUT. Copy this to a new file, remove any options from your existing configuration noted in removed options and then start OAuth2 Proxy using the new config. oauth2-proxy --alpha-config ./path/to/new/config.yaml --config ./path/to/existing/config.cfg","s":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":25},{"i":32,"t":"The following flags/options and their respective environment variables are no longer available when using alpha configuration: flush-interval/flush_interval pass-host-header/pass_host_header proxy-websockets/proxy_websockets ssl-upstream-insecure-skip-verify/ssl_upstream_insecure_skip_verify upstream/upstreams pass-basic-auth/pass_basic_auth pass-access-token/pass_access_token pass-user-headers/pass_user_headers pass-authorization-header/pass_authorization_header set-basic-auth/set_basic_auth set-xauthrequest/set_xauthrequest set-authorization-header/set_authorization_header prefer-email-to-user/prefer_email_to_user basic-auth-password/basic_auth_password skip-auth-strip-headers/skip_auth_strip_headers client-id/client_id client-secret/client_secret, and client-secret-file/client_secret_file provider provider-display-name/provider_display_name provider-ca-file/provider_ca_files login-url/login_url redeem-url/redeem_url profile-url/profile_url resource validate-url/validate_url scope prompt approval-prompt/approval_prompt acr-values/acr_values user-id-claim/user_id_claim allowed-group/allowed_groups allowed-role/allowed_roles jwt-key/jwt_key jwt-key-file/jwt_key_file pubjwk-url/pubjwk_url and all provider-specific options, i.e. any option whose name includes oidc, azure, bitbucket, github, gitlab, google or keycloak. Attempting to use any of these options via flags or via config when --alpha-config is set will result in an error. info You must remove these options before starting OAuth2 Proxy with --alpha-config","s":"Removed options","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#removed-options","p":25},{"i":35,"t":"(Appears on: Provider) Field Type Description skipScope bool Skip adding the scope parameter in login requestDefault value is 'false'","s":"ADFSOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#adfsoptions","p":25},{"i":37,"t":"AlphaOptions contains alpha structured configuration options. Usage of these options allows users to access alpha features that are not available as part of the primary configuration structure for OAuth2 Proxy. danger The options within this structure are considered alpha. They may change between releases without notice. Field Type Description upstreamConfig UpstreamConfig UpstreamConfig is used to configure upstream servers.Once a user is authenticated, requests to the server will be proxied tothese upstream servers based on the path mappings defined in this list. injectRequestHeaders []Header InjectRequestHeaders is used to configure headers that should be addedto requests to upstream servers.Headers may source values from either the authenticated user's sessionor from a static secret value. injectResponseHeaders []Header InjectResponseHeaders is used to configure headers that should be addedto responses from the proxy.This is typically used when using the proxy as an external authenticationprovider in conjunction with another proxy such as NGINX and itsauth_request module.Headers may source values from either the authenticated user's sessionor from a static secret value. server Server Server is used to configure the HTTP(S) server for the proxy application.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. metricsServer Server MetricsServer is used to configure the HTTP(S) server for metrics.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. providers Providers Providers is used to configure multiple providers.","s":"AlphaOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#alphaoptions","p":25},{"i":39,"t":"(Appears on: Provider) Field Type Description tenant string Tenant directs to a tenant-specific or common (tenant-independent) endpointDefault value is 'common' graphGroupField string GraphGroupField configures the group field to be used when building the groups list from Microsoft GraphDefault value is 'id'","s":"AzureOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#azureoptions","p":25},{"i":41,"t":"(Appears on: Provider) Field Type Description team string Team sets restrict logins to members of this team repository string Repository sets restrict logins to user with access to this repository","s":"BitbucketOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#bitbucketoptions","p":25},{"i":43,"t":"(Appears on: HeaderValue) ClaimSource allows loading a header value from a claim within the session Field Type Description claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"ClaimSource","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#claimsource","p":25},{"i":45,"t":"(string alias)​ (Appears on: Upstream) Duration is as string representation of a period of time. A duration string is a is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\", \"-1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".","s":"Duration","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#duration","p":25},{"i":47,"t":"(Appears on: Provider) Field Type Description org string Org sets restrict logins to members of this organisation team string Team sets restrict logins to members of this team repo string Repo sets restrict logins to collaborators of this repository token string Token is the token to use when verifying repository collaboratorsit must have push access to the repository users []string Users allows users with these usernames to logineven if they do not belong to the specified org and team or collaborators","s":"GitHubOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#githuboptions","p":25},{"i":49,"t":"(Appears on: Provider) Field Type Description group []string Group sets restrict logins to members of this group projects []string Projects restricts logins to members of these projects","s":"GitLabOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#gitlaboptions","p":25},{"i":51,"t":"(Appears on: Provider) Field Type Description group []string Groups sets restrict logins to members of this Google group adminEmail string AdminEmail is the Google admin to impersonate for api calls serviceAccountJson string ServiceAccountJSON is the path to the service account json credentials useApplicationDefaultCredentials bool UseApplicationDefaultCredentials is a boolean whether to use Application Default Credentials instead of a ServiceAccountJSON targetPrincipal string TargetPrincipal is the Google Service Account used for Application Default Credentials","s":"GoogleOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#googleoptions","p":25},{"i":53,"t":"(Appears on: AlphaOptions) Header represents an individual header that will be added to a request or response header. Field Type Description name string Name is the header name to be used for this set of values.Names should be unique within a list of Headers. preserveRequestValue bool PreserveRequestValue determines whether any values for this headershould be preserved for the request to the upstream server.This option only applies to injected request headers.Defaults to false (headers that match this header will be stripped). values []HeaderValue Values contains the desired values for this header","s":"Header","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#header","p":25},{"i":55,"t":"(Appears on: Header) HeaderValue represents a single header value and the sources that can make up the header value Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value. claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"HeaderValue","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#headervalue","p":25},{"i":57,"t":"(Appears on: Provider) Field Type Description groups []string Group enables to restrict login to members of indicated group roles []string Role enables to restrict login to users with role (only available when using the keycloak-oidc provider)","s":"KeycloakOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#keycloakoptions","p":25},{"i":59,"t":"(Appears on: Provider) Field Type Description jwtKey string JWTKey is a private key in PEM format used to sign JWT, jwtKeyFile string JWTKeyFile is a path to the private key file in PEM format used to sign the JWT pubjwkURL string PubJWKURL is the JWK pubkey access endpoint","s":"LoginGovOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#logingovoptions","p":25},{"i":61,"t":"(Appears on: Provider) LoginURLParameter is the configuration for a single query parameter that can be passed through from the /oauth2/start endpoint to the IdP login URL. The \"default\" option specifies the default value or values (if any) that will be passed to the IdP for this parameter, and \"allow\" is a list of options for ways in which this parameter can be set or overridden via the query string to /oauth2/start. If only a default is specified and no \"allow\" then the parameter is effectively fixed - the default value will always be used and anything passed to the start URL will be ignored. If only \"allow\" is specified but no default then the parameter will only be passed on to the IdP if the caller provides it, and no value will be sent otherwise. Examples:","s":"LoginURLParameter","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#loginurlparameter","p":25},{"i":63,"t":"name: organizationdefault:- myorg A parameter that is not passed by default, but may be set to one of a fixed set of values name: promptallow:- value: login- value: consent- value: select_account A parameter that is passed by default but may be overridden by one of a fixed set of values name: promptdefault: [\"login\"]allow:- value: consent- value: select_account A parameter that may be overridden, but only by values that match a regular expression. For example to restrict login_hint to email addresses in your organization's domain: name: login_hintallow:- pattern: '^[^@]*@example\\.com$'# this allows at most one \"@\" sign, and requires \"example.com\" domain. Note that the YAML rules around exactly which characters are allowed and/or require escaping in different types of string literals are convoluted. For regular expressions the single quoted form is simplest as backslash is not considered to be an escape character. Alternatively use the \"chomped block\" format |-: - pattern: |- ^[^@]*@example\\.com$ The hyphen is important, a | block would have a trailing newline character. Field Type Description name string Name specifies the name of the query parameter. default []string (Optional) Default specifies a default value or values that will bepassed to the IdP if not overridden. allow []URLParameterRule (Optional) Allow specifies rules about how the default (if any) may beoverridden via the query string to /oauth2/start. Onlyvalues that match one or more of the allow rules will beforwarded to the IdP.","s":"A parameter whose value is fixed","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"","p":25},{"i":65,"t":"(Appears on: Provider) Field Type Description issuerURL string IssuerURL is the OpenID Connect issuer URLeg: https://accounts.google.com insecureAllowUnverifiedEmail bool InsecureAllowUnverifiedEmail prevents failures if an email address in an id_token is not verifieddefault set to 'false' insecureSkipIssuerVerification bool InsecureSkipIssuerVerification skips verification of ID token issuers. When false, ID Token Issuers must match the OIDC discovery URLdefault set to 'false' insecureSkipNonce bool InsecureSkipNonce skips verifying the ID Token's nonce claim that must matchthe random nonce sent in the initial OAuth flow. Otherwise, the nonce is checkedafter the initial OAuth redeem & subsequent token refreshes.default set to 'true'Warning: In a future release, this will change to 'false' by default for enhanced security. skipDiscovery bool SkipDiscovery allows to skip OIDC discovery and use manually supplied Endpointsdefault set to 'false' jwksURL string JwksURL is the OpenID Connect JWKS URLeg: https://www.googleapis.com/oauth2/v3/certs emailClaim string EmailClaim indicates which claim contains the user email,default set to 'email' groupsClaim string GroupsClaim indicates which claim contains the user groupsdefault set to 'groups' userIDClaim string UserIDClaim indicates which claim contains the user IDdefault set to 'email' audienceClaims []string AudienceClaim allows to define any claim that is verified against the client idBy default aud claim is used for verification. extraAudiences []string ExtraAudiences is a list of additional audiences that are allowedto pass verification in addition to the client id.","s":"OIDCOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#oidcoptions","p":25},{"i":67,"t":"(Appears on: Providers) Provider holds all configuration for a single provider Field Type Description clientID string ClientID is the OAuth Client ID that is defined in the providerThis value is required for all providers. clientSecret string ClientSecret is the OAuth Client Secret that is defined in the providerThis value is required for all providers. clientSecretFile string ClientSecretFile is the name of the filecontaining the OAuth Client Secret, it will be used if ClientSecret is not set. keycloakConfig KeycloakOptions KeycloakConfig holds all configurations for Keycloak provider. azureConfig AzureOptions AzureConfig holds all configurations for Azure provider. ADFSConfig ADFSOptions ADFSConfig holds all configurations for ADFS provider. bitbucketConfig BitbucketOptions BitbucketConfig holds all configurations for Bitbucket provider. githubConfig GitHubOptions GitHubConfig holds all configurations for GitHubC provider. gitlabConfig GitLabOptions GitLabConfig holds all configurations for GitLab provider. googleConfig GoogleOptions GoogleConfig holds all configurations for Google provider. oidcConfig OIDCOptions OIDCConfig holds all configurations for OIDC provideror providers utilize OIDC configurations. loginGovConfig LoginGovOptions LoginGovConfig holds all configurations for LoginGov provider. id string ID should be a unique identifier for the provider.This value is required for all providers. provider ProviderType Type is the OAuth providermust be set from the supported providers group,otherwise 'Google' is set as default name string Name is the providers display nameif set, it will be shown to the users in the login page. caFiles []string CAFiles is a list of paths to CA certificates that should be used when connecting to the provider.If not specified, the default Go trust sources are used instead useSystemTrustStore bool UseSystemTrustStore determines if your custom CA files and the system trust store are usedIf set to true, your custom CA files and the system trust store are used otherwise only your custom CA files. loginURL string LoginURL is the authentication endpoint loginURLParameters []LoginURLParameter LoginURLParameters defines the parameters that can be passed from the start URL to the IdP login URL redeemURL string RedeemURL is the token redemption endpoint profileURL string ProfileURL is the profile access endpoint resource string ProtectedResource is the resource that is protected (Azure AD and ADFS only) validateURL string ValidateURL is the access token validation endpoint scope string Scope is the OAuth scope specification allowedGroups []string AllowedGroups is a list of restrict logins to members of this group code_challenge_method string The code challenge method","s":"Provider","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#provider","p":25},{"i":69,"t":"(string alias)​ (Appears on: Provider) ProviderType is used to enumerate the different provider type options Valid options are: adfs, azure, bitbucket, digitalocean facebook, github, gitlab, google, keycloak, keycloak-oidc, linkedin, login.gov, nextcloud and oidc.","s":"ProviderType","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#providertype","p":25},{"i":71,"t":"([]Provider alias)​ (Appears on: AlphaOptions) Providers is a collection of definitions for providers.","s":"Providers","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#providers","p":25},{"i":73,"t":"(Appears on: ClaimSource, HeaderValue, TLS) SecretSource references an individual secret value. Only one source within the struct should be defined at any time. Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value.","s":"SecretSource","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#secretsource","p":25},{"i":75,"t":"(Appears on: AlphaOptions) Server represents the configuration for an HTTP(S) server Field Type Description BindAddress string BindAddress is the address on which to serve traffic.Leave blank or set to \"-\" to disable. SecureBindAddress string SecureBindAddress is the address on which to serve secure traffic.Leave blank or set to \"-\" to disable. TLS TLS TLS contains the information for loading the certificate and key for thesecure traffic and further configuration for the TLS server.","s":"Server","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#server","p":25},{"i":77,"t":"(Appears on: Server) TLS contains the information for loading a TLS certificate and key as well as an optional minimal TLS version that is acceptable. Field Type Description Key SecretSource Key is the TLS key data to use.Typically this will come from a file. Cert SecretSource Cert is the TLS certificate data to use.Typically this will come from a file. MinVersion string MinVersion is the minimal TLS version that is acceptable.E.g. Set to \"TLS1.3\" to select TLS version 1.3 CipherSuites []string CipherSuites is a list of TLS cipher suites that are allowed.E.g.:- TLS_RSA_WITH_RC4_128_SHA- TLS_RSA_WITH_AES_256_GCM_SHA384If not specified, the default Go safe cipher list is used.List of valid cipher suites can be found in the crypto/tls documentation.","s":"TLS","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#tls","p":25},{"i":79,"t":"(Appears on: LoginURLParameter) URLParameterRule represents a rule by which query parameters passed to the /oauth2/start endpoint are checked to determine whether they are valid overrides for the given parameter passed to the IdP's login URL. Either Value or Pattern should be supplied, not both. Field Type Description value string A Value rule matches just this specific value pattern string A Pattern rule gives a regular expression that must be matched bysome substring of the value. The expression is not automaticallyanchored to the start and end of the value, if you want to restrictthe whole parameter value you must anchor it yourself with ^ and $.","s":"URLParameterRule","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#urlparameterrule","p":25},{"i":81,"t":"(Appears on: UpstreamConfig) Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path. Field Type Description id string ID should be a unique identifier for the upstream.This value is required for all upstreams. path string Path is used to map requests to the upstream server.The closest match will take precedence and all Paths must be unique.Path can also take a pattern when used with RewriteTarget.Path segments can be captured and matched using regular experessions.Eg:- ^/foo$: Match only the explicit path /foo- ^/bar/$: Match any path prefixed with /bar/- ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget rewriteTarget string RewriteTarget allows users to rewrite the request path before it is sent tothe upstream server.Use the Path to capture segments for reuse within the rewrite target.Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewritethe request /baz/abc/123 to /foo/abc/123 before proxying to theupstream server. uri string The URI of the upstream server. This may be an HTTP(S) server of a Filebased URL. It may include a path, in which case all requests will be servedunder that path.Eg:- http://localhost:8080- https://service.localhost- https://service.localhost/path- file://host/pathIf the URI's path is \"/base\" and the incoming request was for \"/dir\",the upstream request will be for \"/base/dir\". insecureSkipTLSVerify bool InsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.This option is insecure and will allow potential Man-In-The-Middle attacksbetween OAuth2 Proxy and the upstream server.Defaults to false. static bool Static will make all requests to this upstream have a static response.The response will have a body of \"Authenticated\" and a response codematching StaticCode.If StaticCode is not set, the response will return a 200 response. staticCode int StaticCode determines the response code for the Static response.This option can only be used with Static enabled. flushInterval Duration FlushInterval is the period between flushing the response buffer whenstreaming response from the upstream.Defaults to 1 second. passHostHeader bool PassHostHeader determines whether the request host header should be proxiedto the upstream server.Defaults to true. proxyWebSockets bool ProxyWebSockets enables proxying of websockets to upstream serversDefaults to true. timeout Duration Timeout is the maximum duration the server will wait for a response from the upstream server.Defaults to 30 seconds.","s":"Upstream","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#upstream","p":25},{"i":83,"t":"(Appears on: AlphaOptions) UpstreamConfig is a collection of definitions for upstream servers. Field Type Description proxyRawPath bool ProxyRawPath will pass the raw url path to upstream allowing for urlslike: \"/%2F/\" which would otherwise be redirected to \"/\" upstreams []Upstream Upstreams represents the configuration for the upstream servers.Requests will be proxied to this upstream if the path matches the request path.","s":"UpstreamConfig","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#upstreamconfig","p":25},{"i":85,"t":"Open the ADFS administration console on your Windows Server and add a new Application Group Provide a name for the integration, select Server Application from the Standalone applications section and click Next Follow the wizard to get the client-id, client-secret and configure the application credentials Configure the proxy with --provider=adfs --client-id= --client-secret= Note: When using the ADFS Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"ADFS","u":"/oauth2-proxy/docs/next/configuration/providers/adfs","h":"","p":84},{"i":87,"t":"Add an application: go to https://portal.azure.com, choose Azure Active Directory, select App registrations and then click on New registration. Pick a name, check the supported account type(single-tenant, multi-tenant, etc). In the Redirect URI section create a new Web platform entry for each app that you want to protect by the oauth2 proxy(e.g. https://internal.yourcompanycom/oauth2/callback). Click Register. Next we need to add group read permissions for the app registration, on the API Permissions page of the app, click on Add a permission, select Microsoft Graph, then select Application permissions, then click on Group and select Group.Read.All. Hit Add permissions and then on Grant admin consent (you might need an admin to do this).**IMPORTANT**: Even if this permission is listed with **\"Admin consent required=No\"** the consent might actually be required, due to AAD policies you won't be able to see. If you get a **\"Need admin approval\"** during login, most likely this is what you're missing! Next, if you are planning to use v2.0 Azure Auth endpoint, go to the Manifest page and set \"accessTokenAcceptedVersion\": 2 in the App registration manifest file. On the Certificates & secrets page of the app, add a new client secret and note down the value after hitting Add. Configure the proxy with: for V1 Azure Auth endpoint (Azure Active Directory Endpoints - https://login.microsoftonline.com/common/oauth2/authorize) --provider=azure --client-id= --client-secret= --azure-tenant={tenant-id} --oidc-issuer-url=https://sts.windows.net/{tenant-id}/ for V2 Azure Auth endpoint (Microsoft Identity Platform Endpoints - https://login.microsoftonline.com/common/oauth2/v2.0/authorize) --provider=azure --client-id= --client-secret= --azure-tenant={tenant-id} --oidc-issuer-url=https://login.microsoftonline.com/{tenant-id}/v2.0 Notes: When using v2.0 Azure Auth endpoint (https://login.microsoftonline.com/{tenant-id}/v2.0) as --oidc_issuer_url, in conjunction with --resource flag, be sure to append /.default at the end of the resource name. See https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent#the-default-scope for more details. When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure","u":"/oauth2-proxy/docs/next/configuration/providers/azure","h":"","p":86},{"i":89,"t":"For adding an application to the Microsoft Azure AD follow these steps to add an application. Take note of your TenantId if applicable for your situation. The TenantId can be used to override the default common authorization server with a tenant specific server.","s":"Microsoft Azure AD","u":"/oauth2-proxy/docs/next/configuration/providers/azure_ad","h":"","p":88},{"i":91,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean","u":"/oauth2-proxy/docs/next/configuration/providers/digitalocean","h":"","p":90},{"i":93,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who have access to one selected repository use --bitbucket-repository=.","s":"BitBucket","u":"/oauth2-proxy/docs/next/configuration/providers/bitbucket","h":"","p":92},{"i":95,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook","u":"/oauth2-proxy/docs/next/configuration/providers/facebook","h":"","p":94},{"i":97,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1/user/emails\"","s":"Gitea","u":"/oauth2-proxy/docs/next/configuration/providers/gitea","h":"","p":96},{"i":99,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/next/configuration/overview","h":"","p":98},{"i":101,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_' ; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#generating-a-cookie-secret","p":98},{"i":103,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#config-file","p":98},{"i":105,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --allow-query-semicolons bool allow the use of semicolons in query args (required for some legacy applications) false --api-route string | list return HTTP 401 instead of redirecting to authentication server if token is not valid. Format: path_regex --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --code-challenge-method string use PKCE code challenges with the specified method. Either 'plain' or 'S256' (recommended) --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie. If set to 0, cookie becomes a session-cookie which will expire when the browser is closed. 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --cookie-csrf-per-request bool Enable having different CSRF cookies per request, making it possible to have parallel requests. false --cookie-csrf-expire duration expire timeframe for CSRF cookie 15m --custom-templates-dir string path to custom html templates --custom-sign-in-logo string path or a URL to an custom image for the sign_in page logo. Use \"-\" to disable default logo. --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --force-json-errors bool force JSON errors instead of HTTP error pages or redirects false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --gitlab-projects string | list restrict logins to members of any of these projects (may be given multiple times) formatted as orgname/repo=accesslevel. Access level should be a value matching Gitlab access levels, defaulted to 20 if absent --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --google-use-application-default-credentials bool use application default credentials instead of service account json (i.e. GKE Workload Identity) --google-target-principal bool the target principal to impersonate when using ADC defaults to the service account configured for ADC --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -B for bcrypt encryption --htpasswd-user-group string | list the groups to be set on sessions for htpasswd users --http-address string [http://]: or unix:// to listen on for HTTP clients. Square brackets are required for ipv6 address, e.g. http://[::1]:4180 \"127.0.0.1:4180\" --https-address string [https://]: to listen on for HTTPS clients. Square brackets are required for ipv6 address, e.g. https://[::1]:443 \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --insecure-oidc-skip-nonce bool skip verifying the OIDC ID Token's nonce claim true --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --oidc-email-claim string which OIDC claim contains the user's email \"email\" --oidc-groups-claim string which OIDC claim contains the user groups \"groups\" --oidc-audience-claim string which OIDC claim contains the audience \"aud\" --oidc-extra-audience string | list additional audiences which are allowed to pass verification \"[]\" --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Groups, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --use-system-trust-store bool Determines if provider-ca-file files and the system trust store are used. If set to true, your custom CA files and the system trust store are used otherwise only your custom CA files. false --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --ready-path string the ready endpoint that can be used for deep health checks \"/ready\" --metrics-address string the address prometheus metrics will be scraped from \"\" --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --relative-redirect-url bool allow relative OAuth Redirect URL.` --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-insecure-skip-tls-verify bool skip TLS verification when connecting to Redis false --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --redis-connection-idle-timeout int Redis connection idle timeout seconds. If Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. Example: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14 0 --request-id-header string Request header to use as the request ID in logging X-Request-Id --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted and allows X-Forwarded-{Proto,Host,Uri} headers to be used on redirect selection false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Groups, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --show-debug-on-error bool show detailed error information on error pages (WARNING: this may contain sensitive information - do not use in production) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping & ready endpoints false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string | list (DEPRECATED for --skip-auth-route) bypass authentication for requests paths that match (may be given multiple times) --skip-auth-route string | list bypass authentication for requests that match the method & path. Format: method=path_regex OR method!=path_regex. For all methods: path_regex OR !=path_regex --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy true --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-cipher-suite string | list Restricts TLS cipher suites used by server to those listed (e.g. TLS_RSA_WITH_RC4_128_SHA) (may be given multiple times). If not specified, the default Go safe cipher list is used. List of valid cipher suites can be found in the crypto/tls documentation. --tls-key-file string path to private key file --tls-min-version string minimum TLS version that is acceptable, either \"TLS1.2\" or \"TLS1.3\" \"TLS1.2\" --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --upstream-timeout duration maximum amount of time the server will wait for a response from the upstream 30s --allowed-group string | list restrict logins to members of this group (may be given multiple times) --allowed-role string | list restrict logins to users with this role (may be given multiple times). Only works with the keycloak-oidc provider. --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . or a *. to allow subdomains (e.g. .example.com, *.example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. 1. Only these providers support --cookie-refresh: GitLab, Google and OIDC​ 2. When using the whitelist-domain option, any domain prefixed with a . or a *. will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URLs protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*.​ See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#command-line-options","p":98},{"i":107,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers, unix socket or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. . This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Unix socket upstreams are configured as unix:///path/to/unix.sock. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#upstreams-configuration","p":98},{"i":109,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#environment-variables","p":98},{"i":111,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default, these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) and the /ready endpoint can be disabled with --silence-ping-logging reducing log volume.","s":"Logging Configuration","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#logging-configuration","p":98},{"i":113,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Message Authenticated via OAuth2 The details of the auth attempt. Protocol HTTP/1.0 The request protocol. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details.","s":"Auth Log Format","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#auth-log-format","p":98},{"i":115,"t":"HTTP request logs will output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#request-log-format","p":98},{"i":117,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#standard-log-format","p":98},{"i":119,"t":"This option requires --reverse-proxy option to be set. The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-Uri $request_uri; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\".","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":98},{"i":121,"t":"This option requires --reverse-proxy option to be set.","s":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":98},{"i":123,"t":"The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration: http: routers: a-service: rule: \"Host(`a-service.example.com`)\" service: a-service-backend middlewares: - oauth-errors - oauth-auth tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth: rule: \"Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true oauth-errors: errors: status: - \"401-403\" service: oauth-backend query: \"/oauth2/sign_in?rd={url}\"","s":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":98},{"i":125,"t":"Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint Following options need to be set on oauth2-proxy: --upstream=static://202: Configures a static response for authenticated sessions --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly http: routers: a-service-route-1: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)\" service: a-service-backend middlewares: - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" a-service-route-2: rule: \"Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)\" service: a-service-backend middlewares: - oauth-auth-wo-redirect # unauthenticated session will return a 401 tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services-oauth2-route: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth2-proxy-route: rule: \"Host(`oauth.example.com`) && PathPrefix(`/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 b-service-backend: loadBalancer: servers: - url: http://172.16.0.3:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth-redirect: forwardAuth: address: https://oauth.example.com/ trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization oauth-auth-wo-redirect: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":98},{"i":127,"t":"This auth provider has been tested against Gitlab version 12.X. Due to Gitlab API changes, it may not work for version prior to 12.X (see 994). Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. If you need projects filtering, add the extra read_api scope to your application. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\" If your self-hosted GitLab is on a subdirectory (e.g. domain.tld/gitlab), as opposed to its own subdomain (e.g. gitlab.domain.tld), you may need to add a redirect from domain.tld/oauth pointing at e.g. domain.tld/gitlab/oauth.","s":"GitLab","u":"/oauth2-proxy/docs/next/configuration/providers/gitlab","h":"","p":126},{"i":129,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to log in even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to log in with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub","u":"/oauth2-proxy/docs/next/configuration/providers/github","h":"","p":128},{"i":131,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"APIs & Services\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account and configure it to use Application Default Credentials / Workload Identity / Workload Identity Federation (recommended) or, alternatively download the JSON. Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. (Only if using a JSON file (see step 1)) 9. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. 10. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ). Using Application Default Credentials (ADC) / Workload Identity / Workload Identity Federation (recommended)​ oauth2-proxy can make use of Application Default Credentials. When deployed within GCP, this means that it can automatically use the service account attached to the resource. When deployed to GKE, ADC can be leveraged through a feature called Workload Identity. Follow Google's guide to set up Workload Identity. When deployed outside of GCP, Workload Identity Federation might be an option.","s":"Google (default)","u":"/oauth2-proxy/docs/next/configuration/providers/google","h":"","p":130},{"i":133,"t":"note This is the legacy provider for Keycloak, use Keycloak OIDC Auth Provider if possible. Create new client in your Keycloak realm with Access Type 'confidential' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: --provider=keycloak --client-id= --client-secret= --login-url=\"http(s):///auth/realms//protocol/openid-connect/auth\" --redeem-url=\"http(s):///auth/realms//protocol/openid-connect/token\" --profile-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --validate-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --keycloak-group= --keycloak-group= For group based authorization, the optional --keycloak-group (legacy) or --allowed-group (global standard) flags can be used to specify which groups to limit access to. If these are unset but a groups mapper is set up above in step (3), the provider will still populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response. The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak","u":"/oauth2-proxy/docs/next/configuration/providers/keycloak","h":"","p":132},{"i":135,"t":"--provider=keycloak-oidc --client-id= --client-secret= --redirect-url=https://internal.yourcompany.com/oauth2/callback --oidc-issuer-url=https:///realms/ // For Keycloak versions <17: --oidc-issuer-url=https:///auth/realms/ --email-domain= // Validate email domain for users, see option documentation --allowed-role= // Optional, required realm role --allowed-role=: // Optional, required client role --allowed-group= // Optional, requires group client scope --code-challenge-method=S256 // PKCE note Keycloak has updated its admin console and as of version 19.0.0, the new admin console is enabled by default. The legacy admin console has been announced for removal with the release of version 21.0.0. Keycloak legacy admin console Create new client in your Keycloak realm with Access Type 'confidential', Client protocol 'openid-connect' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Create a mapper with Mapper Type 'Audience' and Included Client Audience and Included Custom Audience set to your client name. Keycloak new admin console (default as of v19.0.0) The following example shows how to create a simple OIDC client using the new Keycloak admin2 console. However, for best practices, it is recommended to consult the Keycloak documentation. The OIDC client must be configured with an audience mapper to include the client's name in the aud claim of the JWT token. The aud claim specifies the intended recipient of the token, and OAuth2 Proxy expects a match against the values of either --client-id or --oidc-extra-audience. In Keycloak, claims are added to JWT tokens through the use of mappers at either the realm level using \"client scopes\" or through \"dedicated\" client mappers. Creating the client Create a new OIDC client in your Keycloak realm by navigating to:Clients -> Create client Client Type 'OpenID Connect' Client ID , please complete the remaining fields as appropriate and click Next. Client authentication 'On' Authentication flow Standard flow 'selected' Direct access grants 'deselect' Save the configuration. Settings / Access settings: Valid redirect URIs https://internal.yourcompany.com/oauth2/callback Save the configuration. Under the Credentials tab you will now be able to locate . Configure a dedicated audience mapper for your client by navigating to Clients -> -> Client scopes. Access the dedicated mappers pane by clicking -dedicated, located under Assigned client scope.(It should have a description of \"Dedicated scope and mappers for this client\") Click Configure a new mapper and select Audience Name 'aud-mapper-' Included Client Audience select from the dropdown. OAuth2 proxy can be set up to pass both the access and ID JWT tokens to your upstream services. If you require additional audience entries, you can use the Included Custom Audience field in addition to the \"Included Client Audience\" dropdown. Note that the \"aud\" claim of a JWT token should be limited and only specify its intended recipients. Add to ID token 'On' Add to access token 'On' - #1916 Save the configuration. Any subsequent dedicated client mappers can be defined by clicking Dedicated scopes -> Add mapper -> By configuration -> Select mapper You should now be able to create a test user in Keycloak and get access to the OAuth2 Proxy instance, make sure to set an email address matching and select Email verified. Authorization OAuth2 Proxy will perform authorization by requiring a valid user, this authorization can be extended to take into account a user's membership in Keycloak groups, realm roles, and client roles using the keycloak-oidc provider options--allowed-role or --allowed-group Roles A standard Keycloak installation comes with the required mappers for realm roles and client roles through the pre-defined client scope \"roles\". This ensures that any roles assigned to a user are included in the JWT tokens when using an OIDC client that has the \"Full scope allowed\" feature activated, the feature is enabled by default. Creating a realm role Navigate to Realm roles -> Create role Role name, -> save Creating a client role Navigate to Clients -> -> Roles -> Create role Role name, -> save Assign a role to a user Users -> Username -> Role mapping -> Assign role -> filter by roles or clients and select -> Assign. Keycloak \"realm roles\" can be authorized using the --allowed-role= option, while \"client roles\" can be evaluated using --allowed-role=:. You may limit the realm roles included in the JWT tokens for any given client by navigating to: Clients -> -> Client scopes -> -dedicated -> Scope Disabling Full scope allowed activates the Assign role option, allowing you to select which roles, if assigned to a user, will be included in the user's JWT tokens. This can be useful when a user has many associated roles, and you want to reduce the size and impact of the JWT token. Groups You may also do authorization on group memberships by using the OAuth2 Proxy option --allowed-group. We will only do a brief description of creating the required client scope groups and refer you to read the Keycloak documentation. To summarize, the steps required to authorize Keycloak group membership with OAuth2 Proxy are as follows: Create a new Client Scope with the name groups in Keycloak. Include a mapper of type Group Membership. Set the \"Token Claim Name\" to groups or customize by matching it to the --oidc-groups-claim option of OAuth2 Proxy. If the \"Full group path\" option is selected, you need to include a \"/\" separator in the group names defined in the --allowed-group option of OAuth2 Proxy. Example: \"/groupname\" or \"/groupname/child_group\". After creating the Client Scope named groups you will need to attach it to your client. Clients -> -> Client scopes -> Add client scope -> Select groups and choose Optional and you should now have a client that maps group memberships into the JWT tokens so that Oauth2 Proxy may evaluate them. Create a group by navigating to Groups -> Create group and add your test user as a member. The OAuth2 Proxy option --allowed-group=/groupname will now allow you to filter on group membership Keycloak also has the option of attaching roles to groups, please refer to the Keycloak documentation for more information. Tip To check if roles or groups are added to JWT tokens, you can preview a users token in the Keycloak console by following these steps: Clients -> -> Client scopes -> Evaluate. Select a realm user and optional scope parameters such as groups, and generate the JSON representation of an access or id token to examine its contents.","s":"Keycloak OIDC","u":"/oauth2-proxy/docs/next/configuration/providers/keycloak_oidc","h":"","p":134},{"i":137,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn","u":"/oauth2-proxy/docs/next/configuration/providers/linkedin","h":"","p":136},{"i":139,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048-bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost'. The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"Login.gov","u":"/oauth2-proxy/docs/next/configuration/providers/login_gov","h":"","p":138},{"i":141,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/next/configuration/session_storage","h":"","p":140},{"i":143,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/next/configuration/session_storage","h":"#cookie-storage","p":140},{"i":145,"t":"The Redis Storage backend stores encrypted sessions in redis. Instead of sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128-bit random number, hex-encoded The secret is a 128-bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Additionally, the browser only has to send a short Cookie with every request and not the whole JWT, which can get quite big. Two settings are used to configure the OAuth2 Proxy cookie lifetime: --cookie-refresh duration refresh the cookie after this duration; 0 to disable--cookie-expire duration expire timeframe for cookie 168h0m0s The \"cookie-expire\" value should be equal to the lifetime of the Refresh-Token that is issued by the OAuth2 authorization server. If it expires earlier and is deleted by the browser, OAuth2 Proxy cannot find the stored Refresh-Tokens in Redis and thus cannot start the refresh flow to get new Access-Tokens. If it is longer, it might be that the old Refresh-Token will be found in Redis but has already expired. The \"cookie-refresh\" value controls when OAuth2 Proxy tries to refresh an Access-Token. If it is set to \"0\", the Access-Token will never be refreshed, even it is already expired and there would be a valid Refresh-Token in the available. If set, OAuth2 Proxy will refresh the Access-Token after this many seconds even if it is still valid. Of course, it will also be refreshed after it has expired, as long as a Refresh Token is available. Caveat: It can happen that the Access-Token is valid for e.g. \"1m\" and a request happens after exactly \"59s\". It would pass OAuth2 Proxy and be forwarded to the backend but is just expired when the backend tries to validate it. This is especially relevant if the backend uses the JWT to make requests to other backends. For this reason, it's advised to set the cookie-refresh a couple of seconds less than the Access-Token lifespan. Recommended settings: cookie_refresh := Access-Token lifespan - 1m cookie_expire := Refresh-Token lifespan (i.e. Keycloak client_session_idle) Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive. Note, if Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. For example: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14","s":"Redis Storage","u":"/oauth2-proxy/docs/next/configuration/session_storage","h":"#redis-storage","p":140},{"i":147,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex, and we will use it as an example. The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta, an example can be found below. Dex​ To configure the OIDC provider for Dex, perform the following steps: Download Dex: go get github.com/dexidp/dex See the getting started guide for more details. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Add a configuration block to the staticClients section of examples/config-dev.yaml: - id: oauth2-proxyredirectURIs:- 'http://127.0.0.1:4180/oauth2/callback'name: 'oauth2-proxy'secret: proxy Launch Dex: from $GOPATH/github.com/dexidp/dex, run: bin/dex serve examples/config-dev.yaml In a second terminal, run the oauth2-proxy with the following args: -provider oidc-provider-display-name \"My OIDC Provider\"-client-id oauth2-proxy-client-secret proxy-redirect-url http://127.0.0.1:4180/oauth2/callback-oidc-issuer-url http://127.0.0.1:5556/dex-cookie-secure=false-cookie-secret=secret-email-domain kilgore.trout To serve the current working directory as a website under the /static endpoint, add: -upstream file://$PWD/#/static/ Test the setup by visiting http://127.0.0.1:4180 or http://127.0.0.1:4180/static . See also our local testing environment for a self-contained example using Docker and etcd as storage for Dex. Okta​ To configure the OIDC provider for Okta, perform the following steps: Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com. The client_id and client_secret are configured in the application settings. Generate a unique cookie_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect","u":"/oauth2-proxy/docs/next/configuration/providers/openid_connect","h":"","p":146},{"i":149,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to set up the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"NextCloud","u":"/oauth2-proxy/docs/next/configuration/providers/nextcloud","h":"","p":148},{"i":151,"t":"There are two recommended configurations: At OAuth2 Proxy At Reverse Proxy","s":"TLS Configuration","u":"/oauth2-proxy/docs/next/configuration/tls","h":"","p":150},{"i":153,"t":"Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... With this configuration approach the customization of the TLS settings is limited. The minimal acceptable TLS version can be set with --tls-min-version=TLS1.3. The defaults set TLS1.2 as the minimal version. Regardless of the minimum version configured, TLS1.3 is currently always used as the maximal version. TLS server side cipher suites can be specified with --tls-cipher-suite=TLS_RSA_WITH_RC4_128_SHA. If not specified, the defaults from crypto/tls of the currently used go version for building oauth2-proxy will be used. A complete list of valid TLS cipher suite names can be found in crypto/tls.","s":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/next/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":150},{"i":155,"t":"Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or ... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/next/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":150},{"i":157,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /ready - returns a 200 OK response if all the underlying connections (e.g., Redis store) are connected /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default /oauth2/sign_in - the login page, which also doubles as a sign-out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive /oauth2/static/* - stylesheets and other dependencies used in the sign_in and error pages","s":"Endpoints","u":"/oauth2-proxy/docs/next/features/endpoints","h":"","p":156},{"i":159,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign-out page afterward using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored. Make sure to include the actual domain and port (if needed) and not the URL (e.g \"localhost:8081\" instead of \"http://localhost:8081\").","s":"Sign out","u":"/oauth2-proxy/docs/next/features/endpoints","h":"#sign-out","p":156},{"i":161,"t":"This endpoint returns 202 Accepted response or a 401 Unauthorized response. It can be configured using the following query parameters: allowed_groups: comma separated list of allowed groups allowed_email_domains: comma separated list of allowed email domains allowed_emails: comma separated list of allowed emails","s":"Auth","u":"/oauth2-proxy/docs/next/features/endpoints","h":"#auth","p":156}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/2",[0,2.91,1,4.193,2,0.548,3,6.527,4,6.527,5,2.729,6,4.703,7,4.316,8,3.399,9,2.711,10,4.557,11,4.316,12,1.238,13,4.316,14,4.316,15,4.316,16,4.316,17,4.316,18,5.045,19,4.193,20,4.557,21,6.527,22,5.786,23,5.786,24,5.786,25,5.786,26,2.599,27,3.763,28,3.763,29,4.316,30,4.316,31,3.763,32,3.763,33,3.763,34,4.316,35,1.487,36,3.763,37,1.891,38,2.729,39,2.439,40,4.316,41,4.316,42,1.212,43,2.729,44,1.939,45,2.319,46,4.316,47,4.316,48,4.316,49,1.079,50,4.316,51,3.763,52,1.939,53,3.127,54,1.722,55,1.722,56,0.97,57,0.862,58,1.658,59,2.112,60,2.112,61,0.923,62,2.211,63,1.861,64,3.659,65,3.763,66,1.541,67,1.658,68,2.439]],["t/4",[2,0.351,12,1.328,42,1.195,49,1.158,54,1.916,56,1.041,66,1.715,69,2.37,70,1.543,71,2.581,72,2.46,73,3.704,74,1.778,75,4.189,76,2.866,77,3.239,78,2.477,79,2.692,80,1.543,81,1.44,82,3.704,83,2.967,84,2.46,85,4.189,86,2.256,87,1.991,88,4.189,89,1.739,90,4.804,91,2.581,92,1.655,93,4.804,94,4.804,95,2.866,96,2.351,97,2.715,98,4.804,99,2.715,100,2.866,101,3.239,102,3.336,103,3.038,104,2.866,105,0.805,106,2.715,107,1.778,108,1.655,109,2.351,110,3.239,111,1.991,112,3.038,113,3.481,114,3.239]],["t/6",[2,0.47,9,2.371,31,4.412,55,2.018,69,1.743,115,4.412,116,7.415,117,5.373,118,2.86,119,3.2,120,5,121,4.689,122,3.985,123,1.37,124,5.06,125,4.412,126,2.719,127,5.06,128,1.57,129,5.06,130,2.719,131,3.412,132,2.273,133,1.743,134,3.829,135,4.412,136,3.2,137,4.412,138,2.56,139,4.412,140,4.412,141,5.056,142,4.412,143,3.412,144,5.06,145,5.06,146,2.371,147,3.985,148,6.419,149,6.419,150,3.829,151,5.06]],["t/8",[2,0.45,5,3.886,9,3.598,10,4.84,45,3.301,119,3.886,123,1.664,152,3.301,153,4.143,154,7.228,155,4.452,156,6.303,157,6.145,158,3.886]],["t/10",[44,2.693,57,1.198,105,1.005,107,2.219,134,3.576,138,2.391,139,5.228,140,6.212,159,7.124,160,4.344,161,5.995,162,5.995,163,5.995,164,5.995,165,5.995,166,5.995,167,4.344,168,4.722,169,5.995,170,5.995,171,4.722]],["t/12",[1,3.698,2,0.373,9,2.778,12,1.731,19,4.938,37,1.042,42,1.121,44,2.899,45,2.742,49,1.32,52,1.616,56,0.994,57,1.362,58,1.96,62,1.843,69,2.043,80,1.639,81,1.079,105,0.856,107,2.389,121,3.751,123,1.382,138,1.435,147,2.834,172,4.938,173,4.45,174,3.698,175,3.598,176,5.942,177,3.137,178,3.598,179,5.627,180,1.208,181,4.45,182,4.45,183,5.103,184,5.103,185,4.019,186,2.201,187,5.103,188,5.931,189,5.103,190,3.137,191,3.467,192,3.598,193,2.275,194,5.083,195,2.033,196,2.275,197,5.931,198,3.441,199,1.686,200,3.598,201,3.137,202,1.616,203,2.607,204,3.598,205,2.275,206,3.698,207,5.103,208,3.598,209,2.742,210,3.137,211,3.598,212,1.933,213,2.426,214,3.598,215,3.698,216,3.598,217,3.598]],["t/14",[49,1.129,57,1.21,126,3.253,128,1.878,152,4.101,218,6.054,219,4.768,220,3.829,221,4.387,222,2.963,223,3.829,224,6.054,225,5.279,226,4.387,227,6.054,228,3.829,229,4.387,230,6.054,231,6.054]],["t/16",[2,0.367,37,1.454,45,2.697,49,1.191,57,1.276,96,2.456,99,2.836,110,3.384,112,3.174,117,5.089,118,3.609,120,4.985,121,3.174,131,3.384,141,3.953,146,2.351,194,3.953,219,5.029,226,4.627,228,3.174,232,5.019,233,4.038,234,5.568,235,5.019,236,3.809,237,5.019,238,2.697,239,4.376,240,3.174,241,5.019,242,5.019,243,5.019,244,2.994,245,1.669,246,3.953,247,2.164,248,3.125,249,5.019,250,5.019,251,5.019,252,5.019,253,5.019,254,5.019,255,4.376,256,5.019,257,5.019,258,3.953,259,3.953,260,1.557]],["t/18",[2,0.47,6,4.328,35,1.743,112,3.2,117,4.651,118,3.628,131,5.356,132,2.273,133,1.743,138,2.018,141,3.985,219,3.985,226,3.667,234,5.597,238,3.788,240,3.2,248,2.476,260,1.57,261,7.05,262,6.419,263,6.419,264,3.667,265,5.06,266,5.06,267,5.06,268,5.06,269,4.412,270,3.667,271,5.06,272,3.985,273,5.06,274,5.06,275,6.419,276,2.476,277,5.06,278,5.06,279,5.06,280,5.06,281,5.06,282,3.667,283,5.06,284,5.06,285,5.06]],["t/20",[2,0.375,5,3.24,12,1.096,35,1.765,42,1.384,49,0.955,52,2.301,53,3.712,54,2.044,55,2.044,56,1.085,57,1.024,92,1.765,109,2.507,118,3.656,120,3.455,128,1.589,286,2.209,287,3.656,288,4.035,289,5.123,290,2.124,291,3.712,292,2.624,293,1.342,294,3.656,295,3.712,296,4.467,297,4.467,298,5.123,299,2.209,300,3.24,301,4.035,302,3.712,303,3.859,304,3.314,305,3.712,306,4.035,307,4.467,308,3.455,309,1.704,310,3.476,311,3.656,312,5.123]],["t/22",[2,0.554,60,2.906,86,1.842,96,2.906,245,2.732,290,2.936,313,3.4,314,3.19,315,5.938,316,4.676,317,3.318,318,5.938,319,5.177]],["t/24",[2,0.45,42,1.334,49,1.146,57,1.228,67,2.36,81,1.842,99,3.473,123,1.664,132,2.76,133,2.645,177,5.358,320,3.666,321,4.452,322,6.145]],["t/26",[2,0.434,9,2.103,12,1.652,37,1.721,56,1.314,58,1.724,61,1.424,80,1.907,105,0.753,106,2.537,107,1.662,113,3.253,120,4.005,132,2.016,133,2.046,134,3.543,136,2.839,146,2.103,186,1.936,193,2.839,236,3.543,260,1.393,291,3.253,323,3.914,324,4.48,325,2.839,326,4.777,327,4.489,328,3.914,329,1.936,330,4.489,331,3.543,332,3.535,333,2.839,334,4.489,335,4.489,336,3.027,337,3.914,338,3.914,339,3.914,340,2.99,341,5.804,342,3.027,343,3.535,344,4.489,345,2.537,346,1.861,347,3.576,348,3.756,349,2.839,350,3.535,351,3.535,352,2.839,353,3.914,354,3.914,355,4.489]],["t/28",[2,0.545,26,2.568,37,2.006,42,0.993,56,0.959,58,2.66,61,1.481,84,2.928,128,1.774,133,1.969,229,4.143,326,5.022,332,4.503,333,3.616,340,2.568,342,3.855,345,3.231,346,2.87,347,3.72,348,3.616,356,3.616,357,2.37,358,3.616,359,2.798]],["t/30",[2,0.472,37,1.478,44,2.898,49,1.387,56,1.186,57,1.486,58,3.057,61,1.591,109,2.497,128,1.583,133,2.699,136,4.081,193,3.227,310,2.741,326,5.015,333,4.081,340,2.898,342,3.44,346,2.115,360,5.857,361,6.453,362,4.449,363,4.018,364,4.018,365,5.102]],["t/32",[2,0.396,26,1.76,35,1.35,42,1.164,44,1.76,49,1.01,56,0.657,57,0.783,58,2.385,61,1.433,62,2.007,63,1.69,64,2.478,70,2.258,73,3.232,74,2.006,80,1.258,81,1.624,82,3.232,89,1.517,95,2.337,105,1.123,107,1.45,110,2.642,118,2.214,123,1.061,191,2.105,193,2.478,229,2.839,245,1.303,248,1.917,260,1.215,287,2.214,294,2.214,299,1.69,300,2.478,308,2.642,313,2.433,314,2.105,326,4.187,333,2.478,346,1.624,366,3.918,367,3.918,368,3.086,369,3.918,370,2.007,371,3.918,372,3.918,373,3.086,374,3.918,375,3.918,376,4.499,377,3.918,378,1.45,379,3.918,380,3.918,381,3.918,382,3.918,383,3.918,384,3.918,385,3.416,386,3.918,387,3.918,388,3.086,389,3.918,390,1.926,391,3.918,392,3.918,393,1.097,394,3.918,395,2.642,396,3.918,397,3.086,398,3.918,399,1.215,400,3.918,401,2.214,402,3.918,403,2.478,404,3.918,405,2.642,406,3.918,407,1.917,408,3.416,409,3.086,410,3.918,411,3.416,412,3.918,413,3.918,414,3.918,415,3.918,416,3.918,417,2.007,418,3.918,419,3.086,420,3.918,421,3.918,422,3.086,423,2.538,424,3.918,425,2.337]],["t/35",[42,1.084,73,3.721,109,3.053,180,1.477,309,2.074,399,1.935,407,3.053,426,1.935,427,1.747,428,1.634,429,6.238,430,3.525,431,3.195,432,6.238,433,4.206]],["t/37",[0,3.413,2,0.56,6,2.398,26,1.597,42,1.116,49,1.265,56,1.283,57,0.711,61,1.261,68,2.01,69,1.743,81,1.066,86,1.828,89,1.418,105,0.849,107,2.181,108,2.693,111,2.661,113,2.577,134,2.121,146,1.666,180,0.842,186,1.534,199,1.666,202,2.884,213,3.413,223,2.249,238,2.719,239,4.413,247,1.534,269,3.101,276,1.74,288,2.801,292,2.592,309,2.135,320,2.121,323,3.101,326,3.973,331,2.121,336,2.398,341,5.138,345,2.01,349,2.249,353,4.413,354,4.413,357,1.474,378,1.317,393,1.418,417,2.592,427,0.996,428,0.931,434,3.101,435,3.101,436,3.556,437,3.101,438,2.577,439,4.641,440,3.556,441,3.556,442,2.801,443,5.062,444,3.556,445,3.201,446,3.413,447,5.062,448,3.201,449,3.556,450,3.101,451,3.556,452,2.801,453,3.556,454,3.556,455,3.668,456,3.556,457,5.062,458,4.413,459,4.413,460,5.062,461,2.719,462,3.019,463,5.062,464,3.556]],["t/39",[2,0.422,42,1.003,56,0.967,180,1.366,247,2.489,260,1.79,302,4.181,309,2.315,314,3.1,426,1.79,427,1.95,428,1.511,465,5.626,466,2.087,467,4.181,468,5.484,469,5.032,470,5.771,471,6.963,472,2.886,473,4.545,474,5.771]],["t/41",[42,1.047,89,1.688,105,1.198,180,1.426,244,4.543,378,2.23,399,2.216,426,1.869,427,1.688,428,1.578,466,2.142,475,3.347,476,2.822,477,5.136]],["t/43",[2,0.389,61,1.139,74,2.453,78,2.643,80,1.709,81,1.595,111,2.206,146,2.493,180,1.26,212,2.86,215,3.856,309,2.583,311,4.476,360,4.192,376,4.801,426,1.651,427,1.491,428,1.394,466,1.986,478,3.856,479,4.641,480,3.856,481,4.641,482,4.563,483,4.641,484,4.641,485,3.856,486,3.589,487,5.778,488,3.856,489,4.641,490,3.856,491,4.641]],["t/45",[12,1.212,35,1.951,43,3.582,61,1.212,107,2.097,114,3.82,222,3.369,223,3.582,228,3.582,426,1.757,466,2.224,492,4.462,493,4.989,494,4.939,495,4.462,496,3.201,497,5.665,498,5.665,499,5.665,500,6.885,501,5.665,502,5.665,503,5.665,504,5.665,505,5.665,506,5.423,507,4.939,508,5.665,509,5.665]],["t/47",[2,0.384,38,3.323,42,0.913,81,1.575,83,3.094,89,2.009,105,1.203,143,4.432,167,3.807,180,1.244,212,2.823,244,4.484,264,4.763,378,1.945,399,2.225,426,1.63,427,1.472,428,1.376,466,2.32,475,3.36,476,3.079,477,4.837,510,5.65,511,4.138,512,5.254,513,5.254,514,4.138,515,2.096]],["t/49",[42,1.057,105,1.02,152,4.109,180,1.441,399,2.229,426,1.887,427,1.704,428,1.593,466,2.154,472,3.17,475,3.367,476,3.367]],["t/51",[2,0.482,42,0.917,55,2.629,105,0.885,180,1.249,195,3.725,287,4.062,293,1.726,357,2.187,399,1.637,426,1.637,427,1.478,428,1.382,430,2.982,466,2.257,472,2.979,475,2.472,476,2.472,516,6.591,517,3.148,518,4.156,519,3.148,520,4.156,521,7.187,522,3.725,523,3.558,524,4.545,525,6.591,526,5.277,527,3.148,528,3.148,529,6.591]],["t/53",[2,0.383,61,1.119,69,2.466,72,2.68,80,2.299,105,0.877,107,1.937,109,2.56,111,3.354,146,2.451,180,1.239,186,2.256,199,2.451,247,2.256,309,2.495,316,4.121,349,3.309,388,4.121,426,1.623,427,1.465,428,1.37,430,2.957,433,3.528,466,1.568,478,3.791,527,3.121,530,3.309,531,5.232,532,3.528,533,6.556,534,3.309,535,5.232,536,5.232,537,5.232,538,5.232,539,5.232,540,5.232,541,5.232]],["t/55",[2,0.35,37,1.386,61,1.024,62,2.451,63,2.064,74,2.293,78,1.909,80,1.989,111,2.847,180,1.133,186,2.064,209,2.571,212,2.571,215,3.467,309,2.693,311,4.251,329,2.064,357,1.984,360,3.769,376,4.488,393,1.34,426,1.484,427,1.34,428,1.253,445,3.026,466,2.255,478,3.467,481,4.172,482,4.343,483,4.172,484,4.172,485,3.467,486,3.227,487,5.4,488,3.467,489,4.172,490,3.467,491,4.172,530,3.026,542,3.467,543,3.467,544,4.63,545,3.467,546,3.026,547,5.4,548,5.4]],["t/57",[2,0.43,26,2.642,42,1.224,89,1.647,180,1.392,191,3.16,299,2.536,399,2.185,426,1.824,427,1.647,428,1.54,466,2.111,472,3.125,475,3.299,476,2.755,549,3.784,550,5.128,551,5.938]],["t/59",[2,0.505,37,1.649,42,0.989,66,2.032,82,4.119,180,1.347,240,4.366,340,3.101,357,2.359,378,2.107,417,3.536,426,1.765,427,1.594,428,1.49,466,2.228,496,3.902,552,6.904,553,5.438,554,6.904,555,6.904,556,4.124,557,4.962]],["t/61",[2,0.37,42,1.115,44,2.273,56,0.848,61,1.373,66,1.806,67,1.944,70,2.381,71,2.719,81,2.113,105,0.848,131,3.412,206,5.108,247,2.182,293,2.004,309,2.465,399,1.57,423,2.371,426,1.57,431,3.919,466,1.517,515,2.812,542,3.667,558,3.985,559,3.829,560,4.651,561,1.924,562,3.985,563,4.412,564,5.06,565,4.412,566,5.06,567,3.985,568,5.06,569,3.667,570,3.019]],["t/63",[2,0.279,12,1.489,61,1.137,67,1.463,70,1.706,72,2.721,80,2.376,81,2.087,87,2.202,96,3.239,105,1.026,128,1.182,131,3.582,180,1.258,206,3.849,245,1.267,270,3.849,290,2.202,293,1.888,309,2.581,317,1.784,340,1.711,342,2.568,358,2.409,399,1.182,423,1.784,427,1.067,428,0.997,431,3.39,437,3.321,466,1.984,475,1.784,496,2.153,515,2.44,542,2.76,559,3.169,560,2.76,563,5.334,571,3.809,572,3.809,573,3.809,574,4.184,575,5.312,576,3.809,577,3.809,578,4.632,579,3.809,580,3.809,581,3.809,582,4.184,583,5.312,584,2.568,585,4.432,586,3.809,587,3.321,588,6.117,589,3.809,590,5.312,591,2.153,592,3.809,593,3.809,594,3.809,595,3,596,3.809,597,3.809,598,2.76,599,3.809,600,4.184,601,3,602,3,603,3,604,3.809,605,3.809,606,3.321,607,3.809,608,3.809,609,3.809]],["t/65",[2,0.377,6,2.462,12,0.781,38,3.261,39,2.063,42,0.634,54,2.057,70,1.172,72,1.87,73,3.566,81,1.546,83,2.578,89,1.675,105,1.226,180,0.864,186,2.578,238,1.962,245,1.988,247,1.575,260,2.015,293,1.35,299,2.224,303,3.076,304,2.641,311,4.019,317,1.71,320,2.178,331,2.178,390,1.6,401,2.063,426,1.133,427,1.023,428,0.956,430,3.671,433,4.62,466,2.191,472,1.514,550,5.213,556,2.646,569,2.646,570,2.178,610,5.157,611,3.566,612,5.157,613,3.184,614,5.157,615,3.184,616,3.651,617,3.184,618,3.651,619,5.157,620,4.709,621,3.737,622,3.651,623,5.157,624,3.184,625,5.213,626,3.651,627,2.646,628,4.496,629,2.876,630,3.651,631,3.184,632,3.651,633,3.651,634,2.876,635,3.651,636,5.157,637,2.876,638,2.646,639,3.651,640,5.157,641,3.651,642,5.157,643,3.651,644,5.157,645,3.651,646,5.157,647,3.651,648,5.157,649,3.651,650,2.876,651,5.157,652,3.076,653,2.646,654,3.651]],["t/67",[2,0.425,9,1.35,35,0.993,37,1.512,42,1.369,44,1.295,54,2.485,56,1.241,66,2.073,70,0.926,80,1.676,83,1.872,86,0.894,87,2.164,89,0.807,103,2.124,105,1.044,109,1.411,150,1.72,180,1.028,191,1.549,206,2.089,247,1.872,260,1.619,287,2.453,293,1.136,294,2.453,295,3.145,299,1.872,300,1.823,304,1.476,308,1.944,309,1.735,310,1.549,314,1.549,320,3.113,324,1.823,357,1.195,378,1.607,390,1.619,393,1.216,395,1.944,397,4.574,399,1.619,403,1.823,405,2.926,407,2.554,426,0.894,427,0.807,428,0.755,430,1.629,431,1.476,445,1.823,462,1.72,466,2.296,472,1.195,475,1.35,476,1.35,515,1.15,528,1.72,532,1.944,534,1.823,542,2.089,558,4.111,561,1.301,570,1.72,655,7.286,656,4.34,657,4.34,658,5.219,659,4.34,660,2.883,661,4.34,662,2.883,663,4.34,664,2.883,665,4.34,666,2.883,667,4.34,668,2.883,669,4.34,670,2.883,671,2.883,672,4.34,673,2.883,674,4.34,675,2.883,676,4.34,677,2.883,678,2.883,679,2.883,680,4.34,681,2.883,682,2.883,683,2.514,684,2.883,685,2.514,686,2.883,687,2.883,688,2.883,689,2.514,690,4.34,691,2.883,692,4.551,693,4.34,694,3.301,695,3.418,696,2.883,697,1.629,698,4.34,699,4.34,700,2.514,701,4.34,702,2.883,703,1.944,704,4.34,705,4.34,706,2.883,707,2.27,708,2.089]],["t/69",[2,0.428,35,2.016,42,1.22,61,1.503,118,3.308,180,1.386,191,3.773,287,3.308,294,3.308,295,4.241,296,5.104,299,3.029,300,3.701,301,4.61,305,4.241,306,4.61,307,5.104,308,3.947,426,1.816,466,1.755,492,4.61,591,3.308,685,5.104,709,5.853]],["t/71",[42,1.363,349,4.09,426,2.006,492,5.094,710,5.639,711,5.639]],["t/73",[37,1.59,62,2.811,63,2.367,80,1.762,96,2.686,146,2.571,180,1.299,186,2.367,222,2.686,309,2.606,316,4.322,320,3.274,348,3.471,357,2.275,393,1.892,426,1.703,427,1.537,428,1.437,445,3.471,461,2.949,466,2.193,478,3.977,479,4.785,488,3.977,543,3.977,544,4.932,545,3.977,546,3.471,547,5.888,548,5.888,712,5.488]],["t/75",[12,1.621,56,1.117,105,1.117,108,2.495,180,1.271,186,2.315,238,2.884,317,3.121,349,3.395,359,2.627,417,2.75,426,1.665,427,1.504,428,1.406,455,3.89,458,5.809,459,5.809,461,4.069,462,3.203,466,1.997,480,3.89,530,3.395,713,4.827,714,6.662,715,6.662,716,4.213,717,5.369,718,5.369,719,5.369]],["t/77",[9,2.268,35,1.668,37,1.808,45,3.71,52,2.175,61,1.036,97,2.736,105,0.812,108,1.668,180,1.146,186,2.088,233,3.062,247,2.691,293,1.268,325,3.062,359,2.369,417,3.736,426,1.502,427,1.356,428,1.268,461,4.28,462,3.723,466,1.871,480,3.508,488,4.522,515,1.931,720,3.813,721,4.915,722,3.723,723,6.24,724,5.441,725,4.915,726,6.24,727,4.842,728,3.813,729,4.842,730,6.24,731,5.439,732,4.915,733,4.842,734,4.222,735,4.842,736,4.222,737,4.842,738,3.813]],["t/79",[12,1.377,35,1.75,44,2.282,66,1.814,70,2.067,72,3.296,76,3.031,130,2.73,180,1.203,213,3.426,270,3.682,309,2.643,314,2.73,399,1.576,426,1.576,427,1.423,428,1.33,431,3.618,466,1.929,527,3.031,530,3.213,534,3.213,558,4.002,559,3.031,560,3.682,561,1.523,578,5.612,582,5.563,585,5.118,606,4.43,638,3.682,739,4.002,740,4.002,741,5.081,742,4.43,743,5.081,744,5.081,745,5.081,746,3.682,747,5.081,748,4.002,749,5.081,750,5.081]],["t/81",[2,0.463,49,1.104,56,0.502,57,0.598,61,0.955,69,2.534,72,3.401,73,1.786,81,1.339,86,0.929,87,1.241,89,0.839,99,1.692,102,1.609,105,0.502,107,2.855,108,2.181,111,1.241,126,2.399,146,1.403,150,1.786,180,0.709,193,2.824,199,3.312,202,1.345,248,1.466,255,2.611,260,1.385,270,2.17,309,0.996,329,1.292,345,1.692,357,3.197,368,2.359,370,1.534,373,2.359,426,0.929,427,0.839,428,0.784,430,3.345,433,2.019,438,2.17,439,2.359,442,2.359,448,4.004,455,2.17,461,1.609,466,1.774,482,2.824,493,3.869,495,2.359,527,1.786,530,1.894,532,2.019,534,2.824,549,2.399,561,0.898,569,2.17,582,2.359,620,2.359,683,2.611,697,2.524,751,2.995,752,2.995,753,2.995,754,2.611,755,2.995,756,2.995,757,4.466,758,5.34,759,2.995,760,4.466,761,2.995,762,4.466,763,5.34,764,2.359,765,5.919,766,4.466,767,2.995,768,2.995,769,2.995,770,2.995,771,2.995,772,2.995,773,2.995,774,2.995,775,2.995,776,2.006,777,2.995,778,2.995,779,2.995,780,2.995,781,2.995,782,2.995,783,2.995,784,2.995,785,2.995,786,2.995,787,2.995,788,4.466,789,2.995,790,2.995,791,2.995,792,2.995,793,5.34,794,2.995,795,2.611,796,2.995,797,2.995,798,5.34,799,2.359,800,2.611,801,2.995,802,4.466,803,2.611,804,2.995,805,2.995,806,2.019,807,2.824,808,4.466,809,2.995,810,4.466,811,2.611,812,2.995,813,3.517,814,2.359,815,2.611,816,2.359]],["t/83",[12,1.201,49,1.047,56,0.941,69,1.933,70,1.802,72,2.875,81,1.683,92,1.933,107,3.007,108,1.933,180,1.329,349,3.55,357,3.063,426,1.741,427,1.572,428,1.47,430,3.172,439,4.421,530,3.55,561,1.683,570,3.348,710,4.894,711,4.894,817,6.847,818,4.894,819,5.613,820,5.613,821,5.613]],["t/85",[2,0.363,42,1.101,49,0.925,52,2.227,55,2.935,56,1.062,68,3.581,70,1.592,71,2.664,74,1.836,78,2.527,79,2.346,80,1.592,103,2.426,104,2.958,108,2.183,119,3.136,121,3.136,123,1.343,128,1.538,132,2.227,133,1.708,158,3.136,260,1.966,295,4.591,390,2.283,393,1.389,472,2.055,524,3.136,822,3.905,823,4.323,824,4.958,825,4.323,826,4.958,827,3.343,828,3.593,829,4.958,830,4.958,831,4.323,832,3.245,833,4.991,834,4.323,835,3.905,836,4.323,837,3.905,838,4.323,839,4.323,840,3.593,841,2.958,842,4.323]],["t/87",[0,2.005,2,0.389,9,2.081,12,0.636,33,3.873,37,0.861,42,0.517,43,1.88,49,0.554,52,2.649,53,2.154,55,1.772,56,0.498,57,0.594,66,2.364,68,2.51,70,0.955,71,1.597,74,2.337,76,1.774,78,1.772,79,1.644,80,1.426,84,2.275,87,1.232,88,2.592,92,1.024,103,1.455,104,1.774,105,0.498,119,1.88,128,1.378,130,1.597,132,2.974,133,1.831,138,1.186,158,1.88,196,1.88,205,2.809,236,1.774,247,1.282,260,1.958,286,2.293,293,1.163,294,4.076,299,1.915,302,3.218,309,0.989,310,1.597,324,3.362,346,1.232,358,1.88,390,1.958,393,1.244,399,0.922,405,2.995,407,1.455,409,2.342,452,2.342,462,1.774,465,3.218,472,1.841,517,3.518,519,1.774,522,1.68,574,4.187,611,2.649,703,2.005,746,2.154,776,1.335,827,3.977,828,3.218,831,3.873,832,3.021,833,3.498,834,3.873,835,2.342,836,2.592,837,2.342,838,2.592,839,2.592,840,2.154,841,1.774,842,2.592,843,2.973,844,3.873,845,4.465,846,4.645,847,2.592,848,2.973,849,2.592,850,2.342,851,2.342,852,3.498,853,2.342,854,2.973,855,2.973,856,2.005,857,5.405,858,2.973,859,2.973,860,3.873,861,2.342,862,2.973,863,2.154,864,2.973,865,2.005,866,2.592,867,2.973,868,2.592,869,2.973,870,2.592,871,2.973,872,2.973,873,4.441,874,2.973,875,2.005,876,2.592,877,2.973,878,2.973,879,4.441,880,3.873,881,4.441,882,2.973,883,2.342,884,2.973,885,2.973,886,4.441,887,2.973,888,2.592,889,1.774,890,2.592,891,2.973,892,2.973,893,2.973,894,2.973]],["t/89",[2,0.436,55,3.026,108,2.447,109,3.476,123,1.616,126,3.206,128,1.851,132,2.68,293,1.562,294,3.372,302,4.323,313,2.68,314,3.206,465,4.323,468,4.699,739,4.699,832,3.056,895,7.103,896,5.966]],["t/91",[2,0.461,37,1.425,42,0.855,49,1.175,54,1.962,55,2.515,56,0.825,57,1.39,58,1.889,59,2.407,60,2.407,61,1.489,70,1.58,72,2.519,77,3.317,80,1.58,92,2.396,105,0.825,123,1.332,128,1.526,133,1.694,138,1.962,260,1.956,286,2.121,292,2.519,293,1.288,331,2.934,370,2.519,390,2.276,393,1.766,427,1.378,428,1.288,561,2.274,598,3.564,865,3.317,897,3.564,898,4.919,899,4.289,900,3.317,901,3.564,902,4.919,903,4.919,904,3.874,905,3.874,906,4.919,907,3.874,908,4.289,909,4.919,910,4.919,911,4.919]],["t/93",[2,0.53,12,1.467,42,0.828,49,1.152,52,2.775,54,1.901,56,1.036,57,1.235,61,1.322,70,1.531,80,1.984,81,1.429,86,1.479,89,1.335,96,2.333,123,1.291,128,1.479,132,2.141,133,1.642,158,3.014,244,3.685,245,1.585,260,1.916,292,2.441,293,1.248,308,4.622,378,2.537,390,2.249,393,1.73,475,2.894,476,2.233,477,4.166,522,3.491,561,1.429,652,2.843,856,4.166,857,3.754,865,3.214,900,3.214,904,3.754,905,3.754,907,3.754,908,4.156,912,4.156,913,4.767,914,4.767,915,3.454,916,4.767,917,4.156,918,4.767,919,4.767]],["t/95",[35,2.16,54,2.501,92,2.16,105,1.051,133,2.16,138,2.501,399,1.945,776,2.816,845,4.228,920,7.314,921,6.27,922,3.74,923,3.965]],["t/97",[12,1.381,35,1.757,42,0.887,49,0.951,55,2.035,61,1.092,70,1.638,92,2.223,95,3.044,123,1.382,128,1.583,133,1.757,138,2.035,202,2.292,260,2.002,297,6.832,356,4.081,370,3.809,390,2.307,393,1.807,395,3.44,399,1.583,401,2.883,561,1.529,776,2.292,901,3.697,922,3.044,924,5.102,925,4.018,926,5.102,927,6.453,928,5.102,929,5.102,930,5.102,931,4.449,932,4.449,933,7.077,934,5.102,935,5.102,936,5.102]],["t/99",[37,2.041,49,1.097,56,1.181,57,1.175,58,2.259,59,3.446,60,3.446,61,1.507,62,3.861,63,3.251,95,3.508,105,0.986,423,2.755,754,5.128,937,5.881,938,5.881,939,7.043]],["t/101",[2,0.345,12,1.776,18,4.109,27,4.109,35,1.623,59,2.306,78,1.879,79,1.744,96,2.306,105,0.79,132,2.117,180,1.116,347,2.532,356,2.98,393,1.32,543,4.443,545,4.939,546,2.98,561,1.413,602,3.711,940,4.712,941,6.132,942,4.712,943,5.346,944,4.712,945,4.712,946,4.712,947,4.712,948,4.712,949,4.712,950,4.712,951,4.712,952,4.712,953,6.816,954,4.712,955,5.368,956,4.712,957,4.712,958,6.816,959,4.712,960,4.712,961,4.712,962,4.712,963,4.712,964,4.712,965,4.712,966,4.712,967,4.712,968,4.712,969,4.712,970,4.712,971,4.109,972,4.109,973,4.712]],["t/103",[2,0.42,12,1.486,37,2.012,57,1.148,58,2.867,59,2.811,60,2.811,61,1.229,67,2.206,190,6.054,205,3.632,222,2.811,276,2.811,343,4.524,506,4.524,515,2.977,601,4.524,603,4.524,955,4.524,974,5.469,975,5.008,976,5.008,977,5.744,978,5.744]],["t/105",[2,0.511,5,0.357,8,0.445,9,0.703,12,1.434,20,0.445,35,0.982,37,1.652,38,1.803,39,0.599,42,0.748,45,1.017,49,0.705,52,0.254,54,1.426,55,0.755,56,0.478,57,0.212,58,0.576,60,0.926,61,0.849,64,0.671,65,0.492,66,1.349,67,0.217,68,0.848,69,1.911,70,1.476,72,1.313,73,3.093,74,1.881,75,0.492,76,1.129,78,1.242,79,2.295,80,0.916,81,1.455,82,2.366,83,1.982,84,1.313,85,1.957,86,1.426,87,1.391,89,1.248,91,3.331,92,1.302,95,0.337,96,0.734,97,0.599,99,0.319,100,0.337,102,0.303,103,1.395,104,3.758,105,0.901,106,2.136,107,1.469,108,0.652,109,0.519,110,0.381,111,2.3,112,0.357,114,0.715,118,1.269,125,1.957,132,0.476,134,0.633,138,0.423,143,0.381,150,0.633,152,0.57,167,0.409,172,1.087,173,0.492,180,0.251,181,1.65,185,0.445,186,0.816,191,0.303,193,0.357,195,1.07,196,0.357,199,1.571,202,2.233,212,1.532,215,2.591,220,0.357,222,1.941,228,0.357,233,0.357,236,0.337,238,1.206,240,0.949,244,0.895,245,1.573,247,2.46,248,0.276,258,1.182,259,1.182,260,0.884,264,1.087,276,1.524,282,1.371,286,0.457,287,1.896,290,1.717,292,0.289,293,1.085,294,0.848,299,2.318,300,1.197,303,0.337,304,2.546,305,1.087,309,0.353,310,0.57,311,1.611,313,1.008,314,1.017,317,1.675,319,1.308,324,1.42,325,0.357,329,0.243,331,0.337,338,0.925,340,1.507,345,0.319,346,0.44,347,0.303,350,0.445,352,0.671,357,2.106,359,1.395,362,0.492,363,0.835,368,0.835,370,0.769,373,2.018,376,2.431,378,1.399,385,1.957,388,1.182,390,1.231,393,0.629,395,1.012,397,1.768,399,1.231,401,0.599,403,0.671,405,0.715,407,0.519,408,1.65,409,0.835,411,0.492,417,1.718,419,0.445,422,0.445,423,0.887,425,1.858,427,0.158,428,0.148,430,3.727,433,3.894,438,0.409,445,0.357,446,0.381,448,0.671,452,1.491,461,1.673,462,1.129,465,1.371,466,2.272,468,0.835,469,0.492,472,1.717,475,1.571,476,1.201,477,1.012,482,1.197,485,0.409,486,0.715,490,0.409,493,1.857,495,0.445,496,1.269,510,0.835,511,0.445,514,0.445,515,1.022,517,0.633,518,0.835,519,0.633,520,0.445,522,1.07,523,1.514,524,0.949,527,0.337,528,1.529,534,0.671,544,0.381,545,0.409,546,0.357,549,0.57,551,0.835,553,0.835,556,1.371,557,0.492,559,0.633,561,1.772,567,0.445,570,0.337,584,1.012,591,0.599,595,0.835,611,1.701,613,0.492,617,0.492,620,1.491,621,1.087,624,0.925,625,0.925,650,1.182,652,0.337,653,1.371,692,2.486,694,1.969,695,1.182,697,2.432,700,0.492,703,0.381,707,0.835,708,1.371,716,1.803,720,0.835,721,0.445,722,0.337,725,0.445,728,0.445,731,1.491,732,1.182,734,0.492,736,0.492,738,0.445,739,0.835,740,2.642,776,0.254,800,1.65,803,0.492,806,0.715,807,0.357,811,0.925,813,2.642,814,1.491,815,0.492,816,0.445,828,0.409,832,0.289,841,0.633,849,0.492,850,0.445,853,0.445,863,0.409,875,0.715,922,0.337,979,0.564,980,1.061,981,0.445,982,1.491,983,1.5,984,0.564,985,2.235,986,2.518,987,0.564,988,0.492,989,0.492,990,0.564,991,0.357,992,0.492,993,0.564,994,0.564,995,0.564,996,1.957,997,0.925,998,1.957,999,0.835,1000,0.564,1001,0.492,1002,1.061,1003,0.564,1004,0.564,1005,0.564,1006,0.492,1007,0.564,1008,0.949,1009,0.564,1010,1.061,1011,0.445,1012,0.564,1013,0.492,1014,0.564,1015,1.893,1016,0.492,1017,0.564,1018,0.564,1019,0.564,1020,1.5,1021,1.5,1022,0.445,1023,2.851,1024,1.087,1025,0.564,1026,0.564,1027,1.768,1028,0.564,1029,0.564,1030,0.492,1031,0.564,1032,0.564,1033,1.5,1034,1.012,1035,0.949,1036,0.564,1037,0.492,1038,0.564,1039,0.564,1040,0.564,1041,1.5,1042,1.5,1043,0.835,1044,0.492,1045,0.564,1046,0.564,1047,0.564,1048,0.492,1049,0.492,1050,1.061,1051,1.061,1052,0.925,1053,0.492,1054,0.564,1055,0.409,1056,0.564,1057,0.564,1058,0.769,1059,1.061,1060,1.061,1061,1.061,1062,0.564,1063,0.445,1064,0.564,1065,0.564,1066,0.835,1067,0.925,1068,0.835,1069,0.564,1070,0.925,1071,0.925,1072,0.564,1073,1.182,1074,0.492,1075,0.492,1076,1.061,1077,0.925,1078,0.564,1079,0.769,1080,0.564,1081,0.564,1082,0.492,1083,0.492,1084,0.564,1085,0.925,1086,0.492,1087,0.564,1088,0.564,1089,2.986,1090,0.925,1091,0.564,1092,0.564,1093,0.564,1094,0.409,1095,2.018,1096,1.308,1097,1.012,1098,0.564,1099,0.925,1100,0.492,1101,0.492,1102,0.564,1103,0.564,1104,1.621,1105,2.675,1106,1.448,1107,0.564,1108,0.492,1109,1.061,1110,2.235,1111,1.5,1112,3.611,1113,0.492,1114,1.957,1115,0.492,1116,0.492,1117,0.492,1118,0.925,1119,0.492,1120,0.492,1121,0.564,1122,0.564,1123,0.337,1124,1.182,1125,0.925,1126,0.564,1127,0.445,1128,1.5,1129,0.564,1130,0.564,1131,0.492,1132,0.564,1133,0.564,1134,1.893,1135,0.564,1136,0.564,1137,0.564,1138,0.564,1139,0.492,1140,0.564,1141,0.564,1142,1.276,1143,0.564,1144,0.445,1145,0.492,1146,0.492,1147,0.925,1148,0.564,1149,0.564,1150,0.564,1151,0.564,1152,1.308,1153,0.925,1154,0.564,1155,0.564,1156,0.492,1157,0.492,1158,0.564,1159,0.564,1160,0.564,1161,0.564,1162,0.564,1163,0.492,1164,0.564,1165,0.492,1166,0.564,1167,0.445,1168,1.371,1169,0.564,1170,0.381,1171,0.564,1172,0.564,1173,0.564]],["t/107",[2,0.417,12,0.904,26,2.901,37,2.241,42,1.202,44,1.899,49,1.204,56,1.211,57,0.845,58,1.624,61,0.904,69,2.225,70,1.357,86,1.311,105,0.709,106,3.225,107,2.902,108,1.965,109,2.069,130,2.271,202,2.563,205,2.673,209,2.271,222,2.069,223,2.673,247,2.461,276,3.384,309,1.406,310,2.271,329,1.823,345,2.389,357,2.867,431,3.308,448,3.608,455,3.063,515,1.686,528,2.522,561,1.936,638,4.134,695,3.329,713,4.134,982,3.329,986,2.389,1016,3.686,1034,2.85,1035,2.673,1174,5.706,1175,5.706,1176,4.227,1177,4.227,1178,4.227,1179,4.227,1180,4.227,1181,5.706,1182,4.227,1183,5.706,1184,4.227,1185,4.227,1186,4.227]],["t/109",[2,0.398,12,1.437,37,1.576,56,0.912,59,3.287,60,3.287,62,3.44,63,2.897,67,2.09,79,2.014,103,2.662,222,2.662,245,1.809,276,2.662,290,2.255,343,4.284,346,2.784,393,1.881,482,3.44,490,4.867,506,4.284,515,2.679,601,4.284,603,4.284,955,4.284,974,5.29,975,4.743,976,4.743,1187,5.44,1188,5.44,1189,5.44,1190,4.284,1191,5.44,1192,5.44]],["t/111",[2,0.437,12,1.52,37,1.936,43,3.774,49,0.843,56,1.12,57,0.904,59,2.213,63,1.95,66,2.131,69,2.301,74,1.674,86,1.403,89,1.267,91,4.503,180,1.413,202,2.031,282,3.276,293,1.563,340,2.681,363,3.561,549,2.429,591,2.556,716,3.774,814,3.561,1067,5.204,1068,3.561,1070,3.943,1071,5.825,1073,5.596,1074,5.204,1079,4.325,1095,5.262,1097,3.049,1131,3.943,1142,4.024,1156,3.943,1193,4.325,1194,4.522,1195,4.522,1196,4.522,1197,3.943,1198,4.522]],["t/113",[2,0.273,12,0.798,26,1.675,49,0.695,56,0.877,57,0.745,63,2.257,67,1.432,69,2.585,74,2.557,84,1.91,86,2.221,87,1.546,89,1.837,91,3.847,96,1.825,105,0.625,111,2.507,122,2.937,123,1.01,136,2.358,186,2.257,212,3.523,221,2.702,222,1.825,236,3.122,245,1.74,260,1.876,293,1.37,309,1.24,317,2.452,340,2.945,346,1.546,347,2.812,370,2.68,390,1.876,422,4.122,423,1.747,425,2.224,428,0.976,466,1.118,486,2.514,591,2.107,600,2.937,627,2.702,697,2.107,708,3.792,870,3.251,1086,3.251,1089,2.107,1097,2.514,1104,2.358,1105,3.529,1106,2.107,1170,3.529,1193,2.702,1199,3.729,1200,3.251,1201,3.251,1202,4.122,1203,4.122,1204,5.439,1205,5.273,1206,5.233,1207,3.729,1208,3.729,1209,3.729,1210,3.729,1211,3.729,1212,4.563,1213,4.122,1214,3.251,1215,3.251,1216,3.251,1217,3.251,1218,3.251,1219,3.251,1220,3.251,1221,3.251,1222,3.251,1223,3.251,1224,3.251,1225,2.937,1226,2.937,1227,3.251,1228,3.251,1229,3.251,1230,2.937]],["t/115",[2,0.276,12,0.808,26,1.695,49,0.704,56,0.885,63,2.276,67,1.45,69,2.743,74,1.397,87,1.565,89,1.057,91,3.542,105,0.633,107,2.253,111,2.523,122,2.973,123,1.022,136,2.387,150,2.251,199,2.473,202,2.734,212,3.27,221,2.735,222,2.583,245,1.255,260,1.888,293,1.382,309,1.255,317,1.768,340,2.961,346,1.565,347,2.028,357,2.188,370,3.118,390,1.888,428,0.988,486,2.545,543,2.735,591,2.133,627,2.735,697,2.133,708,2.735,722,2.251,776,1.695,799,2.973,807,2.387,1079,2.735,1089,2.133,1097,2.545,1104,2.387,1105,3.559,1106,2.133,1170,4.104,1193,2.735,1200,3.291,1201,3.291,1202,4.157,1203,4.157,1204,2.973,1212,4.602,1213,4.157,1214,3.291,1215,3.291,1216,3.291,1217,3.291,1218,3.291,1219,3.291,1220,3.291,1221,3.291,1222,3.291,1223,3.291,1224,4.602,1225,2.973,1226,2.973,1227,4.602,1228,3.291,1229,3.291,1231,3.774,1232,3.774,1233,3.774,1234,3.774,1235,3.774,1236,3.774,1237,3.774,1238,5.278,1239,5.278,1240,5.278,1241,5.278,1242,3.774,1243,3.774,1244,2.973,1245,2.735,1246,3.774]],["t/117",[26,2.209,37,2.016,56,1.166,60,2.407,63,2.719,67,1.889,78,1.962,87,2.039,91,4.294,114,3.317,123,1.332,180,1.165,202,2.209,222,2.407,236,2.934,248,2.407,293,1.651,340,3.407,346,2.039,347,2.643,359,2.407,425,2.934,428,1.288,591,2.78,1058,3.564,1063,3.874,1142,4.691,1190,3.874,1193,3.564,1202,4.965,1203,4.965,1205,6.066,1213,4.965,1225,3.874,1226,3.874,1230,3.874,1247,4.919,1248,3.564,1249,4.919,1250,4.919,1251,6.304,1252,6.304]],["t/119",[2,0.371,12,1.761,32,1.956,36,3.115,49,0.83,56,0.599,57,0.89,58,0.862,61,0.764,63,1.92,64,1.418,66,0.801,67,0.862,68,3.502,69,1.749,70,1.43,71,1.205,74,1.648,77,1.512,78,0.895,79,2.773,80,1.781,81,0.672,83,2.548,86,0.696,87,1.481,89,1.422,92,1.231,97,1.268,100,2.131,101,1.512,102,1.205,103,1.098,105,1.218,106,1.268,108,0.773,111,2.569,123,0.607,128,0.696,133,0.773,186,0.967,199,2.379,213,1.512,220,1.418,245,1.688,246,1.766,248,2.485,276,1.748,286,1.541,290,0.93,292,1.149,294,1.268,313,1.007,336,1.512,346,1.481,350,1.766,359,1.098,364,1.766,370,2.601,378,1.323,423,2.379,431,1.149,435,3.882,467,1.625,507,1.956,528,2.131,544,1.512,549,1.919,561,0.672,637,1.766,652,1.338,694,1.418,746,1.625,776,1.007,795,1.956,807,2.259,818,1.956,835,1.766,850,1.766,865,1.512,890,1.956,904,1.766,972,1.956,986,1.268,989,1.956,991,1.418,1008,1.418,1011,1.766,1058,1.625,1066,1.766,1085,1.956,1089,3.841,1090,1.956,1094,1.625,1104,2.259,1105,2.409,1106,1.268,1123,2.131,1124,4.367,1244,2.814,1245,2.589,1253,1.625,1254,1.956,1255,2.243,1256,3.679,1257,4.428,1258,2.814,1259,6.05,1260,3.115,1261,3.573,1262,1.625,1263,2.243,1264,2.814,1265,2.243,1266,2.243,1267,1.956,1268,6.197,1269,2.243,1270,2.243,1271,2.243,1272,5.078,1273,2.243,1274,3.882,1275,2.243,1276,3.573,1277,1.512,1278,2.243,1279,1.956,1280,2.814,1281,2.243,1282,3.573,1283,2.243,1284,2.243,1285,3.573,1286,3.573,1287,2.243,1288,1.766,1289,2.243,1290,2.243,1291,2.243,1292,4.453,1293,2.243,1294,4.453,1295,3.573,1296,3.573,1297,2.243,1298,2.243,1299,2.243,1300,1.956,1301,2.243,1302,2.243,1303,2.243,1304,3.573,1305,2.243,1306,3.573,1307,2.243,1308,3.573,1309,2.243,1310,1.956,1311,2.243,1312,2.243,1313,2.243]],["t/121",[49,1.219,61,1.603,87,2.709,105,1.096,1106,3.694]],["t/123",[12,0.852,37,1.154,49,0.742,54,3.042,56,0.667,57,0.796,66,1.421,67,1.529,69,2.157,71,2.139,74,2.497,77,2.685,81,1.194,86,1.235,97,2.25,100,3.268,101,2.685,102,2.139,108,1.887,111,2.596,195,4.232,199,2.566,202,1.788,290,2.271,293,1.434,317,1.865,336,2.685,342,2.685,423,1.865,425,3.736,461,2.943,559,2.375,561,1.642,584,4.769,585,3.969,697,4.311,748,3.136,883,3.136,1123,4.219,1204,3.136,1245,2.885,1253,2.885,1314,4.776,1315,4.776,1316,5.881,1317,3.981,1318,3.472,1319,4.776,1320,4.776,1321,4.776,1322,4.776,1323,4.776,1324,3.981,1325,3.472,1326,4.776,1327,3.472,1328,3.472,1329,3.472,1330,3.472,1331,3.472,1332,3.472,1333,3.472,1334,3.472,1335,3.472,1336,3.472,1337,3.472,1338,3.472,1339,3.472,1340,3.472,1341,3.981,1342,3.981]],["t/125",[2,0.386,8,4.152,12,1.503,37,0.849,42,0.764,49,0.983,54,2.724,56,0.491,57,1.316,61,0.94,66,1.046,69,1.514,74,2.659,78,1.753,83,1.895,86,0.909,92,2.42,100,1.748,102,1.575,105,0.737,106,1.656,108,1.816,111,2.601,123,0.794,128,0.909,137,2.555,160,2.124,182,2.555,195,4.253,199,1.373,202,1.316,209,1.575,286,1.264,290,2.428,293,1.533,313,1.974,317,2.058,336,1.976,378,1.627,390,1.363,393,1.476,425,1.748,448,1.853,461,3.146,534,1.853,549,1.575,561,1.58,584,4.844,585,4.243,697,4.06,806,1.976,837,2.308,875,1.976,883,2.308,982,4.612,1022,2.308,1068,2.308,1089,2.979,1106,1.656,1123,4.074,1300,2.555,1314,2.555,1315,4.596,1316,5.955,1318,2.555,1319,4.596,1320,5.47,1321,5.106,1322,5.106,1323,5.106,1325,2.555,1326,4.596,1327,2.555,1328,2.555,1329,2.555,1330,2.555,1331,2.555,1332,2.555,1333,2.555,1334,2.555,1335,2.555,1336,2.555,1337,2.555,1338,2.555,1339,2.555,1340,3.831,1343,2.555,1344,2.931,1345,2.931,1346,2.555,1347,4.394,1348,4.394,1349,2.931,1350,4.394,1351,2.931,1352,2.931,1353,2.931,1354,4.394,1355,2.931]],["t/127",[2,0.405,12,0.866,39,2.287,42,0.703,45,2.976,54,1.614,55,2.709,58,1.554,61,0.866,74,1.498,79,2.051,84,2.073,92,2.339,105,1.059,123,1.926,132,2.837,152,2.174,198,2.729,220,3.503,228,2.559,245,1.346,286,2.389,299,1.745,300,4.842,303,2.414,329,2.389,331,2.414,337,3.529,370,3.235,390,1.718,393,1.133,399,1.255,403,2.559,407,2.711,472,2.296,475,2.595,476,1.896,519,2.414,527,2.414,549,2.174,561,2.132,611,2.414,832,2.837,866,3.529,889,3.304,915,2.932,986,3.838,1027,3.187,1034,2.729,1035,2.559,1043,3.187,1153,3.529,1343,3.529,1356,5.539,1357,4.047,1358,4.047,1359,4.974,1360,4.047,1361,3.529,1362,4.047,1363,3.187,1364,4.047,1365,4.047,1366,4.047,1367,4.047,1368,4.047,1369,4.047,1370,4.047,1371,4.047,1372,2.559,1373,3.529,1374,4.047,1375,4.047,1376,4.047,1377,4.047,1378,4.047,1379,4.047]],["t/129",[2,0.368,35,1.215,38,2.23,42,0.874,61,1.076,74,1.305,81,1.917,83,2.758,86,1.094,89,2.027,91,2.703,105,0.843,118,4.412,123,1.588,128,1.094,133,1.215,138,2.007,143,2.377,146,1.652,152,1.894,167,2.555,212,2.703,240,2.23,244,4.194,245,1.172,248,2.462,264,5.095,286,1.521,290,1.462,310,1.894,313,1.584,314,1.894,329,1.521,340,1.584,346,2.085,378,2.679,399,2.098,401,1.993,407,1.725,475,3.466,476,2.357,477,4.989,510,5.037,511,2.777,514,3.962,515,2.339,561,1.758,562,2.777,652,3.001,856,2.377,863,3.645,889,2.103,900,2.377,901,2.555,922,2.103,923,2.23,925,2.777,1024,2.555,1034,3.955,1035,3.709,1043,2.777,1044,3.074,1144,2.777,1248,2.555,1279,3.074,1372,2.23,1380,3.526,1381,3.526,1382,5.865,1383,3.526,1384,4.386,1385,3.526,1386,3.526,1387,3.526,1388,3.526,1389,5.865,1390,3.526,1391,3.526,1392,3.526]],["t/131",[0,4.888,1,3.451,2,0.426,12,1.427,35,0.857,37,1.558,39,2.19,42,0.432,49,0.888,52,1.117,54,1.899,55,2.325,56,0.417,57,0.952,61,0.829,70,0.799,71,1.336,74,1.435,76,2.312,78,0.992,79,0.921,80,1.245,83,1.073,84,1.985,86,0.772,89,1.334,92,0.857,105,0.901,121,1.573,123,1.456,126,1.336,128,1.668,133,1.64,134,1.484,136,2.451,138,2.325,146,1.165,152,3.131,153,1.677,155,1.802,168,1.959,171,3.053,174,2.808,195,3.039,196,4.077,209,1.336,222,1.217,245,1.938,247,1.073,260,1.668,272,1.959,276,1.217,287,3.294,288,1.959,290,1.974,293,1.247,313,2.139,314,1.336,317,1.165,321,1.802,328,2.169,329,2.054,346,2.229,352,1.573,357,1.031,378,0.921,390,1.915,393,0.697,405,1.677,407,1.217,472,2.559,475,1.165,476,1.165,517,3.208,518,1.959,519,3.477,520,3.053,522,3.039,523,3.626,524,3.904,549,2.082,574,1.959,591,1.406,598,1.802,628,2.169,634,1.959,689,2.169,742,2.169,776,1.117,806,2.613,822,1.959,827,1.677,832,3.415,846,1.959,851,1.959,856,1.677,857,1.959,860,2.169,875,1.677,876,3.38,880,2.169,897,1.802,922,1.484,923,1.573,991,3.012,1008,3.012,1037,2.169,1048,2.169,1049,5.621,1052,3.38,1127,1.959,1190,1.959,1256,1.802,1372,1.573,1393,2.487,1394,2.169,1395,2.169,1396,2.169,1397,4.762,1398,4.688,1399,2.487,1400,2.487,1401,2.487,1402,1.959,1403,2.487,1404,2.487,1405,2.487,1406,3.876,1407,2.169,1408,2.169,1409,2.169,1410,2.169,1411,2.487,1412,4.762,1413,3.876,1414,2.487,1415,2.487,1416,2.487,1417,2.487,1418,2.487,1419,2.487,1420,1.959,1421,2.487,1422,2.169,1423,2.487,1424,2.169,1425,2.487,1426,2.487,1427,2.487,1428,3.876,1429,2.169,1430,2.169,1431,2.169,1432,2.169,1433,2.487]],["t/133",[2,0.455,35,1.87,42,1.081,61,0.841,66,1.403,74,1.455,80,1.743,81,1.178,83,1.695,92,1.354,105,0.91,106,2.221,107,1.455,108,1.354,111,1.629,123,1.064,126,2.112,128,1.684,133,1.354,138,2.676,153,2.65,174,2.848,180,1.286,191,4.198,199,1.841,209,2.112,228,2.486,299,1.695,309,1.307,311,2.221,313,1.766,320,2.345,329,1.695,345,2.221,346,1.629,378,2.01,390,2.081,393,1.521,399,1.219,401,2.221,403,2.486,472,3.299,515,1.568,517,3.239,524,2.486,561,1.178,722,2.345,776,1.766,832,2.013,833,3.096,889,2.345,907,3.096,915,2.848,923,2.486,981,4.276,1089,2.221,1142,2.65,1167,3.096,1230,3.096,1277,2.65,1372,2.486,1434,3.427,1435,3.427,1436,5.424,1437,3.427,1438,3.427,1439,3.427,1440,6.708,1441,5.849,1442,6.708,1443,3.931,1444,3.931,1445,5.429,1446,3.931,1447,3.931,1448,3.931,1449,3.931,1450,3.931,1451,3.931,1452,3.931]],["t/135",[0,0.877,2,0.408,6,0.877,10,1.024,12,1.625,28,1.134,35,1.241,38,0.823,39,0.735,42,0.226,45,1.617,49,1.039,52,2.503,56,0.808,57,1.114,61,1.358,67,0.87,70,0.418,71,1.617,72,1.542,76,0.776,80,2.106,81,1.865,82,3.325,83,2.829,84,0.666,86,0.703,87,2.117,89,1.615,92,1.037,105,0.752,107,0.482,109,1.109,120,1.528,123,0.815,126,1.217,128,0.934,130,0.699,132,1.834,133,1.66,134,1.352,135,1.134,138,2.616,150,0.776,160,0.943,174,1.642,180,0.967,191,3.663,195,0.735,198,1.528,209,0.699,212,0.699,213,0.877,221,2.181,223,0.823,245,1.198,248,2.821,260,2.003,286,0.977,290,0.539,291,1.642,293,0.788,299,2.404,303,1.352,304,1.16,309,0.433,311,2.724,313,2.013,317,0.609,320,1.796,321,0.943,325,2.278,329,0.561,333,0.823,348,1.433,356,0.823,357,0.539,358,0.823,359,0.637,378,1.891,390,2.442,393,0.843,407,3.21,427,0.635,428,0.593,431,0.666,442,1.784,446,1.528,467,0.943,472,3,476,0.609,494,1.134,515,0.904,517,2.436,522,0.735,523,0.877,524,1.433,544,0.877,549,1.217,551,5.96,611,1.352,629,1.784,631,1.134,650,2.837,652,1.352,653,4.177,694,1.904,707,1.024,716,0.823,724,1.134,740,1.024,764,1.024,776,1.018,823,4.202,827,2.429,828,0.943,832,1.16,844,1.976,853,1.024,856,0.877,861,1.024,889,0.776,915,3.492,922,1.352,923,1.433,981,1.784,988,1.134,991,0.823,992,1.134,1024,0.943,1027,1.024,1035,0.823,1079,0.943,1125,1.134,1142,1.528,1157,2.625,1170,0.877,1197,1.134,1256,1.642,1264,1.024,1277,1.528,1288,2.837,1361,1.976,1363,1.024,1372,0.823,1395,1.976,1398,1.134,1402,3.216,1420,3.796,1431,1.976,1434,5.425,1435,1.134,1436,5.719,1437,1.134,1438,1.134,1439,5.532,1441,1.134,1453,1.301,1454,1.301,1455,2.266,1456,1.301,1457,1.301,1458,1.301,1459,2.266,1460,1.301,1461,2.266,1462,1.301,1463,1.301,1464,1.301,1465,1.301,1466,1.301,1467,1.301,1468,1.301,1469,1.301,1470,1.301,1471,1.301,1472,1.301,1473,2.266,1474,5.107,1475,3.909,1476,1.301,1477,1.024,1478,1.301,1479,1.301,1480,1.301,1481,1.134,1482,1.301,1483,1.024,1484,1.301,1485,1.301,1486,1.301,1487,1.301,1488,1.301,1489,1.301,1490,1.301,1491,1.301,1492,1.134,1493,1.301]],["t/137",[12,1.457,52,2.499,54,2.716,87,2.306,89,1.558,92,1.916,126,2.989,128,1.726,133,1.916,138,2.219,152,2.989,158,3.518,293,1.457,301,4.381,393,1.907,407,2.722,417,3.769,427,1.558,519,3.318,561,1.667,764,4.381,832,2.849,846,4.381,897,4.031,901,4.031,912,5.937,923,3.518,1402,4.381,1494,5.563,1495,5.563,1496,5.563,1497,5.563,1498,4.85]],["t/139",[1,1.809,2,0.284,9,1.17,12,1.552,19,3.46,20,1.967,26,1.122,37,1.561,42,1.015,44,1.746,49,1.279,52,1.122,53,2.817,55,2.329,57,0.954,61,1.022,62,2.991,63,2.324,66,1.388,70,0.802,71,1.342,73,3.215,79,1.995,81,0.749,82,2.319,83,1.077,86,0.775,87,1.035,92,1.645,96,1.222,99,1.411,102,1.342,105,0.903,108,0.86,119,1.579,123,0.676,130,1.342,138,1.551,143,1.684,155,1.809,156,2.177,172,1.809,186,1.077,196,1.579,198,1.684,201,2.177,205,1.579,209,2.089,220,1.579,238,2.089,240,1.579,244,1.49,245,1.588,260,0.775,272,1.967,286,1.077,290,1.035,292,2.445,299,2.958,303,2.319,304,1.991,305,4.481,310,1.342,313,1.122,329,2.324,340,1.746,348,2.459,352,1.579,356,1.579,359,1.222,364,1.967,378,1.767,390,1.481,393,0.699,399,0.775,401,1.411,403,1.579,417,2.76,419,1.967,423,1.17,462,1.49,466,0.749,473,3.062,496,1.411,522,2.197,553,3.76,556,2.817,561,1.936,562,1.967,584,1.684,602,1.967,611,3.215,621,3.905,637,1.967,638,1.809,722,1.49,776,1.746,825,3.39,845,1.684,889,1.49,905,1.967,943,2.177,999,1.967,1011,1.967,1024,1.809,1075,2.177,1082,2.177,1083,2.177,1094,1.809,1104,2.459,1113,2.177,1127,1.967,1144,1.967,1165,2.177,1170,1.684,1244,1.967,1262,1.809,1264,1.967,1280,1.967,1288,1.967,1359,1.967,1384,2.177,1394,2.177,1396,3.39,1499,3.888,1500,3.888,1501,3.888,1502,2.497,1503,2.497,1504,2.177,1505,2.497,1506,2.497,1507,2.497,1508,2.497,1509,2.497,1510,3.888,1511,4.163,1512,3.39,1513,2.497,1514,2.497,1515,2.497,1516,2.497,1517,2.497,1518,2.497,1519,2.497,1520,2.497,1521,2.497,1522,3.888,1523,1.809,1524,2.497,1525,2.497,1526,2.497,1527,2.497,1528,2.497,1529,2.497,1530,2.177,1531,2.497,1532,2.497,1533,2.497,1534,2.497,1535,3.39,1536,2.497,1537,2.497,1538,2.497,1539,2.497,1540,2.497,1541,2.497,1542,2.497,1543,2.497,1544,2.497,1545,3.888,1546,2.177,1547,2.497,1548,2.497,1549,2.497,1550,2.497,1551,2.497,1552,2.497,1553,2.497,1554,2.177,1555,2.497,1556,2.177,1557,2.177,1558,2.497,1559,2.497,1560,2.497,1561,2.497]],["t/141",[2,0.414,26,3.093,49,1.056,57,1.132,69,1.951,70,1.819,78,3.154,79,2.549,81,1.698,86,1.757,89,1.587,96,2.772,103,3.369,104,3.379,115,6.003,180,1.341,195,3.201,202,2.544,258,4.462,276,2.772,293,1.483,438,4.105,446,3.82,722,3.379,841,3.379,1123,4.107]],["t/143",[2,0.455,43,3.05,49,1.285,57,1.377,69,2.144,78,2.905,79,2.858,86,1.496,89,1.351,103,3.046,105,0.809,108,1.661,123,1.306,146,2.259,160,3.494,276,2.36,293,1.263,359,2.36,390,2.138,393,1.351,496,2.725,615,4.205,722,3.713,840,4.994,841,4.112,985,4.205,1008,3.05,1055,3.494,1123,4.345,1363,3.798,1424,4.205,1429,4.205,1477,3.798,1562,4.823,1563,6.351,1564,4.823,1565,4.823,1566,4.823,1567,4.823,1568,4.823,1569,4.823,1570,4.823,1571,4.823,1572,4.823,1573,4.205]],["t/145",[2,0.49,12,0.784,26,2.042,35,1.78,44,1.04,49,1.05,56,0.866,57,1.254,58,0.889,59,1.133,61,0.784,67,0.889,69,1.566,70,0.743,78,2.502,79,2.636,80,1.176,82,2.185,83,3.155,89,0.648,95,1.381,99,1.308,103,3.278,104,4.668,105,1.091,106,1.308,108,0.797,114,3.065,117,1.677,119,1.464,123,0.627,128,1.136,130,1.243,133,0.797,142,3.194,153,1.561,191,1.243,194,1.823,226,1.677,229,1.677,233,1.464,246,2.885,248,1.133,259,1.823,286,0.998,293,0.606,304,3.213,309,1.511,313,1.04,329,0.998,346,2.334,359,1.133,378,2.322,390,0.718,393,1.273,417,1.185,423,1.716,434,2.018,485,1.677,493,3.294,515,0.923,528,2.185,532,2.47,546,2.875,561,1.363,569,1.677,587,2.018,627,2.654,629,1.823,703,1.561,716,1.464,720,3.58,748,1.823,807,2.316,813,4.717,841,2.712,863,2.654,986,1.308,991,1.464,996,5.672,997,2.018,998,3.194,999,2.885,1001,2.018,1006,2.018,1008,4.679,1030,2.018,1053,2.018,1055,3.294,1077,2.018,1110,3.194,1112,3.963,1114,3.963,1115,2.018,1116,3.194,1117,2.018,1118,3.194,1119,2.018,1120,2.018,1123,3.573,1163,2.018,1248,1.677,1262,1.677,1310,2.018,1372,2.316,1409,2.018,1410,2.018,1422,2.018,1432,2.018,1483,1.823,1512,3.194,1574,4.546,1575,4.546,1576,2.314,1577,3.663,1578,3.663,1579,2.314,1580,2.314,1581,2.314,1582,2.314,1583,3.663,1584,2.314,1585,2.314,1586,2.314,1587,2.314,1588,3.663,1589,2.314,1590,2.314,1591,2.314,1592,3.663,1593,3.194,1594,2.314,1595,2.314,1596,2.314,1597,2.314,1598,3.663,1599,3.663,1600,2.314,1601,2.314,1602,2.314,1603,2.314,1604,4.546,1605,2.314,1606,2.314,1607,2.314,1608,2.314,1609,3.663,1610,3.663,1611,2.314,1612,2.314]],["t/147",[2,0.404,5,1.223,9,0.906,12,1.667,19,1.401,26,0.868,37,0.918,39,1.093,42,1.199,43,1.223,44,1.808,49,1.174,52,2.308,54,0.771,55,2.703,56,1.02,57,1.259,58,1.546,61,0.861,62,0.99,66,0.69,67,2.239,70,0.621,79,1.49,80,1.495,81,0.95,83,1.366,84,2.062,87,0.801,89,0.541,91,1.039,92,1.604,105,0.925,107,0.716,108,1.77,121,1.223,123,1.392,126,1.039,128,1.444,130,1.039,132,2.308,133,0.666,138,1.606,146,0.906,147,1.523,150,1.89,152,1.039,155,1.401,158,1.223,168,1.523,171,1.523,172,1.401,176,1.686,179,4.813,180,0.75,185,1.523,186,1.366,196,2.004,198,2.715,203,1.401,205,1.223,210,1.686,220,2.546,223,2.004,233,1.223,236,1.153,238,1.039,245,0.643,260,1.444,276,0.946,286,0.834,290,0.801,292,1.623,293,1.346,299,2.38,303,2.402,304,2.385,311,1.093,313,2.829,325,1.223,329,1.366,332,1.523,345,1.791,347,1.039,352,1.223,356,2.004,358,2.004,359,0.946,378,1.49,390,1.712,393,1.128,395,1.304,399,0.983,407,0.946,427,0.541,428,0.506,445,1.223,448,1.223,472,1.313,519,1.153,522,1.791,532,1.304,561,1.396,570,1.153,600,1.523,611,2.402,634,1.523,652,1.153,653,1.401,694,1.223,697,1.791,703,2.136,713,2.296,776,2.308,807,1.223,822,1.523,827,2.136,832,2.385,840,1.401,841,1.153,845,2.715,847,2.763,851,3.171,852,1.523,861,2.495,868,1.686,875,1.304,888,1.686,897,2.296,899,4.06,900,1.304,917,1.686,922,2.402,925,1.523,931,2.763,932,1.686,971,1.686,986,1.093,1008,2.004,1055,1.401,1168,1.401,1258,1.523,1277,1.304,1280,1.523,1359,1.523,1420,2.495,1475,2.763,1481,2.763,1483,1.523,1492,1.686,1498,1.686,1504,1.686,1511,2.763,1523,2.296,1530,1.686,1535,1.686,1554,1.686,1557,1.686,1593,1.686,1613,1.933,1614,1.933,1615,1.933,1616,1.933,1617,1.933,1618,6.299,1619,1.933,1620,1.933,1621,3.168,1622,1.933,1623,3.168,1624,3.168,1625,1.933,1626,1.933,1627,1.933,1628,1.933,1629,1.933,1630,1.933,1631,1.933,1632,1.933,1633,1.933,1634,1.933,1635,1.933,1636,1.933,1637,1.933,1638,1.933,1639,3.168,1640,1.933,1641,1.933,1642,3.168,1643,1.933,1644,1.933,1645,1.933,1646,1.933,1647,1.933,1648,1.933,1649,3.168,1650,1.933,1651,1.933,1652,1.933,1653,1.933,1654,3.168,1655,1.933,1656,1.933,1657,4.026,1658,1.933,1659,1.933,1660,1.933,1661,3.168,1662,1.933,1663,1.933,1664,1.933,1665,1.933,1666,1.933,1667,1.933,1668,1.933,1669,1.933,1670,1.933]],["t/149",[2,0.459,35,2.16,39,2.758,42,1.204,56,0.818,57,0.975,59,2.388,60,2.388,62,2.499,63,2.104,81,1.463,86,1.514,89,1.367,92,1.681,99,2.758,105,0.818,112,3.086,128,1.514,209,2.622,260,1.946,306,6.401,321,4.545,325,3.086,348,3.086,390,2.269,393,1.757,399,1.514,401,2.758,423,2.286,515,1.946,517,3.741,527,2.911,561,2.193,595,3.843,776,2.192,974,3.843,1108,4.255,1373,6.044,1671,4.88,1672,4.88,1673,4.88,1674,4.88,1675,4.88,1676,4.88,1677,4.88]],["t/151",[49,1.393,56,1.09,57,1.299,991,4.111,1106,3.674,1248,4.711]],["t/153",[2,0.475,5,3.634,9,2.001,12,1.681,35,1.471,42,0.998,45,3.894,49,1.295,56,1.164,57,1.388,59,2.09,60,2.09,64,2.701,79,2.127,80,1.372,97,2.414,105,1.089,108,1.471,203,3.095,233,2.701,245,1.42,247,1.842,260,1.325,292,2.188,293,1.505,351,3.364,390,1.782,393,1.609,417,2.943,461,4.265,473,3.364,515,2.292,565,3.724,694,2.701,721,4.525,725,4.525,728,3.364,731,5.114,732,4.525,738,4.525,1145,3.724,1146,3.724,1147,3.724,1277,2.88,1477,3.364,1563,3.724,1678,5.746,1679,5.746,1680,3.724,1681,3.724,1682,3.724,1683,4.271,1684,4.271,1685,4.271,1686,4.271,1687,4.271]],["t/155",[2,0.445,12,1.704,42,0.656,49,1.34,55,1.505,56,0.885,57,1.386,58,2.028,59,1.847,60,1.847,64,4.169,66,1.347,67,2.338,68,3.44,69,1.818,79,1.954,86,1.171,107,1.397,108,1.3,111,1.565,123,1.022,128,1.171,202,2.371,203,2.735,238,2.836,245,1.255,260,1.171,286,1.628,287,2.983,292,1.933,293,1.382,304,1.933,347,2.028,351,2.973,370,2.703,390,1.637,393,1.478,423,1.768,450,4.602,480,4.411,806,2.545,816,4.157,852,4.157,1013,4.602,1058,4.776,1063,2.973,1066,4.157,1073,2.973,1089,2.133,1104,2.387,1105,2.545,1106,2.133,1168,3.825,1254,3.291,1256,2.735,1257,3.291,1258,2.973,1259,4.602,1260,3.291,1262,2.735,1274,3.291,1346,3.291,1407,3.291,1546,3.291,1680,3.291,1681,3.291,1682,3.291,1688,5.278,1689,5.278,1690,6.087,1691,3.774,1692,3.774,1693,3.774,1694,3.774,1695,5.278,1696,3.774,1697,3.774,1698,3.774,1699,3.774,1700,3.774,1701,3.774,1702,3.774,1703,3.774,1704,3.774,1705,3.774,1706,3.774]],["t/157",[2,0.537,44,1.818,49,1.178,51,5.507,54,2.519,56,0.678,57,1.107,58,1.554,63,1.745,66,2.255,68,2.287,76,2.414,78,2.209,79,2.051,84,2.073,86,1.255,89,1.133,92,1.394,97,2.287,100,2.414,101,2.729,102,3.822,103,1.98,104,2.414,107,1.498,110,2.729,112,2.559,123,1.096,199,3.332,225,3.529,245,1.346,282,2.932,291,2.932,293,1.06,304,2.837,317,2.595,324,3.994,331,2.414,340,1.818,357,1.678,358,2.559,399,1.255,425,2.414,446,2.729,467,2.932,482,3.503,496,2.287,515,1.614,523,2.729,560,2.932,561,2.132,713,2.932,716,2.559,746,2.932,799,4.974,845,2.729,900,2.729,986,2.287,1022,3.187,1095,3.187,1096,3.529,1097,2.729,1099,5.507,1100,3.529,1101,3.529,1124,3.187,1139,3.529,1245,2.932,1253,2.932,1267,3.529,1408,3.529,1523,2.932,1707,4.047,1708,4.047,1709,4.047,1710,4.047,1711,4.047,1712,5.539,1713,3.529,1714,5.539,1715,4.047,1716,4.047,1717,4.047]],["t/159",[2,0.321,42,1.017,55,1.752,56,0.736,57,0.878,61,0.94,66,1.568,67,1.687,69,2.017,74,2.167,77,2.962,78,1.752,79,1.626,86,1.816,89,1.967,91,2.36,92,2.688,95,3.493,109,2.15,111,1.821,113,3.183,130,2.36,153,2.962,248,2.865,286,2.525,290,2.73,299,3.029,310,2.36,324,2.778,329,1.894,333,2.778,339,3.83,352,2.778,378,1.626,399,1.363,431,2.25,496,3.309,528,2.62,546,2.778,559,2.62,561,1.974,567,3.46,570,2.62,598,3.183,621,3.183,865,2.962,889,2.62,986,2.483,1089,2.483,1094,3.183,1152,3.83,1167,3.46,1168,3.183,1430,3.83,1523,4.242,1556,3.83,1573,3.83,1713,5.105,1718,4.393,1719,4.393,1720,4.393,1721,4.393,1722,4.393,1723,4.393,1724,4.393,1725,4.393,1726,4.393,1727,4.393,1728,4.393,1729,4.393,1730,4.393]],["t/161",[2,0.42,56,0.963,66,2.051,81,2.237,97,3.246,100,3.426,101,3.873,102,3.086,123,1.556,199,3.253,245,2.309,247,3.218,290,2.381,431,2.942,472,2.381,559,3.426,1034,5.032,1035,4.719,1253,4.162,1731,5.744,1732,5.744,1733,5.744]]],"invertedIndex":[["",{"_index":12,"t":{"2":{"position":[[119,1],[624,1]]},"4":{"position":[[119,1],[559,4]]},"12":{"position":[[115,1],[155,1],[157,1],[291,1],[293,1],[305,2],[377,2],[465,1],[467,2],[470,1],[609,1],[611,1],[623,2],[695,2],[797,1],[799,1],[801,2]]},"20":{"position":[[209,1]]},"26":{"position":[[752,3],[756,4],[794,3],[798,4],[837,3],[841,4],[846,3]]},"45":{"position":[[234,1]]},"63":{"position":[[618,3],[972,1],[974,1],[987,1],[1038,1]]},"65":{"position":[[693,1]]},"75":{"position":[[202,1],[204,1],[331,1],[333,1]]},"79":{"position":[[649,1],[655,2]]},"83":{"position":[[258,3]]},"87":{"position":[[1195,1]]},"93":{"position":[[213,1],[238,1],[259,1]]},"97":{"position":[[400,2],[458,2]]},"101":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[282,1],[313,1],[321,4],[326,1],[331,1],[571,1],[698,1],[707,1],[729,1],[731,1]]},"103":{"position":[[83,1],[85,1]]},"105":{"position":[[71,2],[211,1],[1168,1],[1701,1],[1824,3],[2175,4],[2180,2],[2536,1],[2538,1],[2611,1],[2692,1],[2780,1],[3242,2],[3549,1],[3551,1],[3629,1],[3631,1],[4068,1],[4207,1],[4318,1],[5241,1],[5784,2],[7347,1],[7414,4],[8466,2],[8535,1],[9201,2],[9394,2],[10076,1],[10823,1],[13136,1],[13264,1],[13413,1],[13477,1],[13628,1],[13659,1],[14609,1],[15038,1],[15326,1],[15426,1],[15664,1],[15746,1],[15753,2],[15835,1],[16485,1],[16492,2],[16844,2]]},"107":{"position":[[282,1]]},"109":{"position":[[147,1],[149,1]]},"111":{"position":[[215,1],[241,1],[278,1],[343,1]]},"113":{"position":[[927,1]]},"115":{"position":[[782,1]]},"119":{"position":[[297,1],[327,4],[372,1],[533,1],[577,1],[649,1],[660,1],[675,1],[828,1],[911,3],[944,1],[955,1],[957,1],[1001,1],[1020,1],[1082,1],[1314,1],[1500,1],[1676,1],[1769,1],[1835,1],[1933,1],[2112,1],[2193,1],[2298,2],[2301,3],[2305,5],[2311,1],[2428,1],[2430,1],[2526,1],[2614,1],[2644,1],[2688,4],[2697,2],[3370,1],[3451,1],[3480,2],[3483,2],[3516,1],[3528,2],[3555,2],[3588,5],[3598,1]]},"123":{"position":[[589,2]]},"125":{"position":[[154,1],[349,1],[488,2],[570,1],[757,2],[858,1],[1069,2],[1282,2]]},"127":{"position":[[674,2]]},"131":{"position":[[256,1],[1159,1],[1179,1],[1319,1],[2648,1],[2669,2],[2716,1],[2736,1]]},"135":{"position":[[221,2],[351,2],[445,2],[524,2],[588,2],[658,2],[2130,1],[2410,1],[2683,1],[2705,1],[3577,1],[3591,1],[3611,1],[4487,1],[4531,1],[4582,1],[4604,1],[4613,1],[4658,1],[4696,1],[4708,1],[4724,1],[4739,1],[4780,1],[5085,1],[5107,1],[5124,1],[5156,1],[6079,3],[6315,1],[6337,1],[6354,1],[6374,1],[6571,1],[6992,1],[7014,1],[7031,1]]},"137":{"position":[[366,1],[396,1]]},"139":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"145":{"position":[[2507,2],[2551,2]]},"147":{"position":[[39,1],[1414,1],[3059,1],[3080,1],[3140,1],[3191,1],[3193,1],[3236,1],[3238,1],[3261,1],[3284,1],[3311,1],[3331,1],[3361,1],[4385,1],[4406,1],[4463,1],[4519,1],[4521,1],[4559,1],[4561,1],[4577,1],[4598,1],[4623,1],[4643,1],[4664,1],[4692,1],[4769,1]]},"153":{"position":[[227,1],[262,1],[298,1],[334,1],[369,1],[391,1],[414,1],[431,1],[449,1]]},"155":{"position":[[114,3],[750,1],[951,1],[953,1],[1130,2],[1229,1],[1264,1],[1300,1],[1322,1],[1345,1],[1362,1],[1385,1],[1403,1]]}}}],["0",{"_index":998,"t":{"105":{"position":[[1422,2],[1894,1],[6044,1],[6057,1],[11584,1]]},"145":{"position":[[1112,1],[1702,4]]}}}],["0.0.0.0:4180",{"_index":1670,"t":{"147":{"position":[[4771,14]]}}}],["0.001",{"_index":1242,"t":{"115":{"position":[[916,5]]}}}],["0.2.0",{"_index":178,"t":{"12":{"position":[[128,8]]}}}],["00010203",{"_index":1218,"t":{"113":{"position":[[1121,8]]},"115":{"position":[[984,8]]}}}],["0400",{"_index":1203,"t":{"113":{"position":[[256,5],[1301,4]]},"115":{"position":[[137,5],[1323,4]]},"117":{"position":[[267,5],[593,4]]}}}],["0405",{"_index":1219,"t":{"113":{"position":[[1130,4]]},"115":{"position":[[993,4]]}}}],["0a0b0c0d0e0f",{"_index":1222,"t":{"113":{"position":[[1145,12]]},"115":{"position":[[1008,12]]}}}],["1",{"_index":806,"t":{"81":{"position":[[2225,1]]},"105":{"position":[[1939,3],[16340,2]]},"125":{"position":[[423,2]]},"131":{"position":[[2312,3],[2383,1]]},"155":{"position":[[1081,2]]}}}],["1.19",{"_index":154,"t":{"8":{"position":[[41,5],[126,4]]}}}],["1.3",{"_index":729,"t":{"77":{"position":[[474,3]]}}}],["1.5h",{"_index":503,"t":{"45":{"position":[[236,5]]}}}],["10",{"_index":1425,"t":{"131":{"position":[[2501,3]]}}}],["100",{"_index":1081,"t":{"105":{"position":[[6140,3]]}}}],["12",{"_index":1246,"t":{"115":{"position":[[1200,2]]}}}],["12.x",{"_index":1356,"t":{"127":{"position":[[58,5],[128,4]]}}}],["123456.apps.googleusercontent.com",{"_index":987,"t":{"105":{"position":[[842,35]]}}}],["127.0.0.1:4180",{"_index":1063,"t":{"105":{"position":[[5463,16]]},"117":{"position":[[732,14]]},"155":{"position":[[150,14]]}}}],["128",{"_index":1578,"t":{"145":{"position":[[384,3],[435,3]]}}}],["15",{"_index":1118,"t":{"105":{"position":[[11462,2],[11493,2]]},"145":{"position":[[3491,2],[3522,2]]}}}],["15m",{"_index":1018,"t":{"105":{"position":[[2379,3]]}}}],["168h0m0",{"_index":1001,"t":{"105":{"position":[[1503,8]]},"145":{"position":[[1177,8]]}}}],["17",{"_index":1457,"t":{"135":{"position":[[246,4]]}}}],["19.0.0",{"_index":1464,"t":{"135":{"position":[[728,7]]}}}],["19/mar/2015:17:20:19",{"_index":1202,"t":{"113":{"position":[[233,21],[1279,20]]},"115":{"position":[[114,21],[1301,20]]},"117":{"position":[[244,21],[571,20]]}}}],["1916",{"_index":1480,"t":{"135":{"position":[[3462,5]]}}}],["192",{"_index":968,"t":{"101":{"position":[[645,3]]}}}],["1h",{"_index":1411,"t":{"131":{"position":[[923,4]]}}}],["1m",{"_index":1599,"t":{"145":{"position":[[2099,4],[2534,2]]}}}],["1s",{"_index":1039,"t":{"105":{"position":[[3357,4]]}}}],["2",{"_index":875,"t":{"87":{"position":[[1134,1]]},"105":{"position":[[15811,3],[16415,2]]},"125":{"position":[[717,2]]},"131":{"position":[[1560,1]]},"147":{"position":[[3458,2]]}}}],["2.0",{"_index":1498,"t":{"137":{"position":[[213,3]]},"147":{"position":[[35,3]]}}}],["20",{"_index":1046,"t":{"105":{"position":[[4521,2]]}}}],["200",{"_index":799,"t":{"81":{"position":[[1941,3]]},"115":{"position":[[1249,3]]},"157":{"position":[[223,3],[336,3],[417,3]]}}}],["202",{"_index":1253,"t":{"119":{"position":[[186,3]]},"123":{"position":[[162,3]]},"157":{"position":[[1098,3]]},"161":{"position":[[22,3]]}}}],["2048",{"_index":1514,"t":{"139":{"position":[[1052,4]]}}}],["21.0.0",{"_index":1466,"t":{"135":{"position":[[865,7]]}}}],["24",{"_index":966,"t":{"101":{"position":[[631,2]]}}}],["2>/dev/nul",{"_index":952,"t":{"101":{"position":[[227,11]]}}}],["2f",{"_index":820,"t":{"83":{"position":[[211,7]]}}}],["2h45m",{"_index":504,"t":{"45":{"position":[[245,8]]}}}],["3",{"_index":833,"t":{"85":{"position":[[385,2],[421,2]]},"87":{"position":[[1492,2],[1800,2]]},"133":{"position":[[1248,4]]}}}],["3/4",{"_index":1159,"t":{"105":{"position":[[16113,3]]}}}],["30",{"_index":816,"t":{"81":{"position":[[2598,2]]},"105":{"position":[[15299,3]]},"155":{"position":[[1103,3],[1126,3]]}}}],["300m",{"_index":502,"t":{"45":{"position":[[225,8]]}}}],["315360000",{"_index":1331,"t":{"123":{"position":[[965,9]]},"125":{"position":[[1723,9]]}}}],["32",{"_index":958,"t":{"101":{"position":[[310,2],[579,2],[709,2]]}}}],["3650",{"_index":1525,"t":{"139":{"position":[[1175,4]]}}}],["401",{"_index":100,"t":{"4":{"position":[[403,3]]},"105":{"position":[[230,3]]},"119":{"position":[[213,3],[997,3]]},"123":{"position":[[189,3],[1254,4]]},"125":{"position":[[898,3]]},"157":{"position":[[1125,3]]},"161":{"position":[[49,3]]}}}],["403",{"_index":1341,"t":{"123":{"position":[[1259,4]]}}}],["4180",{"_index":1694,"t":{"155":{"position":[[465,5]]}}}],["443",{"_index":1066,"t":{"105":{"position":[[5629,6],[16691,3]]},"119":{"position":[[306,3]]},"155":{"position":[[395,3],[759,3]]}}}],["4607",{"_index":1220,"t":{"113":{"position":[[1135,4]]},"115":{"position":[[998,4]]}}}],["4kb",{"_index":1276,"t":{"119":{"position":[[1765,3],[1970,4]]}}}],["5",{"_index":880,"t":{"87":{"position":[[1528,2],[1836,2]]},"131":{"position":[[2038,1]]}}}],["59",{"_index":1600,"t":{"145":{"position":[[2140,6]]}}}],["7",{"_index":1078,"t":{"105":{"position":[[5973,1]]}}}],["74.125.224.72",{"_index":1214,"t":{"113":{"position":[[840,13]]},"115":{"position":[[695,13]]}}}],["80",{"_index":1171,"t":{"105":{"position":[[16677,3]]}}}],["8809",{"_index":1221,"t":{"113":{"position":[[1140,4]]},"115":{"position":[[1003,4]]}}}],["9",{"_index":1423,"t":{"131":{"position":[[2316,2]]}}}],["994",{"_index":1357,"t":{"127":{"position":[[138,5]]}}}],["_",{"_index":955,"t":{"101":{"position":[[279,2],[328,2],[733,3]]},"103":{"position":[[104,4]]},"109":{"position":[[168,4]]}}}],["__host",{"_index":1004,"t":{"105":{"position":[[1680,7]]}}}],["__secur",{"_index":1005,"t":{"105":{"position":[[1692,8]]}}}],["_oauth2_proxi",{"_index":1006,"t":{"105":{"position":[[1730,15]]},"145":{"position":[[339,14]]}}}],["_oauth2_proxy_1",{"_index":1313,"t":{"119":{"position":[[3983,18]]}}}],["aad",{"_index":867,"t":{"87":{"position":[[880,3]]}}}],["abov",{"_index":1230,"t":{"113":{"position":[[1542,5]]},"117":{"position":[[45,5]]},"133":{"position":[[1234,5]]}}}],["absent",{"_index":1047,"t":{"105":{"position":[[4527,6]]}}}],["accept",{"_index":97,"t":{"4":{"position":[[363,7]]},"77":{"position":[[139,11]]},"105":{"position":[[11976,8],[14971,11]]},"119":{"position":[[190,8]]},"123":{"position":[[166,8]]},"153":{"position":[[566,10]]},"157":{"position":[[1102,8]]},"161":{"position":[[26,8]]}}}],["acceptable.e.g",{"_index":727,"t":{"77":{"position":[[420,15]]}}}],["access",{"_index":378,"t":{"32":{"position":[[349,6]]},"37":{"position":[[101,6]]},"41":{"position":[[171,6]]},"47":{"position":[[346,6]]},"59":{"position":[[259,6]]},"67":{"position":[[2364,6],[2511,6]]},"93":{"position":[[528,6],[638,6],[674,6]]},"105":{"position":[[4021,6],[4446,6],[4493,6],[7426,6],[7496,6],[7580,6],[8382,6],[9598,6],[12533,6],[12562,6],[15570,6]]},"119":{"position":[[1338,6],[1479,6]]},"125":{"position":[[2016,6],[2192,6]]},"129":{"position":[[296,7],[925,6],[1000,6],[1037,6],[1187,6],[1218,6],[1307,6]]},"131":{"position":[[1796,7]]},"133":{"position":[[138,6],[1174,6]]},"135":{"position":[[949,6],[2352,6],[2412,6],[2722,6],[3114,6],[3442,6],[3692,6],[7152,6]]},"139":{"position":[[305,7],[2650,6],[3170,10]]},"145":{"position":[[1479,6],[1672,6],[1711,6],[1873,6],[2068,6],[2447,6],[2510,6]]},"147":{"position":[[2344,6],[2403,7],[2977,6]]},"159":{"position":[[214,9]]}}}],["access_by_lua_block",{"_index":1305,"t":{"119":{"position":[[3431,19]]}}}],["access_token",{"_index":1088,"t":{"105":{"position":[[7455,12]]}}}],["accesstokenacceptedvers",{"_index":874,"t":{"87":{"position":[[1104,29]]}}}],["accompani",{"_index":1383,"t":{"129":{"position":[[382,11]]}}}],["account",{"_index":522,"t":{"51":{"position":[[271,7],[520,7]]},"87":{"position":[[177,7]]},"93":{"position":[[204,7],[487,7]]},"105":{"position":[[4726,7],[4770,7],[4900,7],[5048,7]]},"131":{"position":[[981,7],[1095,7],[2482,7],[2923,7]]},"135":{"position":[[3946,7]]},"139":{"position":[[260,8],[737,7]]},"147":{"position":[[1641,8],[3746,8]]}}}],["acr",{"_index":411,"t":{"32":{"position":[[1037,3]]},"105":{"position":[[34,3]]}}}],["activ",{"_index":844,"t":{"87":{"position":[[65,6],[1349,6]]},"135":{"position":[[4394,10],[5193,9]]}}}],["actual",{"_index":865,"t":{"87":{"position":[[851,8]]},"91":{"position":[[221,6]]},"93":{"position":[[124,6]]},"119":{"position":[[3753,6]]},"159":{"position":[[1056,6]]}}}],["ad",{"_index":109,"t":{"4":{"position":[[637,5]]},"20":{"position":[[314,2]]},"30":{"position":[[7,6]]},"35":{"position":[[66,6]]},"53":{"position":[[79,5]]},"67":{"position":[[2455,2]]},"89":{"position":[[4,6],[49,2]]},"105":{"position":[[11863,2],[12578,5]]},"107":{"position":[[832,6]]},"135":{"position":[[1902,5],[6882,5]]},"159":{"position":[[938,5]]}}}],["adc",{"_index":1052,"t":{"105":{"position":[[5020,3],[5071,3]]},"131":{"position":[[2710,5],[2979,3]]}}}],["add",{"_index":132,"t":{"6":{"position":[[226,3]]},"18":{"position":[[148,3]]},"24":{"position":[[80,3]]},"26":{"position":[[432,3]]},"85":{"position":[[64,3]]},"87":{"position":[[0,3],[430,3],[532,3],[662,3],[1222,3],[1284,4]]},"89":{"position":[[74,3]]},"93":{"position":[[0,3]]},"101":{"position":[[333,3]]},"105":{"position":[[7556,4],[16769,3]]},"127":{"position":[[223,3],[431,3],[1310,3]]},"135":{"position":[[3414,3],[3435,3],[3579,3],[6356,3],[6590,3]]},"147":{"position":[[606,3],[1296,4],[1989,3],[2336,3],[2567,3]]}}}],["add_head",{"_index":1274,"t":{"119":{"position":[[1640,10],[2528,10],[2571,10]]},"155":{"position":[[888,10]]}}}],["addedto",{"_index":443,"t":{"37":{"position":[[667,7],[902,7]]}}}],["addit",{"_index":652,"t":{"65":{"position":[[1553,10],[1614,8]]},"93":{"position":[[559,10]]},"105":{"position":[[7354,10]]},"119":{"position":[[2000,10]]},"129":{"position":[[206,10],[776,8]]},"135":{"position":[[3181,10],[3260,8]]},"147":{"position":[[2066,10]]}}}],["addition",{"_index":1053,"t":{"105":{"position":[[5098,12]]},"145":{"position":[[852,13]]}}}],["address",{"_index":317,"t":{"22":{"position":[[103,9],[207,9]]},"63":{"position":[[496,9]]},"65":{"position":[[230,7]]},"75":{"position":[[146,7],[268,7]]},"105":{"position":[[5307,7],[5431,8],[5488,7],[5597,8],[6605,7],[7920,7],[9327,7],[9346,7],[16124,8],[16217,7]]},"113":{"position":[[81,7],[875,8]]},"115":{"position":[[730,8]]},"123":{"position":[[1150,8]]},"125":{"position":[[1917,8],[2082,8]]},"131":{"position":[[1854,7]]},"135":{"position":[[3755,7]]},"157":{"position":[[568,7],[599,8]]}}}],["address=\"0.0.0.0:4180",{"_index":1692,"t":{"155":{"position":[[312,22]]}}}],["address=\"http://:4180",{"_index":1693,"t":{"155":{"position":[[345,23]]}}}],["adf",{"_index":295,"t":{"20":{"position":[[232,4]]},"67":{"position":[[739,4],[2462,4]]},"69":{"position":[[128,5]]},"85":{"position":[[9,4],[445,4]]}}}],["adfsconfig",{"_index":665,"t":{"67":{"position":[[676,10],[699,10]]}}}],["adfsopt",{"_index":666,"t":{"67":{"position":[[687,11]]}}}],["admin",{"_index":517,"t":{"51":{"position":[[164,5]]},"87":{"position":[[696,5],[729,5],[801,8],[940,5]]},"105":{"position":[[4543,5],[4573,5]]},"131":{"position":[[1350,5],[1786,5],[1906,5],[1992,5]]},"133":{"position":[[1483,5],[1549,7]]},"135":{"position":[[696,5],[744,5],[792,5],[889,5],[1368,5]]},"149":{"position":[[575,6],[613,6]]}}}],["admin2",{"_index":1469,"t":{"135":{"position":[[1492,6]]}}}],["admin@example.com",{"_index":214,"t":{"12":{"position":[[1359,17]]}}}],["adminemail",{"_index":516,"t":{"51":{"position":[[121,10],[139,10]]}}}],["administr",{"_index":822,"t":{"85":{"position":[[14,14]]},"131":{"position":[[1833,14]]},"147":{"position":[[1626,14]]}}}],["advis",{"_index":1602,"t":{"145":{"position":[[2379,7]]}}}],["advisori",{"_index":261,"t":{"18":{"position":[[23,10],[182,8],[411,9]]}}}],["ae",{"_index":967,"t":{"101":{"position":[[641,3]]}}}],["affect",{"_index":257,"t":{"16":{"position":[[688,8]]}}}],["afterward",{"_index":1719,"t":{"159":{"position":[[334,9]]}}}],["ag",{"_index":1074,"t":{"105":{"position":[[5918,3]]},"111":{"position":[[237,3],[256,5]]}}}],["again",{"_index":1718,"t":{"159":{"position":[[240,6]]}}}],["against",{"_index":39,"t":{"2":{"position":[[528,7]]},"65":{"position":[[1433,7]]},"105":{"position":[[573,7],[5124,7]]},"127":{"position":[[35,7]]},"131":{"position":[[2242,7],[2553,7]]},"135":{"position":[[1811,7]]},"147":{"position":[[163,7]]},"149":{"position":[[50,7]]}}}],["age=2592000",{"_index":1703,"t":{"155":{"position":[[929,12]]}}}],["agenc",{"_index":1500,"t":{"139":{"position":[[80,7],[718,6]]}}}],["agent",{"_index":1097,"t":{"105":{"position":[[9134,5],[9154,5],[9222,6]]},"111":{"position":[[754,6]]},"113":{"position":[[1372,5]]},"115":{"position":[[1444,5]]},"157":{"position":[[263,6]]}}}],["agre",{"_index":273,"t":{"18":{"position":[[441,6]]}}}],["agreement",{"_index":1495,"t":{"137":{"position":[[124,9]]}}}],["ajax",{"_index":94,"t":{"4":{"position":[[335,4]]}}}],["algorithm:secretkey",{"_index":1130,"t":{"105":{"position":[[13050,21]]}}}],["alia",{"_index":492,"t":{"45":{"position":[[8,7]]},"69":{"position":[[8,7]]},"71":{"position":[[12,7]]}}}],["allow",{"_index":81,"t":{"4":{"position":[[143,8]]},"12":{"position":[[1033,6]]},"24":{"position":[[117,5]]},"32":{"position":[[1087,7],[1116,7]]},"37":{"position":[[85,6]]},"43":{"position":[[38,6]]},"47":{"position":[[392,6]]},"61":{"position":[[295,7],[459,7],[609,7]]},"63":{"position":[[599,6],[724,7],[1291,5],[1327,5],[1477,5]]},"65":{"position":[[868,6],[1389,6]]},"81":{"position":[[788,6],[1613,5]]},"83":{"position":[[188,8]]},"93":{"position":[[456,6]]},"105":{"position":[[76,5],[104,5],[4078,5],[6554,5],[6696,5],[7385,7],[10001,5],[11989,6],[15305,7],[15406,7],[15671,7],[15759,5],[15872,5],[16500,5],[16602,8],[16630,8],[16741,5],[16824,5]]},"119":{"position":[[88,6]]},"123":{"position":[[38,6]]},"129":{"position":[[473,7],[1181,5],[1474,5],[1630,5]]},"133":{"position":[[1091,7]]},"135":{"position":[[414,7],[480,7],[560,7],[4066,7],[4084,7],[4377,8],[4843,7],[4928,7],[5185,7],[5227,8],[5541,7],[6129,7],[6648,7],[6682,5]]},"139":{"position":[[2350,5]]},"141":{"position":[[9,5]]},"147":{"position":[[2784,7],[4105,8]]},"149":{"position":[[23,6]]},"161":{"position":[[175,7],[237,7],[299,7]]}}}],["allowed.e.g",{"_index":733,"t":{"77":{"position":[[553,13]]}}}],["allowed_email",{"_index":1733,"t":{"161":{"position":[[259,15]]}}}],["allowed_email_domain",{"_index":1732,"t":{"161":{"position":[[190,22]]}}}],["allowed_group",{"_index":1731,"t":{"161":{"position":[[135,15]]}}}],["allowedgroup",{"_index":705,"t":{"67":{"position":[[2596,13],[2619,13]]}}}],["allowedto",{"_index":654,"t":{"65":{"position":[[1583,9]]}}}],["alpha",{"_index":326,"t":{"26":{"position":[[44,5],[297,5],[353,5],[665,5]]},"28":{"position":[[15,5],[153,5],[194,5]]},"30":{"position":[[24,5],[92,5],[189,5],[510,5]]},"32":{"position":[[106,5],[1408,5],[1524,5]]},"37":{"position":[[22,5],[108,5],[267,6]]}}}],["alphaopt",{"_index":349,"t":{"26":{"position":[[607,12]]},"37":{"position":[[0,12]]},"53":{"position":[[13,13]]},"71":{"position":[[33,13]]},"75":{"position":[[13,13]]},"83":{"position":[[13,13]]}}}],["alreadi",{"_index":1592,"t":{"145":{"position":[[1581,7],[1760,7]]}}}],["altern",{"_index":598,"t":{"63":{"position":[[927,13]]},"91":{"position":[[496,14]]},"131":{"position":[[1228,13]]},"159":{"position":[[522,14]]}}}],["alway",{"_index":565,"t":{"61":{"position":[[532,6]]},"153":{"position":[[745,6]]}}}],["amazon",{"_index":1688,"t":{"155":{"position":[[61,6],[255,6]]}}}],["amd64",{"_index":21,"t":{"2":{"position":[[256,7],[352,7],[677,6]]}}}],["amount",{"_index":1150,"t":{"105":{"position":[[15230,6]]}}}],["anchor",{"_index":749,"t":{"79":{"position":[[625,6]]}}}],["and/or",{"_index":589,"t":{"63":{"position":[[732,6]]}}}],["announc",{"_index":1465,"t":{"135":{"position":[[815,9]]}}}],["anoth",{"_index":288,"t":{"20":{"position":[[82,7]]},"37":{"position":[[1037,7]]},"131":{"position":[[176,7]]}}}],["anyth",{"_index":566,"t":{"61":{"position":[[551,8]]}}}],["apach",{"_index":1196,"t":{"111":{"position":[[669,6]]}}}],["api",{"_index":519,"t":{"51":{"position":[[189,3]]},"87":{"position":[[490,3]]},"105":{"position":[[194,3],[4598,3]]},"127":{"position":[[78,3]]},"131":{"position":[[250,5],[1313,5],[1335,5],[1376,4],[1792,3]]},"137":{"position":[[368,3]]},"147":{"position":[[1979,3]]}}}],["api/v1/user/email",{"_index":936,"t":{"97":{"position":[[635,21]]}}}],["app",{"_index":845,"t":{"87":{"position":[[90,3],[294,3],[465,3],[518,4],[1143,3],[1217,4]]},"95":{"position":[[16,3]]},"139":{"position":[[1334,3]]},"147":{"position":[[2215,5],[2701,4],[3924,3]]},"157":{"position":[[923,3]]}}}],["appear",{"_index":426,"t":{"35":{"position":[[0,8]]},"39":{"position":[[0,8]]},"41":{"position":[[0,8]]},"43":{"position":[[0,8]]},"45":{"position":[[16,8]]},"47":{"position":[[0,8]]},"49":{"position":[[0,8]]},"51":{"position":[[0,8]]},"53":{"position":[[0,8]]},"55":{"position":[[0,8]]},"57":{"position":[[0,8]]},"59":{"position":[[0,8]]},"61":{"position":[[0,8]]},"65":{"position":[[0,8]]},"67":{"position":[[0,8]]},"69":{"position":[[16,8]]},"71":{"position":[[20,8]]},"73":{"position":[[0,8]]},"75":{"position":[[0,8]]},"77":{"position":[[0,8]]},"79":{"position":[[0,8]]},"81":{"position":[[0,8]]},"83":{"position":[[0,8]]}}}],["append",{"_index":890,"t":{"87":{"position":[[2101,6]]},"119":{"position":[[2181,6]]}}}],["appli",{"_index":538,"t":{"53":{"position":[[428,7]]}}}],["applic",{"_index":55,"t":{"2":{"position":[[727,11]]},"6":{"position":[[415,11]]},"20":{"position":[[35,11]]},"51":{"position":[[395,11],[537,11]]},"85":{"position":[[74,11],[142,11],[174,12],[282,11]]},"87":{"position":[[7,12],[586,11]]},"89":{"position":[[14,11],[81,12],[124,10]]},"91":{"position":[[19,11],[108,12]]},"97":{"position":[[13,12]]},"105":{"position":[[172,13],[4808,11],[4849,11],[10428,10]]},"127":{"position":[[230,12],[343,11],[468,12],[724,11]]},"131":{"position":[[538,12],[551,11],[1127,11],[2678,11],[2811,11]]},"139":{"position":[[467,11],[559,11],[779,11],[3018,11],[3109,11]]},"147":{"position":[[1817,13],[1890,12],[2169,11],[2255,11],[2391,11],[2542,12],[2571,12],[2668,11],[2989,12],[3548,11],[3805,12],[3875,11]]},"155":{"position":[[532,12]]},"159":{"position":[[228,11]]}}}],["application.y",{"_index":456,"t":{"37":{"position":[[1268,15]]}}}],["application/json",{"_index":98,"t":{"4":{"position":[[371,17]]}}}],["approach",{"_index":1683,"t":{"153":{"position":[[495,8]]}}}],["appropri",{"_index":1372,"t":{"127":{"position":[[1107,11]]},"129":{"position":[[1752,11]]},"131":{"position":[[598,11]]},"133":{"position":[[422,11]]},"135":{"position":[[2245,11]]},"145":{"position":[[3001,14],[3204,14]]}}}],["approv",{"_index":409,"t":{"32":{"position":[[1005,8]]},"87":{"position":[[946,11]]},"105":{"position":[[326,8],[8439,8]]}}}],["approval_prompt",{"_index":984,"t":{"105":{"position":[[355,15]]}}}],["apps/oauth2",{"_index":1673,"t":{"149":{"position":[[351,15]]}}}],["archiv",{"_index":157,"t":{"8":{"position":[[138,8]]}}}],["aren't",{"_index":1122,"t":{"105":{"position":[[12197,6]]}}}],["arg",{"_index":185,"t":{"12":{"position":[[283,7],[601,7]]},"105":{"position":[[141,4]]},"147":{"position":[[950,5]]}}}],["argument",{"_index":974,"t":{"103":{"position":[[19,8],[116,8]]},"109":{"position":[[19,8],[180,8]]},"149":{"position":[[218,9]]}}}],["arm64",{"_index":25,"t":{"2":{"position":[[291,5],[387,5]]}}}],["armv6",{"_index":23,"t":{"2":{"position":[[273,6],[369,6]]}}}],["armv7",{"_index":24,"t":{"2":{"position":[[280,6],[376,6]]}}}],["around",{"_index":586,"t":{"63":{"position":[[688,6]]}}}],["ask",{"_index":90,"t":{"4":{"position":[[256,5]]}}}],["assembl",{"_index":960,"t":{"101":{"position":[[348,8]]}}}],["assemblynam",{"_index":962,"t":{"101":{"position":[[391,12]]}}}],["assign",{"_index":1420,"t":{"131":{"position":[[1885,6]]},"135":{"position":[[2812,8],[4276,8],[4665,6],[4726,6],[4782,7],[5207,6],[5266,8]]},"147":{"position":[[2926,11],[4072,12]]}}}],["associ",{"_index":1484,"t":{"135":{"position":[[5369,10]]}}}],["assum",{"_index":1509,"t":{"139":{"position":[[526,6]]}}}],["attach",{"_index":1431,"t":{"131":{"position":[[2931,8]]},"135":{"position":[[6280,6],[6754,9]]}}}],["attacksbetween",{"_index":792,"t":{"81":{"position":[[1647,14]]}}}],["attempt",{"_index":422,"t":{"32":{"position":[[1338,10]]},"105":{"position":[[418,8]]},"113":{"position":[[99,10],[1062,8]]}}}],["attent",{"_index":242,"t":{"16":{"position":[[294,9]]}}}],["attribut",{"_index":1011,"t":{"105":{"position":[[2136,9]]},"119":{"position":[[2133,10]]},"139":{"position":[[1446,9]]}}}],["aud",{"_index":650,"t":{"65":{"position":[[1465,3]]},"105":{"position":[[3030,3],[7312,5],[13831,3]]},"135":{"position":[[1689,3],[1721,3],[2968,4],[3327,5]]}}}],["audienc",{"_index":653,"t":{"65":{"position":[[1564,9]]},"105":{"position":[[7251,8],[7303,8],[7331,8],[7365,9]]},"135":{"position":[[1261,10],[1292,8],[1321,8],[1637,8],[1868,9],[2625,8],[2954,8],[3016,8],[3192,8],[3242,8],[3293,9]]},"147":{"position":[[2225,9]]}}}],["audienceclaim",{"_index":648,"t":{"65":{"position":[[1351,14],[1375,13]]}}}],["auth",{"_index":74,"t":{"4":{"position":[[65,4]]},"32":{"position":[[630,4],[669,4]]},"43":{"position":[[412,4],[470,4]]},"55":{"position":[[633,4],[691,4]]},"85":{"position":[[450,4]]},"87":{"position":[[1057,4],[1328,4],[1626,4],[1964,4],[2303,4]]},"105":{"position":[[381,4],[434,4],[716,4],[785,4],[7567,4],[7736,4],[7762,5],[8098,4],[12356,4],[12377,4],[12400,4],[12425,4],[12549,4],[12738,4],[12763,4],[13167,4],[13246,4],[13294,4],[13395,4],[13585,4]]},"111":{"position":[[519,4]]},"113":{"position":[[606,4],[790,4],[1057,4],[1473,4],[1524,4]]},"115":{"position":[[1545,4]]},"119":{"position":[[149,5],[497,4],[598,4]]},"123":{"position":[[437,4],[631,4],[912,4],[1131,5]]},"125":{"position":[[556,4],[841,4],[1111,4],[1317,4],[1670,4],[1889,4],[2003,4],[2051,4],[2179,4]]},"127":{"position":[[5,4]]},"129":{"position":[[179,4]]},"131":{"position":[[1019,4],[1321,6]]},"133":{"position":[[65,4]]},"159":{"position":[[571,4],[632,4]]}}}],["auth/pass_basic_auth",{"_index":377,"t":{"32":{"position":[[323,20]]}}}],["auth/set_basic_auth",{"_index":382,"t":{"32":{"position":[[478,19]]}}}],["auth_cooki",{"_index":1272,"t":{"119":{"position":[[1600,12],[1662,13],[2284,13],[2337,13]]}}}],["auth_cookie_name_0",{"_index":1285,"t":{"119":{"position":[[2317,19],[2550,20]]}}}],["auth_cookie_name_1",{"_index":1286,"t":{"119":{"position":[[2355,19],[2593,20]]}}}],["auth_cookie_name_1=$auth_cookie_name_upstream_1$1",{"_index":1287,"t":{"119":{"position":[[2375,52]]}}}],["auth_cookie_name_upstream_1",{"_index":1282,"t":{"119":{"position":[[2046,28],[2495,30]]}}}],["auth_request",{"_index":1124,"t":{"105":{"position":[[12491,12],[12701,12],[12809,12]]},"119":{"position":[[65,12],[836,12],[959,12],[1570,12],[1903,12]]},"157":{"position":[[1175,12]]}}}],["auth_request_set",{"_index":1268,"t":{"119":{"position":[[1130,16],[1189,16],[1392,16],[1583,16],[2029,16],[2889,16],[3372,16]]}}}],["authent",{"_index":86,"t":{"4":{"position":[[200,14],[294,14],[458,14],[657,14]]},"22":{"position":[[119,13]]},"37":{"position":[[444,14],[746,13],[1134,13]]},"67":{"position":[[2096,14]]},"81":{"position":[[1833,15]]},"93":{"position":[[498,13]]},"105":{"position":[[260,14],[403,14],[474,14],[527,13],[560,12],[2699,12],[2785,12],[5111,12],[6514,14],[8044,15],[13197,14],[13313,14],[13427,14],[13636,14],[15709,15],[15888,14]]},"107":{"position":[[306,13]]},"111":{"position":[[419,15]]},"113":{"position":[[0,14],[113,13],[365,13],[440,12],[514,14],[1013,13]]},"119":{"position":[[104,12]]},"123":{"position":[[56,12]]},"125":{"position":[[273,13]]},"129":{"position":[[234,14]]},"131":{"position":[[2595,14]]},"135":{"position":[[2280,14],[2300,14]]},"139":{"position":[[2935,13]]},"141":{"position":[[24,14]]},"143":{"position":[[802,12]]},"149":{"position":[[37,12]]},"155":{"position":[[494,12]]},"157":{"position":[[109,14]]},"159":{"position":[[154,14],[294,14]]}}}],["authenticationprovid",{"_index":451,"t":{"37":{"position":[[994,22]]}}}],["autherror",{"_index":1210,"t":{"113":{"position":[[464,9]]}}}],["authfailur",{"_index":1208,"t":{"113":{"position":[[406,11]]}}}],["author",{"_index":313,"t":{"22":{"position":[[3,9],[76,9],[187,9]]},"32":{"position":[[421,13],[536,13]]},"89":{"position":[[211,13]]},"105":{"position":[[7629,13],[7689,13],[12617,13],[12647,13],[13661,13]]},"119":{"position":[[1699,13]]},"125":{"position":[[2031,13],[2207,13]]},"129":{"position":[[67,13]]},"131":{"position":[[610,10],[692,10],[998,11]]},"133":{"position":[[1032,14]]},"135":{"position":[[3817,13],[3857,13],[3903,13],[4820,10],[5471,13],[5723,9]]},"139":{"position":[[3369,14]]},"145":{"position":[[1294,13]]},"147":{"position":[[1757,13],[1860,13],[1993,13],[2098,13],[2508,13],[2807,13],[3414,13],[4114,13],[4255,13]]}}}],["authorizationnginx.ingress.kubernetes.io/auth",{"_index":1299,"t":{"119":{"position":[[3152,45]]}}}],["authresponsehead",{"_index":1354,"t":{"125":{"position":[[1978,20],[2154,20]]}}}],["authsuccess",{"_index":1206,"t":{"113":{"position":[[339,11],[1494,11]]}}}],["auto",{"_index":182,"t":{"12":{"position":[[242,7],[560,7]]},"125":{"position":[[776,4]]}}}],["automat",{"_index":1430,"t":{"131":{"position":[[2893,13]]},"159":{"position":[[186,13]]}}}],["automaticallyanchor",{"_index":745,"t":{"79":{"position":[[510,21]]}}}],["avail",{"_index":26,"t":{"2":{"position":[[297,10],[393,10]]},"28":{"position":[[240,10]]},"32":{"position":[[85,9]]},"37":{"position":[[136,9]]},"57":{"position":[[195,9]]},"107":{"position":[[819,9],[953,9],[1032,9]]},"113":{"position":[[766,9]]},"115":{"position":[[618,9]]},"117":{"position":[[490,9]]},"139":{"position":[[334,9]]},"141":{"position":[[198,9],[249,9]]},"145":{"position":[[1824,10],[2026,10],[3033,9]]},"147":{"position":[[2037,9]]}}}],["azur",{"_index":294,"t":{"20":{"position":[[226,5],[308,5]]},"32":{"position":[[1284,6]]},"67":{"position":[[660,5],[2448,6]]},"69":{"position":[[134,6]]},"87":{"position":[[59,5],[1051,5],[1322,5],[1342,6],[1533,5],[1620,5],[1841,5],[1958,5],[2297,5]]},"89":{"position":[[43,5]]},"105":{"position":[[614,5],[6774,5],[11856,6]]},"119":{"position":[[3708,7]]}}}],["azureconfig",{"_index":663,"t":{"67":{"position":[[594,11],[619,11]]}}}],["azureopt",{"_index":664,"t":{"67":{"position":[[606,12]]}}}],["b",{"_index":8,"t":{"2":{"position":[[77,2]]},"105":{"position":[[5188,1]]},"125":{"position":[[463,2],[1044,2],[1517,1]]}}}],["back",{"_index":142,"t":{"6":{"position":[[338,4]]},"145":{"position":[[101,4],[173,4]]}}}],["backend",{"_index":1123,"t":{"105":{"position":[[12294,8]]},"119":{"position":[[1073,8],[1384,7]]},"123":{"position":[[393,7],[659,7],[769,8],[837,8],[1279,7]]},"125":{"position":[[527,7],[812,7],[1139,7],[1345,7],[1455,8],[1527,8],[1595,8]]},"141":{"position":[[224,9],[259,8]]},"143":{"position":[[19,7],[42,7],[141,8],[366,7]]},"145":{"position":[[18,7],[2198,7],[2235,7],[2300,7],[2347,9],[3053,7]]}}}],["backport",{"_index":283,"t":{"18":{"position":[[632,8]]}}}],["backslash",{"_index":597,"t":{"63":{"position":[[872,9]]}}}],["backup",{"_index":1071,"t":{"105":{"position":[[5854,6],[5989,7]]},"111":{"position":[[266,6],[293,9],[310,6]]}}}],["balanc",{"_index":1690,"t":{"155":{"position":[[100,10],[241,8],[290,10]]}}}],["banner",{"_index":1041,"t":{"105":{"position":[[3502,6],[3530,6],[3572,7]]}}}],["bar",{"_index":762,"t":{"81":{"position":[[603,8],[641,5]]}}}],["base",{"_index":345,"t":{"26":{"position":[[505,5]]},"28":{"position":[[57,5]]},"37":{"position":[[523,5]]},"81":{"position":[[1386,7]]},"105":{"position":[[15176,5]]},"107":{"position":[[1325,5]]},"133":{"position":[[1026,5]]},"147":{"position":[[3391,5],[3928,4]]}}}],["base/dir",{"_index":787,"t":{"81":{"position":[[1467,12]]}}}],["base64",{"_index":545,"t":{"55":{"position":[[168,6]]},"73":{"position":[[213,6]]},"101":{"position":[[241,6],[303,6],[587,6]]},"105":{"position":[[2013,6]]}}}],["base64url",{"_index":1580,"t":{"145":{"position":[[458,9]]}}}],["bash",{"_index":942,"t":{"101":{"position":[[73,4]]}}}],["basic",{"_index":376,"t":{"32":{"position":[[317,5],[472,5],[624,5]]},"43":{"position":[[406,5],[464,5]]},"55":{"position":[[627,5],[685,5]]},"105":{"position":[[710,5],[779,5],[7730,5],[7756,5],[8092,5],[9094,5],[9181,5],[12732,5],[12757,5]]}}}],["basicauthpassword",{"_index":487,"t":{"43":{"position":[[330,17],[361,17]]},"55":{"position":[[551,17],[582,17]]}}}],["baz",{"_index":763,"t":{"81":{"position":[[648,12],[690,4],[957,11]]}}}],["baz/abc/123",{"_index":773,"t":{"81":{"position":[[1021,12]]}}}],["bcrypt",{"_index":1054,"t":{"105":{"position":[[5194,6]]}}}],["bearer",{"_index":85,"t":{"4":{"position":[[181,6]]},"105":{"position":[[2952,6],[7703,6],[12661,6],[13735,6],[13796,6]]}}}],["becom",{"_index":490,"t":{"43":{"position":[[453,6]]},"55":{"position":[[674,6]]},"105":{"position":[[1432,7]]},"109":{"position":[[414,7],[478,7]]}}}],["befor",{"_index":193,"t":{"12":{"position":[[804,6]]},"26":{"position":[[282,6]]},"30":{"position":[[0,6]]},"32":{"position":[[1488,6]]},"81":{"position":[[829,6],[1050,6]]},"105":{"position":[[6124,6]]}}}],["beforward",{"_index":609,"t":{"63":{"position":[[1494,11]]}}}],["behind",{"_index":65,"t":{"2":{"position":[[868,6]]},"105":{"position":[[11908,6]]}}}],["believ",{"_index":232,"t":{"16":{"position":[[12,7]]}}}],["beload",{"_index":481,"t":{"43":{"position":[[204,8]]},"55":{"position":[[425,8]]}}}],["belong",{"_index":514,"t":{"47":{"position":[[454,6]]},"105":{"position":[[4131,6]]},"129":{"position":[[511,6],[1537,6]]}}}],["below",{"_index":347,"t":{"26":{"position":[[541,5],[728,6],[878,5]]},"28":{"position":[[104,6],[271,5]]},"101":{"position":[[50,5]]},"105":{"position":[[16867,5]]},"113":{"position":[[167,5],[324,5]]},"115":{"position":[[48,5]]},"117":{"position":[[237,6]]},"147":{"position":[[346,6]]},"155":{"position":[[53,7]]}}}],["beoverridden",{"_index":607,"t":{"63":{"position":[[1384,12]]}}}],["bepass",{"_index":605,"t":{"63":{"position":[[1252,8]]}}}],["best",{"_index":1470,"t":{"135":{"position":[[1521,4]]}}}],["between",{"_index":438,"t":{"37":{"position":[[290,7]]},"81":{"position":[[2135,7]]},"105":{"position":[[3298,7]]},"141":{"position":[[53,7]]}}}],["bewar",{"_index":339,"t":{"26":{"position":[[267,6]]},"159":{"position":[[837,6]]}}}],["big",{"_index":1587,"t":{"145":{"position":[[972,4]]}}}],["bin/dex",{"_index":1629,"t":{"147":{"position":[[849,7]]}}}],["binari",{"_index":4,"t":{"2":{"position":[[42,6],[199,6],[462,8]]}}}],["bindaddress",{"_index":458,"t":{"37":{"position":[[1377,11],[1685,11]]},"75":{"position":[[108,11],[127,11]]}}}],["bit",{"_index":1512,"t":{"139":{"position":[[823,4],[1057,3]]},"145":{"position":[[388,3],[439,3]]}}}],["bitbucket",{"_index":308,"t":{"20":{"position":[[365,9]]},"32":{"position":[[1291,10]]},"67":{"position":[[832,9]]},"69":{"position":[[141,10]]},"93":{"position":[[477,9],[594,9],[714,9]]}}}],["bitbucketconfig",{"_index":667,"t":{"67":{"position":[[754,15],[787,15]]}}}],["bitbucketopt",{"_index":668,"t":{"67":{"position":[[770,16]]}}}],["blank",{"_index":715,"t":{"75":{"position":[[186,5],[315,5]]}}}],["block",{"_index":600,"t":{"63":{"position":[[958,6],[1040,5]]},"113":{"position":[[294,5]]},"147":{"position":[[626,5]]}}}],["bodi",{"_index":795,"t":{"81":{"position":[[1825,4]]},"119":{"position":[[874,4]]}}}],["bool",{"_index":430,"t":{"35":{"position":[[56,4]]},"51":{"position":[[329,4]]},"53":{"position":[[281,4]]},"65":{"position":[[166,4],[322,4],[501,4],[849,4]]},"67":{"position":[[1859,4]]},"81":{"position":[[1502,4],[1725,4],[2250,4],[2387,4]]},"83":{"position":[[131,4]]},"105":{"position":[[99,4],[394,4],[1530,4],[2045,4],[2209,4],[2589,4],[2829,4],[3376,4],[3430,4],[4840,4],[4968,4],[5655,4],[5817,4],[6577,4],[6691,4],[6841,4],[7439,4],[7650,4],[7741,4],[7891,4],[8152,4],[8223,4],[8710,4],[9530,4],[9996,4],[10330,4],[10963,4],[11082,4],[11695,4],[11888,4],[12138,4],[12345,4],[12638,4],[12743,4],[12856,4],[13095,4],[13182,4],[13604,4],[13749,4],[13936,4],[14080,4],[14186,4],[14302,4],[14401,4]]}}}],["boolean",{"_index":526,"t":{"51":{"position":[[372,7]]}}}],["both",{"_index":213,"t":{"12":{"position":[[1351,4]]},"37":{"position":[[1302,4],[1610,4]]},"79":{"position":[[291,5]]},"119":{"position":[[2437,4]]},"135":{"position":[[3105,4]]}}}],["bracket",{"_index":1060,"t":{"105":{"position":[[5400,8],[5566,8]]}}}],["branch",{"_index":140,"t":{"6":{"position":[[317,6]]},"10":{"position":[[34,6],[152,6]]}}}],["break",{"_index":330,"t":{"26":{"position":[[89,8]]}}}],["brief",{"_index":1486,"t":{"135":{"position":[[5574,5]]}}}],["bring",{"_index":241,"t":{"16":{"position":[[281,5]]}}}],["brows",{"_index":355,"t":{"26":{"position":[[857,6]]}}}],["browser",{"_index":999,"t":{"105":{"position":[[1484,7],[16718,8]]},"139":{"position":[[2922,8]]},"145":{"position":[[870,7],[1360,8]]}}}],["browserxssfilt",{"_index":1332,"t":{"123":{"position":[[975,17]]},"125":{"position":[[1733,17]]}}}],["bs=32",{"_index":950,"t":{"101":{"position":[[213,5]]}}}],["buffer",{"_index":803,"t":{"81":{"position":[[2165,6]]},"105":{"position":[[3324,7]]}}}],["bug",{"_index":116,"t":{"6":{"position":[[9,4],[53,4],[221,4],[377,3]]}}}],["build",{"_index":473,"t":{"39":{"position":[[243,8]]},"139":{"position":[[2563,6],[2581,5]]},"153":{"position":[[962,8]]}}}],["built",{"_index":1616,"t":{"147":{"position":[[157,5]]}}}],["bundl",{"_index":1531,"t":{"139":{"position":[[1456,7]]}}}],["button",{"_index":1138,"t":{"105":{"position":[[14073,6]]}}}],["button=tru",{"_index":1540,"t":{"139":{"position":[[1902,11]]}}}],["bypass",{"_index":1134,"t":{"105":{"position":[[13306,6],[13420,6],[13941,6],[15881,6]]}}}],["bysom",{"_index":743,"t":{"79":{"position":[[457,6]]}}}],["byte",{"_index":543,"t":{"55":{"position":[[145,6]]},"73":{"position":[[190,6]]},"101":{"position":[[582,4],[634,6]]},"115":{"position":[[1215,5]]}}}],["c",{"_index":18,"t":{"2":{"position":[[223,2],[637,1]]},"101":{"position":[[115,1]]}}}],["c=us/st=washington/l=dc/o=gsa/ou=18f/cn=localhost",{"_index":1527,"t":{"139":{"position":[[1193,53]]}}}],["ca",{"_index":397,"t":{"32":{"position":[[865,2]]},"67":{"position":[[1707,2],[1910,2],[1982,2],[2054,2]]},"105":{"position":[[8520,2],[8551,2],[8738,2],[8817,2],[8889,2]]}}}],["cafil",{"_index":690,"t":{"67":{"position":[[1660,7],[1677,7]]}}}],["call",{"_index":520,"t":{"51":{"position":[[193,5]]},"105":{"position":[[4602,5]]},"131":{"position":[[1979,5],[3018,6]]}}}],["callback",{"_index":900,"t":{"91":{"position":[[121,8]]},"93":{"position":[[28,9]]},"129":{"position":[[81,8]]},"147":{"position":[[595,10]]},"157":{"position":[[963,8]]}}}],["caller",{"_index":568,"t":{"61":{"position":[[705,6]]}}}],["capitalis",{"_index":1188,"t":{"109":{"position":[[108,12]]}}}],["captur",{"_index":758,"t":{"81":{"position":[[507,8],[699,7],[885,7]]}}}],["case",{"_index":99,"t":{"4":{"position":[[398,4]]},"16":{"position":[[533,4]]},"24":{"position":[[90,4]]},"81":{"position":[[1214,4]]},"105":{"position":[[14046,4]]},"139":{"position":[[3451,5]]},"145":{"position":[[2841,5]]},"149":{"position":[[840,5]]}}}],["caseadd",{"_index":961,"t":{"101":{"position":[[377,7]]}}}],["caveat",{"_index":1597,"t":{"145":{"position":[[2037,7]]}}}],["center",{"_index":1397,"t":{"131":{"position":[[230,6],[318,6],[425,6]]}}}],["cert",{"_index":725,"t":{"77":{"position":[[260,4],[278,4]]},"105":{"position":[[14541,4]]},"153":{"position":[[65,4],[306,4]]}}}],["cert.pem",{"_index":1524,"t":{"139":{"position":[[1160,8]]}}}],["certif",{"_index":462,"t":{"37":{"position":[[1480,11],[1788,11]]},"67":{"position":[[1710,12]]},"75":{"position":[[400,11]]},"77":{"position":[[68,11],[294,11]]},"87":{"position":[[1182,12]]},"105":{"position":[[8554,12],[14210,12],[14326,12],[14566,11]]},"139":{"position":[[1008,11]]}}}],["certresolv",{"_index":1321,"t":{"123":{"position":[[447,13],[672,13]]},"125":{"position":[[624,13],[907,13],[1152,13],[1358,13]]}}}],["challeng",{"_index":707,"t":{"67":{"position":[[2725,9]]},"105":{"position":[[994,9],[1032,10]]},"135":{"position":[[636,9]]}}}],["chang",{"_index":331,"t":{"26":{"position":[[98,7],[202,8]]},"37":{"position":[[283,6]]},"65":{"position":[[783,6]]},"91":{"position":[[651,6]]},"105":{"position":[[1649,7]]},"127":{"position":[[82,8]]},"157":{"position":[[150,7]]}}}],["channel",{"_index":1025,"t":{"105":{"position":[[2879,7]]}}}],["charact",{"_index":588,"t":{"63":{"position":[[709,10],[916,10],[1076,10]]}}}],["check",{"_index":76,"t":{"4":{"position":[[80,7]]},"79":{"position":[[134,7]]},"87":{"position":[[157,5]]},"105":{"position":[[9107,6],[9194,6],[9211,5],[9301,6]]},"131":{"position":[[2234,7],[2545,7]]},"135":{"position":[[6853,5]]},"157":{"position":[[391,6]]}}}],["checkbox",{"_index":129,"t":{"6":{"position":[[188,11]]}}}],["checkedaft",{"_index":630,"t":{"65":{"position":[[655,12]]}}}],["checksum",{"_index":41,"t":{"2":{"position":[[554,8]]}}}],["chomp",{"_index":599,"t":{"63":{"position":[[949,8]]}}}],["choos",{"_index":0,"t":{"2":{"position":[[0,6]]},"37":{"position":[[1288,6],[1596,6]]},"87":{"position":[[52,6]]},"131":{"position":[[108,6],[243,6],[290,6],[331,6],[438,6],[501,6],[526,6],[581,6],[805,6],[1328,6],[1814,6],[2070,6]]},"135":{"position":[[6394,6]]}}}],["cidr",{"_index":1154,"t":{"105":{"position":[[15857,4]]}}}],["cipher",{"_index":731,"t":{"77":{"position":[[530,6],[663,6],[697,6]]},"105":{"position":[[14589,6],[14630,6],[14776,6],[14811,6]]},"153":{"position":[[797,6],[839,6],[1027,6]]}}}],["ciphersuit",{"_index":730,"t":{"77":{"position":[[478,12],[500,12]]}}}],["claim",{"_index":311,"t":{"20":{"position":[[491,7],[522,5]]},"43":{"position":[[75,5],[123,5],[136,5],[161,5],[393,5],[442,5]]},"55":{"position":[[344,5],[357,5],[382,5],[614,5],[663,5]]},"65":{"position":[[561,5],[1101,5],[1201,5],[1302,5],[1410,5],[1469,5]]},"105":{"position":[[6887,5],[7102,5],[7126,5],[7180,5],[7204,5],[7260,5],[7284,5]]},"133":{"position":[[362,5]]},"135":{"position":[[1207,5],[1693,5],[1725,5],[1891,6],[3333,5],[5911,5],[5982,5]]},"147":{"position":[[1782,6]]}}}],["claim/user_id_claim",{"_index":413,"t":{"32":{"position":[[1067,19]]}}}],["claimsourc",{"_index":479,"t":{"43":{"position":[[26,11]]},"73":{"position":[[13,12]]}}}],["clear",{"_index":1712,"t":{"157":{"position":[[704,6],[759,5]]}}}],["click",{"_index":827,"t":{"85":{"position":[[199,5]]},"87":{"position":[[117,5],[398,5],[523,5],[616,5]]},"131":{"position":[[1341,5]]},"135":{"position":[[2261,5],[2759,8],[2914,5],[3550,8]]},"147":{"position":[[1983,5],[2647,5]]}}}],["client",{"_index":390,"t":{"32":{"position":[[712,6],[732,6],[765,6]]},"65":{"position":[[1445,6],[1630,6]]},"67":{"position":[[140,6],[269,6],[441,6]]},"85":{"position":[[239,6],[250,6],[349,6],[390,6]]},"87":{"position":[[1232,6],[1456,6],[1497,6],[1764,6],[1805,6]]},"91":{"position":[[338,6],[352,6],[442,6],[466,6]]},"93":{"position":[[275,6],[289,6],[376,6],[400,6]]},"97":{"position":[[175,6],[189,6],[355,6],[405,6]]},"105":{"position":[[799,6],[826,6],[880,6],[911,6],[927,6],[973,6],[5384,8],[5550,8],[9644,6],[9712,7],[13853,6],[15991,6]]},"113":{"position":[[677,11],[833,6],[1408,7]]},"115":{"position":[[413,11],[688,6],[1480,7]]},"125":{"position":[[2276,6],[2307,6]]},"127":{"position":[[748,6],[777,6]]},"131":{"position":[[515,6],[838,6],[852,6],[1278,6],[1540,6],[1964,6]]},"133":{"position":[[103,6],[293,6],[461,6],[499,6]]},"135":{"position":[[27,6],[58,6],[546,6],[616,6],[914,6],[977,6],[1138,6],[1285,6],[1342,6],[1462,6],[1603,6],[1842,6],[1981,7],[2020,6],[2049,6],[2074,6],[2139,6],[2146,6],[2175,6],[2273,6],[2650,6],[2674,7],[2707,6],[2821,6],[2905,8],[3009,6],[3286,6],[3517,6],[4011,6],[4189,6],[4226,6],[4345,6],[4549,6],[4573,7],[4638,7],[4760,7],[4888,7],[5051,6],[5076,7],[5109,6],[5617,6],[5806,6],[6237,6],[6298,7],[6306,7],[6339,6],[6360,6],[6436,6],[6983,7],[7016,6]]},"139":{"position":[[1587,6],[3565,6],[3589,6]]},"143":{"position":[[187,6],[340,6],[481,6]]},"145":{"position":[[110,6]]},"147":{"position":[[1012,6],[1035,6],[2891,6],[2905,6],[4168,6],[4182,6]]},"149":{"position":[[415,6],[429,6],[549,6],[583,6]]},"153":{"position":[[435,6],[453,6]]},"155":{"position":[[1389,6],[1407,6]]}}}],["client'",{"_index":1439,"t":{"133":{"position":[[519,8]]},"135":{"position":[[43,8],[78,8],[1668,8],[2191,8],[2585,8],[2691,8],[2774,8],[2986,8],[3038,8],[4590,8],[4947,8],[5093,8],[5132,8],[6323,8],[7000,8]]}}}],["client/remot",{"_index":1215,"t":{"113":{"position":[[858,13]]},"115":{"position":[[713,13]]}}}],["client_id",{"_index":931,"t":{"97":{"position":[[368,9]]},"147":{"position":[[3498,9],[4563,13]]}}}],["client_secret",{"_index":932,"t":{"97":{"position":[[422,13]]},"147":{"position":[[3512,13]]}}}],["client_session_idl",{"_index":1607,"t":{"145":{"position":[[2592,20]]}}}],["clientid",{"_index":656,"t":{"67":{"position":[[102,8],[118,8]]}}}],["clientsecret",{"_index":658,"t":{"67":{"position":[[223,12],[243,12],[475,12]]}}}],["clientsecretfil",{"_index":659,"t":{"67":{"position":[[356,16],[380,16]]}}}],["clone",{"_index":159,"t":{"10":{"position":[[0,5],[88,5]]}}}],["close",{"_index":1000,"t":{"105":{"position":[[1495,7]]}}}],["closest",{"_index":753,"t":{"81":{"position":[[364,7]]}}}],["cloud",{"_index":1546,"t":{"139":{"position":[[2259,5]]},"155":{"position":[[80,5]]}}}],["cloud/dock",{"_index":1543,"t":{"139":{"position":[[2179,12]]}}}],["cluster",{"_index":1110,"t":{"105":{"position":[[10045,7],[10097,7],[10186,7],[10955,7],[10985,8],[11011,7]]},"145":{"position":[[3022,7],[3180,7]]}}}],["cluster=tru",{"_index":1610,"t":{"145":{"position":[[3129,12],[3277,12]]}}}],["code",{"_index":150,"t":{"6":{"position":[[458,4],[502,4]]},"67":{"position":[[2720,4]]},"81":{"position":[[2005,4]]},"105":{"position":[[989,4],[1027,4]]},"115":{"position":[[1269,4]]},"135":{"position":[[631,4]]},"147":{"position":[[2821,4],[4128,4]]}}}],["code_challenge_method",{"_index":706,"t":{"67":{"position":[[2687,21]]}}}],["codematch",{"_index":796,"t":{"81":{"position":[[1864,12]]}}}],["collabor",{"_index":264,"t":{"18":{"position":[[161,12]]},"47":{"position":[[217,13],[494,13]]},"105":{"position":[[3867,13],[3991,13],[4171,13]]},"129":{"position":[[310,13],[551,14],[935,13],[1105,13],[1457,13],[1577,14]]}}}],["collaboratorsit",{"_index":512,"t":{"47":{"position":[[315,15]]}}}],["collect",{"_index":710,"t":{"71":{"position":[[62,10]]},"83":{"position":[[47,10]]}}}],["combin",{"_index":1156,"t":{"105":{"position":[[15939,8]]},"111":{"position":[[676,8]]}}}],["come",{"_index":724,"t":{"77":{"position":[[242,4],[338,4]]},"135":{"position":[[4137,5]]}}}],["comma",{"_index":1034,"t":{"105":{"position":[[3167,5],[3821,5],[4287,5]]},"107":{"position":[[1139,5]]},"127":{"position":[[1025,5]]},"129":{"position":[[890,5],[1607,5],[1671,5]]},"161":{"position":[[151,5],[213,5],[275,5]]}}}],["command",{"_index":59,"t":{"2":{"position":[[797,7]]},"91":{"position":[[693,7]]},"99":{"position":[[35,7],[135,7]]},"101":{"position":[[56,9]]},"103":{"position":[[6,7]]},"109":{"position":[[6,7],[362,7]]},"111":{"position":[[140,8]]},"145":{"position":[[732,8]]},"149":{"position":[[205,7]]},"153":{"position":[[135,7]]},"155":{"position":[[1137,7]]}}}],["commandlin",{"_index":1551,"t":{"139":{"position":[[2830,12]]}}}],["common",{"_index":468,"t":{"39":{"position":[[99,6],[152,8]]},"89":{"position":[[204,6]]},"105":{"position":[[661,6],[699,8]]}}}],["commun",{"_index":218,"t":{"14":{"position":[[23,9]]}}}],["compat",{"_index":1087,"t":{"105":{"position":[[6793,14]]}}}],["complet",{"_index":1477,"t":{"135":{"position":[[2212,8]]},"143":{"position":[[405,10]]},"153":{"position":[[1000,8]]}}}],["compos",{"_index":194,"t":{"12":{"position":[[902,7],[1194,7],[1274,7],[1292,7]]},"16":{"position":[[353,7]]},"145":{"position":[[231,8]]}}}],["compose.yaml",{"_index":208,"t":{"12":{"position":[[1212,12]]}}}],["compress",{"_index":1067,"t":{"105":{"position":[[5646,8],[5688,10]]},"111":{"position":[[332,10],[354,10]]}}}],["compris",{"_index":1582,"t":{"145":{"position":[[566,9]]}}}],["concurr",{"_index":1571,"t":{"143":{"position":[[628,12]]}}}],["confidenti",{"_index":1435,"t":{"133":{"position":[[150,14]]},"135":{"position":[[961,15]]}}}],["config",{"_index":58,"t":{"2":{"position":[[784,6]]},"12":{"position":[[296,8],[614,8]]},"26":{"position":[[691,6]]},"28":{"position":[[159,6],[200,6]]},"30":{"position":[[30,6],[82,6],[179,6],[197,6],[487,7],[516,6],[551,6]]},"32":{"position":[[1394,6],[1414,6],[1530,6]]},"91":{"position":[[545,6]]},"99":{"position":[[82,6]]},"103":{"position":[[50,6],[162,6],[235,6]]},"105":{"position":[[1111,6],[1133,6],[11474,6]]},"107":{"position":[[1255,6]]},"119":{"position":[[2938,6]]},"127":{"position":[[495,6]]},"145":{"position":[[3503,6]]},"147":{"position":[[3683,6],[4345,6],[4844,6]]},"155":{"position":[[46,6],[645,6]]},"157":{"position":[[182,6]]}}}],["config=/etc/oauth2",{"_index":978,"t":{"103":{"position":[[307,18]]}}}],["configur",{"_index":56,"t":{"2":{"position":[[755,9],[844,9]]},"4":{"position":[[518,10],[698,14]]},"12":{"position":[[137,17],[322,13],[640,13]]},"20":{"position":[[105,9],[423,13]]},"26":{"position":[[303,13],[359,13],[447,13],[511,13],[587,14],[639,14],[671,14],[913,13]]},"28":{"position":[[21,14]]},"30":{"position":[[123,13],[318,13],[406,13]]},"32":{"position":[[112,14]]},"37":{"position":[[39,13],[169,13],[402,9],[634,9],[869,9],[1225,9],[1464,9],[1547,9],[1772,9],[1850,9]]},"39":{"position":[[200,10]]},"61":{"position":[[48,13]]},"67":{"position":[[43,13],[556,14],[641,14],[720,14],[813,14],[902,14],[989,14],[1075,14],[1155,14],[1213,15],[1285,14]]},"75":{"position":[[49,13],[454,13]]},"81":{"position":[[53,13]]},"83":{"position":[[308,13]]},"85":{"position":[[268,9],[306,9]]},"87":{"position":[[1289,9]]},"91":{"position":[[304,10]]},"93":{"position":[[442,13],[570,13]]},"99":{"position":[[20,10],[234,13]]},"105":{"position":[[511,13],[3095,13],[5056,10],[10453,15],[11793,13],[14027,10],[14521,13]]},"107":{"position":[[193,10],[530,10],[593,10],[857,10],[1113,10]]},"109":{"position":[[336,13]]},"111":{"position":[[67,10],[183,9],[589,12]]},"113":{"position":[[582,9],[654,10]]},"115":{"position":[[315,9],[390,10]]},"117":{"position":[[134,13],[349,9],[425,10]]},"119":{"position":[[2830,13],[3776,10]]},"123":{"position":[[295,14]]},"125":{"position":[[240,10]]},"131":{"position":[[1107,9]]},"135":{"position":[[1618,10],[2386,14],[2507,14],[2603,9],[2920,9],[3477,14],[3596,13]]},"145":{"position":[[1002,9],[2793,9],[2915,9],[3152,9]]},"147":{"position":[[361,9],[612,13],[1535,9],[1747,9],[1847,9],[2372,9],[3011,13],[3530,10]]},"149":{"position":[[165,14]]},"151":{"position":[[26,15]]},"153":{"position":[[0,9],[176,13],[481,13],[713,11]]},"155":{"position":[[0,9],[1178,13]]},"157":{"position":[[935,10]]},"159":{"position":[[970,13]]},"161":{"position":[[86,10]]}}}],["conflict",{"_index":1572,"t":{"143":{"position":[[768,9]]}}}],["conjunct",{"_index":452,"t":{"37":{"position":[[1020,11]]},"87":{"position":[[2056,11]]},"105":{"position":[[8068,11],[10157,11],[10745,11],[10905,11]]}}}],["connect",{"_index":304,"t":{"20":{"position":[[324,7],[570,7]]},"65":{"position":[[87,7],[993,7]]},"67":{"position":[[1748,10]]},"105":{"position":[[6934,7],[8592,10],[10053,10],[10105,10],[10202,10],[10362,10],[10511,10],[10607,11],[10800,10],[10853,10],[10968,7],[11019,10],[11087,7],[11178,10],[11228,10],[11262,10],[11351,10],[11508,10],[11557,10]]},"135":{"position":[[1001,8],[2166,8]]},"139":{"position":[[869,7],[913,8]]},"145":{"position":[[2704,10],[2732,10],[2985,10],[3188,10],[3376,10],[3537,10],[3586,10]]},"147":{"position":[[7,7],[228,7],[272,7],[2635,7]]},"155":{"position":[[414,11]]},"157":{"position":[[455,11],[491,9]]}}}],["connect/auth",{"_index":1443,"t":{"133":{"position":[[616,13]]}}}],["connect/token",{"_index":1444,"t":{"133":{"position":[[711,14]]}}}],["connect/userinfo",{"_index":1445,"t":{"133":{"position":[[808,17],[909,17]]}}}],["consent",{"_index":574,"t":{"63":{"position":[[165,7],[333,7]]},"87":{"position":[[702,7],[810,7],[837,7]]},"131":{"position":[[345,7]]}}}],["consent#th",{"_index":894,"t":{"87":{"position":[[2238,11]]}}}],["consid",{"_index":437,"t":{"37":{"position":[[256,10]]},"63":{"position":[[889,10]]}}}],["consol",{"_index":823,"t":{"85":{"position":[[29,7]]},"135":{"position":[[702,7],[750,7],[798,7],[895,7],[1374,7],[1499,8],[6949,7]]}}}],["consult",{"_index":1472,"t":{"135":{"position":[[1558,7]]}}}],["consum",{"_index":912,"t":{"93":{"position":[[16,8]]},"137":{"position":[[353,8],[380,8]]}}}],["contact",{"_index":1501,"t":{"139":{"position":[[96,7],[135,7]]}}}],["contain",{"_index":186,"t":{"12":{"position":[[336,8],[654,8]]},"26":{"position":[[17,8]]},"37":{"position":[[13,8]]},"53":{"position":[[561,8]]},"55":{"position":[[315,10]]},"65":{"position":[[1107,8],[1207,8],[1308,8]]},"73":{"position":[[360,10]]},"75":{"position":[[359,8]]},"77":{"position":[[25,8]]},"105":{"position":[[7132,8],[7210,8],[7290,8],[12927,7]]},"113":{"position":[[53,7],[305,7]]},"119":{"position":[[2249,7]]},"139":{"position":[[2508,8]]},"147":{"position":[[1466,9],[4745,10]]}}}],["content",{"_index":1264,"t":{"119":{"position":[[896,7],[2272,8]]},"135":{"position":[[7186,9]]},"139":{"position":[[1251,8]]}}}],["contenttypenosniff",{"_index":1333,"t":{"123":{"position":[[998,19]]},"125":{"position":[[1756,19]]}}}],["contrib",{"_index":977,"t":{"103":{"position":[[257,7]]}}}],["contrib/loc",{"_index":188,"t":{"12":{"position":[[420,14],[743,14],[1133,13]]}}}],["control",{"_index":1120,"t":{"105":{"position":[[11932,8]]},"145":{"position":[[1625,8]]}}}],["convert",{"_index":360,"t":{"30":{"position":[[74,7],[106,7],[171,7],[244,7]]},"43":{"position":[[379,8]]},"55":{"position":[[600,8]]}}}],["convolut",{"_index":593,"t":{"63":{"position":[[798,11]]}}}],["cooki",{"_index":79,"t":{"4":{"position":[[112,6],[122,6],[543,8],[570,6]]},"85":{"position":[[483,6],[521,6]]},"87":{"position":[[2336,6],[2374,6]]},"101":{"position":[[21,6]]},"105":{"position":[[1147,6],[1184,6],[1208,7],[1321,6],[1360,6],[1404,7],[1425,6],[1450,6],[1514,6],[1548,6],[1567,6],[1602,6],[1666,6],[1708,6],[1748,6],[1779,6],[1800,7],[1830,6],[1866,6],[1945,6],[1993,7],[2031,6],[2074,6],[2093,6],[2129,6],[2185,6],[2243,7],[2318,6],[2372,6],[12123,6],[12167,6],[12211,7],[12312,6],[12319,6],[16374,6]]},"109":{"position":[[395,6]]},"119":{"position":[[1519,6],[1655,6],[1742,7],[1879,7],[1946,7],[2011,7],[2126,6],[2163,6],[2265,6],[2446,6],[2543,6],[2586,6],[3507,8],[3760,6],[3793,6],[3842,6],[3961,6]]},"127":{"position":[[570,6],[814,6]]},"131":{"position":[[933,6]]},"139":{"position":[[1729,6],[1811,6],[1861,6],[3847,6]]},"141":{"position":[[122,6],[309,6]]},"143":{"position":[[4,6],[126,6],[199,7],[426,7],[518,6],[579,6]]},"145":{"position":[[140,6],[197,6],[327,6],[903,6],[1029,6],[1048,6],[1084,6],[1126,6],[1170,6],[1190,7],[1602,7],[2398,6]]},"147":{"position":[[1148,6],[1168,6],[3617,7]]},"153":{"position":[[373,6],[395,6]]},"155":{"position":[[1304,6],[1326,6]]},"157":{"position":[[711,8],[777,6]]},"159":{"position":[[103,8]]}}}],["cookie_expir",{"_index":1606,"t":{"145":{"position":[[2537,13]]}}}],["cookie_refresh",{"_index":1605,"t":{"145":{"position":[[2492,14]]}}}],["cookie_secret",{"_index":971,"t":{"101":{"position":[[682,15]]},"147":{"position":[[3588,13]]}}}],["cookienam",{"_index":1575,"t":{"145":{"position":[[258,12],[302,10],[542,12]]}}}],["copi",{"_index":364,"t":{"30":{"position":[[343,4]]},"119":{"position":[[1857,6]]},"139":{"position":[[2600,4]]}}}],["coreo",{"_index":1617,"t":{"147":{"position":[[171,6]]}}}],["corp.com\"]client_id",{"_index":1646,"t":{"147":{"position":[[3240,20]]}}}],["corpor",{"_index":230,"t":{"14":{"position":[[218,9]]}}}],["correct",{"_index":925,"t":{"97":{"position":[[110,7]]},"129":{"position":[[104,7]]},"147":{"position":[[546,7]]}}}],["correctli",{"_index":837,"t":{"85":{"position":[[572,10]]},"87":{"position":[[2425,10]]},"125":{"position":[[382,9]]}}}],["count=1",{"_index":951,"t":{"101":{"position":[[219,7]]}}}],["coupl",{"_index":1603,"t":{"145":{"position":[[2415,6]]}}}],["cours",{"_index":1595,"t":{"145":{"position":[[1940,7]]}}}],["cover",{"_index":1247,"t":{"117":{"position":[[30,7]]}}}],["creat",{"_index":138,"t":{"6":{"position":[[285,6],[300,6]]},"10":{"position":[[17,6]]},"12":{"position":[[61,6]]},"18":{"position":[[480,6]]},"87":{"position":[[253,6]]},"91":{"position":[[0,6]]},"95":{"position":[[0,6]]},"97":{"position":[[0,6]]},"105":{"position":[[1630,8],[5165,7]]},"129":{"position":[[0,6],[1351,7]]},"131":{"position":[[40,6],[812,8],[1078,6],[1804,6],[2060,6]]},"133":{"position":[[92,6],[300,6],[488,8],[1462,6]]},"135":{"position":[[903,6],[1145,6],[1228,6],[1441,6],[2036,8],[2056,6],[2132,6],[3653,6],[4440,8],[4489,6],[4538,8],[4615,6],[5595,8],[5793,6],[6224,8],[6531,6],[6573,6]]},"137":{"position":[[42,6]]},"139":{"position":[[443,6],[2429,6]]},"147":{"position":[[2653,6],[3002,6],[3790,6]]}}}],["credenti",{"_index":524,"t":{"51":{"position":[[284,11],[415,11],[557,11]]},"85":{"position":[[294,11]]},"105":{"position":[[4783,11],[4828,11],[4869,11]]},"131":{"position":[[297,13],[445,13],[478,12],[1147,11],[2698,11],[2831,12]]},"133":{"position":[[271,10]]},"135":{"position":[[1116,10],[2532,11]]}}}],["crypto/tl",{"_index":738,"t":{"77":{"position":[[731,10]]},"105":{"position":[[14845,10]]},"153":{"position":[[914,10],[1062,11]]}}}],["csrf",{"_index":1015,"t":{"105":{"position":[[2192,4],[2238,4],[2325,4],[2367,4]]}}}],["current",{"_index":5,"t":{"2":{"position":[[49,8]]},"8":{"position":[[16,9]]},"20":{"position":[[531,9]]},"105":{"position":[[6750,10]]},"147":{"position":[[1229,7]]},"153":{"position":[[735,9],[932,9]]}}}],["custom",{"_index":694,"t":{"67":{"position":[[1903,6],[1975,6],[2047,6]]},"105":{"position":[[2385,6],[2421,6],[2445,6],[2492,6],[3516,6],[3596,6],[8810,6],[8882,6]]},"119":{"position":[[3835,6]]},"135":{"position":[[1314,6],[3235,6],[5936,9]]},"147":{"position":[[2091,6]]},"153":{"position":[[508,13]]}}}],["cycl",{"_index":1714,"t":{"157":{"position":[[844,5],[906,6]]}}}],["d",{"_index":27,"t":{"2":{"position":[[308,2]]},"101":{"position":[[254,1]]}}}],["danger",{"_index":323,"t":{"26":{"position":[[0,6]]},"37":{"position":[[211,6]]}}}],["dashboard",{"_index":1396,"t":{"131":{"position":[[220,9]]},"139":{"position":[[496,10],[798,10]]}}}],["data",{"_index":722,"t":{"77":{"position":[[210,4],[306,4]]},"105":{"position":[[12281,4]]},"115":{"position":[[1392,4]]},"133":{"position":[[1356,4]]},"139":{"position":[[426,4]]},"141":{"position":[[179,4]]},"143":{"position":[[550,4],[586,5]]}}}],["date",{"_index":1225,"t":{"113":{"position":[[1310,4]]},"115":{"position":[[1332,4]]},"117":{"position":[[602,4]]}}}],["day",{"_index":1075,"t":{"105":{"position":[[5944,4]]},"139":{"position":[[1170,4]]}}}],["dd",{"_index":948,"t":{"101":{"position":[[194,2]]}}}],["debug",{"_index":173,"t":{"12":{"position":[[43,9],[1431,5]]},"105":{"position":[[12841,5]]}}}],["decim",{"_index":498,"t":{"45":{"position":[[153,7]]}}}],["decod",{"_index":965,"t":{"101":{"position":[[621,6]]}}}],["decreas",{"_index":937,"t":{"99":{"position":[[98,10]]}}}],["dedic",{"_index":1474,"t":{"135":{"position":[[2008,11],[2615,9],[2733,9],[2787,10],[2867,10],[3507,9],[3559,9],[5145,9]]}}}],["deep",{"_index":1098,"t":{"105":{"position":[[9289,4]]}}}],["default",{"_index":293,"t":{"20":{"position":[[218,7]]},"51":{"position":[[407,7],[549,7]]},"61":{"position":[[176,9],[207,7],[431,7],[513,7],[637,7]]},"63":{"position":[[68,8],[226,7],[1170,7],[1198,7],[1218,7],[1363,7]]},"65":{"position":[[804,7],[1457,7]]},"67":{"position":[[1549,7],[1797,7]]},"77":{"position":[[647,7]]},"87":{"position":[[2108,9],[2250,7]]},"89":{"position":[[196,7]]},"91":{"position":[[575,8]]},"93":{"position":[[434,7]]},"105":{"position":[[24,7],[2551,7],[2867,7],[3564,7],[3644,7],[4508,9],[4820,7],[4861,7],[5024,8],[8642,7],[14760,7],[16572,8],[16643,7]]},"111":{"position":[[3,8],[627,8]]},"113":{"position":[[152,7],[636,7]]},"115":{"position":[[33,7],[372,7]]},"117":{"position":[[219,7],[407,7]]},"123":{"position":[[461,7],[686,7]]},"125":{"position":[[638,7],[921,7],[1166,7],[1372,7]]},"131":{"position":[[1139,7],[2690,7],[2823,7]]},"135":{"position":[[772,8],[1382,8],[4431,8]]},"137":{"position":[[146,7]]},"141":{"position":[[316,9]]},"143":{"position":[[34,7]]},"145":{"position":[[357,8]]},"147":{"position":[[577,7],[1927,7],[2415,7],[2863,8],[4247,7]]},"153":{"position":[[635,8],[900,8]]},"155":{"position":[[168,8],[763,7]]},"157":{"position":[[620,7]]}}}],["defin",{"_index":320,"t":{"24":{"position":[[48,6]]},"37":{"position":[[550,7]]},"65":{"position":[[1399,6]]},"67":{"position":[[158,7],[291,7],[2178,7]]},"73":{"position":[[140,7]]},"133":{"position":[[1512,6]]},"135":{"position":[[3539,7],[4218,7],[6112,7]]}}}],["definit",{"_index":711,"t":{"71":{"position":[[76,11]]},"83":{"position":[[61,11]]}}}],["delay",{"_index":279,"t":{"18":{"position":[[571,5]]}}}],["delet",{"_index":1591,"t":{"145":{"position":[[1345,7]]}}}],["demo",{"_index":1508,"t":{"139":{"position":[[512,5]]}}}],["demonstr",{"_index":252,"t":{"16":{"position":[[558,11]]}}}],["deped",{"_index":161,"t":{"10":{"position":[[56,11]]}}}],["depend",{"_index":112,"t":{"4":{"position":[[680,10]]},"16":{"position":[[85,13]]},"18":{"position":[[339,14]]},"105":{"position":[[9014,8]]},"149":{"position":[[228,9]]},"157":{"position":[[1239,12]]}}}],["deploy",{"_index":1,"t":{"2":{"position":[[14,7],[861,6]]},"12":{"position":[[368,8],[686,8]]},"131":{"position":[[2849,8],[2962,8],[3100,8]]},"139":{"position":[[3075,11]]}}}],["deprec",{"_index":1133,"t":{"105":{"position":[[13271,11]]}}}],["describ",{"_index":332,"t":{"26":{"position":[[172,9]]},"28":{"position":[[77,9]]},"147":{"position":[[2156,8]]}}}],["descript",{"_index":428,"t":{"35":{"position":[[34,11]]},"37":{"position":[[334,11]]},"39":{"position":[[34,11]]},"41":{"position":[[34,11]]},"43":{"position":[[111,11]]},"47":{"position":[[34,11]]},"49":{"position":[[34,11]]},"51":{"position":[[34,11]]},"53":{"position":[[129,11]]},"55":{"position":[[127,11]]},"57":{"position":[[34,11]]},"59":{"position":[[34,11]]},"63":{"position":[[1098,11]]},"65":{"position":[[34,11]]},"67":{"position":[[90,11]]},"73":{"position":[[172,11]]},"75":{"position":[[96,11]]},"77":{"position":[[162,11]]},"79":{"position":[[308,11]]},"81":{"position":[[182,11]]},"83":{"position":[[106,11]]},"91":{"position":[[71,11]]},"105":{"position":[[12,11]]},"113":{"position":[[821,11]]},"115":{"position":[[676,11]]},"117":{"position":[[549,11]]},"135":{"position":[[2852,11],[5580,11]]},"147":{"position":[[2324,11]]}}}],["deselect",{"_index":1478,"t":{"135":{"position":[[2366,10]]}}}],["desir",{"_index":541,"t":{"53":{"position":[[574,7]]}}}],["detail",{"_index":236,"t":{"16":{"position":[[167,7],[457,6]]},"26":{"position":[[122,8],[336,7]]},"87":{"position":[[2273,8]]},"105":{"position":[[12866,8]]},"113":{"position":[[1042,7],[1552,8]]},"117":{"position":[[751,7]]},"147":{"position":[[509,8]]}}}],["determin",{"_index":534,"t":{"53":{"position":[[307,10]]},"67":{"position":[[1884,10]]},"79":{"position":[[145,9]]},"81":{"position":[[1981,10],[2270,10]]},"105":{"position":[[8715,10],[9683,9]]},"125":{"position":[[362,9]]}}}],["dev.yaml",{"_index":1624,"t":{"147":{"position":[[680,9],[879,8]]}}}],["develop",{"_index":1504,"t":{"139":{"position":[[315,9]]},"147":{"position":[[3736,9]]}}}],["dex",{"_index":179,"t":{"12":{"position":[[193,5],[393,3],[1170,3],[1228,3]]},"147":{"position":[[178,4],[353,4],[393,4],[436,4],[803,4],[1521,4]]}}}],["differ",{"_index":591,"t":{"63":{"position":[[759,9]]},"69":{"position":[[77,9]]},"105":{"position":[[2228,9],[6725,6]]},"111":{"position":[[381,9]]},"113":{"position":[[546,9]]},"115":{"position":[[279,9]]},"117":{"position":[[313,9]]},"131":{"position":[[2196,9]]}}}],["digitalocean",{"_index":307,"t":{"20":{"position":[[352,12]]},"69":{"position":[[152,12]]}}}],["dir",{"_index":1019,"t":{"105":{"position":[[2402,3]]}}}],["dir\",th",{"_index":786,"t":{"81":{"position":[[1427,10]]}}}],["direct",{"_index":467,"t":{"39":{"position":[[67,7]]},"119":{"position":[[78,9]]},"135":{"position":[[2345,6]]},"157":{"position":[[1188,9]]}}}],["directli",{"_index":1139,"t":{"105":{"position":[[14111,8]]},"157":{"position":[[22,8]]}}}],["directori",{"_index":205,"t":{"12":{"position":[[1159,10]]},"87":{"position":[[72,10],[1356,9]]},"103":{"position":[[265,10]]},"107":{"position":[[677,9]]},"139":{"position":[[2480,9]]},"147":{"position":[[1245,9]]}}}],["directory/develop/v2",{"_index":893,"t":{"87":{"position":[[2201,20]]}}}],["disabl",{"_index":716,"t":{"75":{"position":[[209,8],[338,8]]},"105":{"position":[[1899,8],[2543,7],[3556,7],[3636,7],[6049,7],[7080,8],[13100,7]]},"111":{"position":[[483,8],[792,8]]},"135":{"position":[[5164,9]]},"145":{"position":[[1117,7]]},"157":{"position":[[608,8]]}}}],["disallow",{"_index":1708,"t":{"157":{"position":[[244,9]]}}}],["disclos",{"_index":263,"t":{"18":{"position":[[65,9],[298,9]]}}}],["disclosur",{"_index":226,"t":{"14":{"position":[[139,11]]},"16":{"position":[[194,11],[491,10]]},"18":{"position":[[129,10]]},"145":{"position":[[840,11]]}}}],["discov",{"_index":254,"t":{"16":{"position":[[590,10]]}}}],["discoveri",{"_index":621,"t":{"65":{"position":[[447,9],[888,9]]},"105":{"position":[[7067,9],[13926,9],[13962,10]]},"139":{"position":[[3252,10],[3298,9],[3485,9],[3711,9]]},"159":{"position":[[825,11]]}}}],["discret",{"_index":285,"t":{"18":{"position":[[695,10]]}}}],["discuss",{"_index":262,"t":{"18":{"position":[[47,7],[216,10]]}}}],["display",{"_index":395,"t":{"32":{"position":[[821,7]]},"67":{"position":[[1591,7]]},"97":{"position":[[332,7]]},"105":{"position":[[2567,7],[2594,7],[8916,7]]},"147":{"position":[[980,7]]}}}],["doc",{"_index":979,"t":{"105":{"position":[[66,4]]}}}],["docker",{"_index":19,"t":{"2":{"position":[[243,6],[339,6]]},"12":{"position":[[895,6],[1187,6],[1205,6],[1267,6],[1285,6]]},"139":{"position":[[2318,6],[2556,6],[2574,6]]},"147":{"position":[[1490,6]]}}}],["document",{"_index":325,"t":{"26":{"position":[[26,13]]},"77":{"position":[[742,14]]},"105":{"position":[[14856,14]]},"135":{"position":[[398,13],[1579,14],[5672,14],[6810,13]]},"147":{"position":[[2470,13]]},"149":{"position":[[387,13]]}}}],["doesn't",{"_index":836,"t":{"85":{"position":[[545,7]]},"87":{"position":[[2398,7]]}}}],["domain",{"_index":290,"t":{"20":{"position":[[147,6]]},"22":{"position":[[30,6],[229,9]]},"63":{"position":[[529,7],[655,7]]},"105":{"position":[[1154,6],[1191,7],[1256,6],[1328,6],[2678,6],[2738,6],[15650,6],[15679,7],[15732,6],[16443,6],[16462,6],[16537,6],[16795,7]]},"109":{"position":[[466,6]]},"119":{"position":[[568,8]]},"123":{"position":[[469,8],[694,8]]},"125":{"position":[[646,8],[929,8],[1174,8],[1380,8]]},"129":{"position":[[407,8]]},"131":{"position":[[648,6],[1058,7],[1875,6]]},"135":{"position":[[369,6]]},"139":{"position":[[3874,6]]},"147":{"position":[[1195,6]]},"159":{"position":[[853,6],[963,6],[1063,6]]},"161":{"position":[[251,7]]}}}],["domain.com",{"_index":1216,"t":{"113":{"position":[[964,10]]},"115":{"position":[[819,10]]}}}],["domain.tld/gitlab",{"_index":1375,"t":{"127":{"position":[[1216,19]]}}}],["domain.tld/gitlab/oauth",{"_index":1379,"t":{"127":{"position":[[1364,24]]}}}],["domain.tld/oauth",{"_index":1378,"t":{"127":{"position":[[1330,16]]}}}],["domain=\"yourcompany.com",{"_index":1680,"t":{"153":{"position":[[237,24]]},"155":{"position":[[1239,24]]}}}],["domain=git",{"_index":166,"t":{"10":{"position":[[159,24]]}}}],["feature/go",{"_index":169,"t":{"10":{"position":[[211,23]]}}}],["feder",{"_index":1412,"t":{"131":{"position":[[1199,10],[2756,10],[3143,10]]}}}],["field",{"_index":427,"t":{"35":{"position":[[23,5]]},"37":{"position":[[323,5]]},"39":{"position":[[23,5],[221,5]]},"41":{"position":[[23,5]]},"43":{"position":[[100,5]]},"47":{"position":[[23,5]]},"49":{"position":[[23,5]]},"51":{"position":[[23,5]]},"53":{"position":[[118,5]]},"55":{"position":[[116,5]]},"57":{"position":[[23,5]]},"59":{"position":[[23,5]]},"63":{"position":[[1087,5]]},"65":{"position":[[23,5]]},"67":{"position":[[79,5]]},"73":{"position":[[161,5]]},"75":{"position":[[85,5]]},"77":{"position":[[151,5]]},"79":{"position":[[297,5]]},"81":{"position":[[171,5]]},"83":{"position":[[95,5]]},"91":{"position":[[135,6]]},"105":{"position":[[3034,7]]},"135":{"position":[[2235,6],[3251,5]]},"137":{"position":[[319,6]]},"147":{"position":[[3444,5]]}}}],["file",{"_index":37,"t":{"2":{"position":[[506,4],[563,4],[791,5]]},"12":{"position":[[910,5]]},"16":{"position":[[428,5]]},"26":{"position":[[525,4],[698,4]]},"28":{"position":[[52,4],[136,4]]},"30":{"position":[[362,5]]},"55":{"position":[[310,4]]},"59":{"position":[[174,4]]},"67":{"position":[[1913,5],[1985,5],[2057,6]]},"73":{"position":[[355,4]]},"77":{"position":[[254,5],[350,5]]},"87":{"position":[[1169,5]]},"91":{"position":[[552,5]]},"99":{"position":[[89,4],[248,4]]},"103":{"position":[[57,4],[242,4]]},"105":{"position":[[548,4],[592,4],[941,4],[957,4],[1140,4],[2648,4],[5086,4],[5143,5],[5679,5],[5742,4],[5844,5],[5967,5],[6027,5],[6119,4],[6309,4],[6345,4],[8523,4],[8741,4],[8746,5],[8820,5],[8892,6],[14546,4],[14578,4],[14881,4],[14913,4],[15087,7],[15112,5]]},"107":{"position":[[136,5],[151,4],[578,4],[609,7],[661,5],[803,5],[943,5],[1262,5]]},"109":{"position":[[350,4]]},"111":{"position":[[106,4],[165,4],[205,4]]},"117":{"position":[[465,11],[638,4],[658,4]]},"123":{"position":[[283,4]]},"125":{"position":[[2321,4]]},"131":{"position":[[2297,4],[2357,4],[2426,4],[2455,4]]},"139":{"position":[[2329,5],[2387,5],[2458,4],[2610,4]]},"147":{"position":[[3025,4],[4352,4]]}}}],["file/client_secret_fil",{"_index":394,"t":{"32":{"position":[[779,23]]}}}],["file/jwt_key_fil",{"_index":418,"t":{"32":{"position":[[1167,17]]}}}],["file/provider_ca_fil",{"_index":398,"t":{"32":{"position":[[868,22]]}}}],["file://$pwd/#/stat",{"_index":1634,"t":{"147":{"position":[[1311,21]]}}}],["file:///var/www/stat",{"_index":1180,"t":{"107":{"position":[[622,23]]}}}],["file:///var/www/static/#/stat",{"_index":1184,"t":{"107":{"position":[[972,32]]}}}],["file://host/pathif",{"_index":783,"t":{"81":{"position":[[1349,18]]}}}],["file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1083,"t":{"105":{"position":[[6430,42]]},"139":{"position":[[2781,41]]}}}],["file=/path/to/cert.key",{"_index":1679,"t":{"153":{"position":[[107,23],[346,22]]}}}],["file=/path/to/cert.pem",{"_index":1678,"t":{"153":{"position":[[70,22],[311,22]]}}}],["file=/path/to/fil",{"_index":318,"t":{"22":{"position":[[140,18]]}}}],["filebas",{"_index":777,"t":{"81":{"position":[[1167,9]]}}}],["filecontain",{"_index":660,"t":{"67":{"position":[[416,14]]}}}],["filenam",{"_index":1070,"t":{"105":{"position":[[5726,8],[5861,9]]},"111":{"position":[[131,8]]}}}],["fill",{"_index":897,"t":{"91":{"position":[[39,4]]},"131":{"position":[[366,4]]},"137":{"position":[[288,4]]},"147":{"position":[[2120,4],[2313,4]]}}}],["filter",{"_index":1361,"t":{"127":{"position":[[420,10]]},"135":{"position":[[4741,6],[6695,6]]}}}],["find",{"_index":119,"t":{"6":{"position":[[46,4]]},"8":{"position":[[110,4]]},"85":{"position":[[512,4]]},"87":{"position":[[2365,4]]},"139":{"position":[[168,4]]},"145":{"position":[[1389,4]]}}}],["firewal",{"_index":1552,"t":{"139":{"position":[[3128,8]]}}}],["first",{"_index":1280,"t":{"119":{"position":[[1868,5],[2153,5]]},"139":{"position":[[758,6]]},"147":{"position":[[1690,6]]}}}],["fix",{"_index":131,"t":{"6":{"position":[[215,3]]},"16":{"position":[[632,3]]},"18":{"position":[[55,5],[244,5],[381,5],[428,3],[472,3],[585,5],[645,3]]},"61":{"position":[[501,5]]},"63":{"position":[[104,5],[268,5]]}}}],["flag",{"_index":346,"t":{"26":{"position":[[534,6]]},"28":{"position":[[166,5],[207,5]]},"30":{"position":[[98,4]]},"32":{"position":[[1381,5]]},"87":{"position":[[2084,5]]},"105":{"position":[[1555,4],[2081,4]]},"109":{"position":[[409,4],[473,4]]},"113":{"position":[[626,5]]},"115":{"position":[[362,5]]},"117":{"position":[[397,5]]},"119":{"position":[[1125,4],[1720,5]]},"129":{"position":[[622,5],[768,4]]},"131":{"position":[[1918,5],[2140,5],[2186,4],[2495,5]]},"133":{"position":[[1123,5]]},"145":{"position":[[2898,5],[2929,5],[3142,5],[3166,5],[3229,5]]}}}],["flags/opt",{"_index":366,"t":{"32":{"position":[[14,13]]}}}],["flaw",{"_index":1162,"t":{"105":{"position":[[16177,6]]}}}],["flight",{"_index":277,"t":{"18":{"position":[[541,6]]}}}],["flow",{"_index":629,"t":{"65":{"position":[[625,5]]},"135":{"position":[[2315,4],[2329,4]]},"145":{"position":[[1463,4]]}}}],["flush",{"_index":368,"t":{"32":{"position":[[127,5]]},"81":{"position":[[2143,8]]},"105":{"position":[[3267,5],[3306,8]]}}}],["flushinterv",{"_index":802,"t":{"81":{"position":[[2084,13],[2107,13]]}}}],["follow",{"_index":123,"t":{"6":{"position":[[125,6]]},"8":{"position":[[55,6]]},"12":{"position":[[312,9],[630,9]]},"24":{"position":[[0,6]]},"32":{"position":[[4,9]]},"85":{"position":[[210,6]]},"89":{"position":[[52,6]]},"91":{"position":[[397,9]]},"93":{"position":[[334,9]]},"97":{"position":[[213,9]]},"113":{"position":[[668,8]]},"115":{"position":[[404,8]]},"117":{"position":[[439,8]]},"119":{"position":[[2820,9]]},"125":{"position":[[165,9]]},"127":{"position":[[201,6],[485,9],[584,6],[895,9],[1090,9]]},"129":{"position":[[612,9],[758,9],[1735,9]]},"131":{"position":[[1381,6],[1566,9],[1714,6],[3044,6]]},"133":{"position":[[405,9]]},"135":{"position":[[1410,9],[5784,8],[6960,9]]},"139":{"position":[[1530,9]]},"143":{"position":[[256,9]]},"145":{"position":[[247,10]]},"147":{"position":[[410,9],[940,9],[1585,9],[3039,10],[4714,9]]},"155":{"position":[[652,8]]},"157":{"position":[[38,9]]},"161":{"position":[[107,9]]}}}],["foo",{"_index":760,"t":{"81":{"position":[[560,7],[597,4]]}}}],["foo/$1",{"_index":771,"t":{"81":{"position":[[988,7]]}}}],["foo/abc/123",{"_index":774,"t":{"81":{"position":[[1037,12]]}}}],["footer",{"_index":1042,"t":{"105":{"position":[[3582,6],[3610,6],[3652,7]]}}}],["forc",{"_index":985,"t":{"105":{"position":[[371,7],[1202,5],[1794,5],[3364,5],[3412,5],[3435,5]]},"143":{"position":[[784,5]]}}}],["forcestshead",{"_index":1334,"t":{"123":{"position":[[1023,15]]},"125":{"position":[[1781,15]]}}}],["forego",{"_index":271,"t":{"18":{"position":[[391,6]]}}}],["fork",{"_index":139,"t":{"6":{"position":[[294,5]]},"10":{"position":[[11,5]]}}}],["form",{"_index":595,"t":{"63":{"position":[[852,4]]},"105":{"position":[[2584,4],[2628,4]]},"149":{"position":[[318,4]]}}}],["format",{"_index":340,"t":{"26":{"position":[[390,7],[469,6],[927,7]]},"28":{"position":[[70,6]]},"30":{"position":[[148,7],[285,6]]},"59":{"position":[[91,6],[186,6]]},"63":{"position":[[965,6]]},"105":{"position":[[305,7],[447,6],[3900,9],[4407,9],[6180,6],[6357,6],[11736,6],[13485,7],[14463,6]]},"111":{"position":[[602,6],[642,7]]},"113":{"position":[[173,7],[556,6],[619,6],[644,6]]},"115":{"position":[[54,7],[289,6],[355,6],[380,6]]},"117":{"position":[[112,7],[227,6],[323,6],[390,6],[415,6]]},"129":{"position":[[1138,9]]},"139":{"position":[[1028,6],[2532,6]]},"157":{"position":[[1060,7]]}}}],["forward",{"_index":106,"t":{"4":{"position":[[599,9]]},"26":{"position":[[404,7]]},"105":{"position":[[7486,9],[7770,9],[7788,9],[7810,9],[8235,9],[8253,9],[8273,9],[8295,9],[9766,9],[11998,9],[13618,9]]},"107":{"position":[[294,7],[477,9]]},"119":{"position":[[800,9]]},"125":{"position":[[339,9]]},"133":{"position":[[1292,9]]},"145":{"position":[[2181,9]]}}}],["forwardauth",{"_index":1315,"t":{"123":{"position":[[15,11],[1137,12]]},"125":{"position":[[96,11],[1904,12],[2069,12]]}}}],["found",{"_index":233,"t":{"16":{"position":[[29,5],[243,5]]},"77":{"position":[[718,5]]},"105":{"position":[[14832,5]]},"145":{"position":[[1558,5]]},"147":{"position":[[340,5]]},"153":{"position":[[1053,5]]}}}],["fraction",{"_index":499,"t":{"45":{"position":[[189,8]]}}}],["fragment",{"_index":1183,"t":{"107":{"position":[[841,8],[890,8]]}}}],["framedeni",{"_index":1338,"t":{"123":{"position":[[1109,10]]},"125":{"position":[[1867,10]]}}}],["freeform",{"_index":1404,"t":{"131":{"position":[[571,9]]}}}],["fromenv",{"_index":547,"t":{"55":{"position":[[197,7],[212,7]]},"73":{"position":[[242,7],[257,7]]}}}],["fromfil",{"_index":548,"t":{"55":{"position":[[265,8],[281,8]]},"73":{"position":[[310,8],[326,8]]}}}],["full",{"_index":221,"t":{"14":{"position":[[82,4]]},"113":{"position":[[1362,4]]},"115":{"position":[[1434,4]]},"135":{"position":[[4365,5],[5174,4],[6019,5]]}}}],["function",{"_index":137,"t":{"6":{"position":[[263,14]]},"125":{"position":[[20,13]]}}}],["further",{"_index":719,"t":{"75":{"position":[[446,7]]}}}],["futur",{"_index":634,"t":{"65":{"position":[[757,6]]},"131":{"position":[[1294,6]]},"147":{"position":[[4218,6]]}}}],["gap",{"_index":1129,"t":{"105":{"position":[[13014,3]]}}}],["gcp",{"_index":1428,"t":{"131":{"position":[[2865,4],[3120,4]]}}}],["gener",{"_index":356,"t":{"28":{"position":[[36,8]]},"97":{"position":[[381,9],[439,9]]},"101":{"position":[[3,8]]},"135":{"position":[[7113,8]]},"139":{"position":[[1035,9]]},"147":{"position":[[2768,7],[3570,8]]}}}],["get",{"_index":1620,"t":{"147":{"position":[[478,7]]}}}],["git",{"_index":162,"t":{"10":{"position":[[84,3]]}}}],["git@github.com:/oauth2",{"_index":163,"t":{"10":{"position":[[94,33]]}}}],["gitea",{"_index":297,"t":{"20":{"position":[[253,5]]},"97":{"position":[[41,5],[394,5],[452,5],[489,5],[554,5],[624,5]]}}}],["github",{"_index":118,"t":{"6":{"position":[[31,7]]},"16":{"position":[[136,7],[729,6]]},"18":{"position":[[7,6],[109,6]]},"20":{"position":[[72,6],[246,6]]},"32":{"position":[[1302,7]]},"69":{"position":[[175,7]]},"105":{"position":[[3662,6],[3730,6],[3829,6],[3928,6],[4049,6]]},"129":{"position":[[172,6],[429,6],[629,6],[789,6],[802,6],[1070,6],[1397,6],[1614,6],[1694,6],[1803,6],[1873,6],[1948,6]]}}}],["github.com/dexidp/dex",{"_index":1619,"t":{"147":{"position":[[448,21]]}}}],["github.com/oauth2",{"_index":13,"t":{"2":{"position":[[132,17]]}}}],["githubc",{"_index":671,"t":{"67":{"position":[[921,7]]}}}],["githubconfig",{"_index":669,"t":{"67":{"position":[[852,12],[879,12]]}}}],["githubopt",{"_index":670,"t":{"67":{"position":[[865,13]]}}}],["gitlab",{"_index":300,"t":{"20":{"position":[[282,6]]},"32":{"position":[[1310,7]]},"67":{"position":[[1008,6]]},"69":{"position":[[183,7]]},"105":{"position":[[4187,6],[4295,6],[4486,6],[16390,7]]},"127":{"position":[[43,6],[71,6],[193,7],[739,6],[915,6],[1060,7],[1149,6],[1182,6]]}}}],["gitlab.com",{"_index":1358,"t":{"127":{"position":[[166,10]]}}}],["gitlab.domain.tld",{"_index":1377,"t":{"127":{"position":[[1274,19]]}}}],["gitlabconfig",{"_index":672,"t":{"67":{"position":[[939,12],[966,12]]}}}],["gitlabopt",{"_index":673,"t":{"67":{"position":[[952,13]]}}}],["give",{"_index":742,"t":{"79":{"position":[[409,5]]},"131":{"position":[[1531,4]]}}}],["given",{"_index":740,"t":{"79":{"position":[[196,5]]},"105":{"position":[[2753,5],[4385,5],[4686,5],[8974,5],[13366,5],[14715,5],[15382,5],[15481,5],[15911,5]]},"135":{"position":[[5045,5]]}}}],["gke",{"_index":1048,"t":{"105":{"position":[[4919,3]]},"131":{"position":[[2974,4]]}}}],["global",{"_index":1448,"t":{"133":{"position":[[1105,7]]}}}],["gmail",{"_index":1419,"t":{"131":{"position":[[1869,5]]}}}],["go",{"_index":9,"t":{"2":{"position":[[86,2],[121,2]]},"6":{"position":[[481,2]]},"8":{"position":[[38,2],[89,2],[115,2]]},"12":{"position":[[95,3],[207,5],[525,5]]},"26":{"position":[[398,5]]},"67":{"position":[[1805,2]]},"77":{"position":[[655,2]]},"87":{"position":[[20,2],[1072,2]]},"105":{"position":[[634,2],[8650,2],[14768,2]]},"139":{"position":[[2885,2]]},"147":{"position":[[441,2]]},"153":{"position":[[947,2]]}}}],["googl",{"_index":287,"t":{"20":{"position":[[63,8],[211,6]]},"32":{"position":[[1318,6]]},"51":{"position":[[108,6],[157,6],[505,6]]},"67":{"position":[[1094,6],[1530,8]]},"69":{"position":[[191,7]]},"105":{"position":[[4536,6],[4566,6],[4610,6],[4665,6],[4711,6],[4797,6],[4944,6],[8502,6],[16398,6]]},"131":{"position":[[4,7],[1036,6],[1899,6],[2127,6],[2467,6]]},"155":{"position":[[73,6],[269,6]]}}}],["google'",{"_index":1433,"t":{"131":{"position":[[3051,8]]}}}],["googleconfig",{"_index":674,"t":{"67":{"position":[[1025,12],[1052,12]]}}}],["googleopt",{"_index":675,"t":{"67":{"position":[[1038,13]]}}}],["gopath/github.com/dexidp/dex",{"_index":1628,"t":{"147":{"position":[[813,30]]}}}],["goroot/bin",{"_index":17,"t":{"2":{"position":[[209,13]]}}}],["govern",{"_index":1499,"t":{"139":{"position":[[41,11],[69,10]]}}}],["grab",{"_index":1555,"t":{"139":{"position":[[3360,4]]}}}],["grant",{"_index":861,"t":{"87":{"position":[[690,5]]},"135":{"position":[[2359,6]]},"147":{"position":[[2792,5],[4094,5]]}}}],["graph",{"_index":858,"t":{"87":{"position":[[567,6]]}}}],["graphdefault",{"_index":474,"t":{"39":{"position":[[283,12]]}}}],["graphgroupfield",{"_index":471,"t":{"39":{"position":[[161,15],[184,15]]}}}],["group",{"_index":472,"t":{"39":{"position":[[215,5],[256,6]]},"49":{"position":[[46,5],[61,5],[107,5]]},"51":{"position":[[46,5],[61,6],[115,5]]},"57":{"position":[[46,6],[62,5],[118,5]]},"65":{"position":[[1246,8]]},"67":{"position":[[2681,5]]},"85":{"position":[[86,5]]},"87":{"position":[[434,5],[625,5]]},"105":{"position":[[4194,5],[4257,6],[4617,5],[4672,5],[5228,5],[5252,6],[7173,6],[7228,6],[7235,8],[8263,7],[12390,7],[15313,5],[15368,5]]},"127":{"position":[[857,5],[995,6]]},"131":{"position":[[1043,6],[2095,5],[2134,5],[2206,6],[2267,7],[2565,5]]},"133":{"position":[[333,6],[373,9],[1020,5],[1071,5],[1099,5],[1158,6],[1210,6],[1302,6],[1349,6],[1409,5],[1471,5],[1533,6]]},"135":{"position":[[610,5],[1178,6],[1218,9],[3986,7],[4092,5],[5448,6],[5488,5],[5549,6],[5630,6],[5742,5],[5833,6],[5878,5],[5926,6],[5975,6],[6025,5],[6100,5],[6137,5],[6256,6],[6383,6],[6453,5],[6540,5],[6563,6],[6580,5],[6705,5],[6773,7],[6871,6],[7101,7]]},"147":{"position":[[2958,6],[4066,5]]},"161":{"position":[[183,6]]}}}],["group,otherwis",{"_index":687,"t":{"67":{"position":[[1514,15]]}}}],["group.read.al",{"_index":859,"t":{"87":{"position":[[642,15]]}}}],["group/allowed_group",{"_index":414,"t":{"32":{"position":[[1095,20]]}}}],["group=\"mygroup,myothergroup",{"_index":1371,"t":{"127":{"position":[[922,29]]}}}],["group=/groupnam",{"_index":1490,"t":{"135":{"position":[[6656,16]]}}}],["group=/oauth2/callback",{"_index":911,"t":{"91":{"position":[[611,24]]}}}],["headers.default",{"_index":540,"t":{"53":{"position":[[456,16]]}}}],["headers/pass_user_head",{"_index":380,"t":{"32":{"position":[[390,25]]}}}],["headers/skip_auth_strip_head",{"_index":389,"t":{"32":{"position":[[680,31]]}}}],["headershould",{"_index":535,"t":{"53":{"position":[[346,12]]}}}],["headervalu",{"_index":478,"t":{"43":{"position":[[13,12]]},"53":{"position":[[540,13]]},"55":{"position":[[21,11]]},"73":{"position":[[26,12]]}}}],["health",{"_index":1096,"t":{"105":{"position":[[9100,6],[9187,6],[9294,6]]},"157":{"position":[[384,6]]}}}],["helm",{"_index":34,"t":{"2":{"position":[[446,6]]}}}],["here",{"_index":156,"t":{"8":{"position":[[92,5],[155,5]]},"139":{"position":[[344,5]]}}}],["hex",{"_index":1579,"t":{"145":{"position":[[407,3]]}}}],["histor",{"_index":1562,"t":{"143":{"position":[[103,13]]}}}],["hit",{"_index":860,"t":{"87":{"position":[[658,3],[1276,7]]},"131":{"position":[[408,3]]}}}],["hold",{"_index":655,"t":{"67":{"position":[[33,5],[546,5],[631,5],[710,5],[803,5],[892,5],[979,5],[1065,5],[1145,5],[1275,5]]}}}],["homepag",{"_index":898,"t":{"91":{"position":[[57,9]]}}}],["host",{"_index":370,"t":{"32":{"position":[[162,4]]},"81":{"position":[[2301,4]]},"91":{"position":[[606,4]]},"97":{"position":[[47,4],[495,4],[560,4],[630,4]]},"105":{"position":[[1286,4],[8140,4],[8174,4]]},"113":{"position":[[959,4],[992,4]]},"115":{"position":[[475,9],[814,4],[847,4]]},"119":{"position":[[425,4],[430,6],[728,4],[733,6]]},"127":{"position":[[185,7],[1053,6],[1175,6]]},"155":{"position":[[1006,4],[1011,6]]}}}],["host(`a",{"_index":1319,"t":{"123":{"position":[[342,8],[537,8]]},"125":{"position":[[432,8],[726,8],[1013,8]]}}}],["host(`oauth.example.com",{"_index":1351,"t":{"125":{"position":[[1255,26]]}}}],["host>/api/v3",{"_index":1392,"t":{"129":{"position":[[1955,13]]}}}],["host>/auth/realms//login/oauth/access_token",{"_index":1391,"t":{"129":{"position":[[1880,31]]}}}],["host>/login/oauth/author",{"_index":1390,"t":{"129":{"position":[[1810,28]]}}}],["host>/oauth2/callback",{"_index":927,"t":{"97":{"position":[[144,21],[298,22]]}}}],["host>/realms/:::/sign_in",{"_index":1103,"t":{"105":{"position":[[9482,18]]}}}],["oauth2_proxy_",{"_index":1187,"t":{"109":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":1191,"t":{"109":{"position":[[422,27]]}}}],["oauth2_proxy_email_domain",{"_index":1192,"t":{"109":{"position":[[486,27]]}}}],["oauth2_proxy_jwt_key",{"_index":1529,"t":{"139":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1550,"t":{"139":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":1003,"t":{"105":{"position":[[1618,11]]}}}],["obtain",{"_index":1164,"t":{"105":{"position":[[16200,9]]}}}],["occur",{"_index":1250,"t":{"117":{"position":[[187,5]]}}}],["offici",{"_index":31,"t":{"2":{"position":[[417,8]]},"6":{"position":[[472,8]]}}}],["oidc",{"_index":299,"t":{"20":{"position":[[277,4]]},"32":{"position":[[1278,5]]},"57":{"position":[[229,4]]},"65":{"position":[[442,4],[883,4]]},"67":{"position":[[1174,4],[1208,4]]},"69":{"position":[[218,5],[259,5]]},"87":{"position":[[1560,4],[1868,4]]},"105":{"position":[[6549,4],[6661,4],[6706,4],[6825,4],[6865,4],[6900,4],[6991,4],[7012,4],[7062,4],[7091,4],[7121,4],[7168,4],[7199,4],[7246,4],[7279,4],[7320,4],[7660,4],[8414,4],[13921,4],[13948,4],[14005,4],[15533,4],[16409,5]]},"127":{"position":[[1126,4]]},"133":{"position":[[60,4]]},"135":{"position":[[20,4],[161,4],[253,4],[1457,4],[1598,4],[1857,4],[2069,4],[4043,4],[4340,4],[5970,4]]},"139":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"147":{"position":[[245,6],[375,4],[966,4],[997,4],[1106,4],[1549,4]]},"159":{"position":[[480,4],[666,4],[779,4],[888,4]]}}}],["oidc\"redirect_url",{"_index":1642,"t":{"147":{"position":[[3061,18],[4387,18]]}}}],["oidc_issuer_url",{"_index":888,"t":{"87":{"position":[[2036,16]]},"147":{"position":[[3372,15]]}}}],["oidcconfig",{"_index":676,"t":{"67":{"position":[[1111,10],[1134,10]]}}}],["oidcopt",{"_index":677,"t":{"67":{"position":[[1122,11]]}}}],["ok",{"_index":51,"t":{"2":{"position":[[684,2]]},"157":{"position":[[227,2],[340,2],[421,2]]}}}],["okta",{"_index":1618,"t":{"147":{"position":[[316,5],[1526,5],[1567,5],[1612,4],[2465,4],[3707,4],[3833,4],[4308,4],[4481,4]]}}}],["old",{"_index":1077,"t":{"105":{"position":[[5959,3],[6019,3]]},"145":{"position":[[1532,3]]}}}],["omit",{"_index":1172,"t":{"105":{"position":[[16727,4]]}}}],["on",{"_index":96,"t":{"4":{"position":[[354,3]]},"16":{"position":[[674,4]]},"22":{"position":[[164,3]]},"63":{"position":[[95,3],[259,3],[614,3],[1458,3]]},"73":{"position":[[101,3]]},"93":{"position":[[684,3]]},"101":{"position":[[39,3]]},"105":{"position":[[597,4],[9755,4],[13866,3]]},"113":{"position":[[313,3]]},"139":{"position":[[2206,3]]},"141":{"position":[[187,3]]}}}],["onc",{"_index":272,"t":{"18":{"position":[[421,4]]},"131":{"position":[[2656,4]]},"139":{"position":[[2843,4]]}}}],["onlyvalu",{"_index":608,"t":{"63":{"position":[[1436,10]]}}}],["open",{"_index":121,"t":{"6":{"position":[[65,4],[85,7],[328,4],[372,4]]},"12":{"position":[[34,4],[1099,4],[1445,4]]},"16":{"position":[[113,4]]},"85":{"position":[[0,4]]},"131":{"position":[[464,4]]},"147":{"position":[[106,4]]}}}],["openid",{"_index":303,"t":{"20":{"position":[[317,6],[563,6]]},"65":{"position":[[80,6],[986,6]]},"105":{"position":[[6927,6]]},"127":{"position":[[276,7]]},"135":{"position":[[993,7],[2158,7]]},"139":{"position":[[862,6],[906,6]]},"147":{"position":[[0,6],[221,6],[2628,6]]}}}],["openssl",{"_index":943,"t":{"101":{"position":[[78,7],[289,7]]},"139":{"position":[[1104,7]]}}}],["oppos",{"_index":1376,"t":{"127":{"position":[[1239,7]]}}}],["option",{"_index":61,"t":{"2":{"position":[[810,8]]},"26":{"position":[[164,7],[317,8],[373,7]]},"28":{"position":[[218,7],[263,7]]},"30":{"position":[[37,7],[256,7],[379,7],[437,7]]},"32":{"position":[[1233,8],[1251,6],[1369,7],[1480,7]]},"37":{"position":[[53,8],[77,7],[222,7]]},"43":{"position":[[246,8]]},"45":{"position":[[180,8]]},"53":{"position":[[416,6]]},"55":{"position":[[467,8]]},"61":{"position":[[186,6],[316,7]]},"63":{"position":[[1187,10],[1316,10]]},"69":{"position":[[101,7],[115,7]]},"77":{"position":[[102,8]]},"81":{"position":[[1585,6],[2039,6]]},"91":{"position":[[407,8],[530,7],[706,7]]},"93":{"position":[[344,8],[584,7]]},"97":{"position":[[223,7]]},"99":{"position":[[48,8],[148,7]]},"103":{"position":[[169,6]]},"105":{"position":[[0,6],[52,9],[1175,8],[1770,8],[2001,11],[11312,6],[11407,7],[13216,7],[15973,10],[16276,6],[16450,7],[16895,7]]},"107":{"position":[[61,6]]},"119":{"position":[[5,6],[37,6]]},"121":{"position":[[5,6],[37,6]]},"125":{"position":[[175,7],[2326,6]]},"127":{"position":[[905,7]]},"129":{"position":[[276,8],[362,7]]},"131":{"position":[[1066,11],[3166,7]]},"133":{"position":[[1051,8]]},"135":{"position":[[391,6],[448,9],[527,9],[591,9],[4057,7],[4874,7],[5219,7],[5532,6],[5988,6],[6037,6],[6143,6],[6401,8],[6639,6],[6744,6],[7067,8]]},"139":{"position":[[1540,8],[2132,7],[3495,7]]},"145":{"position":[[3337,6],[3432,7]]},"147":{"position":[[1721,10],[2023,6],[2452,8]]},"159":{"position":[[984,6]]}}}],["order",{"_index":938,"t":{"99":{"position":[[109,5]]}}}],["org",{"_index":510,"t":{"47":{"position":[[46,3],[57,3],[478,3]]},"105":{"position":[[3669,3],[4155,3]]},"129":{"position":[[535,3],[636,7],[796,4],[1561,3]]}}}],["organ",{"_index":1382,"t":{"129":{"position":[[259,12],[581,12],[714,12]]}}}],["organis",{"_index":511,"t":{"47":{"position":[[101,12]]},"105":{"position":[[3715,12]]},"129":{"position":[[679,12]]}}}],["organization'",{"_index":580,"t":{"63":{"position":[[514,14]]}}}],["organizationdefault",{"_index":571,"t":{"63":{"position":[[6,20]]}}}],["orgname/repo",{"_index":1044,"t":{"105":{"position":[[3913,12]]},"129":{"position":[[1151,12]]}}}],["orgname/repo=accesslevel",{"_index":1045,"t":{"105":{"position":[[4420,25]]}}}],["origin",{"_index":168,"t":{"10":{"position":[[204,6]]},"131":{"position":[[632,7]]},"147":{"position":[[146,10]]}}}],["os,base64",{"_index":946,"t":{"101":{"position":[[125,10]]}}}],["otherwis",{"_index":570,"t":{"61":{"position":[[751,10]]},"65":{"position":[[631,10]]},"67":{"position":[[2027,9]]},"83":{"position":[[231,9]]},"105":{"position":[[8862,9]]},"147":{"position":[[1903,10]]},"159":{"position":[[991,9]]}}}],["out",{"_index":1523,"t":{"139":{"position":[[1156,3]]},"147":{"position":[[2125,3],[2318,3]]},"157":{"position":[[691,3]]},"159":{"position":[[17,4],[325,3]]}}}],["output",{"_index":1193,"t":{"111":{"position":[[34,6],[81,6]]},"113":{"position":[[142,6]]},"115":{"position":[[23,6]]},"117":{"position":[[80,6]]}}}],["outsid",{"_index":1190,"t":{"109":{"position":[[326,7]]},"117":{"position":[[193,7]]},"131":{"position":[[3109,7]]}}}],["overrid",{"_index":739,"t":{"79":{"position":[[178,9]]},"89":{"position":[[183,8]]},"105":{"position":[[8936,8],[10474,8]]}}}],["overridden",{"_index":563,"t":{"61":{"position":[[371,10]]},"63":{"position":[[245,10],[388,11],[1279,11]]}}}],["override_speci",{"_index":973,"t":{"101":{"position":[[712,16]]}}}],["overwrit",{"_index":939,"t":{"99":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":177,"t":{"12":{"position":[[106,8]]},"24":{"position":[[37,7]]}}}],["pad",{"_index":1581,"t":{"145":{"position":[[480,9]]}}}],["page",{"_index":324,"t":{"26":{"position":[[12,4],[143,4],[190,4],[331,4]]},"67":{"position":[[1654,5]]},"87":{"position":[[506,4],[1091,4],[1205,4]]},"105":{"position":[[2521,4],[3475,5],[9009,4],[12902,5],[14103,4]]},"157":{"position":[[656,5],[695,4],[1282,5]]},"159":{"position":[[329,4]]}}}],["pair",{"_index":1030,"t":{"105":{"position":[[3042,5]]},"145":{"position":[[534,4]]}}}],["pane",{"_index":1398,"t":{"131":{"position":[[237,5],[284,5],[325,5],[432,5]]},"135":{"position":[[2751,4]]}}}],["parallel",{"_index":1017,"t":{"105":{"position":[[2291,8]]}}}],["paramet",{"_index":431,"t":{"35":{"position":[[83,9]]},"61":{"position":[[81,9],[280,10],[347,9],[476,9],[654,9]]},"63":{"position":[[36,9],[198,9],[366,9],[1159,10]]},"67":{"position":[[2190,10]]},"79":{"position":[[82,10],[202,9],[600,9]]},"107":{"position":[[271,10],[1178,10],[1203,9]]},"119":{"position":[[3805,10]]},"135":{"position":[[7082,10]]},"159":{"position":[[363,10]]},"161":{"position":[[123,11]]}}}],["part",{"_index":435,"t":{"37":{"position":[[149,4]]},"119":{"position":[[1828,6],[2209,4],[2487,4]]}}}],["particularli",{"_index":1189,"t":{"109":{"position":[[286,12]]}}}],["pass",{"_index":70,"t":{"4":{"position":[[12,7]]},"32":{"position":[[157,4],[312,4],[344,4],[380,4],[416,4]]},"61":{"position":[[103,6],[253,6],[560,6],[677,6]]},"63":{"position":[[58,6],[216,6]]},"65":{"position":[[1593,4]]},"67":{"position":[[2213,6]]},"79":{"position":[[93,6],[212,6]]},"83":{"position":[[154,4]]},"85":{"position":[[557,6]]},"87":{"position":[[2410,6]]},"91":{"position":[[388,4]]},"93":{"position":[[325,4]]},"97":{"position":[[204,4]]},"105":{"position":[[762,7],[7396,4],[7421,4],[7444,4],[7624,4],[7655,4],[7725,4],[7746,4],[7949,7],[8087,4],[8109,4],[8135,4],[8157,4],[8205,4],[8228,4],[12528,4]]},"107":{"position":[[71,4]]},"119":{"position":[[1022,4],[1333,4],[1362,4]]},"131":{"position":[[2154,4]]},"135":{"position":[[3100,4]]},"139":{"position":[[2283,4]]},"141":{"position":[[276,6]]},"145":{"position":[[2156,4]]},"147":{"position":[[1795,6]]}}}],["passhosthead",{"_index":808,"t":{"81":{"position":[[2235,14],[2255,14]]}}}],["password",{"_index":215,"t":{"12":{"position":[[1381,8],[1393,9]]},"43":{"position":[[529,8]]},"55":{"position":[[750,8]]},"105":{"position":[[721,8],[741,8],[2613,8],[10396,8],[10418,9],[10487,8],[10543,8],[10574,9],[10634,9],[10664,8]]}}}],["password/basic_auth_password",{"_index":387,"t":{"32":{"position":[[635,28]]}}}],["patch",{"_index":281,"t":{"18":{"position":[[601,7]]}}}],["path",{"_index":357,"t":{"28":{"position":[[123,4]]},"37":{"position":[[536,4]]},"51":{"position":[[251,4]]},"55":{"position":[[300,4]]},"59":{"position":[[150,4]]},"67":{"position":[[1698,5]]},"73":{"position":[[345,4]]},"81":{"position":[[140,4],[165,5],[296,4],[308,4],[407,5],[592,4],[622,4],[671,4],[721,4],[824,4],[877,4],[949,4],[1199,5],[1378,4]]},"83":{"position":[[171,4],[396,4],[421,5]]},"105":{"position":[[1125,4],[1755,4],[1786,4],[2413,4],[2472,4],[3155,4],[3191,5],[3249,5],[4750,4],[6321,4],[8542,5],[9043,4],[9237,4],[9432,4],[13341,5],[13479,5],[14558,4],[14893,4],[15095,5],[15189,4]]},"107":{"position":[[583,5],[785,4],[934,4],[1338,4]]},"115":{"position":[[177,8],[1166,4]]},"131":{"position":[[2443,4]]},"135":{"position":[[6031,5]]},"157":{"position":[[279,6]]}}}],["path.eg",{"_index":779,"t":{"81":{"position":[[1257,8]]}}}],["path/to/cert.key",{"_index":1702,"t":{"155":{"position":[[869,18]]}}}],["path/to/cert.pem",{"_index":1700,"t":{"155":{"position":[[830,18]]}}}],["path/to/existing/config.cfg",{"_index":361,"t":{"30":{"position":[[204,29],[558,29]]}}}],["path/to/new/config.yaml",{"_index":365,"t":{"30":{"position":[[523,25]]}}}],["path/to/sit",{"_index":1290,"t":{"119":{"position":[[2655,15]]}}}],["path_regex",{"_index":983,"t":{"105":{"position":[[313,10],[13551,10],[13565,12]]}}}],["pathprefix",{"_index":1347,"t":{"125":{"position":[[491,16],[1285,16]]}}}],["pathprefix(`/no",{"_index":1349,"t":{"125":{"position":[[760,15]]}}}],["pathprefix(`/oauth2",{"_index":1325,"t":{"123":{"position":[[592,23]]},"125":{"position":[[1072,23]]}}}],["pattern",{"_index":582,"t":{"63":{"position":[[561,8],[978,8]]},"79":{"position":[[259,7],[379,7],[396,7]]},"81":{"position":[[449,7]]}}}],["pem",{"_index":553,"t":{"59":{"position":[[87,3],[182,3]]},"105":{"position":[[6176,3],[6353,3]]},"139":{"position":[[1023,4],[2383,3],[2528,3]]}}}],["per",{"_index":319,"t":{"22":{"position":[[174,3]]},"105":{"position":[[602,3],[2197,3],[2251,3]]}}}],["perform",{"_index":1481,"t":{"135":{"position":[[3849,7]]},"147":{"position":[[398,7],[1573,7]]}}}],["period",{"_index":495,"t":{"45":{"position":[[81,6]]},"81":{"position":[[2128,6]]},"105":{"position":[[3291,6]]}}}],["permiss",{"_index":857,"t":{"87":{"position":[[445,11],[494,11],[538,11],[598,12],[666,11],[775,10],[2222,11]]},"93":{"position":[[176,11]]},"131":{"position":[[2333,11]]}}}],["pick",{"_index":847,"t":{"87":{"position":[[144,4]]},"147":{"position":[[2235,4],[2660,4]]}}}],["pin",{"_index":1696,"t":{"155":{"position":[[713,3]]}}}],["ping",{"_index":1095,"t":{"105":{"position":[[9038,4],[9059,4],[9114,7],[9124,4],[13082,4],[13131,4]]},"111":{"position":[[717,5],[744,4],[816,4]]},"157":{"position":[[318,5]]}}}],["ping,/path2",{"_index":1036,"t":{"105":{"position":[[3227,14]]}}}],["pkce",{"_index":988,"t":{"105":{"position":[[1022,4]]},"135":{"position":[[661,4]]}}}],["plain",{"_index":989,"t":{"105":{"position":[[1077,7]]},"119":{"position":[[2926,5]]}}}],["plan",{"_index":872,"t":{"87":{"position":[[1030,8]]}}}],["platform",{"_index":852,"t":{"87":{"position":[[270,8],[1660,8]]},"147":{"position":[[2603,8]]},"155":{"position":[[86,8],[276,8]]}}}],["pleas",{"_index":120,"t":{"6":{"position":[[58,6],[118,6],[278,6],[357,6]]},"16":{"position":[[99,6],[144,6],[346,6],[434,6]]},"20":{"position":[[444,6]]},"26":{"position":[[260,6],[850,6]]},"135":{"position":[[2205,6],[6781,6]]}}}],["plural",{"_index":976,"t":{"103":{"position":[[186,6]]},"109":{"position":[[257,6]]}}}],["poc",{"_index":1007,"t":{"105":{"position":[[1817,6]]}}}],["point",{"_index":1343,"t":{"125":{"position":[[119,8]]},"127":{"position":[[1347,8]]}}}],["polici",{"_index":868,"t":{"87":{"position":[[884,8]]},"147":{"position":[[2351,8]]}}}],["popul",{"_index":1450,"t":{"133":{"position":[[1277,8]]}}}],["port",{"_index":1168,"t":{"105":{"position":[[16592,5],[16651,4],[16763,5],[16834,5]]},"147":{"position":[[585,5]]},"155":{"position":[[390,4],[460,4]]},"159":{"position":[[1074,4]]}}}],["possibl",{"_index":228,"t":{"14":{"position":[[165,9]]},"16":{"position":[[467,9]]},"45":{"position":[[125,8]]},"105":{"position":[[2274,8]]},"127":{"position":[[877,8]]},"133":{"position":[[82,9]]}}}],["post",{"_index":235,"t":{"16":{"position":[[158,4]]}}}],["potenti",{"_index":255,"t":{"16":{"position":[[622,9]]},"81":{"position":[[1619,9]]}}}],["powershel",{"_index":944,"t":{"101":{"position":[[86,10]]}}}],["ppc64le",{"_index":22,"t":{"2":{"position":[[264,8],[360,8]]}}}],["pr",{"_index":141,"t":{"6":{"position":[[335,2],[409,2]]},"16":{"position":[[130,2]]},"18":{"position":[[373,3]]}}}],["practic",{"_index":1471,"t":{"135":{"position":[[1526,10]]}}}],["pre",{"_index":28,"t":{"2":{"position":[[319,3]]},"135":{"position":[[4214,3]]}}}],["prebuilt",{"_index":3,"t":{"2":{"position":[[33,8],[234,8],[453,8]]}}}],["preced",{"_index":754,"t":{"81":{"position":[[388,10]]},"99":{"position":[[118,11]]}}}],["preconfigur",{"_index":124,"t":{"6":{"position":[[136,13]]}}}],["prefer",{"_index":385,"t":{"32":{"position":[[582,6]]},"105":{"position":[[7820,9],[7870,6],[7896,6],[8305,9],[12438,9]]}}}],["preferred_usernam",{"_index":312,"t":{"20":{"position":[[503,18]]}}}],["prefix",{"_index":482,"t":{"43":{"position":[[219,6],[233,6],[255,6]]},"55":{"position":[[440,6],[454,6],[476,6]]},"81":{"position":[[627,8],[676,8]]},"105":{"position":[[1673,6],[9405,6],[15725,6],[16469,8]]},"109":{"position":[[75,9]]},"157":{"position":[[136,6],[175,6]]}}}],["preflight",{"_index":1132,"t":{"105":{"position":[[13172,9]]}}}],["prepend",{"_index":483,"t":{"43":{"position":[[275,9]]},"55":{"position":[[496,9]]}}}],["present",{"_index":258,"t":{"16":{"position":[[705,7]]},"105":{"position":[[8430,8],[14223,9],[14339,9]]},"141":{"position":[[237,7]]}}}],["preserv",{"_index":536,"t":{"53":{"position":[[362,9]]}}}],["preserverequestvalu",{"_index":533,"t":{"53":{"position":[[260,20],[286,20]]}}}],["pretti",{"_index":1671,"t":{"149":{"position":[[282,6]]}}}],["prevent",{"_index":615,"t":{"65":{"position":[[200,8]]},"143":{"position":[[460,7]]}}}],["preview",{"_index":1492,"t":{"135":{"position":[[6911,7]]},"147":{"position":[[1682,7]]}}}],["previou",{"_index":284,"t":{"18":{"position":[[652,8]]}}}],["previous",{"_index":268,"t":{"18":{"position":[[287,10]]}}}],["primari",{"_index":436,"t":{"37":{"position":[[161,7]]}}}],["princip",{"_index":1051,"t":{"105":{"position":[[4958,9],[4984,9]]}}}],["print",{"_index":362,"t":{"30":{"position":[[304,5]]},"105":{"position":[[15617,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":947,"t":{"101":{"position":[[136,57]]}}}],["prior",{"_index":337,"t":{"26":{"position":[[245,5]]},"127":{"position":[[119,5]]}}}],["privat",{"_index":240,"t":{"16":{"position":[[222,8]]},"18":{"position":[[37,9]]},"59":{"position":[[72,7],[162,7]]},"105":{"position":[[6161,7],[6333,7],[14901,7]]},"129":{"position":[[1049,7]]},"139":{"position":[[1065,7]]}}}],["process",{"_index":1244,"t":{"115":{"position":[[965,8]]},"119":{"position":[[2966,9],[3012,9]]},"139":{"position":[[2587,7]]}}}],["product",{"_index":1127,"t":{"105":{"position":[[12973,11]]},"131":{"position":[[374,8]]},"139":{"position":[[294,10]]}}}],["profil",{"_index":403,"t":{"32":{"position":[[933,7]]},"67":{"position":[[2356,7]]},"105":{"position":[[8355,7],[8374,7]]},"127":{"position":[[284,7]]},"133":{"position":[[728,7]]},"139":{"position":[[1992,7]]}}}],["profileurl",{"_index":701,"t":{"67":{"position":[[2320,10],[2338,10]]}}}],["program",{"_index":183,"t":{"12":{"position":[[250,10],[568,10]]}}}],["project",{"_index":152,"t":{"8":{"position":[[5,7]]},"14":{"position":[[33,8],[74,7],[204,8]]},"49":{"position":[[113,8],[131,8],[177,8]]},"105":{"position":[[4302,8],[4368,8]]},"127":{"position":[[411,8]]},"129":{"position":[[13,8]]},"131":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"137":{"position":[[55,8]]},"147":{"position":[[118,9]]}}}],["prometheu",{"_index":1100,"t":{"105":{"position":[[9354,10]]},"157":{"position":[[533,10]]}}}],["prompt",{"_index":408,"t":{"32":{"position":[[998,6]]},"105":{"position":[[335,6],[8400,6],[8419,7],[8448,6]]}}}],["prompt/approval_prompt",{"_index":410,"t":{"32":{"position":[[1014,22]]}}}],["promptallow",{"_index":573,"t":{"63":{"position":[[130,12]]}}}],["promptdefault",{"_index":576,"t":{"63":{"position":[[294,14]]}}}],["properli",{"_index":1364,"t":{"127":{"position":[[551,9]]}}}],["propos",{"_index":266,"t":{"18":{"position":[[257,8]]}}}],["protect",{"_index":703,"t":{"67":{"position":[[2438,9]]},"87":{"position":[[315,7]]},"105":{"position":[[11846,9]]},"145":{"position":[[775,8]]},"147":{"position":[[2189,11],[2279,8]]}}}],["protectedresourc",{"_index":702,"t":{"67":{"position":[[2396,17]]}}}],["proto,host,uri",{"_index":1121,"t":{"105":{"position":[[12008,16]]}}}],["protocol",{"_index":1170,"t":{"105":{"position":[[16668,8]]},"113":{"position":[[1071,8],[1101,9]]},"115":{"position":[[534,13],[860,8],[890,9]]},"135":{"position":[[984,8]]},"139":{"position":[[842,9]]}}}],["provid",{"_index":42,"t":{"2":{"position":[[568,8],[696,8],[746,8],[900,8]]},"4":{"position":[[309,8],[473,9],[740,8]]},"12":{"position":[[411,8],[734,8],[886,8],[963,9]]},"20":{"position":[[54,8],[90,10],[195,9],[379,8],[414,8],[469,9],[578,9]]},"24":{"position":[[27,9],[61,8],[151,9]]},"28":{"position":[[111,7]]},"32":{"position":[[803,8],[812,8],[856,8],[1215,8]]},"35":{"position":[[13,9]]},"37":{"position":[[1809,9],[1819,9],[1829,9],[1869,10]]},"39":{"position":[[13,9]]},"41":{"position":[[13,9]]},"47":{"position":[[13,9]]},"49":{"position":[[13,9]]},"51":{"position":[[13,9]]},"57":{"position":[[13,9],[234,9]]},"59":{"position":[[13,9]]},"61":{"position":[[13,9],[712,8]]},"65":{"position":[[13,9]]},"67":{"position":[[13,10],[24,8],[70,8],[212,10],[345,10],[584,9],[666,9],[744,9],[842,9],[929,9],[1015,9],[1101,9],[1190,9],[1313,9],[1414,10],[1425,8],[1504,9],[1581,9]]},"69":{"position":[[29,9],[87,8]]},"71":{"position":[[0,11],[47,9],[92,10]]},"85":{"position":[[92,7],[455,8]]},"87":{"position":[[2308,8]]},"91":{"position":[[378,9]]},"93":{"position":[[315,9]]},"97":{"position":[[323,8]]},"105":{"position":[[1929,9],[2656,8],[8471,8],[8493,8],[8511,8],[8610,9],[8729,8],[8907,8],[9026,9],[14064,8],[14250,9],[15538,9],[16354,9],[16877,8]]},"107":{"position":[[207,9],[368,7],[773,7],[1231,9]]},"125":{"position":[[34,8],[2252,8]]},"127":{"position":[[10,8]]},"129":{"position":[[184,8],[1265,7]]},"131":{"position":[[2258,8]]},"133":{"position":[[24,8],[70,8],[1257,8]]},"135":{"position":[[4048,8]]},"139":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"147":{"position":[[84,9],[133,8],[236,8],[298,9],[380,8],[554,8],[957,8],[971,8],[1002,9],[1554,8],[1918,8],[3050,8],[4376,8]]},"149":{"position":[[14,8],[125,9],[529,8]]},"153":{"position":[[47,9],[418,12]]},"155":{"position":[[1349,12]]},"159":{"position":[[169,8],[784,8]]}}}],["provider'",{"_index":1094,"t":{"105":{"position":[[8949,10]]},"119":{"position":[[1731,10]]},"139":{"position":[[3422,10]]},"159":{"position":[[309,10]]}}}],["provider.example.com",{"_index":1728,"t":{"159":{"position":[[893,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":1722,"t":{"159":{"position":[[485,36]]}}}],["provider.if",{"_index":691,"t":{"67":{"position":[[1766,11]]}}}],["provider.thi",{"_index":684,"t":{"67":{"position":[[1374,13]]}}}],["provider/sign_out_pag",{"_index":1725,"t":{"159":{"position":[[671,25]]}}}],["provider=\"github",{"_index":928,"t":{"97":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":1365,"t":{"127":{"position":[[605,17]]}}}],["provider=adf",{"_index":830,"t":{"85":{"position":[[333,13]]}}}],["provider=azur",{"_index":879,"t":{"87":{"position":[[1439,14],[1747,14]]}}}],["provider=bitbucket",{"_index":916,"t":{"93":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":906,"t":{"91":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":1437,"t":{"133":{"position":[[441,17]]},"135":{"position":[[2,17]]}}}],["providermust",{"_index":686,"t":{"67":{"position":[[1465,12]]}}}],["provideror",{"_index":678,"t":{"67":{"position":[[1179,10]]}}}],["providers.new",{"_index":322,"t":{"24":{"position":[[98,15]]}}}],["providerthi",{"_index":657,"t":{"67":{"position":[[173,12],[306,12]]}}}],["providertyp",{"_index":685,"t":{"67":{"position":[[1434,12]]},"69":{"position":[[39,12]]}}}],["proxi",{"_index":49,"t":{"2":{"position":[[659,5],[772,5]]},"4":{"position":[[32,5],[729,5]]},"12":{"position":[[20,5],[182,5],[495,5],[777,5],[854,6],[1416,5]]},"14":{"position":[[12,5]]},"16":{"position":[[65,5],[339,6]]},"20":{"position":[[179,5]]},"24":{"position":[[130,5]]},"30":{"position":[[58,5],[163,5],[467,5],[502,5]]},"32":{"position":[[191,5],[1511,5]]},"37":{"position":[[204,6],[490,7],[973,5],[1045,5],[1262,5]]},"81":{"position":[[108,7],[1057,8],[1669,5],[2416,8]]},"83":{"position":[[364,7]]},"85":{"position":[[320,5]]},"87":{"position":[[1303,5]]},"91":{"position":[[206,5],[249,5]]},"93":{"position":[[108,6],[152,5]]},"97":{"position":[[238,6]]},"99":{"position":[[7,5]]},"105":{"position":[[9399,5],[9447,5],[9513,5],[9553,8],[9739,5],[11882,5],[11925,6],[13713,5],[15963,5],[16085,5],[16254,5]]},"107":{"position":[[7,5],[705,5],[1060,5]]},"111":{"position":[[19,5]]},"113":{"position":[[937,5]]},"115":{"position":[[792,5]]},"119":{"position":[[31,5],[247,8],[1795,5]]},"121":{"position":[[31,5]]},"123":{"position":[[223,8]]},"125":{"position":[[138,5],[208,6],[1236,5]]},"131":{"position":[[2400,5],[2520,6],[2789,5]]},"135":{"position":[[1789,5],[3077,5],[3713,5],[3838,5],[5526,5],[5771,5],[6005,6],[6160,6],[6506,5],[6633,5]]},"139":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"141":{"position":[[109,5]]},"143":{"position":[[97,5],[396,5],[655,6]]},"145":{"position":[[1023,5],[1376,5],[1646,5],[1850,5],[2168,5]]},"147":{"position":[[531,5],[790,5],[925,5],[1029,5],[1049,5],[3655,5],[3675,5],[4816,5],[4836,5]]},"151":{"position":[[52,5],[69,5]]},"153":{"position":[[38,5],[162,5],[221,5],[978,5]]},"155":{"position":[[133,5],[432,8],[451,5],[478,5],[1164,5],[1223,5]]},"157":{"position":[[7,5],[87,7],[169,5]]}}}],["proxiedto",{"_index":809,"t":{"81":{"position":[[2323,9]]}}}],["proxy'",{"_index":77,"t":{"4":{"position":[[96,7]]},"91":{"position":[[296,7]]},"119":{"position":[[141,7]]},"123":{"position":[[93,7]]},"159":{"position":[[91,7]]}}}],["proxy'secret",{"_index":1627,"t":{"147":{"position":[[776,13]]}}}],["proxy(e.g",{"_index":854,"t":{"87":{"position":[[337,10]]}}}],["proxy.cfg",{"_index":190,"t":{"12":{"position":[[454,10]]},"103":{"position":[[225,9],[326,9]]}}}],["proxy.localtest.me:4180",{"_index":217,"t":{"12":{"position":[[1464,24]]}}}],["proxy.thi",{"_index":449,"t":{"37":{"position":[[929,10]]}}}],["proxy/oauth2",{"_index":14,"t":{"2":{"position":[[150,12]]}}}],["proxy/oauth2/callback",{"_index":903,"t":{"91":{"position":[[163,22]]}}}],["proxy/v7@latest",{"_index":15,"t":{"2":{"position":[[163,16]]}}}],["proxy=tru",{"_index":1346,"t":{"125":{"position":[[306,11]]},"155":{"position":[[1374,10]]}}}],["proxy>/oauth2/callback",{"_index":914,"t":{"93":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":839,"t":{"85":{"position":[[598,17]]},"87":{"position":[[2451,17]]}}}],["proxy_connect_timeout",{"_index":1704,"t":{"155":{"position":[[1059,21]]}}}],["proxy_pass",{"_index":1257,"t":{"119":{"position":[[374,10],[677,10],[2616,10],[2980,10]]},"155":{"position":[[955,10]]}}}],["proxy_pass_request_bodi",{"_index":1265,"t":{"119":{"position":[[915,23]]}}}],["proxy_read_timeout",{"_index":1706,"t":{"155":{"position":[[1107,18]]}}}],["proxy_send_timeout",{"_index":1705,"t":{"155":{"position":[[1084,18]]}}}],["proxy_set_head",{"_index":1259,"t":{"119":{"position":[[408,16],[437,16],[478,16],[579,16],[711,16],[740,16],[781,16],[879,16],[1250,16],[1281,16],[1460,16]]},"155":{"position":[[989,16],[1018,16]]}}}],["proxycd",{"_index":164,"t":{"10":{"position":[[128,7]]}}}],["proxygit",{"_index":165,"t":{"10":{"position":[[143,8]]}}}],["proxyrawpath",{"_index":817,"t":{"83":{"position":[[118,12],[136,12]]}}}],["proxyredirecturi",{"_index":1625,"t":{"147":{"position":[[703,18]]}}}],["proxyus",{"_index":1107,"t":{"105":{"position":[[9797,9]]}}}],["proxywebsocket",{"_index":810,"t":{"81":{"position":[[2371,15],[2392,15]]}}}],["pubjwk",{"_index":419,"t":{"32":{"position":[[1185,6]]},"105":{"position":[[9569,6]]},"139":{"position":[[1917,6]]}}}],["pubjwkurl",{"_index":555,"t":{"59":{"position":[[214,9],[231,9]]}}}],["pubkey",{"_index":557,"t":{"59":{"position":[[252,6]]},"105":{"position":[[9591,6]]}}}],["public",{"_index":1384,"t":{"129":{"position":[[1012,6],[1230,6]]},"139":{"position":[[974,6]]}}}],["public_repo",{"_index":1387,"t":{"129":{"position":[[1377,11]]}}}],["publicli",{"_index":237,"t":{"16":{"position":[[175,9]]}}}],["pull",{"_index":122,"t":{"6":{"position":[[105,4]]},"113":{"position":[[1173,6]]},"115":{"position":[[1036,6]]}}}],["push",{"_index":167,"t":{"10":{"position":[[184,4]]},"47":{"position":[[341,4]]},"105":{"position":[[4016,4]]},"129":{"position":[[995,4]]}}}],["put",{"_index":16,"t":{"2":{"position":[[191,3]]}}}],["python",{"_index":941,"t":{"101":{"position":[[66,6],[107,6]]}}}],["queri",{"_index":559,"t":{"61":{"position":[[75,5],[390,5]]},"63":{"position":[[1153,5],[1405,5]]},"79":{"position":[[76,5]]},"105":{"position":[[82,5],[135,5]]},"123":{"position":[[1287,6]]},"159":{"position":[[357,5]]},"161":{"position":[[117,5]]}}}],["quick",{"_index":1516,"t":{"139":{"position":[[1080,5]]}}}],["quickli",{"_index":227,"t":{"14":{"position":[[154,7]]}}}],["quit",{"_index":1586,"t":{"145":{"position":[[966,5]]}}}],["quot",{"_index":594,"t":{"63":{"position":[[845,6]]}}}],["r_basicprofil",{"_index":1496,"t":{"137":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":1497,"t":{"137":{"position":[[187,15]]}}}],["rand",{"_index":957,"t":{"101":{"position":[[297,4]]}}}],["random",{"_index":627,"t":{"65":{"position":[[586,6]]},"113":{"position":[[1210,6]]},"115":{"position":[[1073,6]]},"145":{"position":[[392,6],[443,6]]}}}],["random_password",{"_index":970,"t":{"101":{"position":[[664,17]]}}}],["rang",{"_index":1155,"t":{"105":{"position":[[15862,6]]}}}],["raw",{"_index":818,"t":{"83":{"position":[[163,3]]},"119":{"position":[[2261,3]]}}}],["rd",{"_index":1720,"t":{"159":{"position":[[354,2]]}}}],["re",{"_index":1573,"t":{"143":{"position":[[799,2]]},"159":{"position":[[200,2]]}}}],["reach",{"_index":1140,"t":{"105":{"position":[[14120,5]]}}}],["read",{"_index":856,"t":{"87":{"position":[[440,4]]},"93":{"position":[[240,4],[261,4]]},"129":{"position":[[1208,4]]},"131":{"position":[[2417,4]]},"135":{"position":[[5654,4]]}}}],["read_api",{"_index":1362,"t":{"127":{"position":[[445,8]]}}}],["readi",{"_index":282,"t":{"18":{"position":[[613,6]]},"105":{"position":[[9231,5],[9253,5],[9308,8],[13138,5]]},"111":{"position":[[769,6]]},"157":{"position":[[398,6]]}}}],["real",{"_index":1104,"t":{"105":{"position":[[9639,4],[9697,4],[9783,4],[9813,4],[11964,4],[15986,4]]},"113":{"position":[[899,4]]},"115":{"position":[[754,4]]},"119":{"position":[[456,4],[759,4]]},"139":{"position":[[3070,4],[3215,4]]},"155":{"position":[[1037,4]]}}}],["realm",{"_index":1434,"t":{"133":{"position":[[127,5]]},"135":{"position":[[214,6],[311,6],[467,5],[938,5],[1963,5],[2098,5],[3994,5],[4173,5],[4451,5],[4474,5],[4512,6],[4799,6],[4998,5],[7052,5]]}}}],["realm>/protocol/openid",{"_index":1442,"t":{"133":{"position":[[593,22],[688,22],[785,22],[886,22]]}}}],["reason",{"_index":1422,"t":{"131":{"position":[[2048,6]]},"145":{"position":[[2366,7]]}}}],["recipi",{"_index":1473,"t":{"135":{"position":[[1754,9],[3402,11]]}}}],["recommend",{"_index":991,"t":{"105":{"position":[[1095,13]]},"119":{"position":[[3606,11]]},"131":{"position":[[871,11],[1210,13],[2767,14]]},"135":{"position":[[1543,11]]},"145":{"position":[[2470,11]]},"151":{"position":[[14,11]]}}}],["redeem",{"_index":401,"t":{"32":{"position":[[911,6]]},"65":{"position":[[686,6]]},"97":{"position":[[527,6]]},"105":{"position":[[9823,6],[13988,6]]},"129":{"position":[[1839,6]]},"133":{"position":[[632,6]]},"139":{"position":[[3765,6]]},"149":{"position":[[687,6]]}}}],["redeemurl",{"_index":699,"t":{"67":{"position":[[2260,9],[2277,9]]}}}],["redempt",{"_index":700,"t":{"67":{"position":[[2300,10]]},"105":{"position":[[9847,10]]}}}],["redi",{"_index":104,"t":{"4":{"position":[[552,6]]},"85":{"position":[[645,5]]},"87":{"position":[[2498,5]]},"105":{"position":[[10039,5],[10091,5],[10176,5],[10196,5],[10231,5],[10248,5],[10299,5],[10376,5],[10390,5],[10412,5],[10447,5],[10505,5],[10528,5],[10559,5],[10623,5],[10658,5],[10675,5],[10709,5],[10764,5],[10785,5],[10838,5],[10924,5],[10945,5],[10979,5],[11005,5],[11063,5],[11098,5],[11130,5],[11163,5],[11222,5],[11256,5],[11298,5],[11345,5],[11393,5],[11502,5],[11551,5],[12303,5]]},"141":{"position":[[326,5]]},"145":{"position":[[4,5],[55,6],[607,5],[712,5],[1423,5],[1567,5],[2635,5],[2698,5],[2726,5],[2817,5],[2874,5],[2937,5],[2970,5],[3016,5],[3119,5],[3174,5],[3237,5],[3267,5],[3323,5],[3370,5],[3418,5],[3531,5],[3580,5]]},"157":{"position":[[474,5]]}}}],["redirect",{"_index":92,"t":{"4":{"position":[[276,10]]},"20":{"position":[[123,8]]},"83":{"position":[[244,10]]},"87":{"position":[[232,8]]},"91":{"position":[[315,8],[562,8],[680,8]]},"95":{"position":[[95,8]]},"97":{"position":[[87,8],[267,8]]},"105":{"position":[[245,11],[2834,9],[3395,8],[3484,9],[9869,8],[9899,8],[9983,8],[10022,8],[12047,8],[15691,11],[16555,8]]},"119":{"position":[[510,8],[611,8]]},"125":{"position":[[0,8],[372,9],[561,8],[572,9],[781,11],[849,8],[1894,9],[2059,9]]},"127":{"position":[[322,8],[625,8],[703,8],[1316,8]]},"131":{"position":[[703,8]]},"133":{"position":[[175,8]]},"135":{"position":[[97,8],[1020,8],[2435,8]]},"137":{"position":[[217,8]]},"139":{"position":[[1379,8],[1619,8],[3610,8]]},"147":{"position":[[1055,8],[2720,8],[3968,8],[4028,8]]},"149":{"position":[[449,12]]},"157":{"position":[[816,8]]},"159":{"position":[[22,8],[269,8],[379,8],[549,8],[584,8],[645,9],[872,8],[1005,8]]}}}],["redis.conf",{"_index":1117,"t":{"105":{"position":[[11434,10]]},"145":{"position":[[3463,10]]}}}],["redis://host[:port",{"_index":1111,"t":{"105":{"position":[[10127,21],[10276,20],[10875,21]]}}}],["reduc",{"_index":1197,"t":{"111":{"position":[[829,8]]},"135":{"position":[[5403,6]]}}}],["refer",{"_index":348,"t":{"26":{"position":[[552,9],[868,9]]},"28":{"position":[[94,9]]},"73":{"position":[[57,10]]},"135":{"position":[[5641,5],[6788,5]]},"139":{"position":[[930,5],[1284,8]]},"149":{"position":[[367,5]]}}}],["refresh",{"_index":1008,"t":{"105":{"position":[[1837,7],[1854,7],[16381,8]]},"119":{"position":[[1526,8]]},"131":{"position":[[886,7],[940,7],[2638,9]]},"143":{"position":[[734,10]]},"145":{"position":[[1055,7],[1072,7],[1251,7],[1405,7],[1455,7],[1536,7],[1610,8],[1661,7],[1738,10],[1803,7],[1861,7],[1964,9],[2009,7],[2405,7],[2554,7]]},"147":{"position":[[2830,7],[4137,7]]}}}],["refresh/access/id",{"_index":1585,"t":{"145":{"position":[[788,17]]}}}],["refreshes.default",{"_index":632,"t":{"65":{"position":[[712,17]]}}}],["regardless",{"_index":1685,"t":{"153":{"position":[[679,10]]}}}],["regex",{"_index":75,"t":{"4":{"position":[[70,6]]},"105":{"position":[[13251,5]]}}}],["regist",{"_index":53,"t":{"2":{"position":[[709,8]]},"20":{"position":[[17,8]]},"87":{"position":[[404,9]]},"139":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":846,"t":{"87":{"position":[[94,13],[130,13],[469,13],[1147,12]]},"131":{"position":[[16,12]]},"137":{"position":[[18,12]]}}}],["regular",{"_index":270,"t":{"18":{"position":[[365,7]]},"63":{"position":[[432,7],[814,7]]},"79":{"position":[[417,7]]},"81":{"position":[[534,7]]}}}],["rel",{"_index":1109,"t":{"105":{"position":[[9974,8],[10007,8]]}}}],["releas",{"_index":6,"t":{"2":{"position":[[58,7],[111,7],[323,7],[586,7]]},"18":{"position":[[493,8],[661,9]]},"37":{"position":[[298,8]]},"65":{"position":[[764,8]]},"135":{"position":[[846,7]]}}}],["relev",{"_index":1601,"t":{"145":{"position":[[2284,8]]}}}],["reload",{"_index":1355,"t":{"125":{"position":[[2336,6]]}}}],["remain",{"_index":764,"t":{"81":{"position":[[711,9]]},"135":{"position":[[2225,9]]},"137":{"position":[[300,9]]}}}],["remot",{"_index":1160,"t":{"105":{"position":[[16117,6]]}}}],["remote_addr",{"_index":1260,"t":{"119":{"position":[[464,13],[767,13]]},"155":{"position":[[1045,13]]}}}],["remote_address",{"_index":1200,"t":{"113":{"position":[[181,16]]},"115":{"position":[[62,16]]}}}],["remov",{"_index":333,"t":{"26":{"position":[[211,8]]},"28":{"position":[[255,7]]},"30":{"position":[[368,6],[429,7]]},"32":{"position":[[1467,6]]},"135":{"position":[[829,7]]},"159":{"position":[[76,7]]}}}],["renam",{"_index":334,"t":{"26":{"position":[[220,7]]}}}],["replac",{"_index":343,"t":{"26":{"position":[[479,7]]},"103":{"position":[[65,9]]},"109":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":964,"t":{"101":{"position":[[551,19]]}}}],["repo",{"_index":143,"t":{"6":{"position":[[351,5]]},"47":{"position":[[176,4],[188,4]]},"105":{"position":[[3836,4]]},"129":{"position":[[1077,8]]},"139":{"position":[[2497,4]]}}}],["report",{"_index":1228,"t":{"113":{"position":[[1381,8]]},"115":{"position":[[1453,8]]}}}],["repositori",{"_index":477,"t":{"41":{"position":[[108,10],[126,10],[186,10]]},"47":{"position":[[239,10],[304,10],[360,10]]},"93":{"position":[[245,12],[697,10]]},"105":{"position":[[3889,10],[3980,10],[4035,11]]},"129":{"position":[[329,11],[954,11],[1019,10],[1057,11],[1127,10],[1237,10],[1321,11],[1446,10]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":1675,"t":{"149":{"position":[[715,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":1674,"t":{"149":{"position":[[648,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":1676,"t":{"149":{"position":[[787,39]]}}}],["url]/stat",{"_index":1186,"t":{"107":{"position":[[1066,13]]}}}],["url]/var/www/stat",{"_index":1182,"t":{"107":{"position":[[711,21]]}}}],["urldefault",{"_index":622,"t":{"65":{"position":[[457,10]]}}}],["urleg",{"_index":612,"t":{"65":{"position":[[102,6],[1006,6]]}}}],["urlparameterrul",{"_index":606,"t":{"63":{"position":[[1297,18]]},"79":{"position":[[32,16]]}}}],["urlslik",{"_index":819,"t":{"83":{"position":[[201,9]]}}}],["us",{"_index":2,"t":{"2":{"position":[[25,5],[80,5],[226,5],[311,5],[407,5],[778,5]]},"4":{"position":[[761,6]]},"6":{"position":[[25,5],[438,5]]},"8":{"position":[[32,5]]},"12":{"position":[[878,3],[984,5]]},"16":{"position":[[550,4]]},"18":{"position":[[3,3],[361,3]]},"20":{"position":[[404,5]]},"22":{"position":[[37,3],[113,3],[217,3]]},"24":{"position":[[139,3]]},"26":{"position":[[293,3],[659,5]]},"28":{"position":[[3,3],[141,5],[182,5]]},"30":{"position":[[64,5],[473,5]]},"32":{"position":[[100,5],[1352,3]]},"37":{"position":[[394,4],[626,4],[861,4],[953,4],[963,5],[1217,4],[1433,3],[1539,4],[1741,3],[1842,4]]},"39":{"position":[[233,4]]},"43":{"position":[[517,4]]},"47":{"position":[[285,3]]},"51":{"position":[[391,3],[528,4]]},"53":{"position":[[183,4]]},"55":{"position":[[738,4]]},"57":{"position":[[210,5]]},"59":{"position":[[98,4],[193,4]]},"61":{"position":[[542,4]]},"63":{"position":[[941,3]]},"65":{"position":[[902,3],[1478,4]]},"67":{"position":[[467,4],[1738,4],[1826,4],[2022,4]]},"69":{"position":[[55,4]]},"81":{"position":[[316,4],[462,4],[528,5],[730,3],[2058,4]]},"85":{"position":[[435,5]]},"87":{"position":[[1042,3],[1947,5],[2287,5]]},"89":{"position":[[175,4]]},"91":{"position":[[370,3],[670,3]]},"93":{"position":[[43,3],[307,3],[555,3],[708,3]]},"101":{"position":[[35,3]]},"103":{"position":[[286,4]]},"105":{"position":[[114,3],[1018,3],[1299,4],[1660,3],[2532,3],[2776,3],[3545,3],[3625,3],[3961,3],[4804,3],[4845,3],[5014,5],[5699,5],[5822,3],[6187,4],[6364,4],[7522,4],[7906,3],[7992,3],[8060,4],[8582,4],[8671,4],[8687,3],[8783,5],[8857,4],[8988,4],[9085,4],[9172,4],[9280,4],[9675,4],[10149,4],[10182,3],[10584,4],[10652,3],[10737,4],[10770,3],[10897,4],[10930,3],[10951,3],[11038,3],[11069,3],[11197,3],[11468,5],[11631,3],[12039,4],[12474,7],[12516,4],[12684,7],[12792,7],[12966,3],[14238,5],[14354,5],[14644,4],[14791,5],[16267,3],[16423,5],[16840,3]]},"107":{"position":[[912,4],[1296,4]]},"109":{"position":[[299,6]]},"111":{"position":[[111,5],[736,5]]},"113":{"position":[[889,3]]},"115":{"position":[[744,3]]},"119":{"position":[[1683,5],[2709,3],[2751,3],[3621,3]]},"125":{"position":[[55,3],[330,3],[2299,3]]},"127":{"position":[[160,5],[1042,5]]},"129":{"position":[[1427,3],[1688,5]]},"131":{"position":[[1123,3],[2284,5],[2672,5],[2804,3],[2907,3]]},"133":{"position":[[47,3],[1136,4],[1441,5]]},"135":{"position":[[1469,5],[1934,3],[1975,5],[3218,3],[4024,5],[4331,5],[4831,5],[4920,5],[5341,6],[5509,5]]},"139":{"position":[[2172,3],[3211,3]]},"141":{"position":[[115,4]]},"143":{"position":[[78,4],[287,5]]},"145":{"position":[[994,4],[2308,4],[2625,5],[2864,3],[2880,3],[3125,3],[3243,3],[3273,3],[3497,5]]},"147":{"position":[[195,3],[264,4],[567,5],[1484,5],[1617,5],[4706,3]]},"149":{"position":[[105,5],[276,5]]},"153":{"position":[[752,4],[942,4],[992,5]]},"155":{"position":[[218,5],[301,3],[670,3]]},"157":{"position":[[375,3],[751,4],[877,4],[1007,4],[1156,3],[1252,4]]},"159":{"position":[[344,5]]},"161":{"position":[[97,5]]}}}],["us/azure/act",{"_index":892,"t":{"87":{"position":[[2185,15]]}}}],["usag",{"_index":434,"t":{"37":{"position":[[62,5]]},"145":{"position":[[2613,6]]}}}],["use.typ",{"_index":723,"t":{"77":{"position":[[218,13],[314,13]]}}}],["useapplicationdefaultcredenti",{"_index":525,"t":{"51":{"position":[[296,32],[334,32]]}}}],["used.list",{"_index":737,"t":{"77":{"position":[[678,9]]}}}],["usedif",{"_index":696,"t":{"67":{"position":[[1950,6]]}}}],["user",{"_index":89,"t":{"4":{"position":[[248,4],[643,4]]},"32":{"position":[[385,4],[1059,4]]},"37":{"position":[[92,5],[436,4]]},"41":{"position":[[161,4]]},"47":{"position":[[371,5],[386,5],[399,5]]},"57":{"position":[[173,5]]},"65":{"position":[[1120,4],[1220,4],[1321,4]]},"67":{"position":[[1635,5]]},"81":{"position":[[795,5]]},"93":{"position":[[659,5]]},"105":{"position":[[4056,4],[4084,5],[5223,4],[5294,5],[7223,4],[7780,5],[7886,4],[8114,4],[8210,4],[8245,5],[9129,4],[9149,4],[9217,4],[12369,5],[15452,5]]},"111":{"position":[[749,4]]},"113":{"position":[[94,4],[356,4],[425,4],[1367,4]]},"115":{"position":[[1439,4]]},"119":{"position":[[1045,4],[1147,5],[1269,4],[1274,6]]},"129":{"position":[[436,4],[463,5],[972,5],[1197,5],[1287,4],[1482,4],[1621,8]]},"131":{"position":[[397,6],[2221,4],[2537,4]]},"135":{"position":[[380,6],[3667,4],[3892,5],[4290,4],[4684,4],[4689,5],[5280,5],[5355,4],[6604,4],[6921,5],[7058,4]]},"137":{"position":[[119,4]]},"141":{"position":[[138,4]]},"143":{"position":[[790,5]]},"145":{"position":[[185,4]]},"147":{"position":[[2949,5]]},"149":{"position":[[58,5]]},"157":{"position":[[258,4]]},"159":{"position":[[12,4],[121,4],[282,4],[392,4]]}}}],["user'",{"_index":446,"t":{"37":{"position":[[760,6],[1148,6]]},"105":{"position":[[7145,6]]},"135":{"position":[[3956,6],[5310,6]]},"141":{"position":[[17,6]]},"157":{"position":[[1022,6]]}}}],["user/prefer_email_to_us",{"_index":386,"t":{"32":{"position":[[598,25]]}}}],["user/settings/appl",{"_index":924,"t":{"97":{"position":[[52,28]]}}}],["user@domain.com",{"_index":1201,"t":{"113":{"position":[[215,17]]},"115":{"position":[[96,17]]}}}],["user_ag",{"_index":1234,"t":{"115":{"position":[[195,14]]}}}],["userag",{"_index":1227,"t":{"113":{"position":[[1346,9]]},"115":{"position":[[548,14],[1418,9]]}}}],["useridclaim",{"_index":646,"t":{"65":{"position":[[1255,11],[1274,11]]}}}],["userinfo",{"_index":1451,"t":{"133":{"position":[[1377,8]]}}}],["usernam",{"_index":212,"t":{"12":{"position":[[1338,8]]},"43":{"position":[[475,8]]},"47":{"position":[[416,9]]},"55":{"position":[[696,8]]},"105":{"position":[[2602,8],[4102,8],[7830,8],[7935,8],[7996,8],[8315,8],[12448,8]]},"113":{"position":[[63,8],[708,13],[1416,8],[1457,8]]},"115":{"position":[[444,13],[1488,8],[1529,8]]},"129":{"position":[[1508,8],[1646,9]]},"135":{"position":[[4698,8]]}}}],["username@email.com",{"_index":1229,"t":{"113":{"position":[[1425,18]]},"115":{"position":[[1497,18]]}}}],["usesystemtruststor",{"_index":693,"t":{"67":{"position":[[1839,19],[1864,19]]}}}],["utc",{"_index":1072,"t":{"105":{"position":[[5882,3]]}}}],["util",{"_index":679,"t":{"67":{"position":[[1200,7]]}}}],["uuid",{"_index":1223,"t":{"113":{"position":[[1217,4]]},"115":{"position":[[1080,4]]}}}],["v1",{"_index":877,"t":{"87":{"position":[[1319,2]]}}}],["v19.0.0",{"_index":1467,"t":{"135":{"position":[[1397,8]]}}}],["v2",{"_index":883,"t":{"87":{"position":[[1617,2]]},"123":{"position":[[12,2]]},"125":{"position":[[93,2]]}}}],["v2.0",{"_index":873,"t":{"87":{"position":[[1046,4],[1953,4]]}}}],["v3.0.0",{"_index":46,"t":{"2":{"position":[[616,7]]}}}],["v7.5.1",{"_index":7,"t":{"2":{"position":[[69,7]]}}}],["valid",{"_index":35,"t":{"2":{"position":[[478,9]]},"18":{"position":[[231,8]]},"20":{"position":[[189,5]]},"32":{"position":[[966,8]]},"45":{"position":[[254,5]]},"67":{"position":[[2524,10]]},"69":{"position":[[109,5]]},"77":{"position":[[691,5]]},"79":{"position":[[172,5]]},"95":{"position":[[83,5]]},"97":{"position":[[595,8]]},"101":{"position":[[573,5]]},"105":{"position":[[298,6],[14196,10],[14312,10],[14805,5],[15550,8],[15583,10],[16549,5]]},"129":{"position":[[1912,8]]},"131":{"position":[[962,9]]},"133":{"position":[[169,5],[828,8]]},"135":{"position":[[354,8],[1014,5],[2429,5],[3886,5]]},"145":{"position":[[1797,5],[1930,6],[2084,5],[2252,8]]},"149":{"position":[[757,8],[850,8]]},"153":{"position":[[1017,5]]}}}],["validateurl",{"_index":704,"t":{"67":{"position":[[2473,11],[2492,11]]}}}],["valu",{"_index":309,"t":{"20":{"position":[[437,6]]},"35":{"position":[[117,5]]},"37":{"position":[[723,6],[798,6],[1111,6],[1186,6]]},"39":{"position":[[143,5],[296,5]]},"43":{"position":[[62,5],[191,5],[292,5],[433,5],[538,6]]},"53":{"position":[[330,6],[533,6],[554,6],[582,6]]},"55":{"position":[[60,5],[110,5],[139,5],[152,5],[190,6],[337,6],[412,5],[513,5],[654,5],[759,6]]},"61":{"position":[[215,5],[224,6],[521,5],[732,5]]},"63":{"position":[[117,6],[144,6],[158,6],[174,6],[281,6],[326,6],[342,6],[412,6],[1226,5],[1235,6]]},"67":{"position":[[186,5],[319,5],[1388,5]]},"73":{"position":[[89,6],[184,5],[197,5],[235,6],[382,6]]},"79":{"position":[[250,5],[320,5],[335,5],[373,5],[481,6],[560,6],[610,5]]},"81":{"position":[[259,5]]},"87":{"position":[[1264,5]]},"105":{"position":[[38,6],[4471,5]]},"107":{"position":[[877,5]]},"113":{"position":[[979,5]]},"115":{"position":[[834,5]]},"133":{"position":[[1540,5]]},"135":{"position":[[1823,6]]},"145":{"position":[[204,5],[1206,5],[1619,5]]}}}],["values.nam",{"_index":531,"t":{"53":{"position":[[204,12]]}}}],["values/acr_valu",{"_index":412,"t":{"32":{"position":[[1041,17]]}}}],["var/www/stat",{"_index":1185,"t":{"107":{"position":[[1015,16]]}}}],["variabl",{"_index":63,"t":{"2":{"position":[[834,9]]},"32":{"position":[[61,9]]},"55":{"position":[[255,9]]},"73":{"position":[[300,9]]},"99":{"position":[[69,9],[183,9],[209,9]]},"109":{"position":[[63,8],[238,8]]},"111":{"position":[[613,10]]},"113":{"position":[[776,9],[804,8]]},"115":{"position":[[628,9],[659,8]]},"117":{"position":[[500,9],[532,8]]},"119":{"position":[[2234,9],[2870,9],[3858,8]]},"139":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"149":{"position":[[192,9]]},"157":{"position":[[189,9]]}}}],["verif",{"_index":620,"t":{"65":{"position":[[364,12],[1487,13],[1598,12]]},"81":{"position":[[1543,12]]},"105":{"position":[[6678,12],[7036,13],[7401,12],[10344,12]]}}}],["verifi",{"_index":38,"t":{"2":{"position":[[515,9]]},"47":{"position":[[294,9]]},"65":{"position":[[530,9],[1424,8]]},"105":{"position":[[3970,9],[6635,8],[6851,9],[10323,6],[13783,8],[14179,6],[14295,6]]},"129":{"position":[[1436,9]]},"135":{"position":[[3807,9]]}}}],["verifieddefault",{"_index":618,"t":{"65":{"position":[[260,15]]}}}],["verify/ssl_upstream_insecure_skip_verifi",{"_index":374,"t":{"32":{"position":[[252,40]]}}}],["version",{"_index":45,"t":{"2":{"position":[[608,7]]},"8":{"position":[[118,7]]},"12":{"position":[[117,10],[836,7]]},"16":{"position":[[679,8]]},"77":{"position":[[123,7],[404,7],[466,7]]},"105":{"position":[[14928,7],[14955,7],[15605,7],[15623,7]]},"127":{"position":[[50,7],[111,7]]},"135":{"position":[[237,8],[720,7],[857,7]]},"153":{"position":[[581,7],[670,8],[705,7],[772,8],[950,7]]}}}],["version=tls1.3",{"_index":1684,"t":{"153":{"position":[[615,15]]}}}],["via",{"_index":423,"t":{"32":{"position":[[1377,3],[1390,3]]},"61":{"position":[[382,3]]},"63":{"position":[[1397,3]]},"99":{"position":[[31,3]]},"105":{"position":[[588,3],[7480,3],[7685,3],[11104,3]]},"113":{"position":[[1027,3]]},"119":{"position":[[126,3],[1039,3],[2976,3],[3787,3]]},"123":{"position":[[78,3]]},"139":{"position":[[3308,3]]},"145":{"position":[[718,3],[2720,3]]},"149":{"position":[[161,3]]},"155":{"position":[[733,3]]}}}],["visit",{"_index":1635,"t":{"147":{"position":[[1351,8]]}}}],["visual",{"_index":148,"t":{"6":{"position":[[444,6],[488,6]]}}}],["volum",{"_index":1198,"t":{"111":{"position":[[842,7]]}}}],["vulner",{"_index":234,"t":{"16":{"position":[[37,13],[606,13]]},"18":{"position":[[75,16],[308,15]]}}}],["wait",{"_index":815,"t":{"81":{"position":[[2541,4]]},"105":{"position":[[15261,4]]}}}],["want",{"_index":130,"t":{"6":{"position":[[207,4]]},"79":{"position":[[574,4]]},"87":{"position":[[307,4]]},"107":{"position":[[759,5]]},"135":{"position":[[5395,4]]},"139":{"position":[[580,4]]},"145":{"position":[[2856,4]]},"147":{"position":[[1739,4]]},"159":{"position":[[864,4]]}}}],["warn",{"_index":338,"t":{"26":{"position":[[251,8]]},"105":{"position":[[12908,9],[16133,8]]}}}],["way",{"_index":562,"t":{"61":{"position":[[328,4]]},"129":{"position":[[217,4]]},"139":{"position":[[1086,3]]}}}],["web",{"_index":851,"t":{"87":{"position":[[266,3]]},"131":{"position":[[533,4]]},"147":{"position":[[2591,3],[3801,3],[3920,3]]}}}],["websit",{"_index":1633,"t":{"147":{"position":[[1260,7]]}}}],["websocket",{"_index":811,"t":{"81":{"position":[[2428,10]]},"105":{"position":[[9519,10],[9543,9]]}}}],["websockets/proxy_websocket",{"_index":372,"t":{"32":{"position":[[197,27]]}}}],["well",{"_index":720,"t":{"77":{"position":[[91,4]]},"105":{"position":[[3076,5],[3114,5]]},"145":{"position":[[2686,4],[2907,4],[3070,5]]}}}],["whenstream",{"_index":804,"t":{"81":{"position":[[2172,13]]}}}],["whether",{"_index":527,"t":{"51":{"position":[[380,7]]},"53":{"position":[[318,7]]},"79":{"position":[[155,7]]},"81":{"position":[[2281,7]]},"105":{"position":[[11941,7]]},"127":{"position":[[144,7]]},"149":{"position":[[241,7]]}}}],["whitelist",{"_index":1152,"t":{"105":{"position":[[15640,9],[16433,9],[16783,11]]},"159":{"position":[[953,9]]}}}],["whole",{"_index":748,"t":{"79":{"position":[[594,5]]},"123":{"position":[[236,5]]},"145":{"position":[[941,5]]}}}],["whose",{"_index":421,"t":{"32":{"position":[[1258,5]]}}}],["wide_authority_to_your_service_account",{"_index":1416,"t":{"131":{"position":[[1488,38]]}}}],["window",{"_index":824,"t":{"85":{"position":[[45,7]]}}}],["wish",{"_index":899,"t":{"91":{"position":[[95,5]]},"147":{"position":[[1839,4],[2271,4],[2364,4],[2969,4]]}}}],["within",{"_index":146,"t":{"6":{"position":[[397,6]]},"16":{"position":[[51,6]]},"26":{"position":[[131,6]]},"37":{"position":[[230,6]]},"43":{"position":[[81,6]]},"53":{"position":[[234,6]]},"73":{"position":[[112,6]]},"81":{"position":[[912,6]]},"129":{"position":[[704,6]]},"131":{"position":[[2858,6]]},"143":{"position":[[568,6]]},"147":{"position":[[4736,6]]}}}],["without",{"_index":336,"t":{"26":{"position":[[237,7]]},"37":{"position":[[307,7]]},"119":{"position":[[239,7]]},"123":{"position":[[215,7]]},"125":{"position":[[43,7]]}}}],["wizard",{"_index":829,"t":{"85":{"position":[[221,6]]}}}],["wo",{"_index":1350,"t":{"125":{"position":[[846,2],[2056,2]]}}}],["won't",{"_index":869,"t":{"87":{"position":[[897,5]]}}}],["work",{"_index":220,"t":{"14":{"position":[[61,4]]},"105":{"position":[[15509,5]]},"119":{"position":[[1560,4]]},"127":{"position":[[102,4],[546,4]]},"139":{"position":[[210,4]]},"147":{"position":[[1237,7],[1940,5],[2437,4]]}}}],["workload",{"_index":1049,"t":{"105":{"position":[[4923,8]]},"131":{"position":[[1161,8],[1181,8],[2718,8],[2738,8],[3025,8],[3076,8],[3125,8]]}}}],["workspacefold",{"_index":184,"t":{"12":{"position":[[261,21],[579,21]]}}}],["write",{"_index":1386,"t":{"129":{"position":[[1301,5]]}}}],["x",{"_index":1089,"t":{"105":{"position":[[7484,1],[7565,1],[7768,1],[7786,1],[7808,1],[8233,1],[8251,1],[8271,1],[8293,1],[9764,1],[9781,1],[9795,1],[9811,1],[11664,1],[11962,1],[11996,1],[12354,1],[12375,1],[12398,1],[12423,1],[12547,1],[13616,1]]},"113":{"position":[[897,1]]},"115":{"position":[[752,1]]},"119":{"position":[[454,1],[495,1],[596,1],[757,1],[798,1],[1043,1],[1054,1],[1267,1],[1298,1],[1477,1]]},"125":{"position":[[337,1],[2001,1],[2177,1]]},"133":{"position":[[1290,1]]},"155":{"position":[[1035,1]]},"159":{"position":[[569,1]]}}}],["x.y.z.linux",{"_index":50,"t":{"2":{"position":[[665,11]]}}}],["x509",{"_index":1518,"t":{"139":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":1090,"t":{"105":{"position":[[7538,12],[12332,12]]},"119":{"position":[[1112,12]]}}}],["xauthrequest/set_xauthrequest",{"_index":383,"t":{"32":{"position":[[502,29]]}}}],["xxx\"client_secret",{"_index":1665,"t":{"147":{"position":[[4579,18]]}}}],["xxxxx\"client_secret",{"_index":1647,"t":{"147":{"position":[[3263,20]]}}}],["yaml",{"_index":342,"t":{"26":{"position":[[464,4]]},"28":{"position":[[47,4]]},"30":{"position":[[295,4]]},"63":{"position":[[677,4]]},"123":{"position":[[288,6]]}}}],["you'd",{"_index":1385,"t":{"129":{"position":[[1167,5]]}}}],["you'r",{"_index":871,"t":{"87":{"position":[[997,6]]}}}],["yourcompany.com",{"_index":992,"t":{"105":{"position":[[1225,18]]},"135":{"position":[[3772,17]]}}}],["yourself",{"_index":750,"t":{"79":{"position":[[635,8]]}}}],["yyy\"pass_access_token",{"_index":1666,"t":{"147":{"position":[[4600,22]]}}}],["yyyyy\"pass_access_token",{"_index":1648,"t":{"147":{"position":[[3286,24]]}}}],["zero",{"_index":1115,"t":{"105":{"position":[[11333,5]]},"145":{"position":[[3358,5]]}}}],["zzz\"cookie_secur",{"_index":1667,"t":{"147":{"position":[[4645,18]]}}}],["zzzzz\"skip_provider_button",{"_index":1650,"t":{"147":{"position":[[3333,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file +[{"documents":[{"i":1,"t":"Installation","u":"/oauth2-proxy/docs/next/","b":["Docs"]},{"i":3,"t":"Contribution Guide","u":"/oauth2-proxy/docs/next/community/contribution","b":["Docs","Community"]},{"i":11,"t":"Behaviour","u":"/oauth2-proxy/docs/next/behaviour","b":["Docs"]},{"i":13,"t":"Security","u":"/oauth2-proxy/docs/next/community/security","b":["Docs","Community"]},{"i":19,"t":"Alpha Configuration","u":"/oauth2-proxy/docs/next/configuration/alpha-config","b":["Docs","Configuration"]},{"i":78,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/next/configuration/providers/","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":84,"t":"ADFS","u":"/oauth2-proxy/docs/next/configuration/providers/adfs","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":86,"t":"Microsoft Azure AD","u":"/oauth2-proxy/docs/next/configuration/providers/azure_ad","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":88,"t":"Azure","u":"/oauth2-proxy/docs/next/configuration/providers/azure","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":90,"t":"BitBucket","u":"/oauth2-proxy/docs/next/configuration/providers/bitbucket","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":92,"t":"DigitalOcean","u":"/oauth2-proxy/docs/next/configuration/providers/digitalocean","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":94,"t":"Facebook","u":"/oauth2-proxy/docs/next/configuration/providers/facebook","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":96,"t":"Gitea","u":"/oauth2-proxy/docs/next/configuration/providers/gitea","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":98,"t":"Google (default)","u":"/oauth2-proxy/docs/next/configuration/providers/google","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":100,"t":"Overview","u":"/oauth2-proxy/docs/next/configuration/overview","b":["Docs","Configuration"]},{"i":128,"t":"Keycloak OIDC","u":"/oauth2-proxy/docs/next/configuration/providers/keycloak_oidc","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":130,"t":"LinkedIn","u":"/oauth2-proxy/docs/next/configuration/providers/linkedin","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":132,"t":"GitLab","u":"/oauth2-proxy/docs/next/configuration/providers/gitlab","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":134,"t":"NextCloud","u":"/oauth2-proxy/docs/next/configuration/providers/nextcloud","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":136,"t":"Keycloak","u":"/oauth2-proxy/docs/next/configuration/providers/keycloak","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":138,"t":"GitHub","u":"/oauth2-proxy/docs/next/configuration/providers/github","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":140,"t":"Session Storage","u":"/oauth2-proxy/docs/next/configuration/session_storage","b":["Docs","Configuration"]},{"i":146,"t":"Login.gov","u":"/oauth2-proxy/docs/next/configuration/providers/login_gov","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":148,"t":"OpenID Connect","u":"/oauth2-proxy/docs/next/configuration/providers/openid_connect","b":["Docs","Configuration","OAuth Provider Configuration"]},{"i":150,"t":"Endpoints","u":"/oauth2-proxy/docs/next/features/endpoints","b":["Docs","Features"]},{"i":156,"t":"TLS Configuration","u":"/oauth2-proxy/docs/next/configuration/tls","b":["Docs","Configuration"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/1",[0,3.291]],["t/3",[1,2.479,2,2.479]],["t/11",[3,3.291]],["t/13",[4,3.291]],["t/19",[5,2.479,6,1.752]],["t/78",[6,1.406,7,1.989,8,1.989]],["t/84",[9,3.291]],["t/86",[10,1.989,11,1.637,12,1.989]],["t/88",[11,2.709]],["t/90",[13,3.291]],["t/92",[14,3.291]],["t/94",[15,3.291]],["t/96",[16,3.291]],["t/98",[17,2.479,18,2.479]],["t/100",[19,3.291]],["t/128",[20,2.041,21,2.479]],["t/130",[22,3.291]],["t/132",[23,3.291]],["t/134",[24,3.291]],["t/136",[20,2.709]],["t/138",[25,3.291]],["t/140",[26,2.479,27,2.479]],["t/146",[28,3.291]],["t/148",[29,2.479,30,2.479]],["t/150",[31,3.291]],["t/156",[6,1.752,32,2.479]]],"invertedIndex":[["ad",{"_index":12,"t":{"86":{"position":[[16,2]]}}}],["adf",{"_index":9,"t":{"84":{"position":[[0,4]]}}}],["alpha",{"_index":5,"t":{"19":{"position":[[0,5]]}}}],["azur",{"_index":11,"t":{"86":{"position":[[10,5]]},"88":{"position":[[0,5]]}}}],["behaviour",{"_index":3,"t":{"11":{"position":[[0,9]]}}}],["bitbucket",{"_index":13,"t":{"90":{"position":[[0,9]]}}}],["configur",{"_index":6,"t":{"19":{"position":[[6,13]]},"78":{"position":[[15,13]]},"156":{"position":[[4,13]]}}}],["connect",{"_index":30,"t":{"148":{"position":[[7,7]]}}}],["contribut",{"_index":1,"t":{"3":{"position":[[0,12]]}}}],["default",{"_index":18,"t":{"98":{"position":[[7,9]]}}}],["digitalocean",{"_index":14,"t":{"92":{"position":[[0,12]]}}}],["endpoint",{"_index":31,"t":{"150":{"position":[[0,9]]}}}],["facebook",{"_index":15,"t":{"94":{"position":[[0,8]]}}}],["gitea",{"_index":16,"t":{"96":{"position":[[0,5]]}}}],["github",{"_index":25,"t":{"138":{"position":[[0,6]]}}}],["gitlab",{"_index":23,"t":{"132":{"position":[[0,6]]}}}],["googl",{"_index":17,"t":{"98":{"position":[[0,6]]}}}],["guid",{"_index":2,"t":{"3":{"position":[[13,5]]}}}],["instal",{"_index":0,"t":{"1":{"position":[[0,12]]}}}],["keycloak",{"_index":20,"t":{"128":{"position":[[0,8]]},"136":{"position":[[0,8]]}}}],["linkedin",{"_index":22,"t":{"130":{"position":[[0,8]]}}}],["login.gov",{"_index":28,"t":{"146":{"position":[[0,9]]}}}],["microsoft",{"_index":10,"t":{"86":{"position":[[0,9]]}}}],["nextcloud",{"_index":24,"t":{"134":{"position":[[0,9]]}}}],["oauth",{"_index":7,"t":{"78":{"position":[[0,5]]}}}],["oidc",{"_index":21,"t":{"128":{"position":[[9,4]]}}}],["openid",{"_index":29,"t":{"148":{"position":[[0,6]]}}}],["overview",{"_index":19,"t":{"100":{"position":[[0,8]]}}}],["provid",{"_index":8,"t":{"78":{"position":[[6,8]]}}}],["secur",{"_index":4,"t":{"13":{"position":[[0,8]]}}}],["session",{"_index":26,"t":{"140":{"position":[[0,7]]}}}],["storag",{"_index":27,"t":{"140":{"position":[[8,7]]}}}],["tl",{"_index":32,"t":{"156":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":5,"t":"Go version","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":3},{"i":7,"t":"Preparing your fork","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":3},{"i":9,"t":"Testing / Debugging","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":3},{"i":15,"t":"Security Disclosures","u":"/oauth2-proxy/docs/next/community/security","h":"#security-disclosures","p":13},{"i":17,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/next/community/security","h":"#how-will-we-respond-to-disclosures","p":13},{"i":21,"t":"Using Alpha Configuration","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#using-alpha-configuration","p":19},{"i":23,"t":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":19},{"i":25,"t":"Removed options","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#removed-options","p":19},{"i":27,"t":"Configuration Reference","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#configuration-reference","p":19},{"i":28,"t":"ADFSOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#adfsoptions","p":19},{"i":30,"t":"AlphaOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#alphaoptions","p":19},{"i":32,"t":"AzureOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#azureoptions","p":19},{"i":34,"t":"BitbucketOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#bitbucketoptions","p":19},{"i":36,"t":"ClaimSource","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#claimsource","p":19},{"i":38,"t":"Duration","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#duration","p":19},{"i":40,"t":"GitHubOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#githuboptions","p":19},{"i":42,"t":"GitLabOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#gitlaboptions","p":19},{"i":44,"t":"GoogleOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#googleoptions","p":19},{"i":46,"t":"Header","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#header","p":19},{"i":48,"t":"HeaderValue","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#headervalue","p":19},{"i":50,"t":"KeycloakOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#keycloakoptions","p":19},{"i":52,"t":"LoginGovOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#logingovoptions","p":19},{"i":54,"t":"LoginURLParameter","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#loginurlparameter","p":19},{"i":56,"t":"A parameter whose value is fixed","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"","p":19},{"i":58,"t":"OIDCOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#oidcoptions","p":19},{"i":60,"t":"Provider","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#provider","p":19},{"i":62,"t":"ProviderType","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#providertype","p":19},{"i":64,"t":"Providers","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#providers","p":19},{"i":66,"t":"SecretSource","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#secretsource","p":19},{"i":68,"t":"Server","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#server","p":19},{"i":70,"t":"TLS","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#tls","p":19},{"i":72,"t":"URLParameterRule","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#urlparameterrule","p":19},{"i":74,"t":"Upstream","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#upstream","p":19},{"i":76,"t":"UpstreamConfig","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#upstreamconfig","p":19},{"i":80,"t":"Email Authentication","u":"/oauth2-proxy/docs/next/configuration/providers/","h":"#email-authentication","p":78},{"i":82,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/next/configuration/providers/","h":"#adding-a-new-provider","p":78},{"i":102,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#generating-a-cookie-secret","p":100},{"i":104,"t":"Config File","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#config-file","p":100},{"i":106,"t":"Command Line Options","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#command-line-options","p":100},{"i":108,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#upstreams-configuration","p":100},{"i":110,"t":"Environment variables","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#environment-variables","p":100},{"i":112,"t":"Logging Configuration","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#logging-configuration","p":100},{"i":114,"t":"Auth Log Format","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#auth-log-format","p":100},{"i":116,"t":"Request Log Format","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#request-log-format","p":100},{"i":118,"t":"Standard Log Format","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#standard-log-format","p":100},{"i":120,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":100},{"i":122,"t":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":100},{"i":124,"t":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":100},{"i":126,"t":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":100},{"i":142,"t":"Cookie Storage","u":"/oauth2-proxy/docs/next/configuration/session_storage","h":"#cookie-storage","p":140},{"i":144,"t":"Redis Storage","u":"/oauth2-proxy/docs/next/configuration/session_storage","h":"#redis-storage","p":140},{"i":152,"t":"Sign out","u":"/oauth2-proxy/docs/next/features/endpoints","h":"#sign-out","p":150},{"i":154,"t":"Auth","u":"/oauth2-proxy/docs/next/features/endpoints","h":"#auth","p":150},{"i":158,"t":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/next/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":156},{"i":160,"t":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/next/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":156}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/5",[0,3.673,1,3.673]],["t/7",[2,3.673,3,3.673]],["t/9",[4,3.06,5,3.06,6,3.06]],["t/15",[7,3.673,8,3.154]],["t/17",[8,3.154,9,3.673]],["t/21",[10,2.344,11,3.06,12,1.594]],["t/23",[12,1.366,13,2.622,14,2.252,15,2.622]],["t/25",[16,3.673,17,3.154]],["t/27",[12,1.913,18,3.673]],["t/28",[19,4.592]],["t/30",[20,4.592]],["t/32",[21,4.592]],["t/34",[22,4.592]],["t/36",[23,4.592]],["t/38",[24,4.592]],["t/40",[25,4.592]],["t/42",[26,4.592]],["t/44",[27,4.592]],["t/46",[28,4.592]],["t/48",[29,4.592]],["t/50",[30,4.592]],["t/52",[31,4.592]],["t/54",[32,4.592]],["t/56",[33,2.622,34,2.622,35,2.622,36,2.622]],["t/58",[37,4.592]],["t/60",[38,3.517]],["t/62",[39,4.592]],["t/64",[38,3.517]],["t/66",[40,4.592]],["t/68",[41,4.592]],["t/70",[42,3.517]],["t/72",[43,4.592]],["t/74",[44,3.517]],["t/76",[45,4.592]],["t/80",[46,3.673,47,3.673]],["t/82",[14,2.628,38,2.344,48,3.06]],["t/102",[49,3.06,50,2.628,51,3.06]],["t/104",[52,3.673,53,3.673]],["t/106",[17,2.628,54,3.06,55,3.06]],["t/108",[12,1.913,44,2.813]],["t/110",[56,3.673,57,3.673]],["t/112",[12,1.913,58,2.558]],["t/114",[58,2.131,59,2.628,60,2.344]],["t/116",[58,2.131,60,2.344,61,3.06]],["t/118",[58,2.131,60,2.344,62,3.06]],["t/120",[10,1.757,12,1.195,63,1.971,64,2.294,65,2.294]],["t/122",[10,1.562,12,1.062,66,2.039,67,2.039,68,1.562,69,1.751]],["t/124",[68,2.009,69,2.252,70,2.622,71,2.622]],["t/126",[12,1.366,44,2.009,68,2.009,72,2.622]],["t/142",[50,3.154,73,3.154]],["t/144",[73,3.154,74,3.673]],["t/152",[75,3.673,76,3.673]],["t/154",[59,3.944]],["t/158",[42,2.009,77,2.252,78,2.622,79,2.252]],["t/160",[42,1.562,63,1.751,77,1.751,79,1.751,80,2.039,81,2.039]]],"invertedIndex":[["",{"_index":5,"t":{"9":{"position":[[8,1]]}}}],["401",{"_index":70,"t":{"124":{"position":[[17,3]]}}}],["ad",{"_index":48,"t":{"82":{"position":[[0,6]]}}}],["adfsopt",{"_index":19,"t":{"28":{"position":[[0,11]]}}}],["alpha",{"_index":11,"t":{"21":{"position":[[6,5]]}}}],["alphaopt",{"_index":20,"t":{"30":{"position":[[0,12]]}}}],["auth",{"_index":59,"t":{"114":{"position":[[0,4]]},"154":{"position":[[0,4]]}}}],["auth_request",{"_index":64,"t":{"120":{"position":[[35,12]]}}}],["authent",{"_index":47,"t":{"80":{"position":[[6,14]]}}}],["azureopt",{"_index":21,"t":{"32":{"position":[[0,12]]}}}],["bitbucketopt",{"_index":22,"t":{"34":{"position":[[0,16]]}}}],["claimsourc",{"_index":23,"t":{"36":{"position":[[0,11]]}}}],["command",{"_index":54,"t":{"106":{"position":[[0,7]]}}}],["config",{"_index":52,"t":{"104":{"position":[[0,6]]}}}],["configur",{"_index":12,"t":{"21":{"position":[[12,13]]},"23":{"position":[[11,13]]},"27":{"position":[[0,13]]},"108":{"position":[[10,13]]},"112":{"position":[[8,13]]},"120":{"position":[[0,11]]},"122":{"position":[[0,11]]},"126":{"position":[[34,13]]}}}],["convert",{"_index":13,"t":{"23":{"position":[[0,10]]}}}],["cooki",{"_index":50,"t":{"102":{"position":[[13,6]]},"142":{"position":[[0,6]]}}}],["debug",{"_index":6,"t":{"9":{"position":[[10,9]]}}}],["direct",{"_index":65,"t":{"120":{"position":[[48,9]]}}}],["disclosur",{"_index":8,"t":{"15":{"position":[[9,11]]},"17":{"position":[[23,12]]}}}],["durat",{"_index":24,"t":{"38":{"position":[[0,8]]}}}],["e.g",{"_index":81,"t":{"160":{"position":[[32,4]]}}}],["email",{"_index":46,"t":{"80":{"position":[[0,5]]}}}],["environ",{"_index":56,"t":{"110":{"position":[[0,11]]}}}],["error",{"_index":71,"t":{"124":{"position":[[21,6]]}}}],["file",{"_index":53,"t":{"104":{"position":[[7,4]]}}}],["fix",{"_index":36,"t":{"56":{"position":[[27,5]]}}}],["fork",{"_index":3,"t":{"7":{"position":[[15,4]]}}}],["format",{"_index":60,"t":{"114":{"position":[[9,6]]},"116":{"position":[[12,6]]},"118":{"position":[[13,6]]}}}],["forwardauth",{"_index":68,"t":{"122":{"position":[[42,11]]},"124":{"position":[[0,11]]},"126":{"position":[[0,11]]}}}],["gener",{"_index":49,"t":{"102":{"position":[[0,10]]}}}],["githubopt",{"_index":25,"t":{"40":{"position":[[0,13]]}}}],["gitlabopt",{"_index":26,"t":{"42":{"position":[[0,13]]}}}],["go",{"_index":0,"t":{"5":{"position":[[0,2]]}}}],["googleopt",{"_index":27,"t":{"44":{"position":[[0,13]]}}}],["header",{"_index":28,"t":{"46":{"position":[[0,6]]}}}],["headervalu",{"_index":29,"t":{"48":{"position":[[0,11]]}}}],["keycloakopt",{"_index":30,"t":{"50":{"position":[[0,15]]}}}],["line",{"_index":55,"t":{"106":{"position":[[8,4]]}}}],["log",{"_index":58,"t":{"112":{"position":[[0,7]]},"114":{"position":[[5,3]]},"116":{"position":[[8,3]]},"118":{"position":[[9,3]]}}}],["logingovopt",{"_index":31,"t":{"52":{"position":[[0,15]]}}}],["loginurlparamet",{"_index":32,"t":{"54":{"position":[[0,17]]}}}],["middlewar",{"_index":69,"t":{"122":{"position":[[54,10]]},"124":{"position":[[28,10]]}}}],["new",{"_index":14,"t":{"23":{"position":[[32,3]]},"82":{"position":[[9,3]]}}}],["nginx",{"_index":63,"t":{"120":{"position":[[29,5]]},"160":{"position":[[37,5]]}}}],["oauth2",{"_index":78,"t":{"158":{"position":[[17,6]]}}}],["oidcopt",{"_index":37,"t":{"58":{"position":[[0,11]]}}}],["option",{"_index":17,"t":{"25":{"position":[[8,7]]},"106":{"position":[[13,7]]}}}],["out",{"_index":76,"t":{"152":{"position":[[5,3]]}}}],["paramet",{"_index":33,"t":{"56":{"position":[[2,9]]}}}],["prepar",{"_index":2,"t":{"7":{"position":[[0,9]]}}}],["provid",{"_index":38,"t":{"60":{"position":[[0,8]]},"64":{"position":[[0,9]]},"82":{"position":[[13,8]]}}}],["providertyp",{"_index":39,"t":{"62":{"position":[[0,12]]}}}],["proxi",{"_index":79,"t":{"158":{"position":[[24,5]]},"160":{"position":[[25,6]]}}}],["redi",{"_index":74,"t":{"144":{"position":[[0,5]]}}}],["refer",{"_index":18,"t":{"27":{"position":[[14,9]]}}}],["remov",{"_index":16,"t":{"25":{"position":[[0,7]]}}}],["request",{"_index":61,"t":{"116":{"position":[[0,7]]}}}],["respond",{"_index":9,"t":{"17":{"position":[[12,7]]}}}],["revers",{"_index":80,"t":{"160":{"position":[[17,7]]}}}],["secret",{"_index":51,"t":{"102":{"position":[[20,6]]}}}],["secretsourc",{"_index":40,"t":{"66":{"position":[[0,12]]}}}],["secur",{"_index":7,"t":{"15":{"position":[[0,8]]}}}],["server",{"_index":41,"t":{"68":{"position":[[0,6]]}}}],["sign",{"_index":75,"t":{"152":{"position":[[0,4]]}}}],["standard",{"_index":62,"t":{"118":{"position":[[0,8]]}}}],["static",{"_index":72,"t":{"126":{"position":[[17,6]]}}}],["storag",{"_index":73,"t":{"142":{"position":[[7,7]]},"144":{"position":[[6,7]]}}}],["structur",{"_index":15,"t":{"23":{"position":[[36,9]]}}}],["termin",{"_index":77,"t":{"158":{"position":[[0,9]]},"160":{"position":[[0,9]]}}}],["test",{"_index":4,"t":{"9":{"position":[[0,7]]}}}],["tl",{"_index":42,"t":{"70":{"position":[[0,3]]},"158":{"position":[[10,3]]},"160":{"position":[[10,3]]}}}],["traefik",{"_index":66,"t":{"122":{"position":[[29,7]]}}}],["upstream",{"_index":44,"t":{"74":{"position":[[0,8]]},"108":{"position":[[0,9]]},"126":{"position":[[24,9]]}}}],["upstreamconfig",{"_index":45,"t":{"76":{"position":[[0,14]]}}}],["urlparameterrul",{"_index":43,"t":{"72":{"position":[[0,16]]}}}],["us",{"_index":10,"t":{"21":{"position":[[0,5]]},"120":{"position":[[16,3]]},"122":{"position":[[16,3]]}}}],["v2",{"_index":67,"t":{"122":{"position":[[37,4]]}}}],["valu",{"_index":35,"t":{"56":{"position":[[18,5]]}}}],["variabl",{"_index":57,"t":{"110":{"position":[[12,9]]}}}],["version",{"_index":1,"t":{"5":{"position":[[3,7]]}}}],["whose",{"_index":34,"t":{"56":{"position":[[12,5]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":2,"t":"Choose how to deploy: a. Using a Prebuilt Binary (current release is v7.5.1) b. Using Go to install the latest release $ go install github.com/oauth2-proxy/oauth2-proxy/v7@latest# which will put the binary in `$GOROOT/bin` c. Using a Prebuilt Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available) d. Using a Pre-Release Nightly Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available) e. Using the official Kubernetes manifest (Helm) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. $ sha256sum -c sha256sum.txtoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind an SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/next/","h":"","p":1},{"i":4,"t":"We track bugs and issues using Github. If you find a bug, please open an Issue. When opening an Issue or Pull Request please follow the preconfigured template and take special note of the checkboxes. If you want to fix a bug, add a new feature or extend existing functionality, please create a fork, create a feature branch and open a PR back to this repo. Please mention open bug issue number(s) within your PR if applicable. We suggest using Visual Studio Code with the official Go for Visual Studio Code extension.","s":"Contribution Guide","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":3},{"i":6,"t":"This project is currently still using go 1.19. You can follow the installation guide for go here. And you can find go version 1.19 in the archived section here.","s":"Go version","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":3},{"i":8,"t":"Clone your fork, create a feature branch and update the depedencies to get started. git clone git@github.com:/oauth2-proxycd oauth2-proxygit branch feature/git push --set-upstream origin feature/go mod download","s":"Preparing your fork","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":3},{"i":10,"t":"For starting oauth2-proxy locally open the debugging tab and create the launch.json and select Go: Launch Package. { \"version\": \"0.2.0\", \"configurations\": [ { \"name\": \"Launch OAuth2-Proxy with Dex\", \"type\": \"go\", \"request\": \"launch\", \"mode\": \"auto\", \"program\": \"${workspaceFolder}\", \"args\": [ \"--config\", // The following configuration contains settings for a locally deployed // upstream and dex as an idetity provider \"contrib/local-environment/oauth2-proxy.cfg\" ] }, { \"name\": \"Launch OAuth2-Proxy with Keycloak\", \"type\": \"go\", \"request\": \"launch\", \"mode\": \"auto\", \"program\": \"${workspaceFolder}\", \"args\": [ \"--config\", // The following configuration contains settings for a locally deployed // upstream and keycloak as an idetity provider \"contrib/local-environment/oauth2-proxy-keycloak.cfg\" ] } ]} Before you can start your local version of oauth2-proxy, you will have to use the provided docker compose files to start a local upstream service and identity provider. We suggest using httpbin as your upstream for testing as it allows for request and response introspection of all things HTTP. Open a terminal and switch to the contrib/local-environment directory. Dex as your IdP: docker compose -f docker-compose.yaml up dex etcd httpbin Keycloak as your IdP: docker compose -f docker-compose-keycloak.yaml up keycloak httpbin The username for both is admin@example.com and password is password. Start oauth2-proxy from the debug tab and open http://oauth2-proxy.localtest.me:4180/ for testing.","s":"Testing / Debugging","u":"/oauth2-proxy/docs/next/community/contribution","h":"","p":3},{"i":12,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/next/behaviour","h":"","p":11},{"i":14,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/next/community/security","h":"","p":13},{"i":16,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/next/community/security","h":"#security-disclosures","p":13},{"i":18,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/next/community/security","h":"#how-will-we-respond-to-disclosures","p":13},{"i":20,"t":"danger This page contains documentation for alpha features. We reserve the right to make breaking changes to the features detailed within this page with no notice. Options described in this page may be changed, removed, renamed or moved without prior warning. Please beware of this before you use alpha configuration options. This page details a set of alpha configuration options in a new format. Going forward we are intending to add structured configuration in YAML format to replace the existing TOML based configuration file and flags. Below is a reference for the structure of the configuration, with AlphaOptions as the root of the configuration. When using alpha configuration, your config file will look something like below: upstreams: - id: ... ...: ...injectRequestHeaders: - name: ... ...: ...injectResponseHeaders: - name: ... ...: ... Please browse the reference below for the structure of the new configuration format.","s":"Alpha Configuration","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"","p":19},{"i":22,"t":"To use the new alpha configuration, generate a YAML file based on the format described in the reference below. Provide the path to this file using the --alpha-config flag. note When using the --alpha-config flag, some options are no longer available. See removed options below for more information.","s":"Using Alpha Configuration","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#using-alpha-configuration","p":19},{"i":24,"t":"Before adding the new --alpha-config option, start OAuth2 Proxy using the convert-config-to-alpha flag to convert existing configuration to the new format. oauth2-proxy --convert-config-to-alpha --config ./path/to/existing/config.cfg This will convert any options supported by the new format to YAML and print the new configuration to STDOUT. Copy this to a new file, remove any options from your existing configuration noted in removed options and then start OAuth2 Proxy using the new config. oauth2-proxy --alpha-config ./path/to/new/config.yaml --config ./path/to/existing/config.cfg","s":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":19},{"i":26,"t":"The following flags/options and their respective environment variables are no longer available when using alpha configuration: flush-interval/flush_interval pass-host-header/pass_host_header proxy-websockets/proxy_websockets ssl-upstream-insecure-skip-verify/ssl_upstream_insecure_skip_verify upstream/upstreams pass-basic-auth/pass_basic_auth pass-access-token/pass_access_token pass-user-headers/pass_user_headers pass-authorization-header/pass_authorization_header set-basic-auth/set_basic_auth set-xauthrequest/set_xauthrequest set-authorization-header/set_authorization_header prefer-email-to-user/prefer_email_to_user basic-auth-password/basic_auth_password skip-auth-strip-headers/skip_auth_strip_headers client-id/client_id client-secret/client_secret, and client-secret-file/client_secret_file provider provider-display-name/provider_display_name provider-ca-file/provider_ca_files login-url/login_url redeem-url/redeem_url profile-url/profile_url resource validate-url/validate_url scope prompt approval-prompt/approval_prompt acr-values/acr_values user-id-claim/user_id_claim allowed-group/allowed_groups allowed-role/allowed_roles jwt-key/jwt_key jwt-key-file/jwt_key_file pubjwk-url/pubjwk_url and all provider-specific options, i.e. any option whose name includes oidc, azure, bitbucket, github, gitlab, google or keycloak. Attempting to use any of these options via flags or via config when --alpha-config is set will result in an error. info You must remove these options before starting OAuth2 Proxy with --alpha-config","s":"Removed options","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#removed-options","p":19},{"i":29,"t":"(Appears on: Provider) Field Type Description skipScope bool Skip adding the scope parameter in login requestDefault value is 'false'","s":"ADFSOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#adfsoptions","p":19},{"i":31,"t":"AlphaOptions contains alpha structured configuration options. Usage of these options allows users to access alpha features that are not available as part of the primary configuration structure for OAuth2 Proxy. danger The options within this structure are considered alpha. They may change between releases without notice. Field Type Description upstreamConfig UpstreamConfig UpstreamConfig is used to configure upstream servers.Once a user is authenticated, requests to the server will be proxied tothese upstream servers based on the path mappings defined in this list. injectRequestHeaders []Header InjectRequestHeaders is used to configure headers that should be addedto requests to upstream servers.Headers may source values from either the authenticated user's sessionor from a static secret value. injectResponseHeaders []Header InjectResponseHeaders is used to configure headers that should be addedto responses from the proxy.This is typically used when using the proxy as an external authenticationprovider in conjunction with another proxy such as NGINX and itsauth_request module.Headers may source values from either the authenticated user's sessionor from a static secret value. server Server Server is used to configure the HTTP(S) server for the proxy application.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. metricsServer Server MetricsServer is used to configure the HTTP(S) server for metrics.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. providers Providers Providers is used to configure multiple providers.","s":"AlphaOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#alphaoptions","p":19},{"i":33,"t":"(Appears on: Provider) Field Type Description tenant string Tenant directs to a tenant-specific or common (tenant-independent) endpointDefault value is 'common' graphGroupField string GraphGroupField configures the group field to be used when building the groups list from Microsoft GraphDefault value is 'id'","s":"AzureOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#azureoptions","p":19},{"i":35,"t":"(Appears on: Provider) Field Type Description team string Team sets restrict logins to members of this team repository string Repository sets restrict logins to user with access to this repository","s":"BitbucketOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#bitbucketoptions","p":19},{"i":37,"t":"(Appears on: HeaderValue) ClaimSource allows loading a header value from a claim within the session Field Type Description claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"ClaimSource","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#claimsource","p":19},{"i":39,"t":"(string alias)​ (Appears on: Upstream) Duration is as string representation of a period of time. A duration string is a is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\", \"-1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".","s":"Duration","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#duration","p":19},{"i":41,"t":"(Appears on: Provider) Field Type Description org string Org sets restrict logins to members of this organisation team string Team sets restrict logins to members of this team repo string Repo sets restrict logins to collaborators of this repository token string Token is the token to use when verifying repository collaboratorsit must have push access to the repository users []string Users allows users with these usernames to logineven if they do not belong to the specified org and team or collaborators","s":"GitHubOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#githuboptions","p":19},{"i":43,"t":"(Appears on: Provider) Field Type Description group []string Group sets restrict logins to members of this group projects []string Projects restricts logins to members of these projects","s":"GitLabOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#gitlaboptions","p":19},{"i":45,"t":"(Appears on: Provider) Field Type Description group []string Groups sets restrict logins to members of this Google group adminEmail string AdminEmail is the Google admin to impersonate for api calls serviceAccountJson string ServiceAccountJSON is the path to the service account json credentials useApplicationDefaultCredentials bool UseApplicationDefaultCredentials is a boolean whether to use Application Default Credentials instead of a ServiceAccountJSON targetPrincipal string TargetPrincipal is the Google Service Account used for Application Default Credentials","s":"GoogleOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#googleoptions","p":19},{"i":47,"t":"(Appears on: AlphaOptions) Header represents an individual header that will be added to a request or response header. Field Type Description name string Name is the header name to be used for this set of values.Names should be unique within a list of Headers. preserveRequestValue bool PreserveRequestValue determines whether any values for this headershould be preserved for the request to the upstream server.This option only applies to injected request headers.Defaults to false (headers that match this header will be stripped). values []HeaderValue Values contains the desired values for this header","s":"Header","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#header","p":19},{"i":49,"t":"(Appears on: Header) HeaderValue represents a single header value and the sources that can make up the header value Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value. claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"HeaderValue","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#headervalue","p":19},{"i":51,"t":"(Appears on: Provider) Field Type Description groups []string Group enables to restrict login to members of indicated group roles []string Role enables to restrict login to users with role (only available when using the keycloak-oidc provider)","s":"KeycloakOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#keycloakoptions","p":19},{"i":53,"t":"(Appears on: Provider) Field Type Description jwtKey string JWTKey is a private key in PEM format used to sign JWT, jwtKeyFile string JWTKeyFile is a path to the private key file in PEM format used to sign the JWT pubjwkURL string PubJWKURL is the JWK pubkey access endpoint","s":"LoginGovOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#logingovoptions","p":19},{"i":55,"t":"(Appears on: Provider) LoginURLParameter is the configuration for a single query parameter that can be passed through from the /oauth2/start endpoint to the IdP login URL. The \"default\" option specifies the default value or values (if any) that will be passed to the IdP for this parameter, and \"allow\" is a list of options for ways in which this parameter can be set or overridden via the query string to /oauth2/start. If only a default is specified and no \"allow\" then the parameter is effectively fixed - the default value will always be used and anything passed to the start URL will be ignored. If only \"allow\" is specified but no default then the parameter will only be passed on to the IdP if the caller provides it, and no value will be sent otherwise. Examples:","s":"LoginURLParameter","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#loginurlparameter","p":19},{"i":57,"t":"name: organizationdefault:- myorg A parameter that is not passed by default, but may be set to one of a fixed set of values name: promptallow:- value: login- value: consent- value: select_account A parameter that is passed by default but may be overridden by one of a fixed set of values name: promptdefault: [\"login\"]allow:- value: consent- value: select_account A parameter that may be overridden, but only by values that match a regular expression. For example to restrict login_hint to email addresses in your organization's domain: name: login_hintallow:- pattern: '^[^@]*@example\\.com$'# this allows at most one \"@\" sign, and requires \"example.com\" domain. Note that the YAML rules around exactly which characters are allowed and/or require escaping in different types of string literals are convoluted. For regular expressions the single quoted form is simplest as backslash is not considered to be an escape character. Alternatively use the \"chomped block\" format |-: - pattern: |- ^[^@]*@example\\.com$ The hyphen is important, a | block would have a trailing newline character. Field Type Description name string Name specifies the name of the query parameter. default []string (Optional) Default specifies a default value or values that will bepassed to the IdP if not overridden. allow []URLParameterRule (Optional) Allow specifies rules about how the default (if any) may beoverridden via the query string to /oauth2/start. Onlyvalues that match one or more of the allow rules will beforwarded to the IdP.","s":"A parameter whose value is fixed","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"","p":19},{"i":59,"t":"(Appears on: Provider) Field Type Description issuerURL string IssuerURL is the OpenID Connect issuer URLeg: https://accounts.google.com insecureAllowUnverifiedEmail bool InsecureAllowUnverifiedEmail prevents failures if an email address in an id_token is not verifieddefault set to 'false' insecureSkipIssuerVerification bool InsecureSkipIssuerVerification skips verification of ID token issuers. When false, ID Token Issuers must match the OIDC discovery URLdefault set to 'false' insecureSkipNonce bool InsecureSkipNonce skips verifying the ID Token's nonce claim that must matchthe random nonce sent in the initial OAuth flow. Otherwise, the nonce is checkedafter the initial OAuth redeem & subsequent token refreshes.default set to 'true'Warning: In a future release, this will change to 'false' by default for enhanced security. skipDiscovery bool SkipDiscovery allows to skip OIDC discovery and use manually supplied Endpointsdefault set to 'false' jwksURL string JwksURL is the OpenID Connect JWKS URLeg: https://www.googleapis.com/oauth2/v3/certs emailClaim string EmailClaim indicates which claim contains the user email,default set to 'email' groupsClaim string GroupsClaim indicates which claim contains the user groupsdefault set to 'groups' userIDClaim string UserIDClaim indicates which claim contains the user IDdefault set to 'email' audienceClaims []string AudienceClaim allows to define any claim that is verified against the client idBy default aud claim is used for verification. extraAudiences []string ExtraAudiences is a list of additional audiences that are allowedto pass verification in addition to the client id.","s":"OIDCOptions","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#oidcoptions","p":19},{"i":61,"t":"(Appears on: Providers) Provider holds all configuration for a single provider Field Type Description clientID string ClientID is the OAuth Client ID that is defined in the providerThis value is required for all providers. clientSecret string ClientSecret is the OAuth Client Secret that is defined in the providerThis value is required for all providers. clientSecretFile string ClientSecretFile is the name of the filecontaining the OAuth Client Secret, it will be used if ClientSecret is not set. keycloakConfig KeycloakOptions KeycloakConfig holds all configurations for Keycloak provider. azureConfig AzureOptions AzureConfig holds all configurations for Azure provider. ADFSConfig ADFSOptions ADFSConfig holds all configurations for ADFS provider. bitbucketConfig BitbucketOptions BitbucketConfig holds all configurations for Bitbucket provider. githubConfig GitHubOptions GitHubConfig holds all configurations for GitHubC provider. gitlabConfig GitLabOptions GitLabConfig holds all configurations for GitLab provider. googleConfig GoogleOptions GoogleConfig holds all configurations for Google provider. oidcConfig OIDCOptions OIDCConfig holds all configurations for OIDC provideror providers utilize OIDC configurations. loginGovConfig LoginGovOptions LoginGovConfig holds all configurations for LoginGov provider. id string ID should be a unique identifier for the provider.This value is required for all providers. provider ProviderType Type is the OAuth providermust be set from the supported providers group,otherwise 'Google' is set as default name string Name is the providers display nameif set, it will be shown to the users in the login page. caFiles []string CAFiles is a list of paths to CA certificates that should be used when connecting to the provider.If not specified, the default Go trust sources are used instead useSystemTrustStore bool UseSystemTrustStore determines if your custom CA files and the system trust store are usedIf set to true, your custom CA files and the system trust store are used otherwise only your custom CA files. loginURL string LoginURL is the authentication endpoint loginURLParameters []LoginURLParameter LoginURLParameters defines the parameters that can be passed from the start URL to the IdP login URL redeemURL string RedeemURL is the token redemption endpoint profileURL string ProfileURL is the profile access endpoint resource string ProtectedResource is the resource that is protected (Azure AD and ADFS only) validateURL string ValidateURL is the access token validation endpoint scope string Scope is the OAuth scope specification allowedGroups []string AllowedGroups is a list of restrict logins to members of this group code_challenge_method string The code challenge method","s":"Provider","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#provider","p":19},{"i":63,"t":"(string alias)​ (Appears on: Provider) ProviderType is used to enumerate the different provider type options Valid options are: adfs, azure, bitbucket, digitalocean facebook, github, gitlab, google, keycloak, keycloak-oidc, linkedin, login.gov, nextcloud and oidc.","s":"ProviderType","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#providertype","p":19},{"i":65,"t":"([]Provider alias)​ (Appears on: AlphaOptions) Providers is a collection of definitions for providers.","s":"Providers","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#providers","p":19},{"i":67,"t":"(Appears on: ClaimSource, HeaderValue, TLS) SecretSource references an individual secret value. Only one source within the struct should be defined at any time. Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value.","s":"SecretSource","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#secretsource","p":19},{"i":69,"t":"(Appears on: AlphaOptions) Server represents the configuration for an HTTP(S) server Field Type Description BindAddress string BindAddress is the address on which to serve traffic.Leave blank or set to \"-\" to disable. SecureBindAddress string SecureBindAddress is the address on which to serve secure traffic.Leave blank or set to \"-\" to disable. TLS TLS TLS contains the information for loading the certificate and key for thesecure traffic and further configuration for the TLS server.","s":"Server","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#server","p":19},{"i":71,"t":"(Appears on: Server) TLS contains the information for loading a TLS certificate and key as well as an optional minimal TLS version that is acceptable. Field Type Description Key SecretSource Key is the TLS key data to use.Typically this will come from a file. Cert SecretSource Cert is the TLS certificate data to use.Typically this will come from a file. MinVersion string MinVersion is the minimal TLS version that is acceptable.E.g. Set to \"TLS1.3\" to select TLS version 1.3 CipherSuites []string CipherSuites is a list of TLS cipher suites that are allowed.E.g.:- TLS_RSA_WITH_RC4_128_SHA- TLS_RSA_WITH_AES_256_GCM_SHA384If not specified, the default Go safe cipher list is used.List of valid cipher suites can be found in the crypto/tls documentation.","s":"TLS","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#tls","p":19},{"i":73,"t":"(Appears on: LoginURLParameter) URLParameterRule represents a rule by which query parameters passed to the /oauth2/start endpoint are checked to determine whether they are valid overrides for the given parameter passed to the IdP's login URL. Either Value or Pattern should be supplied, not both. Field Type Description value string A Value rule matches just this specific value pattern string A Pattern rule gives a regular expression that must be matched bysome substring of the value. The expression is not automaticallyanchored to the start and end of the value, if you want to restrictthe whole parameter value you must anchor it yourself with ^ and $.","s":"URLParameterRule","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#urlparameterrule","p":19},{"i":75,"t":"(Appears on: UpstreamConfig) Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path. Field Type Description id string ID should be a unique identifier for the upstream.This value is required for all upstreams. path string Path is used to map requests to the upstream server.The closest match will take precedence and all Paths must be unique.Path can also take a pattern when used with RewriteTarget.Path segments can be captured and matched using regular experessions.Eg:- ^/foo$: Match only the explicit path /foo- ^/bar/$: Match any path prefixed with /bar/- ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget rewriteTarget string RewriteTarget allows users to rewrite the request path before it is sent tothe upstream server.Use the Path to capture segments for reuse within the rewrite target.Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewritethe request /baz/abc/123 to /foo/abc/123 before proxying to theupstream server. uri string The URI of the upstream server. This may be an HTTP(S) server of a Filebased URL. It may include a path, in which case all requests will be servedunder that path.Eg:- http://localhost:8080- https://service.localhost- https://service.localhost/path- file://host/pathIf the URI's path is \"/base\" and the incoming request was for \"/dir\",the upstream request will be for \"/base/dir\". insecureSkipTLSVerify bool InsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.This option is insecure and will allow potential Man-In-The-Middle attacksbetween OAuth2 Proxy and the upstream server.Defaults to false. static bool Static will make all requests to this upstream have a static response.The response will have a body of \"Authenticated\" and a response codematching StaticCode.If StaticCode is not set, the response will return a 200 response. staticCode int StaticCode determines the response code for the Static response.This option can only be used with Static enabled. flushInterval Duration FlushInterval is the period between flushing the response buffer whenstreaming response from the upstream.Defaults to 1 second. passHostHeader bool PassHostHeader determines whether the request host header should be proxiedto the upstream server.Defaults to true. proxyWebSockets bool ProxyWebSockets enables proxying of websockets to upstream serversDefaults to true. timeout Duration Timeout is the maximum duration the server will wait for a response from the upstream server.Defaults to 30 seconds.","s":"Upstream","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#upstream","p":19},{"i":77,"t":"(Appears on: AlphaOptions) UpstreamConfig is a collection of definitions for upstream servers. Field Type Description proxyRawPath bool ProxyRawPath will pass the raw url path to upstream allowing for urlslike: \"/%2F/\" which would otherwise be redirected to \"/\" upstreams []Upstream Upstreams represents the configuration for the upstream servers.Requests will be proxied to this upstream if the path matches the request path.","s":"UpstreamConfig","u":"/oauth2-proxy/docs/next/configuration/alpha-config","h":"#upstreamconfig","p":19},{"i":79,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure ADFS Facebook GitHub Gitea Keycloak/Keycloak OIDC GitLab LinkedIn Microsoft Azure AD OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/next/configuration/providers/","h":"","p":78},{"i":81,"t":"To authorize a specific email-domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/next/configuration/providers/","h":"#email-authentication","p":78},{"i":83,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/next/configuration/providers/","h":"#adding-a-new-provider","p":78},{"i":85,"t":"Open the ADFS administration console on your Windows Server and add a new Application Group Provide a name for the integration, select Server Application from the Standalone applications section and click Next Follow the wizard to get the client-id, client-secret and configure the application credentials Configure the proxy with --provider=adfs --client-id= --client-secret= Note: When using the ADFS Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"ADFS","u":"/oauth2-proxy/docs/next/configuration/providers/adfs","h":"","p":84},{"i":87,"t":"For adding an application to the Microsoft Azure AD follow these steps to add an application. Take note of your TenantId if applicable for your situation. The TenantId can be used to override the default common authorization server with a tenant specific server.","s":"Microsoft Azure AD","u":"/oauth2-proxy/docs/next/configuration/providers/azure_ad","h":"","p":86},{"i":89,"t":"Add an application: go to https://portal.azure.com, choose Azure Active Directory, select App registrations and then click on New registration. Pick a name, check the supported account type(single-tenant, multi-tenant, etc). In the Redirect URI section create a new Web platform entry for each app that you want to protect by the oauth2 proxy(e.g. https://internal.yourcompanycom/oauth2/callback). Click Register. Next we need to add group read permissions for the app registration, on the API Permissions page of the app, click on Add a permission, select Microsoft Graph, then select Application permissions, then click on Group and select Group.Read.All. Hit Add permissions and then on Grant admin consent (you might need an admin to do this).**IMPORTANT**: Even if this permission is listed with **\"Admin consent required=No\"** the consent might actually be required, due to AAD policies you won't be able to see. If you get a **\"Need admin approval\"** during login, most likely this is what you're missing! Next, if you are planning to use v2.0 Azure Auth endpoint, go to the Manifest page and set \"accessTokenAcceptedVersion\": 2 in the App registration manifest file. On the Certificates & secrets page of the app, add a new client secret and note down the value after hitting Add. Configure the proxy with: for V1 Azure Auth endpoint (Azure Active Directory Endpoints - https://login.microsoftonline.com/common/oauth2/authorize) --provider=azure --client-id= --client-secret= --azure-tenant={tenant-id} --oidc-issuer-url=https://sts.windows.net/{tenant-id}/ for V2 Azure Auth endpoint (Microsoft Identity Platform Endpoints - https://login.microsoftonline.com/common/oauth2/v2.0/authorize) --provider=azure --client-id= --client-secret= --azure-tenant={tenant-id} --oidc-issuer-url=https://login.microsoftonline.com/{tenant-id}/v2.0 Notes: When using v2.0 Azure Auth endpoint (https://login.microsoftonline.com/{tenant-id}/v2.0) as --oidc_issuer_url, in conjunction with --resource flag, be sure to append /.default at the end of the resource name. See https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent#the-default-scope for more details. When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure","u":"/oauth2-proxy/docs/next/configuration/providers/azure","h":"","p":88},{"i":91,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who have access to one selected repository use --bitbucket-repository=.","s":"BitBucket","u":"/oauth2-proxy/docs/next/configuration/providers/bitbucket","h":"","p":90},{"i":93,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean","u":"/oauth2-proxy/docs/next/configuration/providers/digitalocean","h":"","p":92},{"i":95,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook","u":"/oauth2-proxy/docs/next/configuration/providers/facebook","h":"","p":94},{"i":97,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1/user/emails\"","s":"Gitea","u":"/oauth2-proxy/docs/next/configuration/providers/gitea","h":"","p":96},{"i":99,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"APIs & Services\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account and configure it to use Application Default Credentials / Workload Identity / Workload Identity Federation (recommended) or, alternatively download the JSON. Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. (Only if using a JSON file (see step 1)) 9. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. 10. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ). Using Application Default Credentials (ADC) / Workload Identity / Workload Identity Federation (recommended)​ oauth2-proxy can make use of Application Default Credentials. When deployed within GCP, this means that it can automatically use the service account attached to the resource. When deployed to GKE, ADC can be leveraged through a feature called Workload Identity. Follow Google's guide to set up Workload Identity. When deployed outside of GCP, Workload Identity Federation might be an option.","s":"Google (default)","u":"/oauth2-proxy/docs/next/configuration/providers/google","h":"","p":98},{"i":101,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/next/configuration/overview","h":"","p":100},{"i":103,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_' ; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#generating-a-cookie-secret","p":100},{"i":105,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#config-file","p":100},{"i":107,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --allow-query-semicolons bool allow the use of semicolons in query args (required for some legacy applications) false --api-route string | list return HTTP 401 instead of redirecting to authentication server if token is not valid. Format: path_regex --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --code-challenge-method string use PKCE code challenges with the specified method. Either 'plain' or 'S256' (recommended) --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie. If set to 0, cookie becomes a session-cookie which will expire when the browser is closed. 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --cookie-csrf-per-request bool Enable having different CSRF cookies per request, making it possible to have parallel requests. false --cookie-csrf-expire duration expire timeframe for CSRF cookie 15m --custom-templates-dir string path to custom html templates --custom-sign-in-logo string path or a URL to an custom image for the sign_in page logo. Use \"-\" to disable default logo. --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --force-json-errors bool force JSON errors instead of HTTP error pages or redirects false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --gitlab-projects string | list restrict logins to members of any of these projects (may be given multiple times) formatted as orgname/repo=accesslevel. Access level should be a value matching Gitlab access levels, defaulted to 20 if absent --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --google-use-application-default-credentials bool use application default credentials instead of service account json (i.e. GKE Workload Identity) --google-target-principal bool the target principal to impersonate when using ADC defaults to the service account configured for ADC --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -B for bcrypt encryption --htpasswd-user-group string | list the groups to be set on sessions for htpasswd users --http-address string [http://]: or unix:// to listen on for HTTP clients. Square brackets are required for ipv6 address, e.g. http://[::1]:4180 \"127.0.0.1:4180\" --https-address string [https://]: to listen on for HTTPS clients. Square brackets are required for ipv6 address, e.g. https://[::1]:443 \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --insecure-oidc-skip-nonce bool skip verifying the OIDC ID Token's nonce claim true --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --oidc-email-claim string which OIDC claim contains the user's email \"email\" --oidc-groups-claim string which OIDC claim contains the user groups \"groups\" --oidc-audience-claim string which OIDC claim contains the audience \"aud\" --oidc-extra-audience string | list additional audiences which are allowed to pass verification \"[]\" --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Groups, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --use-system-trust-store bool Determines if provider-ca-file files and the system trust store are used. If set to true, your custom CA files and the system trust store are used otherwise only your custom CA files. false --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --ready-path string the ready endpoint that can be used for deep health checks \"/ready\" --metrics-address string the address prometheus metrics will be scraped from \"\" --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --relative-redirect-url bool allow relative OAuth Redirect URL.` --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-insecure-skip-tls-verify bool skip TLS verification when connecting to Redis false --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --redis-connection-idle-timeout int Redis connection idle timeout seconds. If Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. Example: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14 0 --request-id-header string Request header to use as the request ID in logging X-Request-Id --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted and allows X-Forwarded-{Proto,Host,Uri} headers to be used on redirect selection false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Groups, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --show-debug-on-error bool show detailed error information on error pages (WARNING: this may contain sensitive information - do not use in production) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping & ready endpoints false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string | list (DEPRECATED for --skip-auth-route) bypass authentication for requests paths that match (may be given multiple times) --skip-auth-route string | list bypass authentication for requests that match the method & path. Format: method=path_regex OR method!=path_regex. For all methods: path_regex OR !=path_regex --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy true --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-cipher-suite string | list Restricts TLS cipher suites used by server to those listed (e.g. TLS_RSA_WITH_RC4_128_SHA) (may be given multiple times). If not specified, the default Go safe cipher list is used. List of valid cipher suites can be found in the crypto/tls documentation. --tls-key-file string path to private key file --tls-min-version string minimum TLS version that is acceptable, either \"TLS1.2\" or \"TLS1.3\" \"TLS1.2\" --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --upstream-timeout duration maximum amount of time the server will wait for a response from the upstream 30s --allowed-group string | list restrict logins to members of this group (may be given multiple times) --allowed-role string | list restrict logins to users with this role (may be given multiple times). Only works with the keycloak-oidc provider. --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . or a *. to allow subdomains (e.g. .example.com, *.example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. 1. Only these providers support --cookie-refresh: GitLab, Google and OIDC​ 2. When using the whitelist-domain option, any domain prefixed with a . or a *. will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URLs protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*.​ See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#command-line-options","p":100},{"i":109,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers, unix socket or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. . This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Unix socket upstreams are configured as unix:///path/to/unix.sock. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#upstreams-configuration","p":100},{"i":111,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#environment-variables","p":100},{"i":113,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default, these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) and the /ready endpoint can be disabled with --silence-ping-logging reducing log volume.","s":"Logging Configuration","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#logging-configuration","p":100},{"i":115,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Message Authenticated via OAuth2 The details of the auth attempt. Protocol HTTP/1.0 The request protocol. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details.","s":"Auth Log Format","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#auth-log-format","p":100},{"i":117,"t":"HTTP request logs will output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#request-log-format","p":100},{"i":119,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#standard-log-format","p":100},{"i":121,"t":"This option requires --reverse-proxy option to be set. The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-Uri $request_uri; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\".","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":100},{"i":123,"t":"This option requires --reverse-proxy option to be set.","s":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":100},{"i":125,"t":"The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration: http: routers: a-service: rule: \"Host(`a-service.example.com`)\" service: a-service-backend middlewares: - oauth-errors - oauth-auth tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth: rule: \"Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true oauth-errors: errors: status: - \"401-403\" service: oauth-backend query: \"/oauth2/sign_in?rd={url}\"","s":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":100},{"i":127,"t":"Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint Following options need to be set on oauth2-proxy: --upstream=static://202: Configures a static response for authenticated sessions --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly http: routers: a-service-route-1: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)\" service: a-service-backend middlewares: - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" a-service-route-2: rule: \"Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)\" service: a-service-backend middlewares: - oauth-auth-wo-redirect # unauthenticated session will return a 401 tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services-oauth2-route: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth2-proxy-route: rule: \"Host(`oauth.example.com`) && PathPrefix(`/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 b-service-backend: loadBalancer: servers: - url: http://172.16.0.3:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth-redirect: forwardAuth: address: https://oauth.example.com/ trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization oauth-auth-wo-redirect: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/next/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":100},{"i":129,"t":"--provider=keycloak-oidc --client-id= --client-secret= --redirect-url=https://internal.yourcompany.com/oauth2/callback --oidc-issuer-url=https:///realms/ // For Keycloak versions <17: --oidc-issuer-url=https:///auth/realms/ --email-domain= // Validate email domain for users, see option documentation --allowed-role= // Optional, required realm role --allowed-role=: // Optional, required client role --allowed-group= // Optional, requires group client scope --code-challenge-method=S256 // PKCE note Keycloak has updated its admin console and as of version 19.0.0, the new admin console is enabled by default. The legacy admin console has been announced for removal with the release of version 21.0.0. Keycloak legacy admin console Create new client in your Keycloak realm with Access Type 'confidential', Client protocol 'openid-connect' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Create a mapper with Mapper Type 'Audience' and Included Client Audience and Included Custom Audience set to your client name. Keycloak new admin console (default as of v19.0.0) The following example shows how to create a simple OIDC client using the new Keycloak admin2 console. However, for best practices, it is recommended to consult the Keycloak documentation. The OIDC client must be configured with an audience mapper to include the client's name in the aud claim of the JWT token. The aud claim specifies the intended recipient of the token, and OAuth2 Proxy expects a match against the values of either --client-id or --oidc-extra-audience. In Keycloak, claims are added to JWT tokens through the use of mappers at either the realm level using \"client scopes\" or through \"dedicated\" client mappers. Creating the client Create a new OIDC client in your Keycloak realm by navigating to:Clients -> Create client Client Type 'OpenID Connect' Client ID , please complete the remaining fields as appropriate and click Next. Client authentication 'On' Authentication flow Standard flow 'selected' Direct access grants 'deselect' Save the configuration. Settings / Access settings: Valid redirect URIs https://internal.yourcompany.com/oauth2/callback Save the configuration. Under the Credentials tab you will now be able to locate . Configure a dedicated audience mapper for your client by navigating to Clients -> -> Client scopes. Access the dedicated mappers pane by clicking -dedicated, located under Assigned client scope.(It should have a description of \"Dedicated scope and mappers for this client\") Click Configure a new mapper and select Audience Name 'aud-mapper-' Included Client Audience select from the dropdown. OAuth2 proxy can be set up to pass both the access and ID JWT tokens to your upstream services. If you require additional audience entries, you can use the Included Custom Audience field in addition to the \"Included Client Audience\" dropdown. Note that the \"aud\" claim of a JWT token should be limited and only specify its intended recipients. Add to ID token 'On' Add to access token 'On' - #1916 Save the configuration. Any subsequent dedicated client mappers can be defined by clicking Dedicated scopes -> Add mapper -> By configuration -> Select mapper You should now be able to create a test user in Keycloak and get access to the OAuth2 Proxy instance, make sure to set an email address matching and select Email verified. Authorization OAuth2 Proxy will perform authorization by requiring a valid user, this authorization can be extended to take into account a user's membership in Keycloak groups, realm roles, and client roles using the keycloak-oidc provider options--allowed-role or --allowed-group Roles A standard Keycloak installation comes with the required mappers for realm roles and client roles through the pre-defined client scope \"roles\". This ensures that any roles assigned to a user are included in the JWT tokens when using an OIDC client that has the \"Full scope allowed\" feature activated, the feature is enabled by default. Creating a realm role Navigate to Realm roles -> Create role Role name, -> save Creating a client role Navigate to Clients -> -> Roles -> Create role Role name, -> save Assign a role to a user Users -> Username -> Role mapping -> Assign role -> filter by roles or clients and select -> Assign. Keycloak \"realm roles\" can be authorized using the --allowed-role= option, while \"client roles\" can be evaluated using --allowed-role=:. You may limit the realm roles included in the JWT tokens for any given client by navigating to: Clients -> -> Client scopes -> -dedicated -> Scope Disabling Full scope allowed activates the Assign role option, allowing you to select which roles, if assigned to a user, will be included in the user's JWT tokens. This can be useful when a user has many associated roles, and you want to reduce the size and impact of the JWT token. Groups You may also do authorization on group memberships by using the OAuth2 Proxy option --allowed-group. We will only do a brief description of creating the required client scope groups and refer you to read the Keycloak documentation. To summarize, the steps required to authorize Keycloak group membership with OAuth2 Proxy are as follows: Create a new Client Scope with the name groups in Keycloak. Include a mapper of type Group Membership. Set the \"Token Claim Name\" to groups or customize by matching it to the --oidc-groups-claim option of OAuth2 Proxy. If the \"Full group path\" option is selected, you need to include a \"/\" separator in the group names defined in the --allowed-group option of OAuth2 Proxy. Example: \"/groupname\" or \"/groupname/child_group\". After creating the Client Scope named groups you will need to attach it to your client. Clients -> -> Client scopes -> Add client scope -> Select groups and choose Optional and you should now have a client that maps group memberships into the JWT tokens so that Oauth2 Proxy may evaluate them. Create a group by navigating to Groups -> Create group and add your test user as a member. The OAuth2 Proxy option --allowed-group=/groupname will now allow you to filter on group membership Keycloak also has the option of attaching roles to groups, please refer to the Keycloak documentation for more information. Tip To check if roles or groups are added to JWT tokens, you can preview a users token in the Keycloak console by following these steps: Clients -> -> Client scopes -> Evaluate. Select a realm user and optional scope parameters such as groups, and generate the JSON representation of an access or id token to examine its contents.","s":"Keycloak OIDC","u":"/oauth2-proxy/docs/next/configuration/providers/keycloak_oidc","h":"","p":128},{"i":131,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn","u":"/oauth2-proxy/docs/next/configuration/providers/linkedin","h":"","p":130},{"i":133,"t":"This auth provider has been tested against Gitlab version 12.X. Due to Gitlab API changes, it may not work for version prior to 12.X (see 994). Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. If you need projects filtering, add the extra read_api scope to your application. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\" If your self-hosted GitLab is on a subdirectory (e.g. domain.tld/gitlab), as opposed to its own subdomain (e.g. gitlab.domain.tld), you may need to add a redirect from domain.tld/oauth pointing at e.g. domain.tld/gitlab/oauth.","s":"GitLab","u":"/oauth2-proxy/docs/next/configuration/providers/gitlab","h":"","p":132},{"i":135,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to set up the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"NextCloud","u":"/oauth2-proxy/docs/next/configuration/providers/nextcloud","h":"","p":134},{"i":137,"t":"note This is the legacy provider for Keycloak, use Keycloak OIDC Auth Provider if possible. Create new client in your Keycloak realm with Access Type 'confidential' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: --provider=keycloak --client-id= --client-secret= --login-url=\"http(s):///auth/realms//protocol/openid-connect/auth\" --redeem-url=\"http(s):///auth/realms//protocol/openid-connect/token\" --profile-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --validate-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --keycloak-group= --keycloak-group= For group based authorization, the optional --keycloak-group (legacy) or --allowed-group (global standard) flags can be used to specify which groups to limit access to. If these are unset but a groups mapper is set up above in step (3), the provider will still populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response. The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak","u":"/oauth2-proxy/docs/next/configuration/providers/keycloak","h":"","p":136},{"i":139,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to log in even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to log in with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub","u":"/oauth2-proxy/docs/next/configuration/providers/github","h":"","p":138},{"i":141,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/next/configuration/session_storage","h":"","p":140},{"i":143,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/next/configuration/session_storage","h":"#cookie-storage","p":140},{"i":145,"t":"The Redis Storage backend stores encrypted sessions in redis. Instead of sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128-bit random number, hex-encoded The secret is a 128-bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Additionally, the browser only has to send a short Cookie with every request and not the whole JWT, which can get quite big. Two settings are used to configure the OAuth2 Proxy cookie lifetime: --cookie-refresh duration refresh the cookie after this duration; 0 to disable--cookie-expire duration expire timeframe for cookie 168h0m0s The \"cookie-expire\" value should be equal to the lifetime of the Refresh-Token that is issued by the OAuth2 authorization server. If it expires earlier and is deleted by the browser, OAuth2 Proxy cannot find the stored Refresh-Tokens in Redis and thus cannot start the refresh flow to get new Access-Tokens. If it is longer, it might be that the old Refresh-Token will be found in Redis but has already expired. The \"cookie-refresh\" value controls when OAuth2 Proxy tries to refresh an Access-Token. If it is set to \"0\", the Access-Token will never be refreshed, even it is already expired and there would be a valid Refresh-Token in the available. If set, OAuth2 Proxy will refresh the Access-Token after this many seconds even if it is still valid. Of course, it will also be refreshed after it has expired, as long as a Refresh Token is available. Caveat: It can happen that the Access-Token is valid for e.g. \"1m\" and a request happens after exactly \"59s\". It would pass OAuth2 Proxy and be forwarded to the backend but is just expired when the backend tries to validate it. This is especially relevant if the backend uses the JWT to make requests to other backends. For this reason, it's advised to set the cookie-refresh a couple of seconds less than the Access-Token lifespan. Recommended settings: cookie_refresh := Access-Token lifespan - 1m cookie_expire := Refresh-Token lifespan (i.e. Keycloak client_session_idle) Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive. Note, if Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. For example: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14","s":"Redis Storage","u":"/oauth2-proxy/docs/next/configuration/session_storage","h":"#redis-storage","p":140},{"i":147,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048-bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost'. The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"Login.gov","u":"/oauth2-proxy/docs/next/configuration/providers/login_gov","h":"","p":146},{"i":149,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex, and we will use it as an example. The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta, an example can be found below. Dex​ To configure the OIDC provider for Dex, perform the following steps: Download Dex: go get github.com/dexidp/dex See the getting started guide for more details. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Add a configuration block to the staticClients section of examples/config-dev.yaml: - id: oauth2-proxyredirectURIs:- 'http://127.0.0.1:4180/oauth2/callback'name: 'oauth2-proxy'secret: proxy Launch Dex: from $GOPATH/github.com/dexidp/dex, run: bin/dex serve examples/config-dev.yaml In a second terminal, run the oauth2-proxy with the following args: -provider oidc-provider-display-name \"My OIDC Provider\"-client-id oauth2-proxy-client-secret proxy-redirect-url http://127.0.0.1:4180/oauth2/callback-oidc-issuer-url http://127.0.0.1:5556/dex-cookie-secure=false-cookie-secret=secret-email-domain kilgore.trout To serve the current working directory as a website under the /static endpoint, add: -upstream file://$PWD/#/static/ Test the setup by visiting http://127.0.0.1:4180 or http://127.0.0.1:4180/static . See also our local testing environment for a self-contained example using Docker and etcd as storage for Dex. Okta​ To configure the OIDC provider for Okta, perform the following steps: Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com. The client_id and client_secret are configured in the application settings. Generate a unique cookie_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect","u":"/oauth2-proxy/docs/next/configuration/providers/openid_connect","h":"","p":148},{"i":151,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /ready - returns a 200 OK response if all the underlying connections (e.g., Redis store) are connected /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default /oauth2/sign_in - the login page, which also doubles as a sign-out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive /oauth2/static/* - stylesheets and other dependencies used in the sign_in and error pages","s":"Endpoints","u":"/oauth2-proxy/docs/next/features/endpoints","h":"","p":150},{"i":153,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign-out page afterward using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored. Make sure to include the actual domain and port (if needed) and not the URL (e.g \"localhost:8081\" instead of \"http://localhost:8081\").","s":"Sign out","u":"/oauth2-proxy/docs/next/features/endpoints","h":"#sign-out","p":150},{"i":155,"t":"This endpoint returns 202 Accepted response or a 401 Unauthorized response. It can be configured using the following query parameters: allowed_groups: comma separated list of allowed groups allowed_email_domains: comma separated list of allowed email domains allowed_emails: comma separated list of allowed emails","s":"Auth","u":"/oauth2-proxy/docs/next/features/endpoints","h":"#auth","p":150},{"i":157,"t":"There are two recommended configurations: At OAuth2 Proxy At Reverse Proxy","s":"TLS Configuration","u":"/oauth2-proxy/docs/next/configuration/tls","h":"","p":156},{"i":159,"t":"Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... With this configuration approach the customization of the TLS settings is limited. The minimal acceptable TLS version can be set with --tls-min-version=TLS1.3. The defaults set TLS1.2 as the minimal version. Regardless of the minimum version configured, TLS1.3 is currently always used as the maximal version. TLS server side cipher suites can be specified with --tls-cipher-suite=TLS_RSA_WITH_RC4_128_SHA. If not specified, the defaults from crypto/tls of the currently used go version for building oauth2-proxy will be used. A complete list of valid TLS cipher suite names can be found in crypto/tls.","s":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/next/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":156},{"i":161,"t":"Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or ... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/next/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":156}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/2",[0,2.91,1,4.193,2,0.548,3,6.527,4,6.527,5,2.729,6,4.703,7,4.316,8,3.399,9,2.711,10,4.557,11,4.316,12,1.238,13,4.316,14,4.316,15,4.316,16,4.316,17,4.316,18,5.045,19,4.193,20,4.557,21,6.527,22,5.786,23,5.786,24,5.786,25,5.786,26,2.599,27,3.763,28,3.763,29,4.316,30,4.316,31,3.763,32,3.763,33,3.763,34,4.316,35,1.487,36,3.763,37,1.891,38,2.729,39,2.439,40,4.316,41,4.316,42,1.212,43,2.729,44,1.939,45,2.319,46,4.316,47,4.316,48,4.316,49,1.079,50,4.316,51,3.763,52,1.939,53,3.127,54,1.722,55,1.722,56,0.97,57,0.862,58,1.658,59,2.112,60,2.112,61,0.923,62,2.211,63,1.861,64,3.659,65,3.763,66,1.541,67,1.658,68,2.439]],["t/4",[2,0.47,9,2.371,31,4.412,55,2.018,69,4.412,70,7.415,71,5.373,72,2.86,73,3.2,74,5,75,4.689,76,3.985,77,1.743,78,1.37,79,5.06,80,4.412,81,2.719,82,5.06,83,1.57,84,5.06,85,2.719,86,3.412,87,2.273,88,1.743,89,3.829,90,4.412,91,3.2,92,4.412,93,2.56,94,4.412,95,4.412,96,5.056,97,4.412,98,3.412,99,5.06,100,5.06,101,2.371,102,3.985,103,6.419,104,6.419,105,3.829,106,5.06]],["t/6",[2,0.45,5,3.886,9,3.598,10,4.84,45,3.301,73,3.886,78,1.664,107,3.301,108,4.143,109,7.228,110,4.452,111,6.303,112,6.145,113,3.886]],["t/8",[44,2.693,57,1.198,89,3.576,93,2.391,94,5.228,95,6.212,114,7.124,115,4.344,116,5.995,117,5.995,118,5.995,119,5.995,120,5.995,121,5.995,122,4.344,123,1.005,124,2.219,125,4.722,126,5.995,127,5.995,128,4.722]],["t/10",[1,3.698,2,0.373,9,2.778,12,1.731,19,4.938,37,1.042,42,1.121,44,2.899,45,2.742,49,1.32,52,1.616,56,0.994,57,1.362,58,1.96,62,1.843,75,3.751,77,2.043,78,1.382,93,1.435,102,2.834,123,0.856,124,2.389,129,4.938,130,4.45,131,3.698,132,3.598,133,5.942,134,3.137,135,3.598,136,1.639,137,5.627,138,1.208,139,4.45,140,4.45,141,5.103,142,5.103,143,4.019,144,2.201,145,5.103,146,5.931,147,5.103,148,3.137,149,3.467,150,3.598,151,2.275,152,5.083,153,2.033,154,2.275,155,5.931,156,3.441,157,1.079,158,1.686,159,3.598,160,3.137,161,1.616,162,2.607,163,3.598,164,2.275,165,3.698,166,5.103,167,3.598,168,2.742,169,3.137,170,3.598,171,1.933,172,2.426,173,3.598,174,3.698,175,3.598,176,3.598]],["t/12",[2,0.351,12,1.328,42,1.195,49,1.158,54,1.916,56,1.041,66,1.715,77,2.37,123,0.805,124,1.778,136,1.543,157,1.44,177,1.543,178,2.581,179,2.46,180,3.704,181,1.778,182,4.189,183,2.866,184,3.239,185,2.477,186,2.692,187,3.704,188,2.967,189,2.46,190,4.189,191,2.256,192,1.991,193,4.189,194,1.739,195,4.804,196,2.581,197,1.655,198,4.804,199,4.804,200,2.866,201,2.351,202,2.715,203,4.804,204,2.715,205,2.866,206,3.239,207,3.336,208,3.038,209,2.866,210,2.715,211,1.655,212,2.351,213,3.239,214,1.991,215,3.038,216,3.481,217,3.239]],["t/14",[49,1.129,57,1.21,81,3.253,83,1.878,107,4.101,218,6.054,219,4.768,220,3.829,221,4.387,222,2.963,223,3.829,224,6.054,225,5.279,226,4.387,227,6.054,228,3.829,229,4.387,230,6.054,231,6.054]],["t/16",[2,0.367,37,1.454,45,2.697,49,1.191,57,1.276,71,5.089,72,3.609,74,4.985,75,3.174,86,3.384,96,3.953,101,2.351,152,3.953,201,2.456,204,2.836,213,3.384,215,3.174,219,5.029,226,4.627,228,3.174,232,5.019,233,4.038,234,5.568,235,5.019,236,3.809,237,5.019,238,2.697,239,4.376,240,3.174,241,5.019,242,5.019,243,5.019,244,2.994,245,1.669,246,3.953,247,2.164,248,3.125,249,5.019,250,5.019,251,5.019,252,5.019,253,5.019,254,5.019,255,4.376,256,5.019,257,5.019,258,3.953,259,3.953,260,1.557]],["t/18",[2,0.47,6,4.328,35,1.743,71,4.651,72,3.628,86,5.356,87,2.273,88,1.743,93,2.018,96,3.985,215,3.2,219,3.985,226,3.667,234,5.597,238,3.788,240,3.2,248,2.476,260,1.57,261,7.05,262,6.419,263,6.419,264,3.667,265,5.06,266,5.06,267,5.06,268,5.06,269,4.412,270,3.667,271,5.06,272,3.985,273,5.06,274,5.06,275,6.419,276,2.476,277,5.06,278,5.06,279,5.06,280,5.06,281,5.06,282,3.667,283,5.06,284,5.06,285,5.06]],["t/20",[2,0.434,9,2.103,12,1.652,37,1.721,56,1.314,58,1.724,61,1.424,74,4.005,87,2.016,88,2.046,89,3.543,91,2.839,101,2.103,123,0.753,124,1.662,136,1.907,144,1.936,151,2.839,210,2.537,216,3.253,236,3.543,260,1.393,286,3.914,287,4.48,288,2.839,289,4.777,290,4.489,291,3.914,292,1.936,293,4.489,294,3.543,295,3.535,296,2.839,297,4.489,298,4.489,299,3.027,300,3.914,301,3.914,302,3.914,303,2.99,304,3.253,305,5.804,306,3.027,307,3.535,308,4.489,309,2.537,310,1.861,311,3.576,312,3.756,313,2.839,314,3.535,315,3.535,316,2.839,317,3.914,318,3.914,319,4.489]],["t/22",[2,0.545,26,2.568,37,2.006,42,0.993,56,0.959,58,2.66,61,1.481,83,1.774,88,1.969,189,2.928,229,4.143,289,5.022,295,4.503,296,3.616,303,2.568,306,3.855,309,3.231,310,2.87,311,3.72,312,3.616,320,3.616,321,2.37,322,3.616,323,2.798]],["t/24",[2,0.472,37,1.478,44,2.898,49,1.387,56,1.186,57,1.486,58,3.057,61,1.591,83,1.583,88,2.699,91,4.081,151,3.227,212,2.497,289,5.015,296,4.081,303,2.898,306,3.44,310,2.115,324,5.857,325,6.453,326,2.741,327,4.449,328,4.018,329,4.018,330,5.102]],["t/26",[2,0.396,26,1.76,35,1.35,42,1.164,44,1.76,49,1.01,56,0.657,57,0.783,58,2.385,61,1.433,62,2.007,63,1.69,64,2.478,72,2.214,78,1.061,123,1.123,124,1.45,136,1.258,149,2.105,151,2.478,157,1.624,177,2.258,180,3.232,181,2.006,187,3.232,194,1.517,200,2.337,213,2.642,229,2.839,245,1.303,248,1.917,260,1.215,289,4.187,296,2.478,310,1.624,331,3.918,332,3.918,333,3.086,334,3.918,335,2.007,336,3.918,337,3.918,338,3.086,339,3.918,340,3.918,341,4.499,342,3.918,343,1.45,344,3.918,345,3.918,346,2.433,347,3.918,348,3.918,349,3.918,350,3.918,351,3.416,352,3.918,353,3.918,354,3.086,355,3.918,356,1.926,357,3.918,358,3.918,359,1.097,360,3.918,361,2.642,362,3.918,363,3.086,364,3.918,365,1.215,366,3.918,367,2.214,368,3.918,369,2.478,370,3.918,371,2.642,372,3.918,373,1.917,374,3.416,375,3.086,376,3.918,377,3.416,378,3.918,379,3.918,380,3.918,381,3.918,382,3.918,383,2.007,384,3.918,385,3.086,386,3.918,387,2.105,388,3.918,389,1.69,390,2.214,391,2.642,392,2.478,393,2.214,394,3.086,395,2.538,396,3.918,397,2.337]],["t/29",[42,1.084,138,1.477,180,3.721,212,3.053,365,1.935,373,3.053,398,1.935,399,1.747,400,1.634,401,6.238,402,3.525,403,3.195,404,6.238,405,2.074,406,4.206]],["t/31",[0,3.413,2,0.56,6,2.398,26,1.597,42,1.116,49,1.265,56,1.283,57,0.711,61,1.261,68,2.01,77,1.743,89,2.121,101,1.666,123,0.849,124,2.181,138,0.842,144,1.534,157,1.066,158,1.666,161,2.884,172,3.413,191,1.828,194,1.418,211,2.693,214,2.661,216,2.577,223,2.249,238,2.719,239,4.413,247,1.534,269,3.101,276,1.74,286,3.101,289,3.973,294,2.121,299,2.398,305,5.138,309,2.01,313,2.249,317,4.413,318,4.413,321,1.474,343,1.317,359,1.418,383,2.592,399,0.996,400,0.931,405,2.135,407,3.101,408,3.101,409,3.556,410,3.101,411,2.577,412,4.641,413,3.556,414,3.556,415,2.801,416,2.121,417,5.062,418,3.556,419,3.201,420,3.413,421,5.062,422,3.201,423,3.556,424,3.101,425,3.556,426,2.801,427,2.801,428,3.556,429,3.556,430,3.668,431,3.556,432,2.592,433,5.062,434,4.413,435,4.413,436,5.062,437,2.719,438,3.019,439,5.062,440,3.556]],["t/33",[2,0.422,42,1.003,56,0.967,138,1.366,247,2.489,260,1.79,387,3.1,398,1.79,399,1.95,400,1.511,405,2.315,441,5.626,442,2.087,443,4.181,444,5.484,445,5.032,446,5.771,447,6.963,448,2.886,449,4.545,450,4.181,451,5.771]],["t/35",[42,1.047,123,1.198,138,1.426,194,1.688,244,4.543,343,2.23,365,2.216,398,1.869,399,1.688,400,1.578,442,2.142,452,3.347,453,2.822,454,5.136]],["t/37",[2,0.389,61,1.139,101,2.493,136,1.709,138,1.26,157,1.595,171,2.86,174,3.856,181,2.453,185,2.643,214,2.206,324,4.192,341,4.801,398,1.651,399,1.491,400,1.394,405,2.583,442,1.986,455,3.856,456,4.641,457,3.856,458,4.476,459,4.641,460,4.563,461,4.641,462,4.641,463,3.856,464,3.589,465,5.778,466,3.856,467,4.641,468,3.856,469,4.641]],["t/39",[12,1.212,35,1.951,43,3.582,61,1.212,124,2.097,217,3.82,222,3.369,223,3.582,228,3.582,398,1.757,442,2.224,470,4.462,471,4.989,472,4.939,473,4.462,474,3.201,475,5.665,476,5.665,477,5.665,478,6.885,479,5.665,480,5.665,481,5.665,482,5.665,483,5.665,484,5.423,485,4.939,486,5.665,487,5.665]],["t/41",[2,0.384,38,3.323,42,0.913,98,4.432,122,3.807,123,1.203,138,1.244,157,1.575,171,2.823,188,3.094,194,2.009,244,4.484,264,4.763,343,1.945,365,2.225,398,1.63,399,1.472,400,1.376,442,2.32,452,3.36,453,3.079,454,4.837,488,5.65,489,4.138,490,5.254,491,5.254,492,4.138,493,2.096]],["t/43",[42,1.057,107,4.109,123,1.02,138,1.441,365,2.229,398,1.887,399,1.704,400,1.593,442,2.154,448,3.17,452,3.367,453,3.367]],["t/45",[2,0.482,42,0.917,55,2.629,123,0.885,138,1.249,153,3.725,321,2.187,365,1.637,393,4.062,398,1.637,399,1.478,400,1.382,402,2.982,442,2.257,448,2.979,452,2.472,453,2.472,494,6.591,495,3.148,496,4.156,497,3.148,498,4.156,499,7.187,500,3.725,501,3.558,502,4.545,503,6.591,504,5.277,505,3.148,506,1.726,507,3.148,508,6.591]],["t/47",[2,0.383,61,1.119,77,2.466,101,2.451,123,0.877,124,1.937,136,2.299,138,1.239,144,2.256,158,2.451,179,2.68,212,2.56,214,3.354,247,2.256,313,3.309,354,4.121,398,1.623,399,1.465,400,1.37,402,2.957,405,2.495,406,3.528,442,1.568,455,3.791,505,3.121,509,3.309,510,4.121,511,5.232,512,3.528,513,6.556,514,3.309,515,5.232,516,5.232,517,5.232,518,5.232,519,5.232,520,5.232,521,5.232]],["t/49",[2,0.35,37,1.386,61,1.024,62,2.451,63,2.064,136,1.989,138,1.133,144,2.064,168,2.571,171,2.571,174,3.467,181,2.293,185,1.909,214,2.847,292,2.064,321,1.984,324,3.769,341,4.488,359,1.34,398,1.484,399,1.34,400,1.253,405,2.693,419,3.026,442,2.255,455,3.467,458,4.251,459,4.172,460,4.343,461,4.172,462,4.172,463,3.467,464,3.227,465,5.4,466,3.467,467,4.172,468,3.467,469,4.172,509,3.026,522,3.467,523,3.467,524,4.63,525,3.467,526,3.026,527,5.4,528,5.4]],["t/51",[2,0.43,26,2.642,42,1.224,138,1.392,149,3.16,194,1.647,365,2.185,389,2.536,398,1.824,399,1.647,400,1.54,442,2.111,448,3.125,452,3.299,453,2.755,529,3.784,530,5.128,531,5.938]],["t/53",[2,0.505,37,1.649,42,0.989,66,2.032,138,1.347,187,4.119,240,4.366,303,3.101,321,2.359,343,2.107,383,3.536,398,1.765,399,1.594,400,1.49,442,2.228,474,3.902,532,6.904,533,5.438,534,6.904,535,6.904,536,4.124,537,4.962]],["t/55",[2,0.37,42,1.115,44,2.273,56,0.848,61,1.373,66,1.806,67,1.944,86,3.412,123,0.848,157,2.113,165,5.108,177,2.381,178,2.719,247,2.182,365,1.57,395,2.371,398,1.57,403,3.919,405,2.465,442,1.517,493,2.812,506,2.004,522,3.667,538,3.985,539,3.829,540,4.651,541,1.924,542,3.985,543,4.412,544,5.06,545,4.412,546,5.06,547,3.985,548,5.06,549,3.667,550,3.019]],["t/57",[2,0.279,12,1.489,61,1.137,67,1.463,83,1.182,86,3.582,123,1.026,136,2.376,138,1.258,157,2.087,165,3.849,177,1.706,179,2.721,192,2.202,201,3.239,245,1.267,270,3.849,303,1.711,306,2.568,322,2.409,365,1.182,395,1.784,399,1.067,400,0.997,403,3.39,405,2.581,410,3.321,442,1.984,452,1.784,474,2.153,493,2.44,506,1.888,522,2.76,539,3.169,540,2.76,543,5.334,551,3.809,552,3.809,553,3.809,554,4.184,555,5.312,556,3.809,557,3.809,558,4.632,559,3.809,560,1.784,561,3.809,562,2.202,563,3.809,564,4.184,565,5.312,566,2.568,567,4.432,568,3.809,569,3.321,570,6.117,571,3.809,572,5.312,573,2.153,574,3.809,575,3.809,576,3.809,577,3,578,3.809,579,3.809,580,2.76,581,3.809,582,4.184,583,3,584,3,585,3,586,3.809,587,3.809,588,3.321,589,3.809,590,3.809,591,3.809]],["t/59",[2,0.377,6,2.462,12,0.781,38,3.261,39,2.063,42,0.634,54,2.057,123,1.226,138,0.864,144,2.578,157,1.546,177,1.172,179,1.87,180,3.566,188,2.578,194,1.675,238,1.962,245,1.988,247,1.575,260,2.015,294,2.178,356,1.6,367,2.063,389,2.224,398,1.133,399,1.023,400,0.956,402,3.671,406,4.62,416,2.178,442,2.191,448,1.514,458,4.019,506,1.35,530,5.213,536,2.646,549,2.646,550,2.178,560,1.71,592,5.157,593,3.076,594,2.641,595,3.566,596,5.157,597,3.184,598,5.157,599,3.184,600,3.651,601,3.184,602,3.651,603,5.157,604,4.709,605,3.737,606,3.651,607,5.157,608,3.184,609,5.213,610,3.651,611,2.646,612,4.496,613,2.876,614,3.651,615,3.184,616,3.651,617,3.651,618,2.876,619,3.651,620,5.157,621,2.876,622,2.646,623,3.651,624,5.157,625,3.651,626,5.157,627,3.651,628,5.157,629,3.651,630,5.157,631,3.651,632,5.157,633,3.651,634,2.876,635,5.157,636,3.076,637,2.646,638,3.651]],["t/61",[2,0.425,9,1.35,35,0.993,37,1.512,42,1.369,44,1.295,54,2.485,56,1.241,66,2.073,105,1.72,123,1.044,136,1.676,138,1.028,149,1.549,165,2.089,177,0.926,188,1.872,191,0.894,192,2.164,194,0.807,208,2.124,212,1.411,247,1.872,260,1.619,287,1.823,321,1.195,326,1.549,343,1.607,356,1.619,359,1.216,361,1.944,363,4.574,365,1.619,369,1.823,371,2.926,373,2.554,387,1.549,389,1.872,390,2.453,391,1.944,392,1.823,393,2.453,398,0.894,399,0.807,400,0.755,402,1.629,403,1.476,405,1.735,416,3.113,419,1.823,438,1.72,442,2.296,448,1.195,452,1.35,453,1.35,493,1.15,506,1.136,507,1.72,512,1.944,514,1.823,522,2.089,538,4.111,541,1.301,550,1.72,594,1.476,639,7.286,640,4.34,641,4.34,642,5.219,643,4.34,644,2.883,645,4.34,646,2.883,647,4.34,648,2.883,649,4.34,650,2.883,651,3.145,652,4.34,653,2.883,654,4.34,655,2.883,656,2.883,657,4.34,658,2.883,659,4.34,660,2.883,661,4.34,662,2.883,663,2.883,664,2.883,665,4.34,666,2.883,667,2.883,668,2.514,669,2.883,670,2.514,671,2.883,672,2.883,673,2.883,674,2.514,675,4.34,676,2.883,677,4.551,678,4.34,679,3.301,680,3.418,681,2.883,682,1.629,683,4.34,684,4.34,685,2.514,686,4.34,687,2.883,688,1.944,689,4.34,690,4.34,691,2.883,692,2.27,693,2.089]],["t/63",[2,0.428,35,2.016,42,1.22,61,1.503,72,3.308,138,1.386,149,3.773,389,3.029,390,3.308,391,3.947,392,3.701,393,3.308,398,1.816,442,1.755,470,4.61,573,3.308,651,4.241,670,5.104,694,5.853,695,5.104,696,5.104,697,4.61,698,4.241,699,4.61]],["t/65",[42,1.363,313,4.09,398,2.006,470,5.094,700,5.639,701,5.639]],["t/67",[37,1.59,62,2.811,63,2.367,101,2.571,136,1.762,138,1.299,144,2.367,201,2.686,222,2.686,312,3.471,321,2.275,359,1.892,398,1.703,399,1.537,400,1.437,405,2.606,416,3.274,419,3.471,437,2.949,442,2.193,455,3.977,456,4.785,466,3.977,510,4.322,523,3.977,524,4.932,525,3.977,526,3.471,527,5.888,528,5.888,702,5.488]],["t/69",[12,1.621,56,1.117,123,1.117,138,1.271,144,2.315,211,2.495,238,2.884,313,3.395,323,2.627,383,2.75,398,1.665,399,1.504,400,1.406,430,3.89,434,5.809,435,5.809,437,4.069,438,3.203,442,1.997,457,3.89,509,3.395,560,3.121,703,4.827,704,6.662,705,6.662,706,4.213,707,5.369,708,5.369,709,5.369]],["t/71",[9,2.268,35,1.668,37,1.808,45,3.71,52,2.175,61,1.036,123,0.812,138,1.146,144,2.088,202,2.736,211,1.668,233,3.062,247,2.691,288,3.062,323,2.369,383,3.736,398,1.502,399,1.356,400,1.268,437,4.28,438,3.723,442,1.871,457,3.508,466,4.522,493,1.931,506,1.268,710,3.813,711,4.915,712,3.723,713,6.24,714,5.441,715,4.915,716,6.24,717,4.842,718,3.813,719,4.842,720,6.24,721,5.439,722,4.915,723,4.842,724,4.222,725,4.842,726,4.222,727,4.842,728,3.813]],["t/73",[12,1.377,35,1.75,44,2.282,66,1.814,85,2.73,138,1.203,172,3.426,177,2.067,179,3.296,183,3.031,270,3.682,365,1.576,387,2.73,398,1.576,399,1.423,400,1.33,403,3.618,405,2.643,442,1.929,505,3.031,509,3.213,514,3.213,538,4.002,539,3.031,540,3.682,541,1.523,558,5.612,564,5.563,567,5.118,588,4.43,622,3.682,729,4.002,730,4.002,731,5.081,732,4.43,733,5.081,734,5.081,735,5.081,736,3.682,737,5.081,738,4.002,739,5.081,740,5.081]],["t/75",[2,0.463,49,1.104,56,0.502,57,0.598,61,0.955,77,2.534,81,2.399,101,1.403,105,1.786,123,0.502,124,2.855,138,0.709,151,2.824,157,1.339,158,3.312,161,1.345,179,3.401,180,1.786,191,0.929,192,1.241,194,0.839,204,1.692,207,1.609,211,2.181,214,1.241,248,1.466,255,2.611,260,1.385,270,2.17,292,1.292,309,1.692,321,3.197,333,2.359,335,1.534,338,2.359,398,0.929,399,0.839,400,0.784,402,3.345,405,0.996,406,2.019,411,2.17,412,2.359,415,2.359,422,4.004,430,2.17,437,1.609,442,1.774,460,2.824,471,3.869,473,2.359,505,1.786,509,1.894,512,2.019,514,2.824,529,2.399,541,0.898,549,2.17,564,2.359,604,2.359,668,2.611,682,2.524,741,2.995,742,2.995,743,2.995,744,2.611,745,2.995,746,2.995,747,4.466,748,5.34,749,2.995,750,4.466,751,2.995,752,4.466,753,5.34,754,2.359,755,5.919,756,4.466,757,2.995,758,2.995,759,2.995,760,2.995,761,2.995,762,2.995,763,2.995,764,2.995,765,2.995,766,2.006,767,2.995,768,2.995,769,2.995,770,2.995,771,2.995,772,2.995,773,2.995,774,2.995,775,2.995,776,2.995,777,2.995,778,4.466,779,2.995,780,2.995,781,2.995,782,2.995,783,5.34,784,2.995,785,2.611,786,2.995,787,2.995,788,5.34,789,2.359,790,2.611,791,2.995,792,4.466,793,2.611,794,2.995,795,2.995,796,2.019,797,2.824,798,4.466,799,2.995,800,4.466,801,2.611,802,2.995,803,3.517,804,2.359,805,2.611,806,2.359]],["t/77",[12,1.201,49,1.047,56,0.941,77,1.933,124,3.007,138,1.329,157,1.683,177,1.802,179,2.875,197,1.933,211,1.933,313,3.55,321,3.063,398,1.741,399,1.572,400,1.47,402,3.172,412,4.421,509,3.55,541,1.683,550,3.348,700,4.894,701,4.894,807,6.847,808,4.894,809,5.613,810,5.613,811,5.613]],["t/79",[2,0.375,5,3.24,12,1.096,35,1.765,42,1.384,49,0.955,52,2.301,53,3.712,54,2.044,55,2.044,56,1.085,57,1.024,72,3.656,74,3.455,83,1.589,197,1.765,212,2.507,304,3.712,326,3.476,389,2.209,390,3.656,391,3.455,392,3.24,393,3.656,405,1.704,427,4.035,432,2.624,450,3.712,458,3.656,506,1.342,562,2.124,593,3.859,594,3.314,651,3.712,695,4.467,696,4.467,697,4.035,698,3.712,699,4.035,812,2.209,813,5.123,814,4.467,815,5.123,816,5.123]],["t/81",[2,0.554,60,2.906,191,1.842,201,2.906,245,2.732,346,3.4,387,3.19,510,4.676,560,3.318,562,2.936,817,5.938,818,5.938,819,5.177]],["t/83",[2,0.45,42,1.334,49,1.146,57,1.228,67,2.36,78,1.664,87,2.76,88,2.645,134,5.358,157,1.842,204,3.473,416,3.666,820,4.452,821,6.145]],["t/85",[2,0.363,42,1.101,49,0.925,52,2.227,55,2.935,56,1.062,68,3.581,73,3.136,75,3.136,78,1.343,83,1.538,87,2.227,88,1.708,113,3.136,136,1.592,177,1.592,178,2.664,181,1.836,185,2.527,186,2.346,208,2.426,209,2.958,211,2.183,260,1.966,356,2.283,359,1.389,448,2.055,502,3.136,651,4.591,822,3.905,823,4.323,824,4.958,825,4.323,826,4.958,827,3.343,828,3.593,829,4.958,830,4.958,831,4.323,832,3.245,833,4.991,834,4.323,835,3.905,836,4.323,837,3.905,838,4.323,839,4.323,840,3.593,841,2.958,842,4.323]],["t/87",[2,0.436,55,3.026,78,1.616,81,3.206,83,1.851,87,2.68,211,2.447,212,3.476,346,2.68,387,3.206,390,3.372,441,4.323,444,4.699,450,4.323,506,1.562,729,4.699,832,3.056,843,7.103,844,5.966]],["t/89",[0,2.005,2,0.389,9,2.081,12,0.636,33,3.873,37,0.861,42,0.517,43,1.88,49,0.554,52,2.649,53,2.154,55,1.772,56,0.498,57,0.594,66,2.364,68,2.51,73,1.88,83,1.378,85,1.597,87,2.974,88,1.831,93,1.186,113,1.88,123,0.498,136,1.426,154,1.88,164,2.809,177,0.955,178,1.597,181,2.337,183,1.774,185,1.772,186,1.644,189,2.275,192,1.232,193,2.592,197,1.024,208,1.455,209,1.774,236,1.774,247,1.282,260,1.958,287,3.362,310,1.232,322,1.88,326,1.597,356,1.958,359,1.244,365,0.922,371,2.995,373,1.455,375,2.342,389,1.915,390,4.076,405,0.989,426,2.342,438,1.774,441,3.218,448,1.841,450,3.218,495,3.518,497,1.774,500,1.68,506,1.163,554,4.187,595,2.649,688,2.005,736,2.154,766,1.335,812,2.293,827,3.977,828,3.218,831,3.873,832,3.021,833,3.498,834,3.873,835,2.342,836,2.592,837,2.342,838,2.592,839,2.592,840,2.154,841,1.774,842,2.592,845,2.973,846,3.873,847,4.465,848,4.645,849,2.592,850,2.973,851,2.592,852,2.342,853,2.342,854,3.498,855,2.342,856,2.973,857,2.973,858,2.005,859,5.405,860,2.973,861,2.973,862,3.873,863,2.342,864,2.973,865,2.154,866,2.973,867,2.005,868,2.592,869,2.973,870,2.592,871,2.973,872,2.592,873,2.973,874,2.973,875,4.441,876,2.973,877,2.005,878,2.592,879,2.973,880,2.973,881,4.441,882,3.873,883,4.441,884,2.973,885,2.342,886,2.973,887,2.973,888,4.441,889,2.973,890,2.592,891,1.774,892,2.592,893,2.973,894,2.973,895,2.973,896,2.973]],["t/91",[2,0.53,12,1.467,42,0.828,49,1.152,52,2.775,54,1.901,56,1.036,57,1.235,61,1.322,78,1.291,83,1.479,87,2.141,88,1.642,113,3.014,136,1.984,157,1.429,177,1.531,191,1.479,194,1.335,201,2.333,244,3.685,245,1.585,260,1.916,343,2.537,356,2.249,359,1.73,391,4.622,432,2.441,452,2.894,453,2.233,454,4.166,500,3.491,506,1.248,541,1.429,636,2.843,858,4.166,859,3.754,867,3.214,897,4.156,898,3.214,899,4.767,900,4.767,901,3.754,902,3.754,903,3.454,904,4.767,905,3.754,906,4.156,907,4.156,908,4.767,909,4.767]],["t/93",[2,0.461,37,1.425,42,0.855,49,1.175,54,1.962,55,2.515,56,0.825,57,1.39,58,1.889,59,2.407,60,2.407,61,1.489,78,1.332,83,1.526,88,1.694,93,1.962,123,0.825,136,1.58,177,1.58,179,2.519,184,3.317,197,2.396,260,1.956,294,2.934,335,2.519,356,2.276,359,1.766,399,1.378,400,1.288,432,2.519,506,1.288,541,2.274,580,3.564,812,2.121,867,3.317,898,3.317,901,3.874,902,3.874,905,3.874,906,4.289,910,3.564,911,4.919,912,4.289,913,3.564,914,4.919,915,4.919,916,4.919,917,4.919,918,4.919,919,4.919]],["t/95",[35,2.16,54,2.501,88,2.16,93,2.501,123,1.051,197,2.16,365,1.945,766,2.816,847,4.228,920,7.314,921,6.27,922,3.74,923,3.965]],["t/97",[12,1.381,35,1.757,42,0.887,49,0.951,55,2.035,61,1.092,78,1.382,83,1.583,88,1.757,93,2.035,161,2.292,177,1.638,197,2.223,200,3.044,260,2.002,320,4.081,335,3.809,356,2.307,359,1.807,361,3.44,365,1.583,367,2.883,541,1.529,766,2.292,814,6.832,913,3.697,922,3.044,924,5.102,925,4.018,926,5.102,927,6.453,928,5.102,929,5.102,930,5.102,931,4.449,932,4.449,933,7.077,934,5.102,935,5.102,936,5.102]],["t/99",[0,4.888,1,3.451,2,0.426,12,1.427,35,0.857,37,1.558,39,2.19,42,0.432,49,0.888,52,1.117,54,1.899,55,2.325,56,0.417,57,0.952,61,0.829,75,1.573,78,1.456,81,1.336,83,1.668,88,1.64,89,1.484,91,2.451,93,2.325,101,1.165,107,3.131,108,1.677,110,1.802,123,0.901,125,1.959,128,3.053,131,2.808,136,1.245,153,3.039,154,4.077,168,1.336,177,0.799,178,1.336,181,1.435,183,2.312,185,0.992,186,0.921,188,1.073,189,1.985,191,0.772,194,1.334,197,0.857,222,1.217,245,1.938,247,1.073,260,1.668,272,1.959,276,1.217,291,2.169,292,2.054,310,2.229,316,1.573,321,1.031,343,0.921,346,2.139,356,1.915,359,0.697,371,1.677,373,1.217,387,1.336,393,3.294,427,1.959,448,2.559,452,1.165,453,1.165,495,3.208,496,1.959,497,3.477,498,3.053,500,3.039,501,3.626,502,3.904,506,1.247,529,2.082,554,1.959,560,1.165,562,1.974,573,1.406,580,1.802,612,2.169,618,1.959,674,2.169,732,2.169,766,1.117,796,2.613,820,1.802,822,1.959,827,1.677,832,3.415,848,1.959,853,1.959,858,1.677,859,1.959,862,2.169,877,1.677,878,3.38,882,2.169,910,1.802,922,1.484,923,1.573,937,2.487,938,2.169,939,2.169,940,2.169,941,4.762,942,4.688,943,2.487,944,2.487,945,2.487,946,1.959,947,1.959,948,2.487,949,2.487,950,1.573,951,2.487,952,3.876,953,2.169,954,1.802,955,2.169,956,2.169,957,3.012,958,3.012,959,2.169,960,2.169,961,2.487,962,5.621,963,4.762,964,3.876,965,2.487,966,2.487,967,2.487,968,2.487,969,2.487,970,2.487,971,1.959,972,2.487,973,2.169,974,2.487,975,2.169,976,2.487,977,2.487,978,2.487,979,3.38,980,3.876,981,2.169,982,2.169,983,2.169,984,2.169,985,2.169,986,2.487,987,1.959]],["t/101",[37,2.041,49,1.097,56,1.181,57,1.175,58,2.259,59,3.446,60,3.446,61,1.507,62,3.861,63,3.251,123,0.986,200,3.508,395,2.755,744,5.128,988,5.881,989,5.881,990,7.043]],["t/103",[2,0.345,12,1.776,18,4.109,27,4.109,35,1.623,59,2.306,87,2.117,123,0.79,138,1.116,185,1.879,186,1.744,201,2.306,311,2.532,320,2.98,359,1.32,523,4.443,525,4.939,526,2.98,541,1.413,584,3.711,991,4.712,992,6.132,993,4.712,994,5.346,995,4.712,996,4.712,997,4.712,998,4.712,999,4.712,1000,4.712,1001,4.712,1002,4.712,1003,4.712,1004,6.816,1005,4.712,1006,5.368,1007,4.712,1008,4.712,1009,6.816,1010,4.712,1011,4.712,1012,4.712,1013,4.712,1014,4.712,1015,4.712,1016,4.712,1017,4.712,1018,4.712,1019,4.712,1020,4.712,1021,4.712,1022,4.109,1023,4.109,1024,4.712]],["t/105",[2,0.42,12,1.486,37,2.012,57,1.148,58,2.867,59,2.811,60,2.811,61,1.229,67,2.206,148,6.054,164,3.632,222,2.811,276,2.811,307,4.524,484,4.524,493,2.977,583,4.524,585,4.524,1006,4.524,1025,5.469,1026,5.008,1027,5.008,1028,5.744,1029,5.744]],["t/107",[2,0.511,5,0.357,8,0.445,9,0.703,12,1.434,20,0.445,35,0.982,37,1.652,38,1.803,39,0.599,42,0.748,45,1.017,49,0.705,52,0.254,54,1.426,55,0.755,56,0.478,57,0.212,58,0.576,60,0.926,61,0.849,64,0.671,65,0.492,66,1.349,67,0.217,68,0.848,72,1.269,77,1.911,80,1.957,87,0.476,89,0.633,93,0.423,98,0.381,105,0.633,107,0.57,122,0.409,123,0.901,124,1.469,129,1.087,130,0.492,136,0.916,138,0.251,139,1.65,143,0.445,144,0.816,149,0.303,151,0.357,153,1.07,154,0.357,157,1.455,158,1.571,161,2.233,171,1.532,174,2.591,177,1.476,179,1.313,180,3.093,181,1.881,182,0.492,183,1.129,185,1.242,186,2.295,187,2.366,188,1.982,189,1.313,190,1.957,191,1.426,192,1.391,194,1.248,196,3.331,197,1.302,200,0.337,201,0.734,202,0.599,204,0.319,205,0.337,207,0.303,208,1.395,209,3.758,210,2.136,211,0.652,212,0.519,213,0.381,214,2.3,215,0.357,217,0.715,220,0.357,222,1.941,228,0.357,233,0.357,236,0.337,238,1.206,240,0.949,244,0.895,245,1.573,247,2.46,248,0.276,258,1.182,259,1.182,260,0.884,264,1.087,276,1.524,282,1.371,287,1.42,288,0.357,292,0.243,294,0.337,301,0.925,303,1.507,309,0.319,310,0.44,311,0.303,314,0.445,316,0.671,321,2.106,323,1.395,326,0.57,327,0.492,328,0.835,333,0.835,335,0.769,338,2.018,341,2.431,343,1.399,346,1.008,351,1.957,354,1.182,356,1.231,359,0.629,361,1.012,363,1.768,365,1.231,367,0.599,369,0.671,371,0.715,373,0.519,374,1.65,375,0.835,377,0.492,383,1.718,385,0.445,387,1.017,389,2.318,390,0.848,392,1.197,393,1.896,394,0.445,395,0.887,397,1.858,399,0.158,400,0.148,402,3.727,405,0.353,406,3.894,411,0.409,419,0.357,420,0.381,422,0.671,426,1.491,432,0.289,437,1.673,438,1.129,441,1.371,442,2.272,444,0.835,445,0.492,448,1.717,452,1.571,453,1.201,454,1.012,458,1.611,460,1.197,463,0.409,464,0.715,468,0.409,471,1.857,473,0.445,474,1.269,488,0.835,489,0.445,492,0.445,493,1.022,495,0.633,496,0.835,497,0.633,498,0.445,500,1.07,501,1.514,502,0.949,505,0.337,506,1.085,507,1.529,514,0.671,524,0.381,525,0.409,526,0.357,529,0.57,531,0.835,533,0.835,536,1.371,537,0.492,539,0.633,541,1.772,547,0.445,550,0.337,560,1.675,562,1.717,566,1.012,573,0.599,577,0.835,593,0.337,594,2.546,595,1.701,597,0.492,601,0.492,604,1.491,605,1.087,608,0.925,609,0.925,634,1.182,636,0.337,637,1.371,677,2.486,679,1.969,680,1.182,682,2.432,685,0.492,688,0.381,692,0.835,693,1.371,698,1.087,706,1.803,710,0.835,711,0.445,712,0.337,715,0.445,718,0.445,721,1.491,722,1.182,724,0.492,726,0.492,728,0.445,729,0.835,730,2.642,766,0.254,790,1.65,793,0.492,796,0.715,797,0.357,801,0.925,803,2.642,804,1.491,805,0.492,806,0.445,812,0.457,819,1.308,828,0.409,832,0.289,841,0.633,851,0.492,852,0.445,855,0.445,865,0.409,877,0.715,922,0.337,946,0.445,957,0.357,958,0.949,960,0.492,962,0.492,979,0.925,984,0.492,1030,0.564,1031,1.061,1032,0.445,1033,1.491,1034,1.5,1035,0.564,1036,2.235,1037,2.518,1038,0.564,1039,0.492,1040,0.492,1041,0.564,1042,0.492,1043,0.564,1044,0.564,1045,0.564,1046,1.957,1047,0.925,1048,1.957,1049,0.835,1050,0.564,1051,0.492,1052,1.061,1053,0.564,1054,0.564,1055,0.564,1056,0.492,1057,0.564,1058,0.564,1059,1.061,1060,0.445,1061,0.564,1062,0.492,1063,0.564,1064,1.893,1065,0.492,1066,0.564,1067,0.564,1068,0.564,1069,1.5,1070,1.5,1071,0.445,1072,2.851,1073,1.087,1074,0.564,1075,0.564,1076,1.768,1077,0.564,1078,0.564,1079,0.492,1080,0.564,1081,0.564,1082,1.5,1083,1.012,1084,0.949,1085,0.564,1086,0.564,1087,0.564,1088,0.564,1089,1.5,1090,1.5,1091,0.835,1092,0.492,1093,0.564,1094,0.564,1095,0.564,1096,1.061,1097,1.061,1098,0.492,1099,0.564,1100,0.409,1101,0.564,1102,0.564,1103,0.769,1104,1.061,1105,1.061,1106,1.061,1107,0.564,1108,0.445,1109,0.564,1110,0.564,1111,0.835,1112,0.925,1113,0.835,1114,0.564,1115,0.925,1116,0.925,1117,0.564,1118,1.182,1119,0.492,1120,0.492,1121,1.061,1122,0.925,1123,0.564,1124,0.769,1125,0.564,1126,0.564,1127,0.492,1128,0.492,1129,0.564,1130,0.925,1131,0.492,1132,0.564,1133,0.564,1134,2.986,1135,0.925,1136,0.564,1137,0.564,1138,0.564,1139,0.409,1140,2.018,1141,1.308,1142,1.012,1143,0.564,1144,0.925,1145,0.492,1146,0.492,1147,0.564,1148,0.564,1149,1.621,1150,2.675,1151,1.448,1152,0.564,1153,0.492,1154,1.061,1155,2.235,1156,1.5,1157,3.611,1158,0.492,1159,1.957,1160,0.492,1161,0.492,1162,0.492,1163,0.925,1164,0.492,1165,0.492,1166,0.564,1167,0.564,1168,0.337,1169,1.182,1170,0.925,1171,0.564,1172,1.5,1173,0.564,1174,0.564,1175,0.492,1176,0.564,1177,0.564,1178,1.893,1179,0.564,1180,0.564,1181,0.564,1182,0.564,1183,0.492,1184,0.564,1185,0.564,1186,1.276,1187,0.564,1188,0.445,1189,0.492,1190,0.492,1191,0.925,1192,0.564,1193,0.564,1194,0.564,1195,0.564,1196,1.308,1197,0.925,1198,0.564,1199,0.564,1200,0.492,1201,0.492,1202,0.564,1203,0.564,1204,0.564,1205,0.564,1206,0.564,1207,0.492,1208,0.564,1209,0.492,1210,0.564,1211,0.445,1212,1.371,1213,0.564,1214,0.381,1215,0.564,1216,0.564,1217,0.564]],["t/109",[2,0.417,12,0.904,26,2.901,37,2.241,42,1.202,44,1.899,49,1.204,56,1.211,57,0.845,58,1.624,61,0.904,77,2.225,85,2.271,123,0.709,124,2.902,161,2.563,164,2.673,168,2.271,177,1.357,191,1.311,210,3.225,211,1.965,212,2.069,222,2.069,223,2.673,247,2.461,276,3.384,292,1.823,309,2.389,321,2.867,326,2.271,403,3.308,405,1.406,422,3.608,430,3.063,493,1.686,507,2.522,541,1.936,622,4.134,680,3.329,703,4.134,1033,3.329,1037,2.389,1065,3.686,1083,2.85,1084,2.673,1218,5.706,1219,5.706,1220,4.227,1221,4.227,1222,4.227,1223,4.227,1224,4.227,1225,5.706,1226,4.227,1227,5.706,1228,4.227,1229,4.227,1230,4.227]],["t/111",[2,0.398,12,1.437,37,1.576,56,0.912,59,3.287,60,3.287,62,3.44,63,2.897,67,2.09,186,2.014,208,2.662,222,2.662,245,1.809,276,2.662,307,4.284,310,2.784,359,1.881,460,3.44,468,4.867,484,4.284,493,2.679,562,2.255,583,4.284,585,4.284,987,4.284,1006,4.284,1025,5.29,1026,4.743,1027,4.743,1231,5.44,1232,5.44,1233,5.44,1234,5.44,1235,5.44]],["t/113",[2,0.437,12,1.52,37,1.936,43,3.774,49,0.843,56,1.12,57,0.904,59,2.213,63,1.95,66,2.131,77,2.301,138,1.413,161,2.031,181,1.674,191,1.403,194,1.267,196,4.503,282,3.276,303,2.681,328,3.561,506,1.563,529,2.429,573,2.556,706,3.774,804,3.561,1112,5.204,1113,3.561,1115,3.943,1116,5.825,1118,5.596,1119,5.204,1124,4.325,1140,5.262,1142,3.049,1175,3.943,1186,4.024,1200,3.943,1236,4.325,1237,4.522,1238,4.522,1239,4.522,1240,3.943,1241,4.522]],["t/115",[2,0.273,12,0.798,26,1.675,49,0.695,56,0.877,57,0.745,63,2.257,67,1.432,76,2.937,77,2.585,78,1.01,91,2.358,123,0.625,144,2.257,171,3.523,181,2.557,189,1.91,191,2.221,192,1.546,194,1.837,196,3.847,201,1.825,214,2.507,221,2.702,222,1.825,236,3.122,245,1.74,260,1.876,303,2.945,310,1.546,311,2.812,335,2.68,356,1.876,394,4.122,395,1.747,397,2.224,400,0.976,405,1.24,442,1.118,464,2.514,506,1.37,560,2.452,573,2.107,582,2.937,611,2.702,682,2.107,693,3.792,872,3.251,1131,3.251,1134,2.107,1142,2.514,1149,2.358,1150,3.529,1151,2.107,1214,3.529,1236,2.702,1242,3.729,1243,3.251,1244,3.251,1245,4.122,1246,4.122,1247,5.439,1248,5.273,1249,5.233,1250,3.729,1251,3.729,1252,3.729,1253,3.729,1254,3.729,1255,4.563,1256,4.122,1257,3.251,1258,3.251,1259,3.251,1260,3.251,1261,3.251,1262,3.251,1263,3.251,1264,3.251,1265,3.251,1266,3.251,1267,3.251,1268,2.937,1269,2.937,1270,3.251,1271,3.251,1272,3.251,1273,2.937]],["t/117",[2,0.276,12,0.808,26,1.695,49,0.704,56,0.885,63,2.276,67,1.45,76,2.973,77,2.743,78,1.022,91,2.387,105,2.251,123,0.633,124,2.253,158,2.473,161,2.734,171,3.27,181,1.397,192,1.565,194,1.057,196,3.542,214,2.523,221,2.735,222,2.583,245,1.255,260,1.888,303,2.961,310,1.565,311,2.028,321,2.188,335,3.118,356,1.888,400,0.988,405,1.255,464,2.545,506,1.382,523,2.735,560,1.768,573,2.133,611,2.735,682,2.133,693,2.735,712,2.251,766,1.695,789,2.973,797,2.387,1124,2.735,1134,2.133,1142,2.545,1149,2.387,1150,3.559,1151,2.133,1214,4.104,1236,2.735,1243,3.291,1244,3.291,1245,4.157,1246,4.157,1247,2.973,1255,4.602,1256,4.157,1257,3.291,1258,3.291,1259,3.291,1260,3.291,1261,3.291,1262,3.291,1263,3.291,1264,3.291,1265,3.291,1266,3.291,1267,4.602,1268,2.973,1269,2.973,1270,4.602,1271,3.291,1272,3.291,1274,3.774,1275,3.774,1276,3.774,1277,3.774,1278,3.774,1279,3.774,1280,3.774,1281,5.278,1282,5.278,1283,5.278,1284,5.278,1285,3.774,1286,3.774,1287,2.973,1288,2.735,1289,3.774]],["t/119",[26,2.209,37,2.016,56,1.166,60,2.407,63,2.719,67,1.889,78,1.332,138,1.165,161,2.209,185,1.962,192,2.039,196,4.294,217,3.317,222,2.407,236,2.934,248,2.407,303,3.407,310,2.039,311,2.643,323,2.407,397,2.934,400,1.288,506,1.651,573,2.78,987,3.874,1103,3.564,1108,3.874,1186,4.691,1236,3.564,1245,4.965,1246,4.965,1248,6.066,1256,4.965,1268,3.874,1269,3.874,1273,3.874,1290,4.919,1291,3.564,1292,4.919,1293,4.919,1294,6.304,1295,6.304]],["t/121",[2,0.371,12,1.761,32,1.956,36,3.115,49,0.83,56,0.599,57,0.89,58,0.862,61,0.764,63,1.92,64,1.418,66,0.801,67,0.862,68,3.502,77,1.749,78,0.607,83,0.696,88,0.773,123,1.218,136,1.781,144,0.967,157,0.672,158,2.379,172,1.512,177,1.43,178,1.205,181,1.648,184,1.512,185,0.895,186,2.773,188,2.548,191,0.696,192,1.481,194,1.422,197,1.231,202,1.268,205,2.131,206,1.512,207,1.205,208,1.098,210,1.268,211,0.773,214,2.569,220,1.418,245,1.688,246,1.766,248,2.485,276,1.748,299,1.512,310,1.481,314,1.766,323,1.098,329,1.766,335,2.601,343,1.323,346,1.007,390,1.268,395,2.379,403,1.149,408,3.882,432,1.149,443,1.625,485,1.956,507,2.131,524,1.512,529,1.919,541,0.672,562,0.93,621,1.766,636,1.338,679,1.418,736,1.625,766,1.007,785,1.956,797,2.259,808,1.956,812,1.541,835,1.766,852,1.766,867,1.512,892,1.956,901,1.766,954,3.679,957,1.418,958,1.418,1023,1.956,1037,1.268,1040,1.956,1060,1.766,1103,1.625,1111,1.766,1130,1.956,1134,3.841,1135,1.956,1139,1.625,1149,2.259,1150,2.409,1151,1.268,1168,2.131,1169,4.367,1287,2.814,1288,2.589,1296,1.625,1297,1.956,1298,2.243,1299,4.428,1300,2.814,1301,6.05,1302,3.115,1303,3.573,1304,1.625,1305,2.243,1306,2.814,1307,2.243,1308,2.243,1309,1.956,1310,6.197,1311,2.243,1312,2.243,1313,2.243,1314,5.078,1315,2.243,1316,3.882,1317,2.243,1318,3.573,1319,1.512,1320,2.243,1321,1.956,1322,2.814,1323,2.243,1324,3.573,1325,2.243,1326,2.243,1327,3.573,1328,3.573,1329,2.243,1330,1.766,1331,2.243,1332,2.243,1333,2.243,1334,4.453,1335,2.243,1336,4.453,1337,3.573,1338,3.573,1339,2.243,1340,2.243,1341,2.243,1342,1.956,1343,2.243,1344,2.243,1345,2.243,1346,3.573,1347,2.243,1348,3.573,1349,2.243,1350,3.573,1351,2.243,1352,1.956,1353,2.243,1354,2.243,1355,2.243]],["t/123",[49,1.219,61,1.603,123,1.096,192,2.709,1151,3.694]],["t/125",[12,0.852,37,1.154,49,0.742,54,3.042,56,0.667,57,0.796,66,1.421,67,1.529,77,2.157,153,4.232,157,1.194,158,2.566,161,1.788,178,2.139,181,2.497,184,2.685,191,1.235,202,2.25,205,3.268,206,2.685,207,2.139,211,1.887,214,2.596,299,2.685,306,2.685,395,1.865,397,3.736,437,2.943,506,1.434,539,2.375,541,1.642,560,1.865,562,2.271,566,4.769,567,3.969,682,4.311,738,3.136,885,3.136,1168,4.219,1247,3.136,1288,2.885,1296,2.885,1356,4.776,1357,4.776,1358,5.881,1359,3.981,1360,3.472,1361,4.776,1362,4.776,1363,4.776,1364,4.776,1365,4.776,1366,3.981,1367,3.472,1368,4.776,1369,3.472,1370,3.472,1371,3.472,1372,3.472,1373,3.472,1374,3.472,1375,3.472,1376,3.472,1377,3.472,1378,3.472,1379,3.472,1380,3.472,1381,3.472,1382,3.472,1383,3.981,1384,3.981]],["t/127",[2,0.386,8,4.152,12,1.503,37,0.849,42,0.764,49,0.983,54,2.724,56,0.491,57,1.316,61,0.94,66,1.046,77,1.514,78,0.794,83,0.909,92,2.555,115,2.124,123,0.737,140,2.555,153,4.253,158,1.373,161,1.316,168,1.575,181,2.659,185,1.753,188,1.895,191,0.909,197,2.42,205,1.748,207,1.575,210,1.656,211,1.816,214,2.601,299,1.976,343,1.627,346,1.974,356,1.363,359,1.476,397,1.748,422,1.853,437,3.146,506,1.533,514,1.853,529,1.575,541,1.58,560,2.058,562,2.428,566,4.844,567,4.243,682,4.06,796,1.976,812,1.264,837,2.308,877,1.976,885,2.308,1033,4.612,1071,2.308,1113,2.308,1134,2.979,1151,1.656,1168,4.074,1342,2.555,1356,2.555,1357,4.596,1358,5.955,1360,2.555,1361,4.596,1362,5.47,1363,5.106,1364,5.106,1365,5.106,1367,2.555,1368,4.596,1369,2.555,1370,2.555,1371,2.555,1372,2.555,1373,2.555,1374,2.555,1375,2.555,1376,2.555,1377,2.555,1378,2.555,1379,2.555,1380,2.555,1381,2.555,1382,3.831,1385,2.555,1386,2.931,1387,2.931,1388,2.555,1389,4.394,1390,4.394,1391,2.931,1392,4.394,1393,2.931,1394,2.931,1395,2.931,1396,4.394,1397,2.931]],["t/129",[0,0.877,2,0.408,6,0.877,10,1.024,12,1.625,28,1.134,35,1.241,38,0.823,39,0.735,42,0.226,45,1.617,49,1.039,52,2.503,56,0.808,57,1.114,61,1.358,67,0.87,74,1.528,78,0.815,81,1.217,83,0.934,85,0.699,87,1.834,88,1.66,89,1.352,90,1.134,93,2.616,105,0.776,115,0.943,123,0.752,124,0.482,131,1.642,136,2.106,138,0.967,149,3.663,153,0.735,156,1.528,157,1.865,168,0.699,171,0.699,172,0.877,177,0.418,178,1.617,179,1.542,183,0.776,187,3.325,188,2.829,189,0.666,191,0.703,192,2.117,194,1.615,197,1.037,212,1.109,221,2.181,223,0.823,245,1.198,248,2.821,260,2.003,288,2.278,292,0.561,296,0.823,304,1.642,312,1.433,320,0.823,321,0.539,322,0.823,323,0.637,343,1.891,346,2.013,356,2.442,359,0.843,373,3.21,389,2.404,399,0.635,400,0.593,403,0.666,405,0.433,415,1.784,416,1.796,420,1.528,443,0.943,448,3,453,0.609,458,2.724,472,1.134,493,0.904,495,2.436,500,0.735,501,0.877,502,1.433,506,0.788,524,0.877,529,1.217,531,5.96,560,0.609,562,0.539,593,1.352,594,1.16,595,1.352,613,1.784,615,1.134,634,2.837,636,1.352,637,4.177,679,1.904,692,1.024,706,0.823,714,1.134,730,1.024,754,1.024,766,1.018,812,0.977,820,0.943,823,4.202,827,2.429,828,0.943,832,1.16,846,1.976,855,1.024,858,0.877,863,1.024,891,0.776,903,3.492,922,1.352,923,1.433,939,1.976,942,1.134,947,3.216,950,0.823,954,1.642,957,0.823,971,3.796,983,1.976,1032,1.784,1039,1.134,1042,1.134,1073,0.943,1076,1.024,1084,0.823,1124,0.943,1170,1.134,1186,1.528,1201,2.625,1214,0.877,1240,1.134,1306,1.024,1319,1.528,1330,2.837,1398,1.134,1399,1.301,1400,5.532,1401,1.134,1402,1.301,1403,2.266,1404,1.301,1405,5.425,1406,1.301,1407,1.134,1408,1.301,1409,2.266,1410,1.301,1411,2.266,1412,1.301,1413,1.301,1414,1.301,1415,1.301,1416,1.301,1417,1.134,1418,5.719,1419,1.301,1420,1.301,1421,1.301,1422,1.301,1423,1.301,1424,1.301,1425,2.266,1426,5.107,1427,3.909,1428,1.301,1429,1.024,1430,1.301,1431,1.301,1432,1.301,1433,1.134,1434,1.024,1435,1.976,1436,1.301,1437,1.024,1438,1.301,1439,1.301,1440,1.301,1441,1.301,1442,1.301,1443,1.301,1444,1.301,1445,1.301,1446,1.134,1447,1.301]],["t/131",[12,1.457,52,2.499,54,2.716,81,2.989,83,1.726,88,1.916,93,2.219,107,2.989,113,3.518,192,2.306,194,1.558,197,1.916,359,1.907,373,2.722,383,3.769,399,1.558,497,3.318,506,1.457,541,1.667,697,4.381,754,4.381,832,2.849,848,4.381,897,5.937,910,4.031,913,4.031,923,3.518,947,4.381,1448,5.563,1449,5.563,1450,5.563,1451,5.563,1452,4.85]],["t/133",[2,0.405,12,0.866,39,2.287,42,0.703,45,2.976,54,1.614,55,2.709,58,1.554,61,0.866,78,1.926,87,2.837,107,2.174,123,1.059,156,2.729,181,1.498,186,2.051,189,2.073,197,2.339,220,3.503,228,2.559,245,1.346,292,2.389,294,2.414,300,3.529,335,3.235,356,1.718,359,1.133,365,1.255,369,2.559,373,2.711,389,1.745,392,4.842,448,2.296,452,2.595,453,1.896,497,2.414,505,2.414,529,2.174,541,2.132,593,2.414,595,2.414,812,2.389,832,2.837,868,3.529,891,3.304,903,2.932,950,2.559,1037,3.838,1076,3.187,1083,2.729,1084,2.559,1091,3.187,1197,3.529,1385,3.529,1434,3.187,1435,3.529,1453,5.539,1454,4.047,1455,4.047,1456,4.974,1457,4.047,1458,4.047,1459,4.047,1460,4.047,1461,4.047,1462,4.047,1463,4.047,1464,4.047,1465,4.047,1466,4.047,1467,3.529,1468,4.047,1469,4.047,1470,4.047,1471,4.047,1472,4.047,1473,4.047]],["t/135",[2,0.459,35,2.16,39,2.758,42,1.204,56,0.818,57,0.975,59,2.388,60,2.388,62,2.499,63,2.104,83,1.514,123,0.818,157,1.463,168,2.622,191,1.514,194,1.367,197,1.681,204,2.758,215,3.086,260,1.946,288,3.086,312,3.086,356,2.269,359,1.757,365,1.514,367,2.758,395,2.286,493,1.946,495,3.741,505,2.911,541,2.193,577,3.843,699,6.401,766,2.192,820,4.545,1025,3.843,1153,4.255,1467,6.044,1474,4.88,1475,4.88,1476,4.88,1477,4.88,1478,4.88,1479,4.88,1480,4.88]],["t/137",[2,0.455,35,1.87,42,1.081,61,0.841,66,1.403,78,1.064,81,2.112,83,1.684,88,1.354,93,2.676,108,2.65,123,0.91,124,1.455,131,2.848,136,1.743,138,1.286,149,4.198,157,1.178,158,1.841,168,2.112,181,1.455,188,1.695,197,1.354,210,2.221,211,1.354,214,1.629,228,2.486,292,1.695,309,2.221,310,1.629,343,2.01,346,1.766,356,2.081,359,1.521,365,1.219,367,2.221,369,2.486,389,1.695,405,1.307,416,2.345,448,3.299,458,2.221,493,1.568,495,3.239,502,2.486,541,1.178,712,2.345,766,1.766,832,2.013,833,3.096,891,2.345,903,2.848,905,3.096,923,2.486,950,2.486,1032,4.276,1134,2.221,1186,2.65,1211,3.096,1273,3.096,1319,2.65,1398,3.427,1400,3.427,1401,3.427,1405,3.427,1407,5.849,1417,3.427,1418,5.424,1481,6.708,1482,6.708,1483,3.931,1484,3.931,1485,5.429,1486,3.931,1487,3.931,1488,3.931,1489,3.931,1490,3.931,1491,3.931,1492,3.931]],["t/139",[2,0.368,35,1.215,38,2.23,42,0.874,61,1.076,72,4.412,78,1.588,83,1.094,88,1.215,93,2.007,98,2.377,101,1.652,107,1.894,122,2.555,123,0.843,157,1.917,171,2.703,181,1.305,188,2.758,191,1.094,194,2.027,196,2.703,240,2.23,244,4.194,245,1.172,248,2.462,264,5.095,292,1.521,303,1.584,310,2.085,326,1.894,343,2.679,346,1.584,365,2.098,367,1.993,373,1.725,387,1.894,452,3.466,453,2.357,454,4.989,488,5.037,489,2.777,492,3.962,493,2.339,541,1.758,542,2.777,562,1.462,636,3.001,812,1.521,858,2.377,865,3.645,891,2.103,898,2.377,913,2.555,922,2.103,923,2.23,925,2.777,950,2.23,1073,2.555,1083,3.955,1084,3.709,1091,2.777,1092,3.074,1188,2.777,1291,2.555,1321,3.074,1493,3.526,1494,3.526,1495,5.865,1496,3.526,1497,4.386,1498,3.526,1499,3.526,1500,3.526,1501,3.526,1502,5.865,1503,3.526,1504,3.526,1505,3.526]],["t/141",[2,0.414,26,3.093,49,1.056,57,1.132,69,6.003,77,1.951,138,1.341,153,3.201,157,1.698,161,2.544,177,1.819,185,3.154,186,2.549,191,1.757,194,1.587,201,2.772,208,3.369,209,3.379,258,4.462,276,2.772,411,4.105,420,3.82,506,1.483,712,3.379,841,3.379,1168,4.107]],["t/143",[2,0.455,43,3.05,49,1.285,57,1.377,77,2.144,78,1.306,101,2.259,115,3.494,123,0.809,185,2.905,186,2.858,191,1.496,194,1.351,208,3.046,211,1.661,276,2.36,323,2.36,356,2.138,359,1.351,474,2.725,506,1.263,599,4.205,712,3.713,840,4.994,841,4.112,958,3.05,975,4.205,981,4.205,1036,4.205,1100,3.494,1168,4.345,1429,3.798,1434,3.798,1506,4.823,1507,6.351,1508,4.823,1509,4.823,1510,4.823,1511,4.823,1512,4.823,1513,4.823,1514,4.823,1515,4.823,1516,4.823,1517,4.205]],["t/145",[2,0.49,12,0.784,26,2.042,35,1.78,44,1.04,49,1.05,56,0.866,57,1.254,58,0.889,59,1.133,61,0.784,67,0.889,71,1.677,73,1.464,77,1.566,78,0.627,83,1.136,85,1.243,88,0.797,97,3.194,108,1.561,123,1.091,136,1.176,149,1.243,152,1.823,177,0.743,185,2.502,186,2.636,187,2.185,188,3.155,194,0.648,200,1.381,204,1.308,208,3.278,209,4.668,210,1.308,211,0.797,217,3.065,226,1.677,229,1.677,233,1.464,246,2.885,248,1.133,259,1.823,292,0.998,310,2.334,323,1.133,343,2.322,346,1.04,356,0.718,359,1.273,383,1.185,395,1.716,405,1.511,407,2.018,463,1.677,471,3.294,493,0.923,506,0.606,507,2.185,512,2.47,526,2.875,541,1.363,549,1.677,569,2.018,594,3.213,611,2.654,613,1.823,688,1.561,706,1.464,710,3.58,738,1.823,797,2.316,803,4.717,812,0.998,841,2.712,865,2.654,950,2.316,956,2.018,957,1.464,958,4.679,959,2.018,973,2.018,985,2.018,1037,1.308,1046,5.672,1047,2.018,1048,3.194,1049,2.885,1051,2.018,1056,2.018,1079,2.018,1098,2.018,1100,3.294,1122,2.018,1155,3.194,1157,3.963,1159,3.963,1160,2.018,1161,3.194,1162,2.018,1163,3.194,1164,2.018,1165,2.018,1168,3.573,1207,2.018,1291,1.677,1304,1.677,1352,2.018,1437,1.823,1518,4.546,1519,4.546,1520,2.314,1521,3.663,1522,3.663,1523,3.194,1524,2.314,1525,2.314,1526,2.314,1527,2.314,1528,3.663,1529,2.314,1530,2.314,1531,2.314,1532,2.314,1533,3.663,1534,2.314,1535,2.314,1536,2.314,1537,3.663,1538,3.194,1539,2.314,1540,2.314,1541,2.314,1542,2.314,1543,3.663,1544,3.663,1545,2.314,1546,2.314,1547,2.314,1548,2.314,1549,4.546,1550,2.314,1551,2.314,1552,2.314,1553,2.314,1554,3.663,1555,3.663,1556,2.314,1557,2.314]],["t/147",[1,1.809,2,0.284,9,1.17,12,1.552,19,3.46,20,1.967,26,1.122,37,1.561,42,1.015,44,1.746,49,1.279,52,1.122,53,2.817,55,2.329,57,0.954,61,1.022,62,2.991,63,2.324,66,1.388,73,1.579,78,0.676,85,1.342,93,1.551,98,1.684,110,1.809,111,2.177,123,0.903,129,1.809,144,1.077,154,1.579,156,1.684,157,0.749,160,2.177,164,1.579,168,2.089,177,0.802,178,1.342,180,3.215,186,1.995,187,2.319,188,1.077,191,0.775,192,1.035,197,1.645,201,1.222,204,1.411,207,1.342,211,0.86,220,1.579,238,2.089,240,1.579,244,1.49,245,1.588,260,0.775,272,1.967,292,2.324,303,1.746,312,2.459,316,1.579,320,1.579,323,1.222,326,1.342,329,1.967,343,1.767,346,1.122,356,1.481,359,0.699,365,0.775,367,1.411,369,1.579,383,2.76,385,1.967,389,2.958,395,1.17,432,2.445,438,1.49,442,0.749,449,3.062,474,1.411,500,2.197,533,3.76,536,2.817,541,1.936,542,1.967,562,1.035,566,1.684,584,1.967,593,2.319,594,1.991,595,3.215,605,3.905,621,1.967,622,1.809,698,4.481,712,1.49,766,1.746,812,1.077,825,3.39,847,1.684,891,1.49,902,1.967,938,2.177,940,3.39,946,1.967,994,2.177,1049,1.967,1060,1.967,1073,1.809,1120,2.177,1127,2.177,1128,2.177,1139,1.809,1149,2.459,1158,2.177,1188,1.967,1209,2.177,1214,1.684,1287,1.967,1304,1.809,1306,1.967,1322,1.967,1330,1.967,1456,1.967,1497,2.177,1523,3.39,1558,3.888,1559,3.888,1560,3.888,1561,2.497,1562,2.497,1563,2.177,1564,2.497,1565,2.497,1566,2.497,1567,2.497,1568,2.497,1569,3.888,1570,4.163,1571,2.497,1572,2.497,1573,2.497,1574,2.497,1575,2.497,1576,2.497,1577,2.497,1578,2.497,1579,2.497,1580,3.888,1581,1.809,1582,2.497,1583,2.497,1584,2.497,1585,2.497,1586,2.497,1587,2.497,1588,2.177,1589,2.497,1590,2.497,1591,2.497,1592,2.497,1593,3.39,1594,2.497,1595,2.497,1596,2.497,1597,2.497,1598,2.497,1599,2.497,1600,2.497,1601,2.497,1602,2.497,1603,3.888,1604,2.177,1605,2.497,1606,2.497,1607,2.497,1608,2.497,1609,2.497,1610,2.497,1611,2.497,1612,2.177,1613,2.497,1614,2.177,1615,2.177,1616,2.497,1617,2.497,1618,2.497,1619,2.497]],["t/149",[2,0.404,5,1.223,9,0.906,12,1.667,19,1.401,26,0.868,37,0.918,39,1.093,42,1.199,43,1.223,44,1.808,49,1.174,52,2.308,54,0.771,55,2.703,56,1.02,57,1.259,58,1.546,61,0.861,62,0.99,66,0.69,67,2.239,75,1.223,78,1.392,81,1.039,83,1.444,85,1.039,87,2.308,88,0.666,93,1.606,101,0.906,102,1.523,105,1.89,107,1.039,110,1.401,113,1.223,123,0.925,124,0.716,125,1.523,128,1.523,129,1.401,133,1.686,136,1.495,137,4.813,138,0.75,143,1.523,144,1.366,154,2.004,156,2.715,157,0.95,162,1.401,164,1.223,169,1.686,177,0.621,186,1.49,188,1.366,189,2.062,192,0.801,194,0.541,196,1.039,197,1.604,211,1.77,220,2.546,223,2.004,233,1.223,236,1.153,238,1.039,245,0.643,260,1.444,276,0.946,288,1.223,292,1.366,295,1.523,309,1.791,311,1.039,316,1.223,320,2.004,322,2.004,323,0.946,343,1.49,346,2.829,356,1.712,359,1.128,361,1.304,365,0.983,373,0.946,389,2.38,399,0.541,400,0.506,419,1.223,422,1.223,432,1.623,448,1.313,458,1.093,497,1.153,500,1.791,506,1.346,512,1.304,541,1.396,550,1.153,562,0.801,582,1.523,593,2.402,594,2.385,595,2.402,618,1.523,636,1.153,637,1.401,679,1.223,682,1.791,688,2.136,703,2.296,766,2.308,797,1.223,812,0.834,822,1.523,827,2.136,832,2.385,840,1.401,841,1.153,847,2.715,849,2.763,853,3.171,854,1.523,863,2.495,870,1.686,877,1.304,890,1.686,898,1.304,907,1.686,910,2.296,912,4.06,922,2.402,925,1.523,931,2.763,932,1.686,958,2.004,971,2.495,1022,1.686,1037,1.093,1100,1.401,1212,1.401,1300,1.523,1319,1.304,1322,1.523,1427,2.763,1433,2.763,1437,1.523,1446,1.686,1452,1.686,1456,1.523,1538,1.686,1563,1.686,1570,2.763,1581,2.296,1588,1.686,1593,1.686,1612,1.686,1615,1.686,1620,1.933,1621,1.933,1622,1.933,1623,1.933,1624,1.933,1625,6.299,1626,1.933,1627,1.933,1628,3.168,1629,1.933,1630,3.168,1631,3.168,1632,1.933,1633,1.933,1634,1.933,1635,1.933,1636,1.933,1637,1.933,1638,1.933,1639,1.933,1640,1.933,1641,1.933,1642,1.933,1643,1.933,1644,1.933,1645,1.933,1646,3.168,1647,1.933,1648,1.933,1649,3.168,1650,1.933,1651,1.933,1652,1.933,1653,1.933,1654,1.933,1655,1.933,1656,3.168,1657,1.933,1658,1.933,1659,1.933,1660,1.933,1661,3.168,1662,1.933,1663,1.933,1664,4.026,1665,1.933,1666,1.933,1667,1.933,1668,3.168,1669,1.933,1670,1.933,1671,1.933,1672,1.933,1673,1.933,1674,1.933,1675,1.933,1676,1.933,1677,1.933]],["t/151",[2,0.537,44,1.818,49,1.178,51,5.507,54,2.519,56,0.678,57,1.107,58,1.554,63,1.745,66,2.255,68,2.287,78,1.096,124,1.498,158,3.332,183,2.414,185,2.209,186,2.051,189,2.073,191,1.255,194,1.133,197,1.394,202,2.287,205,2.414,206,2.729,207,3.822,208,1.98,209,2.414,213,2.729,215,2.559,225,3.529,245,1.346,282,2.932,287,3.994,294,2.414,303,1.818,304,2.932,321,1.678,322,2.559,365,1.255,397,2.414,420,2.729,443,2.932,460,3.503,474,2.287,493,1.614,501,2.729,506,1.06,540,2.932,541,2.132,560,2.595,594,2.837,703,2.932,706,2.559,736,2.932,789,4.974,847,2.729,898,2.729,955,3.529,1037,2.287,1071,3.187,1140,3.187,1141,3.529,1142,2.729,1144,5.507,1145,3.529,1146,3.529,1169,3.187,1183,3.529,1288,2.932,1296,2.932,1309,3.529,1581,2.932,1678,4.047,1679,4.047,1680,4.047,1681,4.047,1682,4.047,1683,5.539,1684,3.529,1685,5.539,1686,4.047,1687,4.047,1688,4.047]],["t/153",[2,0.321,42,1.017,55,1.752,56,0.736,57,0.878,61,0.94,66,1.568,67,1.687,77,2.017,85,2.36,108,2.962,181,2.167,184,2.962,185,1.752,186,1.626,191,1.816,194,1.967,196,2.36,197,2.688,200,3.493,212,2.15,214,1.821,216,3.183,248,2.865,287,2.778,292,1.894,296,2.778,302,3.83,316,2.778,326,2.36,343,1.626,365,1.363,389,3.029,403,2.25,474,3.309,507,2.62,526,2.778,539,2.62,541,1.974,547,3.46,550,2.62,562,2.73,580,3.183,605,3.183,812,2.525,867,2.962,891,2.62,982,3.83,1037,2.483,1134,2.483,1139,3.183,1196,3.83,1211,3.46,1212,3.183,1517,3.83,1581,4.242,1614,3.83,1684,5.105,1689,4.393,1690,4.393,1691,4.393,1692,4.393,1693,4.393,1694,4.393,1695,4.393,1696,4.393,1697,4.393,1698,4.393,1699,4.393,1700,4.393,1701,4.393]],["t/155",[2,0.42,56,0.963,66,2.051,78,1.556,157,2.237,158,3.253,202,3.246,205,3.426,206,3.873,207,3.086,245,2.309,247,3.218,403,2.942,448,2.381,539,3.426,562,2.381,1083,5.032,1084,4.719,1296,4.162,1702,5.744,1703,5.744,1704,5.744]],["t/157",[49,1.393,56,1.09,57,1.299,957,4.111,1151,3.674,1291,4.711]],["t/159",[2,0.475,5,3.634,9,2.001,12,1.681,35,1.471,42,0.998,45,3.894,49,1.295,56,1.164,57,1.388,59,2.09,60,2.09,64,2.701,123,1.089,136,1.372,162,3.095,186,2.127,202,2.414,211,1.471,233,2.701,245,1.42,247,1.842,260,1.325,315,3.364,356,1.782,359,1.609,383,2.943,432,2.188,437,4.265,449,3.364,493,2.292,506,1.505,545,3.724,679,2.701,711,4.525,715,4.525,718,3.364,721,5.114,722,4.525,728,4.525,1189,3.724,1190,3.724,1191,3.724,1319,2.88,1429,3.364,1507,3.724,1705,5.746,1706,5.746,1707,3.724,1708,3.724,1709,3.724,1710,4.271,1711,4.271,1712,4.271,1713,4.271,1714,4.271]],["t/161",[2,0.445,12,1.704,42,0.656,49,1.34,55,1.505,56,0.885,57,1.386,58,2.028,59,1.847,60,1.847,64,4.169,66,1.347,67,2.338,68,3.44,77,1.818,78,1.022,83,1.171,124,1.397,161,2.371,162,2.735,186,1.954,191,1.171,211,1.3,214,1.565,238,2.836,245,1.255,260,1.171,311,2.028,315,2.973,335,2.703,356,1.637,359,1.478,393,2.983,395,1.768,424,4.602,432,1.933,457,4.411,506,1.382,594,1.933,796,2.545,806,4.157,812,1.628,854,4.157,953,3.291,954,2.735,1062,4.602,1103,4.776,1108,2.973,1111,4.157,1118,2.973,1134,2.133,1149,2.387,1150,2.545,1151,2.133,1212,3.825,1297,3.291,1299,3.291,1300,2.973,1301,4.602,1302,3.291,1304,2.735,1316,3.291,1388,3.291,1604,3.291,1707,3.291,1708,3.291,1709,3.291,1715,5.278,1716,5.278,1717,6.087,1718,3.774,1719,3.774,1720,3.774,1721,3.774,1722,5.278,1723,3.774,1724,3.774,1725,3.774,1726,3.774,1727,3.774,1728,3.774,1729,3.774,1730,3.774,1731,3.774,1732,3.774,1733,3.774]]],"invertedIndex":[["",{"_index":12,"t":{"2":{"position":[[119,1],[624,1]]},"10":{"position":[[115,1],[155,1],[157,1],[291,1],[293,1],[305,2],[377,2],[465,1],[467,2],[470,1],[609,1],[611,1],[623,2],[695,2],[797,1],[799,1],[801,2]]},"12":{"position":[[119,1],[559,4]]},"20":{"position":[[752,3],[756,4],[794,3],[798,4],[837,3],[841,4],[846,3]]},"39":{"position":[[234,1]]},"57":{"position":[[618,3],[972,1],[974,1],[987,1],[1038,1]]},"59":{"position":[[693,1]]},"69":{"position":[[202,1],[204,1],[331,1],[333,1]]},"73":{"position":[[649,1],[655,2]]},"77":{"position":[[258,3]]},"79":{"position":[[209,1]]},"89":{"position":[[1195,1]]},"91":{"position":[[213,1],[238,1],[259,1]]},"97":{"position":[[400,2],[458,2]]},"99":{"position":[[256,1],[1159,1],[1179,1],[1319,1],[2648,1],[2669,2],[2716,1],[2736,1]]},"103":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[282,1],[313,1],[321,4],[326,1],[331,1],[571,1],[698,1],[707,1],[729,1],[731,1]]},"105":{"position":[[83,1],[85,1]]},"107":{"position":[[71,2],[211,1],[1168,1],[1701,1],[1824,3],[2175,4],[2180,2],[2536,1],[2538,1],[2611,1],[2692,1],[2780,1],[3242,2],[3549,1],[3551,1],[3629,1],[3631,1],[4068,1],[4207,1],[4318,1],[5241,1],[5784,2],[7347,1],[7414,4],[8466,2],[8535,1],[9201,2],[9394,2],[10076,1],[10823,1],[13136,1],[13264,1],[13413,1],[13477,1],[13628,1],[13659,1],[14609,1],[15038,1],[15326,1],[15426,1],[15664,1],[15746,1],[15753,2],[15835,1],[16485,1],[16492,2],[16844,2]]},"109":{"position":[[282,1]]},"111":{"position":[[147,1],[149,1]]},"113":{"position":[[215,1],[241,1],[278,1],[343,1]]},"115":{"position":[[927,1]]},"117":{"position":[[782,1]]},"121":{"position":[[297,1],[327,4],[372,1],[533,1],[577,1],[649,1],[660,1],[675,1],[828,1],[911,3],[944,1],[955,1],[957,1],[1001,1],[1020,1],[1082,1],[1314,1],[1500,1],[1676,1],[1769,1],[1835,1],[1933,1],[2112,1],[2193,1],[2298,2],[2301,3],[2305,5],[2311,1],[2428,1],[2430,1],[2526,1],[2614,1],[2644,1],[2688,4],[2697,2],[3370,1],[3451,1],[3480,2],[3483,2],[3516,1],[3528,2],[3555,2],[3588,5],[3598,1]]},"125":{"position":[[589,2]]},"127":{"position":[[154,1],[349,1],[488,2],[570,1],[757,2],[858,1],[1069,2],[1282,2]]},"129":{"position":[[221,2],[351,2],[445,2],[524,2],[588,2],[658,2],[2130,1],[2410,1],[2683,1],[2705,1],[3577,1],[3591,1],[3611,1],[4487,1],[4531,1],[4582,1],[4604,1],[4613,1],[4658,1],[4696,1],[4708,1],[4724,1],[4739,1],[4780,1],[5085,1],[5107,1],[5124,1],[5156,1],[6079,3],[6315,1],[6337,1],[6354,1],[6374,1],[6571,1],[6992,1],[7014,1],[7031,1]]},"131":{"position":[[366,1],[396,1]]},"133":{"position":[[674,2]]},"145":{"position":[[2507,2],[2551,2]]},"147":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"149":{"position":[[39,1],[1414,1],[3059,1],[3080,1],[3140,1],[3191,1],[3193,1],[3236,1],[3238,1],[3261,1],[3284,1],[3311,1],[3331,1],[3361,1],[4385,1],[4406,1],[4463,1],[4519,1],[4521,1],[4559,1],[4561,1],[4577,1],[4598,1],[4623,1],[4643,1],[4664,1],[4692,1],[4769,1]]},"159":{"position":[[227,1],[262,1],[298,1],[334,1],[369,1],[391,1],[414,1],[431,1],[449,1]]},"161":{"position":[[114,3],[750,1],[951,1],[953,1],[1130,2],[1229,1],[1264,1],[1300,1],[1322,1],[1345,1],[1362,1],[1385,1],[1403,1]]}}}],["0",{"_index":1048,"t":{"107":{"position":[[1422,2],[1894,1],[6044,1],[6057,1],[11584,1]]},"145":{"position":[[1112,1],[1702,4]]}}}],["0.0.0.0:4180",{"_index":1677,"t":{"149":{"position":[[4771,14]]}}}],["0.001",{"_index":1285,"t":{"117":{"position":[[916,5]]}}}],["0.2.0",{"_index":135,"t":{"10":{"position":[[128,8]]}}}],["00010203",{"_index":1261,"t":{"115":{"position":[[1121,8]]},"117":{"position":[[984,8]]}}}],["0400",{"_index":1246,"t":{"115":{"position":[[256,5],[1301,4]]},"117":{"position":[[137,5],[1323,4]]},"119":{"position":[[267,5],[593,4]]}}}],["0405",{"_index":1262,"t":{"115":{"position":[[1130,4]]},"117":{"position":[[993,4]]}}}],["0a0b0c0d0e0f",{"_index":1265,"t":{"115":{"position":[[1145,12]]},"117":{"position":[[1008,12]]}}}],["1",{"_index":796,"t":{"75":{"position":[[2225,1]]},"99":{"position":[[2312,3],[2383,1]]},"107":{"position":[[1939,3],[16340,2]]},"127":{"position":[[423,2]]},"161":{"position":[[1081,2]]}}}],["1.19",{"_index":109,"t":{"6":{"position":[[41,5],[126,4]]}}}],["1.3",{"_index":719,"t":{"71":{"position":[[474,3]]}}}],["1.5h",{"_index":481,"t":{"39":{"position":[[236,5]]}}}],["10",{"_index":976,"t":{"99":{"position":[[2501,3]]}}}],["100",{"_index":1126,"t":{"107":{"position":[[6140,3]]}}}],["12",{"_index":1289,"t":{"117":{"position":[[1200,2]]}}}],["12.x",{"_index":1453,"t":{"133":{"position":[[58,5],[128,4]]}}}],["123456.apps.googleusercontent.com",{"_index":1038,"t":{"107":{"position":[[842,35]]}}}],["127.0.0.1:4180",{"_index":1108,"t":{"107":{"position":[[5463,16]]},"119":{"position":[[732,14]]},"161":{"position":[[150,14]]}}}],["128",{"_index":1522,"t":{"145":{"position":[[384,3],[435,3]]}}}],["15",{"_index":1163,"t":{"107":{"position":[[11462,2],[11493,2]]},"145":{"position":[[3491,2],[3522,2]]}}}],["15m",{"_index":1067,"t":{"107":{"position":[[2379,3]]}}}],["168h0m0",{"_index":1051,"t":{"107":{"position":[[1503,8]]},"145":{"position":[[1177,8]]}}}],["17",{"_index":1406,"t":{"129":{"position":[[246,4]]}}}],["19.0.0",{"_index":1414,"t":{"129":{"position":[[728,7]]}}}],["19/mar/2015:17:20:19",{"_index":1245,"t":{"115":{"position":[[233,21],[1279,20]]},"117":{"position":[[114,21],[1301,20]]},"119":{"position":[[244,21],[571,20]]}}}],["1916",{"_index":1432,"t":{"129":{"position":[[3462,5]]}}}],["192",{"_index":1019,"t":{"103":{"position":[[645,3]]}}}],["1h",{"_index":961,"t":{"99":{"position":[[923,4]]}}}],["1m",{"_index":1544,"t":{"145":{"position":[[2099,4],[2534,2]]}}}],["1s",{"_index":1087,"t":{"107":{"position":[[3357,4]]}}}],["2",{"_index":877,"t":{"89":{"position":[[1134,1]]},"99":{"position":[[1560,1]]},"107":{"position":[[15811,3],[16415,2]]},"127":{"position":[[717,2]]},"149":{"position":[[3458,2]]}}}],["2.0",{"_index":1452,"t":{"131":{"position":[[213,3]]},"149":{"position":[[35,3]]}}}],["20",{"_index":1094,"t":{"107":{"position":[[4521,2]]}}}],["200",{"_index":789,"t":{"75":{"position":[[1941,3]]},"117":{"position":[[1249,3]]},"151":{"position":[[223,3],[336,3],[417,3]]}}}],["202",{"_index":1296,"t":{"121":{"position":[[186,3]]},"125":{"position":[[162,3]]},"151":{"position":[[1098,3]]},"155":{"position":[[22,3]]}}}],["2048",{"_index":1572,"t":{"147":{"position":[[1052,4]]}}}],["21.0.0",{"_index":1416,"t":{"129":{"position":[[865,7]]}}}],["24",{"_index":1017,"t":{"103":{"position":[[631,2]]}}}],["2>/dev/nul",{"_index":1003,"t":{"103":{"position":[[227,11]]}}}],["2f",{"_index":810,"t":{"77":{"position":[[211,7]]}}}],["2h45m",{"_index":482,"t":{"39":{"position":[[245,8]]}}}],["3",{"_index":833,"t":{"85":{"position":[[385,2],[421,2]]},"89":{"position":[[1492,2],[1800,2]]},"137":{"position":[[1248,4]]}}}],["3/4",{"_index":1203,"t":{"107":{"position":[[16113,3]]}}}],["30",{"_index":806,"t":{"75":{"position":[[2598,2]]},"107":{"position":[[15299,3]]},"161":{"position":[[1103,3],[1126,3]]}}}],["300m",{"_index":480,"t":{"39":{"position":[[225,8]]}}}],["315360000",{"_index":1373,"t":{"125":{"position":[[965,9]]},"127":{"position":[[1723,9]]}}}],["32",{"_index":1009,"t":{"103":{"position":[[310,2],[579,2],[709,2]]}}}],["3650",{"_index":1583,"t":{"147":{"position":[[1175,4]]}}}],["401",{"_index":205,"t":{"12":{"position":[[403,3]]},"107":{"position":[[230,3]]},"121":{"position":[[213,3],[997,3]]},"125":{"position":[[189,3],[1254,4]]},"127":{"position":[[898,3]]},"151":{"position":[[1125,3]]},"155":{"position":[[49,3]]}}}],["403",{"_index":1383,"t":{"125":{"position":[[1259,4]]}}}],["4180",{"_index":1721,"t":{"161":{"position":[[465,5]]}}}],["443",{"_index":1111,"t":{"107":{"position":[[5629,6],[16691,3]]},"121":{"position":[[306,3]]},"161":{"position":[[395,3],[759,3]]}}}],["4607",{"_index":1263,"t":{"115":{"position":[[1135,4]]},"117":{"position":[[998,4]]}}}],["4kb",{"_index":1318,"t":{"121":{"position":[[1765,3],[1970,4]]}}}],["5",{"_index":882,"t":{"89":{"position":[[1528,2],[1836,2]]},"99":{"position":[[2038,1]]}}}],["59",{"_index":1545,"t":{"145":{"position":[[2140,6]]}}}],["7",{"_index":1123,"t":{"107":{"position":[[5973,1]]}}}],["74.125.224.72",{"_index":1257,"t":{"115":{"position":[[840,13]]},"117":{"position":[[695,13]]}}}],["80",{"_index":1215,"t":{"107":{"position":[[16677,3]]}}}],["8809",{"_index":1264,"t":{"115":{"position":[[1140,4]]},"117":{"position":[[1003,4]]}}}],["9",{"_index":974,"t":{"99":{"position":[[2316,2]]}}}],["994",{"_index":1454,"t":{"133":{"position":[[138,5]]}}}],["_",{"_index":1006,"t":{"103":{"position":[[279,2],[328,2],[733,3]]},"105":{"position":[[104,4]]},"111":{"position":[[168,4]]}}}],["__host",{"_index":1054,"t":{"107":{"position":[[1680,7]]}}}],["__secur",{"_index":1055,"t":{"107":{"position":[[1692,8]]}}}],["_oauth2_proxi",{"_index":1056,"t":{"107":{"position":[[1730,15]]},"145":{"position":[[339,14]]}}}],["_oauth2_proxy_1",{"_index":1355,"t":{"121":{"position":[[3983,18]]}}}],["aad",{"_index":869,"t":{"89":{"position":[[880,3]]}}}],["abov",{"_index":1273,"t":{"115":{"position":[[1542,5]]},"119":{"position":[[45,5]]},"137":{"position":[[1234,5]]}}}],["absent",{"_index":1095,"t":{"107":{"position":[[4527,6]]}}}],["accept",{"_index":202,"t":{"12":{"position":[[363,7]]},"71":{"position":[[139,11]]},"107":{"position":[[11976,8],[14971,11]]},"121":{"position":[[190,8]]},"125":{"position":[[166,8]]},"151":{"position":[[1102,8]]},"155":{"position":[[26,8]]},"159":{"position":[[566,10]]}}}],["acceptable.e.g",{"_index":717,"t":{"71":{"position":[[420,15]]}}}],["access",{"_index":343,"t":{"26":{"position":[[349,6]]},"31":{"position":[[101,6]]},"35":{"position":[[171,6]]},"41":{"position":[[346,6]]},"53":{"position":[[259,6]]},"61":{"position":[[2364,6],[2511,6]]},"91":{"position":[[528,6],[638,6],[674,6]]},"99":{"position":[[1796,7]]},"107":{"position":[[4021,6],[4446,6],[4493,6],[7426,6],[7496,6],[7580,6],[8382,6],[9598,6],[12533,6],[12562,6],[15570,6]]},"121":{"position":[[1338,6],[1479,6]]},"127":{"position":[[2016,6],[2192,6]]},"129":{"position":[[949,6],[2352,6],[2412,6],[2722,6],[3114,6],[3442,6],[3692,6],[7152,6]]},"137":{"position":[[138,6],[1174,6]]},"139":{"position":[[296,7],[925,6],[1000,6],[1037,6],[1187,6],[1218,6],[1307,6]]},"145":{"position":[[1479,6],[1672,6],[1711,6],[1873,6],[2068,6],[2447,6],[2510,6]]},"147":{"position":[[305,7],[2650,6],[3170,10]]},"149":{"position":[[2344,6],[2403,7],[2977,6]]},"153":{"position":[[214,9]]}}}],["access_by_lua_block",{"_index":1347,"t":{"121":{"position":[[3431,19]]}}}],["access_token",{"_index":1133,"t":{"107":{"position":[[7455,12]]}}}],["accesstokenacceptedvers",{"_index":876,"t":{"89":{"position":[[1104,29]]}}}],["accompani",{"_index":1496,"t":{"139":{"position":[[382,11]]}}}],["account",{"_index":500,"t":{"45":{"position":[[271,7],[520,7]]},"89":{"position":[[177,7]]},"91":{"position":[[204,7],[487,7]]},"99":{"position":[[981,7],[1095,7],[2482,7],[2923,7]]},"107":{"position":[[4726,7],[4770,7],[4900,7],[5048,7]]},"129":{"position":[[3946,7]]},"147":{"position":[[260,8],[737,7]]},"149":{"position":[[1641,8],[3746,8]]}}}],["acr",{"_index":377,"t":{"26":{"position":[[1037,3]]},"107":{"position":[[34,3]]}}}],["activ",{"_index":846,"t":{"89":{"position":[[65,6],[1349,6]]},"129":{"position":[[4394,10],[5193,9]]}}}],["actual",{"_index":867,"t":{"89":{"position":[[851,8]]},"91":{"position":[[124,6]]},"93":{"position":[[221,6]]},"121":{"position":[[3753,6]]},"153":{"position":[[1056,6]]}}}],["ad",{"_index":212,"t":{"12":{"position":[[637,5]]},"24":{"position":[[7,6]]},"29":{"position":[[66,6]]},"47":{"position":[[79,5]]},"61":{"position":[[2455,2]]},"79":{"position":[[314,2]]},"87":{"position":[[4,6],[49,2]]},"107":{"position":[[11863,2],[12578,5]]},"109":{"position":[[832,6]]},"129":{"position":[[1902,5],[6882,5]]},"153":{"position":[[938,5]]}}}],["adc",{"_index":979,"t":{"99":{"position":[[2710,5],[2979,3]]},"107":{"position":[[5020,3],[5071,3]]}}}],["add",{"_index":87,"t":{"4":{"position":[[226,3]]},"18":{"position":[[148,3]]},"20":{"position":[[432,3]]},"83":{"position":[[80,3]]},"85":{"position":[[64,3]]},"87":{"position":[[74,3]]},"89":{"position":[[0,3],[430,3],[532,3],[662,3],[1222,3],[1284,4]]},"91":{"position":[[0,3]]},"103":{"position":[[333,3]]},"107":{"position":[[7556,4],[16769,3]]},"129":{"position":[[3414,3],[3435,3],[3579,3],[6356,3],[6590,3]]},"133":{"position":[[223,3],[431,3],[1310,3]]},"149":{"position":[[606,3],[1296,4],[1989,3],[2336,3],[2567,3]]}}}],["add_head",{"_index":1316,"t":{"121":{"position":[[1640,10],[2528,10],[2571,10]]},"161":{"position":[[888,10]]}}}],["addedto",{"_index":417,"t":{"31":{"position":[[667,7],[902,7]]}}}],["addit",{"_index":636,"t":{"59":{"position":[[1553,10],[1614,8]]},"91":{"position":[[559,10]]},"107":{"position":[[7354,10]]},"121":{"position":[[2000,10]]},"129":{"position":[[3181,10],[3260,8]]},"139":{"position":[[206,10],[776,8]]},"149":{"position":[[2066,10]]}}}],["addition",{"_index":1098,"t":{"107":{"position":[[5098,12]]},"145":{"position":[[852,13]]}}}],["address",{"_index":560,"t":{"57":{"position":[[496,9]]},"59":{"position":[[230,7]]},"69":{"position":[[146,7],[268,7]]},"81":{"position":[[103,9],[207,9]]},"99":{"position":[[1854,7]]},"107":{"position":[[5307,7],[5431,8],[5488,7],[5597,8],[6605,7],[7920,7],[9327,7],[9346,7],[16124,8],[16217,7]]},"115":{"position":[[81,7],[875,8]]},"117":{"position":[[730,8]]},"125":{"position":[[1150,8]]},"127":{"position":[[1917,8],[2082,8]]},"129":{"position":[[3755,7]]},"151":{"position":[[568,7],[599,8]]}}}],["address=\"0.0.0.0:4180",{"_index":1719,"t":{"161":{"position":[[312,22]]}}}],["address=\"http://:4180",{"_index":1720,"t":{"161":{"position":[[345,23]]}}}],["adf",{"_index":651,"t":{"61":{"position":[[739,4],[2462,4]]},"63":{"position":[[128,5]]},"79":{"position":[[232,4]]},"85":{"position":[[9,4],[445,4]]}}}],["adfsconfig",{"_index":649,"t":{"61":{"position":[[676,10],[699,10]]}}}],["adfsopt",{"_index":650,"t":{"61":{"position":[[687,11]]}}}],["admin",{"_index":495,"t":{"45":{"position":[[164,5]]},"89":{"position":[[696,5],[729,5],[801,8],[940,5]]},"99":{"position":[[1350,5],[1786,5],[1906,5],[1992,5]]},"107":{"position":[[4543,5],[4573,5]]},"129":{"position":[[696,5],[744,5],[792,5],[889,5],[1368,5]]},"135":{"position":[[575,6],[613,6]]},"137":{"position":[[1483,5],[1549,7]]}}}],["admin2",{"_index":1421,"t":{"129":{"position":[[1492,6]]}}}],["admin@example.com",{"_index":173,"t":{"10":{"position":[[1359,17]]}}}],["adminemail",{"_index":494,"t":{"45":{"position":[[121,10],[139,10]]}}}],["administr",{"_index":822,"t":{"85":{"position":[[14,14]]},"99":{"position":[[1833,14]]},"149":{"position":[[1626,14]]}}}],["advis",{"_index":1547,"t":{"145":{"position":[[2379,7]]}}}],["advisori",{"_index":261,"t":{"18":{"position":[[23,10],[182,8],[411,9]]}}}],["ae",{"_index":1018,"t":{"103":{"position":[[641,3]]}}}],["affect",{"_index":257,"t":{"16":{"position":[[688,8]]}}}],["afterward",{"_index":1690,"t":{"153":{"position":[[334,9]]}}}],["ag",{"_index":1119,"t":{"107":{"position":[[5918,3]]},"113":{"position":[[237,3],[256,5]]}}}],["again",{"_index":1689,"t":{"153":{"position":[[240,6]]}}}],["against",{"_index":39,"t":{"2":{"position":[[528,7]]},"59":{"position":[[1433,7]]},"99":{"position":[[2242,7],[2553,7]]},"107":{"position":[[573,7],[5124,7]]},"129":{"position":[[1811,7]]},"133":{"position":[[35,7]]},"135":{"position":[[50,7]]},"149":{"position":[[163,7]]}}}],["age=2592000",{"_index":1730,"t":{"161":{"position":[[929,12]]}}}],["agenc",{"_index":1559,"t":{"147":{"position":[[80,7],[718,6]]}}}],["agent",{"_index":1142,"t":{"107":{"position":[[9134,5],[9154,5],[9222,6]]},"113":{"position":[[754,6]]},"115":{"position":[[1372,5]]},"117":{"position":[[1444,5]]},"151":{"position":[[263,6]]}}}],["agre",{"_index":273,"t":{"18":{"position":[[441,6]]}}}],["agreement",{"_index":1449,"t":{"131":{"position":[[124,9]]}}}],["ajax",{"_index":199,"t":{"12":{"position":[[335,4]]}}}],["algorithm:secretkey",{"_index":1174,"t":{"107":{"position":[[13050,21]]}}}],["alia",{"_index":470,"t":{"39":{"position":[[8,7]]},"63":{"position":[[8,7]]},"65":{"position":[[12,7]]}}}],["allow",{"_index":157,"t":{"10":{"position":[[1033,6]]},"12":{"position":[[143,8]]},"26":{"position":[[1087,7],[1116,7]]},"31":{"position":[[85,6]]},"37":{"position":[[38,6]]},"41":{"position":[[392,6]]},"55":{"position":[[295,7],[459,7],[609,7]]},"57":{"position":[[599,6],[724,7],[1291,5],[1327,5],[1477,5]]},"59":{"position":[[868,6],[1389,6]]},"75":{"position":[[788,6],[1613,5]]},"77":{"position":[[188,8]]},"83":{"position":[[117,5]]},"91":{"position":[[456,6]]},"107":{"position":[[76,5],[104,5],[4078,5],[6554,5],[6696,5],[7385,7],[10001,5],[11989,6],[15305,7],[15406,7],[15671,7],[15759,5],[15872,5],[16500,5],[16602,8],[16630,8],[16741,5],[16824,5]]},"121":{"position":[[88,6]]},"125":{"position":[[38,6]]},"129":{"position":[[414,7],[480,7],[560,7],[4066,7],[4084,7],[4377,8],[4843,7],[4928,7],[5185,7],[5227,8],[5541,7],[6129,7],[6648,7],[6682,5]]},"135":{"position":[[23,6]]},"137":{"position":[[1091,7]]},"139":{"position":[[473,7],[1181,5],[1474,5],[1630,5]]},"141":{"position":[[9,5]]},"147":{"position":[[2350,5]]},"149":{"position":[[2784,7],[4105,8]]},"155":{"position":[[175,7],[237,7],[299,7]]}}}],["allowed.e.g",{"_index":723,"t":{"71":{"position":[[553,13]]}}}],["allowed_email",{"_index":1704,"t":{"155":{"position":[[259,15]]}}}],["allowed_email_domain",{"_index":1703,"t":{"155":{"position":[[190,22]]}}}],["allowed_group",{"_index":1702,"t":{"155":{"position":[[135,15]]}}}],["allowedgroup",{"_index":690,"t":{"61":{"position":[[2596,13],[2619,13]]}}}],["allowedto",{"_index":638,"t":{"59":{"position":[[1583,9]]}}}],["alpha",{"_index":289,"t":{"20":{"position":[[44,5],[297,5],[353,5],[665,5]]},"22":{"position":[[15,5],[153,5],[194,5]]},"24":{"position":[[24,5],[92,5],[189,5],[510,5]]},"26":{"position":[[106,5],[1408,5],[1524,5]]},"31":{"position":[[22,5],[108,5],[267,6]]}}}],["alphaopt",{"_index":313,"t":{"20":{"position":[[607,12]]},"31":{"position":[[0,12]]},"47":{"position":[[13,13]]},"65":{"position":[[33,13]]},"69":{"position":[[13,13]]},"77":{"position":[[13,13]]}}}],["alreadi",{"_index":1537,"t":{"145":{"position":[[1581,7],[1760,7]]}}}],["altern",{"_index":580,"t":{"57":{"position":[[927,13]]},"93":{"position":[[496,14]]},"99":{"position":[[1228,13]]},"153":{"position":[[522,14]]}}}],["alway",{"_index":545,"t":{"55":{"position":[[532,6]]},"159":{"position":[[745,6]]}}}],["amazon",{"_index":1715,"t":{"161":{"position":[[61,6],[255,6]]}}}],["amd64",{"_index":21,"t":{"2":{"position":[[256,7],[352,7],[677,6]]}}}],["amount",{"_index":1194,"t":{"107":{"position":[[15230,6]]}}}],["anchor",{"_index":739,"t":{"73":{"position":[[625,6]]}}}],["and/or",{"_index":571,"t":{"57":{"position":[[732,6]]}}}],["announc",{"_index":1415,"t":{"129":{"position":[[815,9]]}}}],["anoth",{"_index":427,"t":{"31":{"position":[[1037,7]]},"79":{"position":[[82,7]]},"99":{"position":[[176,7]]}}}],["anyth",{"_index":546,"t":{"55":{"position":[[551,8]]}}}],["apach",{"_index":1239,"t":{"113":{"position":[[669,6]]}}}],["api",{"_index":497,"t":{"45":{"position":[[189,3]]},"89":{"position":[[490,3]]},"99":{"position":[[250,5],[1313,5],[1335,5],[1376,4],[1792,3]]},"107":{"position":[[194,3],[4598,3]]},"131":{"position":[[368,3]]},"133":{"position":[[78,3]]},"149":{"position":[[1979,3]]}}}],["api/v1/user/email",{"_index":936,"t":{"97":{"position":[[635,21]]}}}],["app",{"_index":847,"t":{"89":{"position":[[90,3],[294,3],[465,3],[518,4],[1143,3],[1217,4]]},"95":{"position":[[16,3]]},"147":{"position":[[1334,3]]},"149":{"position":[[2215,5],[2701,4],[3924,3]]},"151":{"position":[[923,3]]}}}],["appear",{"_index":398,"t":{"29":{"position":[[0,8]]},"33":{"position":[[0,8]]},"35":{"position":[[0,8]]},"37":{"position":[[0,8]]},"39":{"position":[[16,8]]},"41":{"position":[[0,8]]},"43":{"position":[[0,8]]},"45":{"position":[[0,8]]},"47":{"position":[[0,8]]},"49":{"position":[[0,8]]},"51":{"position":[[0,8]]},"53":{"position":[[0,8]]},"55":{"position":[[0,8]]},"59":{"position":[[0,8]]},"61":{"position":[[0,8]]},"63":{"position":[[16,8]]},"65":{"position":[[20,8]]},"67":{"position":[[0,8]]},"69":{"position":[[0,8]]},"71":{"position":[[0,8]]},"73":{"position":[[0,8]]},"75":{"position":[[0,8]]},"77":{"position":[[0,8]]}}}],["append",{"_index":892,"t":{"89":{"position":[[2101,6]]},"121":{"position":[[2181,6]]}}}],["appli",{"_index":518,"t":{"47":{"position":[[428,7]]}}}],["applic",{"_index":55,"t":{"2":{"position":[[727,11]]},"4":{"position":[[415,11]]},"45":{"position":[[395,11],[537,11]]},"79":{"position":[[35,11]]},"85":{"position":[[74,11],[142,11],[174,12],[282,11]]},"87":{"position":[[14,11],[81,12],[124,10]]},"89":{"position":[[7,12],[586,11]]},"93":{"position":[[19,11],[108,12]]},"97":{"position":[[13,12]]},"99":{"position":[[538,12],[551,11],[1127,11],[2678,11],[2811,11]]},"107":{"position":[[172,13],[4808,11],[4849,11],[10428,10]]},"133":{"position":[[230,12],[343,11],[468,12],[724,11]]},"147":{"position":[[467,11],[559,11],[779,11],[3018,11],[3109,11]]},"149":{"position":[[1817,13],[1890,12],[2169,11],[2255,11],[2391,11],[2542,12],[2571,12],[2668,11],[2989,12],[3548,11],[3805,12],[3875,11]]},"153":{"position":[[228,11]]},"161":{"position":[[532,12]]}}}],["application.y",{"_index":431,"t":{"31":{"position":[[1268,15]]}}}],["application/json",{"_index":203,"t":{"12":{"position":[[371,17]]}}}],["approach",{"_index":1710,"t":{"159":{"position":[[495,8]]}}}],["appropri",{"_index":950,"t":{"99":{"position":[[598,11]]},"129":{"position":[[2245,11]]},"133":{"position":[[1107,11]]},"137":{"position":[[422,11]]},"139":{"position":[[1752,11]]},"145":{"position":[[3001,14],[3204,14]]}}}],["approv",{"_index":375,"t":{"26":{"position":[[1005,8]]},"89":{"position":[[946,11]]},"107":{"position":[[326,8],[8439,8]]}}}],["approval_prompt",{"_index":1035,"t":{"107":{"position":[[355,15]]}}}],["apps/oauth2",{"_index":1476,"t":{"135":{"position":[[351,15]]}}}],["archiv",{"_index":112,"t":{"6":{"position":[[138,8]]}}}],["aren't",{"_index":1167,"t":{"107":{"position":[[12197,6]]}}}],["arg",{"_index":143,"t":{"10":{"position":[[283,7],[601,7]]},"107":{"position":[[141,4]]},"149":{"position":[[950,5]]}}}],["argument",{"_index":1025,"t":{"105":{"position":[[19,8],[116,8]]},"111":{"position":[[19,8],[180,8]]},"135":{"position":[[218,9]]}}}],["arm64",{"_index":25,"t":{"2":{"position":[[291,5],[387,5]]}}}],["armv6",{"_index":23,"t":{"2":{"position":[[273,6],[369,6]]}}}],["armv7",{"_index":24,"t":{"2":{"position":[[280,6],[376,6]]}}}],["around",{"_index":568,"t":{"57":{"position":[[688,6]]}}}],["ask",{"_index":195,"t":{"12":{"position":[[256,5]]}}}],["assembl",{"_index":1011,"t":{"103":{"position":[[348,8]]}}}],["assemblynam",{"_index":1013,"t":{"103":{"position":[[391,12]]}}}],["assign",{"_index":971,"t":{"99":{"position":[[1885,6]]},"129":{"position":[[2812,8],[4276,8],[4665,6],[4726,6],[4782,7],[5207,6],[5266,8]]},"149":{"position":[[2926,11],[4072,12]]}}}],["associ",{"_index":1438,"t":{"129":{"position":[[5369,10]]}}}],["assum",{"_index":1568,"t":{"147":{"position":[[526,6]]}}}],["attach",{"_index":983,"t":{"99":{"position":[[2931,8]]},"129":{"position":[[6280,6],[6754,9]]}}}],["attacksbetween",{"_index":782,"t":{"75":{"position":[[1647,14]]}}}],["attempt",{"_index":394,"t":{"26":{"position":[[1338,10]]},"107":{"position":[[418,8]]},"115":{"position":[[99,10],[1062,8]]}}}],["attent",{"_index":242,"t":{"16":{"position":[[294,9]]}}}],["attribut",{"_index":1060,"t":{"107":{"position":[[2136,9]]},"121":{"position":[[2133,10]]},"147":{"position":[[1446,9]]}}}],["aud",{"_index":634,"t":{"59":{"position":[[1465,3]]},"107":{"position":[[3030,3],[7312,5],[13831,3]]},"129":{"position":[[1689,3],[1721,3],[2968,4],[3327,5]]}}}],["audienc",{"_index":637,"t":{"59":{"position":[[1564,9]]},"107":{"position":[[7251,8],[7303,8],[7331,8],[7365,9]]},"129":{"position":[[1261,10],[1292,8],[1321,8],[1637,8],[1868,9],[2625,8],[2954,8],[3016,8],[3192,8],[3242,8],[3293,9]]},"149":{"position":[[2225,9]]}}}],["audienceclaim",{"_index":632,"t":{"59":{"position":[[1351,14],[1375,13]]}}}],["auth",{"_index":181,"t":{"12":{"position":[[65,4]]},"26":{"position":[[630,4],[669,4]]},"37":{"position":[[412,4],[470,4]]},"49":{"position":[[633,4],[691,4]]},"85":{"position":[[450,4]]},"89":{"position":[[1057,4],[1328,4],[1626,4],[1964,4],[2303,4]]},"99":{"position":[[1019,4],[1321,6]]},"107":{"position":[[381,4],[434,4],[716,4],[785,4],[7567,4],[7736,4],[7762,5],[8098,4],[12356,4],[12377,4],[12400,4],[12425,4],[12549,4],[12738,4],[12763,4],[13167,4],[13246,4],[13294,4],[13395,4],[13585,4]]},"113":{"position":[[519,4]]},"115":{"position":[[606,4],[790,4],[1057,4],[1473,4],[1524,4]]},"117":{"position":[[1545,4]]},"121":{"position":[[149,5],[497,4],[598,4]]},"125":{"position":[[437,4],[631,4],[912,4],[1131,5]]},"127":{"position":[[556,4],[841,4],[1111,4],[1317,4],[1670,4],[1889,4],[2003,4],[2051,4],[2179,4]]},"133":{"position":[[5,4]]},"137":{"position":[[65,4]]},"139":{"position":[[179,4]]},"153":{"position":[[571,4],[632,4]]}}}],["auth/pass_basic_auth",{"_index":342,"t":{"26":{"position":[[323,20]]}}}],["auth/set_basic_auth",{"_index":348,"t":{"26":{"position":[[478,19]]}}}],["auth_cooki",{"_index":1314,"t":{"121":{"position":[[1600,12],[1662,13],[2284,13],[2337,13]]}}}],["auth_cookie_name_0",{"_index":1327,"t":{"121":{"position":[[2317,19],[2550,20]]}}}],["auth_cookie_name_1",{"_index":1328,"t":{"121":{"position":[[2355,19],[2593,20]]}}}],["auth_cookie_name_1=$auth_cookie_name_upstream_1$1",{"_index":1329,"t":{"121":{"position":[[2375,52]]}}}],["auth_cookie_name_upstream_1",{"_index":1324,"t":{"121":{"position":[[2046,28],[2495,30]]}}}],["auth_request",{"_index":1169,"t":{"107":{"position":[[12491,12],[12701,12],[12809,12]]},"121":{"position":[[65,12],[836,12],[959,12],[1570,12],[1903,12]]},"151":{"position":[[1175,12]]}}}],["auth_request_set",{"_index":1310,"t":{"121":{"position":[[1130,16],[1189,16],[1392,16],[1583,16],[2029,16],[2889,16],[3372,16]]}}}],["authent",{"_index":191,"t":{"12":{"position":[[200,14],[294,14],[458,14],[657,14]]},"31":{"position":[[444,14],[746,13],[1134,13]]},"61":{"position":[[2096,14]]},"75":{"position":[[1833,15]]},"81":{"position":[[119,13]]},"91":{"position":[[498,13]]},"99":{"position":[[2595,14]]},"107":{"position":[[260,14],[403,14],[474,14],[527,13],[560,12],[2699,12],[2785,12],[5111,12],[6514,14],[8044,15],[13197,14],[13313,14],[13427,14],[13636,14],[15709,15],[15888,14]]},"109":{"position":[[306,13]]},"113":{"position":[[419,15]]},"115":{"position":[[0,14],[113,13],[365,13],[440,12],[514,14],[1013,13]]},"121":{"position":[[104,12]]},"125":{"position":[[56,12]]},"127":{"position":[[273,13]]},"129":{"position":[[2280,14],[2300,14]]},"135":{"position":[[37,12]]},"139":{"position":[[234,14]]},"141":{"position":[[24,14]]},"143":{"position":[[802,12]]},"147":{"position":[[2935,13]]},"151":{"position":[[109,14]]},"153":{"position":[[154,14],[294,14]]},"161":{"position":[[494,12]]}}}],["authenticationprovid",{"_index":425,"t":{"31":{"position":[[994,22]]}}}],["autherror",{"_index":1253,"t":{"115":{"position":[[464,9]]}}}],["authfailur",{"_index":1251,"t":{"115":{"position":[[406,11]]}}}],["author",{"_index":346,"t":{"26":{"position":[[421,13],[536,13]]},"81":{"position":[[3,9],[76,9],[187,9]]},"87":{"position":[[211,13]]},"99":{"position":[[610,10],[692,10],[998,11]]},"107":{"position":[[7629,13],[7689,13],[12617,13],[12647,13],[13661,13]]},"121":{"position":[[1699,13]]},"127":{"position":[[2031,13],[2207,13]]},"129":{"position":[[3817,13],[3857,13],[3903,13],[4820,10],[5471,13],[5723,9]]},"137":{"position":[[1032,14]]},"139":{"position":[[67,13]]},"145":{"position":[[1294,13]]},"147":{"position":[[3369,14]]},"149":{"position":[[1757,13],[1860,13],[1993,13],[2098,13],[2508,13],[2807,13],[3414,13],[4114,13],[4255,13]]}}}],["authorizationnginx.ingress.kubernetes.io/auth",{"_index":1341,"t":{"121":{"position":[[3152,45]]}}}],["authresponsehead",{"_index":1396,"t":{"127":{"position":[[1978,20],[2154,20]]}}}],["authsuccess",{"_index":1249,"t":{"115":{"position":[[339,11],[1494,11]]}}}],["auto",{"_index":140,"t":{"10":{"position":[[242,7],[560,7]]},"127":{"position":[[776,4]]}}}],["automat",{"_index":982,"t":{"99":{"position":[[2893,13]]},"153":{"position":[[186,13]]}}}],["automaticallyanchor",{"_index":735,"t":{"73":{"position":[[510,21]]}}}],["avail",{"_index":26,"t":{"2":{"position":[[297,10],[393,10]]},"22":{"position":[[240,10]]},"26":{"position":[[85,9]]},"31":{"position":[[136,9]]},"51":{"position":[[195,9]]},"109":{"position":[[819,9],[953,9],[1032,9]]},"115":{"position":[[766,9]]},"117":{"position":[[618,9]]},"119":{"position":[[490,9]]},"141":{"position":[[198,9],[249,9]]},"145":{"position":[[1824,10],[2026,10],[3033,9]]},"147":{"position":[[334,9]]},"149":{"position":[[2037,9]]}}}],["azur",{"_index":390,"t":{"26":{"position":[[1284,6]]},"61":{"position":[[660,5],[2448,6]]},"63":{"position":[[134,6]]},"79":{"position":[[226,5],[308,5]]},"87":{"position":[[43,5]]},"89":{"position":[[59,5],[1051,5],[1322,5],[1342,6],[1533,5],[1620,5],[1841,5],[1958,5],[2297,5]]},"107":{"position":[[614,5],[6774,5],[11856,6]]},"121":{"position":[[3708,7]]}}}],["azureconfig",{"_index":647,"t":{"61":{"position":[[594,11],[619,11]]}}}],["azureopt",{"_index":648,"t":{"61":{"position":[[606,12]]}}}],["b",{"_index":8,"t":{"2":{"position":[[77,2]]},"107":{"position":[[5188,1]]},"127":{"position":[[463,2],[1044,2],[1517,1]]}}}],["back",{"_index":97,"t":{"4":{"position":[[338,4]]},"145":{"position":[[101,4],[173,4]]}}}],["backend",{"_index":1168,"t":{"107":{"position":[[12294,8]]},"121":{"position":[[1073,8],[1384,7]]},"125":{"position":[[393,7],[659,7],[769,8],[837,8],[1279,7]]},"127":{"position":[[527,7],[812,7],[1139,7],[1345,7],[1455,8],[1527,8],[1595,8]]},"141":{"position":[[224,9],[259,8]]},"143":{"position":[[19,7],[42,7],[141,8],[366,7]]},"145":{"position":[[18,7],[2198,7],[2235,7],[2300,7],[2347,9],[3053,7]]}}}],["backport",{"_index":283,"t":{"18":{"position":[[632,8]]}}}],["backslash",{"_index":579,"t":{"57":{"position":[[872,9]]}}}],["backup",{"_index":1116,"t":{"107":{"position":[[5854,6],[5989,7]]},"113":{"position":[[266,6],[293,9],[310,6]]}}}],["balanc",{"_index":1717,"t":{"161":{"position":[[100,10],[241,8],[290,10]]}}}],["banner",{"_index":1089,"t":{"107":{"position":[[3502,6],[3530,6],[3572,7]]}}}],["bar",{"_index":752,"t":{"75":{"position":[[603,8],[641,5]]}}}],["base",{"_index":309,"t":{"20":{"position":[[505,5]]},"22":{"position":[[57,5]]},"31":{"position":[[523,5]]},"75":{"position":[[1386,7]]},"107":{"position":[[15176,5]]},"109":{"position":[[1325,5]]},"137":{"position":[[1026,5]]},"149":{"position":[[3391,5],[3928,4]]}}}],["base/dir",{"_index":777,"t":{"75":{"position":[[1467,12]]}}}],["base64",{"_index":525,"t":{"49":{"position":[[168,6]]},"67":{"position":[[213,6]]},"103":{"position":[[241,6],[303,6],[587,6]]},"107":{"position":[[2013,6]]}}}],["base64url",{"_index":1525,"t":{"145":{"position":[[458,9]]}}}],["bash",{"_index":993,"t":{"103":{"position":[[73,4]]}}}],["basic",{"_index":341,"t":{"26":{"position":[[317,5],[472,5],[624,5]]},"37":{"position":[[406,5],[464,5]]},"49":{"position":[[627,5],[685,5]]},"107":{"position":[[710,5],[779,5],[7730,5],[7756,5],[8092,5],[9094,5],[9181,5],[12732,5],[12757,5]]}}}],["basicauthpassword",{"_index":465,"t":{"37":{"position":[[330,17],[361,17]]},"49":{"position":[[551,17],[582,17]]}}}],["baz",{"_index":753,"t":{"75":{"position":[[648,12],[690,4],[957,11]]}}}],["baz/abc/123",{"_index":763,"t":{"75":{"position":[[1021,12]]}}}],["bcrypt",{"_index":1099,"t":{"107":{"position":[[5194,6]]}}}],["bearer",{"_index":190,"t":{"12":{"position":[[181,6]]},"107":{"position":[[2952,6],[7703,6],[12661,6],[13735,6],[13796,6]]}}}],["becom",{"_index":468,"t":{"37":{"position":[[453,6]]},"49":{"position":[[674,6]]},"107":{"position":[[1432,7]]},"111":{"position":[[414,7],[478,7]]}}}],["befor",{"_index":151,"t":{"10":{"position":[[804,6]]},"20":{"position":[[282,6]]},"24":{"position":[[0,6]]},"26":{"position":[[1488,6]]},"75":{"position":[[829,6],[1050,6]]},"107":{"position":[[6124,6]]}}}],["beforward",{"_index":591,"t":{"57":{"position":[[1494,11]]}}}],["behind",{"_index":65,"t":{"2":{"position":[[868,6]]},"107":{"position":[[11908,6]]}}}],["believ",{"_index":232,"t":{"16":{"position":[[12,7]]}}}],["beload",{"_index":459,"t":{"37":{"position":[[204,8]]},"49":{"position":[[425,8]]}}}],["belong",{"_index":492,"t":{"41":{"position":[[454,6]]},"107":{"position":[[4131,6]]},"139":{"position":[[511,6],[1537,6]]}}}],["below",{"_index":311,"t":{"20":{"position":[[541,5],[728,6],[878,5]]},"22":{"position":[[104,6],[271,5]]},"103":{"position":[[50,5]]},"107":{"position":[[16867,5]]},"115":{"position":[[167,5],[324,5]]},"117":{"position":[[48,5]]},"119":{"position":[[237,6]]},"149":{"position":[[346,6]]},"161":{"position":[[53,7]]}}}],["beoverridden",{"_index":589,"t":{"57":{"position":[[1384,12]]}}}],["bepass",{"_index":587,"t":{"57":{"position":[[1252,8]]}}}],["best",{"_index":1422,"t":{"129":{"position":[[1521,4]]}}}],["between",{"_index":411,"t":{"31":{"position":[[290,7]]},"75":{"position":[[2135,7]]},"107":{"position":[[3298,7]]},"141":{"position":[[53,7]]}}}],["bewar",{"_index":302,"t":{"20":{"position":[[267,6]]},"153":{"position":[[837,6]]}}}],["big",{"_index":1532,"t":{"145":{"position":[[972,4]]}}}],["bin/dex",{"_index":1636,"t":{"149":{"position":[[849,7]]}}}],["binari",{"_index":4,"t":{"2":{"position":[[42,6],[199,6],[462,8]]}}}],["bindaddress",{"_index":434,"t":{"31":{"position":[[1377,11],[1685,11]]},"69":{"position":[[108,11],[127,11]]}}}],["bit",{"_index":1523,"t":{"145":{"position":[[388,3],[439,3]]},"147":{"position":[[823,4],[1057,3]]}}}],["bitbucket",{"_index":391,"t":{"26":{"position":[[1291,10]]},"61":{"position":[[832,9]]},"63":{"position":[[141,10]]},"79":{"position":[[365,9]]},"91":{"position":[[477,9],[594,9],[714,9]]}}}],["bitbucketconfig",{"_index":652,"t":{"61":{"position":[[754,15],[787,15]]}}}],["bitbucketopt",{"_index":653,"t":{"61":{"position":[[770,16]]}}}],["blank",{"_index":705,"t":{"69":{"position":[[186,5],[315,5]]}}}],["block",{"_index":582,"t":{"57":{"position":[[958,6],[1040,5]]},"115":{"position":[[294,5]]},"149":{"position":[[626,5]]}}}],["bodi",{"_index":785,"t":{"75":{"position":[[1825,4]]},"121":{"position":[[874,4]]}}}],["bool",{"_index":402,"t":{"29":{"position":[[56,4]]},"45":{"position":[[329,4]]},"47":{"position":[[281,4]]},"59":{"position":[[166,4],[322,4],[501,4],[849,4]]},"61":{"position":[[1859,4]]},"75":{"position":[[1502,4],[1725,4],[2250,4],[2387,4]]},"77":{"position":[[131,4]]},"107":{"position":[[99,4],[394,4],[1530,4],[2045,4],[2209,4],[2589,4],[2829,4],[3376,4],[3430,4],[4840,4],[4968,4],[5655,4],[5817,4],[6577,4],[6691,4],[6841,4],[7439,4],[7650,4],[7741,4],[7891,4],[8152,4],[8223,4],[8710,4],[9530,4],[9996,4],[10330,4],[10963,4],[11082,4],[11695,4],[11888,4],[12138,4],[12345,4],[12638,4],[12743,4],[12856,4],[13095,4],[13182,4],[13604,4],[13749,4],[13936,4],[14080,4],[14186,4],[14302,4],[14401,4]]}}}],["boolean",{"_index":504,"t":{"45":{"position":[[372,7]]}}}],["both",{"_index":172,"t":{"10":{"position":[[1351,4]]},"31":{"position":[[1302,4],[1610,4]]},"73":{"position":[[291,5]]},"121":{"position":[[2437,4]]},"129":{"position":[[3105,4]]}}}],["bracket",{"_index":1105,"t":{"107":{"position":[[5400,8],[5566,8]]}}}],["branch",{"_index":95,"t":{"4":{"position":[[317,6]]},"8":{"position":[[34,6],[152,6]]}}}],["break",{"_index":293,"t":{"20":{"position":[[89,8]]}}}],["brief",{"_index":1440,"t":{"129":{"position":[[5574,5]]}}}],["bring",{"_index":241,"t":{"16":{"position":[[281,5]]}}}],["brows",{"_index":319,"t":{"20":{"position":[[857,6]]}}}],["browser",{"_index":1049,"t":{"107":{"position":[[1484,7],[16718,8]]},"145":{"position":[[870,7],[1360,8]]},"147":{"position":[[2922,8]]}}}],["browserxssfilt",{"_index":1374,"t":{"125":{"position":[[975,17]]},"127":{"position":[[1733,17]]}}}],["bs=32",{"_index":1001,"t":{"103":{"position":[[213,5]]}}}],["buffer",{"_index":793,"t":{"75":{"position":[[2165,6]]},"107":{"position":[[3324,7]]}}}],["bug",{"_index":70,"t":{"4":{"position":[[9,4],[53,4],[221,4],[377,3]]}}}],["build",{"_index":449,"t":{"33":{"position":[[243,8]]},"147":{"position":[[2563,6],[2581,5]]},"159":{"position":[[962,8]]}}}],["built",{"_index":1623,"t":{"149":{"position":[[157,5]]}}}],["bundl",{"_index":1589,"t":{"147":{"position":[[1456,7]]}}}],["button",{"_index":1182,"t":{"107":{"position":[[14073,6]]}}}],["button=tru",{"_index":1598,"t":{"147":{"position":[[1902,11]]}}}],["bypass",{"_index":1178,"t":{"107":{"position":[[13306,6],[13420,6],[13941,6],[15881,6]]}}}],["bysom",{"_index":733,"t":{"73":{"position":[[457,6]]}}}],["byte",{"_index":523,"t":{"49":{"position":[[145,6]]},"67":{"position":[[190,6]]},"103":{"position":[[582,4],[634,6]]},"117":{"position":[[1215,5]]}}}],["c",{"_index":18,"t":{"2":{"position":[[223,2],[637,1]]},"103":{"position":[[115,1]]}}}],["c=us/st=washington/l=dc/o=gsa/ou=18f/cn=localhost",{"_index":1585,"t":{"147":{"position":[[1193,53]]}}}],["ca",{"_index":363,"t":{"26":{"position":[[865,2]]},"61":{"position":[[1707,2],[1910,2],[1982,2],[2054,2]]},"107":{"position":[[8520,2],[8551,2],[8738,2],[8817,2],[8889,2]]}}}],["cafil",{"_index":675,"t":{"61":{"position":[[1660,7],[1677,7]]}}}],["call",{"_index":498,"t":{"45":{"position":[[193,5]]},"99":{"position":[[1979,5],[3018,6]]},"107":{"position":[[4602,5]]}}}],["callback",{"_index":898,"t":{"91":{"position":[[28,9]]},"93":{"position":[[121,8]]},"139":{"position":[[81,8]]},"149":{"position":[[595,10]]},"151":{"position":[[963,8]]}}}],["caller",{"_index":548,"t":{"55":{"position":[[705,6]]}}}],["capitalis",{"_index":1232,"t":{"111":{"position":[[108,12]]}}}],["captur",{"_index":748,"t":{"75":{"position":[[507,8],[699,7],[885,7]]}}}],["case",{"_index":204,"t":{"12":{"position":[[398,4]]},"16":{"position":[[533,4]]},"75":{"position":[[1214,4]]},"83":{"position":[[90,4]]},"107":{"position":[[14046,4]]},"135":{"position":[[840,5]]},"145":{"position":[[2841,5]]},"147":{"position":[[3451,5]]}}}],["caseadd",{"_index":1012,"t":{"103":{"position":[[377,7]]}}}],["caveat",{"_index":1542,"t":{"145":{"position":[[2037,7]]}}}],["center",{"_index":941,"t":{"99":{"position":[[230,6],[318,6],[425,6]]}}}],["cert",{"_index":715,"t":{"71":{"position":[[260,4],[278,4]]},"107":{"position":[[14541,4]]},"159":{"position":[[65,4],[306,4]]}}}],["cert.pem",{"_index":1582,"t":{"147":{"position":[[1160,8]]}}}],["certif",{"_index":438,"t":{"31":{"position":[[1480,11],[1788,11]]},"61":{"position":[[1710,12]]},"69":{"position":[[400,11]]},"71":{"position":[[68,11],[294,11]]},"89":{"position":[[1182,12]]},"107":{"position":[[8554,12],[14210,12],[14326,12],[14566,11]]},"147":{"position":[[1008,11]]}}}],["certresolv",{"_index":1363,"t":{"125":{"position":[[447,13],[672,13]]},"127":{"position":[[624,13],[907,13],[1152,13],[1358,13]]}}}],["challeng",{"_index":692,"t":{"61":{"position":[[2725,9]]},"107":{"position":[[994,9],[1032,10]]},"129":{"position":[[636,9]]}}}],["chang",{"_index":294,"t":{"20":{"position":[[98,7],[202,8]]},"31":{"position":[[283,6]]},"59":{"position":[[783,6]]},"93":{"position":[[651,6]]},"107":{"position":[[1649,7]]},"133":{"position":[[82,8]]},"151":{"position":[[150,7]]}}}],["channel",{"_index":1074,"t":{"107":{"position":[[2879,7]]}}}],["charact",{"_index":570,"t":{"57":{"position":[[709,10],[916,10],[1076,10]]}}}],["check",{"_index":183,"t":{"12":{"position":[[80,7]]},"73":{"position":[[134,7]]},"89":{"position":[[157,5]]},"99":{"position":[[2234,7],[2545,7]]},"107":{"position":[[9107,6],[9194,6],[9211,5],[9301,6]]},"129":{"position":[[6853,5]]},"151":{"position":[[391,6]]}}}],["checkbox",{"_index":84,"t":{"4":{"position":[[188,11]]}}}],["checkedaft",{"_index":614,"t":{"59":{"position":[[655,12]]}}}],["checksum",{"_index":41,"t":{"2":{"position":[[554,8]]}}}],["chomp",{"_index":581,"t":{"57":{"position":[[949,8]]}}}],["choos",{"_index":0,"t":{"2":{"position":[[0,6]]},"31":{"position":[[1288,6],[1596,6]]},"89":{"position":[[52,6]]},"99":{"position":[[108,6],[243,6],[290,6],[331,6],[438,6],[501,6],[526,6],[581,6],[805,6],[1328,6],[1814,6],[2070,6]]},"129":{"position":[[6394,6]]}}}],["cidr",{"_index":1198,"t":{"107":{"position":[[15857,4]]}}}],["cipher",{"_index":721,"t":{"71":{"position":[[530,6],[663,6],[697,6]]},"107":{"position":[[14589,6],[14630,6],[14776,6],[14811,6]]},"159":{"position":[[797,6],[839,6],[1027,6]]}}}],["ciphersuit",{"_index":720,"t":{"71":{"position":[[478,12],[500,12]]}}}],["claim",{"_index":458,"t":{"37":{"position":[[75,5],[123,5],[136,5],[161,5],[393,5],[442,5]]},"49":{"position":[[344,5],[357,5],[382,5],[614,5],[663,5]]},"59":{"position":[[561,5],[1101,5],[1201,5],[1302,5],[1410,5],[1469,5]]},"79":{"position":[[491,7],[522,5]]},"107":{"position":[[6887,5],[7102,5],[7126,5],[7180,5],[7204,5],[7260,5],[7284,5]]},"129":{"position":[[1207,5],[1693,5],[1725,5],[1891,6],[3333,5],[5911,5],[5982,5]]},"137":{"position":[[362,5]]},"149":{"position":[[1782,6]]}}}],["claim/user_id_claim",{"_index":379,"t":{"26":{"position":[[1067,19]]}}}],["claimsourc",{"_index":456,"t":{"37":{"position":[[26,11]]},"67":{"position":[[13,12]]}}}],["clear",{"_index":1683,"t":{"151":{"position":[[704,6],[759,5]]}}}],["click",{"_index":827,"t":{"85":{"position":[[199,5]]},"89":{"position":[[117,5],[398,5],[523,5],[616,5]]},"99":{"position":[[1341,5]]},"129":{"position":[[2261,5],[2759,8],[2914,5],[3550,8]]},"149":{"position":[[1983,5],[2647,5]]}}}],["client",{"_index":356,"t":{"26":{"position":[[712,6],[732,6],[765,6]]},"59":{"position":[[1445,6],[1630,6]]},"61":{"position":[[140,6],[269,6],[441,6]]},"85":{"position":[[239,6],[250,6],[349,6],[390,6]]},"89":{"position":[[1232,6],[1456,6],[1497,6],[1764,6],[1805,6]]},"91":{"position":[[275,6],[289,6],[376,6],[400,6]]},"93":{"position":[[338,6],[352,6],[442,6],[466,6]]},"97":{"position":[[175,6],[189,6],[355,6],[405,6]]},"99":{"position":[[515,6],[838,6],[852,6],[1278,6],[1540,6],[1964,6]]},"107":{"position":[[799,6],[826,6],[880,6],[911,6],[927,6],[973,6],[5384,8],[5550,8],[9644,6],[9712,7],[13853,6],[15991,6]]},"115":{"position":[[677,11],[833,6],[1408,7]]},"117":{"position":[[413,11],[688,6],[1480,7]]},"127":{"position":[[2276,6],[2307,6]]},"129":{"position":[[27,6],[58,6],[546,6],[616,6],[914,6],[977,6],[1138,6],[1285,6],[1342,6],[1462,6],[1603,6],[1842,6],[1981,7],[2020,6],[2049,6],[2074,6],[2139,6],[2146,6],[2175,6],[2273,6],[2650,6],[2674,7],[2707,6],[2821,6],[2905,8],[3009,6],[3286,6],[3517,6],[4011,6],[4189,6],[4226,6],[4345,6],[4549,6],[4573,7],[4638,7],[4760,7],[4888,7],[5051,6],[5076,7],[5109,6],[5617,6],[5806,6],[6237,6],[6298,7],[6306,7],[6339,6],[6360,6],[6436,6],[6983,7],[7016,6]]},"133":{"position":[[748,6],[777,6]]},"135":{"position":[[415,6],[429,6],[549,6],[583,6]]},"137":{"position":[[103,6],[293,6],[461,6],[499,6]]},"143":{"position":[[187,6],[340,6],[481,6]]},"145":{"position":[[110,6]]},"147":{"position":[[1587,6],[3565,6],[3589,6]]},"149":{"position":[[1012,6],[1035,6],[2891,6],[2905,6],[4168,6],[4182,6]]},"159":{"position":[[435,6],[453,6]]},"161":{"position":[[1389,6],[1407,6]]}}}],["client'",{"_index":1400,"t":{"129":{"position":[[43,8],[78,8],[1668,8],[2191,8],[2585,8],[2691,8],[2774,8],[2986,8],[3038,8],[4590,8],[4947,8],[5093,8],[5132,8],[6323,8],[7000,8]]},"137":{"position":[[519,8]]}}}],["client/remot",{"_index":1258,"t":{"115":{"position":[[858,13]]},"117":{"position":[[713,13]]}}}],["client_id",{"_index":931,"t":{"97":{"position":[[368,9]]},"149":{"position":[[3498,9],[4563,13]]}}}],["client_secret",{"_index":932,"t":{"97":{"position":[[422,13]]},"149":{"position":[[3512,13]]}}}],["client_session_idl",{"_index":1552,"t":{"145":{"position":[[2592,20]]}}}],["clientid",{"_index":640,"t":{"61":{"position":[[102,8],[118,8]]}}}],["clientsecret",{"_index":642,"t":{"61":{"position":[[223,12],[243,12],[475,12]]}}}],["clientsecretfil",{"_index":643,"t":{"61":{"position":[[356,16],[380,16]]}}}],["clone",{"_index":114,"t":{"8":{"position":[[0,5],[88,5]]}}}],["close",{"_index":1050,"t":{"107":{"position":[[1495,7]]}}}],["closest",{"_index":743,"t":{"75":{"position":[[364,7]]}}}],["cloud",{"_index":1604,"t":{"147":{"position":[[2259,5]]},"161":{"position":[[80,5]]}}}],["cloud/dock",{"_index":1601,"t":{"147":{"position":[[2179,12]]}}}],["cluster",{"_index":1155,"t":{"107":{"position":[[10045,7],[10097,7],[10186,7],[10955,7],[10985,8],[11011,7]]},"145":{"position":[[3022,7],[3180,7]]}}}],["cluster=tru",{"_index":1555,"t":{"145":{"position":[[3129,12],[3277,12]]}}}],["code",{"_index":105,"t":{"4":{"position":[[458,4],[502,4]]},"61":{"position":[[2720,4]]},"75":{"position":[[2005,4]]},"107":{"position":[[989,4],[1027,4]]},"117":{"position":[[1269,4]]},"129":{"position":[[631,4]]},"149":{"position":[[2821,4],[4128,4]]}}}],["code_challenge_method",{"_index":691,"t":{"61":{"position":[[2687,21]]}}}],["codematch",{"_index":786,"t":{"75":{"position":[[1864,12]]}}}],["collabor",{"_index":264,"t":{"18":{"position":[[161,12]]},"41":{"position":[[217,13],[494,13]]},"107":{"position":[[3867,13],[3991,13],[4171,13]]},"139":{"position":[[310,13],[551,14],[935,13],[1105,13],[1457,13],[1577,14]]}}}],["collaboratorsit",{"_index":490,"t":{"41":{"position":[[315,15]]}}}],["collect",{"_index":700,"t":{"65":{"position":[[62,10]]},"77":{"position":[[47,10]]}}}],["combin",{"_index":1200,"t":{"107":{"position":[[15939,8]]},"113":{"position":[[676,8]]}}}],["come",{"_index":714,"t":{"71":{"position":[[242,4],[338,4]]},"129":{"position":[[4137,5]]}}}],["comma",{"_index":1083,"t":{"107":{"position":[[3167,5],[3821,5],[4287,5]]},"109":{"position":[[1139,5]]},"133":{"position":[[1025,5]]},"139":{"position":[[890,5],[1607,5],[1671,5]]},"155":{"position":[[151,5],[213,5],[275,5]]}}}],["command",{"_index":59,"t":{"2":{"position":[[797,7]]},"93":{"position":[[693,7]]},"101":{"position":[[35,7],[135,7]]},"103":{"position":[[56,9]]},"105":{"position":[[6,7]]},"111":{"position":[[6,7],[362,7]]},"113":{"position":[[140,8]]},"135":{"position":[[205,7]]},"145":{"position":[[732,8]]},"159":{"position":[[135,7]]},"161":{"position":[[1137,7]]}}}],["commandlin",{"_index":1609,"t":{"147":{"position":[[2830,12]]}}}],["common",{"_index":444,"t":{"33":{"position":[[99,6],[152,8]]},"87":{"position":[[204,6]]},"107":{"position":[[661,6],[699,8]]}}}],["commun",{"_index":218,"t":{"14":{"position":[[23,9]]}}}],["compat",{"_index":1132,"t":{"107":{"position":[[6793,14]]}}}],["complet",{"_index":1429,"t":{"129":{"position":[[2212,8]]},"143":{"position":[[405,10]]},"159":{"position":[[1000,8]]}}}],["compos",{"_index":152,"t":{"10":{"position":[[902,7],[1194,7],[1274,7],[1292,7]]},"16":{"position":[[353,7]]},"145":{"position":[[231,8]]}}}],["compose.yaml",{"_index":167,"t":{"10":{"position":[[1212,12]]}}}],["compress",{"_index":1112,"t":{"107":{"position":[[5646,8],[5688,10]]},"113":{"position":[[332,10],[354,10]]}}}],["compris",{"_index":1527,"t":{"145":{"position":[[566,9]]}}}],["concurr",{"_index":1515,"t":{"143":{"position":[[628,12]]}}}],["confidenti",{"_index":1417,"t":{"129":{"position":[[961,15]]},"137":{"position":[[150,14]]}}}],["config",{"_index":58,"t":{"2":{"position":[[784,6]]},"10":{"position":[[296,8],[614,8]]},"20":{"position":[[691,6]]},"22":{"position":[[159,6],[200,6]]},"24":{"position":[[30,6],[82,6],[179,6],[197,6],[487,7],[516,6],[551,6]]},"26":{"position":[[1394,6],[1414,6],[1530,6]]},"93":{"position":[[545,6]]},"101":{"position":[[82,6]]},"105":{"position":[[50,6],[162,6],[235,6]]},"107":{"position":[[1111,6],[1133,6],[11474,6]]},"109":{"position":[[1255,6]]},"121":{"position":[[2938,6]]},"133":{"position":[[495,6]]},"145":{"position":[[3503,6]]},"149":{"position":[[3683,6],[4345,6],[4844,6]]},"151":{"position":[[182,6]]},"161":{"position":[[46,6],[645,6]]}}}],["config=/etc/oauth2",{"_index":1029,"t":{"105":{"position":[[307,18]]}}}],["configur",{"_index":56,"t":{"2":{"position":[[755,9],[844,9]]},"10":{"position":[[137,17],[322,13],[640,13]]},"12":{"position":[[518,10],[698,14]]},"20":{"position":[[303,13],[359,13],[447,13],[511,13],[587,14],[639,14],[671,14],[913,13]]},"22":{"position":[[21,14]]},"24":{"position":[[123,13],[318,13],[406,13]]},"26":{"position":[[112,14]]},"31":{"position":[[39,13],[169,13],[402,9],[634,9],[869,9],[1225,9],[1464,9],[1547,9],[1772,9],[1850,9]]},"33":{"position":[[200,10]]},"55":{"position":[[48,13]]},"61":{"position":[[43,13],[556,14],[641,14],[720,14],[813,14],[902,14],[989,14],[1075,14],[1155,14],[1213,15],[1285,14]]},"69":{"position":[[49,13],[454,13]]},"75":{"position":[[53,13]]},"77":{"position":[[308,13]]},"79":{"position":[[105,9],[423,13]]},"85":{"position":[[268,9],[306,9]]},"89":{"position":[[1289,9]]},"91":{"position":[[442,13],[570,13]]},"93":{"position":[[304,10]]},"99":{"position":[[1107,9]]},"101":{"position":[[20,10],[234,13]]},"107":{"position":[[511,13],[3095,13],[5056,10],[10453,15],[11793,13],[14027,10],[14521,13]]},"109":{"position":[[193,10],[530,10],[593,10],[857,10],[1113,10]]},"111":{"position":[[336,13]]},"113":{"position":[[67,10],[183,9],[589,12]]},"115":{"position":[[582,9],[654,10]]},"117":{"position":[[315,9],[390,10]]},"119":{"position":[[134,13],[349,9],[425,10]]},"121":{"position":[[2830,13],[3776,10]]},"125":{"position":[[295,14]]},"127":{"position":[[240,10]]},"129":{"position":[[1618,10],[2386,14],[2507,14],[2603,9],[2920,9],[3477,14],[3596,13]]},"135":{"position":[[165,14]]},"145":{"position":[[1002,9],[2793,9],[2915,9],[3152,9]]},"149":{"position":[[361,9],[612,13],[1535,9],[1747,9],[1847,9],[2372,9],[3011,13],[3530,10]]},"151":{"position":[[935,10]]},"153":{"position":[[970,13]]},"155":{"position":[[86,10]]},"157":{"position":[[26,15]]},"159":{"position":[[0,9],[176,13],[481,13],[713,11]]},"161":{"position":[[0,9],[1178,13]]}}}],["conflict",{"_index":1516,"t":{"143":{"position":[[768,9]]}}}],["conjunct",{"_index":426,"t":{"31":{"position":[[1020,11]]},"89":{"position":[[2056,11]]},"107":{"position":[[8068,11],[10157,11],[10745,11],[10905,11]]}}}],["connect",{"_index":594,"t":{"59":{"position":[[87,7],[993,7]]},"61":{"position":[[1748,10]]},"79":{"position":[[324,7],[570,7]]},"107":{"position":[[6934,7],[8592,10],[10053,10],[10105,10],[10202,10],[10362,10],[10511,10],[10607,11],[10800,10],[10853,10],[10968,7],[11019,10],[11087,7],[11178,10],[11228,10],[11262,10],[11351,10],[11508,10],[11557,10]]},"129":{"position":[[1001,8],[2166,8]]},"145":{"position":[[2704,10],[2732,10],[2985,10],[3188,10],[3376,10],[3537,10],[3586,10]]},"147":{"position":[[869,7],[913,8]]},"149":{"position":[[7,7],[228,7],[272,7],[2635,7]]},"151":{"position":[[455,11],[491,9]]},"161":{"position":[[414,11]]}}}],["connect/auth",{"_index":1483,"t":{"137":{"position":[[616,13]]}}}],["connect/token",{"_index":1484,"t":{"137":{"position":[[711,14]]}}}],["connect/userinfo",{"_index":1485,"t":{"137":{"position":[[808,17],[909,17]]}}}],["consent",{"_index":554,"t":{"57":{"position":[[165,7],[333,7]]},"89":{"position":[[702,7],[810,7],[837,7]]},"99":{"position":[[345,7]]}}}],["consent#th",{"_index":896,"t":{"89":{"position":[[2238,11]]}}}],["consid",{"_index":410,"t":{"31":{"position":[[256,10]]},"57":{"position":[[889,10]]}}}],["consol",{"_index":823,"t":{"85":{"position":[[29,7]]},"129":{"position":[[702,7],[750,7],[798,7],[895,7],[1374,7],[1499,8],[6949,7]]}}}],["consult",{"_index":1424,"t":{"129":{"position":[[1558,7]]}}}],["consum",{"_index":897,"t":{"91":{"position":[[16,8]]},"131":{"position":[[353,8],[380,8]]}}}],["contact",{"_index":1560,"t":{"147":{"position":[[96,7],[135,7]]}}}],["contain",{"_index":144,"t":{"10":{"position":[[336,8],[654,8]]},"20":{"position":[[17,8]]},"31":{"position":[[13,8]]},"47":{"position":[[561,8]]},"49":{"position":[[315,10]]},"59":{"position":[[1107,8],[1207,8],[1308,8]]},"67":{"position":[[360,10]]},"69":{"position":[[359,8]]},"71":{"position":[[25,8]]},"107":{"position":[[7132,8],[7210,8],[7290,8],[12927,7]]},"115":{"position":[[53,7],[305,7]]},"121":{"position":[[2249,7]]},"147":{"position":[[2508,8]]},"149":{"position":[[1466,9],[4745,10]]}}}],["content",{"_index":1306,"t":{"121":{"position":[[896,7],[2272,8]]},"129":{"position":[[7186,9]]},"147":{"position":[[1251,8]]}}}],["contenttypenosniff",{"_index":1375,"t":{"125":{"position":[[998,19]]},"127":{"position":[[1756,19]]}}}],["contrib",{"_index":1028,"t":{"105":{"position":[[257,7]]}}}],["contrib/loc",{"_index":146,"t":{"10":{"position":[[420,14],[743,14],[1133,13]]}}}],["control",{"_index":1165,"t":{"107":{"position":[[11932,8]]},"145":{"position":[[1625,8]]}}}],["convert",{"_index":324,"t":{"24":{"position":[[74,7],[106,7],[171,7],[244,7]]},"37":{"position":[[379,8]]},"49":{"position":[[600,8]]}}}],["convolut",{"_index":575,"t":{"57":{"position":[[798,11]]}}}],["cooki",{"_index":186,"t":{"12":{"position":[[112,6],[122,6],[543,8],[570,6]]},"85":{"position":[[483,6],[521,6]]},"89":{"position":[[2336,6],[2374,6]]},"99":{"position":[[933,6]]},"103":{"position":[[21,6]]},"107":{"position":[[1147,6],[1184,6],[1208,7],[1321,6],[1360,6],[1404,7],[1425,6],[1450,6],[1514,6],[1548,6],[1567,6],[1602,6],[1666,6],[1708,6],[1748,6],[1779,6],[1800,7],[1830,6],[1866,6],[1945,6],[1993,7],[2031,6],[2074,6],[2093,6],[2129,6],[2185,6],[2243,7],[2318,6],[2372,6],[12123,6],[12167,6],[12211,7],[12312,6],[12319,6],[16374,6]]},"111":{"position":[[395,6]]},"121":{"position":[[1519,6],[1655,6],[1742,7],[1879,7],[1946,7],[2011,7],[2126,6],[2163,6],[2265,6],[2446,6],[2543,6],[2586,6],[3507,8],[3760,6],[3793,6],[3842,6],[3961,6]]},"133":{"position":[[570,6],[814,6]]},"141":{"position":[[122,6],[309,6]]},"143":{"position":[[4,6],[126,6],[199,7],[426,7],[518,6],[579,6]]},"145":{"position":[[140,6],[197,6],[327,6],[903,6],[1029,6],[1048,6],[1084,6],[1126,6],[1170,6],[1190,7],[1602,7],[2398,6]]},"147":{"position":[[1729,6],[1811,6],[1861,6],[3847,6]]},"149":{"position":[[1148,6],[1168,6],[3617,7]]},"151":{"position":[[711,8],[777,6]]},"153":{"position":[[103,8]]},"159":{"position":[[373,6],[395,6]]},"161":{"position":[[1304,6],[1326,6]]}}}],["cookie_expir",{"_index":1551,"t":{"145":{"position":[[2537,13]]}}}],["cookie_refresh",{"_index":1550,"t":{"145":{"position":[[2492,14]]}}}],["cookie_secret",{"_index":1022,"t":{"103":{"position":[[682,15]]},"149":{"position":[[3588,13]]}}}],["cookienam",{"_index":1519,"t":{"145":{"position":[[258,12],[302,10],[542,12]]}}}],["copi",{"_index":329,"t":{"24":{"position":[[343,4]]},"121":{"position":[[1857,6]]},"147":{"position":[[2600,4]]}}}],["coreo",{"_index":1624,"t":{"149":{"position":[[171,6]]}}}],["corp.com\"]client_id",{"_index":1653,"t":{"149":{"position":[[3240,20]]}}}],["corpor",{"_index":230,"t":{"14":{"position":[[218,9]]}}}],["correct",{"_index":925,"t":{"97":{"position":[[110,7]]},"139":{"position":[[104,7]]},"149":{"position":[[546,7]]}}}],["correctli",{"_index":837,"t":{"85":{"position":[[572,10]]},"89":{"position":[[2425,10]]},"127":{"position":[[382,9]]}}}],["count=1",{"_index":1002,"t":{"103":{"position":[[219,7]]}}}],["coupl",{"_index":1548,"t":{"145":{"position":[[2415,6]]}}}],["cours",{"_index":1540,"t":{"145":{"position":[[1940,7]]}}}],["cover",{"_index":1290,"t":{"119":{"position":[[30,7]]}}}],["creat",{"_index":93,"t":{"4":{"position":[[285,6],[300,6]]},"8":{"position":[[17,6]]},"10":{"position":[[61,6]]},"18":{"position":[[480,6]]},"89":{"position":[[253,6]]},"93":{"position":[[0,6]]},"95":{"position":[[0,6]]},"97":{"position":[[0,6]]},"99":{"position":[[40,6],[812,8],[1078,6],[1804,6],[2060,6]]},"107":{"position":[[1630,8],[5165,7]]},"129":{"position":[[903,6],[1145,6],[1228,6],[1441,6],[2036,8],[2056,6],[2132,6],[3653,6],[4440,8],[4489,6],[4538,8],[4615,6],[5595,8],[5793,6],[6224,8],[6531,6],[6573,6]]},"131":{"position":[[42,6]]},"137":{"position":[[92,6],[300,6],[488,8],[1462,6]]},"139":{"position":[[0,6],[1351,7]]},"147":{"position":[[443,6],[2429,6]]},"149":{"position":[[2653,6],[3002,6],[3790,6]]}}}],["credenti",{"_index":502,"t":{"45":{"position":[[284,11],[415,11],[557,11]]},"85":{"position":[[294,11]]},"99":{"position":[[297,13],[445,13],[478,12],[1147,11],[2698,11],[2831,12]]},"107":{"position":[[4783,11],[4828,11],[4869,11]]},"129":{"position":[[1116,10],[2532,11]]},"137":{"position":[[271,10]]}}}],["crypto/tl",{"_index":728,"t":{"71":{"position":[[731,10]]},"107":{"position":[[14845,10]]},"159":{"position":[[914,10],[1062,11]]}}}],["csrf",{"_index":1064,"t":{"107":{"position":[[2192,4],[2238,4],[2325,4],[2367,4]]}}}],["current",{"_index":5,"t":{"2":{"position":[[49,8]]},"6":{"position":[[16,9]]},"79":{"position":[[531,9]]},"107":{"position":[[6750,10]]},"149":{"position":[[1229,7]]},"159":{"position":[[735,9],[932,9]]}}}],["custom",{"_index":679,"t":{"61":{"position":[[1903,6],[1975,6],[2047,6]]},"107":{"position":[[2385,6],[2421,6],[2445,6],[2492,6],[3516,6],[3596,6],[8810,6],[8882,6]]},"121":{"position":[[3835,6]]},"129":{"position":[[1314,6],[3235,6],[5936,9]]},"149":{"position":[[2091,6]]},"159":{"position":[[508,13]]}}}],["cycl",{"_index":1685,"t":{"151":{"position":[[844,5],[906,6]]}}}],["d",{"_index":27,"t":{"2":{"position":[[308,2]]},"103":{"position":[[254,1]]}}}],["danger",{"_index":286,"t":{"20":{"position":[[0,6]]},"31":{"position":[[211,6]]}}}],["dashboard",{"_index":940,"t":{"99":{"position":[[220,9]]},"147":{"position":[[496,10],[798,10]]}}}],["data",{"_index":712,"t":{"71":{"position":[[210,4],[306,4]]},"107":{"position":[[12281,4]]},"117":{"position":[[1392,4]]},"137":{"position":[[1356,4]]},"141":{"position":[[179,4]]},"143":{"position":[[550,4],[586,5]]},"147":{"position":[[426,4]]}}}],["date",{"_index":1268,"t":{"115":{"position":[[1310,4]]},"117":{"position":[[1332,4]]},"119":{"position":[[602,4]]}}}],["day",{"_index":1120,"t":{"107":{"position":[[5944,4]]},"147":{"position":[[1170,4]]}}}],["dd",{"_index":999,"t":{"103":{"position":[[194,2]]}}}],["debug",{"_index":130,"t":{"10":{"position":[[43,9],[1431,5]]},"107":{"position":[[12841,5]]}}}],["decim",{"_index":476,"t":{"39":{"position":[[153,7]]}}}],["decod",{"_index":1016,"t":{"103":{"position":[[621,6]]}}}],["decreas",{"_index":988,"t":{"101":{"position":[[98,10]]}}}],["dedic",{"_index":1426,"t":{"129":{"position":[[2008,11],[2615,9],[2733,9],[2787,10],[2867,10],[3507,9],[3559,9],[5145,9]]}}}],["deep",{"_index":1143,"t":{"107":{"position":[[9289,4]]}}}],["default",{"_index":506,"t":{"45":{"position":[[407,7],[549,7]]},"55":{"position":[[176,9],[207,7],[431,7],[513,7],[637,7]]},"57":{"position":[[68,8],[226,7],[1170,7],[1198,7],[1218,7],[1363,7]]},"59":{"position":[[804,7],[1457,7]]},"61":{"position":[[1549,7],[1797,7]]},"71":{"position":[[647,7]]},"79":{"position":[[218,7]]},"87":{"position":[[196,7]]},"89":{"position":[[2108,9],[2250,7]]},"91":{"position":[[434,7]]},"93":{"position":[[575,8]]},"99":{"position":[[1139,7],[2690,7],[2823,7]]},"107":{"position":[[24,7],[2551,7],[2867,7],[3564,7],[3644,7],[4508,9],[4820,7],[4861,7],[5024,8],[8642,7],[14760,7],[16572,8],[16643,7]]},"113":{"position":[[3,8],[627,8]]},"115":{"position":[[152,7],[636,7]]},"117":{"position":[[33,7],[372,7]]},"119":{"position":[[219,7],[407,7]]},"125":{"position":[[461,7],[686,7]]},"127":{"position":[[638,7],[921,7],[1166,7],[1372,7]]},"129":{"position":[[772,8],[1382,8],[4431,8]]},"131":{"position":[[146,7]]},"141":{"position":[[316,9]]},"143":{"position":[[34,7]]},"145":{"position":[[357,8]]},"149":{"position":[[577,7],[1927,7],[2415,7],[2863,8],[4247,7]]},"151":{"position":[[620,7]]},"159":{"position":[[635,8],[900,8]]},"161":{"position":[[168,8],[763,7]]}}}],["defin",{"_index":416,"t":{"31":{"position":[[550,7]]},"59":{"position":[[1399,6]]},"61":{"position":[[158,7],[291,7],[2178,7]]},"67":{"position":[[140,7]]},"83":{"position":[[48,6]]},"129":{"position":[[3539,7],[4218,7],[6112,7]]},"137":{"position":[[1512,6]]}}}],["definit",{"_index":701,"t":{"65":{"position":[[76,11]]},"77":{"position":[[61,11]]}}}],["delay",{"_index":279,"t":{"18":{"position":[[571,5]]}}}],["delet",{"_index":1536,"t":{"145":{"position":[[1345,7]]}}}],["demo",{"_index":1567,"t":{"147":{"position":[[512,5]]}}}],["demonstr",{"_index":252,"t":{"16":{"position":[[558,11]]}}}],["deped",{"_index":116,"t":{"8":{"position":[[56,11]]}}}],["depend",{"_index":215,"t":{"12":{"position":[[680,10]]},"16":{"position":[[85,13]]},"18":{"position":[[339,14]]},"107":{"position":[[9014,8]]},"135":{"position":[[228,9]]},"151":{"position":[[1239,12]]}}}],["deploy",{"_index":1,"t":{"2":{"position":[[14,7],[861,6]]},"10":{"position":[[368,8],[686,8]]},"99":{"position":[[2849,8],[2962,8],[3100,8]]},"147":{"position":[[3075,11]]}}}],["deprec",{"_index":1177,"t":{"107":{"position":[[13271,11]]}}}],["describ",{"_index":295,"t":{"20":{"position":[[172,9]]},"22":{"position":[[77,9]]},"149":{"position":[[2156,8]]}}}],["descript",{"_index":400,"t":{"29":{"position":[[34,11]]},"31":{"position":[[334,11]]},"33":{"position":[[34,11]]},"35":{"position":[[34,11]]},"37":{"position":[[111,11]]},"41":{"position":[[34,11]]},"43":{"position":[[34,11]]},"45":{"position":[[34,11]]},"47":{"position":[[129,11]]},"49":{"position":[[127,11]]},"51":{"position":[[34,11]]},"53":{"position":[[34,11]]},"57":{"position":[[1098,11]]},"59":{"position":[[34,11]]},"61":{"position":[[90,11]]},"67":{"position":[[172,11]]},"69":{"position":[[96,11]]},"71":{"position":[[162,11]]},"73":{"position":[[308,11]]},"75":{"position":[[182,11]]},"77":{"position":[[106,11]]},"93":{"position":[[71,11]]},"107":{"position":[[12,11]]},"115":{"position":[[821,11]]},"117":{"position":[[676,11]]},"119":{"position":[[549,11]]},"129":{"position":[[2852,11],[5580,11]]},"149":{"position":[[2324,11]]}}}],["deselect",{"_index":1430,"t":{"129":{"position":[[2366,10]]}}}],["desir",{"_index":521,"t":{"47":{"position":[[574,7]]}}}],["detail",{"_index":236,"t":{"16":{"position":[[167,7],[457,6]]},"20":{"position":[[122,8],[336,7]]},"89":{"position":[[2273,8]]},"107":{"position":[[12866,8]]},"115":{"position":[[1042,7],[1552,8]]},"119":{"position":[[751,7]]},"149":{"position":[[509,8]]}}}],["determin",{"_index":514,"t":{"47":{"position":[[307,10]]},"61":{"position":[[1884,10]]},"73":{"position":[[145,9]]},"75":{"position":[[1981,10],[2270,10]]},"107":{"position":[[8715,10],[9683,9]]},"127":{"position":[[362,9]]}}}],["dev.yaml",{"_index":1631,"t":{"149":{"position":[[680,9],[879,8]]}}}],["develop",{"_index":1563,"t":{"147":{"position":[[315,9]]},"149":{"position":[[3736,9]]}}}],["dex",{"_index":137,"t":{"10":{"position":[[193,5],[393,3],[1170,3],[1228,3]]},"149":{"position":[[178,4],[353,4],[393,4],[436,4],[803,4],[1521,4]]}}}],["differ",{"_index":573,"t":{"57":{"position":[[759,9]]},"63":{"position":[[77,9]]},"99":{"position":[[2196,9]]},"107":{"position":[[2228,9],[6725,6]]},"113":{"position":[[381,9]]},"115":{"position":[[546,9]]},"117":{"position":[[279,9]]},"119":{"position":[[313,9]]}}}],["digitalocean",{"_index":695,"t":{"63":{"position":[[152,12]]},"79":{"position":[[352,12]]}}}],["dir",{"_index":1068,"t":{"107":{"position":[[2402,3]]}}}],["dir\",th",{"_index":776,"t":{"75":{"position":[[1427,10]]}}}],["direct",{"_index":443,"t":{"33":{"position":[[67,7]]},"121":{"position":[[78,9]]},"129":{"position":[[2345,6]]},"151":{"position":[[1188,9]]}}}],["directli",{"_index":1183,"t":{"107":{"position":[[14111,8]]},"151":{"position":[[22,8]]}}}],["directori",{"_index":164,"t":{"10":{"position":[[1159,10]]},"89":{"position":[[72,10],[1356,9]]},"105":{"position":[[265,10]]},"109":{"position":[[677,9]]},"147":{"position":[[2480,9]]},"149":{"position":[[1245,9]]}}}],["directory/develop/v2",{"_index":895,"t":{"89":{"position":[[2201,20]]}}}],["disabl",{"_index":706,"t":{"69":{"position":[[209,8],[338,8]]},"107":{"position":[[1899,8],[2543,7],[3556,7],[3636,7],[6049,7],[7080,8],[13100,7]]},"113":{"position":[[483,8],[792,8]]},"129":{"position":[[5164,9]]},"145":{"position":[[1117,7]]},"151":{"position":[[608,8]]}}}],["disallow",{"_index":1679,"t":{"151":{"position":[[244,9]]}}}],["disclos",{"_index":263,"t":{"18":{"position":[[65,9],[298,9]]}}}],["disclosur",{"_index":226,"t":{"14":{"position":[[139,11]]},"16":{"position":[[194,11],[491,10]]},"18":{"position":[[129,10]]},"145":{"position":[[840,11]]}}}],["discov",{"_index":254,"t":{"16":{"position":[[590,10]]}}}],["discoveri",{"_index":605,"t":{"59":{"position":[[447,9],[888,9]]},"107":{"position":[[7067,9],[13926,9],[13962,10]]},"147":{"position":[[3252,10],[3298,9],[3485,9],[3711,9]]},"153":{"position":[[825,11]]}}}],["discret",{"_index":285,"t":{"18":{"position":[[695,10]]}}}],["discuss",{"_index":262,"t":{"18":{"position":[[47,7],[216,10]]}}}],["display",{"_index":361,"t":{"26":{"position":[[821,7]]},"61":{"position":[[1591,7]]},"97":{"position":[[332,7]]},"107":{"position":[[2567,7],[2594,7],[8916,7]]},"149":{"position":[[980,7]]}}}],["doc",{"_index":1030,"t":{"107":{"position":[[66,4]]}}}],["docker",{"_index":19,"t":{"2":{"position":[[243,6],[339,6]]},"10":{"position":[[895,6],[1187,6],[1205,6],[1267,6],[1285,6]]},"147":{"position":[[2318,6],[2556,6],[2574,6]]},"149":{"position":[[1490,6]]}}}],["document",{"_index":288,"t":{"20":{"position":[[26,13]]},"71":{"position":[[742,14]]},"107":{"position":[[14856,14]]},"129":{"position":[[398,13],[1579,14],[5672,14],[6810,13]]},"135":{"position":[[387,13]]},"149":{"position":[[2470,13]]}}}],["doesn't",{"_index":836,"t":{"85":{"position":[[545,7]]},"89":{"position":[[2398,7]]}}}],["domain",{"_index":562,"t":{"57":{"position":[[529,7],[655,7]]},"79":{"position":[[147,6]]},"81":{"position":[[30,6],[229,9]]},"99":{"position":[[648,6],[1058,7],[1875,6]]},"107":{"position":[[1154,6],[1191,7],[1256,6],[1328,6],[2678,6],[2738,6],[15650,6],[15679,7],[15732,6],[16443,6],[16462,6],[16537,6],[16795,7]]},"111":{"position":[[466,6]]},"121":{"position":[[568,8]]},"125":{"position":[[469,8],[694,8]]},"127":{"position":[[646,8],[929,8],[1174,8],[1380,8]]},"129":{"position":[[369,6]]},"139":{"position":[[407,8]]},"147":{"position":[[3874,6]]},"149":{"position":[[1195,6]]},"153":{"position":[[853,6],[963,6],[1063,6]]},"155":{"position":[[251,7]]}}}],["domain.com",{"_index":1259,"t":{"115":{"position":[[964,10]]},"117":{"position":[[819,10]]}}}],["domain.tld/gitlab",{"_index":1469,"t":{"133":{"position":[[1216,19]]}}}],["domain.tld/gitlab/oauth",{"_index":1473,"t":{"133":{"position":[[1364,24]]}}}],["domain.tld/oauth",{"_index":1472,"t":{"133":{"position":[[1330,16]]}}}],["domain=\"yourcompany.com",{"_index":1707,"t":{"159":{"position":[[237,24]]},"161":{"position":[[1239,24]]}}}],["domain=git",{"_index":121,"t":{"8":{"position":[[159,24]]}}}],["feature/go",{"_index":126,"t":{"8":{"position":[[211,23]]}}}],["feder",{"_index":963,"t":{"99":{"position":[[1199,10],[2756,10],[3143,10]]}}}],["field",{"_index":399,"t":{"29":{"position":[[23,5]]},"31":{"position":[[323,5]]},"33":{"position":[[23,5],[221,5]]},"35":{"position":[[23,5]]},"37":{"position":[[100,5]]},"41":{"position":[[23,5]]},"43":{"position":[[23,5]]},"45":{"position":[[23,5]]},"47":{"position":[[118,5]]},"49":{"position":[[116,5]]},"51":{"position":[[23,5]]},"53":{"position":[[23,5]]},"57":{"position":[[1087,5]]},"59":{"position":[[23,5]]},"61":{"position":[[79,5]]},"67":{"position":[[161,5]]},"69":{"position":[[85,5]]},"71":{"position":[[151,5]]},"73":{"position":[[297,5]]},"75":{"position":[[171,5]]},"77":{"position":[[95,5]]},"93":{"position":[[135,6]]},"107":{"position":[[3034,7]]},"129":{"position":[[2235,6],[3251,5]]},"131":{"position":[[319,6]]},"149":{"position":[[3444,5]]}}}],["file",{"_index":37,"t":{"2":{"position":[[506,4],[563,4],[791,5]]},"10":{"position":[[910,5]]},"16":{"position":[[428,5]]},"20":{"position":[[525,4],[698,4]]},"22":{"position":[[52,4],[136,4]]},"24":{"position":[[362,5]]},"49":{"position":[[310,4]]},"53":{"position":[[174,4]]},"61":{"position":[[1913,5],[1985,5],[2057,6]]},"67":{"position":[[355,4]]},"71":{"position":[[254,5],[350,5]]},"89":{"position":[[1169,5]]},"93":{"position":[[552,5]]},"99":{"position":[[2297,4],[2357,4],[2426,4],[2455,4]]},"101":{"position":[[89,4],[248,4]]},"105":{"position":[[57,4],[242,4]]},"107":{"position":[[548,4],[592,4],[941,4],[957,4],[1140,4],[2648,4],[5086,4],[5143,5],[5679,5],[5742,4],[5844,5],[5967,5],[6027,5],[6119,4],[6309,4],[6345,4],[8523,4],[8741,4],[8746,5],[8820,5],[8892,6],[14546,4],[14578,4],[14881,4],[14913,4],[15087,7],[15112,5]]},"109":{"position":[[136,5],[151,4],[578,4],[609,7],[661,5],[803,5],[943,5],[1262,5]]},"111":{"position":[[350,4]]},"113":{"position":[[106,4],[165,4],[205,4]]},"119":{"position":[[465,11],[638,4],[658,4]]},"125":{"position":[[283,4]]},"127":{"position":[[2321,4]]},"147":{"position":[[2329,5],[2387,5],[2458,4],[2610,4]]},"149":{"position":[[3025,4],[4352,4]]}}}],["file/client_secret_fil",{"_index":360,"t":{"26":{"position":[[779,23]]}}}],["file/jwt_key_fil",{"_index":384,"t":{"26":{"position":[[1167,17]]}}}],["file/provider_ca_fil",{"_index":364,"t":{"26":{"position":[[868,22]]}}}],["file://$pwd/#/stat",{"_index":1641,"t":{"149":{"position":[[1311,21]]}}}],["file:///var/www/stat",{"_index":1224,"t":{"109":{"position":[[622,23]]}}}],["file:///var/www/static/#/stat",{"_index":1228,"t":{"109":{"position":[[972,32]]}}}],["file://host/pathif",{"_index":773,"t":{"75":{"position":[[1349,18]]}}}],["file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1128,"t":{"107":{"position":[[6430,42]]},"147":{"position":[[2781,41]]}}}],["file=/path/to/cert.key",{"_index":1706,"t":{"159":{"position":[[107,23],[346,22]]}}}],["file=/path/to/cert.pem",{"_index":1705,"t":{"159":{"position":[[70,22],[311,22]]}}}],["file=/path/to/fil",{"_index":818,"t":{"81":{"position":[[140,18]]}}}],["filebas",{"_index":767,"t":{"75":{"position":[[1167,9]]}}}],["filecontain",{"_index":644,"t":{"61":{"position":[[416,14]]}}}],["filenam",{"_index":1115,"t":{"107":{"position":[[5726,8],[5861,9]]},"113":{"position":[[131,8]]}}}],["fill",{"_index":910,"t":{"93":{"position":[[39,4]]},"99":{"position":[[366,4]]},"131":{"position":[[288,4]]},"149":{"position":[[2120,4],[2313,4]]}}}],["filter",{"_index":1435,"t":{"129":{"position":[[4741,6],[6695,6]]},"133":{"position":[[420,10]]}}}],["find",{"_index":73,"t":{"4":{"position":[[46,4]]},"6":{"position":[[110,4]]},"85":{"position":[[512,4]]},"89":{"position":[[2365,4]]},"145":{"position":[[1389,4]]},"147":{"position":[[168,4]]}}}],["firewal",{"_index":1610,"t":{"147":{"position":[[3128,8]]}}}],["first",{"_index":1322,"t":{"121":{"position":[[1868,5],[2153,5]]},"147":{"position":[[758,6]]},"149":{"position":[[1690,6]]}}}],["fix",{"_index":86,"t":{"4":{"position":[[215,3]]},"16":{"position":[[632,3]]},"18":{"position":[[55,5],[244,5],[381,5],[428,3],[472,3],[585,5],[645,3]]},"55":{"position":[[501,5]]},"57":{"position":[[104,5],[268,5]]}}}],["flag",{"_index":310,"t":{"20":{"position":[[534,6]]},"22":{"position":[[166,5],[207,5]]},"24":{"position":[[98,4]]},"26":{"position":[[1381,5]]},"89":{"position":[[2084,5]]},"99":{"position":[[1918,5],[2140,5],[2186,4],[2495,5]]},"107":{"position":[[1555,4],[2081,4]]},"111":{"position":[[409,4],[473,4]]},"115":{"position":[[626,5]]},"117":{"position":[[362,5]]},"119":{"position":[[397,5]]},"121":{"position":[[1125,4],[1720,5]]},"137":{"position":[[1123,5]]},"139":{"position":[[622,5],[768,4]]},"145":{"position":[[2898,5],[2929,5],[3142,5],[3166,5],[3229,5]]}}}],["flags/opt",{"_index":331,"t":{"26":{"position":[[14,13]]}}}],["flaw",{"_index":1206,"t":{"107":{"position":[[16177,6]]}}}],["flight",{"_index":277,"t":{"18":{"position":[[541,6]]}}}],["flow",{"_index":613,"t":{"59":{"position":[[625,5]]},"129":{"position":[[2315,4],[2329,4]]},"145":{"position":[[1463,4]]}}}],["flush",{"_index":333,"t":{"26":{"position":[[127,5]]},"75":{"position":[[2143,8]]},"107":{"position":[[3267,5],[3306,8]]}}}],["flushinterv",{"_index":792,"t":{"75":{"position":[[2084,13],[2107,13]]}}}],["follow",{"_index":78,"t":{"4":{"position":[[125,6]]},"6":{"position":[[55,6]]},"10":{"position":[[312,9],[630,9]]},"26":{"position":[[4,9]]},"83":{"position":[[0,6]]},"85":{"position":[[210,6]]},"87":{"position":[[52,6]]},"91":{"position":[[334,9]]},"93":{"position":[[397,9]]},"97":{"position":[[213,9]]},"99":{"position":[[1381,6],[1566,9],[1714,6],[3044,6]]},"115":{"position":[[668,8]]},"117":{"position":[[404,8]]},"119":{"position":[[439,8]]},"121":{"position":[[2820,9]]},"127":{"position":[[165,9]]},"129":{"position":[[1410,9],[5784,8],[6960,9]]},"133":{"position":[[201,6],[485,9],[584,6],[895,9],[1090,9]]},"137":{"position":[[405,9]]},"139":{"position":[[612,9],[758,9],[1735,9]]},"143":{"position":[[256,9]]},"145":{"position":[[247,10]]},"147":{"position":[[1530,9]]},"149":{"position":[[410,9],[940,9],[1585,9],[3039,10],[4714,9]]},"151":{"position":[[38,9]]},"155":{"position":[[107,9]]},"161":{"position":[[652,8]]}}}],["foo",{"_index":750,"t":{"75":{"position":[[560,7],[597,4]]}}}],["foo/$1",{"_index":761,"t":{"75":{"position":[[988,7]]}}}],["foo/abc/123",{"_index":764,"t":{"75":{"position":[[1037,12]]}}}],["footer",{"_index":1090,"t":{"107":{"position":[[3582,6],[3610,6],[3652,7]]}}}],["forc",{"_index":1036,"t":{"107":{"position":[[371,7],[1202,5],[1794,5],[3364,5],[3412,5],[3435,5]]},"143":{"position":[[784,5]]}}}],["forcestshead",{"_index":1376,"t":{"125":{"position":[[1023,15]]},"127":{"position":[[1781,15]]}}}],["forego",{"_index":271,"t":{"18":{"position":[[391,6]]}}}],["fork",{"_index":94,"t":{"4":{"position":[[294,5]]},"8":{"position":[[11,5]]}}}],["form",{"_index":577,"t":{"57":{"position":[[852,4]]},"107":{"position":[[2584,4],[2628,4]]},"135":{"position":[[318,4]]}}}],["format",{"_index":303,"t":{"20":{"position":[[390,7],[469,6],[927,7]]},"22":{"position":[[70,6]]},"24":{"position":[[148,7],[285,6]]},"53":{"position":[[91,6],[186,6]]},"57":{"position":[[965,6]]},"107":{"position":[[305,7],[447,6],[3900,9],[4407,9],[6180,6],[6357,6],[11736,6],[13485,7],[14463,6]]},"113":{"position":[[602,6],[642,7]]},"115":{"position":[[173,7],[556,6],[619,6],[644,6]]},"117":{"position":[[54,7],[289,6],[355,6],[380,6]]},"119":{"position":[[112,7],[227,6],[323,6],[390,6],[415,6]]},"139":{"position":[[1138,9]]},"147":{"position":[[1028,6],[2532,6]]},"151":{"position":[[1060,7]]}}}],["forward",{"_index":210,"t":{"12":{"position":[[599,9]]},"20":{"position":[[404,7]]},"107":{"position":[[7486,9],[7770,9],[7788,9],[7810,9],[8235,9],[8253,9],[8273,9],[8295,9],[9766,9],[11998,9],[13618,9]]},"109":{"position":[[294,7],[477,9]]},"121":{"position":[[800,9]]},"127":{"position":[[339,9]]},"137":{"position":[[1292,9]]},"145":{"position":[[2181,9]]}}}],["forwardauth",{"_index":1357,"t":{"125":{"position":[[15,11],[1137,12]]},"127":{"position":[[96,11],[1904,12],[2069,12]]}}}],["found",{"_index":233,"t":{"16":{"position":[[29,5],[243,5]]},"71":{"position":[[718,5]]},"107":{"position":[[14832,5]]},"145":{"position":[[1558,5]]},"149":{"position":[[340,5]]},"159":{"position":[[1053,5]]}}}],["fraction",{"_index":477,"t":{"39":{"position":[[189,8]]}}}],["fragment",{"_index":1227,"t":{"109":{"position":[[841,8],[890,8]]}}}],["framedeni",{"_index":1380,"t":{"125":{"position":[[1109,10]]},"127":{"position":[[1867,10]]}}}],["freeform",{"_index":949,"t":{"99":{"position":[[571,9]]}}}],["fromenv",{"_index":527,"t":{"49":{"position":[[197,7],[212,7]]},"67":{"position":[[242,7],[257,7]]}}}],["fromfil",{"_index":528,"t":{"49":{"position":[[265,8],[281,8]]},"67":{"position":[[310,8],[326,8]]}}}],["full",{"_index":221,"t":{"14":{"position":[[82,4]]},"115":{"position":[[1362,4]]},"117":{"position":[[1434,4]]},"129":{"position":[[4365,5],[5174,4],[6019,5]]}}}],["function",{"_index":92,"t":{"4":{"position":[[263,14]]},"127":{"position":[[20,13]]}}}],["further",{"_index":709,"t":{"69":{"position":[[446,7]]}}}],["futur",{"_index":618,"t":{"59":{"position":[[757,6]]},"99":{"position":[[1294,6]]},"149":{"position":[[4218,6]]}}}],["gap",{"_index":1173,"t":{"107":{"position":[[13014,3]]}}}],["gcp",{"_index":980,"t":{"99":{"position":[[2865,4],[3120,4]]}}}],["gener",{"_index":320,"t":{"22":{"position":[[36,8]]},"97":{"position":[[381,9],[439,9]]},"103":{"position":[[3,8]]},"129":{"position":[[7113,8]]},"147":{"position":[[1035,9]]},"149":{"position":[[2768,7],[3570,8]]}}}],["get",{"_index":1627,"t":{"149":{"position":[[478,7]]}}}],["git",{"_index":117,"t":{"8":{"position":[[84,3]]}}}],["git@github.com:/oauth2",{"_index":118,"t":{"8":{"position":[[94,33]]}}}],["gitea",{"_index":814,"t":{"79":{"position":[[253,5]]},"97":{"position":[[41,5],[394,5],[452,5],[489,5],[554,5],[624,5]]}}}],["github",{"_index":72,"t":{"4":{"position":[[31,7]]},"16":{"position":[[136,7],[729,6]]},"18":{"position":[[7,6],[109,6]]},"26":{"position":[[1302,7]]},"63":{"position":[[175,7]]},"79":{"position":[[72,6],[246,6]]},"107":{"position":[[3662,6],[3730,6],[3829,6],[3928,6],[4049,6]]},"139":{"position":[[172,6],[429,6],[629,6],[789,6],[802,6],[1070,6],[1397,6],[1614,6],[1694,6],[1803,6],[1873,6],[1948,6]]}}}],["github.com/dexidp/dex",{"_index":1626,"t":{"149":{"position":[[448,21]]}}}],["github.com/oauth2",{"_index":13,"t":{"2":{"position":[[132,17]]}}}],["githubc",{"_index":656,"t":{"61":{"position":[[921,7]]}}}],["githubconfig",{"_index":654,"t":{"61":{"position":[[852,12],[879,12]]}}}],["githubopt",{"_index":655,"t":{"61":{"position":[[865,13]]}}}],["gitlab",{"_index":392,"t":{"26":{"position":[[1310,7]]},"61":{"position":[[1008,6]]},"63":{"position":[[183,7]]},"79":{"position":[[282,6]]},"107":{"position":[[4187,6],[4295,6],[4486,6],[16390,7]]},"133":{"position":[[43,6],[71,6],[193,7],[739,6],[915,6],[1060,7],[1149,6],[1182,6]]}}}],["gitlab.com",{"_index":1455,"t":{"133":{"position":[[166,10]]}}}],["gitlab.domain.tld",{"_index":1471,"t":{"133":{"position":[[1274,19]]}}}],["gitlabconfig",{"_index":657,"t":{"61":{"position":[[939,12],[966,12]]}}}],["gitlabopt",{"_index":658,"t":{"61":{"position":[[952,13]]}}}],["give",{"_index":732,"t":{"73":{"position":[[409,5]]},"99":{"position":[[1531,4]]}}}],["given",{"_index":730,"t":{"73":{"position":[[196,5]]},"107":{"position":[[2753,5],[4385,5],[4686,5],[8974,5],[13366,5],[14715,5],[15382,5],[15481,5],[15911,5]]},"129":{"position":[[5045,5]]}}}],["gke",{"_index":984,"t":{"99":{"position":[[2974,4]]},"107":{"position":[[4919,3]]}}}],["global",{"_index":1488,"t":{"137":{"position":[[1105,7]]}}}],["gmail",{"_index":970,"t":{"99":{"position":[[1869,5]]}}}],["go",{"_index":9,"t":{"2":{"position":[[86,2],[121,2]]},"4":{"position":[[481,2]]},"6":{"position":[[38,2],[89,2],[115,2]]},"10":{"position":[[95,3],[207,5],[525,5]]},"20":{"position":[[398,5]]},"61":{"position":[[1805,2]]},"71":{"position":[[655,2]]},"89":{"position":[[20,2],[1072,2]]},"107":{"position":[[634,2],[8650,2],[14768,2]]},"147":{"position":[[2885,2]]},"149":{"position":[[441,2]]},"159":{"position":[[947,2]]}}}],["googl",{"_index":393,"t":{"26":{"position":[[1318,6]]},"45":{"position":[[108,6],[157,6],[505,6]]},"61":{"position":[[1094,6],[1530,8]]},"63":{"position":[[191,7]]},"79":{"position":[[63,8],[211,6]]},"99":{"position":[[4,7],[1036,6],[1899,6],[2127,6],[2467,6]]},"107":{"position":[[4536,6],[4566,6],[4610,6],[4665,6],[4711,6],[4797,6],[4944,6],[8502,6],[16398,6]]},"161":{"position":[[73,6],[269,6]]}}}],["google'",{"_index":986,"t":{"99":{"position":[[3051,8]]}}}],["googleconfig",{"_index":659,"t":{"61":{"position":[[1025,12],[1052,12]]}}}],["googleopt",{"_index":660,"t":{"61":{"position":[[1038,13]]}}}],["gopath/github.com/dexidp/dex",{"_index":1635,"t":{"149":{"position":[[813,30]]}}}],["goroot/bin",{"_index":17,"t":{"2":{"position":[[209,13]]}}}],["govern",{"_index":1558,"t":{"147":{"position":[[41,11],[69,10]]}}}],["grab",{"_index":1613,"t":{"147":{"position":[[3360,4]]}}}],["grant",{"_index":863,"t":{"89":{"position":[[690,5]]},"129":{"position":[[2359,6]]},"149":{"position":[[2792,5],[4094,5]]}}}],["graph",{"_index":860,"t":{"89":{"position":[[567,6]]}}}],["graphdefault",{"_index":451,"t":{"33":{"position":[[283,12]]}}}],["graphgroupfield",{"_index":447,"t":{"33":{"position":[[161,15],[184,15]]}}}],["group",{"_index":448,"t":{"33":{"position":[[215,5],[256,6]]},"43":{"position":[[46,5],[61,5],[107,5]]},"45":{"position":[[46,5],[61,6],[115,5]]},"51":{"position":[[46,6],[62,5],[118,5]]},"59":{"position":[[1246,8]]},"61":{"position":[[2681,5]]},"85":{"position":[[86,5]]},"89":{"position":[[434,5],[625,5]]},"99":{"position":[[1043,6],[2095,5],[2134,5],[2206,6],[2267,7],[2565,5]]},"107":{"position":[[4194,5],[4257,6],[4617,5],[4672,5],[5228,5],[5252,6],[7173,6],[7228,6],[7235,8],[8263,7],[12390,7],[15313,5],[15368,5]]},"129":{"position":[[610,5],[1178,6],[1218,9],[3986,7],[4092,5],[5448,6],[5488,5],[5549,6],[5630,6],[5742,5],[5833,6],[5878,5],[5926,6],[5975,6],[6025,5],[6100,5],[6137,5],[6256,6],[6383,6],[6453,5],[6540,5],[6563,6],[6580,5],[6705,5],[6773,7],[6871,6],[7101,7]]},"133":{"position":[[857,5],[995,6]]},"137":{"position":[[333,6],[373,9],[1020,5],[1071,5],[1099,5],[1158,6],[1210,6],[1302,6],[1349,6],[1409,5],[1471,5],[1533,6]]},"149":{"position":[[2958,6],[4066,5]]},"155":{"position":[[183,6]]}}}],["group,otherwis",{"_index":672,"t":{"61":{"position":[[1514,15]]}}}],["group.read.al",{"_index":861,"t":{"89":{"position":[[642,15]]}}}],["group/allowed_group",{"_index":380,"t":{"26":{"position":[[1095,20]]}}}],["group=\"mygroup,myothergroup",{"_index":1466,"t":{"133":{"position":[[922,29]]}}}],["group=/groupnam",{"_index":1444,"t":{"129":{"position":[[6656,16]]}}}],["group=/oauth2/callback",{"_index":919,"t":{"93":{"position":[[611,24]]}}}],["headers.default",{"_index":520,"t":{"47":{"position":[[456,16]]}}}],["headers/pass_user_head",{"_index":345,"t":{"26":{"position":[[390,25]]}}}],["headers/skip_auth_strip_head",{"_index":355,"t":{"26":{"position":[[680,31]]}}}],["headershould",{"_index":515,"t":{"47":{"position":[[346,12]]}}}],["headervalu",{"_index":455,"t":{"37":{"position":[[13,12]]},"47":{"position":[[540,13]]},"49":{"position":[[21,11]]},"67":{"position":[[26,12]]}}}],["health",{"_index":1141,"t":{"107":{"position":[[9100,6],[9187,6],[9294,6]]},"151":{"position":[[384,6]]}}}],["helm",{"_index":34,"t":{"2":{"position":[[446,6]]}}}],["here",{"_index":111,"t":{"6":{"position":[[92,5],[155,5]]},"147":{"position":[[344,5]]}}}],["hex",{"_index":1524,"t":{"145":{"position":[[407,3]]}}}],["histor",{"_index":1506,"t":{"143":{"position":[[103,13]]}}}],["hit",{"_index":862,"t":{"89":{"position":[[658,3],[1276,7]]},"99":{"position":[[408,3]]}}}],["hold",{"_index":639,"t":{"61":{"position":[[33,5],[546,5],[631,5],[710,5],[803,5],[892,5],[979,5],[1065,5],[1145,5],[1275,5]]}}}],["homepag",{"_index":911,"t":{"93":{"position":[[57,9]]}}}],["host",{"_index":335,"t":{"26":{"position":[[162,4]]},"75":{"position":[[2301,4]]},"93":{"position":[[606,4]]},"97":{"position":[[47,4],[495,4],[560,4],[630,4]]},"107":{"position":[[1286,4],[8140,4],[8174,4]]},"115":{"position":[[959,4],[992,4]]},"117":{"position":[[475,9],[814,4],[847,4]]},"121":{"position":[[425,4],[430,6],[728,4],[733,6]]},"133":{"position":[[185,7],[1053,6],[1175,6]]},"161":{"position":[[1006,4],[1011,6]]}}}],["host(`a",{"_index":1361,"t":{"125":{"position":[[342,8],[537,8]]},"127":{"position":[[432,8],[726,8],[1013,8]]}}}],["host(`oauth.example.com",{"_index":1393,"t":{"127":{"position":[[1255,26]]}}}],["host>/api/v3",{"_index":1505,"t":{"139":{"position":[[1955,13]]}}}],["host>/auth/realms//login/oauth/access_token",{"_index":1504,"t":{"139":{"position":[[1880,31]]}}}],["host>/login/oauth/author",{"_index":1503,"t":{"139":{"position":[[1810,28]]}}}],["host>/oauth2/callback",{"_index":927,"t":{"97":{"position":[[144,21],[298,22]]}}}],["host>/realms/:::/sign_in",{"_index":1148,"t":{"107":{"position":[[9482,18]]}}}],["oauth2_proxy_",{"_index":1231,"t":{"111":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":1234,"t":{"111":{"position":[[422,27]]}}}],["oauth2_proxy_email_domain",{"_index":1235,"t":{"111":{"position":[[486,27]]}}}],["oauth2_proxy_jwt_key",{"_index":1587,"t":{"147":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1608,"t":{"147":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":1053,"t":{"107":{"position":[[1618,11]]}}}],["obtain",{"_index":1208,"t":{"107":{"position":[[16200,9]]}}}],["occur",{"_index":1293,"t":{"119":{"position":[[187,5]]}}}],["offici",{"_index":31,"t":{"2":{"position":[[417,8]]},"4":{"position":[[472,8]]}}}],["oidc",{"_index":389,"t":{"26":{"position":[[1278,5]]},"51":{"position":[[229,4]]},"59":{"position":[[442,4],[883,4]]},"61":{"position":[[1174,4],[1208,4]]},"63":{"position":[[218,5],[259,5]]},"79":{"position":[[277,4]]},"89":{"position":[[1560,4],[1868,4]]},"107":{"position":[[6549,4],[6661,4],[6706,4],[6825,4],[6865,4],[6900,4],[6991,4],[7012,4],[7062,4],[7091,4],[7121,4],[7168,4],[7199,4],[7246,4],[7279,4],[7320,4],[7660,4],[8414,4],[13921,4],[13948,4],[14005,4],[15533,4],[16409,5]]},"129":{"position":[[20,4],[161,4],[253,4],[1457,4],[1598,4],[1857,4],[2069,4],[4043,4],[4340,4],[5970,4]]},"133":{"position":[[1126,4]]},"137":{"position":[[60,4]]},"147":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"149":{"position":[[245,6],[375,4],[966,4],[997,4],[1106,4],[1549,4]]},"153":{"position":[[480,4],[666,4],[779,4],[888,4]]}}}],["oidc\"redirect_url",{"_index":1649,"t":{"149":{"position":[[3061,18],[4387,18]]}}}],["oidc_issuer_url",{"_index":890,"t":{"89":{"position":[[2036,16]]},"149":{"position":[[3372,15]]}}}],["oidcconfig",{"_index":661,"t":{"61":{"position":[[1111,10],[1134,10]]}}}],["oidcopt",{"_index":662,"t":{"61":{"position":[[1122,11]]}}}],["ok",{"_index":51,"t":{"2":{"position":[[684,2]]},"151":{"position":[[227,2],[340,2],[421,2]]}}}],["okta",{"_index":1625,"t":{"149":{"position":[[316,5],[1526,5],[1567,5],[1612,4],[2465,4],[3707,4],[3833,4],[4308,4],[4481,4]]}}}],["old",{"_index":1122,"t":{"107":{"position":[[5959,3],[6019,3]]},"145":{"position":[[1532,3]]}}}],["omit",{"_index":1216,"t":{"107":{"position":[[16727,4]]}}}],["on",{"_index":201,"t":{"12":{"position":[[354,3]]},"16":{"position":[[674,4]]},"57":{"position":[[95,3],[259,3],[614,3],[1458,3]]},"67":{"position":[[101,3]]},"81":{"position":[[164,3]]},"91":{"position":[[684,3]]},"103":{"position":[[39,3]]},"107":{"position":[[597,4],[9755,4],[13866,3]]},"115":{"position":[[313,3]]},"141":{"position":[[187,3]]},"147":{"position":[[2206,3]]}}}],["onc",{"_index":272,"t":{"18":{"position":[[421,4]]},"99":{"position":[[2656,4]]},"147":{"position":[[2843,4]]}}}],["onlyvalu",{"_index":590,"t":{"57":{"position":[[1436,10]]}}}],["open",{"_index":75,"t":{"4":{"position":[[65,4],[85,7],[328,4],[372,4]]},"10":{"position":[[34,4],[1099,4],[1445,4]]},"16":{"position":[[113,4]]},"85":{"position":[[0,4]]},"99":{"position":[[464,4]]},"149":{"position":[[106,4]]}}}],["openid",{"_index":593,"t":{"59":{"position":[[80,6],[986,6]]},"79":{"position":[[317,6],[563,6]]},"107":{"position":[[6927,6]]},"129":{"position":[[993,7],[2158,7]]},"133":{"position":[[276,7]]},"147":{"position":[[862,6],[906,6]]},"149":{"position":[[0,6],[221,6],[2628,6]]}}}],["openssl",{"_index":994,"t":{"103":{"position":[[78,7],[289,7]]},"147":{"position":[[1104,7]]}}}],["oppos",{"_index":1470,"t":{"133":{"position":[[1239,7]]}}}],["option",{"_index":61,"t":{"2":{"position":[[810,8]]},"20":{"position":[[164,7],[317,8],[373,7]]},"22":{"position":[[218,7],[263,7]]},"24":{"position":[[37,7],[256,7],[379,7],[437,7]]},"26":{"position":[[1233,8],[1251,6],[1369,7],[1480,7]]},"31":{"position":[[53,8],[77,7],[222,7]]},"37":{"position":[[246,8]]},"39":{"position":[[180,8]]},"47":{"position":[[416,6]]},"49":{"position":[[467,8]]},"55":{"position":[[186,6],[316,7]]},"57":{"position":[[1187,10],[1316,10]]},"63":{"position":[[101,7],[115,7]]},"71":{"position":[[102,8]]},"75":{"position":[[1585,6],[2039,6]]},"91":{"position":[[344,8],[584,7]]},"93":{"position":[[407,8],[530,7],[706,7]]},"97":{"position":[[223,7]]},"99":{"position":[[1066,11],[3166,7]]},"101":{"position":[[48,8],[148,7]]},"105":{"position":[[169,6]]},"107":{"position":[[0,6],[52,9],[1175,8],[1770,8],[2001,11],[11312,6],[11407,7],[13216,7],[15973,10],[16276,6],[16450,7],[16895,7]]},"109":{"position":[[61,6]]},"121":{"position":[[5,6],[37,6]]},"123":{"position":[[5,6],[37,6]]},"127":{"position":[[175,7],[2326,6]]},"129":{"position":[[391,6],[448,9],[527,9],[591,9],[4057,7],[4874,7],[5219,7],[5532,6],[5988,6],[6037,6],[6143,6],[6401,8],[6639,6],[6744,6],[7067,8]]},"133":{"position":[[905,7]]},"137":{"position":[[1051,8]]},"139":{"position":[[276,8],[362,7]]},"145":{"position":[[3337,6],[3432,7]]},"147":{"position":[[1540,8],[2132,7],[3495,7]]},"149":{"position":[[1721,10],[2023,6],[2452,8]]},"153":{"position":[[984,6]]}}}],["order",{"_index":989,"t":{"101":{"position":[[109,5]]}}}],["org",{"_index":488,"t":{"41":{"position":[[46,3],[57,3],[478,3]]},"107":{"position":[[3669,3],[4155,3]]},"139":{"position":[[535,3],[636,7],[796,4],[1561,3]]}}}],["organ",{"_index":1495,"t":{"139":{"position":[[259,12],[581,12],[714,12]]}}}],["organis",{"_index":489,"t":{"41":{"position":[[101,12]]},"107":{"position":[[3715,12]]},"139":{"position":[[679,12]]}}}],["organization'",{"_index":561,"t":{"57":{"position":[[514,14]]}}}],["organizationdefault",{"_index":551,"t":{"57":{"position":[[6,20]]}}}],["orgname/repo",{"_index":1092,"t":{"107":{"position":[[3913,12]]},"139":{"position":[[1151,12]]}}}],["orgname/repo=accesslevel",{"_index":1093,"t":{"107":{"position":[[4420,25]]}}}],["origin",{"_index":125,"t":{"8":{"position":[[204,6]]},"99":{"position":[[632,7]]},"149":{"position":[[146,10]]}}}],["os,base64",{"_index":997,"t":{"103":{"position":[[125,10]]}}}],["otherwis",{"_index":550,"t":{"55":{"position":[[751,10]]},"59":{"position":[[631,10]]},"61":{"position":[[2027,9]]},"77":{"position":[[231,9]]},"107":{"position":[[8862,9]]},"149":{"position":[[1903,10]]},"153":{"position":[[991,9]]}}}],["out",{"_index":1581,"t":{"147":{"position":[[1156,3]]},"149":{"position":[[2125,3],[2318,3]]},"151":{"position":[[691,3]]},"153":{"position":[[17,4],[325,3]]}}}],["output",{"_index":1236,"t":{"113":{"position":[[34,6],[81,6]]},"115":{"position":[[142,6]]},"117":{"position":[[23,6]]},"119":{"position":[[80,6]]}}}],["outsid",{"_index":987,"t":{"99":{"position":[[3109,7]]},"111":{"position":[[326,7]]},"119":{"position":[[193,7]]}}}],["overrid",{"_index":729,"t":{"73":{"position":[[178,9]]},"87":{"position":[[183,8]]},"107":{"position":[[8936,8],[10474,8]]}}}],["overridden",{"_index":543,"t":{"55":{"position":[[371,10]]},"57":{"position":[[245,10],[388,11],[1279,11]]}}}],["override_speci",{"_index":1024,"t":{"103":{"position":[[712,16]]}}}],["overwrit",{"_index":990,"t":{"101":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":134,"t":{"10":{"position":[[106,8]]},"83":{"position":[[37,7]]}}}],["pad",{"_index":1526,"t":{"145":{"position":[[480,9]]}}}],["page",{"_index":287,"t":{"20":{"position":[[12,4],[143,4],[190,4],[331,4]]},"61":{"position":[[1654,5]]},"89":{"position":[[506,4],[1091,4],[1205,4]]},"107":{"position":[[2521,4],[3475,5],[9009,4],[12902,5],[14103,4]]},"151":{"position":[[656,5],[695,4],[1282,5]]},"153":{"position":[[329,4]]}}}],["pair",{"_index":1079,"t":{"107":{"position":[[3042,5]]},"145":{"position":[[534,4]]}}}],["pane",{"_index":942,"t":{"99":{"position":[[237,5],[284,5],[325,5],[432,5]]},"129":{"position":[[2751,4]]}}}],["parallel",{"_index":1066,"t":{"107":{"position":[[2291,8]]}}}],["paramet",{"_index":403,"t":{"29":{"position":[[83,9]]},"55":{"position":[[81,9],[280,10],[347,9],[476,9],[654,9]]},"57":{"position":[[36,9],[198,9],[366,9],[1159,10]]},"61":{"position":[[2190,10]]},"73":{"position":[[82,10],[202,9],[600,9]]},"109":{"position":[[271,10],[1178,10],[1203,9]]},"121":{"position":[[3805,10]]},"129":{"position":[[7082,10]]},"153":{"position":[[363,10]]},"155":{"position":[[123,11]]}}}],["part",{"_index":408,"t":{"31":{"position":[[149,4]]},"121":{"position":[[1828,6],[2209,4],[2487,4]]}}}],["particularli",{"_index":1233,"t":{"111":{"position":[[286,12]]}}}],["pass",{"_index":177,"t":{"12":{"position":[[12,7]]},"26":{"position":[[157,4],[312,4],[344,4],[380,4],[416,4]]},"55":{"position":[[103,6],[253,6],[560,6],[677,6]]},"57":{"position":[[58,6],[216,6]]},"59":{"position":[[1593,4]]},"61":{"position":[[2213,6]]},"73":{"position":[[93,6],[212,6]]},"77":{"position":[[154,4]]},"85":{"position":[[557,6]]},"89":{"position":[[2410,6]]},"91":{"position":[[325,4]]},"93":{"position":[[388,4]]},"97":{"position":[[204,4]]},"99":{"position":[[2154,4]]},"107":{"position":[[762,7],[7396,4],[7421,4],[7444,4],[7624,4],[7655,4],[7725,4],[7746,4],[7949,7],[8087,4],[8109,4],[8135,4],[8157,4],[8205,4],[8228,4],[12528,4]]},"109":{"position":[[71,4]]},"121":{"position":[[1022,4],[1333,4],[1362,4]]},"129":{"position":[[3100,4]]},"141":{"position":[[276,6]]},"145":{"position":[[2156,4]]},"147":{"position":[[2283,4]]},"149":{"position":[[1795,6]]}}}],["passhosthead",{"_index":798,"t":{"75":{"position":[[2235,14],[2255,14]]}}}],["password",{"_index":174,"t":{"10":{"position":[[1381,8],[1393,9]]},"37":{"position":[[529,8]]},"49":{"position":[[750,8]]},"107":{"position":[[721,8],[741,8],[2613,8],[10396,8],[10418,9],[10487,8],[10543,8],[10574,9],[10634,9],[10664,8]]}}}],["password/basic_auth_password",{"_index":353,"t":{"26":{"position":[[635,28]]}}}],["patch",{"_index":281,"t":{"18":{"position":[[601,7]]}}}],["path",{"_index":321,"t":{"22":{"position":[[123,4]]},"31":{"position":[[536,4]]},"45":{"position":[[251,4]]},"49":{"position":[[300,4]]},"53":{"position":[[150,4]]},"61":{"position":[[1698,5]]},"67":{"position":[[345,4]]},"75":{"position":[[140,4],[165,5],[296,4],[308,4],[407,5],[592,4],[622,4],[671,4],[721,4],[824,4],[877,4],[949,4],[1199,5],[1378,4]]},"77":{"position":[[171,4],[396,4],[421,5]]},"99":{"position":[[2443,4]]},"107":{"position":[[1125,4],[1755,4],[1786,4],[2413,4],[2472,4],[3155,4],[3191,5],[3249,5],[4750,4],[6321,4],[8542,5],[9043,4],[9237,4],[9432,4],[13341,5],[13479,5],[14558,4],[14893,4],[15095,5],[15189,4]]},"109":{"position":[[583,5],[785,4],[934,4],[1338,4]]},"117":{"position":[[177,8],[1166,4]]},"129":{"position":[[6031,5]]},"151":{"position":[[279,6]]}}}],["path.eg",{"_index":769,"t":{"75":{"position":[[1257,8]]}}}],["path/to/cert.key",{"_index":1729,"t":{"161":{"position":[[869,18]]}}}],["path/to/cert.pem",{"_index":1727,"t":{"161":{"position":[[830,18]]}}}],["path/to/existing/config.cfg",{"_index":325,"t":{"24":{"position":[[204,29],[558,29]]}}}],["path/to/new/config.yaml",{"_index":330,"t":{"24":{"position":[[523,25]]}}}],["path/to/sit",{"_index":1332,"t":{"121":{"position":[[2655,15]]}}}],["path_regex",{"_index":1034,"t":{"107":{"position":[[313,10],[13551,10],[13565,12]]}}}],["pathprefix",{"_index":1389,"t":{"127":{"position":[[491,16],[1285,16]]}}}],["pathprefix(`/no",{"_index":1391,"t":{"127":{"position":[[760,15]]}}}],["pathprefix(`/oauth2",{"_index":1367,"t":{"125":{"position":[[592,23]]},"127":{"position":[[1072,23]]}}}],["pattern",{"_index":564,"t":{"57":{"position":[[561,8],[978,8]]},"73":{"position":[[259,7],[379,7],[396,7]]},"75":{"position":[[449,7]]}}}],["pem",{"_index":533,"t":{"53":{"position":[[87,3],[182,3]]},"107":{"position":[[6176,3],[6353,3]]},"147":{"position":[[1023,4],[2383,3],[2528,3]]}}}],["per",{"_index":819,"t":{"81":{"position":[[174,3]]},"107":{"position":[[602,3],[2197,3],[2251,3]]}}}],["perform",{"_index":1433,"t":{"129":{"position":[[3849,7]]},"149":{"position":[[398,7],[1573,7]]}}}],["period",{"_index":473,"t":{"39":{"position":[[81,6]]},"75":{"position":[[2128,6]]},"107":{"position":[[3291,6]]}}}],["permiss",{"_index":859,"t":{"89":{"position":[[445,11],[494,11],[538,11],[598,12],[666,11],[775,10],[2222,11]]},"91":{"position":[[176,11]]},"99":{"position":[[2333,11]]}}}],["pick",{"_index":849,"t":{"89":{"position":[[144,4]]},"149":{"position":[[2235,4],[2660,4]]}}}],["pin",{"_index":1723,"t":{"161":{"position":[[713,3]]}}}],["ping",{"_index":1140,"t":{"107":{"position":[[9038,4],[9059,4],[9114,7],[9124,4],[13082,4],[13131,4]]},"113":{"position":[[717,5],[744,4],[816,4]]},"151":{"position":[[318,5]]}}}],["ping,/path2",{"_index":1085,"t":{"107":{"position":[[3227,14]]}}}],["pkce",{"_index":1039,"t":{"107":{"position":[[1022,4]]},"129":{"position":[[661,4]]}}}],["plain",{"_index":1040,"t":{"107":{"position":[[1077,7]]},"121":{"position":[[2926,5]]}}}],["plan",{"_index":874,"t":{"89":{"position":[[1030,8]]}}}],["platform",{"_index":854,"t":{"89":{"position":[[270,8],[1660,8]]},"149":{"position":[[2603,8]]},"161":{"position":[[86,8],[276,8]]}}}],["pleas",{"_index":74,"t":{"4":{"position":[[58,6],[118,6],[278,6],[357,6]]},"16":{"position":[[99,6],[144,6],[346,6],[434,6]]},"20":{"position":[[260,6],[850,6]]},"79":{"position":[[444,6]]},"129":{"position":[[2205,6],[6781,6]]}}}],["plural",{"_index":1027,"t":{"105":{"position":[[186,6]]},"111":{"position":[[257,6]]}}}],["poc",{"_index":1057,"t":{"107":{"position":[[1817,6]]}}}],["point",{"_index":1385,"t":{"127":{"position":[[119,8]]},"133":{"position":[[1347,8]]}}}],["polici",{"_index":870,"t":{"89":{"position":[[884,8]]},"149":{"position":[[2351,8]]}}}],["popul",{"_index":1490,"t":{"137":{"position":[[1277,8]]}}}],["port",{"_index":1212,"t":{"107":{"position":[[16592,5],[16651,4],[16763,5],[16834,5]]},"149":{"position":[[585,5]]},"153":{"position":[[1074,4]]},"161":{"position":[[390,4],[460,4]]}}}],["possibl",{"_index":228,"t":{"14":{"position":[[165,9]]},"16":{"position":[[467,9]]},"39":{"position":[[125,8]]},"107":{"position":[[2274,8]]},"133":{"position":[[877,8]]},"137":{"position":[[82,9]]}}}],["post",{"_index":235,"t":{"16":{"position":[[158,4]]}}}],["potenti",{"_index":255,"t":{"16":{"position":[[622,9]]},"75":{"position":[[1619,9]]}}}],["powershel",{"_index":995,"t":{"103":{"position":[[86,10]]}}}],["ppc64le",{"_index":22,"t":{"2":{"position":[[264,8],[360,8]]}}}],["pr",{"_index":96,"t":{"4":{"position":[[335,2],[409,2]]},"16":{"position":[[130,2]]},"18":{"position":[[373,3]]}}}],["practic",{"_index":1423,"t":{"129":{"position":[[1526,10]]}}}],["pre",{"_index":28,"t":{"2":{"position":[[319,3]]},"129":{"position":[[4214,3]]}}}],["prebuilt",{"_index":3,"t":{"2":{"position":[[33,8],[234,8],[453,8]]}}}],["preced",{"_index":744,"t":{"75":{"position":[[388,10]]},"101":{"position":[[118,11]]}}}],["preconfigur",{"_index":79,"t":{"4":{"position":[[136,13]]}}}],["prefer",{"_index":351,"t":{"26":{"position":[[582,6]]},"107":{"position":[[7820,9],[7870,6],[7896,6],[8305,9],[12438,9]]}}}],["preferred_usernam",{"_index":816,"t":{"79":{"position":[[503,18]]}}}],["prefix",{"_index":460,"t":{"37":{"position":[[219,6],[233,6],[255,6]]},"49":{"position":[[440,6],[454,6],[476,6]]},"75":{"position":[[627,8],[676,8]]},"107":{"position":[[1673,6],[9405,6],[15725,6],[16469,8]]},"111":{"position":[[75,9]]},"151":{"position":[[136,6],[175,6]]}}}],["preflight",{"_index":1176,"t":{"107":{"position":[[13172,9]]}}}],["prepend",{"_index":461,"t":{"37":{"position":[[275,9]]},"49":{"position":[[496,9]]}}}],["present",{"_index":258,"t":{"16":{"position":[[705,7]]},"107":{"position":[[8430,8],[14223,9],[14339,9]]},"141":{"position":[[237,7]]}}}],["preserv",{"_index":516,"t":{"47":{"position":[[362,9]]}}}],["preserverequestvalu",{"_index":513,"t":{"47":{"position":[[260,20],[286,20]]}}}],["pretti",{"_index":1474,"t":{"135":{"position":[[282,6]]}}}],["prevent",{"_index":599,"t":{"59":{"position":[[200,8]]},"143":{"position":[[460,7]]}}}],["preview",{"_index":1446,"t":{"129":{"position":[[6911,7]]},"149":{"position":[[1682,7]]}}}],["previou",{"_index":284,"t":{"18":{"position":[[652,8]]}}}],["previous",{"_index":268,"t":{"18":{"position":[[287,10]]}}}],["primari",{"_index":409,"t":{"31":{"position":[[161,7]]}}}],["princip",{"_index":1097,"t":{"107":{"position":[[4958,9],[4984,9]]}}}],["print",{"_index":327,"t":{"24":{"position":[[304,5]]},"107":{"position":[[15617,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":998,"t":{"103":{"position":[[136,57]]}}}],["prior",{"_index":300,"t":{"20":{"position":[[245,5]]},"133":{"position":[[119,5]]}}}],["privat",{"_index":240,"t":{"16":{"position":[[222,8]]},"18":{"position":[[37,9]]},"53":{"position":[[72,7],[162,7]]},"107":{"position":[[6161,7],[6333,7],[14901,7]]},"139":{"position":[[1049,7]]},"147":{"position":[[1065,7]]}}}],["process",{"_index":1287,"t":{"117":{"position":[[965,8]]},"121":{"position":[[2966,9],[3012,9]]},"147":{"position":[[2587,7]]}}}],["product",{"_index":946,"t":{"99":{"position":[[374,8]]},"107":{"position":[[12973,11]]},"147":{"position":[[294,10]]}}}],["profil",{"_index":369,"t":{"26":{"position":[[933,7]]},"61":{"position":[[2356,7]]},"107":{"position":[[8355,7],[8374,7]]},"133":{"position":[[284,7]]},"137":{"position":[[728,7]]},"147":{"position":[[1992,7]]}}}],["profileurl",{"_index":686,"t":{"61":{"position":[[2320,10],[2338,10]]}}}],["program",{"_index":141,"t":{"10":{"position":[[250,10],[568,10]]}}}],["project",{"_index":107,"t":{"6":{"position":[[5,7]]},"14":{"position":[[33,8],[74,7],[204,8]]},"43":{"position":[[113,8],[131,8],[177,8]]},"99":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"107":{"position":[[4302,8],[4368,8]]},"131":{"position":[[55,8]]},"133":{"position":[[411,8]]},"139":{"position":[[13,8]]},"149":{"position":[[118,9]]}}}],["prometheu",{"_index":1145,"t":{"107":{"position":[[9354,10]]},"151":{"position":[[533,10]]}}}],["prompt",{"_index":374,"t":{"26":{"position":[[998,6]]},"107":{"position":[[335,6],[8400,6],[8419,7],[8448,6]]}}}],["prompt/approval_prompt",{"_index":376,"t":{"26":{"position":[[1014,22]]}}}],["promptallow",{"_index":553,"t":{"57":{"position":[[130,12]]}}}],["promptdefault",{"_index":556,"t":{"57":{"position":[[294,14]]}}}],["properli",{"_index":1459,"t":{"133":{"position":[[551,9]]}}}],["propos",{"_index":266,"t":{"18":{"position":[[257,8]]}}}],["protect",{"_index":688,"t":{"61":{"position":[[2438,9]]},"89":{"position":[[315,7]]},"107":{"position":[[11846,9]]},"145":{"position":[[775,8]]},"149":{"position":[[2189,11],[2279,8]]}}}],["protectedresourc",{"_index":687,"t":{"61":{"position":[[2396,17]]}}}],["proto,host,uri",{"_index":1166,"t":{"107":{"position":[[12008,16]]}}}],["protocol",{"_index":1214,"t":{"107":{"position":[[16668,8]]},"115":{"position":[[1071,8],[1101,9]]},"117":{"position":[[534,13],[860,8],[890,9]]},"129":{"position":[[984,8]]},"147":{"position":[[842,9]]}}}],["provid",{"_index":42,"t":{"2":{"position":[[568,8],[696,8],[746,8],[900,8]]},"10":{"position":[[411,8],[734,8],[886,8],[963,9]]},"12":{"position":[[309,8],[473,9],[740,8]]},"22":{"position":[[111,7]]},"26":{"position":[[803,8],[812,8],[856,8],[1215,8]]},"29":{"position":[[13,9]]},"31":{"position":[[1809,9],[1819,9],[1829,9],[1869,10]]},"33":{"position":[[13,9]]},"35":{"position":[[13,9]]},"41":{"position":[[13,9]]},"43":{"position":[[13,9]]},"45":{"position":[[13,9]]},"51":{"position":[[13,9],[234,9]]},"53":{"position":[[13,9]]},"55":{"position":[[13,9],[712,8]]},"59":{"position":[[13,9]]},"61":{"position":[[13,10],[24,8],[70,8],[212,10],[345,10],[584,9],[666,9],[744,9],[842,9],[929,9],[1015,9],[1101,9],[1190,9],[1313,9],[1414,10],[1425,8],[1504,9],[1581,9]]},"63":{"position":[[29,9],[87,8]]},"65":{"position":[[0,11],[47,9],[92,10]]},"79":{"position":[[54,8],[90,10],[195,9],[379,8],[414,8],[469,9],[578,9]]},"83":{"position":[[27,9],[61,8],[151,9]]},"85":{"position":[[92,7],[455,8]]},"89":{"position":[[2308,8]]},"91":{"position":[[315,9]]},"93":{"position":[[378,9]]},"97":{"position":[[323,8]]},"99":{"position":[[2258,8]]},"107":{"position":[[1929,9],[2656,8],[8471,8],[8493,8],[8511,8],[8610,9],[8729,8],[8907,8],[9026,9],[14064,8],[14250,9],[15538,9],[16354,9],[16877,8]]},"109":{"position":[[207,9],[368,7],[773,7],[1231,9]]},"127":{"position":[[34,8],[2252,8]]},"129":{"position":[[4048,8]]},"133":{"position":[[10,8]]},"135":{"position":[[14,8],[125,9],[529,8]]},"137":{"position":[[24,8],[70,8],[1257,8]]},"139":{"position":[[184,8],[1265,7]]},"147":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"149":{"position":[[84,9],[133,8],[236,8],[298,9],[380,8],[554,8],[957,8],[971,8],[1002,9],[1554,8],[1918,8],[3050,8],[4376,8]]},"153":{"position":[[169,8],[784,8]]},"159":{"position":[[47,9],[418,12]]},"161":{"position":[[1349,12]]}}}],["provider'",{"_index":1139,"t":{"107":{"position":[[8949,10]]},"121":{"position":[[1731,10]]},"147":{"position":[[3422,10]]},"153":{"position":[[309,10]]}}}],["provider.example.com",{"_index":1699,"t":{"153":{"position":[[893,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":1693,"t":{"153":{"position":[[485,36]]}}}],["provider.if",{"_index":676,"t":{"61":{"position":[[1766,11]]}}}],["provider.thi",{"_index":669,"t":{"61":{"position":[[1374,13]]}}}],["provider/sign_out_pag",{"_index":1696,"t":{"153":{"position":[[671,25]]}}}],["provider=\"github",{"_index":928,"t":{"97":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":1460,"t":{"133":{"position":[[605,17]]}}}],["provider=adf",{"_index":830,"t":{"85":{"position":[[333,13]]}}}],["provider=azur",{"_index":881,"t":{"89":{"position":[[1439,14],[1747,14]]}}}],["provider=bitbucket",{"_index":904,"t":{"91":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":916,"t":{"93":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":1398,"t":{"129":{"position":[[2,17]]},"137":{"position":[[441,17]]}}}],["providermust",{"_index":671,"t":{"61":{"position":[[1465,12]]}}}],["provideror",{"_index":663,"t":{"61":{"position":[[1179,10]]}}}],["providers.new",{"_index":821,"t":{"83":{"position":[[98,15]]}}}],["providerthi",{"_index":641,"t":{"61":{"position":[[173,12],[306,12]]}}}],["providertyp",{"_index":670,"t":{"61":{"position":[[1434,12]]},"63":{"position":[[39,12]]}}}],["proxi",{"_index":49,"t":{"2":{"position":[[659,5],[772,5]]},"10":{"position":[[20,5],[182,5],[495,5],[777,5],[854,6],[1416,5]]},"12":{"position":[[32,5],[729,5]]},"14":{"position":[[12,5]]},"16":{"position":[[65,5],[339,6]]},"24":{"position":[[58,5],[163,5],[467,5],[502,5]]},"26":{"position":[[191,5],[1511,5]]},"31":{"position":[[204,6],[490,7],[973,5],[1045,5],[1262,5]]},"75":{"position":[[108,7],[1057,8],[1669,5],[2416,8]]},"77":{"position":[[364,7]]},"79":{"position":[[179,5]]},"83":{"position":[[130,5]]},"85":{"position":[[320,5]]},"89":{"position":[[1303,5]]},"91":{"position":[[108,6],[152,5]]},"93":{"position":[[206,5],[249,5]]},"97":{"position":[[238,6]]},"99":{"position":[[2400,5],[2520,6],[2789,5]]},"101":{"position":[[7,5]]},"107":{"position":[[9399,5],[9447,5],[9513,5],[9553,8],[9739,5],[11882,5],[11925,6],[13713,5],[15963,5],[16085,5],[16254,5]]},"109":{"position":[[7,5],[705,5],[1060,5]]},"113":{"position":[[19,5]]},"115":{"position":[[937,5]]},"117":{"position":[[792,5]]},"121":{"position":[[31,5],[247,8],[1795,5]]},"123":{"position":[[31,5]]},"125":{"position":[[223,8]]},"127":{"position":[[138,5],[208,6],[1236,5]]},"129":{"position":[[1789,5],[3077,5],[3713,5],[3838,5],[5526,5],[5771,5],[6005,6],[6160,6],[6506,5],[6633,5]]},"141":{"position":[[109,5]]},"143":{"position":[[97,5],[396,5],[655,6]]},"145":{"position":[[1023,5],[1376,5],[1646,5],[1850,5],[2168,5]]},"147":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"149":{"position":[[531,5],[790,5],[925,5],[1029,5],[1049,5],[3655,5],[3675,5],[4816,5],[4836,5]]},"151":{"position":[[7,5],[87,7],[169,5]]},"157":{"position":[[52,5],[69,5]]},"159":{"position":[[38,5],[162,5],[221,5],[978,5]]},"161":{"position":[[133,5],[432,8],[451,5],[478,5],[1164,5],[1223,5]]}}}],["proxiedto",{"_index":799,"t":{"75":{"position":[[2323,9]]}}}],["proxy'",{"_index":184,"t":{"12":{"position":[[96,7]]},"93":{"position":[[296,7]]},"121":{"position":[[141,7]]},"125":{"position":[[93,7]]},"153":{"position":[[91,7]]}}}],["proxy'secret",{"_index":1634,"t":{"149":{"position":[[776,13]]}}}],["proxy(e.g",{"_index":856,"t":{"89":{"position":[[337,10]]}}}],["proxy.cfg",{"_index":148,"t":{"10":{"position":[[454,10]]},"105":{"position":[[225,9],[326,9]]}}}],["proxy.localtest.me:4180",{"_index":176,"t":{"10":{"position":[[1464,24]]}}}],["proxy.thi",{"_index":423,"t":{"31":{"position":[[929,10]]}}}],["proxy/oauth2",{"_index":14,"t":{"2":{"position":[[150,12]]}}}],["proxy/oauth2/callback",{"_index":915,"t":{"93":{"position":[[163,22]]}}}],["proxy/v7@latest",{"_index":15,"t":{"2":{"position":[[163,16]]}}}],["proxy=tru",{"_index":1388,"t":{"127":{"position":[[306,11]]},"161":{"position":[[1374,10]]}}}],["proxy>/oauth2/callback",{"_index":900,"t":{"91":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":839,"t":{"85":{"position":[[598,17]]},"89":{"position":[[2451,17]]}}}],["proxy_connect_timeout",{"_index":1731,"t":{"161":{"position":[[1059,21]]}}}],["proxy_pass",{"_index":1299,"t":{"121":{"position":[[374,10],[677,10],[2616,10],[2980,10]]},"161":{"position":[[955,10]]}}}],["proxy_pass_request_bodi",{"_index":1307,"t":{"121":{"position":[[915,23]]}}}],["proxy_read_timeout",{"_index":1733,"t":{"161":{"position":[[1107,18]]}}}],["proxy_send_timeout",{"_index":1732,"t":{"161":{"position":[[1084,18]]}}}],["proxy_set_head",{"_index":1301,"t":{"121":{"position":[[408,16],[437,16],[478,16],[579,16],[711,16],[740,16],[781,16],[879,16],[1250,16],[1281,16],[1460,16]]},"161":{"position":[[989,16],[1018,16]]}}}],["proxycd",{"_index":119,"t":{"8":{"position":[[128,7]]}}}],["proxygit",{"_index":120,"t":{"8":{"position":[[143,8]]}}}],["proxyrawpath",{"_index":807,"t":{"77":{"position":[[118,12],[136,12]]}}}],["proxyredirecturi",{"_index":1632,"t":{"149":{"position":[[703,18]]}}}],["proxyus",{"_index":1152,"t":{"107":{"position":[[9797,9]]}}}],["proxywebsocket",{"_index":800,"t":{"75":{"position":[[2371,15],[2392,15]]}}}],["pubjwk",{"_index":385,"t":{"26":{"position":[[1185,6]]},"107":{"position":[[9569,6]]},"147":{"position":[[1917,6]]}}}],["pubjwkurl",{"_index":535,"t":{"53":{"position":[[214,9],[231,9]]}}}],["pubkey",{"_index":537,"t":{"53":{"position":[[252,6]]},"107":{"position":[[9591,6]]}}}],["public",{"_index":1497,"t":{"139":{"position":[[1012,6],[1230,6]]},"147":{"position":[[974,6]]}}}],["public_repo",{"_index":1500,"t":{"139":{"position":[[1377,11]]}}}],["publicli",{"_index":237,"t":{"16":{"position":[[175,9]]}}}],["pull",{"_index":76,"t":{"4":{"position":[[105,4]]},"115":{"position":[[1173,6]]},"117":{"position":[[1036,6]]}}}],["push",{"_index":122,"t":{"8":{"position":[[184,4]]},"41":{"position":[[341,4]]},"107":{"position":[[4016,4]]},"139":{"position":[[995,4]]}}}],["put",{"_index":16,"t":{"2":{"position":[[191,3]]}}}],["python",{"_index":992,"t":{"103":{"position":[[66,6],[107,6]]}}}],["queri",{"_index":539,"t":{"55":{"position":[[75,5],[390,5]]},"57":{"position":[[1153,5],[1405,5]]},"73":{"position":[[76,5]]},"107":{"position":[[82,5],[135,5]]},"125":{"position":[[1287,6]]},"153":{"position":[[357,5]]},"155":{"position":[[117,5]]}}}],["quick",{"_index":1574,"t":{"147":{"position":[[1080,5]]}}}],["quickli",{"_index":227,"t":{"14":{"position":[[154,7]]}}}],["quit",{"_index":1531,"t":{"145":{"position":[[966,5]]}}}],["quot",{"_index":576,"t":{"57":{"position":[[845,6]]}}}],["r_basicprofil",{"_index":1450,"t":{"131":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":1451,"t":{"131":{"position":[[187,15]]}}}],["rand",{"_index":1008,"t":{"103":{"position":[[297,4]]}}}],["random",{"_index":611,"t":{"59":{"position":[[586,6]]},"115":{"position":[[1210,6]]},"117":{"position":[[1073,6]]},"145":{"position":[[392,6],[443,6]]}}}],["random_password",{"_index":1021,"t":{"103":{"position":[[664,17]]}}}],["rang",{"_index":1199,"t":{"107":{"position":[[15862,6]]}}}],["raw",{"_index":808,"t":{"77":{"position":[[163,3]]},"121":{"position":[[2261,3]]}}}],["rd",{"_index":1691,"t":{"153":{"position":[[354,2]]}}}],["re",{"_index":1517,"t":{"143":{"position":[[799,2]]},"153":{"position":[[200,2]]}}}],["reach",{"_index":1184,"t":{"107":{"position":[[14120,5]]}}}],["read",{"_index":858,"t":{"89":{"position":[[440,4]]},"91":{"position":[[240,4],[261,4]]},"99":{"position":[[2417,4]]},"129":{"position":[[5654,4]]},"139":{"position":[[1208,4]]}}}],["read_api",{"_index":1458,"t":{"133":{"position":[[445,8]]}}}],["readi",{"_index":282,"t":{"18":{"position":[[613,6]]},"107":{"position":[[9231,5],[9253,5],[9308,8],[13138,5]]},"113":{"position":[[769,6]]},"151":{"position":[[398,6]]}}}],["real",{"_index":1149,"t":{"107":{"position":[[9639,4],[9697,4],[9783,4],[9813,4],[11964,4],[15986,4]]},"115":{"position":[[899,4]]},"117":{"position":[[754,4]]},"121":{"position":[[456,4],[759,4]]},"147":{"position":[[3070,4],[3215,4]]},"161":{"position":[[1037,4]]}}}],["realm",{"_index":1405,"t":{"129":{"position":[[214,6],[311,6],[467,5],[938,5],[1963,5],[2098,5],[3994,5],[4173,5],[4451,5],[4474,5],[4512,6],[4799,6],[4998,5],[7052,5]]},"137":{"position":[[127,5]]}}}],["realm>/protocol/openid",{"_index":1482,"t":{"137":{"position":[[593,22],[688,22],[785,22],[886,22]]}}}],["reason",{"_index":973,"t":{"99":{"position":[[2048,6]]},"145":{"position":[[2366,7]]}}}],["recipi",{"_index":1425,"t":{"129":{"position":[[1754,9],[3402,11]]}}}],["recommend",{"_index":957,"t":{"99":{"position":[[871,11],[1210,13],[2767,14]]},"107":{"position":[[1095,13]]},"121":{"position":[[3606,11]]},"129":{"position":[[1543,11]]},"145":{"position":[[2470,11]]},"157":{"position":[[14,11]]}}}],["redeem",{"_index":367,"t":{"26":{"position":[[911,6]]},"59":{"position":[[686,6]]},"97":{"position":[[527,6]]},"107":{"position":[[9823,6],[13988,6]]},"135":{"position":[[687,6]]},"137":{"position":[[632,6]]},"139":{"position":[[1839,6]]},"147":{"position":[[3765,6]]}}}],["redeemurl",{"_index":684,"t":{"61":{"position":[[2260,9],[2277,9]]}}}],["redempt",{"_index":685,"t":{"61":{"position":[[2300,10]]},"107":{"position":[[9847,10]]}}}],["redi",{"_index":209,"t":{"12":{"position":[[552,6]]},"85":{"position":[[645,5]]},"89":{"position":[[2498,5]]},"107":{"position":[[10039,5],[10091,5],[10176,5],[10196,5],[10231,5],[10248,5],[10299,5],[10376,5],[10390,5],[10412,5],[10447,5],[10505,5],[10528,5],[10559,5],[10623,5],[10658,5],[10675,5],[10709,5],[10764,5],[10785,5],[10838,5],[10924,5],[10945,5],[10979,5],[11005,5],[11063,5],[11098,5],[11130,5],[11163,5],[11222,5],[11256,5],[11298,5],[11345,5],[11393,5],[11502,5],[11551,5],[12303,5]]},"141":{"position":[[326,5]]},"145":{"position":[[4,5],[55,6],[607,5],[712,5],[1423,5],[1567,5],[2635,5],[2698,5],[2726,5],[2817,5],[2874,5],[2937,5],[2970,5],[3016,5],[3119,5],[3174,5],[3237,5],[3267,5],[3323,5],[3370,5],[3418,5],[3531,5],[3580,5]]},"151":{"position":[[474,5]]}}}],["redirect",{"_index":197,"t":{"12":{"position":[[276,10]]},"77":{"position":[[244,10]]},"79":{"position":[[123,8]]},"89":{"position":[[232,8]]},"93":{"position":[[315,8],[562,8],[680,8]]},"95":{"position":[[95,8]]},"97":{"position":[[87,8],[267,8]]},"99":{"position":[[703,8]]},"107":{"position":[[245,11],[2834,9],[3395,8],[3484,9],[9869,8],[9899,8],[9983,8],[10022,8],[12047,8],[15691,11],[16555,8]]},"121":{"position":[[510,8],[611,8]]},"127":{"position":[[0,8],[372,9],[561,8],[572,9],[781,11],[849,8],[1894,9],[2059,9]]},"129":{"position":[[97,8],[1020,8],[2435,8]]},"131":{"position":[[217,8]]},"133":{"position":[[322,8],[625,8],[703,8],[1316,8]]},"135":{"position":[[449,12]]},"137":{"position":[[175,8]]},"147":{"position":[[1379,8],[1619,8],[3610,8]]},"149":{"position":[[1055,8],[2720,8],[3968,8],[4028,8]]},"151":{"position":[[816,8]]},"153":{"position":[[22,8],[269,8],[379,8],[549,8],[584,8],[645,9],[872,8],[1005,8]]}}}],["redis.conf",{"_index":1162,"t":{"107":{"position":[[11434,10]]},"145":{"position":[[3463,10]]}}}],["redis://host[:port",{"_index":1156,"t":{"107":{"position":[[10127,21],[10276,20],[10875,21]]}}}],["reduc",{"_index":1240,"t":{"113":{"position":[[829,8]]},"129":{"position":[[5403,6]]}}}],["refer",{"_index":312,"t":{"20":{"position":[[552,9],[868,9]]},"22":{"position":[[94,9]]},"67":{"position":[[57,10]]},"129":{"position":[[5641,5],[6788,5]]},"135":{"position":[[367,5]]},"147":{"position":[[930,5],[1284,8]]}}}],["refresh",{"_index":958,"t":{"99":{"position":[[886,7],[940,7],[2638,9]]},"107":{"position":[[1837,7],[1854,7],[16381,8]]},"121":{"position":[[1526,8]]},"143":{"position":[[734,10]]},"145":{"position":[[1055,7],[1072,7],[1251,7],[1405,7],[1455,7],[1536,7],[1610,8],[1661,7],[1738,10],[1803,7],[1861,7],[1964,9],[2009,7],[2405,7],[2554,7]]},"149":{"position":[[2830,7],[4137,7]]}}}],["refresh/access/id",{"_index":1530,"t":{"145":{"position":[[788,17]]}}}],["refreshes.default",{"_index":616,"t":{"59":{"position":[[712,17]]}}}],["regardless",{"_index":1712,"t":{"159":{"position":[[679,10]]}}}],["regex",{"_index":182,"t":{"12":{"position":[[70,6]]},"107":{"position":[[13251,5]]}}}],["regist",{"_index":53,"t":{"2":{"position":[[709,8]]},"79":{"position":[[17,8]]},"89":{"position":[[404,9]]},"147":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":848,"t":{"89":{"position":[[94,13],[130,13],[469,13],[1147,12]]},"99":{"position":[[16,12]]},"131":{"position":[[18,12]]}}}],["regular",{"_index":270,"t":{"18":{"position":[[365,7]]},"57":{"position":[[432,7],[814,7]]},"73":{"position":[[417,7]]},"75":{"position":[[534,7]]}}}],["rel",{"_index":1154,"t":{"107":{"position":[[9974,8],[10007,8]]}}}],["releas",{"_index":6,"t":{"2":{"position":[[58,7],[111,7],[323,7],[586,7]]},"18":{"position":[[493,8],[661,9]]},"31":{"position":[[298,8]]},"59":{"position":[[764,8]]},"129":{"position":[[846,7]]}}}],["relev",{"_index":1546,"t":{"145":{"position":[[2284,8]]}}}],["reload",{"_index":1397,"t":{"127":{"position":[[2336,6]]}}}],["remain",{"_index":754,"t":{"75":{"position":[[711,9]]},"129":{"position":[[2225,9]]},"131":{"position":[[300,9]]}}}],["remot",{"_index":1204,"t":{"107":{"position":[[16117,6]]}}}],["remote_addr",{"_index":1302,"t":{"121":{"position":[[464,13],[767,13]]},"161":{"position":[[1045,13]]}}}],["remote_address",{"_index":1243,"t":{"115":{"position":[[181,16]]},"117":{"position":[[62,16]]}}}],["remov",{"_index":296,"t":{"20":{"position":[[211,8]]},"22":{"position":[[255,7]]},"24":{"position":[[368,6],[429,7]]},"26":{"position":[[1467,6]]},"129":{"position":[[829,7]]},"153":{"position":[[76,7]]}}}],["renam",{"_index":297,"t":{"20":{"position":[[220,7]]}}}],["replac",{"_index":307,"t":{"20":{"position":[[479,7]]},"105":{"position":[[65,9]]},"111":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":1015,"t":{"103":{"position":[[551,19]]}}}],["repo",{"_index":98,"t":{"4":{"position":[[351,5]]},"41":{"position":[[176,4],[188,4]]},"107":{"position":[[3836,4]]},"139":{"position":[[1077,8]]},"147":{"position":[[2497,4]]}}}],["report",{"_index":1271,"t":{"115":{"position":[[1381,8]]},"117":{"position":[[1453,8]]}}}],["repositori",{"_index":454,"t":{"35":{"position":[[108,10],[126,10],[186,10]]},"41":{"position":[[239,10],[304,10],[360,10]]},"91":{"position":[[245,12],[697,10]]},"107":{"position":[[3889,10],[3980,10],[4035,11]]},"139":{"position":[[329,11],[954,11],[1019,10],[1057,11],[1127,10],[1237,10],[1321,11],[1446,10]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":1478,"t":{"135":{"position":[[715,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":1477,"t":{"135":{"position":[[648,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":1479,"t":{"135":{"position":[[787,39]]}}}],["url]/stat",{"_index":1230,"t":{"109":{"position":[[1066,13]]}}}],["url]/var/www/stat",{"_index":1226,"t":{"109":{"position":[[711,21]]}}}],["urldefault",{"_index":606,"t":{"59":{"position":[[457,10]]}}}],["urleg",{"_index":596,"t":{"59":{"position":[[102,6],[1006,6]]}}}],["urlparameterrul",{"_index":588,"t":{"57":{"position":[[1297,18]]},"73":{"position":[[32,16]]}}}],["urlslik",{"_index":809,"t":{"77":{"position":[[201,9]]}}}],["us",{"_index":2,"t":{"2":{"position":[[25,5],[80,5],[226,5],[311,5],[407,5],[778,5]]},"4":{"position":[[25,5],[438,5]]},"6":{"position":[[32,5]]},"10":{"position":[[878,3],[984,5]]},"12":{"position":[[761,6]]},"16":{"position":[[550,4]]},"18":{"position":[[3,3],[361,3]]},"20":{"position":[[293,3],[659,5]]},"22":{"position":[[3,3],[141,5],[182,5]]},"24":{"position":[[64,5],[473,5]]},"26":{"position":[[100,5],[1352,3]]},"31":{"position":[[394,4],[626,4],[861,4],[953,4],[963,5],[1217,4],[1433,3],[1539,4],[1741,3],[1842,4]]},"33":{"position":[[233,4]]},"37":{"position":[[517,4]]},"41":{"position":[[285,3]]},"45":{"position":[[391,3],[528,4]]},"47":{"position":[[183,4]]},"49":{"position":[[738,4]]},"51":{"position":[[210,5]]},"53":{"position":[[98,4],[193,4]]},"55":{"position":[[542,4]]},"57":{"position":[[941,3]]},"59":{"position":[[902,3],[1478,4]]},"61":{"position":[[467,4],[1738,4],[1826,4],[2022,4]]},"63":{"position":[[55,4]]},"75":{"position":[[316,4],[462,4],[528,5],[730,3],[2058,4]]},"79":{"position":[[404,5]]},"81":{"position":[[37,3],[113,3],[217,3]]},"83":{"position":[[139,3]]},"85":{"position":[[435,5]]},"87":{"position":[[175,4]]},"89":{"position":[[1042,3],[1947,5],[2287,5]]},"91":{"position":[[43,3],[307,3],[555,3],[708,3]]},"93":{"position":[[370,3],[670,3]]},"99":{"position":[[1123,3],[2284,5],[2672,5],[2804,3],[2907,3]]},"103":{"position":[[35,3]]},"105":{"position":[[286,4]]},"107":{"position":[[114,3],[1018,3],[1299,4],[1660,3],[2532,3],[2776,3],[3545,3],[3625,3],[3961,3],[4804,3],[4845,3],[5014,5],[5699,5],[5822,3],[6187,4],[6364,4],[7522,4],[7906,3],[7992,3],[8060,4],[8582,4],[8671,4],[8687,3],[8783,5],[8857,4],[8988,4],[9085,4],[9172,4],[9280,4],[9675,4],[10149,4],[10182,3],[10584,4],[10652,3],[10737,4],[10770,3],[10897,4],[10930,3],[10951,3],[11038,3],[11069,3],[11197,3],[11468,5],[11631,3],[12039,4],[12474,7],[12516,4],[12684,7],[12792,7],[12966,3],[14238,5],[14354,5],[14644,4],[14791,5],[16267,3],[16423,5],[16840,3]]},"109":{"position":[[912,4],[1296,4]]},"111":{"position":[[299,6]]},"113":{"position":[[111,5],[736,5]]},"115":{"position":[[889,3]]},"117":{"position":[[744,3]]},"121":{"position":[[1683,5],[2709,3],[2751,3],[3621,3]]},"127":{"position":[[55,3],[330,3],[2299,3]]},"129":{"position":[[1469,5],[1934,3],[1975,5],[3218,3],[4024,5],[4331,5],[4831,5],[4920,5],[5341,6],[5509,5]]},"133":{"position":[[160,5],[1042,5]]},"135":{"position":[[105,5],[276,5]]},"137":{"position":[[47,3],[1136,4],[1441,5]]},"139":{"position":[[1427,3],[1688,5]]},"141":{"position":[[115,4]]},"143":{"position":[[78,4],[287,5]]},"145":{"position":[[994,4],[2308,4],[2625,5],[2864,3],[2880,3],[3125,3],[3243,3],[3273,3],[3497,5]]},"147":{"position":[[2172,3],[3211,3]]},"149":{"position":[[195,3],[264,4],[567,5],[1484,5],[1617,5],[4706,3]]},"151":{"position":[[375,3],[751,4],[877,4],[1007,4],[1156,3],[1252,4]]},"153":{"position":[[344,5]]},"155":{"position":[[97,5]]},"159":{"position":[[752,4],[942,4],[992,5]]},"161":{"position":[[218,5],[301,3],[670,3]]}}}],["us/azure/act",{"_index":894,"t":{"89":{"position":[[2185,15]]}}}],["usag",{"_index":407,"t":{"31":{"position":[[62,5]]},"145":{"position":[[2613,6]]}}}],["use.typ",{"_index":713,"t":{"71":{"position":[[218,13],[314,13]]}}}],["useapplicationdefaultcredenti",{"_index":503,"t":{"45":{"position":[[296,32],[334,32]]}}}],["used.list",{"_index":727,"t":{"71":{"position":[[678,9]]}}}],["usedif",{"_index":681,"t":{"61":{"position":[[1950,6]]}}}],["user",{"_index":194,"t":{"12":{"position":[[248,4],[643,4]]},"26":{"position":[[385,4],[1059,4]]},"31":{"position":[[92,5],[436,4]]},"35":{"position":[[161,4]]},"41":{"position":[[371,5],[386,5],[399,5]]},"51":{"position":[[173,5]]},"59":{"position":[[1120,4],[1220,4],[1321,4]]},"61":{"position":[[1635,5]]},"75":{"position":[[795,5]]},"91":{"position":[[659,5]]},"99":{"position":[[397,6],[2221,4],[2537,4]]},"107":{"position":[[4056,4],[4084,5],[5223,4],[5294,5],[7223,4],[7780,5],[7886,4],[8114,4],[8210,4],[8245,5],[9129,4],[9149,4],[9217,4],[12369,5],[15452,5]]},"113":{"position":[[749,4]]},"115":{"position":[[94,4],[356,4],[425,4],[1367,4]]},"117":{"position":[[1439,4]]},"121":{"position":[[1045,4],[1147,5],[1269,4],[1274,6]]},"129":{"position":[[380,6],[3667,4],[3892,5],[4290,4],[4684,4],[4689,5],[5280,5],[5355,4],[6604,4],[6921,5],[7058,4]]},"131":{"position":[[119,4]]},"135":{"position":[[58,5]]},"139":{"position":[[436,4],[463,5],[972,5],[1197,5],[1287,4],[1482,4],[1621,8]]},"141":{"position":[[138,4]]},"143":{"position":[[790,5]]},"145":{"position":[[185,4]]},"149":{"position":[[2949,5]]},"151":{"position":[[258,4]]},"153":{"position":[[12,4],[121,4],[282,4],[392,4]]}}}],["user'",{"_index":420,"t":{"31":{"position":[[760,6],[1148,6]]},"107":{"position":[[7145,6]]},"129":{"position":[[3956,6],[5310,6]]},"141":{"position":[[17,6]]},"151":{"position":[[1022,6]]}}}],["user/prefer_email_to_us",{"_index":352,"t":{"26":{"position":[[598,25]]}}}],["user/settings/appl",{"_index":924,"t":{"97":{"position":[[52,28]]}}}],["user@domain.com",{"_index":1244,"t":{"115":{"position":[[215,17]]},"117":{"position":[[96,17]]}}}],["user_ag",{"_index":1277,"t":{"117":{"position":[[195,14]]}}}],["userag",{"_index":1270,"t":{"115":{"position":[[1346,9]]},"117":{"position":[[548,14],[1418,9]]}}}],["useridclaim",{"_index":630,"t":{"59":{"position":[[1255,11],[1274,11]]}}}],["userinfo",{"_index":1491,"t":{"137":{"position":[[1377,8]]}}}],["usernam",{"_index":171,"t":{"10":{"position":[[1338,8]]},"37":{"position":[[475,8]]},"41":{"position":[[416,9]]},"49":{"position":[[696,8]]},"107":{"position":[[2602,8],[4102,8],[7830,8],[7935,8],[7996,8],[8315,8],[12448,8]]},"115":{"position":[[63,8],[708,13],[1416,8],[1457,8]]},"117":{"position":[[444,13],[1488,8],[1529,8]]},"129":{"position":[[4698,8]]},"139":{"position":[[1508,8],[1646,9]]}}}],["username@email.com",{"_index":1272,"t":{"115":{"position":[[1425,18]]},"117":{"position":[[1497,18]]}}}],["usesystemtruststor",{"_index":678,"t":{"61":{"position":[[1839,19],[1864,19]]}}}],["utc",{"_index":1117,"t":{"107":{"position":[[5882,3]]}}}],["util",{"_index":664,"t":{"61":{"position":[[1200,7]]}}}],["uuid",{"_index":1266,"t":{"115":{"position":[[1217,4]]},"117":{"position":[[1080,4]]}}}],["v1",{"_index":879,"t":{"89":{"position":[[1319,2]]}}}],["v19.0.0",{"_index":1419,"t":{"129":{"position":[[1397,8]]}}}],["v2",{"_index":885,"t":{"89":{"position":[[1617,2]]},"125":{"position":[[12,2]]},"127":{"position":[[93,2]]}}}],["v2.0",{"_index":875,"t":{"89":{"position":[[1046,4],[1953,4]]}}}],["v3.0.0",{"_index":46,"t":{"2":{"position":[[616,7]]}}}],["v7.5.1",{"_index":7,"t":{"2":{"position":[[69,7]]}}}],["valid",{"_index":35,"t":{"2":{"position":[[478,9]]},"18":{"position":[[231,8]]},"26":{"position":[[966,8]]},"39":{"position":[[254,5]]},"61":{"position":[[2524,10]]},"63":{"position":[[109,5]]},"71":{"position":[[691,5]]},"73":{"position":[[172,5]]},"79":{"position":[[189,5]]},"95":{"position":[[83,5]]},"97":{"position":[[595,8]]},"99":{"position":[[962,9]]},"103":{"position":[[573,5]]},"107":{"position":[[298,6],[14196,10],[14312,10],[14805,5],[15550,8],[15583,10],[16549,5]]},"129":{"position":[[354,8],[1014,5],[2429,5],[3886,5]]},"135":{"position":[[757,8],[850,8]]},"137":{"position":[[169,5],[828,8]]},"139":{"position":[[1912,8]]},"145":{"position":[[1797,5],[1930,6],[2084,5],[2252,8]]},"159":{"position":[[1017,5]]}}}],["validateurl",{"_index":689,"t":{"61":{"position":[[2473,11],[2492,11]]}}}],["valu",{"_index":405,"t":{"29":{"position":[[117,5]]},"31":{"position":[[723,6],[798,6],[1111,6],[1186,6]]},"33":{"position":[[143,5],[296,5]]},"37":{"position":[[62,5],[191,5],[292,5],[433,5],[538,6]]},"47":{"position":[[330,6],[533,6],[554,6],[582,6]]},"49":{"position":[[60,5],[110,5],[139,5],[152,5],[190,6],[337,6],[412,5],[513,5],[654,5],[759,6]]},"55":{"position":[[215,5],[224,6],[521,5],[732,5]]},"57":{"position":[[117,6],[144,6],[158,6],[174,6],[281,6],[326,6],[342,6],[412,6],[1226,5],[1235,6]]},"61":{"position":[[186,5],[319,5],[1388,5]]},"67":{"position":[[89,6],[184,5],[197,5],[235,6],[382,6]]},"73":{"position":[[250,5],[320,5],[335,5],[373,5],[481,6],[560,6],[610,5]]},"75":{"position":[[259,5]]},"79":{"position":[[437,6]]},"89":{"position":[[1264,5]]},"107":{"position":[[38,6],[4471,5]]},"109":{"position":[[877,5]]},"115":{"position":[[979,5]]},"117":{"position":[[834,5]]},"129":{"position":[[1823,6]]},"137":{"position":[[1540,5]]},"145":{"position":[[204,5],[1206,5],[1619,5]]}}}],["values.nam",{"_index":511,"t":{"47":{"position":[[204,12]]}}}],["values/acr_valu",{"_index":378,"t":{"26":{"position":[[1041,17]]}}}],["var/www/stat",{"_index":1229,"t":{"109":{"position":[[1015,16]]}}}],["variabl",{"_index":63,"t":{"2":{"position":[[834,9]]},"26":{"position":[[61,9]]},"49":{"position":[[255,9]]},"67":{"position":[[300,9]]},"101":{"position":[[69,9],[183,9],[209,9]]},"111":{"position":[[63,8],[238,8]]},"113":{"position":[[613,10]]},"115":{"position":[[776,9],[804,8]]},"117":{"position":[[628,9],[659,8]]},"119":{"position":[[500,9],[532,8]]},"121":{"position":[[2234,9],[2870,9],[3858,8]]},"135":{"position":[[192,9]]},"147":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"151":{"position":[[189,9]]}}}],["verif",{"_index":604,"t":{"59":{"position":[[364,12],[1487,13],[1598,12]]},"75":{"position":[[1543,12]]},"107":{"position":[[6678,12],[7036,13],[7401,12],[10344,12]]}}}],["verifi",{"_index":38,"t":{"2":{"position":[[515,9]]},"41":{"position":[[294,9]]},"59":{"position":[[530,9],[1424,8]]},"107":{"position":[[3970,9],[6635,8],[6851,9],[10323,6],[13783,8],[14179,6],[14295,6]]},"129":{"position":[[3807,9]]},"139":{"position":[[1436,9]]}}}],["verifieddefault",{"_index":602,"t":{"59":{"position":[[260,15]]}}}],["verify/ssl_upstream_insecure_skip_verifi",{"_index":339,"t":{"26":{"position":[[252,40]]}}}],["version",{"_index":45,"t":{"2":{"position":[[608,7]]},"6":{"position":[[118,7]]},"10":{"position":[[117,10],[836,7]]},"16":{"position":[[679,8]]},"71":{"position":[[123,7],[404,7],[466,7]]},"107":{"position":[[14928,7],[14955,7],[15605,7],[15623,7]]},"129":{"position":[[237,8],[720,7],[857,7]]},"133":{"position":[[50,7],[111,7]]},"159":{"position":[[581,7],[670,8],[705,7],[772,8],[950,7]]}}}],["version=tls1.3",{"_index":1711,"t":{"159":{"position":[[615,15]]}}}],["via",{"_index":395,"t":{"26":{"position":[[1377,3],[1390,3]]},"55":{"position":[[382,3]]},"57":{"position":[[1397,3]]},"101":{"position":[[31,3]]},"107":{"position":[[588,3],[7480,3],[7685,3],[11104,3]]},"115":{"position":[[1027,3]]},"121":{"position":[[126,3],[1039,3],[2976,3],[3787,3]]},"125":{"position":[[78,3]]},"135":{"position":[[161,3]]},"145":{"position":[[718,3],[2720,3]]},"147":{"position":[[3308,3]]},"161":{"position":[[733,3]]}}}],["visit",{"_index":1642,"t":{"149":{"position":[[1351,8]]}}}],["visual",{"_index":103,"t":{"4":{"position":[[444,6],[488,6]]}}}],["volum",{"_index":1241,"t":{"113":{"position":[[842,7]]}}}],["vulner",{"_index":234,"t":{"16":{"position":[[37,13],[606,13]]},"18":{"position":[[75,16],[308,15]]}}}],["wait",{"_index":805,"t":{"75":{"position":[[2541,4]]},"107":{"position":[[15261,4]]}}}],["want",{"_index":85,"t":{"4":{"position":[[207,4]]},"73":{"position":[[574,4]]},"89":{"position":[[307,4]]},"109":{"position":[[759,5]]},"129":{"position":[[5395,4]]},"145":{"position":[[2856,4]]},"147":{"position":[[580,4]]},"149":{"position":[[1739,4]]},"153":{"position":[[864,4]]}}}],["warn",{"_index":301,"t":{"20":{"position":[[251,8]]},"107":{"position":[[12908,9],[16133,8]]}}}],["way",{"_index":542,"t":{"55":{"position":[[328,4]]},"139":{"position":[[217,4]]},"147":{"position":[[1086,3]]}}}],["web",{"_index":853,"t":{"89":{"position":[[266,3]]},"99":{"position":[[533,4]]},"149":{"position":[[2591,3],[3801,3],[3920,3]]}}}],["websit",{"_index":1640,"t":{"149":{"position":[[1260,7]]}}}],["websocket",{"_index":801,"t":{"75":{"position":[[2428,10]]},"107":{"position":[[9519,10],[9543,9]]}}}],["websockets/proxy_websocket",{"_index":337,"t":{"26":{"position":[[197,27]]}}}],["well",{"_index":710,"t":{"71":{"position":[[91,4]]},"107":{"position":[[3076,5],[3114,5]]},"145":{"position":[[2686,4],[2907,4],[3070,5]]}}}],["whenstream",{"_index":794,"t":{"75":{"position":[[2172,13]]}}}],["whether",{"_index":505,"t":{"45":{"position":[[380,7]]},"47":{"position":[[318,7]]},"73":{"position":[[155,7]]},"75":{"position":[[2281,7]]},"107":{"position":[[11941,7]]},"133":{"position":[[144,7]]},"135":{"position":[[241,7]]}}}],["whitelist",{"_index":1196,"t":{"107":{"position":[[15640,9],[16433,9],[16783,11]]},"153":{"position":[[953,9]]}}}],["whole",{"_index":738,"t":{"73":{"position":[[594,5]]},"125":{"position":[[236,5]]},"145":{"position":[[941,5]]}}}],["whose",{"_index":388,"t":{"26":{"position":[[1258,5]]}}}],["wide_authority_to_your_service_account",{"_index":967,"t":{"99":{"position":[[1488,38]]}}}],["window",{"_index":824,"t":{"85":{"position":[[45,7]]}}}],["wish",{"_index":912,"t":{"93":{"position":[[95,5]]},"149":{"position":[[1839,4],[2271,4],[2364,4],[2969,4]]}}}],["within",{"_index":101,"t":{"4":{"position":[[397,6]]},"16":{"position":[[51,6]]},"20":{"position":[[131,6]]},"31":{"position":[[230,6]]},"37":{"position":[[81,6]]},"47":{"position":[[234,6]]},"67":{"position":[[112,6]]},"75":{"position":[[912,6]]},"99":{"position":[[2858,6]]},"139":{"position":[[704,6]]},"143":{"position":[[568,6]]},"149":{"position":[[4736,6]]}}}],["without",{"_index":299,"t":{"20":{"position":[[237,7]]},"31":{"position":[[307,7]]},"121":{"position":[[239,7]]},"125":{"position":[[215,7]]},"127":{"position":[[43,7]]}}}],["wizard",{"_index":829,"t":{"85":{"position":[[221,6]]}}}],["wo",{"_index":1392,"t":{"127":{"position":[[846,2],[2056,2]]}}}],["won't",{"_index":871,"t":{"89":{"position":[[897,5]]}}}],["work",{"_index":220,"t":{"14":{"position":[[61,4]]},"107":{"position":[[15509,5]]},"121":{"position":[[1560,4]]},"133":{"position":[[102,4],[546,4]]},"147":{"position":[[210,4]]},"149":{"position":[[1237,7],[1940,5],[2437,4]]}}}],["workload",{"_index":962,"t":{"99":{"position":[[1161,8],[1181,8],[2718,8],[2738,8],[3025,8],[3076,8],[3125,8]]},"107":{"position":[[4923,8]]}}}],["workspacefold",{"_index":142,"t":{"10":{"position":[[261,21],[579,21]]}}}],["write",{"_index":1499,"t":{"139":{"position":[[1301,5]]}}}],["x",{"_index":1134,"t":{"107":{"position":[[7484,1],[7565,1],[7768,1],[7786,1],[7808,1],[8233,1],[8251,1],[8271,1],[8293,1],[9764,1],[9781,1],[9795,1],[9811,1],[11664,1],[11962,1],[11996,1],[12354,1],[12375,1],[12398,1],[12423,1],[12547,1],[13616,1]]},"115":{"position":[[897,1]]},"117":{"position":[[752,1]]},"121":{"position":[[454,1],[495,1],[596,1],[757,1],[798,1],[1043,1],[1054,1],[1267,1],[1298,1],[1477,1]]},"127":{"position":[[337,1],[2001,1],[2177,1]]},"137":{"position":[[1290,1]]},"153":{"position":[[569,1]]},"161":{"position":[[1035,1]]}}}],["x.y.z.linux",{"_index":50,"t":{"2":{"position":[[665,11]]}}}],["x509",{"_index":1576,"t":{"147":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":1135,"t":{"107":{"position":[[7538,12],[12332,12]]},"121":{"position":[[1112,12]]}}}],["xauthrequest/set_xauthrequest",{"_index":349,"t":{"26":{"position":[[502,29]]}}}],["xxx\"client_secret",{"_index":1672,"t":{"149":{"position":[[4579,18]]}}}],["xxxxx\"client_secret",{"_index":1654,"t":{"149":{"position":[[3263,20]]}}}],["yaml",{"_index":306,"t":{"20":{"position":[[464,4]]},"22":{"position":[[47,4]]},"24":{"position":[[295,4]]},"57":{"position":[[677,4]]},"125":{"position":[[288,6]]}}}],["you'd",{"_index":1498,"t":{"139":{"position":[[1167,5]]}}}],["you'r",{"_index":873,"t":{"89":{"position":[[997,6]]}}}],["yourcompany.com",{"_index":1042,"t":{"107":{"position":[[1225,18]]},"129":{"position":[[3772,17]]}}}],["yourself",{"_index":740,"t":{"73":{"position":[[635,8]]}}}],["yyy\"pass_access_token",{"_index":1673,"t":{"149":{"position":[[4600,22]]}}}],["yyyyy\"pass_access_token",{"_index":1655,"t":{"149":{"position":[[3286,24]]}}}],["zero",{"_index":1160,"t":{"107":{"position":[[11333,5]]},"145":{"position":[[3358,5]]}}}],["zzz\"cookie_secur",{"_index":1674,"t":{"149":{"position":[[4645,18]]}}}],["zzzzz\"skip_provider_button",{"_index":1657,"t":{"149":{"position":[[3333,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file diff --git a/index.html b/index.html index 9db3b14a..63cd091d 100644 --- a/index.html +++ b/index.html @@ -4,7 +4,7 @@ Welcome to OAuth2 Proxy | OAuth2 Proxy - + @@ -13,7 +13,7 @@ to validate accounts by email, domain or group.

    note

    This repository was forked from bitly/OAuth2_Proxy on 27/11/2018. Versions v3.0.0 and up are from this fork and will have diverged from any changes in the original fork. A list of changes can be seen in the CHANGELOG.

    Sign In Page

    Architecture​

    OAuth2 Proxy Architecture

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file diff --git a/search-index.json b/search-index.json index a7c938da..0fa1c031 100644 --- a/search-index.json +++ b/search-index.json @@ -1 +1 @@ -[{"documents":[{"i":162,"t":"Behaviour","u":"/oauth2-proxy/docs/behaviour","b":["Docs"]},{"i":164,"t":"Installation","u":"/oauth2-proxy/docs/","b":["Docs"]},{"i":166,"t":"Contribution Guide","u":"/oauth2-proxy/docs/community/contribution","b":["Docs","Community"]},{"i":174,"t":"Security","u":"/oauth2-proxy/docs/community/security","b":["Docs","Community"]},{"i":180,"t":"Alpha Configuration","u":"/oauth2-proxy/docs/configuration/alpha-config","b":["Docs","Configuration"]},{"i":239,"t":"Session Storage","u":"/oauth2-proxy/docs/configuration/session_storage","b":["Docs","Configuration"]},{"i":245,"t":"TLS Configuration","u":"/oauth2-proxy/docs/configuration/tls","b":["Docs","Configuration"]},{"i":251,"t":"Endpoints","u":"/oauth2-proxy/docs/features/endpoints","b":["Docs","Features"]},{"i":257,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/configuration/oauth_provider","b":["Docs","Configuration"]},{"i":295,"t":"Overview","u":"/oauth2-proxy/docs/configuration/overview","b":["Docs","Configuration"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/162",[0,2.353]],["t/164",[1,2.353]],["t/166",[2,1.808,3,1.808]],["t/174",[4,2.353]],["t/180",[5,1.808,6,1.039]],["t/239",[7,1.808,8,1.808]],["t/245",[6,1.039,9,1.808]],["t/251",[10,2.353]],["t/257",[6,0.843,11,1.467,12,1.467]],["t/295",[13,2.353]]],"invertedIndex":[["alpha",{"_index":5,"t":{"180":{"position":[[0,5]]}}}],["behaviour",{"_index":0,"t":{"162":{"position":[[0,9]]}}}],["configur",{"_index":6,"t":{"180":{"position":[[6,13]]},"245":{"position":[[4,13]]},"257":{"position":[[15,13]]}}}],["contribut",{"_index":2,"t":{"166":{"position":[[0,12]]}}}],["endpoint",{"_index":10,"t":{"251":{"position":[[0,9]]}}}],["guid",{"_index":3,"t":{"166":{"position":[[13,5]]}}}],["instal",{"_index":1,"t":{"164":{"position":[[0,12]]}}}],["oauth",{"_index":11,"t":{"257":{"position":[[0,5]]}}}],["overview",{"_index":13,"t":{"295":{"position":[[0,8]]}}}],["provid",{"_index":12,"t":{"257":{"position":[[6,8]]}}}],["secur",{"_index":4,"t":{"174":{"position":[[0,8]]}}}],["session",{"_index":7,"t":{"239":{"position":[[0,7]]}}}],["storag",{"_index":8,"t":{"239":{"position":[[8,7]]}}}],["tl",{"_index":9,"t":{"245":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":168,"t":"Go version","u":"/oauth2-proxy/docs/community/contribution","h":"","p":166},{"i":170,"t":"Preparing your fork","u":"/oauth2-proxy/docs/community/contribution","h":"","p":166},{"i":172,"t":"Testing / Debugging","u":"/oauth2-proxy/docs/community/contribution","h":"","p":166},{"i":176,"t":"Security Disclosures","u":"/oauth2-proxy/docs/community/security","h":"#security-disclosures","p":174},{"i":178,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/community/security","h":"#how-will-we-respond-to-disclosures","p":174},{"i":182,"t":"Using Alpha Configuration","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#using-alpha-configuration","p":180},{"i":184,"t":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":180},{"i":186,"t":"Removed options","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#removed-options","p":180},{"i":188,"t":"Configuration Reference","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#configuration-reference","p":180},{"i":189,"t":"ADFSOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#adfsoptions","p":180},{"i":191,"t":"AlphaOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#alphaoptions","p":180},{"i":193,"t":"AzureOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#azureoptions","p":180},{"i":195,"t":"BitbucketOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#bitbucketoptions","p":180},{"i":197,"t":"ClaimSource","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#claimsource","p":180},{"i":199,"t":"Duration","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#duration","p":180},{"i":201,"t":"GitHubOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#githuboptions","p":180},{"i":203,"t":"GitLabOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#gitlaboptions","p":180},{"i":205,"t":"GoogleOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#googleoptions","p":180},{"i":207,"t":"Header","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#header","p":180},{"i":209,"t":"HeaderValue","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#headervalue","p":180},{"i":211,"t":"KeycloakOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#keycloakoptions","p":180},{"i":213,"t":"LoginGovOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#logingovoptions","p":180},{"i":215,"t":"LoginURLParameter","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#loginurlparameter","p":180},{"i":217,"t":"A parameter whose value is fixed","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"","p":180},{"i":219,"t":"OIDCOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#oidcoptions","p":180},{"i":221,"t":"Provider","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#provider","p":180},{"i":223,"t":"ProviderType","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#providertype","p":180},{"i":225,"t":"Providers","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#providers","p":180},{"i":227,"t":"SecretSource","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#secretsource","p":180},{"i":229,"t":"Server","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#server","p":180},{"i":231,"t":"TLS","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#tls","p":180},{"i":233,"t":"URLParameterRule","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#urlparameterrule","p":180},{"i":235,"t":"Upstream","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#upstream","p":180},{"i":237,"t":"UpstreamConfig","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#upstreamconfig","p":180},{"i":241,"t":"Cookie Storage","u":"/oauth2-proxy/docs/configuration/session_storage","h":"#cookie-storage","p":239},{"i":243,"t":"Redis Storage","u":"/oauth2-proxy/docs/configuration/session_storage","h":"#redis-storage","p":239},{"i":247,"t":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":245},{"i":249,"t":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":245},{"i":253,"t":"Sign out","u":"/oauth2-proxy/docs/features/endpoints","h":"#sign-out","p":251},{"i":255,"t":"Auth","u":"/oauth2-proxy/docs/features/endpoints","h":"#auth","p":251},{"i":259,"t":"Google Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#google-auth-provider","p":257},{"i":261,"t":"Azure Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#azure-auth-provider","p":257},{"i":263,"t":"ADFS Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#adfs-auth-provider","p":257},{"i":265,"t":"Facebook Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#facebook-auth-provider","p":257},{"i":267,"t":"GitHub Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#github-auth-provider","p":257},{"i":269,"t":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#keycloak-auth-provider","p":257},{"i":271,"t":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":257},{"i":273,"t":"GitLab Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#gitlab-auth-provider","p":257},{"i":275,"t":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#linkedin-auth-provider","p":257},{"i":277,"t":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":257},{"i":279,"t":"OpenID Connect Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#openid-connect-provider","p":257},{"i":281,"t":"login.gov Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#logingov-provider","p":257},{"i":283,"t":"Nextcloud Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#nextcloud-provider","p":257},{"i":285,"t":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":257},{"i":287,"t":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":257},{"i":289,"t":"Gitea Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#gitea-auth-provider","p":257},{"i":291,"t":"Email Authentication","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#email-authentication","p":257},{"i":293,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#adding-a-new-provider","p":257},{"i":297,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/configuration/overview","h":"#generating-a-cookie-secret","p":295},{"i":299,"t":"Config File","u":"/oauth2-proxy/docs/configuration/overview","h":"#config-file","p":295},{"i":301,"t":"Command Line Options","u":"/oauth2-proxy/docs/configuration/overview","h":"#command-line-options","p":295},{"i":303,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/configuration/overview","h":"#upstreams-configuration","p":295},{"i":305,"t":"Environment variables","u":"/oauth2-proxy/docs/configuration/overview","h":"#environment-variables","p":295},{"i":307,"t":"Logging Configuration","u":"/oauth2-proxy/docs/configuration/overview","h":"#logging-configuration","p":295},{"i":309,"t":"Auth Log Format","u":"/oauth2-proxy/docs/configuration/overview","h":"#auth-log-format","p":295},{"i":311,"t":"Request Log Format","u":"/oauth2-proxy/docs/configuration/overview","h":"#request-log-format","p":295},{"i":313,"t":"Standard Log Format","u":"/oauth2-proxy/docs/configuration/overview","h":"#standard-log-format","p":295},{"i":315,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":295},{"i":317,"t":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":295},{"i":319,"t":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":295},{"i":321,"t":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":295}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/168",[0,4.077,1,4.077]],["t/170",[2,4.077,3,4.077]],["t/172",[4,3.43,5,3.43,6,3.43]],["t/176",[7,4.077,8,3.539]],["t/178",[8,3.539,9,4.077]],["t/182",[10,2.679,11,3.43,12,1.893]],["t/184",[12,1.633,13,2.959,14,2.569,15,2.959]],["t/186",[16,4.077,17,3.539]],["t/188",[12,2.25,18,4.077]],["t/189",[19,5.026]],["t/191",[20,5.026]],["t/193",[21,5.026]],["t/195",[22,5.026]],["t/197",[23,5.026]],["t/199",[24,5.026]],["t/201",[25,5.026]],["t/203",[26,5.026]],["t/205",[27,5.026]],["t/207",[28,5.026]],["t/209",[29,5.026]],["t/211",[30,5.026]],["t/213",[31,5.026]],["t/215",[32,5.026]],["t/217",[33,2.959,34,2.959,35,2.959,36,2.959]],["t/219",[37,5.026]],["t/221",[38,1.696]],["t/223",[39,5.026]],["t/225",[38,1.696]],["t/227",[40,5.026]],["t/229",[41,5.026]],["t/231",[42,3.926]],["t/233",[43,5.026]],["t/235",[44,3.926]],["t/237",[45,5.026]],["t/241",[46,3.539,47,3.539]],["t/243",[47,3.539,48,4.077]],["t/247",[42,2.312,49,2.569,50,2.959,51,2.569]],["t/249",[42,1.814,49,2.016,51,2.016,52,2.323,53,2.323,54,2.016]],["t/253",[55,4.077,56,4.077]],["t/255",[57,2.081]],["t/259",[38,1.157,57,1.42,58,3.43]],["t/261",[38,1.157,57,1.42,59,2.977]],["t/263",[38,1.157,57,1.42,60,3.43]],["t/265",[38,1.157,57,1.42,61,3.43]],["t/267",[38,1.157,57,1.42,62,3.43]],["t/269",[38,1.157,57,1.42,63,2.977]],["t/271",[38,0.999,57,1.225,63,2.569,64,2.959]],["t/273",[38,1.157,57,1.42,65,3.43]],["t/275",[38,1.157,57,1.42,66,3.43]],["t/277",[38,0.999,59,2.569,67,2.959,68,2.569]],["t/279",[38,1.157,69,3.43,70,3.43]],["t/281",[38,1.376,71,4.077]],["t/283",[38,1.376,72,4.077]],["t/285",[38,1.157,57,1.42,73,3.43]],["t/287",[38,1.157,57,1.42,74,3.43]],["t/289",[38,1.157,57,1.42,75,3.43]],["t/291",[76,4.077,77,4.077]],["t/293",[14,2.977,38,1.157,68,2.977]],["t/297",[46,2.977,78,3.43,79,3.43]],["t/299",[80,4.077,81,4.077]],["t/301",[17,2.977,82,3.43,83,3.43]],["t/303",[12,2.25,44,3.185]],["t/305",[84,4.077,85,4.077]],["t/307",[12,2.25,86,2.92]],["t/309",[57,1.42,86,2.456,87,2.679]],["t/311",[86,2.456,87,2.679,88,3.43]],["t/313",[86,2.456,87,2.679,89,3.43]],["t/315",[10,2.033,12,1.436,54,2.259,90,2.603,91,2.603]],["t/317",[10,1.814,12,1.282,92,2.323,93,2.323,94,1.814,95,2.016]],["t/319",[94,2.312,95,2.569,96,2.959,97,2.959]],["t/321",[12,1.633,44,2.312,94,2.312,98,2.959]]],"invertedIndex":[["",{"_index":5,"t":{"172":{"position":[[8,1]]}}}],["401",{"_index":96,"t":{"319":{"position":[[17,3]]}}}],["ad",{"_index":68,"t":{"277":{"position":[[16,2]]},"293":{"position":[[0,6]]}}}],["adf",{"_index":60,"t":{"263":{"position":[[0,4]]}}}],["adfsopt",{"_index":19,"t":{"189":{"position":[[0,11]]}}}],["alpha",{"_index":11,"t":{"182":{"position":[[6,5]]}}}],["alphaopt",{"_index":20,"t":{"191":{"position":[[0,12]]}}}],["auth",{"_index":57,"t":{"255":{"position":[[0,4]]},"259":{"position":[[7,4]]},"261":{"position":[[6,4]]},"263":{"position":[[5,4]]},"265":{"position":[[9,4]]},"267":{"position":[[7,4]]},"269":{"position":[[9,4]]},"271":{"position":[[14,4]]},"273":{"position":[[7,4]]},"275":{"position":[[9,4]]},"285":{"position":[[13,4]]},"287":{"position":[[10,4]]},"289":{"position":[[6,4]]},"309":{"position":[[0,4]]}}}],["auth_request",{"_index":90,"t":{"315":{"position":[[35,12]]}}}],["authent",{"_index":77,"t":{"291":{"position":[[6,14]]}}}],["azur",{"_index":59,"t":{"261":{"position":[[0,5]]},"277":{"position":[[10,5]]}}}],["azureopt",{"_index":21,"t":{"193":{"position":[[0,12]]}}}],["bitbucket",{"_index":74,"t":{"287":{"position":[[0,9]]}}}],["bitbucketopt",{"_index":22,"t":{"195":{"position":[[0,16]]}}}],["claimsourc",{"_index":23,"t":{"197":{"position":[[0,11]]}}}],["command",{"_index":82,"t":{"301":{"position":[[0,7]]}}}],["config",{"_index":80,"t":{"299":{"position":[[0,6]]}}}],["configur",{"_index":12,"t":{"182":{"position":[[12,13]]},"184":{"position":[[11,13]]},"188":{"position":[[0,13]]},"303":{"position":[[10,13]]},"307":{"position":[[8,13]]},"315":{"position":[[0,11]]},"317":{"position":[[0,11]]},"321":{"position":[[34,13]]}}}],["connect",{"_index":70,"t":{"279":{"position":[[7,7]]}}}],["convert",{"_index":13,"t":{"184":{"position":[[0,10]]}}}],["cooki",{"_index":46,"t":{"241":{"position":[[0,6]]},"297":{"position":[[13,6]]}}}],["debug",{"_index":6,"t":{"172":{"position":[[10,9]]}}}],["digitalocean",{"_index":73,"t":{"285":{"position":[[0,12]]}}}],["direct",{"_index":91,"t":{"315":{"position":[[48,9]]}}}],["disclosur",{"_index":8,"t":{"176":{"position":[[9,11]]},"178":{"position":[[23,12]]}}}],["durat",{"_index":24,"t":{"199":{"position":[[0,8]]}}}],["e.g",{"_index":53,"t":{"249":{"position":[[32,4]]}}}],["email",{"_index":76,"t":{"291":{"position":[[0,5]]}}}],["environ",{"_index":84,"t":{"305":{"position":[[0,11]]}}}],["error",{"_index":97,"t":{"319":{"position":[[21,6]]}}}],["facebook",{"_index":61,"t":{"265":{"position":[[0,8]]}}}],["file",{"_index":81,"t":{"299":{"position":[[7,4]]}}}],["fix",{"_index":36,"t":{"217":{"position":[[27,5]]}}}],["fork",{"_index":3,"t":{"170":{"position":[[15,4]]}}}],["format",{"_index":87,"t":{"309":{"position":[[9,6]]},"311":{"position":[[12,6]]},"313":{"position":[[13,6]]}}}],["forwardauth",{"_index":94,"t":{"317":{"position":[[42,11]]},"319":{"position":[[0,11]]},"321":{"position":[[0,11]]}}}],["gener",{"_index":78,"t":{"297":{"position":[[0,10]]}}}],["gitea",{"_index":75,"t":{"289":{"position":[[0,5]]}}}],["github",{"_index":62,"t":{"267":{"position":[[0,6]]}}}],["githubopt",{"_index":25,"t":{"201":{"position":[[0,13]]}}}],["gitlab",{"_index":65,"t":{"273":{"position":[[0,6]]}}}],["gitlabopt",{"_index":26,"t":{"203":{"position":[[0,13]]}}}],["go",{"_index":0,"t":{"168":{"position":[[0,2]]}}}],["googl",{"_index":58,"t":{"259":{"position":[[0,6]]}}}],["googleopt",{"_index":27,"t":{"205":{"position":[[0,13]]}}}],["header",{"_index":28,"t":{"207":{"position":[[0,6]]}}}],["headervalu",{"_index":29,"t":{"209":{"position":[[0,11]]}}}],["keycloak",{"_index":63,"t":{"269":{"position":[[0,8]]},"271":{"position":[[0,8]]}}}],["keycloakopt",{"_index":30,"t":{"211":{"position":[[0,15]]}}}],["line",{"_index":83,"t":{"301":{"position":[[8,4]]}}}],["linkedin",{"_index":66,"t":{"275":{"position":[[0,8]]}}}],["log",{"_index":86,"t":{"307":{"position":[[0,7]]},"309":{"position":[[5,3]]},"311":{"position":[[8,3]]},"313":{"position":[[9,3]]}}}],["login.gov",{"_index":71,"t":{"281":{"position":[[0,9]]}}}],["logingovopt",{"_index":31,"t":{"213":{"position":[[0,15]]}}}],["loginurlparamet",{"_index":32,"t":{"215":{"position":[[0,17]]}}}],["microsoft",{"_index":67,"t":{"277":{"position":[[0,9]]}}}],["middlewar",{"_index":95,"t":{"317":{"position":[[54,10]]},"319":{"position":[[28,10]]}}}],["new",{"_index":14,"t":{"184":{"position":[[32,3]]},"293":{"position":[[9,3]]}}}],["nextcloud",{"_index":72,"t":{"283":{"position":[[0,9]]}}}],["nginx",{"_index":54,"t":{"249":{"position":[[37,5]]},"315":{"position":[[29,5]]}}}],["oauth2",{"_index":50,"t":{"247":{"position":[[17,6]]}}}],["oidc",{"_index":64,"t":{"271":{"position":[[9,4]]}}}],["oidcopt",{"_index":37,"t":{"219":{"position":[[0,11]]}}}],["openid",{"_index":69,"t":{"279":{"position":[[0,6]]}}}],["option",{"_index":17,"t":{"186":{"position":[[8,7]]},"301":{"position":[[13,7]]}}}],["out",{"_index":56,"t":{"253":{"position":[[5,3]]}}}],["paramet",{"_index":33,"t":{"217":{"position":[[2,9]]}}}],["prepar",{"_index":2,"t":{"170":{"position":[[0,9]]}}}],["provid",{"_index":38,"t":{"221":{"position":[[0,8]]},"225":{"position":[[0,9]]},"259":{"position":[[12,8]]},"261":{"position":[[11,8]]},"263":{"position":[[10,8]]},"265":{"position":[[14,8]]},"267":{"position":[[12,8]]},"269":{"position":[[14,8]]},"271":{"position":[[19,8]]},"273":{"position":[[12,8]]},"275":{"position":[[14,8]]},"277":{"position":[[19,8]]},"279":{"position":[[15,8]]},"281":{"position":[[10,8]]},"283":{"position":[[10,8]]},"285":{"position":[[18,8]]},"287":{"position":[[15,8]]},"289":{"position":[[11,8]]},"293":{"position":[[13,8]]}}}],["providertyp",{"_index":39,"t":{"223":{"position":[[0,12]]}}}],["proxi",{"_index":51,"t":{"247":{"position":[[24,5]]},"249":{"position":[[25,6]]}}}],["redi",{"_index":48,"t":{"243":{"position":[[0,5]]}}}],["refer",{"_index":18,"t":{"188":{"position":[[14,9]]}}}],["remov",{"_index":16,"t":{"186":{"position":[[0,7]]}}}],["request",{"_index":88,"t":{"311":{"position":[[0,7]]}}}],["respond",{"_index":9,"t":{"178":{"position":[[12,7]]}}}],["revers",{"_index":52,"t":{"249":{"position":[[17,7]]}}}],["secret",{"_index":79,"t":{"297":{"position":[[20,6]]}}}],["secretsourc",{"_index":40,"t":{"227":{"position":[[0,12]]}}}],["secur",{"_index":7,"t":{"176":{"position":[[0,8]]}}}],["server",{"_index":41,"t":{"229":{"position":[[0,6]]}}}],["sign",{"_index":55,"t":{"253":{"position":[[0,4]]}}}],["standard",{"_index":89,"t":{"313":{"position":[[0,8]]}}}],["static",{"_index":98,"t":{"321":{"position":[[17,6]]}}}],["storag",{"_index":47,"t":{"241":{"position":[[7,7]]},"243":{"position":[[6,7]]}}}],["structur",{"_index":15,"t":{"184":{"position":[[36,9]]}}}],["termin",{"_index":49,"t":{"247":{"position":[[0,9]]},"249":{"position":[[0,9]]}}}],["test",{"_index":4,"t":{"172":{"position":[[0,7]]}}}],["tl",{"_index":42,"t":{"231":{"position":[[0,3]]},"247":{"position":[[10,3]]},"249":{"position":[[10,3]]}}}],["traefik",{"_index":92,"t":{"317":{"position":[[29,7]]}}}],["upstream",{"_index":44,"t":{"235":{"position":[[0,8]]},"303":{"position":[[0,9]]},"321":{"position":[[24,9]]}}}],["upstreamconfig",{"_index":45,"t":{"237":{"position":[[0,14]]}}}],["urlparameterrul",{"_index":43,"t":{"233":{"position":[[0,16]]}}}],["us",{"_index":10,"t":{"182":{"position":[[0,5]]},"315":{"position":[[16,3]]},"317":{"position":[[16,3]]}}}],["v2",{"_index":93,"t":{"317":{"position":[[37,4]]}}}],["valu",{"_index":35,"t":{"217":{"position":[[18,5]]}}}],["variabl",{"_index":85,"t":{"305":{"position":[[12,9]]}}}],["version",{"_index":1,"t":{"168":{"position":[[3,7]]}}}],["whose",{"_index":34,"t":{"217":{"position":[[12,5]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":163,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/behaviour","h":"","p":162},{"i":165,"t":"Choose how to deploy: a. Using a Prebuilt Binary (current release is v7.5.1) b. Using Go to install the latest release $ go install github.com/oauth2-proxy/oauth2-proxy/v7@latest# which will put the binary in `$GOROOT/bin` c. Using a Prebuilt Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available) d. Using a Pre-Release Nightly Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available) e. Using the official Kubernetes manifest (Helm) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. sha256sum -c sha256sum.txt 2>&1 | grep OKoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/","h":"","p":164},{"i":167,"t":"We track bugs and issues using Github. If you find a bug, please open an Issue. When opening an Issue or Pull Request please follow the preconfigured template and take special note of the checkboxes. If you want to fix a bug, add a new feature or extend existing functionality, please create a fork, create a feature branch and open a PR back to this repo. Please mention open bug issue number(s) within your PR if applicable. We suggest using Visual Studio Code with the official Go for Visual Studio Code extension.","s":"Contribution Guide","u":"/oauth2-proxy/docs/community/contribution","h":"","p":166},{"i":169,"t":"This project is currently still using go 1.19. You can follow the installation guide for go here. And you can find go version 1.19 in the archived section here.","s":"Go version","u":"/oauth2-proxy/docs/community/contribution","h":"","p":166},{"i":171,"t":"Clone your fork, create a feature branch and update the depedencies to get started. git clone git@github.com:/oauth2-proxycd oauth2-proxygit branch feature/git push --set-upstream origin feature/go mod download","s":"Preparing your fork","u":"/oauth2-proxy/docs/community/contribution","h":"","p":166},{"i":173,"t":"For starting oauth2-proxy locally open the debugging tab and create the launch.json and select Go: Launch Package. { \"version\": \"0.2.0\", \"configurations\": [ { \"name\": \"Launch OAuth2-Proxy with Dex\", \"type\": \"go\", \"request\": \"launch\", \"mode\": \"auto\", \"program\": \"${workspaceFolder}\", \"args\": [ \"--config\", // The following configuration contains settings for a locally deployed // upstream and dex as an idetity provider \"contrib/local-environment/oauth2-proxy.cfg\" ] }, { \"name\": \"Launch OAuth2-Proxy with Keycloak\", \"type\": \"go\", \"request\": \"launch\", \"mode\": \"auto\", \"program\": \"${workspaceFolder}\", \"args\": [ \"--config\", // The following configuration contains settings for a locally deployed // upstream and keycloak as an idetity provider \"contrib/local-environment/oauth2-proxy-keycloak.cfg\" ] } ]} Before you can start your local version of oauth2-proxy, you will have to use the provided docker compose files to start a local upstream service and identity provider. We suggest using httpbin as your upstream for testing as it allows for request and response introspection of all things HTTP. Open a terminal and switch to the contrib/local-environment directory. Dex as your IdP: docker compose -f docker-compose.yaml up dex etcd httpbin Keycloak as your IdP: docker compose -f docker-compose-keycloak.yaml up keycloak httpbin The username for both is admin@example.com and password is password. Start oauth2-proxy from the debug tab and open http://oauth2-proxy.localtest.me:4180/ for testing.","s":"Testing / Debugging","u":"/oauth2-proxy/docs/community/contribution","h":"","p":166},{"i":175,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/community/security","h":"","p":174},{"i":177,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/community/security","h":"#security-disclosures","p":174},{"i":179,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/community/security","h":"#how-will-we-respond-to-disclosures","p":174},{"i":181,"t":"danger This page contains documentation for alpha features. We reserve the right to make breaking changes to the features detailed within this page with no notice. Options described in this page may be changed, removed, renamed or moved without prior warning. Please beware of this before you use alpha configuration options. This page details a set of alpha configuration options in a new format. Going forward we are intending to add structured configuration in YAML format to replace the existing TOML based configuration file and flags. Below is a reference for the structure of the configuration, with AlphaOptions as the root of the configuration. When using alpha configuration, your config file will look something like below: upstreams: - id: ... ...injectRequestHeaders: - name: ... ...injectResponseHeaders: - name: ... ... Please browse the reference below for the structure of the new configuration format.","s":"Alpha Configuration","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"","p":180},{"i":183,"t":"To use the new alpha configuration, generate a YAML file based on the format described in the reference below. Provide the path to this file using the --alpha-config flag. note When using the --alpha-config flag, some options are no longer available. See removed options below for more information.","s":"Using Alpha Configuration","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#using-alpha-configuration","p":180},{"i":185,"t":"Before adding the new --alpha-config option, start OAuth2 Proxy using the convert-config-to-alpha flag to convert existing configuration to the new format. oauth2-proxy --convert-config-to-alpha --config ./path/to/existing/config.cfg This will convert any options supported by the new format to YAML and print the new configuration to STDOUT. Copy this to a new file, remove any options from your existing configuration noted in removed options and then start OAuth2 Proxy using the new config. oauth2-proxy --alpha-config ./path/to/new/config.yaml --config ./path/to/existing/config.cfg","s":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":180},{"i":187,"t":"The following flags/options and their respective environment variables are no longer available when using alpha configuration: flush-interval/flush_interval pass-host-header/pass_host_header proxy-websockets/proxy_websockets ssl-upstream-insecure-skip-verify/ssl_upstream_insecure_skip_verify upstream/upstreams pass-basic-auth/pass_basic_auth pass-access-token/pass_access_token pass-user-headers/pass_user_headers pass-authorization-header/pass_authorization_header set-basic-auth/set_basic_auth set-xauthrequest/set_xauthrequest set-authorization-header/set_authorization_header prefer-email-to-user/prefer_email_to_user basic-auth-password/basic_auth_password skip-auth-strip-headers/skip_auth_strip_headers client-id/client_id client-secret/client_secret, and client-secret-file/client_secret_file provider provider-display-name/provider_display_name provider-ca-file/provider_ca_files login-url/login_url redeem-url/redeem_url profile-url/profile_url resource validate-url/validate_url scope prompt approval-prompt/approval_prompt acr-values/acr_values user-id-claim/user_id_claim allowed-group/allowed_groups allowed-role/allowed_roles jwt-key/jwt_key jwt-key-file/jwt_key_file pubjwk-url/pubjwk_url and all provider-specific options, i.e. any option whose name includes oidc, azure, bitbucket, github, gitlab, google or keycloak. Attempting to use any of these options via flags or via config when --alpha-config is set will result in an error. info You must remove these options before starting OAuth2 Proxy with --alpha-config","s":"Removed options","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#removed-options","p":180},{"i":190,"t":"(Appears on: Provider) Field Type Description skipScope bool Skip adding the scope parameter in login requestDefault value is 'false'","s":"ADFSOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#adfsoptions","p":180},{"i":192,"t":"AlphaOptions contains alpha structured configuration options. Usage of these options allows users to access alpha features that are not available as part of the primary configuration structure for OAuth2 Proxy. danger The options within this structure are considered alpha. They may change between releases without notice. Field Type Description upstreamConfig UpstreamConfig UpstreamConfig is used to configure upstream servers.Once a user is authenticated, requests to the server will be proxied tothese upstream servers based on the path mappings defined in this list. injectRequestHeaders []Header InjectRequestHeaders is used to configure headers that should be addedto requests to upstream servers.Headers may source values from either the authenticated user's sessionor from a static secret value. injectResponseHeaders []Header InjectResponseHeaders is used to configure headers that should be addedto responses from the proxy.This is typically used when using the proxy as an external authenticationprovider in conjunction with another proxy such as NGINX and itsauth_request module.Headers may source values from either the authenticated user's sessionor from a static secret value. server Server Server is used to configure the HTTP(S) server for the proxy application.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. metricsServer Server MetricsServer is used to configure the HTTP(S) server for metrics.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. providers Providers Providers is used to configure multiple providers.","s":"AlphaOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#alphaoptions","p":180},{"i":194,"t":"(Appears on: Provider) Field Type Description tenant string Tenant directs to a tenant-specific or common (tenant-independent) endpointDefault value is 'common' graphGroupField string GraphGroupField configures the group field to be used when building the groups list from Microsoft GraphDefault value is 'id'","s":"AzureOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#azureoptions","p":180},{"i":196,"t":"(Appears on: Provider) Field Type Description team string Team sets restrict logins to members of this team repository string Repository sets restrict logins to user with access to this repository","s":"BitbucketOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#bitbucketoptions","p":180},{"i":198,"t":"(Appears on: HeaderValue) ClaimSource allows loading a header value from a claim within the session Field Type Description claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"ClaimSource","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#claimsource","p":180},{"i":200,"t":"(string alias)​ (Appears on: Upstream) Duration is as string representation of a period of time. A duration string is a is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\", \"-1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".","s":"Duration","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#duration","p":180},{"i":202,"t":"(Appears on: Provider) Field Type Description org string Org sets restrict logins to members of this organisation team string Team sets restrict logins to members of this team repo string Repo sets restrict logins to collaborators of this repository token string Token is the token to use when verifying repository collaboratorsit must have push access to the repository users []string Users allows users with these usernames to logineven if they do not belong to the specified org and team or collaborators","s":"GitHubOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#githuboptions","p":180},{"i":204,"t":"(Appears on: Provider) Field Type Description group []string Group sets restrict logins to members of this group projects []string Projects restricts logins to members of any of these projects","s":"GitLabOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#gitlaboptions","p":180},{"i":206,"t":"(Appears on: Provider) Field Type Description group []string Groups sets restrict logins to members of this google group adminEmail string AdminEmail is the google admin to impersonate for api calls serviceAccountJson string ServiceAccountJSON is the path to the service account json credentials useApplicationDefaultCredentials bool UseApplicationDefaultCredentials is a boolean whether to use Application Default Credentials instead of a ServiceAccountJSON","s":"GoogleOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#googleoptions","p":180},{"i":208,"t":"(Appears on: AlphaOptions) Header represents an individual header that will be added to a request or response header. Field Type Description name string Name is the header name to be used for this set of values.Names should be unique within a list of Headers. preserveRequestValue bool PreserveRequestValue determines whether any values for this headershould be preserved for the request to the upstream server.This option only applies to injected request headers.Defaults to false (headers that match this header will be stripped). values []HeaderValue Values contains the desired values for this header","s":"Header","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#header","p":180},{"i":210,"t":"(Appears on: Header) HeaderValue represents a single header value and the sources that can make up the header value Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value. claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"HeaderValue","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#headervalue","p":180},{"i":212,"t":"(Appears on: Provider) Field Type Description groups []string Group enables to restrict login to members of indicated group roles []string Role enables to restrict login to users with role (only available when using the keycloak-oidc provider)","s":"KeycloakOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#keycloakoptions","p":180},{"i":214,"t":"(Appears on: Provider) Field Type Description jwtKey string JWTKey is a private key in PEM format used to sign JWT, jwtKeyFile string JWTKeyFile is a path to the private key file in PEM format used to sign the JWT pubjwkURL string PubJWKURL is the JWK pubkey access endpoint","s":"LoginGovOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#logingovoptions","p":180},{"i":216,"t":"(Appears on: Provider) LoginURLParameter is the configuration for a single query parameter that can be passed through from the /oauth2/start endpoint to the IdP login URL. The \"default\" option specifies the default value or values (if any) that will be passed to the IdP for this parameter, and \"allow\" is a list of options for ways in which this parameter can be set or overridden via the query string to /oauth2/start. If only a default is specified and no \"allow\" then the parameter is effectively fixed - the default value will always be used and anything passed to the start URL will be ignored. If only \"allow\" is specified but no default then the parameter will only be passed on to the IdP if the caller provides it, and no value will be sent otherwise. Examples:","s":"LoginURLParameter","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#loginurlparameter","p":180},{"i":218,"t":"name: organizationdefault:- myorg A parameter that is not passed by default, but may be set to one of a fixed set of values name: promptallow:- value: login- value: consent- value: select_account A parameter that is passed by default but may be overridden by one of a fixed set of values name: promptdefault: [\"login\"]allow:- value: consent- value: select_account A parameter that may be overridden, but only by values that match a regular expression. For example to restrict login_hint to email addresses in your organization's domain: name: login_hintallow:- pattern: '^[^@]*@example\\.com$'# this allows at most one \"@\" sign, and requires \"example.com\" domain. Note that the YAML rules around exactly which characters are allowed and/or require escaping in different types of string literals are convoluted. For regular expressions the single quoted form is simplest as backslash is not considered to be an escape character. Alternatively use the \"chomped block\" format |-: - pattern: |- ^[^@]*@example\\.com$ The hyphen is important, a | block would have a trailing newline character. Field Type Description name string Name specifies the name of the query parameter. default []string (Optional) Default specifies a default value or values that will bepassed to the IdP if not overridden. allow []URLParameterRule (Optional) Allow specifies rules about how the default (if any) may beoverridden via the query string to /oauth2/start. Onlyvalues that match one or more of the allow rules will beforwarded to the IdP.","s":"A parameter whose value is fixed","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"","p":180},{"i":220,"t":"(Appears on: Provider) Field Type Description issuerURL string IssuerURL is the OpenID Connect issuer URLeg: https://accounts.google.com insecureAllowUnverifiedEmail bool InsecureAllowUnverifiedEmail prevents failures if an email address in an id_token is not verifieddefault set to 'false' insecureSkipIssuerVerification bool InsecureSkipIssuerVerification skips verification of ID token issuers. When false, ID Token Issuers must match the OIDC discovery URLdefault set to 'false' insecureSkipNonce bool InsecureSkipNonce skips verifying the ID Token's nonce claim that must matchthe random nonce sent in the initial OAuth flow. Otherwise, the nonce is checkedafter the initial OAuth redeem & subsequent token refreshes.default set to 'true'Warning: In a future release, this will change to 'false' by default for enhanced security. skipDiscovery bool SkipDiscovery allows to skip OIDC discovery and use manually supplied Endpointsdefault set to 'false' jwksURL string JwksURL is the OpenID Connect JWKS URLeg: https://www.googleapis.com/oauth2/v3/certs emailClaim string EmailClaim indicates which claim contains the user email,default set to 'email' groupsClaim string GroupsClaim indicates which claim contains the user groupsdefault set to 'groups' userIDClaim string UserIDClaim indicates which claim contains the user IDdefault set to 'email' audienceClaims []string AudienceClaim allows to define any claim that is verified against the client idBy default aud claim is used for verification. extraAudiences []string ExtraAudiences is a list of additional audiences that are allowedto pass verification in addition to the client id.","s":"OIDCOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#oidcoptions","p":180},{"i":222,"t":"(Appears on: Providers) Provider holds all configuration for a single provider Field Type Description clientID string ClientID is the OAuth Client ID that is defined in the providerThis value is required for all providers. clientSecret string ClientSecret is the OAuth Client Secret that is defined in the providerThis value is required for all providers. clientSecretFile string ClientSecretFile is the name of the filecontaining the OAuth Client Secret, it will be used if ClientSecret is not set. keycloakConfig KeycloakOptions KeycloakConfig holds all configurations for Keycloak provider. azureConfig AzureOptions AzureConfig holds all configurations for Azure provider. ADFSConfig ADFSOptions ADFSConfig holds all configurations for ADFS provider. bitbucketConfig BitbucketOptions BitbucketConfig holds all configurations for Bitbucket provider. githubConfig GitHubOptions GitHubConfig holds all configurations for GitHubC provider. gitlabConfig GitLabOptions GitLabConfig holds all configurations for GitLab provider. googleConfig GoogleOptions GoogleConfig holds all configurations for Google provider. oidcConfig OIDCOptions OIDCConfig holds all configurations for OIDC provideror providers utilize OIDC configurations. loginGovConfig LoginGovOptions LoginGovConfig holds all configurations for LoginGov provider. id string ID should be a unique identifier for the provider.This value is required for all providers. provider ProviderType Type is the OAuth providermust be set from the supported providers group,otherwise 'Google' is set as default name string Name is the providers display nameif set, it will be shown to the users in the login page. caFiles []string CAFiles is a list of paths to CA certificates that should be used when connecting to the provider.If not specified, the default Go trust sources are used instead loginURL string LoginURL is the authentication endpoint loginURLParameters []LoginURLParameter LoginURLParameters defines the parameters that can be passed from the start URL to the IdP login URL redeemURL string RedeemURL is the token redemption endpoint profileURL string ProfileURL is the profile access endpoint resource string ProtectedResource is the resource that is protected (Azure AD and ADFS only) validateURL string ValidateURL is the access token validation endpoint scope string Scope is the OAuth scope specification allowedGroups []string AllowedGroups is a list of restrict logins to members of this group code_challenge_method string The code challenge method","s":"Provider","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#provider","p":180},{"i":224,"t":"(string alias)​ (Appears on: Provider) ProviderType is used to enumerate the different provider type options Valid options are: adfs, azure, bitbucket, digitalocean facebook, github, gitlab, google, keycloak, keycloak-oidc, linkedin, login.gov, nextcloud and oidc.","s":"ProviderType","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#providertype","p":180},{"i":226,"t":"([]Provider alias)​ (Appears on: AlphaOptions) Providers is a collection of definitions for providers.","s":"Providers","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#providers","p":180},{"i":228,"t":"(Appears on: ClaimSource, HeaderValue, TLS) SecretSource references an individual secret value. Only one source within the struct should be defined at any time. Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value.","s":"SecretSource","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#secretsource","p":180},{"i":230,"t":"(Appears on: AlphaOptions) Server represents the configuration for an HTTP(S) server Field Type Description BindAddress string BindAddress is the address on which to serve traffic.Leave blank or set to \"-\" to disable. SecureBindAddress string SecureBindAddress is the address on which to serve secure traffic.Leave blank or set to \"-\" to disable. TLS TLS TLS contains the information for loading the certificate and key for thesecure traffic and further configuration for the TLS server.","s":"Server","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#server","p":180},{"i":232,"t":"(Appears on: Server) TLS contains the information for loading a TLS certificate and key as well as an optional minimal TLS version that is acceptable. Field Type Description Key SecretSource Key is the TLS key data to use.Typically this will come from a file. Cert SecretSource Cert is the TLS certificate data to use.Typically this will come from a file. MinVersion string MinVersion is the minimal TLS version that is acceptable.E.g. Set to \"TLS1.3\" to select TLS version 1.3 CipherSuites []string CipherSuites is a list of TLS cipher suites that are allowed.E.g.:- TLS_RSA_WITH_RC4_128_SHA- TLS_RSA_WITH_AES_256_GCM_SHA384If not specified, the default Go safe cipher list is used.List of valid cipher suites can be found in the crypto/tls documentation.","s":"TLS","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#tls","p":180},{"i":234,"t":"(Appears on: LoginURLParameter) URLParameterRule represents a rule by which query parameters passed to the /oauth2/start endpoint are checked to determine whether they are valid overrides for the given parameter passed to the IdP's login URL. Either Value or Pattern should be supplied, not both. Field Type Description value string A Value rule matches just this specific value pattern string A Pattern rule gives a regular expression that must be matched bysome substring of the value. The expression is not automaticallyanchored to the start and end of the value, if you want to restrictthe whole parameter value you must anchor it yourself with ^ and $.","s":"URLParameterRule","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#urlparameterrule","p":180},{"i":236,"t":"(Appears on: UpstreamConfig) Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path. Field Type Description id string ID should be a unique identifier for the upstream.This value is required for all upstreams. path string Path is used to map requests to the upstream server.The closest match will take precedence and all Paths must be unique.Path can also take a pattern when used with RewriteTarget.Path segments can be captured and matched using regular experessions.Eg:- ^/foo$: Match only the explicit path /foo- ^/bar/$: Match any path prefixed with /bar/- ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget rewriteTarget string RewriteTarget allows users to rewrite the request path before it is sent tothe upstream server.Use the Path to capture segments for reuse within the rewrite target.Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewritethe request /baz/abc/123 to /foo/abc/123 before proxying to theupstream server. uri string The URI of the upstream server. This may be an HTTP(S) server of a Filebased URL. It may include a path, in which case all requests will be servedunder that path.Eg:- http://localhost:8080- https://service.localhost- https://service.localhost/path- file://host/pathIf the URI's path is \"/base\" and the incoming request was for \"/dir\",the upstream request will be for \"/base/dir\". insecureSkipTLSVerify bool InsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.This option is insecure and will allow potential Man-In-The-Middle attacksbetweem OAuth2 Proxy and the usptream server.Defaults to false. static bool Static will make all requests to this upstream have a static response.The response will have a body of \"Authenticated\" and a response codematching StaticCode.If StaticCode is not set, the response will return a 200 response. staticCode int StaticCode determines the response code for the Static response.This option can only be used with Static enabled. flushInterval Duration FlushInterval is the period between flushing the response buffer whenstreaming response from the upstream.Defaults to 1 second. passHostHeader bool PassHostHeader determines whether the request host header should be proxiedto the upstream server.Defaults to true. proxyWebSockets bool ProxyWebSockets enables proxying of websockets to upstream serversDefaults to true. timeout Duration Timeout is the maximum duration the server will wait for a response from the upstream server.Defaults to 30 seconds.","s":"Upstream","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#upstream","p":180},{"i":238,"t":"(Appears on: AlphaOptions) UpstreamConfig is a collection of definitions for upstream servers. Field Type Description proxyRawPath bool ProxyRawPath will pass the raw url path to upstream allowing for url'slike: \"/%2F/\" which would otherwise be redirected to \"/\" upstreams []Upstream Upstreams represents the configuration for the upstream servers.Requests will be proxied to this upstream if the path matches the request path.","s":"UpstreamConfig","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#upstreamconfig","p":180},{"i":240,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/configuration/session_storage","h":"","p":239},{"i":242,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/configuration/session_storage","h":"#cookie-storage","p":239},{"i":244,"t":"The Redis Storage backend stores sessions, encrypted, in redis. Instead sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128 bit random number, hex-encoded The secret is a 128 bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Additionally the browser only has to send a short Cookie with every request and not the whole JWT, which can get quite big. Two settings are used to configure the OAuth2 Proxy cookie lifetime: --cookie-refresh duration refresh the cookie after this duration; 0 to disable--cookie-expire duration expire timeframe for cookie 168h0m0s The \"cookie-expire\" value should be equal to the lifetime of the Refresh-Token that is issued by the OAuth2 authorization server. If it expires earlier and is deleted by the browser, OAuth2 Proxy cannot find the stored Refresh-Tokens in Redis and thus cannot start the refresh flow to get new Access-Tokens. If it is longer, it might be that the old Refresh-Token will be found in Redis but has already expired. The \"cookie-refresh\" value controls when OAuth2 Proxy tries to refresh an Access-Token. If it is set to \"0\", the Access-Token will never be refreshed, even it is already expired and there would be a valid Refresh-Token in the available. If set, OAuth2 Proxy will refresh the Access-Token after this many seconds even if it is still valid. Of course, it will also be refreshed after it has expired, as long as a Refresh Token is available. Caveat: It can happen that the Access-Token is valid for e.g. \"1m\" and a request happens after exactly \"59s\". It would pass OAuth2 Proxy and be forwarded to the backend but is just expired when the backend tries to validate it. This is especially relevant if the backend uses the JWT to make requests to other backends. For this reason, it's advised to set the cookie-refresh a couple of seconds less than the Access-Token lifespan. Recommended settings: cookie_refresh := Access-Token lifespan - 1m cookie_expire := Refresh-Token lifespan (i.e. Keycloak's client_session_idle) Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive. Note, if Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. For example: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14","s":"Redis Storage","u":"/oauth2-proxy/docs/configuration/session_storage","h":"#redis-storage","p":239},{"i":246,"t":"There are two recommended configurations: At OAuth2 Proxy At Reverse Proxy","s":"TLS Configuration","u":"/oauth2-proxy/docs/configuration/tls","h":"","p":245},{"i":248,"t":"Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... With this configuration approach the customization of the TLS settings is limited. The minimal acceptable TLS version can be set with --tls-min-version=TLS1.3. The defaults set TLS1.2 as the minimal version. Regardless of the minimum version configured, TLS1.3 is currently always used as the maximal version. TLS server side cipher suites can be specified with --tls-cipher-suite=TLS_RSA_WITH_RC4_128_SHA. If not specified, the defaults from crypto/tls of the currently used go version for building oauth2-proxy will be used. A complete list of valid TLS cipher suite names can be found in crypto/tls.","s":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":245},{"i":250,"t":"Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or ... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":245},{"i":252,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /ready - returns a 200 OK response if all the underlying connections (e.g., Redis store) are connected /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive /oauth2/static/* - stylesheets and other dependencies used in the sign_in and error pages","s":"Endpoints","u":"/oauth2-proxy/docs/features/endpoints","h":"","p":251},{"i":254,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored. Make sure to include the actual domain and port (if needed) and not the URL (e.g \"localhost:8081\" instead of \"http://localhost:8081\").","s":"Sign out","u":"/oauth2-proxy/docs/features/endpoints","h":"#sign-out","p":251},{"i":256,"t":"This endpoint returns 202 Accepted response or a 401 Unauthorized response. It can be configured using the following query parameters query parameters: allowed_groups: comma separated list of allowed groups allowed_email_domains: comma separated list of allowed email domains allowed_emails: comma separated list of allowed emails","s":"Auth","u":"/oauth2-proxy/docs/features/endpoints","h":"#auth","p":251},{"i":258,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure ADFS Facebook GitHub Keycloak GitLab LinkedIn Microsoft Azure AD OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket Gitea The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"","p":257},{"i":260,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"APIs & Services\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account and download the json file if you're not using Application Default Credentials / Workload Identity / Workload Identity Federation (recommended). Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: Using Application Default Credentials (ADC) / Workload Identity / Workload Identity Federation (recommended)​ oauth2-proxy can make use of Application Default Credentials. When deployed within GCP, this means that it can automatically use the service account attached to the resource. When deployed to GKE, ADC can be leveraged through a feature called Workload Identity. Follow Google's guide to set up Workload Identity. When deployed outside of GCP, Workload Identity Federation might be an option. https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ).","s":"Google Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#google-auth-provider","p":257},{"i":262,"t":"Add an application: go to https://portal.azure.com, choose Azure Active Directory, select App registrations and then click on New registration. Pick a name, check the supported account type(single-tenant, multi-tenant, etc). In the Redirect URI section create a new Web platform entry for each app that you want to protect by the oauth2 proxy(e.g. https://internal.yourcompanycom/oauth2/callback). Click Register. Next we need to add group read permissions for the app registration, on the API Permissions page of the app, click on Add a permission, select Microsoft Graph, then select Application permissions, then click on Group and select Group.Read.All. Hit Add permissions and then on Grant admin consent (you might need an admin to do this).**IMPORTANT**: Even if this permission is listed with **\"Admin consent required=No\"** the consent might actually be required, due to AAD policies you won't be able to see. If you get a **\"Need admin approval\"** during login, most likely this is what you're missing! Next, if you are planning to use v2.0 Azure Auth endpoint, go to the Manifest page and set \"accessTokenAcceptedVersion\": 2 in the App registration manifest file. On the Certificates & secrets page of the app, add a new client secret and note down the value after hitting Add. Configure the proxy with: for V1 Azure Auth endpoint (Azure Active Directory Endpoints - https://login.microsoftonline.com/common/oauth2/authorize) --provider=azure --client-id= --client-secret= --azure-tenant={tenant-id} --oidc-issuer-url=https://sts.windows.net/{tenant-id}/ for V2 Azure Auth endpoint (Microsoft Identity Platform Endpoints - https://login.microsoftonline.com/common/oauth2/v2.0/authorize) --provider=azure --client-id= --client-secret= --azure-tenant={tenant-id} --oidc-issuer-url=https://login.microsoftonline.com/{tenant-id}/v2.0 Notes: When using v2.0 Azure Auth endpoint (https://login.microsoftonline.com/{tenant-id}/v2.0) as --oidc_issuer_url, in conjunction with --resource flag, be sure to append /.default at the end of the resource name. See https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent#the-default-scope for more details. When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#azure-auth-provider","p":257},{"i":264,"t":"Open the ADFS administration console on your Windows Server and add a new Application Group Provide a name for the integration, select Server Application from the Standalone applications section and click Next Follow the wizard to get the client-id, client-secret and configure the application credentials Configure the proxy with --provider=adfs --client-id= --client-secret= Note: When using the ADFS Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"ADFS Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#adfs-auth-provider","p":257},{"i":266,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#facebook-auth-provider","p":257},{"i":268,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to login even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to login with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#github-auth-provider","p":257},{"i":270,"t":"note This is the legacy provider for Keycloak, use Keycloak OIDC Auth Provider if possible. Create new client in your Keycloak realm with Access Type 'confidental' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: --provider=keycloak --client-id= --client-secret= --login-url=\"http(s):///auth/realms//protocol/openid-connect/auth\" --redeem-url=\"http(s):///auth/realms//protocol/openid-connect/token\" --profile-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --validate-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --keycloak-group= --keycloak-group= For group based authorization, the optional --keycloak-group (legacy) or --allowed-group (global standard) flags can be used to specify which groups to limit access to. If these are unset but a groups mapper is set up above in step (3), the provider will still populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response. The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#keycloak-auth-provider","p":257},{"i":272,"t":"--provider=keycloak-oidc --client-id= --client-secret= --redirect-url=https://internal.yourcompany.com/oauth2/callback --oidc-issuer-url=https:///realms/ // For Keycloak versions <17: --oidc-issuer-url=https:///auth/realms/ --email-domain= // Validate email domain for users, see option documentation --allowed-role= // Optional, required realm role --allowed-role=: // Optional, required client role --allowed-group= // Optional, requires group client scope --code-challenge-method=S256 // PKCE note Keycloak has updated its admin console and as of version 19.0.0, the new admin console is enabled by default. The legacy admin console has been announced for removal with the release of version 21.0.0. Keycloak legacy admin console Create new client in your Keycloak realm with Access Type 'confidential', Client protocol 'openid-connect' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Create a mapper with Mapper Type 'Audience' and Included Client Audience and Included Custom Audience set to your client name. Keycloak new admin console (default as of v19.0.0) The following example shows how to create a simple OIDC client using the new Keycloak admin2 console. However, for best practices, it is recommended to consult the Keycloak documentation. The OIDC client must be configured with an audience mapper to include the client's name in the aud claim of the JWT token. The aud claim specifies the intended recipient of the token, and OAuth2 Proxy expects a match against the values of either --client-id or --oidc-extra-audience. In Keycloak, claims are added to JWT tokens through the use of mappers at either the realm level using \"client scopes\" or through \"dedicated\" client mappers. Creating the client Create a new OIDC client in your Keycloak realm by navigating to:Clients -> Create client Client Type 'OpenID Connect' Client ID , please complete the remaining fields as appropriate and click Next. Client authentication 'On' Authentication flow Standard flow 'selected' Direct access grants 'deselect' Save the configuration. Settings / Access settings: Valid redirect URIs https://internal.yourcompany.com/oauth2/callback Save the configuration. Under the Credentials tab you will now be able to locate . Configure a dedicated audience mapper for your client by navigating to Clients -> -> Client scopes. Access the dedicated mappers pane by clicking -dedicated, located under Assigned client scope.(It should have a description of \"Dedicated scope and mappers for this client\") Click Configure a new mapper and select Audience Name 'aud-mapper-' Included Client Audience select from the dropdown. OAuth2 proxy can be set up to pass both the access and ID JWT tokens to your upstream services. If you require additional audience entries, you can use the Included Custom Audience field in addition to the \"Included Client Audience\" dropdown. Note that the \"aud\" claim of a JWT token should be limited and only specify its intended recipients. Add to ID token 'On' Add to access token 'On' - #1916 Save the configuration. Any subsequent dedicated client mappers can be defined by clicking Dedicated scopes -> Add mapper -> By configuration -> Select mapper You should now be able to create a test user in Keycloak and get access to the OAuth2 Proxy instance, make sure to set an email address matching and select Email verified. Authorization OAuth2 Proxy will perform authorization by requiring a valid user, this authorization can be extended to take into account a user's membership in Keycloak groups, realm roles, and client roles using the keycloak-oidc provider options--allowed-role or --allowed-group Roles A standard Keycloak installation comes with the required mappers for realm roles and client roles through the pre-defined client scope \"roles\". This ensures that any roles assigned to a user are included in the JWT tokens when using an OIDC client that has the \"Full scope allowed\" feature activated, the feature is enabled by default. Creating a realm role Navigate to Realm roles -> Create role Role name, -> save Creating a client role Navigate to Clients -> -> Roles -> Create role Role name, -> save Assign a role to a user Users -> Username -> Role mapping -> Assign role -> filter by roles or clients and select -> Assign. Keycloak \"realm roles\" can be authorized using the --allowed-role= option, while \"client roles\" can be evaluated using --allowed-role=:. You may limit the realm roles included in the JWT tokens for any given client by navigating to: Clients -> -> Client scopes -> -dedicated -> Scope Disabling Full scope allowed activates the Assign role option, allowing you to select which roles, if assigned to a user, will be included in the user's JWT tokens. This can be useful when a user has many associated roles, and you want to reduce the size and impact of the JWT token. Groups You may also do authorization on group memberships by using the OAuth2 Proxy option --allowed-group. We will only do a brief description of creating the required client scope groups and refer you to read the Keycloak documentation. To summarize, the steps required to authorize Keycloak group membership with OAuth2 Proxy are as follows: Create a new Client Scope with the name groups in Keycloak. Include a mapper of type Group Membership. Set the \"Token Claim Name\" to groups or customize by matching it to the --oidc-groups-claim option of OAuth2 Proxy. If the \"Full group path\" option is selected, you need to include a \"/\" separator in the group names defined in the --allowed-group option of OAuth2 Proxy. Example: \"/groupname\" or \"/groupname/childgroup\". After creating the Client Scope named groups you will need to attach it to your client. Clients -> -> Client scopes -> Add client scope -> Select groups and choose Optional and you should now have a client that maps group memberships into the JWT tokens so that Oauth2 Proxy may evaluate them. Create a group by navigating to Groups -> Create group and add your test user as a member. The OAuth2 Proxy option --allowed-group=/groupname will now allow you to filter on group membership Keycloak also has the option of attaching roles to groups, please refer to the Keycloak documentation for more information. Tip To check if roles or groups are added to JWT tokens, you can preview a users token in the Keycloak console by following these steps: Clients -> -> Client scopes -> Evaluate. Select a realm user and optional scope parameters such as groups, and generate the JSON representation of an access or id token to examine its contents.","s":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":257},{"i":274,"t":"This auth provider has been tested against Gitlab version 12.X. Due to Gitlab API changes, it may not work for version prior to 12.X (see 994). Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. If you need projects filtering, add the extra read_api scope to your application. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\" If your self-hosted GitLab is on a sub-directory (e.g. domain.tld/gitlab), as opposed to its own sub-domain (e.g. gitlab.domain.tld), you may need to add a redirect from domain.tld/oauth pointing at e.g. domain.tld/gitlab/oauth.","s":"GitLab Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#gitlab-auth-provider","p":257},{"i":276,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#linkedin-auth-provider","p":257},{"i":278,"t":"For adding an application to the Microsoft Azure AD follow these steps to add an application. Take note of your TenantId if applicable for your situation. The TenantId can be used to override the default common authorization server with a tenant specific server.","s":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":257},{"i":280,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex and we will use it as an example. The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta, an example can be found below. Dex​ To configure the OIDC provider for Dex, perform the following steps: Download Dex: go get github.com/dexidp/dex See the getting started guide for more details. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Add a configuration block to the staticClients section of examples/config-dev.yaml: - id: oauth2-proxyredirectURIs:- 'http://127.0.0.1:4180/oauth2/callback'name: 'oauth2-proxy'secret: proxy Launch Dex: from $GOPATH/github.com/dexidp/dex, run: bin/dex serve examples/config-dev.yaml In a second terminal, run the oauth2-proxy with the following args: -provider oidc-provider-display-name \"My OIDC Provider\"-client-id oauth2-proxy-client-secret proxy-redirect-url http://127.0.0.1:4180/oauth2/callback-oidc-issuer-url http://127.0.0.1:5556/dex-cookie-secure=false-cookie-secret=secret-email-domain kilgore.trout To serve the current working directory as a web site under the /static endpoint, add: -upstream file://$PWD/#/static/ Test the setup by visiting http://127.0.0.1:4180 or http://127.0.0.1:4180/static . See also our local testing environment for a self-contained example using Docker and etcd as storage for Dex. Okta​ To configure the OIDC provider for Okta, perform the following steps: Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com . The client_id and client_secret are configured in the application settings. Generate a unique cookie_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#openid-connect-provider","p":257},{"i":282,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048 bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost', The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"login.gov Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#logingov-provider","p":257},{"i":284,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to setup the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"Nextcloud Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#nextcloud-provider","p":257},{"i":286,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":257},{"i":288,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who has access to one selected repository use --bitbucket-repository=.","s":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":257},{"i":290,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1\"","s":"Gitea Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#gitea-auth-provider","p":257},{"i":292,"t":"To authorize by email domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#email-authentication","p":257},{"i":294,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#adding-a-new-provider","p":257},{"i":296,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/configuration/overview","h":"","p":295},{"i":298,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_'; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/configuration/overview","h":"#generating-a-cookie-secret","p":295},{"i":300,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/configuration/overview","h":"#config-file","p":295},{"i":302,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --api-route string | list return HTTP 401 instead of redirecting to authentication server if token is not valid. Format: path_regex --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --code-challenge-method string use PKCE code challenges with the specified method. Either 'plain' or 'S256' (recommended) --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie. If set to 0, cookie becomes a session-cookie which will expire when the browser is closed. 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --cookie-csrf-per-request bool Enable having different CSRF cookies per request, making it possible to have parallel requests. false --cookie-csrf-expire duration expire timeframe for CSRF cookie 15m --custom-templates-dir string path to custom html templates --custom-sign-in-logo string path or a URL to an custom image for the sign_in page logo. Use \"-\" to disable default logo. --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --force-json-errors bool force JSON errors instead of HTTP error pages or redirects false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --gitlab-projects string | list restrict logins to members of any of these projects (may be given multiple times) formatted as orgname/repo=accesslevel. Access level should be a value matching Gitlab access levels, defaulted to 20 if absent --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --google-use-application-default-credentials bool use application default credentials instead of service account json (i.e. GKE Workload Identity) --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -B for bcrypt encryption --htpasswd-user-group string | list the groups to be set on sessions for htpasswd users --http-address string [http://]: or unix:// to listen on for HTTP clients. Square brackets are required for ipv6 address, e.g. http://[::1]:4180 \"127.0.0.1:4180\" --https-address string [https://]: to listen on for HTTPS clients. Square brackets are required for ipv6 address, e.g. https://[::1]:443 \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --insecure-oidc-skip-nonce bool skip verifying the OIDC ID Token's nonce claim true --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --oidc-email-claim string which OIDC claim contains the user's email \"email\" --oidc-groups-claim string which OIDC claim contains the user groups \"groups\" --oidc-audience-claim string which OIDC claim contains the audience \"aud\" --oidc-extra-audience string | list additional audiences which are allowed to pass verification \"[]\" --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Groups, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --ready-path string the ready endpoint that can be used for deep health checks \"/ready\" --metrics-address string the address prometheus metrics will be scraped from \"\" --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-insecure-skip-tls-verify bool skip TLS verification when connecting to Redis false --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --redis-connection-idle-timeout int Redis connection idle timeout seconds. If Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. Exmpale: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14 0 --request-id-header string Request header to use as the request ID in logging X-Request-Id --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted and allows X-Forwarded-{Proto,Host,Uri} headers to be used on redirect selection false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Groups, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --show-debug-on-error bool show detailed error information on error pages (WARNING: this may contain sensitive information - do not use in production) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping & ready endpoints false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string | list (DEPRECATED for --skip-auth-route) bypass authentication for requests paths that match (may be given multiple times) --skip-auth-route string | list bypass authentication for requests that match the method & path. Format: method=path_regex OR method!=path_regex. For all methods: path_regex OR !=path_regex --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy true --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-cipher-suite string | list Restricts TLS cipher suites used by server to those listed (e.g. TLS_RSA_WITH_RC4_128_SHA) (may be given multiple times). If not specified, the default Go safe cipher list is used. List of valid cipher suites can be found in the crypto/tls documentation. --tls-key-file string path to private key file --tls-min-version string minimum TLS version that is acceptable, either \"TLS1.2\" or \"TLS1.3\" \"TLS1.2\" --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --upstream-timeout duration maximum amount of time the server will wait for a response from the upstream 30s --allowed-group string | list restrict logins to members of this group (may be given multiple times) --allowed-role string | list restrict logins to users with this role (may be given multiple times). Only works with the keycloak-oidc provider. --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . or a *. to allow subdomains (e.g. .example.com, *.example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. [1]: Only these providers support --cookie-refresh: GitLab, Google and OIDC [2]: When using the whitelist-domain option, any domain prefixed with a . or a *. will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URL's protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*. See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/configuration/overview","h":"#command-line-options","p":295},{"i":304,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/configuration/overview","h":"#upstreams-configuration","p":295},{"i":306,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside of a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/configuration/overview","h":"#environment-variables","p":295},{"i":308,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) and the /ready endpoint can be disabled with --silence-ping-logging reducing log volume.","s":"Logging Configuration","u":"/oauth2-proxy/docs/configuration/overview","h":"#logging-configuration","p":295},{"i":310,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Message Authenticated via OAuth2 The details of the auth attempt. Protocol HTTP/1.0 The request protocol. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details.","s":"Auth Log Format","u":"/oauth2-proxy/docs/configuration/overview","h":"#auth-log-format","p":295},{"i":312,"t":"HTTP request logs will output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/configuration/overview","h":"#request-log-format","p":295},{"i":314,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/configuration/overview","h":"#standard-log-format","p":295},{"i":316,"t":"The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\".","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":295},{"i":318,"t":"This option requires --reverse-proxy option to be set.","s":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":295},{"i":320,"t":"The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration: http: routers: a-service: rule: \"Host(`a-service.example.com`)\" service: a-service-backend middlewares: - oauth-errors - oauth-auth tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth: rule: \"Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true oauth-errors: errors: status: - \"401-403\" service: oauth-backend query: \"/oauth2/sign_in?rd={url}\"","s":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":295},{"i":322,"t":"Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint Following options need to be set on oauth2-proxy: --upstream=static://202: Configures a static response for authenticated sessions --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly http: routers: a-service-route-1: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)\" service: a-service-backend middlewares: - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" a-service-route-2: rule: \"Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)\" service: a-service-backend middlewares: - oauth-auth-wo-redirect # unauthenticated session will return a 401 tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services-oauth2-route: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth2-proxy-route: rule: \"Host(`oauth.example.com`) && PathPrefix(`/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 b-service-backend: loadBalancer: servers: - url: http://172.16.0.3:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth-redirect: forwardAuth: address: https://oauth.example.com/ trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization oauth-auth-wo-redirect: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":295}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/163",[0,2.366,1,1.538,2,2.573,3,1.155,4,2.453,5,3.696,6,1.773,7,4.175,8,2.856,9,3.229,10,2.471,11,2.689,12,1.371,13,1.538,14,1.435,15,3.696,16,2.962,17,2.453,18,4.175,19,2.253,20,1.985,21,4.175,22,1.735,23,4.788,24,2.706,25,1.649,26,1.194,27,4.788,28,4.788,29,2.856,30,2.343,31,2.706,32,4.788,33,2.706,34,2.856,35,3.229,36,3.329,37,1.91,38,3.173,39,1.077,40,2.856,41,0.832,42,2.856,43,1.773,44,1.649,45,2.343,46,3.229,47,1.985,48,3.028,49,3.47,50,3.229,51,0.35,52,1.709]],["t/165",[3,1.068,12,1.268,26,1.205,37,1.697,39,0.996,51,0.545,52,1.519,53,2.868,54,4.152,55,6.48,56,6.48,57,2.69,58,4.675,59,4.254,60,3.35,61,2.684,62,4.513,63,4.254,64,4.254,65,4.254,66,4.254,67,4.254,68,4.254,69,4.996,70,4.152,71,4.513,72,6.48,73,5.73,74,5.73,75,5.73,76,5.73,77,2.574,78,3.709,79,3.709,80,4.254,81,4.254,82,3.709,83,3.709,84,3.709,85,4.254,86,1.465,87,3.709,88,1.942,89,2.69,90,2.404,91,5.73,92,4.254,93,2.69,94,1.911,95,2.285,96,4.254,97,4.254,98,4.254,99,4.254,100,4.254,101,4.254,102,3.709,103,1.911,104,3.082,105,1.697,106,0.85,107,1.634,108,2.082,109,2.082,110,0.942,111,2.179,112,1.835,113,3.624,114,3.709,115,1.697,116,2.404]],["t/167",[0,1.738,51,0.469,61,2.364,82,4.4,105,2.013,117,4.4,118,7.407,119,5.367,120,2.852,121,3.191,122,4.994,123,4.684,124,3.974,125,1.367,126,5.046,127,4.4,128,2.711,129,5.046,130,1.565,131,5.046,132,2.711,133,3.403,134,2.267,135,1.738,136,3.822,137,4.4,138,3.191,139,4.4,140,2.556,141,4.4,142,4.4,143,5.047,144,4.4,145,3.403,146,5.046,147,5.046,148,2.364,149,3.974,150,6.408,151,6.408,152,3.822,153,5.046]],["t/169",[51,0.449,57,3.882,61,3.596,62,4.835,95,3.298,121,3.882,125,1.662,154,3.298,155,4.139,156,7.224,157,4.448,158,6.299,159,6.139,160,3.882]],["t/171",[41,1.041,43,2.217,94,2.69,106,1.197,136,3.572,140,2.388,141,5.221,142,6.207,161,7.119,162,4.339,163,5.988,164,5.988,165,5.988,166,5.988,167,5.988,168,5.988,169,4.339,170,4.716,171,5.988,172,5.988,173,4.716]],["t/173",[0,2.037,3,1.318,12,1.79,13,1.633,14,1.073,26,1.119,39,1.028,41,0.884,43,2.384,51,0.372,54,3.684,61,2.77,70,4.928,88,1.073,94,2.892,95,2.732,103,1.608,106,1.359,107,1.953,111,1.833,123,3.74,125,1.377,140,1.428,149,2.819,174,4.928,175,4.434,176,3.684,177,3.579,178,5.93,179,3.121,180,3.579,181,5.614,182,1.204,183,4.434,184,4.434,185,5.085,186,5.085,187,4.434,188,2.193,189,5.085,190,5.914,191,5.085,192,3.121,193,3.459,194,3.579,195,2.264,196,5.071,197,2.023,198,2.264,199,5.914,200,3.429,201,1.677,202,3.579,203,3.121,204,1.608,205,2.594,206,3.579,207,2.135,208,3.684,209,5.085,210,3.579,211,2.874,212,3.121,213,3.579,214,1.923,215,2.413,216,3.579,217,3.684,218,3.579,219,3.579]],["t/175",[3,1.128,106,1.208,128,3.249,130,1.876,154,4.099,220,6.047,221,4.763,222,3.824,223,4.382,224,2.959,225,3.824,226,6.047,227,5.273,228,4.382,229,6.047,230,3.824,231,4.382,232,6.047,233,6.047]],["t/177",[3,1.189,30,2.449,33,2.828,46,3.375,48,3.165,51,0.366,88,1.5,95,2.689,106,1.274,119,5.082,120,3.602,122,4.979,123,3.165,133,3.375,143,3.942,148,2.345,196,3.942,221,5.02,228,4.619,230,3.165,234,5.005,235,4.031,236,5.558,237,5.005,238,3.802,239,5.005,240,2.689,241,4.364,242,3.165,243,5.005,244,5.005,245,5.005,246,2.985,247,1.664,248,3.942,249,2.158,250,3.119,251,5.005,252,5.005,253,5.005,254,5.005,255,5.005,256,5.005,257,4.364,258,5.005,259,5.005,260,3.942,261,3.942,262,1.553]],["t/179",[48,3.191,51,0.469,58,4.321,86,1.738,119,4.643,120,3.621,133,5.352,134,2.267,135,1.738,140,2.013,143,3.974,221,3.974,228,3.656,236,5.587,240,3.783,242,3.191,250,2.469,262,1.565,263,7.041,264,6.408,265,6.408,266,3.656,267,5.046,268,5.046,269,5.046,270,5.046,271,4.4,272,3.656,273,5.046,274,3.974,275,5.046,276,5.046,277,6.408,278,2.469,279,5.046,280,5.046,281,5.046,282,5.046,283,5.046,284,3.656,285,5.046,286,5.046,287,5.046]],["t/181",[12,1.573,13,1.917,39,1.364,41,0.786,42,2.698,43,1.674,49,3.277,51,0.437,61,2.118,88,1.789,107,1.737,110,1.479,122,4.024,134,2.031,135,2.056,136,3.56,138,2.86,148,2.118,188,1.95,195,2.86,238,3.56,262,1.403,288,3.943,289,4.493,290,2.86,291,4.791,292,4.522,293,3.943,294,1.95,295,4.522,296,3.56,297,3.562,298,2.86,299,4.522,300,4.522,301,3.049,302,3.943,303,3.943,304,3.943,305,3.001,306,3.277,307,5.825,308,3.049,309,3.562,310,4.522,311,2.556,312,1.875,313,3.589,314,3.775,315,2.86,316,3.562,317,3.562,318,2.86,319,3.943,320,3.943,321,4.522]],["t/183",[17,2.923,26,0.992,39,0.992,51,0.544,77,2.564,88,2.073,107,2.657,110,1.531,130,1.771,135,1.966,231,4.136,291,5.018,297,4.495,298,3.61,305,2.564,308,3.849,311,3.226,312,2.867,313,3.716,314,3.61,322,3.61,323,2.366,324,3.61,325,2.793]],["t/185",[3,1.385,39,1.228,45,2.49,51,0.471,88,1.525,94,2.893,106,1.485,107,3.055,110,1.644,130,1.578,135,2.697,138,4.074,195,3.218,291,5.01,298,4.074,305,2.893,308,3.431,312,2.109,326,5.852,327,6.442,328,2.734,329,4.437,330,4.007,331,4.007,332,5.088]],["t/187",[1,2.254,3,1.007,5,3.221,6,1.999,13,1.252,14,1.619,15,3.221,22,1.513,26,1.162,29,2.326,39,0.678,41,1.162,43,1.444,46,2.63,51,0.395,77,1.752,86,1.343,94,1.752,106,0.779,107,2.379,110,1.48,111,1.997,112,1.682,113,2.466,120,2.204,125,1.056,193,2.095,195,2.466,231,2.826,247,1.297,250,1.909,262,1.21,291,4.177,298,2.466,312,1.617,333,3.9,334,3.9,335,3.072,336,3.9,337,1.997,338,3.9,339,3.9,340,3.072,341,3.9,342,3.9,343,4.488,344,3.9,345,1.444,346,3.9,347,3.9,348,2.426,349,3.9,350,3.9,351,3.9,352,3.9,353,3.401,354,3.9,355,3.9,356,3.072,357,3.9,358,1.922,359,3.9,360,3.9,361,1.092,362,3.9,363,2.63,364,3.9,365,3.072,366,3.9,367,1.21,368,3.9,369,2.204,370,3.9,371,2.466,372,3.9,373,2.63,374,3.9,375,1.909,376,3.401,377,3.072,378,3.9,379,3.401,380,3.9,381,3.9,382,3.9,383,3.9,384,3.9,385,1.997,386,3.9,387,3.072,388,3.9,389,2.204,390,3.9,391,1.752,392,2.204,393,2.63,394,2.466,395,2.204,396,3.072,397,2.53,398,3.9,399,2.326]],["t/190",[5,3.718,26,1.083,45,3.05,182,1.476,367,1.934,375,3.05,400,1.934,401,1.746,402,1.632,403,6.233,404,3.718,405,3.192,406,6.233,407,2.073,408,4.203]],["t/192",[0,1.737,3,1.262,14,1.061,19,1.823,22,1.412,26,1.113,39,1.328,41,0.876,43,2.175,44,2.691,47,2.655,49,2.563,51,0.559,53,3.4,58,2.385,77,1.589,106,0.707,110,1.301,116,1.999,136,2.11,148,1.657,182,0.838,188,1.526,201,1.657,204,2.877,215,3.4,225,2.237,240,2.709,241,4.397,249,1.526,271,3.085,278,1.731,288,3.085,291,3.962,296,2.11,301,2.385,307,5.123,311,1.999,315,2.237,319,4.397,320,4.397,323,1.467,345,1.31,361,1.412,385,2.583,401,0.991,402,0.926,407,2.13,409,3.085,410,3.085,411,3.538,412,3.085,413,2.563,414,4.628,415,3.538,416,3.538,417,2.786,418,2.11,419,5.043,420,3.538,421,3.189,422,3.4,423,5.043,424,3.189,425,3.538,426,3.085,427,3.538,428,2.786,429,2.786,430,3.538,431,3.538,432,3.654,433,3.538,434,2.583,435,5.043,436,4.397,437,4.397,438,5.043,439,2.709,440,3.008,441,5.043,442,3.538]],["t/194",[26,1.001,39,1.001,51,0.421,182,1.364,249,2.485,262,1.787,389,3.256,400,1.787,401,1.948,402,1.509,407,2.313,443,5.623,444,2.085,445,4.175,446,5.479,447,5.024,448,5.762,449,6.956,450,2.884,451,4.538,452,4.175,453,5.762]],["t/196",[22,1.685,26,1.046,41,1.241,182,1.425,246,4.541,345,2.228,367,2.215,400,1.867,401,1.685,402,1.576,444,2.14,454,3.345,455,2.819,456,5.133]],["t/198",[6,2.449,10,2.639,13,1.705,14,1.592,47,2.201,51,0.388,110,1.175,148,2.488,182,1.257,214,2.853,217,3.847,326,4.182,343,4.794,400,1.647,401,1.487,402,1.39,407,2.581,444,1.983,457,3.847,458,4.63,459,3.847,460,4.473,461,4.63,462,4.558,463,4.63,464,4.63,465,3.847,466,3.58,467,5.769,468,3.847,469,4.63,470,3.847,471,4.63]],["t/200",[12,1.252,43,2.093,50,3.813,86,1.948,93,3.576,110,1.252,224,3.366,225,3.576,230,3.576,400,1.754,444,2.222,472,4.454,473,4.983,474,4.931,475,4.454,476,3.196,477,5.655,478,5.655,479,5.655,480,6.878,481,5.655,482,5.655,483,5.655,484,5.655,485,5.655,486,5.417,487,4.931,488,5.655,489,5.655]],["t/202",[14,1.571,16,3.09,22,2.007,26,0.911,41,1.245,51,0.383,89,3.315,145,4.425,169,3.798,182,1.241,214,2.816,246,4.48,266,4.755,345,1.94,367,2.223,400,1.626,401,1.468,402,1.372,444,2.318,454,3.357,455,3.075,456,4.831,490,5.643,491,4.128,492,5.241,493,5.241,494,4.128,495,2.091]],["t/204",[26,1.056,41,1.056,154,4.107,182,1.439,367,2.228,400,1.885,401,1.702,402,1.591,444,2.153,450,3.169,454,3.364,455,3.364]],["t/206",[26,0.956,41,0.956,51,0.402,105,2.194,182,1.303,197,3.109,323,2.281,367,1.707,395,3.822,400,1.707,401,1.541,402,1.441,404,3.282,444,2.195,450,3.036,454,2.577,455,2.577,496,6.763,497,3.282,498,4.333,499,3.282,500,4.333,501,7.323,502,3.109,503,3.71,504,4.277,505,6.763,506,5.502,507,3.282,508,1.441,509,3.282]],["t/208",[0,2.463,4,2.673,13,2.296,41,0.907,43,1.932,45,2.554,47,3.352,51,0.382,110,1.155,148,2.445,182,1.236,188,2.251,201,2.445,249,2.251,315,3.3,356,4.11,400,1.619,401,1.462,402,1.367,404,3.113,407,2.493,408,3.519,444,1.564,457,3.782,507,3.113,510,3.3,511,4.11,512,5.219,513,3.519,514,6.545,515,3.519,516,5.219,517,5.219,518,5.219,519,5.219,520,5.219,521,5.219,522,5.219]],["t/210",[6,2.288,10,1.903,13,1.985,47,2.842,51,0.349,88,1.43,110,1.056,111,2.443,112,2.057,182,1.129,188,2.057,211,2.696,214,2.563,217,3.456,294,2.057,323,1.977,326,3.757,343,4.478,361,1.336,400,1.48,401,1.336,402,1.249,407,2.692,421,3.016,444,2.252,457,3.456,460,4.246,461,4.159,462,4.336,463,4.159,464,4.159,465,3.456,466,3.216,467,5.389,468,3.456,469,4.159,470,3.456,471,4.159,510,3.016,523,3.456,524,3.456,525,4.623,526,3.456,527,3.016,528,5.389,529,5.389]],["t/212",[22,1.645,26,1.223,51,0.43,77,2.638,182,1.39,193,3.155,367,2.183,391,2.638,400,1.822,401,1.645,402,1.538,444,2.109,450,3.123,454,3.296,455,2.751,530,3.78,531,5.121,532,5.934]],["t/214",[15,4.114,26,0.987,51,0.505,52,2.028,88,1.703,182,1.345,242,4.362,305,3.098,323,2.355,345,2.103,385,3.533,400,1.762,401,1.591,402,1.488,444,2.226,476,3.898,533,6.897,534,5.432,535,6.897,536,6.897,537,4.116,538,4.954]],["t/216",[1,2.379,2,2.711,14,2.111,26,1.113,39,0.877,41,0.877,51,0.369,52,1.801,94,2.267,110,1.418,115,2.013,133,3.403,208,5.102,249,2.176,367,1.565,397,2.364,400,1.565,405,3.916,407,2.463,444,1.513,495,2.808,508,2.002,523,3.656,539,3.974,540,4.052,541,4.643,542,1.921,543,3.974,544,4.4,545,5.046,546,4.4,547,5.046,548,3.974,549,5.046,550,3.656,551,3.403]],["t/218",[1,1.7,4,2.712,12,1.538,13,2.372,14,2.083,20,2.195,30,3.232,41,1.06,51,0.277,110,1.172,115,1.512,130,1.176,133,3.57,182,1.254,208,3.836,247,1.261,272,3.836,305,1.703,308,2.556,324,2.397,367,1.176,397,1.776,401,1.062,402,0.993,405,3.383,407,2.579,412,3.305,444,1.98,454,1.776,476,2.142,495,2.434,508,1.885,523,2.747,540,3.348,541,2.747,544,5.32,552,3.791,553,3.791,554,3.791,555,4.17,556,5.295,557,3.791,558,3.791,559,4.617,560,3.791,561,1.776,562,3.791,563,2.112,564,3.791,565,4.17,566,5.295,567,2.556,568,4.421,569,3.791,570,3.305,571,6.101,572,3.791,573,5.295,574,2.142,575,3.791,576,3.791,577,3.791,578,2.986,579,3.791,580,3.791,581,2.986,582,3.791,583,4.17,584,2.986,585,2.986,586,2.986,587,3.791,588,3.791,589,3.305,590,3.791,591,3.791,592,3.791]],["t/220",[1,1.167,4,1.861,5,3.557,12,0.804,14,1.54,16,2.571,22,1.67,26,0.631,37,2.05,41,1.268,51,0.376,58,2.449,89,3.25,90,2.053,182,0.86,188,2.571,240,1.952,247,1.982,249,1.567,262,2.011,296,2.167,358,1.594,369,2.053,391,2.308,400,1.127,401,1.018,402,0.951,404,3.866,408,4.612,418,2.167,444,2.188,450,1.506,460,4.013,508,1.346,531,5.199,537,2.632,550,2.632,551,2.449,561,1.702,593,5.138,594,3.065,595,2.632,596,3.557,597,5.138,598,3.167,599,5.138,600,3.167,601,3.633,602,3.167,603,3.633,604,5.138,605,4.696,606,3.723,607,3.633,608,5.138,609,3.167,610,5.199,611,3.633,612,2.632,613,4.48,614,2.861,615,3.633,616,3.167,617,3.633,618,3.633,619,2.861,620,3.633,621,5.138,622,2.861,623,2.632,624,3.633,625,5.138,626,3.633,627,5.138,628,3.633,629,5.138,630,3.633,631,5.138,632,3.633,633,5.138,634,3.633,635,2.861,636,5.138,637,3.065,638,2.632,639,3.633]],["t/222",[1,0.975,13,1.729,16,1.945,19,0.942,20,2.231,22,0.85,26,1.38,37,2.54,39,1.301,41,1.035,45,1.486,51,0.394,52,2.127,61,1.422,86,1.046,94,1.364,152,1.811,182,1.068,193,1.631,208,2.2,249,1.945,262,1.67,289,1.92,323,1.258,328,1.631,345,1.67,358,1.67,361,1.264,363,2.047,365,2.391,367,1.67,371,1.92,373,3.042,375,2.634,389,1.716,391,2.026,392,2.549,393,2.047,394,1.92,395,2.549,400,0.942,401,0.85,402,0.795,405,1.555,407,1.79,418,3.211,421,1.92,440,1.811,444,2.318,450,1.258,454,1.422,455,1.422,495,1.211,508,1.181,509,1.811,513,2.047,523,2.2,539,4.24,542,1.352,595,1.555,640,7.38,641,4.511,642,4.511,643,5.383,644,4.511,645,3.036,646,4.511,647,3.036,648,4.511,649,3.036,650,4.511,651,3.036,652,3.269,653,4.511,654,3.036,655,4.511,656,3.036,657,3.036,658,4.511,659,3.036,660,4.511,661,3.036,662,4.511,663,3.036,664,3.036,665,3.036,666,4.511,667,3.036,668,3.036,669,2.647,670,3.036,671,2.647,672,3.036,673,3.036,674,3.036,675,2.647,676,4.511,677,3.036,678,2.647,679,4.511,680,4.511,681,2.647,682,4.511,683,3.036,684,2.047,685,4.511,686,4.511,687,3.036,688,2.391,689,2.2]],["t/224",[26,1.219,51,0.428,86,2.013,110,1.553,120,3.303,182,1.384,193,3.77,391,3.152,392,3.303,393,3.941,394,3.696,395,3.303,400,1.813,444,1.752,472,4.603,574,3.303,652,4.235,671,5.096,690,5.844,691,5.096,692,5.096,693,4.603,694,4.235,695,4.603]],["t/226",[26,1.363,315,4.088,400,2.005,472,5.091,696,5.636,697,5.636]],["t/228",[13,1.759,30,2.68,88,1.642,111,2.805,112,2.362,148,2.566,182,1.297,188,2.362,224,2.68,314,3.464,323,2.27,361,1.889,400,1.699,401,1.534,402,1.434,407,2.604,418,3.267,421,3.464,439,2.943,444,2.191,457,3.968,458,4.775,468,3.968,511,4.314,524,3.968,525,4.928,526,3.968,527,3.464,528,5.881,529,5.881,698,5.477]],["t/230",[12,1.675,39,1.156,41,1.156,44,2.493,182,1.268,188,2.31,240,2.878,315,3.387,325,2.621,385,2.743,400,1.662,401,1.5,402,1.403,432,3.881,436,5.801,437,5.801,439,4.066,440,3.195,444,1.994,459,3.881,510,3.387,561,3.117,699,4.82,700,6.653,701,6.653,702,4.207,703,5.357,704,5.357,705,5.357]],["t/232",[31,2.728,41,0.839,44,1.662,61,2.261,86,1.662,88,1.867,95,3.704,103,2.168,110,1.068,182,1.143,188,2.081,235,3.052,249,2.686,290,3.052,325,2.362,385,3.731,400,1.497,401,1.352,402,1.264,439,4.277,440,3.715,444,1.867,459,3.497,468,4.513,495,1.925,508,1.264,706,3.801,707,4.905,708,3.715,709,6.228,710,5.43,711,4.905,712,6.228,713,4.826,714,3.801,715,4.826,716,6.228,717,5.43,718,4.905,719,4.826,720,4.208,721,4.826,722,4.208,723,4.826,724,3.801]],["t/234",[1,2.063,4,3.291,8,3.023,12,1.422,52,1.809,86,1.745,94,2.276,132,2.722,182,1.2,215,3.417,272,3.672,367,1.572,389,2.864,400,1.572,401,1.419,402,1.327,405,3.613,407,2.642,444,1.926,507,3.023,510,3.204,515,3.417,539,3.991,540,3.204,541,3.672,542,1.519,559,5.602,565,5.556,568,5.112,589,4.418,623,3.672,725,3.991,726,3.991,727,5.067,728,4.418,729,5.067,730,5.067,731,5.067,732,3.672,733,5.067,734,3.991,735,5.067,736,5.067]],["t/236",[0,2.53,3,1.1,4,3.393,5,1.775,14,1.333,19,0.923,20,1.234,22,0.834,33,1.682,36,1.599,39,0.517,41,0.517,43,2.825,44,2.175,47,1.234,51,0.462,106,0.595,110,0.984,128,2.388,148,1.394,152,1.775,182,0.705,195,2.811,201,3.306,204,1.337,250,1.457,257,2.595,262,1.379,272,2.157,294,1.284,311,1.682,323,3.193,335,2.344,337,1.524,340,2.344,400,0.923,401,0.834,402,0.779,404,3.52,407,0.99,408,2.007,413,2.157,414,2.344,417,2.344,424,3.994,432,2.157,439,1.599,444,1.769,462,2.811,473,3.855,475,2.344,507,1.775,510,1.882,513,2.007,515,2.997,530,2.388,542,0.892,550,2.157,565,2.344,605,2.344,669,2.595,737,2.976,738,2.976,739,2.976,740,2.595,741,2.976,742,2.976,743,4.445,744,5.32,745,2.976,746,4.445,747,2.976,748,4.445,749,5.32,750,2.344,751,5.901,752,4.445,753,2.976,754,2.976,755,2.976,756,2.976,757,2.976,758,2.976,759,2.976,760,2.976,761,2.976,762,2.082,763,2.976,764,2.976,765,2.976,766,2.976,767,2.976,768,2.976,769,2.976,770,2.976,771,2.976,772,2.976,773,2.976,774,4.445,775,2.976,776,2.976,777,2.976,778,2.976,779,2.976,780,5.32,781,2.976,782,2.595,783,2.976,784,2.976,785,5.32,786,2.344,787,2.595,788,2.976,789,4.445,790,2.595,791,2.976,792,2.976,793,2.007,794,2.811,795,4.445,796,2.976,797,2.652,798,4.445,799,2.595,800,2.976,801,3.501,802,2.344,803,2.595,804,2.344]],["t/238",[0,1.93,1,1.799,3,1.045,4,2.87,12,1.24,14,1.68,25,1.93,39,0.974,43,3.006,44,1.93,182,1.327,315,3.543,323,3.06,400,1.738,401,1.569,402,1.467,404,3.342,414,4.413,510,3.543,542,1.68,551,3.778,696,4.885,697,4.885,805,6.839,806,4.885,807,5.603,808,5.603,809,5.603]],["t/240",[0,1.948,1,1.816,3,1.054,10,3.152,11,2.546,14,1.695,19,1.754,22,1.584,30,2.767,38,3.523,40,3.373,51,0.414,77,3.089,106,1.13,117,5.997,182,1.339,197,3.196,204,2.54,260,4.454,278,2.767,413,4.097,422,3.813,508,1.481,708,3.373,810,3.373,811,4.103]],["t/242",[0,2.14,3,1.283,10,2.902,11,2.856,19,1.491,22,1.347,38,3.182,41,0.835,44,1.656,51,0.454,93,3.04,106,1.375,125,1.302,148,2.252,162,3.483,278,2.353,325,2.353,358,2.135,361,1.347,476,2.717,508,1.259,600,4.192,708,3.706,810,4.105,811,4.339,812,4.987,813,4.807,814,6.343,815,4.807,816,4.807,817,4.807,818,4.192,819,3.786,820,4.807,821,4.807,822,4.807,823,3.786,824,3.483,825,4.807,826,4.807,827,4.192,828,3.04,829,4.807,830,4.192,831,4.192]],["t/244",[0,1.558,1,0.738,3,1.046,10,2.495,11,2.631,12,0.806,13,1.169,15,2.172,16,3.15,22,0.644,29,1.371,33,1.299,38,3.423,39,0.894,40,4.663,41,1.128,42,1.371,44,0.791,50,3.05,51,0.489,77,2.032,86,1.773,94,1.032,106,1.25,107,0.883,108,1.124,110,0.806,115,0.916,119,1.665,121,1.453,125,0.622,130,1.13,132,1.234,135,0.791,144,3.175,155,1.549,196,1.81,228,1.665,231,1.665,235,1.453,248,2.868,250,1.124,261,1.81,294,0.991,312,2.326,325,1.124,345,2.316,348,1.032,358,0.713,361,1.267,385,1.177,397,1.706,407,1.504,409,2.003,465,1.665,473,3.278,495,0.916,508,0.602,509,2.172,513,2.456,527,2.861,542,1.356,550,1.665,570,2.003,595,3.204,612,2.639,614,1.81,684,1.549,702,1.453,706,3.563,734,1.81,794,2.303,801,4.702,810,2.699,811,3.561,824,3.278,828,4.672,832,4.524,833,4.524,834,2.298,835,2.003,836,3.642,837,3.642,838,3.175,839,2.298,840,2.298,841,2.298,842,2.003,843,2.298,844,1.665,845,3.642,846,2.298,847,2.298,848,2.003,849,2.868,850,2.003,851,2.298,852,2.298,853,1.665,854,3.642,855,3.175,856,5.658,857,2.003,858,2.003,859,2.298,860,2.298,861,2.298,862,2.003,863,3.642,864,2.003,865,3.175,866,2.298,867,2.639,868,1.81,869,2.298,870,2.298,871,2.298,872,3.642,873,1.299,874,3.642,875,2.298,876,2.003,877,2.298,878,2.003,879,2.003,880,2.298,881,2.298,882,3.175,883,4.524,884,1.453,885,2.298,886,2.298,887,2.298,888,2.298,889,2.003,890,2.298,891,3.945,892,3.642,893,2.303,894,3.175,895,2.003,896,0.991,897,3.642,898,2.298,899,2.298,900,2.003,901,3.945,902,2.003,903,3.175,904,2.003]],["t/246",[3,1.392,39,1.129,106,1.299,853,4.709,884,4.11,905,3.877]],["t/248",[3,1.293,11,2.121,12,1.737,13,1.366,26,0.996,31,2.404,39,1.205,41,1.126,44,1.465,51,0.474,57,3.624,61,1.993,86,1.465,95,3.888,106,1.385,108,2.082,109,2.082,113,2.69,205,3.082,235,2.69,247,1.414,249,1.835,262,1.32,317,3.35,358,1.778,361,1.605,385,2.935,434,2.179,439,4.262,451,3.35,495,2.286,508,1.5,546,3.709,707,4.513,711,4.513,714,3.35,717,5.103,718,4.513,724,4.513,814,3.709,819,3.35,906,5.73,907,5.73,908,3.709,909,3.709,910,3.709,911,4.254,912,2.868,913,2.868,914,3.709,915,4.254,916,3.709,917,4.254,918,3.709,919,4.254,920,4.254]],["t/250",[0,1.796,3,1.333,11,1.931,12,1.758,19,1.151,26,0.645,39,0.906,43,1.373,44,1.278,47,1.538,51,0.441,52,1.324,105,1.48,106,1.378,107,2.003,108,1.816,109,1.816,113,4.138,115,2.406,116,3.408,125,1.005,130,1.151,204,2.343,205,2.688,240,2.802,247,1.234,262,1.151,313,1.993,317,2.922,337,2.671,358,1.618,361,1.461,395,2.947,397,1.738,426,4.547,434,1.9,459,4.37,508,1.366,595,1.9,793,2.502,804,4.108,844,2.688,896,1.6,905,2.213,908,3.235,909,3.235,910,3.235,921,5.215,922,5.215,923,3.235,924,4.108,925,6.031,926,4.741,927,2.922,928,3.71,929,3.71,930,3.71,931,3.779,932,4.108,933,3.71,934,3.235,935,4.547,936,5.215,937,3.71,938,3.71,939,3.235,940,3.71,941,3.71,942,3.71,943,3.71,944,3.71,945,3.235,946,2.922,947,3.71,948,2.688,949,3.235,950,2.922,951,5.259,952,2.947,953,2.346,954,2.502,955,3.235,956,4.547,957,3.71,958,3.71,959,3.71,960,3.235]],["t/252",[3,1.175,8,2.403,10,2.203,11,2.044,17,2.063,19,1.25,22,1.128,25,1.388,31,2.277,34,2.403,35,2.717,36,3.816,37,2.513,38,2.063,39,0.7,40,2.403,43,1.491,46,2.717,48,2.548,51,0.537,52,2.249,94,1.81,102,5.494,106,1.104,107,1.548,112,1.737,116,2.277,125,1.091,201,3.327,227,3.513,247,1.34,284,2.919,289,3.985,296,2.403,305,1.81,306,2.919,323,1.67,324,2.548,367,1.25,399,2.403,422,2.717,445,2.919,462,3.492,476,2.277,495,1.607,503,2.717,508,1.055,541,2.919,542,2.129,561,2.587,595,2.828,699,2.919,702,2.548,732,2.919,786,4.963,873,2.277,961,3.513,962,4.029,963,4.029,964,2.717,965,4.029,966,3.173,967,3.513,968,4.029,969,5.494,970,3.513,971,3.513,972,3.513,973,4.029,974,2.919,975,5.522,976,3.513,977,5.522,978,3.513,979,2.717,980,2.717,981,4.029,982,2.919,983,2.919,984,3.173,985,4.029,986,4.029,987,3.173]],["t/254",[0,2.012,6,2.162,9,2.951,10,1.745,11,1.62,19,1.812,22,1.964,24,2.473,25,2.685,26,1.015,29,3.484,39,0.76,45,2.141,47,1.814,49,3.171,51,0.32,52,1.562,105,1.745,106,0.874,110,0.969,115,1.745,132,2.351,155,2.951,250,2.858,289,2.767,294,1.887,298,2.767,304,3.816,318,2.767,328,2.351,345,1.62,367,1.357,391,3.15,405,2.241,476,3.3,509,2.61,527,2.767,540,2.767,542,1.97,548,3.446,551,2.951,563,2.622,581,3.446,606,3.171,831,3.816,873,2.473,896,2.519,931,3.171,952,2.473,974,4.232,976,5.092,988,3.816,989,4.376,990,3.171,991,4.376,992,4.376,993,4.376,994,4.376,995,4.376,996,4.376,997,4.376,998,4.376,999,4.376,1000,3.816,1001,3.446,1002,4.376,1003,3.816,1004,2.61,1005,2.951,1006,4.376,1007,4.376]],["t/256",[14,2.226,31,3.211,34,3.389,35,3.831,36,3.052,39,0.987,51,0.416,52,2.028,125,1.538,201,3.231,247,2.293,249,3.203,405,3.533,450,2.355,540,4.362,563,2.266,983,4.116,1008,5.681,1009,5.008,1010,4.697,1011,5.681,1012,5.681]],["t/258",[3,0.957,12,1.136,25,1.767,26,1.384,37,2.047,39,1.125,45,2.511,51,0.375,57,3.245,86,1.767,103,2.305,104,3.718,105,2.047,106,1.025,120,3.66,122,3.46,130,1.592,193,2.757,306,3.718,328,3.479,392,3.66,393,3.46,394,3.245,395,3.66,407,1.706,429,4.041,434,2.628,452,3.718,460,3.66,508,1.344,563,2.047,594,3.863,595,3.317,652,3.718,691,4.474,692,4.474,693,4.041,694,3.718,695,4.041,896,2.213,1013,5.131,1014,4.474,1015,5.131]],["t/260",[1,0.806,2,1.349,3,0.893,6,1.445,8,2.329,10,1.001,11,0.929,12,1.481,13,1.254,16,1.083,17,1.286,19,0.779,22,1.342,25,0.865,26,0.436,37,1.911,41,0.939,51,0.395,53,4.899,54,3.471,86,0.865,88,1.62,90,2.206,103,1.128,105,2.335,106,0.957,110,0.864,123,1.588,125,1.464,128,1.349,130,1.676,135,1.65,136,1.498,138,2.469,140,2.335,148,1.176,154,3.145,155,1.693,157,1.819,170,1.977,173,3.075,176,2.829,197,3.054,198,4.091,211,1.419,224,1.229,247,1.947,249,1.083,262,1.676,274,1.977,278,1.229,293,2.189,294,2.066,312,2.24,318,1.588,323,1.041,345,0.929,348,2.152,358,1.923,361,0.703,373,1.693,375,1.229,389,1.419,395,3.308,429,1.977,450,2.569,454,1.176,455,1.176,497,3.224,498,1.977,499,3.492,500,3.075,502,3.054,503,3.23,504,3.92,508,1.254,530,2.098,555,1.977,561,1.176,563,1.911,574,1.419,613,2.189,619,1.977,675,2.189,728,2.189,762,1.176,793,1.693,818,2.189,827,2.189,828,3.03,850,2.189,878,2.189,879,2.189,884,3.03,893,1.588,895,2.189,934,2.189,948,1.819,978,2.189,988,2.189,1016,1.977,1017,3.313,1018,2.511,1019,2.189,1020,2.189,1021,2.189,1022,4.791,1023,4.712,1024,2.511,1025,2.511,1026,2.511,1027,1.819,1028,1.977,1029,2.189,1030,1.977,1031,2.511,1032,3.404,1033,1.977,1034,2.511,1035,2.511,1036,3.904,1037,1.588,1038,2.189,1039,2.511,1040,2.189,1041,5.641,1042,4.791,1043,1.498,1044,1.693,1045,3.904,1046,2.511,1047,2.511,1048,2.511,1049,1.693,1050,3.904,1051,3.904,1052,2.189,1053,2.189,1054,2.511,1055,1.977,1056,2.511,1057,2.511,1058,1.977,1059,2.511,1060,1.977,1061,2.511,1062,2.189,1063,1.819,1064,1.977,1065,1.693,1066,2.511,1067,2.511]],["t/262",[1,0.949,2,1.587,3,0.551,6,2.33,8,1.763,10,1.763,11,1.637,12,0.654,13,1.42,17,2.264,20,1.225,21,2.576,25,1.018,26,0.513,38,1.513,39,0.513,40,1.763,41,0.513,51,0.388,52,2.358,53,1.992,61,2.071,84,3.855,88,0.886,93,1.869,103,2.641,104,2.141,105,1.763,106,0.59,116,2.499,121,1.869,130,1.371,132,1.587,134,2.968,135,1.825,140,1.179,160,1.869,198,1.869,207,2.637,238,1.763,249,1.274,262,1.953,289,3.35,312,1.225,324,1.869,328,1.587,358,1.953,361,1.238,367,0.917,373,2.981,375,1.446,377,2.327,391,1.986,392,4.069,407,0.982,428,2.327,440,1.763,443,3.203,450,1.833,452,3.203,497,3.507,499,1.763,502,1.67,508,1.158,555,4.172,596,2.637,684,1.992,732,2.141,762,1.384,810,1.763,812,2.141,867,2.141,896,2.284,924,3.482,979,4.455,1004,1.763,1005,1.992,1016,4.631,1017,3.012,1029,3.855,1032,2.576,1033,2.327,1040,2.576,1044,3.965,1049,1.992,1062,3.855,1064,5.394,1065,1.992,1068,2.955,1069,3.855,1070,2.576,1071,2.955,1072,2.576,1073,2.327,1074,2.327,1075,2.955,1076,2.955,1077,3.203,1078,2.955,1079,2.955,1080,2.327,1081,2.955,1082,2.955,1083,2.576,1084,2.955,1085,2.576,1086,2.955,1087,2.576,1088,2.955,1089,4.421,1090,2.955,1091,2.955,1092,2.955,1093,4.421,1094,3.855,1095,3.482,1096,3.855,1097,4.421,1098,2.955,1099,2.327,1100,2.955,1101,2.955,1102,4.421,1103,2.955,1104,2.576,1105,2.576,1106,2.955,1107,2.955,1108,2.955,1109,2.955,1110,2.327,1111,2.576,1112,2.327,1113,2.576,1114,2.576,1115,2.576]],["t/264",[1,1.588,2,2.656,3,0.922,6,1.83,10,2.523,11,2.341,13,1.588,26,1.099,38,2.532,39,1.099,40,2.949,44,2.179,51,0.362,103,2.221,105,2.932,116,3.574,121,3.126,123,3.126,125,1.339,130,1.534,134,2.221,135,1.703,160,3.126,262,1.962,358,2.28,361,1.385,450,2.049,504,3.126,652,4.583,810,2.949,812,3.582,1017,3.239,1044,3.334,1058,3.894,1077,3.582,1094,4.311,1095,4.981,1096,4.311,1110,3.894,1111,4.311,1112,3.894,1113,4.311,1114,4.311,1115,4.311,1116,4.311,1117,4.944,1118,4.311,1119,4.944,1120,4.944,1121,4.944]],["t/266",[25,2.158,37,2.499,41,1.089,86,2.158,135,2.158,140,2.499,367,1.943,762,2.935,979,4.224,1037,3.962,1043,3.737,1122,7.311,1123,6.265]],["t/268",[6,1.298,14,1.912,16,2.751,19,1.088,22,2.024,26,0.871,41,0.871,51,0.367,86,1.208,89,2.218,110,1.109,120,4.408,125,1.584,130,1.088,135,1.208,140,1.999,145,2.365,148,1.643,154,1.884,169,2.541,214,2.693,242,2.218,246,4.187,247,1.166,250,2.453,266,5.086,294,1.513,305,1.575,312,2.078,328,1.884,345,2.675,348,1.575,367,2.241,369,1.982,375,1.716,389,1.982,454,3.461,455,2.348,456,4.982,490,5.025,491,2.762,494,3.947,495,2.332,542,1.753,543,2.762,563,1.399,637,2.99,853,2.541,867,3.631,893,2.218,896,1.513,980,2.365,1004,2.092,1009,3.943,1010,3.698,1037,2.218,1043,2.092,1065,2.365,1124,3.507,1125,2.541,1126,2.762,1127,3.507,1128,5.848,1129,2.541,1130,3.058,1131,3.507,1132,2.762,1133,2.762,1134,4.37,1135,3.058,1136,3.507,1137,3.507,1138,3.507,1139,3.507,1140,5.848,1141,3.507,1142,3.507,1143,3.507]],["t/270",[6,1.448,13,1.738,14,1.173,16,1.687,25,1.348,26,1.078,41,0.94,42,2.334,43,1.448,44,1.348,47,1.622,51,0.454,52,1.397,86,1.864,110,0.866,125,1.06,128,2.102,130,1.679,135,1.348,140,2.671,155,2.638,176,2.835,182,1.281,193,4.194,201,1.833,211,2.211,230,2.474,294,1.687,311,2.211,312,1.622,345,2.004,348,1.757,358,2.077,361,1.516,367,1.214,369,2.211,371,2.474,391,1.757,407,1.301,418,2.334,450,3.296,460,2.211,495,1.561,497,3.228,504,2.474,542,1.173,708,2.334,762,1.833,893,2.474,913,2.638,952,2.211,1001,3.081,1004,2.334,1017,2.004,1037,2.474,1095,3.081,1144,4.719,1145,3.411,1146,3.912,1147,5.41,1148,2.835,1149,3.411,1150,3.081,1151,3.411,1152,3.411,1153,6.695,1154,5.838,1155,6.695,1156,3.912,1157,3.912,1158,5.412,1159,3.912,1160,3.912,1161,3.912,1162,2.638,1163,3.912,1164,3.081,1165,3.912,1166,3.912,1167,3.912]],["t/272",[1,0.414,2,1.606,3,1.035,4,1.531,8,0.769,12,1.679,13,2.101,14,1.859,15,3.312,16,2.821,17,0.66,19,0.697,20,2.108,22,1.609,25,1.03,26,0.224,39,0.833,41,0.775,43,0.477,45,1.1,51,0.406,53,0.869,58,0.869,62,1.015,79,1.124,86,1.233,89,0.815,90,0.729,95,1.606,103,2.494,106,1.109,110,1.4,115,0.897,122,1.516,125,0.81,128,1.208,130,0.927,132,0.693,134,1.824,135,1.652,136,1.341,137,1.124,140,2.609,152,0.769,162,0.934,176,1.629,182,0.961,193,3.654,197,0.729,200,1.516,211,0.729,214,0.693,215,0.869,223,2.166,225,0.815,247,1.19,250,2.811,262,1.997,290,2.264,294,0.556,298,0.815,306,1.629,314,1.422,322,0.815,323,0.534,324,0.815,325,0.631,345,1.882,348,2.003,358,2.439,361,0.837,375,3.201,391,2.494,401,0.63,402,0.589,405,0.66,407,0.429,417,1.771,418,1.783,422,1.516,445,0.934,450,2.994,455,0.604,460,2.711,474,1.124,495,0.897,497,2.422,502,0.729,503,0.869,504,1.422,508,0.783,525,0.869,530,1.208,532,5.952,561,0.604,563,0.514,594,1.341,595,1.151,596,1.341,614,1.771,616,1.124,635,2.819,637,1.341,638,4.162,688,1.015,702,0.815,710,1.124,726,1.015,750,1.015,762,1.053,819,1.015,823,1.015,868,1.015,884,0.815,893,0.815,896,0.97,912,2.016,913,1.516,948,1.629,1004,0.769,1010,0.815,1017,1.151,1020,1.96,1023,1.124,1030,3.198,1037,1.422,1043,1.341,1044,2.414,1052,1.96,1060,3.778,1063,0.934,1065,0.869,1069,1.96,1074,1.015,1077,0.934,1080,1.015,1116,4.182,1129,0.934,1144,1.96,1145,5.409,1147,5.704,1148,3.476,1149,1.124,1151,1.124,1152,5.516,1154,1.124,1162,1.516,1168,1.289,1169,1.289,1170,2.248,1171,1.289,1172,1.289,1173,1.289,1174,2.248,1175,1.289,1176,2.248,1177,1.289,1178,1.289,1179,1.124,1180,1.289,1181,1.289,1182,1.289,1183,1.289,1184,0.869,1185,1.289,1186,1.124,1187,1.289,1188,1.289,1189,1.289,1190,1.289,1191,1.289,1192,2.248,1193,1.015,1194,5.085,1195,3.889,1196,1.289,1197,1.289,1198,2.819,1199,1.289,1200,1.289,1201,1.124,1202,1.124,1203,1.96,1204,2.607,1205,1.289,1206,1.289,1207,1.124,1208,0.934,1209,1.289,1210,1.289,1211,1.289,1212,1.289,1213,1.289,1214,1.289,1215,1.289,1216,1.124,1217,1.289,1218,1.015]],["t/274",[6,1.482,11,2.035,12,0.886,17,2.05,25,2.329,26,0.695,37,1.596,41,1.091,51,0.402,90,2.262,95,2.954,105,2.696,107,1.537,110,0.886,125,1.919,134,2.821,154,2.15,200,2.699,207,2.388,222,3.477,230,2.531,247,1.331,294,2.371,296,2.388,302,3.49,337,3.216,358,1.705,361,1.121,367,1.242,371,2.531,375,2.69,391,1.798,394,4.83,450,2.279,454,2.575,455,1.875,499,2.388,507,2.388,530,2.15,542,2.124,563,1.596,594,2.388,596,2.388,823,3.152,873,3.821,893,2.531,896,2.371,1004,3.279,1009,2.699,1010,2.531,1017,2.816,1083,3.49,1132,3.152,1148,2.9,1193,3.152,1203,3.49,1219,5.498,1220,4.002,1221,4.002,1222,4.946,1223,4.002,1224,4.002,1225,4.002,1226,4.002,1227,4.002,1228,4.002,1229,4.002,1230,4.002,1231,4.002,1232,4.002,1233,3.49,1234,5.498,1235,4.002,1236,4.002,1237,4.002,1238,4.002,1239,3.49,1240,4.002]],["t/276",[12,1.505,20,2.301,22,1.555,25,1.912,37,2.713,103,2.494,128,2.983,130,1.722,135,1.912,140,2.214,154,2.983,160,3.511,361,1.905,375,2.717,385,3.766,401,1.555,499,3.312,508,1.454,542,1.664,693,4.372,750,4.372,1016,4.372,1017,2.843,1027,4.023,1030,4.372,1037,3.511,1125,4.023,1241,5.552,1242,5.552,1243,5.552,1244,5.552,1245,4.841,1246,5.93]],["t/278",[44,2.445,45,3.474,51,0.436,105,3.024,125,1.614,128,3.201,130,1.848,134,2.677,348,2.677,389,3.368,392,3.368,443,4.318,446,4.693,452,4.318,508,1.56,725,4.693,1017,3.052,1247,7.098,1248,5.959]],["t/280",[1,0.614,3,1.17,11,1.479,12,1.728,13,1.485,14,0.941,16,1.354,17,2.046,20,0.793,22,0.536,24,1.081,25,1.593,26,1.195,37,0.763,39,1.053,41,0.954,43,0.708,44,1.76,51,0.402,52,0.683,57,1.209,61,0.896,70,1.385,77,0.859,88,0.941,90,1.081,93,1.209,94,1.795,103,2.295,105,2.694,106,1.254,107,1.535,110,0.884,111,0.979,115,2.314,123,1.209,125,1.383,128,1.027,130,1.435,132,1.027,134,2.295,135,0.659,140,1.594,148,0.896,149,1.506,152,1.873,154,1.027,157,1.385,160,1.209,170,1.506,173,1.506,174,1.385,178,1.667,181,4.788,182,0.743,187,1.667,188,1.354,198,1.986,200,2.694,205,1.385,207,1.141,212,1.667,222,2.527,225,1.986,235,1.209,238,1.141,240,1.027,247,0.636,262,1.435,278,0.936,290,1.209,294,1.354,297,1.506,311,1.775,313,1.027,318,1.209,322,1.986,324,1.986,325,0.936,345,1.479,348,2.818,358,1.703,361,1.119,363,1.289,367,0.974,375,0.936,391,2.466,401,0.536,402,0.501,421,1.209,424,1.209,434,1.608,450,1.302,460,1.081,499,1.141,502,1.775,508,1.338,513,1.289,542,1.386,551,1.289,563,0.763,583,1.506,594,2.383,595,2.369,596,2.383,619,1.506,637,1.141,638,1.385,684,2.117,699,2.275,762,2.393,794,1.209,797,1.873,810,1.141,812,1.385,824,1.385,828,1.986,865,1.667,868,1.506,873,1.081,896,0.825,912,1.289,913,1.289,924,1.506,931,1.385,950,1.506,974,2.275,979,2.694,980,1.289,1017,2.369,1027,2.275,1033,3.643,1043,2.383,1044,2.117,1049,1.289,1058,1.506,1060,2.473,1070,2.738,1080,2.473,1085,1.667,1104,1.667,1126,1.506,1195,2.738,1202,2.738,1216,1.667,1222,1.506,1245,1.667,1249,1.912,1250,1.912,1251,1.912,1252,1.912,1253,1.912,1254,6.274,1255,1.912,1256,1.912,1257,2.738,1258,1.912,1259,3.14,1260,3.14,1261,1.912,1262,1.912,1263,1.912,1264,1.912,1265,1.912,1266,1.667,1267,1.912,1268,1.667,1269,1.912,1270,1.912,1271,1.912,1272,1.912,1273,1.912,1274,1.912,1275,1.506,1276,1.912,1277,4.033,1278,1.912,1279,3.14,1280,1.912,1281,1.912,1282,3.14,1283,1.912,1284,1.912,1285,1.912,1286,1.912,1287,1.912,1288,1.912,1289,3.14,1290,1.912,1291,1.912,1292,1.667,1293,1.912,1294,2.738,1295,1.667,1296,1.667,1297,1.912,1298,3.14,1299,1.912,1300,1.667,1301,1.912,1302,3.995,1303,1.912,1304,2.738,1305,1.667,1306,1.912,1307,1.667,1308,1.912,1309,3.14,1310,1.912,1311,1.912,1312,1.912,1313,1.912,1314,1.912,1315,1.912,1316,1.912,1317,1.912,1318,1.912]],["t/282",[1,0.796,2,1.332,3,1.276,5,3.202,11,1.987,12,1.603,14,0.743,15,2.307,16,1.069,19,0.769,20,1.028,25,1.637,26,1.011,30,1.214,33,1.402,36,1.332,41,0.933,44,0.854,51,0.283,52,1.381,54,1.797,61,1.162,70,3.444,71,1.953,77,1.114,88,1.609,94,1.737,103,1.114,104,2.802,105,2.322,106,0.95,110,1.052,111,2.981,112,2.315,121,1.568,125,0.672,132,1.332,140,1.542,145,1.672,157,1.797,158,2.162,174,1.797,188,1.069,198,1.568,200,1.672,203,2.162,207,1.479,211,2.185,222,1.568,240,2.078,242,1.568,246,1.479,247,1.581,262,0.769,274,1.953,294,2.315,305,1.737,314,2.446,318,1.568,322,1.568,325,1.214,328,1.332,331,1.953,345,1.76,348,1.114,358,1.475,361,0.695,367,0.769,369,1.402,371,1.568,385,2.75,387,1.953,391,3.075,397,1.162,434,2.435,440,1.479,444,0.743,451,3.046,476,1.402,502,2.185,534,3.744,537,2.802,542,1.931,543,1.953,563,0.989,567,1.672,585,1.953,594,2.307,595,1.981,596,3.202,606,3.89,622,1.953,623,1.797,694,4.468,708,1.479,762,1.812,838,3.372,844,1.797,849,1.953,896,1.069,923,2.162,953,2.446,974,1.797,979,1.672,990,1.797,1000,2.162,1004,1.479,1019,2.162,1021,3.372,1028,1.953,1118,3.372,1129,1.797,1133,1.953,1134,2.162,1184,1.672,1198,1.953,1218,1.953,1222,1.953,1266,2.162,1268,3.372,1275,1.953,1292,2.162,1300,2.162,1304,4.145,1305,2.162,1319,3.867,1320,3.867,1321,3.867,1322,2.48,1323,2.162,1324,2.48,1325,2.48,1326,2.48,1327,2.48,1328,2.48,1329,2.48,1330,3.867,1331,2.48,1332,2.48,1333,2.48,1334,2.48,1335,2.162,1336,2.48,1337,2.48,1338,2.48,1339,2.48,1340,2.48,1341,3.867,1342,2.48,1343,2.162,1344,2.48,1345,2.162,1346,2.48,1347,2.48,1348,2.48,1349,2.48,1350,1.953,1351,2.48,1352,2.48,1353,2.48,1354,2.48,1355,2.48,1356,2.48,1357,2.48,1358,2.48,1359,2.48,1360,2.48,1361,2.48,1362,2.162,1363,2.48,1364,2.48,1365,3.867,1366,2.48,1367,2.48,1368,2.48,1369,1.953,1370,2.48,1371,2.162,1372,2.48,1373,2.48,1374,1.953,1375,2.48,1376,2.48,1377,2.48,1378,2.48,1379,2.48,1380,2.48]],["t/284",[14,1.464,19,1.515,22,1.368,25,1.682,26,1.205,33,2.76,39,0.849,48,3.089,51,0.459,86,2.162,90,2.76,106,0.976,108,2.39,109,2.39,111,2.502,112,2.106,130,1.515,262,1.947,290,3.089,314,3.089,358,2.27,361,1.758,367,1.515,369,2.76,397,2.288,495,1.948,497,3.744,507,2.914,542,2.194,578,3.847,695,6.402,762,2.288,1063,4.547,1233,6.046,1257,4.259,1381,3.847,1382,4.884,1383,4.884,1384,4.884,1385,4.259,1386,4.884,1387,4.884,1388,4.884,1389,4.884]],["t/286",[1,1.575,3,1.173,4,2.512,9,3.307,13,1.575,25,2.393,26,0.852,37,1.956,39,0.852,41,0.852,51,0.46,88,1.47,105,2.51,106,1.388,107,1.884,108,2.4,109,2.4,110,1.538,125,1.328,130,1.521,135,1.689,140,1.956,262,1.952,296,2.925,337,2.512,358,2.274,361,1.762,401,1.374,402,1.284,434,2.512,508,1.284,542,2.272,581,3.862,896,2.115,980,3.307,1005,3.307,1027,3.553,1125,3.553,1150,3.862,1277,4.276,1374,3.862,1390,4.904,1391,4.904,1392,4.904,1393,3.862,1394,4.904,1395,4.276,1396,4.904,1397,4.904,1398,4.904]],["t/288",[1,1.526,3,1.149,12,1.515,13,1.98,14,1.424,19,1.474,22,1.331,26,0.826,30,2.325,37,1.895,39,1.071,51,0.53,103,2.769,106,1.232,110,1.364,125,1.287,130,1.474,134,2.134,135,1.637,160,3.005,246,3.677,247,1.58,262,1.912,345,2.533,358,2.247,361,1.727,393,4.614,434,2.433,454,2.888,455,2.226,456,4.157,502,3.484,508,1.244,542,1.424,637,2.834,980,3.204,1005,3.204,1064,3.742,1065,4.157,1148,3.443,1150,3.742,1246,4.143,1307,4.143,1374,3.742,1393,3.742,1395,4.143,1399,4.751,1400,4.751,1401,4.751,1402,4.751,1403,4.751]],["t/290",[1,1.634,3,0.949,12,1.426,25,2.219,26,0.884,29,3.035,86,1.753,105,2.03,110,1.126,125,1.378,130,1.578,135,1.753,140,2.03,204,2.286,262,1.998,322,4.074,337,3.805,358,2.305,361,1.804,363,3.431,367,1.578,369,2.876,542,1.525,762,2.384,1014,6.827,1043,3.035,1125,3.687,1126,4.007,1294,4.437,1295,4.437,1404,5.088,1405,5.088,1406,6.442,1407,5.088,1408,5.088,1409,5.088,1410,7.068,1411,5.088,1412,5.088,1413,5.088]],["t/292",[19,1.848,30,2.916,51,0.555,109,2.916,247,2.733,348,3.405,511,4.693,561,3.325,563,2.831,1414,5.959,1415,5.959,1416,5.196]],["t/294",[3,1.145,14,1.84,26,1.334,33,3.469,51,0.449,106,1.227,115,2.449,125,1.662,134,2.757,135,2.644,179,5.353,418,3.662,1063,4.448,1417,6.139]],["t/296",[3,1.095,29,3.503,39,1.223,41,1.02,88,2.109,106,1.174,107,2.256,108,3.443,109,3.443,110,1.557,111,3.859,112,3.249,397,2.751,740,5.121,1418,5.873,1419,5.873,1420,7.036]],["t/298",[10,1.88,11,1.745,12,1.83,30,2.307,41,0.819,51,0.345,69,4.111,78,4.111,86,1.624,108,2.307,134,2.118,182,1.116,313,2.533,322,2.981,361,1.32,524,4.444,526,4.94,527,2.981,542,1.413,585,3.713,1296,4.111,1335,5.348,1421,4.714,1422,6.134,1423,4.714,1424,4.714,1425,4.714,1426,4.714,1427,4.714,1428,4.714,1429,4.714,1430,4.714,1431,4.714,1432,4.714,1433,6.818,1434,4.714,1435,5.37,1436,4.714,1437,4.714,1438,6.818,1439,4.714,1440,4.714,1441,4.714,1442,4.714,1443,4.714,1444,4.714,1445,4.714,1446,4.714,1447,4.714,1448,4.714,1449,4.714,1450,4.714,1451,4.111,1452,4.714]],["t/300",[12,1.535,51,0.419,88,2.079,106,1.146,107,2.865,108,2.806,109,2.806,110,1.269,115,2.287,192,6.048,207,3.421,224,2.806,278,2.806,309,4.516,486,4.516,495,2.975,584,4.516,586,4.516,1381,5.463,1435,4.516,1453,5,1454,5,1455,5.734,1456,5.734]],["t/302",[0,1.926,1,1.491,3,0.713,4,1.332,5,3.119,6,1.897,7,0.502,8,1.148,10,1.259,11,2.309,12,1.491,13,0.929,14,1.349,15,2.394,16,2.002,17,1.332,18,1.988,19,1.44,20,1.308,22,1.261,24,3.525,25,1.17,26,0.728,29,0.343,30,0.747,31,0.611,33,0.325,34,0.343,36,0.309,37,1.355,38,0.985,39,0.452,40,3.78,41,0.926,42,2.281,43,1.485,44,0.663,45,0.529,46,0.388,47,2.318,48,0.364,50,0.729,51,0.504,52,1.365,57,0.364,60,0.453,61,0.715,71,0.453,86,0.996,88,1.625,89,1.829,90,0.611,95,1.034,103,0.259,105,0.609,106,0.216,107,0.586,109,0.942,110,0.888,113,0.683,114,0.502,116,0.863,120,1.289,127,1.988,134,0.485,136,0.645,140,0.431,145,0.388,152,0.645,154,0.581,169,0.417,174,1.106,175,0.502,182,0.256,183,1.678,188,0.83,193,0.309,195,0.364,197,0.863,198,0.364,201,1.592,204,2.253,214,1.554,217,2.623,222,0.364,224,1.964,230,0.364,235,0.364,238,0.343,240,1.225,242,0.966,246,0.911,247,1.588,249,2.478,250,0.282,260,1.202,261,1.202,262,0.897,266,1.106,278,1.545,284,1.394,289,1.442,290,0.364,294,0.248,296,0.343,303,0.942,305,1.526,311,0.325,312,0.448,313,0.309,316,0.453,318,0.683,323,2.125,325,1.415,328,0.581,329,0.502,330,0.851,335,0.851,337,0.782,340,2.049,343,2.462,345,1.416,348,1.024,353,1.988,356,1.202,358,1.245,361,0.639,363,1.029,365,0.851,367,1.245,369,0.611,371,0.683,373,0.729,375,0.529,376,1.678,377,0.851,379,0.502,385,1.74,387,0.453,389,1.087,391,2.434,392,0.863,394,1.217,395,1.784,396,0.453,397,0.901,399,1.883,401,0.161,402,0.151,404,3.86,407,0.359,408,3.823,413,0.417,421,0.364,422,0.388,424,0.683,428,1.515,434,0.295,439,1.696,440,1.148,443,1.394,444,2.278,446,0.851,447,0.502,450,1.736,454,1.592,455,1.219,456,1.029,460,1.634,462,1.217,465,0.417,466,0.729,470,0.417,473,1.885,475,0.453,476,1.289,490,0.851,491,0.453,494,0.453,495,1.037,497,0.645,498,0.453,499,0.645,500,0.453,502,0.863,503,1.537,504,0.966,507,0.343,508,1.051,509,1.552,515,0.388,525,0.388,526,0.417,527,0.364,530,0.581,532,0.851,534,0.851,537,1.394,538,0.502,542,1.722,548,0.453,561,1.696,563,1.67,567,1.029,574,0.611,578,0.851,594,0.343,595,2.569,596,1.725,598,0.502,602,0.502,605,1.515,606,1.106,609,0.942,610,0.942,635,1.202,637,0.343,638,1.394,678,1.678,681,0.502,684,0.388,688,0.851,689,1.394,694,1.106,702,1.829,706,0.851,707,0.453,708,0.343,711,0.453,714,0.453,717,1.515,718,1.202,720,0.502,722,0.502,724,0.453,725,0.851,726,2.676,762,0.27,787,1.678,790,0.502,793,0.729,794,0.364,797,2.498,799,0.942,801,2.676,802,1.515,803,0.502,804,0.453,810,0.645,811,0.343,824,0.417,828,0.966,830,2.268,835,0.502,842,0.502,848,0.502,849,0.851,855,1.988,856,1.988,857,0.942,858,0.502,862,0.942,864,0.502,867,0.417,873,2.544,876,0.502,882,0.502,884,0.364,891,3.651,894,2.268,896,0.466,900,0.502,901,1.988,902,0.502,903,0.942,904,0.502,905,1.552,912,1.754,914,0.502,916,0.942,918,0.502,926,0.783,927,0.453,931,1.394,932,0.851,935,0.502,946,1.202,952,3.011,953,1.645,954,2.706,961,0.502,964,1.029,966,2.049,967,1.331,969,0.942,970,0.502,971,0.502,984,1.202,987,0.453,990,0.417,1001,0.453,1003,1.331,1009,1.029,1010,0.966,1017,0.295,1028,0.453,1038,0.502,1041,0.502,1043,0.343,1049,0.729,1053,0.502,1072,0.502,1073,0.453,1074,0.453,1077,0.417,1129,1.106,1132,0.851,1133,0.453,1135,0.502,1162,1.297,1179,0.502,1184,0.388,1186,0.942,1193,1.796,1201,0.502,1204,0.502,1208,0.783,1323,0.502,1343,0.502,1345,0.502,1350,0.453,1362,0.502,1371,0.502,1385,0.502,1416,1.331,1457,0.576,1458,1.515,1459,1.527,1460,0.576,1461,0.576,1462,0.502,1463,0.576,1464,0.576,1465,0.576,1466,0.576,1467,0.576,1468,1.081,1469,0.576,1470,0.576,1471,0.576,1472,0.576,1473,0.576,1474,1.081,1475,0.576,1476,0.576,1477,1.924,1478,0.502,1479,0.576,1480,0.576,1481,0.576,1482,1.527,1483,1.527,1484,2.892,1485,0.576,1486,0.576,1487,0.576,1488,0.576,1489,0.576,1490,0.576,1491,1.527,1492,0.576,1493,0.576,1494,0.576,1495,0.576,1496,1.527,1497,1.527,1498,0.576,1499,0.576,1500,0.576,1501,0.576,1502,0.576,1503,0.576,1504,1.081,1505,1.081,1506,1.081,1507,0.576,1508,0.576,1509,0.576,1510,0.942,1511,0.851,1512,0.576,1513,0.942,1514,0.942,1515,0.576,1516,0.502,1517,1.081,1518,0.576,1519,0.576,1520,0.576,1521,0.576,1522,0.942,1523,0.502,1524,0.576,1525,0.576,1526,0.942,1527,0.576,1528,0.576,1529,0.576,1530,0.576,1531,0.576,1532,0.576,1533,0.576,1534,1.527,1535,0.576,1536,0.576,1537,0.576,1538,0.576,1539,1.527,1540,0.576,1541,0.576,1542,0.502,1543,0.576,1544,0.576,1545,1.924,1546,0.576,1547,0.576,1548,0.576,1549,0.576,1550,0.576,1551,0.576,1552,0.576,1553,0.576,1554,0.576,1555,0.576,1556,0.576,1557,1.081,1558,0.576,1559,0.576,1560,0.502,1561,0.576,1562,0.576,1563,0.576,1564,0.576,1565,0.576,1566,0.576,1567,0.576,1568,0.576,1569,0.576,1570,0.576,1571,0.576,1572,0.576]],["t/304",[0,2.252,1,1.39,3,1.219,19,1.343,26,1.213,39,1.213,41,0.752,42,3.459,43,2.879,44,1.997,45,2.119,51,0.424,77,2.937,88,2.331,94,1.945,106,0.865,107,1.663,110,0.958,132,2.326,204,2.604,207,2.583,211,2.447,224,2.119,225,2.738,249,2.501,278,3.417,294,1.867,311,2.447,323,2.895,328,2.326,405,3.348,407,1.44,424,3.667,432,3.137,495,1.727,509,2.583,542,1.96,623,4.201,699,4.201,873,2.447,1009,2.919,1010,2.738,1458,3.41,1478,3.775,1573,4.329,1574,4.329,1575,4.329,1576,4.329,1577,4.329,1578,5.798,1579,4.329,1580,5.798,1581,4.329,1582,4.329,1583,4.329]],["t/306",[11,2.009,12,1.485,38,2.78,39,0.943,51,0.397,88,1.627,108,3.282,109,3.282,111,3.435,112,2.893,115,2.165,224,2.656,247,1.805,278,2.656,309,4.275,312,2.781,361,1.879,462,3.433,470,4.86,486,4.275,495,2.675,563,2.165,584,4.275,586,4.275,1055,4.275,1381,5.283,1435,4.275,1453,4.733,1454,4.733,1584,5.428,1585,5.428,1586,5.428,1587,5.428,1588,5.428]],["t/308",[0,2.297,3,0.84,6,1.668,12,1.57,19,1.398,22,1.262,24,4.735,39,1.159,51,0.436,52,2.126,88,1.999,93,3.765,106,0.9,108,2.205,112,1.943,182,1.41,204,2.024,284,3.264,305,2.674,330,3.548,508,1.559,530,2.421,574,2.546,702,3.765,802,3.548,946,5.588,964,3.038,966,5.252,1162,4.015,1207,3.928,1208,4.314,1510,5.192,1511,3.548,1513,3.928,1514,5.815,1516,5.192,1542,3.928,1560,3.928,1589,4.314,1590,4.505,1591,4.505,1592,4.505,1593,4.505]],["t/310",[0,2.582,3,0.692,6,2.552,12,0.821,17,1.9,19,2.218,20,1.538,22,1.833,24,4.04,30,1.816,39,0.906,41,0.645,47,2.5,51,0.271,77,1.666,106,0.741,112,2.249,115,1.48,124,2.922,125,1.005,138,2.346,188,2.249,214,3.515,223,2.688,224,1.816,238,3.111,247,1.734,262,1.871,305,2.939,312,1.538,313,2.802,337,2.671,358,1.871,396,4.108,397,1.738,399,2.213,402,0.972,407,1.234,444,1.112,466,2.502,508,1.366,561,2.443,574,2.097,583,2.922,612,2.688,689,3.779,797,2.213,905,2.213,952,2.097,953,2.346,954,3.517,964,2.502,1087,3.235,1164,2.922,1184,3.517,1523,3.235,1589,2.688,1594,3.71,1595,3.235,1596,3.235,1597,4.108,1598,4.108,1599,5.429,1600,5.259,1601,5.215,1602,3.71,1603,3.71,1604,3.71,1605,3.71,1606,3.71,1607,4.547,1608,4.108,1609,3.235,1610,3.235,1611,3.235,1612,3.235,1613,3.235,1614,3.235,1615,3.235,1616,3.235,1617,3.235,1618,3.235,1619,3.235,1620,2.922,1621,2.922,1622,3.235,1623,3.235,1624,3.235]],["t/312",[0,2.741,3,0.7,6,1.39,12,0.831,20,1.557,22,1.052,24,3.717,39,0.914,41,0.653,43,2.247,47,2.517,51,0.275,77,1.687,112,2.269,115,1.498,124,2.958,125,1.017,138,2.375,152,2.24,201,2.464,204,2.727,214,3.262,223,2.721,224,2.574,247,1.249,262,1.883,305,2.955,312,1.557,313,2.018,323,2.181,337,3.109,358,1.883,402,0.983,407,1.249,466,2.532,508,1.377,524,2.721,561,1.759,574,2.123,612,2.721,689,2.721,708,2.24,762,1.759,786,2.958,794,2.375,797,2.24,905,2.24,952,2.123,953,2.375,954,3.547,964,2.532,982,2.721,1184,4.094,1208,2.721,1369,2.958,1589,2.721,1595,3.275,1596,3.275,1597,4.143,1598,4.143,1599,2.958,1607,4.587,1608,4.143,1609,3.275,1610,3.275,1611,3.275,1612,3.275,1613,3.275,1614,3.275,1615,3.275,1616,3.275,1617,3.275,1618,3.275,1619,4.587,1620,2.958,1621,2.958,1622,4.587,1623,3.275,1624,3.275,1625,3.756,1626,3.756,1627,3.756,1628,3.756,1629,3.756,1630,3.756,1631,3.756,1632,5.26,1633,5.26,1634,5.26,1635,5.26,1636,3.756,1637,3.756,1638,3.756]],["t/314",[10,1.956,20,2.033,24,4.514,39,1.207,50,3.307,77,2.203,88,2.083,109,2.4,112,2.714,115,1.956,125,1.328,182,1.161,204,2.203,224,2.4,238,2.925,250,2.4,305,3.404,312,2.033,313,2.635,325,2.4,399,2.925,402,1.284,508,1.648,574,2.772,853,3.553,926,3.553,927,3.862,1055,3.862,1162,4.685,1164,3.862,1589,3.553,1597,4.956,1598,4.956,1600,6.058,1608,4.956,1620,3.862,1621,3.862,1639,4.904,1640,4.904,1641,4.904,1642,6.292,1643,6.292]],["t/316",[0,1.747,1,1.428,2,1.203,3,0.665,6,1.646,9,1.509,10,0.893,11,2.772,12,1.821,13,1.779,14,0.671,16,2.546,19,0.694,20,0.928,22,1.421,25,1.229,31,1.265,34,2.128,35,1.509,36,1.203,38,1.147,39,0.62,41,1.245,44,0.771,47,2.567,51,0.371,52,0.799,83,1.952,87,3.11,106,0.889,107,0.86,112,1.918,113,1.416,115,0.893,116,3.5,125,0.606,130,0.694,135,0.771,188,0.965,201,2.376,215,1.509,222,1.416,247,1.687,248,1.763,250,2.482,278,1.746,301,1.509,312,1.479,316,1.763,325,1.095,331,1.763,337,2.598,345,1.321,348,1.006,392,1.265,397,2.376,405,1.147,410,3.877,434,1.147,445,1.622,487,1.952,509,2.128,525,1.509,530,1.917,542,0.671,563,0.893,622,1.763,637,1.335,732,1.622,782,1.952,794,2.256,806,1.952,811,2.128,828,1.416,844,1.622,873,1.265,884,1.416,889,1.952,896,1.538,912,1.509,913,1.509,926,1.622,932,1.763,939,1.952,945,3.877,948,3.675,949,4.423,950,2.809,951,6.154,952,3.919,953,2.256,954,2.405,955,3.11,956,4.423,972,1.952,982,2.585,983,1.622,984,4.363,990,1.622,1005,1.509,1073,1.763,1105,1.952,1110,1.763,1130,1.952,1198,1.763,1218,2.809,1275,2.809,1350,1.763,1369,2.809,1393,1.763,1451,1.952,1462,1.952,1522,1.952,1526,1.952,1644,2.239,1645,2.239,1646,2.239,1647,2.239,1648,2.239,1649,6.192,1650,2.239,1651,2.239,1652,2.239,1653,5.072,1654,2.239,1655,2.239,1656,3.567,1657,2.239,1658,2.239,1659,3.567,1660,2.239,1661,2.239,1662,3.567,1663,3.567,1664,2.239,1665,2.239,1666,2.239,1667,2.239,1668,4.447,1669,2.239,1670,4.447,1671,3.567,1672,3.567,1673,2.239,1674,2.239,1675,2.239,1676,1.952,1677,2.239,1678,2.239,1679,2.239,1680,3.567,1681,2.239,1682,3.567,1683,2.239,1684,3.567,1685,2.239,1686,2.239,1687,2.239,1688,2.239]],["t/318",[3,1.218,20,2.708,41,1.135,110,1.658,905,3.897]],["t/320",[0,2.152,2,2.129,3,0.739,6,2.492,9,2.672,12,0.877,14,1.188,19,1.23,31,2.24,34,3.257,35,2.672,36,2.129,37,3.039,39,0.689,44,1.881,47,2.59,52,1.415,88,1.188,106,0.792,115,1.581,197,4.227,201,2.558,204,1.78,301,2.672,308,2.672,397,1.857,399,3.727,439,2.934,508,1.43,540,2.506,542,1.637,561,1.857,563,2.178,567,4.761,568,3.957,734,3.122,797,4.545,811,4.212,982,2.872,983,2.872,1099,3.122,1599,3.122,1689,4.761,1690,4.761,1691,5.87,1692,3.963,1693,3.456,1694,4.761,1695,4.761,1696,4.761,1697,4.761,1698,4.761,1699,3.963,1700,3.456,1701,4.761,1702,3.456,1703,3.456,1704,3.456,1705,3.456,1706,3.456,1707,3.456,1708,3.456,1709,3.456,1710,3.456,1711,3.456,1712,3.456,1713,3.456,1714,3.456,1715,3.456,1716,3.963,1717,3.963]],["t/322",[0,1.506,3,0.979,6,2.655,10,1.744,12,1.552,16,1.886,19,0.903,25,2.415,26,0.76,34,1.737,36,1.565,37,2.719,39,0.506,41,0.76,42,1.737,44,1.809,47,2.594,51,0.384,52,1.04,60,4.136,88,0.873,106,1.313,110,0.968,125,0.789,130,0.903,139,2.539,162,2.11,184,2.539,197,4.247,201,1.364,204,1.308,211,1.646,301,1.964,345,1.619,348,1.964,358,1.357,361,1.471,399,1.737,424,1.842,439,3.136,508,1.529,515,1.964,530,1.565,542,1.574,561,2.049,563,2.328,567,4.836,568,4.23,793,1.964,797,4.278,811,4.066,896,1.256,905,1.737,952,2.968,960,2.539,987,2.294,1049,1.964,1099,2.294,1112,2.294,1239,2.539,1458,4.598,1511,2.294,1676,2.539,1689,2.539,1690,4.579,1691,5.943,1693,2.539,1694,4.579,1695,5.455,1696,5.09,1697,5.09,1698,5.09,1700,2.539,1701,4.579,1702,2.539,1703,2.539,1704,2.539,1705,2.539,1706,2.539,1707,2.539,1708,2.539,1709,2.539,1710,2.539,1711,2.539,1712,2.539,1713,2.539,1714,2.539,1715,3.813,1718,2.912,1719,2.912,1720,4.373,1721,4.373,1722,2.912,1723,4.373,1724,2.912,1725,2.912,1726,2.912,1727,4.373,1728,2.912]]],"invertedIndex":[["",{"_index":12,"t":{"163":{"position":[[119,1],[559,4]]},"165":{"position":[[119,1],[656,1]]},"173":{"position":[[115,1],[155,1],[157,1],[291,1],[293,1],[305,2],[377,2],[465,1],[467,2],[470,1],[609,1],[611,1],[623,2],[695,2],[797,1],[799,1],[801,2]]},"181":{"position":[[752,3],[789,3],[827,3],[831,3]]},"200":{"position":[[234,1]]},"218":{"position":[[618,3],[972,1],[974,1],[987,1],[1038,1]]},"220":{"position":[[693,1]]},"230":{"position":[[202,1],[204,1],[331,1],[333,1]]},"234":{"position":[[649,1],[655,2]]},"238":{"position":[[259,3]]},"244":{"position":[[2505,2],[2549,2]]},"248":{"position":[[227,1],[262,1],[298,1],[334,1],[369,1],[391,1],[414,1],[431,1],[449,1]]},"250":{"position":[[114,3],[750,1],[951,1],[953,1],[1165,2],[1264,1],[1299,1],[1335,1],[1357,1],[1380,1],[1397,1],[1420,1],[1438,1]]},"258":{"position":[[209,1]]},"260":{"position":[[256,1],[1182,1],[1202,1],[1306,1],[1621,1],[1641,1],[3089,1],[3110,2]]},"262":{"position":[[1195,1]]},"272":{"position":[[221,2],[351,2],[445,2],[524,2],[588,2],[658,2],[2130,1],[2410,1],[2683,1],[2705,1],[3577,1],[3591,1],[3611,1],[4487,1],[4531,1],[4582,1],[4604,1],[4613,1],[4658,1],[4696,1],[4708,1],[4724,1],[4739,1],[4780,1],[5085,1],[5107,1],[5124,1],[5156,1],[6079,3],[6314,1],[6336,1],[6353,1],[6373,1],[6570,1],[6991,1],[7013,1],[7030,1]]},"274":{"position":[[674,2]]},"276":{"position":[[366,1],[396,1]]},"280":{"position":[[39,1],[1414,1],[3059,1],[3080,1],[3140,1],[3191,1],[3193,1],[3236,1],[3238,1],[3261,1],[3284,1],[3311,1],[3331,1],[3361,1],[3493,1],[4386,1],[4407,1],[4464,1],[4520,1],[4522,1],[4560,1],[4562,1],[4578,1],[4599,1],[4624,1],[4644,1],[4665,1],[4693,1],[4770,1]]},"282":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"288":{"position":[[213,1],[238,1],[259,1]]},"290":{"position":[[400,2],[458,2]]},"298":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[312,1],[320,4],[325,1],[330,1],[570,1],[697,1],[706,1],[728,1],[730,1]]},"300":{"position":[[83,1],[85,1]]},"302":{"position":[[71,2],[93,1],[1050,1],[1583,1],[1706,3],[2057,4],[2062,2],[2418,1],[2420,1],[2493,1],[2574,1],[2662,1],[3124,2],[3431,1],[3433,1],[3511,1],[3513,1],[3950,1],[4089,1],[4200,1],[4990,1],[5533,2],[7096,1],[7163,4],[8215,2],[8284,1],[8730,2],[8923,2],[9540,1],[10287,1],[12600,1],[12728,1],[12877,1],[12941,1],[13092,1],[13123,1],[14073,1],[14502,1],[14790,1],[14890,1],[15128,1],[15210,1],[15217,2],[15299,1],[15952,1],[15959,2],[16312,2]]},"306":{"position":[[147,1],[149,1]]},"308":{"position":[[215,1],[241,1],[278,1],[343,1]]},"310":{"position":[[927,1]]},"312":{"position":[[782,1]]},"316":{"position":[[242,1],[272,4],[317,1],[513,1],[557,1],[629,1],[640,1],[655,1],[796,1],[879,3],[912,1],[923,1],[925,1],[969,1],[988,1],[1050,1],[1282,1],[1468,1],[1644,1],[1737,1],[1803,1],[1901,1],[2080,1],[2161,1],[2266,2],[2269,3],[2273,5],[2279,1],[2396,1],[2398,1],[2494,1],[2582,1],[2612,1],[2656,4],[2665,2],[3338,1],[3419,1],[3448,2],[3451,2],[3484,1],[3496,2],[3523,2],[3556,5],[3566,1]]},"320":{"position":[[589,2]]},"322":{"position":[[154,1],[349,1],[488,2],[570,1],[757,2],[858,1],[1069,2],[1282,2]]}}}],["0",{"_index":855,"t":{"244":{"position":[[1110,1],[1700,4]]},"302":{"position":[[1304,2],[1776,1],[5793,1],[5806,1],[11048,1]]}}}],["0.0.0.0:4180",{"_index":1318,"t":{"280":{"position":[[4772,14]]}}}],["0.001",{"_index":1636,"t":{"312":{"position":[[916,5]]}}}],["0.2.0",{"_index":180,"t":{"173":{"position":[[128,8]]}}}],["00010203",{"_index":1613,"t":{"310":{"position":[[1121,8]]},"312":{"position":[[984,8]]}}}],["0400",{"_index":1598,"t":{"310":{"position":[[256,5],[1301,4]]},"312":{"position":[[137,5],[1323,4]]},"314":{"position":[[267,5],[593,4]]}}}],["0405",{"_index":1614,"t":{"310":{"position":[[1130,4]]},"312":{"position":[[993,4]]}}}],["0a0b0c0d0e0f",{"_index":1617,"t":{"310":{"position":[[1145,12]]},"312":{"position":[[1008,12]]}}}],["1",{"_index":793,"t":{"236":{"position":[[2225,1]]},"250":{"position":[[1116,2]]},"260":{"position":[[2828,1]]},"302":{"position":[[1821,3],[15804,4]]},"322":{"position":[[423,2]]}}}],["1.19",{"_index":156,"t":{"169":{"position":[[41,5],[126,4]]}}}],["1.3",{"_index":715,"t":{"232":{"position":[[474,3]]}}}],["1.5h",{"_index":483,"t":{"200":{"position":[[236,5]]}}}],["100",{"_index":1520,"t":{"302":{"position":[[5889,3]]}}}],["12",{"_index":1638,"t":{"312":{"position":[[1200,2]]}}}],["12.x",{"_index":1219,"t":{"274":{"position":[[58,5],[128,4]]}}}],["123456.apps.googleusercontent.com",{"_index":1461,"t":{"302":{"position":[[724,35]]}}}],["127.0.0.1:4180",{"_index":927,"t":{"250":{"position":[[150,14]]},"302":{"position":[[5212,16]]},"314":{"position":[[732,14]]}}}],["128",{"_index":837,"t":{"244":{"position":[[383,3],[434,3]]}}}],["15",{"_index":903,"t":{"244":{"position":[[3491,2],[3522,2]]},"302":{"position":[[10926,2],[10957,2]]}}}],["15m",{"_index":1480,"t":{"302":{"position":[[2261,3]]}}}],["168h0m0",{"_index":858,"t":{"244":{"position":[[1175,8]]},"302":{"position":[[1385,8]]}}}],["17",{"_index":1172,"t":{"272":{"position":[[246,4]]}}}],["19.0.0",{"_index":1180,"t":{"272":{"position":[[728,7]]}}}],["19/mar/2015:17:20:19",{"_index":1597,"t":{"310":{"position":[[233,21],[1279,20]]},"312":{"position":[[114,21],[1301,20]]},"314":{"position":[[244,21],[571,20]]}}}],["1916",{"_index":1200,"t":{"272":{"position":[[3462,5]]}}}],["192",{"_index":1448,"t":{"298":{"position":[[644,3]]}}}],["1h",{"_index":1039,"t":{"260":{"position":[[923,4]]}}}],["1m",{"_index":874,"t":{"244":{"position":[[2097,4],[2532,2]]}}}],["1s",{"_index":1494,"t":{"302":{"position":[[3239,4]]}}}],["2",{"_index":1049,"t":{"260":{"position":[[1547,1]]},"262":{"position":[[1134,1]]},"280":{"position":[[3458,2]]},"302":{"position":[[15275,3],[15880,4]]},"322":{"position":[[717,2]]}}}],["2.0",{"_index":1245,"t":{"276":{"position":[[213,3]]},"280":{"position":[[35,3]]}}}],["20",{"_index":1499,"t":{"302":{"position":[[4403,2]]}}}],["200",{"_index":786,"t":{"236":{"position":[[1941,3]]},"252":{"position":[[223,3],[336,3],[417,3]]},"312":{"position":[[1249,3]]}}}],["202",{"_index":983,"t":{"252":{"position":[[1098,3]]},"256":{"position":[[22,3]]},"316":{"position":[[131,3]]},"320":{"position":[[162,3]]}}}],["2048",{"_index":1332,"t":{"282":{"position":[[1052,4]]}}}],["21.0.0",{"_index":1182,"t":{"272":{"position":[[865,7]]}}}],["24",{"_index":1446,"t":{"298":{"position":[[630,2]]}}}],["2>&1",{"_index":98,"t":{"165":{"position":[[651,4]]}}}],["2>/dev/nul",{"_index":1432,"t":{"298":{"position":[[227,11]]}}}],["2f",{"_index":808,"t":{"238":{"position":[[212,7]]}}}],["2h45m",{"_index":484,"t":{"200":{"position":[[245,8]]}}}],["3",{"_index":1095,"t":{"262":{"position":[[1492,2],[1800,2]]},"264":{"position":[[385,2],[421,2]]},"270":{"position":[[1247,4]]}}}],["3/4",{"_index":1562,"t":{"302":{"position":[[15577,3]]}}}],["30",{"_index":804,"t":{"236":{"position":[[2598,2]]},"250":{"position":[[1138,3],[1161,3]]},"302":{"position":[[14763,3]]}}}],["300m",{"_index":482,"t":{"200":{"position":[[225,8]]}}}],["315360000",{"_index":1706,"t":{"320":{"position":[[965,9]]},"322":{"position":[[1723,9]]}}}],["32",{"_index":1438,"t":{"298":{"position":[[309,2],[578,2],[708,2]]}}}],["3650",{"_index":1344,"t":{"282":{"position":[[1175,4]]}}}],["401",{"_index":34,"t":{"163":{"position":[[403,3]]},"252":{"position":[[1125,3]]},"256":{"position":[[49,3]]},"302":{"position":[[112,3]]},"316":{"position":[[158,3],[965,3]]},"320":{"position":[[189,3],[1254,4]]},"322":{"position":[[898,3]]}}}],["403",{"_index":1716,"t":{"320":{"position":[[1259,4]]}}}],["4180",{"_index":933,"t":{"250":{"position":[[465,5]]}}}],["443",{"_index":932,"t":{"250":{"position":[[395,3],[759,3]]},"302":{"position":[[5378,6],[16159,3]]},"316":{"position":[[251,3]]}}}],["4607",{"_index":1615,"t":{"310":{"position":[[1135,4]]},"312":{"position":[[998,4]]}}}],["4kb",{"_index":1656,"t":{"316":{"position":[[1733,3],[1938,4]]}}}],["5",{"_index":1062,"t":{"260":{"position":[[2527,1]]},"262":{"position":[[1528,2],[1836,2]]}}}],["59",{"_index":875,"t":{"244":{"position":[[2138,6]]}}}],["7",{"_index":1518,"t":{"302":{"position":[[5722,1]]}}}],["74.125.224.72",{"_index":1609,"t":{"310":{"position":[[840,13]]},"312":{"position":[[695,13]]}}}],["80",{"_index":1570,"t":{"302":{"position":[[16145,3]]}}}],["8809",{"_index":1616,"t":{"310":{"position":[[1140,4]]},"312":{"position":[[1003,4]]}}}],["994",{"_index":1220,"t":{"274":{"position":[[138,5]]}}}],["_",{"_index":1435,"t":{"298":{"position":[[279,3],[327,2],[732,3]]},"300":{"position":[[104,4]]},"306":{"position":[[168,4]]}}}],["__host",{"_index":1470,"t":{"302":{"position":[[1562,7]]}}}],["__secur",{"_index":1471,"t":{"302":{"position":[[1574,8]]}}}],["_oauth2_proxi",{"_index":835,"t":{"244":{"position":[[338,14]]},"302":{"position":[[1612,15]]}}}],["_oauth2_proxy_1",{"_index":1688,"t":{"316":{"position":[[3951,18]]}}}],["aad",{"_index":1084,"t":{"262":{"position":[[880,3]]}}}],["abov",{"_index":1164,"t":{"270":{"position":[[1233,5]]},"310":{"position":[[1542,5]]},"314":{"position":[[45,5]]}}}],["absent",{"_index":1500,"t":{"302":{"position":[[4409,6]]}}}],["accept",{"_index":31,"t":{"163":{"position":[[363,7]]},"232":{"position":[[139,11]]},"248":{"position":[[566,10]]},"252":{"position":[[1102,8]]},"256":{"position":[[26,8]]},"302":{"position":[[11440,8],[14435,11]]},"316":{"position":[[135,8]]},"320":{"position":[[166,8]]}}}],["acceptable.e.g",{"_index":713,"t":{"232":{"position":[[420,15]]}}}],["access",{"_index":345,"t":{"187":{"position":[[349,6]]},"192":{"position":[[101,6]]},"196":{"position":[[171,6]]},"202":{"position":[[346,6]]},"214":{"position":[[259,6]]},"222":{"position":[[2139,6],[2286,6]]},"244":{"position":[[1477,6],[1670,6],[1709,6],[1871,6],[2066,6],[2445,6],[2508,6]]},"254":{"position":[[214,9]]},"260":{"position":[[2285,7]]},"268":{"position":[[296,7],[924,6],[999,6],[1036,6],[1186,6],[1217,6],[1306,6]]},"270":{"position":[[138,6],[1173,6]]},"272":{"position":[[949,6],[2352,6],[2412,6],[2722,6],[3114,6],[3442,6],[3692,6],[7151,6]]},"280":{"position":[[2344,6],[2403,7],[2977,6]]},"282":{"position":[[305,7],[2650,6],[3170,10]]},"288":{"position":[[528,6],[638,6],[673,6]]},"302":{"position":[[3903,6],[4328,6],[4375,6],[7175,6],[7245,6],[7329,6],[8131,6],[9127,6],[11997,6],[12026,6],[15034,6]]},"316":{"position":[[1306,6],[1447,6]]},"322":{"position":[[2016,6],[2192,6]]}}}],["access_by_lua_block",{"_index":1681,"t":{"316":{"position":[[3399,19]]}}}],["access_token",{"_index":1525,"t":{"302":{"position":[[7204,12]]}}}],["accesstokenacceptedvers",{"_index":1090,"t":{"262":{"position":[[1104,29]]}}}],["accompani",{"_index":1131,"t":{"268":{"position":[[382,11]]}}}],["account",{"_index":502,"t":{"206":{"position":[[271,7]]},"260":{"position":[[981,7],[1095,7],[1828,7],[2927,7]]},"262":{"position":[[177,7]]},"272":{"position":[[3946,7]]},"280":{"position":[[1641,8],[3747,8]]},"282":{"position":[[260,8],[737,7]]},"288":{"position":[[204,7],[487,7]]},"302":{"position":[[4608,7],[4652,7],[4782,7]]}}}],["acr",{"_index":379,"t":{"187":{"position":[[1037,3]]},"302":{"position":[[34,3]]}}}],["activ",{"_index":1069,"t":{"262":{"position":[[65,6],[1349,6]]},"272":{"position":[[4394,10],[5193,9]]}}}],["actual",{"_index":1005,"t":{"254":{"position":[[1057,6]]},"262":{"position":[[851,8]]},"286":{"position":[[221,6]]},"288":{"position":[[124,6]]},"316":{"position":[[3721,6]]}}}],["ad",{"_index":45,"t":{"163":{"position":[[637,5]]},"185":{"position":[[7,6]]},"190":{"position":[[66,6]]},"208":{"position":[[79,5]]},"222":{"position":[[2230,2]]},"254":{"position":[[939,5]]},"258":{"position":[[294,2]]},"272":{"position":[[1902,5],[6881,5]]},"278":{"position":[[4,6],[49,2]]},"302":{"position":[[11327,2],[12042,5]]},"304":{"position":[[750,6]]}}}],["adc",{"_index":1050,"t":{"260":{"position":[[1615,5],[1884,3]]}}}],["add",{"_index":134,"t":{"167":{"position":[[226,3]]},"179":{"position":[[148,3]]},"181":{"position":[[432,3]]},"262":{"position":[[0,3],[430,3],[532,3],[662,3],[1222,3],[1284,4]]},"264":{"position":[[64,3]]},"272":{"position":[[3414,3],[3435,3],[3579,3],[6355,3],[6589,3]]},"274":{"position":[[223,3],[431,3],[1312,3]]},"278":{"position":[[74,3]]},"280":{"position":[[605,3],[1296,4],[1989,3],[2336,3],[2567,3]]},"288":{"position":[[0,3]]},"294":{"position":[[80,3]]},"298":{"position":[[332,3]]},"302":{"position":[[7305,4],[16237,3]]}}}],["add_head",{"_index":945,"t":{"250":{"position":[[888,10]]},"316":{"position":[[1608,10],[2496,10],[2539,10]]}}}],["addedto",{"_index":419,"t":{"192":{"position":[[667,7],[902,7]]}}}],["addit",{"_index":637,"t":{"220":{"position":[[1553,10],[1614,8]]},"268":{"position":[[206,10],[775,8]]},"272":{"position":[[3181,10],[3260,8]]},"280":{"position":[[2066,10]]},"288":{"position":[[559,10]]},"302":{"position":[[7103,10]]},"316":{"position":[[1968,10]]}}}],["addition",{"_index":848,"t":{"244":{"position":[[851,12]]},"302":{"position":[[4847,12]]}}}],["address",{"_index":561,"t":{"218":{"position":[[496,9]]},"220":{"position":[[230,7]]},"230":{"position":[[146,7],[268,7]]},"252":{"position":[[568,7],[599,8]]},"260":{"position":[[2343,7]]},"272":{"position":[[3755,7]]},"292":{"position":[[95,9],[199,9]]},"302":{"position":[[5056,7],[5180,8],[5237,7],[5346,8],[6354,7],[7669,7],[8856,7],[8875,7],[15588,8],[15681,7]]},"310":{"position":[[81,7],[875,8]]},"312":{"position":[[730,8]]},"320":{"position":[[1150,8]]},"322":{"position":[[1917,8],[2082,8]]}}}],["address=\"0.0.0.0:4180",{"_index":929,"t":{"250":{"position":[[312,22]]}}}],["address=\"http://:4180",{"_index":930,"t":{"250":{"position":[[345,23]]}}}],["adf",{"_index":652,"t":{"222":{"position":[[739,4],[2237,4]]},"224":{"position":[[128,5]]},"258":{"position":[[232,4]]},"264":{"position":[[9,4],[445,4]]}}}],["adfsconfig",{"_index":650,"t":{"222":{"position":[[676,10],[699,10]]}}}],["adfsopt",{"_index":651,"t":{"222":{"position":[[687,11]]}}}],["admin",{"_index":497,"t":{"206":{"position":[[164,5]]},"260":{"position":[[1337,5],[2275,5],[2395,5],[2481,5]]},"262":{"position":[[696,5],[729,5],[801,8],[940,5]]},"270":{"position":[[1482,5],[1548,7]]},"272":{"position":[[696,5],[744,5],[792,5],[889,5],[1368,5]]},"284":{"position":[[574,6],[612,6]]},"302":{"position":[[4425,5],[4455,5]]}}}],["admin2",{"_index":1188,"t":{"272":{"position":[[1492,6]]}}}],["admin@example.com",{"_index":216,"t":{"173":{"position":[[1359,17]]}}}],["adminemail",{"_index":496,"t":{"206":{"position":[[121,10],[139,10]]}}}],["administr",{"_index":1058,"t":{"260":{"position":[[2322,14]]},"264":{"position":[[14,14]]},"280":{"position":[[1626,14]]}}}],["advis",{"_index":880,"t":{"244":{"position":[[2377,7]]}}}],["advisori",{"_index":263,"t":{"179":{"position":[[23,10],[182,8],[411,9]]}}}],["ae",{"_index":1447,"t":{"298":{"position":[[640,3]]}}}],["affect",{"_index":259,"t":{"177":{"position":[[688,8]]}}}],["afterward",{"_index":991,"t":{"254":{"position":[[334,10]]}}}],["ag",{"_index":1516,"t":{"302":{"position":[[5667,3]]},"308":{"position":[[237,3],[256,5]]}}}],["again",{"_index":989,"t":{"254":{"position":[[240,6]]}}}],["against",{"_index":90,"t":{"165":{"position":[[528,7]]},"220":{"position":[[1433,7]]},"260":{"position":[[2731,7],[2994,7]]},"272":{"position":[[1811,7]]},"274":{"position":[[35,7]]},"280":{"position":[[163,7]]},"284":{"position":[[50,7]]},"302":{"position":[[455,7],[4873,7]]}}}],["age=2592000",{"_index":947,"t":{"250":{"position":[[929,12]]}}}],["agenc",{"_index":1320,"t":{"282":{"position":[[80,7],[718,6]]}}}],["agent",{"_index":964,"t":{"252":{"position":[[263,6]]},"302":{"position":[[8663,5],[8683,5],[8751,6]]},"308":{"position":[[753,6]]},"310":{"position":[[1372,5]]},"312":{"position":[[1444,5]]}}}],["agre",{"_index":275,"t":{"179":{"position":[[441,6]]}}}],["agreement",{"_index":1242,"t":{"276":{"position":[[124,9]]}}}],["ajax",{"_index":28,"t":{"163":{"position":[[335,4]]}}}],["algorithm:secretkey",{"_index":1541,"t":{"302":{"position":[[12514,21]]}}}],["alia",{"_index":472,"t":{"200":{"position":[[8,7]]},"224":{"position":[[8,7]]},"226":{"position":[[12,7]]}}}],["allow",{"_index":14,"t":{"163":{"position":[[143,8]]},"173":{"position":[[1033,6]]},"187":{"position":[[1087,7],[1116,7]]},"192":{"position":[[85,6]]},"198":{"position":[[38,6]]},"202":{"position":[[392,6]]},"216":{"position":[[295,7],[459,7],[609,7]]},"218":{"position":[[599,6],[724,7],[1291,5],[1327,5],[1477,5]]},"220":{"position":[[868,6],[1389,6]]},"236":{"position":[[788,6],[1613,5]]},"238":{"position":[[188,8]]},"240":{"position":[[9,5]]},"256":{"position":[[192,7],[254,7],[316,7]]},"268":{"position":[[473,7],[1180,5],[1473,5],[1628,5]]},"270":{"position":[[1090,7]]},"272":{"position":[[414,7],[480,7],[560,7],[4066,7],[4084,7],[4377,8],[4843,7],[4928,7],[5185,7],[5227,8],[5541,7],[6129,7],[6647,7],[6681,5]]},"280":{"position":[[2784,7],[4106,8]]},"282":{"position":[[2350,5]]},"284":{"position":[[23,6]]},"288":{"position":[[456,6]]},"294":{"position":[[117,5]]},"302":{"position":[[3960,5],[6303,5],[6445,5],[7134,7],[11453,6],[14769,7],[14870,7],[15135,7],[15223,5],[15336,5],[15967,5],[16069,8],[16097,8],[16209,5],[16292,5]]},"316":{"position":[[33,6]]},"320":{"position":[[38,6]]}}}],["allowed.e.g",{"_index":719,"t":{"232":{"position":[[553,13]]}}}],["allowed_email",{"_index":1012,"t":{"256":{"position":[[276,15]]}}}],["allowed_email_domain",{"_index":1011,"t":{"256":{"position":[[207,22]]}}}],["allowed_group",{"_index":1008,"t":{"256":{"position":[[152,15]]}}}],["allowedgroup",{"_index":686,"t":{"222":{"position":[[2371,13],[2394,13]]}}}],["allowedto",{"_index":639,"t":{"220":{"position":[[1583,9]]}}}],["alpha",{"_index":291,"t":{"181":{"position":[[44,5],[297,5],[353,5],[665,5]]},"183":{"position":[[15,5],[153,5],[194,5]]},"185":{"position":[[24,5],[92,5],[189,5],[510,5]]},"187":{"position":[[106,5],[1408,5],[1524,5]]},"192":{"position":[[22,5],[108,5],[267,6]]}}}],["alphaopt",{"_index":315,"t":{"181":{"position":[[607,12]]},"192":{"position":[[0,12]]},"208":{"position":[[13,13]]},"226":{"position":[[33,13]]},"230":{"position":[[13,13]]},"238":{"position":[[13,13]]}}}],["alreadi",{"_index":863,"t":{"244":{"position":[[1579,7],[1758,7]]}}}],["altern",{"_index":581,"t":{"218":{"position":[[927,13]]},"254":{"position":[[523,14]]},"286":{"position":[[496,14]]}}}],["alway",{"_index":546,"t":{"216":{"position":[[532,6]]},"248":{"position":[[745,6]]}}}],["amazon",{"_index":921,"t":{"250":{"position":[[61,6],[255,6]]}}}],["amd64",{"_index":72,"t":{"165":{"position":[[256,7],[352,7],[690,6]]}}}],["amount",{"_index":1555,"t":{"302":{"position":[[14694,6]]}}}],["anchor",{"_index":735,"t":{"234":{"position":[[625,6]]}}}],["and/or",{"_index":572,"t":{"218":{"position":[[732,6]]}}}],["announc",{"_index":1181,"t":{"272":{"position":[[815,9]]}}}],["anoth",{"_index":429,"t":{"192":{"position":[[1037,7]]},"258":{"position":[[82,7]]},"260":{"position":[[176,7]]}}}],["anyth",{"_index":547,"t":{"216":{"position":[[551,8]]}}}],["apach",{"_index":1592,"t":{"308":{"position":[[668,6]]}}}],["api",{"_index":499,"t":{"206":{"position":[[189,3]]},"260":{"position":[[250,5],[1300,5],[1322,5],[1363,4],[2281,3]]},"262":{"position":[[490,3]]},"274":{"position":[[78,3]]},"276":{"position":[[368,3]]},"280":{"position":[[1979,3]]},"302":{"position":[[76,3],[4480,3]]}}}],["api/v1",{"_index":1413,"t":{"290":{"position":[[635,9]]}}}],["app",{"_index":979,"t":{"252":{"position":[[923,3]]},"262":{"position":[[90,3],[294,3],[465,3],[518,4],[1143,3],[1217,4]]},"266":{"position":[[16,3]]},"280":{"position":[[2215,5],[2701,4],[3925,3]]},"282":{"position":[[1334,3]]}}}],["appear",{"_index":400,"t":{"190":{"position":[[0,8]]},"194":{"position":[[0,8]]},"196":{"position":[[0,8]]},"198":{"position":[[0,8]]},"200":{"position":[[16,8]]},"202":{"position":[[0,8]]},"204":{"position":[[0,8]]},"206":{"position":[[0,8]]},"208":{"position":[[0,8]]},"210":{"position":[[0,8]]},"212":{"position":[[0,8]]},"214":{"position":[[0,8]]},"216":{"position":[[0,8]]},"220":{"position":[[0,8]]},"222":{"position":[[0,8]]},"224":{"position":[[16,8]]},"226":{"position":[[20,8]]},"228":{"position":[[0,8]]},"230":{"position":[[0,8]]},"232":{"position":[[0,8]]},"234":{"position":[[0,8]]},"236":{"position":[[0,8]]},"238":{"position":[[0,8]]}}}],["append",{"_index":1105,"t":{"262":{"position":[[2101,6]]},"316":{"position":[[2149,6]]}}}],["appli",{"_index":519,"t":{"208":{"position":[[428,7]]}}}],["applic",{"_index":105,"t":{"165":{"position":[[740,11]]},"167":{"position":[[415,11]]},"206":{"position":[[395,11]]},"250":{"position":[[532,12]]},"254":{"position":[[228,11]]},"258":{"position":[[35,11]]},"260":{"position":[[538,12],[551,11],[1150,11],[1583,11],[1716,11]]},"262":{"position":[[7,12],[586,11]]},"264":{"position":[[74,11],[142,11],[174,12],[282,11]]},"274":{"position":[[230,12],[343,11],[468,12],[724,11]]},"278":{"position":[[14,11],[81,12],[124,10]]},"280":{"position":[[1817,13],[1890,12],[2169,11],[2255,11],[2391,11],[2542,12],[2571,12],[2668,11],[2989,12],[3549,11],[3806,12],[3876,11]]},"282":{"position":[[467,11],[559,11],[779,11],[3018,11],[3109,11]]},"286":{"position":[[19,11],[108,12]]},"290":{"position":[[13,12]]},"302":{"position":[[4690,11],[4731,11],[9892,10]]}}}],["application.y",{"_index":433,"t":{"192":{"position":[[1268,15]]}}}],["application/json",{"_index":32,"t":{"163":{"position":[[371,17]]}}}],["approach",{"_index":911,"t":{"248":{"position":[[495,8]]}}}],["appropri",{"_index":893,"t":{"244":{"position":[[3001,14],[3204,14]]},"260":{"position":[[598,11]]},"268":{"position":[[1750,11]]},"270":{"position":[[421,11]]},"272":{"position":[[2245,11]]},"274":{"position":[[1107,11]]}}}],["approv",{"_index":377,"t":{"187":{"position":[[1005,8]]},"262":{"position":[[946,11]]},"302":{"position":[[208,8],[8188,8]]}}}],["approval_prompt",{"_index":1460,"t":{"302":{"position":[[237,15]]}}}],["apps/oauth2",{"_index":1384,"t":{"284":{"position":[[351,15]]}}}],["archiv",{"_index":159,"t":{"169":{"position":[[138,8]]}}}],["aren't",{"_index":1537,"t":{"302":{"position":[[11661,6]]}}}],["arg",{"_index":187,"t":{"173":{"position":[[283,7],[601,7]]},"280":{"position":[[949,5]]}}}],["argument",{"_index":1381,"t":{"284":{"position":[[218,9]]},"300":{"position":[[19,8],[116,8]]},"306":{"position":[[19,8],[180,8]]}}}],["arm64",{"_index":76,"t":{"165":{"position":[[291,5],[387,5]]}}}],["armv6",{"_index":74,"t":{"165":{"position":[[273,6],[369,6]]}}}],["armv7",{"_index":75,"t":{"165":{"position":[[280,6],[376,6]]}}}],["around",{"_index":569,"t":{"218":{"position":[[688,6]]}}}],["ask",{"_index":23,"t":{"163":{"position":[[256,5]]}}}],["assembl",{"_index":1440,"t":{"298":{"position":[[347,8]]}}}],["assemblynam",{"_index":1442,"t":{"298":{"position":[[390,12]]}}}],["assign",{"_index":1060,"t":{"260":{"position":[[2374,6]]},"272":{"position":[[2812,8],[4276,8],[4665,6],[4726,6],[4782,7],[5207,6],[5266,8]]},"280":{"position":[[2926,11],[4073,12]]}}}],["associ",{"_index":1206,"t":{"272":{"position":[[5369,10]]}}}],["assum",{"_index":1329,"t":{"282":{"position":[[526,6]]}}}],["attach",{"_index":1052,"t":{"260":{"position":[[1836,8]]},"272":{"position":[[6279,6],[6753,9]]}}}],["attacksbetweem",{"_index":778,"t":{"236":{"position":[[1647,14]]}}}],["attempt",{"_index":396,"t":{"187":{"position":[[1338,10]]},"302":{"position":[[300,8]]},"310":{"position":[[99,10],[1062,8]]}}}],["attent",{"_index":244,"t":{"177":{"position":[[294,9]]}}}],["attribut",{"_index":1350,"t":{"282":{"position":[[1446,9]]},"302":{"position":[[2018,9]]},"316":{"position":[[2101,10]]}}}],["aud",{"_index":635,"t":{"220":{"position":[[1465,3]]},"272":{"position":[[1689,3],[1721,3],[2968,4],[3327,5]]},"302":{"position":[[2912,3],[7061,5],[13295,3]]}}}],["audienc",{"_index":638,"t":{"220":{"position":[[1564,9]]},"272":{"position":[[1261,10],[1292,8],[1321,8],[1637,8],[1868,9],[2625,8],[2954,8],[3016,8],[3192,8],[3242,8],[3293,9]]},"280":{"position":[[2225,9]]},"302":{"position":[[7000,8],[7052,8],[7080,8],[7114,9]]}}}],["audienceclaim",{"_index":633,"t":{"220":{"position":[[1351,14],[1375,13]]}}}],["auth",{"_index":6,"t":{"163":{"position":[[65,4]]},"187":{"position":[[630,4],[669,4]]},"198":{"position":[[412,4],[470,4]]},"210":{"position":[[633,4],[691,4]]},"254":{"position":[[572,4],[633,4]]},"260":{"position":[[1019,4],[1308,6]]},"262":{"position":[[1057,4],[1328,4],[1626,4],[1964,4],[2303,4]]},"264":{"position":[[450,4]]},"268":{"position":[[179,4]]},"270":{"position":[[65,4]]},"274":{"position":[[5,4]]},"302":{"position":[[263,4],[316,4],[598,4],[667,4],[7316,4],[7485,4],[7511,5],[7847,4],[11820,4],[11841,4],[11864,4],[11889,4],[12013,4],[12202,4],[12227,4],[12631,4],[12710,4],[12758,4],[12859,4],[13049,4]]},"308":{"position":[[519,4]]},"310":{"position":[[606,4],[790,4],[1057,4],[1473,4],[1524,4]]},"312":{"position":[[1545,4]]},"316":{"position":[[94,5],[477,4],[578,4]]},"320":{"position":[[437,4],[631,4],[912,4],[1131,5]]},"322":{"position":[[556,4],[841,4],[1111,4],[1317,4],[1670,4],[1889,4],[2003,4],[2051,4],[2179,4]]}}}],["auth/pass_basic_auth",{"_index":344,"t":{"187":{"position":[[323,20]]}}}],["auth/set_basic_auth",{"_index":350,"t":{"187":{"position":[[478,19]]}}}],["auth_cooki",{"_index":1653,"t":{"316":{"position":[[1568,12],[1630,13],[2252,13],[2305,13]]}}}],["auth_cookie_name_0",{"_index":1662,"t":{"316":{"position":[[2285,19],[2518,20]]}}}],["auth_cookie_name_1",{"_index":1663,"t":{"316":{"position":[[2323,19],[2561,20]]}}}],["auth_cookie_name_1=$auth_cookie_name_upstream_1$1",{"_index":1664,"t":{"316":{"position":[[2343,52]]}}}],["auth_cookie_name_upstream_1",{"_index":1659,"t":{"316":{"position":[[2014,28],[2463,30]]}}}],["auth_request",{"_index":984,"t":{"252":{"position":[[1175,12]]},"302":{"position":[[11955,12],[12165,12],[12273,12]]},"316":{"position":[[10,12],[804,12],[927,12],[1538,12],[1871,12]]}}}],["auth_request_set",{"_index":1649,"t":{"316":{"position":[[1098,16],[1157,16],[1360,16],[1551,16],[1997,16],[2857,16],[3340,16]]}}}],["authent",{"_index":19,"t":{"163":{"position":[[200,14],[294,14],[458,14],[657,14]]},"192":{"position":[[444,14],[746,13],[1134,13]]},"222":{"position":[[1871,14]]},"236":{"position":[[1833,15]]},"240":{"position":[[24,14]]},"242":{"position":[[802,12]]},"250":{"position":[[494,12]]},"252":{"position":[[109,14]]},"254":{"position":[[154,14],[294,14]]},"260":{"position":[[3036,14]]},"268":{"position":[[234,14]]},"272":{"position":[[2280,14],[2300,14]]},"282":{"position":[[2935,13]]},"284":{"position":[[37,12]]},"288":{"position":[[498,13]]},"292":{"position":[[111,13]]},"302":{"position":[[142,14],[285,14],[356,14],[409,13],[442,12],[2581,12],[2667,12],[4860,12],[6263,14],[7793,15],[12661,14],[12777,14],[12891,14],[13100,14],[15173,15],[15352,14]]},"304":{"position":[[291,13]]},"308":{"position":[[419,15]]},"310":{"position":[[0,14],[113,13],[365,13],[440,12],[514,14],[1013,13]]},"316":{"position":[[49,12]]},"320":{"position":[[56,12]]},"322":{"position":[[273,13]]}}}],["authenticationprovid",{"_index":427,"t":{"192":{"position":[[994,22]]}}}],["autherror",{"_index":1605,"t":{"310":{"position":[[464,9]]}}}],["authfailur",{"_index":1603,"t":{"310":{"position":[[406,11]]}}}],["author",{"_index":348,"t":{"187":{"position":[[421,13],[536,13]]},"244":{"position":[[1292,13]]},"260":{"position":[[610,10],[692,10],[998,11]]},"268":{"position":[[67,13]]},"270":{"position":[[1031,14]]},"272":{"position":[[3817,13],[3857,13],[3903,13],[4820,10],[5471,13],[5723,9]]},"278":{"position":[[211,13]]},"280":{"position":[[1757,13],[1860,13],[1993,13],[2098,13],[2508,13],[2807,13],[3414,13],[4115,13],[4256,13]]},"282":{"position":[[3369,14]]},"292":{"position":[[3,9],[68,9],[179,9]]},"302":{"position":[[7378,13],[7438,13],[12081,13],[12111,13],[13125,13]]},"316":{"position":[[1667,13]]},"322":{"position":[[2031,13],[2207,13]]}}}],["authorizationnginx.ingress.kubernetes.io/auth",{"_index":1675,"t":{"316":{"position":[[3120,45]]}}}],["authresponsehead",{"_index":1727,"t":{"322":{"position":[[1978,20],[2154,20]]}}}],["authsuccess",{"_index":1601,"t":{"310":{"position":[[339,11],[1494,11]]}}}],["auto",{"_index":184,"t":{"173":{"position":[[242,7],[560,7]]},"322":{"position":[[776,4]]}}}],["automat",{"_index":988,"t":{"254":{"position":[[186,13]]},"260":{"position":[[1798,13]]}}}],["automaticallyanchor",{"_index":731,"t":{"234":{"position":[[510,21]]}}}],["avail",{"_index":77,"t":{"165":{"position":[[297,10],[393,10]]},"183":{"position":[[240,10]]},"187":{"position":[[85,9]]},"192":{"position":[[136,9]]},"212":{"position":[[195,9]]},"240":{"position":[[198,9],[249,9]]},"244":{"position":[[1822,10],[2024,10],[3033,9]]},"280":{"position":[[2037,9]]},"282":{"position":[[334,9]]},"304":{"position":[[737,9],[871,9],[950,9]]},"310":{"position":[[766,9]]},"312":{"position":[[618,9]]},"314":{"position":[[490,9]]}}}],["azur",{"_index":392,"t":{"187":{"position":[[1284,6]]},"222":{"position":[[660,5],[2223,6]]},"224":{"position":[[134,6]]},"258":{"position":[[226,5],[288,5]]},"262":{"position":[[59,5],[1051,5],[1322,5],[1342,6],[1533,5],[1620,5],[1841,5],[1958,5],[2297,5]]},"278":{"position":[[43,5]]},"302":{"position":[[496,5],[6523,5],[11320,6]]},"316":{"position":[[3676,7]]}}}],["azureconfig",{"_index":648,"t":{"222":{"position":[[594,11],[619,11]]}}}],["azureopt",{"_index":649,"t":{"222":{"position":[[606,12]]}}}],["b",{"_index":60,"t":{"165":{"position":[[77,2]]},"302":{"position":[[4937,1]]},"322":{"position":[[463,2],[1044,2],[1517,1]]}}}],["back",{"_index":144,"t":{"167":{"position":[[338,4]]},"244":{"position":[[100,4],[172,4]]}}}],["backend",{"_index":811,"t":{"240":{"position":[[224,9],[259,8]]},"242":{"position":[[19,7],[42,7],[141,8],[366,7]]},"244":{"position":[[18,7],[2196,7],[2233,7],[2298,7],[2345,9],[3053,7]]},"302":{"position":[[11758,8]]},"316":{"position":[[1041,8],[1352,7]]},"320":{"position":[[393,7],[659,7],[769,8],[837,8],[1279,7]]},"322":{"position":[[527,7],[812,7],[1139,7],[1345,7],[1455,8],[1527,8],[1595,8]]}}}],["backport",{"_index":285,"t":{"179":{"position":[[632,8]]}}}],["backslash",{"_index":580,"t":{"218":{"position":[[872,9]]}}}],["backup",{"_index":1514,"t":{"302":{"position":[[5603,6],[5738,7]]},"308":{"position":[[266,6],[293,9],[310,6]]}}}],["balanc",{"_index":925,"t":{"250":{"position":[[100,10],[241,8],[290,10]]}}}],["banner",{"_index":1496,"t":{"302":{"position":[[3384,6],[3412,6],[3454,7]]}}}],["bar",{"_index":748,"t":{"236":{"position":[[603,8],[641,5]]}}}],["base",{"_index":311,"t":{"181":{"position":[[505,5]]},"183":{"position":[[57,5]]},"192":{"position":[[523,5]]},"236":{"position":[[1386,7]]},"270":{"position":[[1025,5]]},"280":{"position":[[3391,5],[3929,4]]},"302":{"position":[[14640,5]]},"304":{"position":[[1243,5]]}}}],["base/dir",{"_index":773,"t":{"236":{"position":[[1467,12]]}}}],["base64",{"_index":526,"t":{"210":{"position":[[168,6]]},"228":{"position":[[213,6]]},"298":{"position":[[241,6],[302,6],[586,6]]},"302":{"position":[[1895,6]]}}}],["base64url",{"_index":840,"t":{"244":{"position":[[457,9]]}}}],["bash",{"_index":1423,"t":{"298":{"position":[[73,4]]}}}],["basic",{"_index":343,"t":{"187":{"position":[[317,5],[472,5],[624,5]]},"198":{"position":[[406,5],[464,5]]},"210":{"position":[[627,5],[685,5]]},"302":{"position":[[592,5],[661,5],[7479,5],[7505,5],[7841,5],[8623,5],[8710,5],[12196,5],[12221,5]]}}}],["basicauthpassword",{"_index":467,"t":{"198":{"position":[[330,17],[361,17]]},"210":{"position":[[551,17],[582,17]]}}}],["baz",{"_index":749,"t":{"236":{"position":[[648,12],[690,4],[957,11]]}}}],["baz/abc/123",{"_index":759,"t":{"236":{"position":[[1021,12]]}}}],["bcrypt",{"_index":1501,"t":{"302":{"position":[[4943,6]]}}}],["bearer",{"_index":18,"t":{"163":{"position":[[181,6]]},"302":{"position":[[2834,6],[7452,6],[12125,6],[13199,6],[13260,6]]}}}],["becom",{"_index":470,"t":{"198":{"position":[[453,6]]},"210":{"position":[[674,6]]},"302":{"position":[[1314,7]]},"306":{"position":[[417,7],[481,7]]}}}],["befor",{"_index":195,"t":{"173":{"position":[[804,6]]},"181":{"position":[[282,6]]},"185":{"position":[[0,6]]},"187":{"position":[[1488,6]]},"236":{"position":[[829,6],[1050,6]]},"302":{"position":[[5873,6]]}}}],["beforward",{"_index":592,"t":{"218":{"position":[[1494,11]]}}}],["behind",{"_index":114,"t":{"165":{"position":[[881,6]]},"302":{"position":[[11372,6]]}}}],["believ",{"_index":234,"t":{"177":{"position":[[12,7]]}}}],["beload",{"_index":461,"t":{"198":{"position":[[204,8]]},"210":{"position":[[425,8]]}}}],["belong",{"_index":494,"t":{"202":{"position":[[454,6]]},"268":{"position":[[510,6],[1535,6]]},"302":{"position":[[4013,6]]}}}],["below",{"_index":313,"t":{"181":{"position":[[541,5],[728,6],[863,5]]},"183":{"position":[[104,6],[271,5]]},"250":{"position":[[53,7]]},"280":{"position":[[345,6]]},"298":{"position":[[50,5]]},"302":{"position":[[16334,5]]},"310":{"position":[[167,5],[324,5]]},"312":{"position":[[48,5]]},"314":{"position":[[237,6]]}}}],["beoverridden",{"_index":590,"t":{"218":{"position":[[1384,12]]}}}],["bepass",{"_index":588,"t":{"218":{"position":[[1252,8]]}}}],["best",{"_index":1189,"t":{"272":{"position":[[1521,4]]}}}],["between",{"_index":413,"t":{"192":{"position":[[290,7]]},"236":{"position":[[2135,7]]},"240":{"position":[[53,7]]},"302":{"position":[[3180,7]]}}}],["bewar",{"_index":304,"t":{"181":{"position":[[267,6]]},"254":{"position":[[838,6]]}}}],["big",{"_index":852,"t":{"244":{"position":[[970,4]]}}}],["bin/dex",{"_index":1265,"t":{"280":{"position":[[848,7]]}}}],["binari",{"_index":56,"t":{"165":{"position":[[42,6],[199,6],[462,8]]}}}],["bindaddress",{"_index":436,"t":{"192":{"position":[[1377,11],[1685,11]]},"230":{"position":[[108,11],[127,11]]}}}],["bit",{"_index":838,"t":{"244":{"position":[[387,3],[438,3]]},"282":{"position":[[823,4],[1057,3]]}}}],["bitbucket",{"_index":393,"t":{"187":{"position":[[1291,10]]},"222":{"position":[[832,9]]},"224":{"position":[[141,10]]},"258":{"position":[[345,9]]},"288":{"position":[[477,9],[594,9],[713,9]]}}}],["bitbucketconfig",{"_index":653,"t":{"222":{"position":[[754,15],[787,15]]}}}],["bitbucketopt",{"_index":654,"t":{"222":{"position":[[770,16]]}}}],["blank",{"_index":701,"t":{"230":{"position":[[186,5],[315,5]]}}}],["block",{"_index":583,"t":{"218":{"position":[[958,6],[1040,5]]},"280":{"position":[[625,5]]},"310":{"position":[[294,5]]}}}],["bodi",{"_index":782,"t":{"236":{"position":[[1825,4]]},"316":{"position":[[842,4]]}}}],["bool",{"_index":404,"t":{"190":{"position":[[56,4]]},"206":{"position":[[329,4]]},"208":{"position":[[281,4]]},"220":{"position":[[166,4],[322,4],[501,4],[849,4]]},"236":{"position":[[1502,4],[1725,4],[2250,4],[2387,4]]},"238":{"position":[[131,4]]},"302":{"position":[[276,4],[1412,4],[1927,4],[2091,4],[2471,4],[2711,4],[3258,4],[3312,4],[4722,4],[5404,4],[5566,4],[6326,4],[6440,4],[6590,4],[7188,4],[7399,4],[7490,4],[7640,4],[7901,4],[7972,4],[9059,4],[9794,4],[10427,4],[10546,4],[11159,4],[11352,4],[11602,4],[11809,4],[12102,4],[12207,4],[12320,4],[12559,4],[12646,4],[13068,4],[13213,4],[13400,4],[13544,4],[13650,4],[13766,4],[13865,4]]}}}],["boolean",{"_index":506,"t":{"206":{"position":[[372,7]]}}}],["both",{"_index":215,"t":{"173":{"position":[[1351,4]]},"192":{"position":[[1302,4],[1610,4]]},"234":{"position":[[291,5]]},"272":{"position":[[3105,4]]},"316":{"position":[[2405,4]]}}}],["bracket",{"_index":1505,"t":{"302":{"position":[[5149,8],[5315,8]]}}}],["branch",{"_index":142,"t":{"167":{"position":[[317,6]]},"171":{"position":[[34,6],[152,6]]}}}],["break",{"_index":295,"t":{"181":{"position":[[89,8]]}}}],["brief",{"_index":1210,"t":{"272":{"position":[[5574,5]]}}}],["bring",{"_index":243,"t":{"177":{"position":[[281,5]]}}}],["brows",{"_index":321,"t":{"181":{"position":[[842,6]]}}}],["browser",{"_index":849,"t":{"244":{"position":[[868,7],[1358,8]]},"282":{"position":[[2922,8]]},"302":{"position":[[1366,7],[16186,8]]}}}],["browserxssfilt",{"_index":1707,"t":{"320":{"position":[[975,17]]},"322":{"position":[[1733,17]]}}}],["bs=32",{"_index":1430,"t":{"298":{"position":[[213,5]]}}}],["buffer",{"_index":790,"t":{"236":{"position":[[2165,6]]},"302":{"position":[[3206,7]]}}}],["bug",{"_index":118,"t":{"167":{"position":[[9,4],[53,4],[221,4],[377,3]]}}}],["build",{"_index":451,"t":{"194":{"position":[[243,8]]},"248":{"position":[[962,8]]},"282":{"position":[[2563,6],[2581,5]]}}}],["built",{"_index":1252,"t":{"280":{"position":[[157,5]]}}}],["bundl",{"_index":1351,"t":{"282":{"position":[[1456,7]]}}}],["button",{"_index":1549,"t":{"302":{"position":[[13537,6]]}}}],["button=tru",{"_index":1359,"t":{"282":{"position":[[1902,11]]}}}],["bypass",{"_index":1545,"t":{"302":{"position":[[12770,6],[12884,6],[13405,6],[15345,6]]}}}],["bysom",{"_index":729,"t":{"234":{"position":[[457,6]]}}}],["byte",{"_index":524,"t":{"210":{"position":[[145,6]]},"228":{"position":[[190,6]]},"298":{"position":[[581,4],[633,6]]},"312":{"position":[[1215,5]]}}}],["c",{"_index":69,"t":{"165":{"position":[[223,2],[635,1]]},"298":{"position":[[115,1]]}}}],["c=us/st=washington/l=dc/o=gsa/ou=18f/cn=localhost",{"_index":1347,"t":{"282":{"position":[[1193,53]]}}}],["ca",{"_index":365,"t":{"187":{"position":[[865,2]]},"222":{"position":[[1707,2]]},"302":{"position":[[8269,2],[8300,2]]}}}],["cafil",{"_index":676,"t":{"222":{"position":[[1660,7],[1677,7]]}}}],["call",{"_index":500,"t":{"206":{"position":[[193,5]]},"260":{"position":[[1923,6],[2468,5]]},"302":{"position":[[4484,5]]}}}],["callback",{"_index":980,"t":{"252":{"position":[[963,8]]},"268":{"position":[[81,8]]},"280":{"position":[[594,10]]},"286":{"position":[[121,8]]},"288":{"position":[[28,9]]}}}],["caller",{"_index":549,"t":{"216":{"position":[[705,6]]}}}],["capitalis",{"_index":1585,"t":{"306":{"position":[[108,12]]}}}],["captur",{"_index":744,"t":{"236":{"position":[[507,8],[699,7],[885,7]]}}}],["case",{"_index":33,"t":{"163":{"position":[[398,4]]},"177":{"position":[[533,4]]},"236":{"position":[[1214,4]]},"244":{"position":[[2841,5]]},"282":{"position":[[3451,5]]},"284":{"position":[[839,5]]},"294":{"position":[[90,4]]},"302":{"position":[[13510,4]]}}}],["caseadd",{"_index":1441,"t":{"298":{"position":[[376,7]]}}}],["caveat",{"_index":871,"t":{"244":{"position":[[2035,7]]}}}],["center",{"_index":1022,"t":{"260":{"position":[[230,6],[318,6],[425,6]]}}}],["cert",{"_index":711,"t":{"232":{"position":[[260,4],[278,4]]},"248":{"position":[[65,4],[306,4]]},"302":{"position":[[14005,4]]}}}],["cert.pem",{"_index":1342,"t":{"282":{"position":[[1160,8]]}}}],["certif",{"_index":440,"t":{"192":{"position":[[1480,11],[1788,11]]},"222":{"position":[[1710,12]]},"230":{"position":[[400,11]]},"232":{"position":[[68,11],[294,11]]},"262":{"position":[[1182,12]]},"282":{"position":[[1008,11]]},"302":{"position":[[8303,12],[13674,12],[13790,12],[14030,11]]}}}],["certresolv",{"_index":1696,"t":{"320":{"position":[[447,13],[672,13]]},"322":{"position":[[624,13],[907,13],[1152,13],[1358,13]]}}}],["challeng",{"_index":688,"t":{"222":{"position":[[2500,9]]},"272":{"position":[[636,9]]},"302":{"position":[[876,9],[914,10]]}}}],["chang",{"_index":296,"t":{"181":{"position":[[98,7],[202,8]]},"192":{"position":[[283,6]]},"220":{"position":[[783,6]]},"252":{"position":[[150,7]]},"274":{"position":[[82,8]]},"286":{"position":[[651,6]]},"302":{"position":[[1531,7]]}}}],["channel",{"_index":1485,"t":{"302":{"position":[[2761,7]]}}}],["charact",{"_index":571,"t":{"218":{"position":[[709,10],[916,10],[1076,10]]}}}],["check",{"_index":8,"t":{"163":{"position":[[80,7]]},"234":{"position":[[134,7]]},"252":{"position":[[391,6]]},"260":{"position":[[2723,7],[2986,7]]},"262":{"position":[[157,5]]},"272":{"position":[[6852,5]]},"302":{"position":[[8636,6],[8723,6],[8740,5],[8830,6]]}}}],["checkbox",{"_index":131,"t":{"167":{"position":[[188,11]]}}}],["checkedaft",{"_index":615,"t":{"220":{"position":[[655,12]]}}}],["checksum",{"_index":92,"t":{"165":{"position":[[554,8]]}}}],["chomp",{"_index":582,"t":{"218":{"position":[[949,8]]}}}],["choos",{"_index":53,"t":{"165":{"position":[[0,6]]},"192":{"position":[[1288,6],[1596,6]]},"260":{"position":[[108,6],[243,6],[290,6],[331,6],[438,6],[501,6],[526,6],[581,6],[805,6],[1315,6],[2303,6],[2559,6]]},"262":{"position":[[52,6]]},"272":{"position":[[6393,6]]}}}],["cidr",{"_index":1558,"t":{"302":{"position":[[15321,4]]}}}],["cipher",{"_index":717,"t":{"232":{"position":[[530,6],[663,6],[697,6]]},"248":{"position":[[797,6],[839,6],[1027,6]]},"302":{"position":[[14053,6],[14094,6],[14240,6],[14275,6]]}}}],["ciphersuit",{"_index":716,"t":{"232":{"position":[[478,12],[500,12]]}}}],["claim",{"_index":460,"t":{"198":{"position":[[75,5],[123,5],[136,5],[161,5],[393,5],[442,5]]},"210":{"position":[[344,5],[357,5],[382,5],[614,5],[663,5]]},"220":{"position":[[561,5],[1101,5],[1201,5],[1302,5],[1410,5],[1469,5]]},"258":{"position":[[477,7],[508,5]]},"270":{"position":[[361,5]]},"272":{"position":[[1207,5],[1693,5],[1725,5],[1891,6],[3333,5],[5911,5],[5982,5]]},"280":{"position":[[1782,6]]},"302":{"position":[[6636,5],[6851,5],[6875,5],[6929,5],[6953,5],[7009,5],[7033,5]]}}}],["claim/user_id_claim",{"_index":381,"t":{"187":{"position":[[1067,19]]}}}],["claimsourc",{"_index":458,"t":{"198":{"position":[[26,11]]},"228":{"position":[[13,12]]}}}],["clear",{"_index":975,"t":{"252":{"position":[[704,6],[759,5]]}}}],["click",{"_index":1044,"t":{"260":{"position":[[1328,5]]},"262":{"position":[[117,5],[398,5],[523,5],[616,5]]},"264":{"position":[[199,5]]},"272":{"position":[[2261,5],[2759,8],[2914,5],[3550,8]]},"280":{"position":[[1983,5],[2647,5]]}}}],["client",{"_index":358,"t":{"187":{"position":[[712,6],[732,6],[765,6]]},"220":{"position":[[1445,6],[1630,6]]},"222":{"position":[[140,6],[269,6],[441,6]]},"242":{"position":[[187,6],[340,6],[481,6]]},"244":{"position":[[109,6]]},"248":{"position":[[435,6],[453,6]]},"250":{"position":[[1424,6],[1442,6]]},"260":{"position":[[515,6],[838,6],[852,6],[1265,6],[1527,6],[2453,6]]},"262":{"position":[[1232,6],[1456,6],[1497,6],[1764,6],[1805,6]]},"264":{"position":[[239,6],[250,6],[349,6],[390,6]]},"270":{"position":[[103,6],[292,6],[460,6],[498,6]]},"272":{"position":[[27,6],[58,6],[546,6],[616,6],[914,6],[977,6],[1138,6],[1285,6],[1342,6],[1462,6],[1603,6],[1842,6],[1981,7],[2020,6],[2049,6],[2074,6],[2139,6],[2146,6],[2175,6],[2273,6],[2650,6],[2674,7],[2707,6],[2821,6],[2905,8],[3009,6],[3286,6],[3517,6],[4011,6],[4189,6],[4226,6],[4345,6],[4549,6],[4573,7],[4638,7],[4760,7],[4888,7],[5051,6],[5076,7],[5109,6],[5617,6],[5806,6],[6236,6],[6297,7],[6305,7],[6338,6],[6359,6],[6435,6],[6982,7],[7015,6]]},"274":{"position":[[748,6],[777,6]]},"280":{"position":[[1011,6],[1034,6],[2891,6],[2905,6],[4169,6],[4183,6]]},"282":{"position":[[1587,6],[3565,6],[3589,6]]},"284":{"position":[[414,6],[428,6],[548,6],[582,6]]},"286":{"position":[[338,6],[352,6],[442,6],[466,6]]},"288":{"position":[[275,6],[289,6],[376,6],[400,6]]},"290":{"position":[[175,6],[189,6],[355,6],[405,6]]},"302":{"position":[[681,6],[708,6],[762,6],[793,6],[809,6],[855,6],[5133,8],[5299,8],[9173,6],[9241,7],[13317,6],[15455,6]]},"310":{"position":[[677,11],[833,6],[1408,7]]},"312":{"position":[[413,11],[688,6],[1480,7]]},"322":{"position":[[2276,6],[2307,6]]}}}],["client'",{"_index":1152,"t":{"270":{"position":[[518,8]]},"272":{"position":[[43,8],[78,8],[1668,8],[2191,8],[2585,8],[2691,8],[2774,8],[2986,8],[3038,8],[4590,8],[4947,8],[5093,8],[5132,8],[6322,8],[6999,8]]}}}],["client/remot",{"_index":1610,"t":{"310":{"position":[[858,13]]},"312":{"position":[[713,13]]}}}],["client_id",{"_index":1294,"t":{"280":{"position":[[3499,9],[4564,13]]},"290":{"position":[[368,9]]}}}],["client_secret",{"_index":1295,"t":{"280":{"position":[[3513,13]]},"290":{"position":[[422,13]]}}}],["client_session_idl",{"_index":888,"t":{"244":{"position":[[2592,20]]}}}],["clientid",{"_index":641,"t":{"222":{"position":[[102,8],[118,8]]}}}],["clientsecret",{"_index":643,"t":{"222":{"position":[[223,12],[243,12],[475,12]]}}}],["clientsecretfil",{"_index":644,"t":{"222":{"position":[[356,16],[380,16]]}}}],["clone",{"_index":161,"t":{"171":{"position":[[0,5],[88,5]]}}}],["close",{"_index":1467,"t":{"302":{"position":[[1377,7]]}}}],["closest",{"_index":739,"t":{"236":{"position":[[364,7]]}}}],["cloud",{"_index":923,"t":{"250":{"position":[[80,5]]},"282":{"position":[[2259,5]]}}}],["cloud/dock",{"_index":1363,"t":{"282":{"position":[[2179,12]]}}}],["cluster",{"_index":894,"t":{"244":{"position":[[3022,7],[3180,7]]},"302":{"position":[[9509,7],[9561,7],[9650,7],[10419,7],[10449,8],[10475,7]]}}}],["cluster=tru",{"_index":897,"t":{"244":{"position":[[3129,12],[3277,12]]}}}],["code",{"_index":152,"t":{"167":{"position":[[458,4],[502,4]]},"222":{"position":[[2495,4]]},"236":{"position":[[2005,4]]},"272":{"position":[[631,4]]},"280":{"position":[[2821,4],[4129,4]]},"302":{"position":[[871,4],[909,4]]},"312":{"position":[[1269,4]]}}}],["code_challenge_method",{"_index":687,"t":{"222":{"position":[[2462,21]]}}}],["codematch",{"_index":783,"t":{"236":{"position":[[1864,12]]}}}],["collabor",{"_index":266,"t":{"179":{"position":[[161,12]]},"202":{"position":[[217,13],[494,13]]},"268":{"position":[[310,13],[550,14],[934,13],[1104,13],[1456,13],[1575,14]]},"302":{"position":[[3749,13],[3873,13],[4053,13]]}}}],["collaboratorsit",{"_index":492,"t":{"202":{"position":[[315,15]]}}}],["collect",{"_index":696,"t":{"226":{"position":[[62,10]]},"238":{"position":[[47,10]]}}}],["combin",{"_index":1560,"t":{"302":{"position":[[15403,8]]},"308":{"position":[[675,8]]}}}],["come",{"_index":710,"t":{"232":{"position":[[242,4],[338,4]]},"272":{"position":[[4137,5]]}}}],["comma",{"_index":1009,"t":{"256":{"position":[[168,5],[230,5],[292,5]]},"268":{"position":[[889,5],[1605,5],[1669,5]]},"274":{"position":[[1025,5]]},"302":{"position":[[3049,5],[3703,5],[4169,5]]},"304":{"position":[[1057,5]]}}}],["command",{"_index":108,"t":{"165":{"position":[[810,7]]},"244":{"position":[[731,8]]},"248":{"position":[[135,7]]},"250":{"position":[[1172,7]]},"284":{"position":[[205,7]]},"286":{"position":[[693,7]]},"296":{"position":[[35,7],[135,7]]},"298":{"position":[[56,9]]},"300":{"position":[[6,7]]},"306":{"position":[[6,7],[365,7]]},"308":{"position":[[140,8]]}}}],["commandlin",{"_index":1372,"t":{"282":{"position":[[2830,12]]}}}],["common",{"_index":446,"t":{"194":{"position":[[99,6],[152,8]]},"278":{"position":[[204,6]]},"302":{"position":[[543,6],[581,8]]}}}],["commun",{"_index":220,"t":{"175":{"position":[[23,9]]}}}],["compat",{"_index":1524,"t":{"302":{"position":[[6542,14]]}}}],["complet",{"_index":819,"t":{"242":{"position":[[405,10]]},"248":{"position":[[1000,8]]},"272":{"position":[[2212,8]]}}}],["compos",{"_index":196,"t":{"173":{"position":[[902,7],[1194,7],[1274,7],[1292,7]]},"177":{"position":[[353,7]]},"244":{"position":[[230,8]]}}}],["compose.yaml",{"_index":210,"t":{"173":{"position":[[1212,12]]}}}],["compress",{"_index":1510,"t":{"302":{"position":[[5395,8],[5437,10]]},"308":{"position":[[332,10],[354,10]]}}}],["compris",{"_index":843,"t":{"244":{"position":[[565,9]]}}}],["concurr",{"_index":826,"t":{"242":{"position":[[628,12]]}}}],["confident",{"_index":1146,"t":{"270":{"position":[[150,13]]}}}],["confidenti",{"_index":1183,"t":{"272":{"position":[[961,15]]}}}],["config",{"_index":107,"t":{"165":{"position":[[797,6]]},"173":{"position":[[296,8],[614,8]]},"181":{"position":[[691,6]]},"183":{"position":[[159,6],[200,6]]},"185":{"position":[[30,6],[82,6],[179,6],[197,6],[487,7],[516,6],[551,6]]},"187":{"position":[[1394,6],[1414,6],[1530,6]]},"244":{"position":[[3503,6]]},"250":{"position":[[46,6],[645,6]]},"252":{"position":[[182,6]]},"274":{"position":[[495,6]]},"280":{"position":[[3684,6],[4346,6],[4845,6]]},"286":{"position":[[545,6]]},"296":{"position":[[82,6]]},"300":{"position":[[50,6],[162,6],[235,6]]},"302":{"position":[[993,6],[1015,6],[10938,6]]},"304":{"position":[[1173,6]]},"316":{"position":[[2906,6]]}}}],["config=/etc/oauth2",{"_index":1456,"t":{"300":{"position":[[307,18]]}}}],["configur",{"_index":39,"t":{"163":{"position":[[518,10],[698,14]]},"165":{"position":[[768,9],[857,9]]},"173":{"position":[[137,17],[322,13],[640,13]]},"181":{"position":[[303,13],[359,13],[447,13],[511,13],[587,14],[639,14],[671,14],[898,13]]},"183":{"position":[[21,14]]},"185":{"position":[[123,13],[318,13],[406,13]]},"187":{"position":[[112,14]]},"192":{"position":[[39,13],[169,13],[402,9],[634,9],[869,9],[1225,9],[1464,9],[1547,9],[1772,9],[1850,9]]},"194":{"position":[[200,10]]},"216":{"position":[[48,13]]},"222":{"position":[[43,13],[556,14],[641,14],[720,14],[813,14],[902,14],[989,14],[1075,14],[1155,14],[1213,15],[1285,14]]},"230":{"position":[[49,13],[454,13]]},"236":{"position":[[53,13]]},"238":{"position":[[309,13]]},"244":{"position":[[1000,9],[2793,9],[2915,9],[3152,9]]},"246":{"position":[[26,15]]},"248":{"position":[[0,9],[176,13],[481,13],[713,11]]},"250":{"position":[[0,9],[1213,13]]},"252":{"position":[[935,10]]},"254":{"position":[[971,13]]},"256":{"position":[[86,10]]},"258":{"position":[[105,9],[409,13]]},"262":{"position":[[1289,9]]},"264":{"position":[[268,9],[306,9]]},"272":{"position":[[1618,10],[2386,14],[2507,14],[2603,9],[2920,9],[3477,14],[3596,13]]},"280":{"position":[[360,9],[611,13],[1535,9],[1747,9],[1847,9],[2372,9],[3011,13],[3531,10]]},"284":{"position":[[165,14]]},"286":{"position":[[304,10]]},"288":{"position":[[442,13],[570,13]]},"296":{"position":[[20,10],[234,13]]},"302":{"position":[[393,13],[2977,13],[9917,15],[11257,13],[13491,10],[13985,13]]},"304":{"position":[[180,10],[511,10],[775,10],[1031,10]]},"306":{"position":[[339,13]]},"308":{"position":[[67,10],[183,9],[589,12]]},"310":{"position":[[582,9],[654,10]]},"312":{"position":[[315,9],[390,10]]},"314":{"position":[[134,13],[349,9],[425,10]]},"316":{"position":[[2798,13],[3744,10]]},"320":{"position":[[295,14]]},"322":{"position":[[240,10]]}}}],["conflict",{"_index":829,"t":{"242":{"position":[[768,9]]}}}],["conjunct",{"_index":428,"t":{"192":{"position":[[1020,11]]},"262":{"position":[[2056,11]]},"302":{"position":[[7817,11],[9621,11],[10209,11],[10369,11]]}}}],["connect",{"_index":595,"t":{"220":{"position":[[87,7],[993,7]]},"222":{"position":[[1748,10]]},"244":{"position":[[2704,10],[2732,10],[2985,10],[3188,10],[3376,10],[3537,10],[3586,10]]},"250":{"position":[[414,11]]},"252":{"position":[[455,11],[491,9]]},"258":{"position":[[304,7],[556,7]]},"272":{"position":[[1001,8],[2166,8]]},"280":{"position":[[7,7],[227,7],[271,7],[2635,7]]},"282":{"position":[[869,7],[913,8]]},"302":{"position":[[6683,7],[8341,10],[9517,10],[9569,10],[9666,10],[9826,10],[9975,10],[10071,11],[10264,10],[10317,10],[10432,7],[10483,10],[10551,7],[10642,10],[10692,10],[10726,10],[10815,10],[10972,10],[11021,10]]}}}],["connect/auth",{"_index":1156,"t":{"270":{"position":[[615,13]]}}}],["connect/token",{"_index":1157,"t":{"270":{"position":[[710,14]]}}}],["connect/userinfo",{"_index":1158,"t":{"270":{"position":[[807,17],[908,17]]}}}],["consent",{"_index":555,"t":{"218":{"position":[[165,7],[333,7]]},"260":{"position":[[345,7]]},"262":{"position":[[702,7],[810,7],[837,7]]}}}],["consent#th",{"_index":1109,"t":{"262":{"position":[[2238,11]]}}}],["consid",{"_index":412,"t":{"192":{"position":[[256,10]]},"218":{"position":[[889,10]]}}}],["consol",{"_index":1116,"t":{"264":{"position":[[29,7]]},"272":{"position":[[702,7],[750,7],[798,7],[895,7],[1374,7],[1499,8],[6948,7]]}}}],["consult",{"_index":1191,"t":{"272":{"position":[[1558,7]]}}}],["consum",{"_index":1246,"t":{"276":{"position":[[353,8],[380,8]]},"288":{"position":[[16,8]]}}}],["contact",{"_index":1321,"t":{"282":{"position":[[96,7],[135,7]]}}}],["contain",{"_index":188,"t":{"173":{"position":[[336,8],[654,8]]},"181":{"position":[[17,8]]},"192":{"position":[[13,8]]},"208":{"position":[[561,8]]},"210":{"position":[[315,10]]},"220":{"position":[[1107,8],[1207,8],[1308,8]]},"228":{"position":[[360,10]]},"230":{"position":[[359,8]]},"232":{"position":[[25,8]]},"280":{"position":[[1466,9],[4746,10]]},"282":{"position":[[2508,8]]},"302":{"position":[[6881,8],[6959,8],[7039,8],[12391,7]]},"310":{"position":[[53,7],[305,7]]},"316":{"position":[[2217,7]]}}}],["content",{"_index":1218,"t":{"272":{"position":[[7185,9]]},"282":{"position":[[1251,8]]},"316":{"position":[[864,7],[2240,8]]}}}],["contenttypenosniff",{"_index":1708,"t":{"320":{"position":[[998,19]]},"322":{"position":[[1756,19]]}}}],["contrib",{"_index":1455,"t":{"300":{"position":[[257,7]]}}}],["contrib/loc",{"_index":190,"t":{"173":{"position":[[420,14],[743,14],[1133,13]]}}}],["control",{"_index":864,"t":{"244":{"position":[[1623,8]]},"302":{"position":[[11396,8]]}}}],["convert",{"_index":326,"t":{"185":{"position":[[74,7],[106,7],[171,7],[244,7]]},"198":{"position":[[379,8]]},"210":{"position":[[600,8]]}}}],["convolut",{"_index":576,"t":{"218":{"position":[[798,11]]}}}],["cooki",{"_index":11,"t":{"163":{"position":[[112,6],[122,6],[543,8],[570,6]]},"240":{"position":[[122,6],[309,6]]},"242":{"position":[[4,6],[126,6],[199,7],[426,7],[518,6],[579,6]]},"244":{"position":[[139,6],[196,6],[326,6],[901,6],[1027,6],[1046,6],[1082,6],[1124,6],[1168,6],[1188,7],[1600,7],[2396,6]]},"248":{"position":[[373,6],[395,6]]},"250":{"position":[[1339,6],[1361,6]]},"252":{"position":[[711,8],[777,6]]},"254":{"position":[[103,8]]},"260":{"position":[[933,6]]},"262":{"position":[[2336,6],[2374,6]]},"264":{"position":[[483,6],[521,6]]},"274":{"position":[[570,6],[814,6]]},"280":{"position":[[1147,6],[1167,6],[3618,7]]},"282":{"position":[[1729,6],[1811,6],[1861,6],[3847,6]]},"298":{"position":[[21,6]]},"302":{"position":[[1029,6],[1066,6],[1090,7],[1203,6],[1242,6],[1286,7],[1307,6],[1332,6],[1396,6],[1430,6],[1449,6],[1484,6],[1548,6],[1590,6],[1630,6],[1661,6],[1682,7],[1712,6],[1748,6],[1827,6],[1875,7],[1913,6],[1956,6],[1975,6],[2011,6],[2067,6],[2125,7],[2200,6],[2254,6],[11587,6],[11631,6],[11675,7],[11776,6],[11783,6],[15840,6]]},"306":{"position":[[398,6]]},"316":{"position":[[1487,6],[1623,6],[1710,7],[1847,7],[1914,7],[1979,7],[2094,6],[2131,6],[2233,6],[2414,6],[2511,6],[2554,6],[3475,8],[3728,6],[3761,6],[3810,6],[3929,6]]}}}],["cookie_expir",{"_index":886,"t":{"244":{"position":[[2535,13]]}}}],["cookie_refresh",{"_index":885,"t":{"244":{"position":[[2490,14]]}}}],["cookie_secret",{"_index":1296,"t":{"280":{"position":[[3589,13]]},"298":{"position":[[681,15]]}}}],["cookienam",{"_index":833,"t":{"244":{"position":[[257,12],[301,10],[541,12]]}}}],["copi",{"_index":331,"t":{"185":{"position":[[343,4]]},"282":{"position":[[2600,4]]},"316":{"position":[[1825,6]]}}}],["coreo",{"_index":1253,"t":{"280":{"position":[[171,6]]}}}],["corp.com\"]client_id",{"_index":1286,"t":{"280":{"position":[[3240,20]]}}}],["corpor",{"_index":232,"t":{"175":{"position":[[218,9]]}}}],["correct",{"_index":1126,"t":{"268":{"position":[[104,7]]},"280":{"position":[[545,7]]},"290":{"position":[[110,7]]}}}],["correctli",{"_index":1112,"t":{"262":{"position":[[2425,10]]},"264":{"position":[[572,10]]},"322":{"position":[[382,9]]}}}],["count=1",{"_index":1431,"t":{"298":{"position":[[219,7]]}}}],["coupl",{"_index":881,"t":{"244":{"position":[[2413,6]]}}}],["cours",{"_index":869,"t":{"244":{"position":[[1938,7]]}}}],["cover",{"_index":1639,"t":{"314":{"position":[[30,7]]}}}],["creat",{"_index":140,"t":{"167":{"position":[[285,6],[300,6]]},"171":{"position":[[17,6]]},"173":{"position":[[61,6]]},"179":{"position":[[480,6]]},"260":{"position":[[40,6],[812,8],[1078,6],[2293,6],[2549,6]]},"262":{"position":[[253,6]]},"266":{"position":[[0,6]]},"268":{"position":[[0,6],[1350,7]]},"270":{"position":[[92,6],[299,6],[487,8],[1461,6]]},"272":{"position":[[903,6],[1145,6],[1228,6],[1441,6],[2036,8],[2056,6],[2132,6],[3653,6],[4440,8],[4489,6],[4538,8],[4615,6],[5595,8],[5793,6],[6223,8],[6530,6],[6572,6]]},"276":{"position":[[42,6]]},"280":{"position":[[2653,6],[3002,6],[3791,6]]},"282":{"position":[[443,6],[2429,6]]},"286":{"position":[[0,6]]},"290":{"position":[[0,6]]},"302":{"position":[[1512,8],[4914,7]]}}}],["credenti",{"_index":504,"t":{"206":{"position":[[284,11],[415,11]]},"260":{"position":[[297,13],[445,13],[478,12],[1170,11],[1603,11],[1736,12]]},"264":{"position":[[294,11]]},"270":{"position":[[270,10]]},"272":{"position":[[1116,10],[2532,11]]},"302":{"position":[[4665,11],[4710,11],[4751,11]]}}}],["crypto/tl",{"_index":724,"t":{"232":{"position":[[731,10]]},"248":{"position":[[914,10],[1062,11]]},"302":{"position":[[14309,10]]}}}],["csrf",{"_index":1477,"t":{"302":{"position":[[2074,4],[2120,4],[2207,4],[2249,4]]}}}],["current",{"_index":57,"t":{"165":{"position":[[49,8]]},"169":{"position":[[16,9]]},"248":{"position":[[735,9],[932,9]]},"258":{"position":[[517,9]]},"280":{"position":[[1228,7]]},"302":{"position":[[6499,10]]}}}],["custom",{"_index":912,"t":{"248":{"position":[[508,13]]},"272":{"position":[[1314,6],[3235,6],[5936,9]]},"280":{"position":[[2091,6]]},"302":{"position":[[2267,6],[2303,6],[2327,6],[2374,6],[3398,6],[3478,6]]},"316":{"position":[[3803,6]]}}}],["cycl",{"_index":977,"t":{"252":{"position":[[844,5],[906,6]]}}}],["d",{"_index":78,"t":{"165":{"position":[[308,2]]},"298":{"position":[[254,1]]}}}],["danger",{"_index":288,"t":{"181":{"position":[[0,6]]},"192":{"position":[[211,6]]}}}],["dashboard",{"_index":1021,"t":{"260":{"position":[[220,9]]},"282":{"position":[[496,10],[798,10]]}}}],["data",{"_index":708,"t":{"232":{"position":[[210,4],[306,4]]},"240":{"position":[[179,4]]},"242":{"position":[[550,4],[586,5]]},"270":{"position":[[1355,4]]},"282":{"position":[[426,4]]},"302":{"position":[[11745,4]]},"312":{"position":[[1392,4]]}}}],["date",{"_index":1620,"t":{"310":{"position":[[1310,4]]},"312":{"position":[[1332,4]]},"314":{"position":[[602,4]]}}}],["day",{"_index":1343,"t":{"282":{"position":[[1170,4]]},"302":{"position":[[5693,4]]}}}],["dd",{"_index":1428,"t":{"298":{"position":[[194,2]]}}}],["debug",{"_index":175,"t":{"173":{"position":[[43,9],[1431,5]]},"302":{"position":[[12305,5]]}}}],["decim",{"_index":478,"t":{"200":{"position":[[153,7]]}}}],["decod",{"_index":1445,"t":{"298":{"position":[[620,6]]}}}],["decreas",{"_index":1418,"t":{"296":{"position":[[98,10]]}}}],["dedic",{"_index":1194,"t":{"272":{"position":[[2008,11],[2615,9],[2733,9],[2787,10],[2867,10],[3507,9],[3559,9],[5145,9]]}}}],["deep",{"_index":1530,"t":{"302":{"position":[[8818,4]]}}}],["default",{"_index":508,"t":{"206":{"position":[[407,7]]},"216":{"position":[[176,9],[207,7],[431,7],[513,7],[637,7]]},"218":{"position":[[68,8],[226,7],[1170,7],[1198,7],[1218,7],[1363,7]]},"220":{"position":[[804,7],[1457,7]]},"222":{"position":[[1549,7],[1797,7]]},"232":{"position":[[647,7]]},"240":{"position":[[316,9]]},"242":{"position":[[34,7]]},"244":{"position":[[356,8]]},"248":{"position":[[635,8],[900,8]]},"250":{"position":[[168,8],[763,7]]},"252":{"position":[[620,7]]},"258":{"position":[[218,7]]},"260":{"position":[[1162,7],[1595,7],[1728,7]]},"262":{"position":[[2108,9],[2250,7]]},"272":{"position":[[772,8],[1382,8],[4431,8]]},"276":{"position":[[146,7]]},"278":{"position":[[196,7]]},"280":{"position":[[576,7],[1927,7],[2415,7],[2863,8],[4248,7]]},"286":{"position":[[575,8]]},"288":{"position":[[434,7]]},"302":{"position":[[24,7],[2433,7],[2749,7],[3446,7],[3526,7],[4390,9],[4702,7],[4743,7],[8391,7],[14224,7],[16039,8],[16110,7]]},"308":{"position":[[3,8],[627,7]]},"310":{"position":[[152,7],[636,7]]},"312":{"position":[[33,7],[372,7]]},"314":{"position":[[219,7],[407,7]]},"320":{"position":[[461,7],[686,7]]},"322":{"position":[[638,7],[921,7],[1166,7],[1372,7]]}}}],["defin",{"_index":418,"t":{"192":{"position":[[550,7]]},"220":{"position":[[1399,6]]},"222":{"position":[[158,7],[291,7],[1953,7]]},"228":{"position":[[140,7]]},"270":{"position":[[1511,6]]},"272":{"position":[[3539,7],[4218,7],[6112,7]]},"294":{"position":[[48,6]]}}}],["definit",{"_index":697,"t":{"226":{"position":[[76,11]]},"238":{"position":[[61,11]]}}}],["delay",{"_index":281,"t":{"179":{"position":[[571,5]]}}}],["delet",{"_index":861,"t":{"244":{"position":[[1343,7]]}}}],["demo",{"_index":1328,"t":{"282":{"position":[[512,5]]}}}],["demonstr",{"_index":254,"t":{"177":{"position":[[558,11]]}}}],["deped",{"_index":163,"t":{"171":{"position":[[56,11]]}}}],["depend",{"_index":48,"t":{"163":{"position":[[680,10]]},"177":{"position":[[85,13]]},"179":{"position":[[339,14]]},"252":{"position":[[1239,12]]},"284":{"position":[[228,9]]},"302":{"position":[[8543,8]]}}}],["deploy",{"_index":54,"t":{"165":{"position":[[14,7],[874,6]]},"173":{"position":[[368,8],[686,8]]},"260":{"position":[[1754,8],[1867,8],[2005,8]]},"282":{"position":[[3075,11]]}}}],["deprec",{"_index":1544,"t":{"302":{"position":[[12735,11]]}}}],["describ",{"_index":297,"t":{"181":{"position":[[172,9]]},"183":{"position":[[77,9]]},"280":{"position":[[2156,8]]}}}],["descript",{"_index":402,"t":{"190":{"position":[[34,11]]},"192":{"position":[[334,11]]},"194":{"position":[[34,11]]},"196":{"position":[[34,11]]},"198":{"position":[[111,11]]},"202":{"position":[[34,11]]},"204":{"position":[[34,11]]},"206":{"position":[[34,11]]},"208":{"position":[[129,11]]},"210":{"position":[[127,11]]},"212":{"position":[[34,11]]},"214":{"position":[[34,11]]},"218":{"position":[[1098,11]]},"220":{"position":[[34,11]]},"222":{"position":[[90,11]]},"228":{"position":[[172,11]]},"230":{"position":[[96,11]]},"232":{"position":[[162,11]]},"234":{"position":[[308,11]]},"236":{"position":[[182,11]]},"238":{"position":[[106,11]]},"272":{"position":[[2852,11],[5580,11]]},"280":{"position":[[2324,11]]},"286":{"position":[[71,11]]},"302":{"position":[[12,11]]},"310":{"position":[[821,11]]},"312":{"position":[[676,11]]},"314":{"position":[[549,11]]}}}],["deselect",{"_index":1197,"t":{"272":{"position":[[2366,10]]}}}],["desir",{"_index":522,"t":{"208":{"position":[[574,7]]}}}],["detail",{"_index":238,"t":{"177":{"position":[[167,7],[457,6]]},"181":{"position":[[122,8],[336,7]]},"262":{"position":[[2273,8]]},"280":{"position":[[508,8]]},"302":{"position":[[12330,8]]},"310":{"position":[[1042,7],[1552,8]]},"314":{"position":[[751,7]]}}}],["determin",{"_index":515,"t":{"208":{"position":[[307,10]]},"234":{"position":[[145,9]]},"236":{"position":[[1981,10],[2270,10]]},"302":{"position":[[9212,9]]},"322":{"position":[[362,9]]}}}],["dev.yaml",{"_index":1260,"t":{"280":{"position":[[679,9],[878,8]]}}}],["develop",{"_index":1300,"t":{"280":{"position":[[3737,9]]},"282":{"position":[[315,9]]}}}],["dex",{"_index":181,"t":{"173":{"position":[[193,5],[393,3],[1170,3],[1228,3]]},"280":{"position":[[178,3],[352,4],[392,4],[435,4],[802,4],[1521,4]]}}}],["differ",{"_index":574,"t":{"218":{"position":[[759,9]]},"224":{"position":[[77,9]]},"260":{"position":[[2685,9]]},"302":{"position":[[2110,9],[6474,6]]},"308":{"position":[[381,9]]},"310":{"position":[[546,9]]},"312":{"position":[[279,9]]},"314":{"position":[[313,9]]}}}],["digitalocean",{"_index":691,"t":{"224":{"position":[[152,12]]},"258":{"position":[[332,12]]}}}],["dir",{"_index":1481,"t":{"302":{"position":[[2284,3]]}}}],["dir\",th",{"_index":772,"t":{"236":{"position":[[1427,10]]}}}],["direct",{"_index":445,"t":{"194":{"position":[[67,7]]},"252":{"position":[[1188,9]]},"272":{"position":[[2345,6]]},"316":{"position":[[23,9]]}}}],["directli",{"_index":961,"t":{"252":{"position":[[22,8]]},"302":{"position":[[13575,8]]}}}],["directori",{"_index":207,"t":{"173":{"position":[[1159,10]]},"262":{"position":[[72,10],[1356,9]]},"274":{"position":[[1201,9]]},"280":{"position":[[1244,9]]},"282":{"position":[[2480,9]]},"300":{"position":[[265,10]]},"304":{"position":[[595,9]]}}}],["directory/develop/v2",{"_index":1108,"t":{"262":{"position":[[2201,20]]}}}],["disabl",{"_index":702,"t":{"230":{"position":[[209,8],[338,8]]},"244":{"position":[[1115,7]]},"252":{"position":[[608,8]]},"272":{"position":[[5164,9]]},"302":{"position":[[1781,8],[2425,7],[3438,7],[3518,7],[5798,7],[6829,8],[12564,7]]},"308":{"position":[[483,8],[791,8]]}}}],["disallow",{"_index":963,"t":{"252":{"position":[[244,9]]}}}],["disclos",{"_index":265,"t":{"179":{"position":[[65,9],[298,9]]}}}],["disclosur",{"_index":228,"t":{"175":{"position":[[139,11]]},"177":{"position":[[194,11],[491,10]]},"179":{"position":[[129,10]]},"244":{"position":[[839,11]]}}}],["discov",{"_index":256,"t":{"177":{"position":[[590,10]]}}}],["discoveri",{"_index":606,"t":{"220":{"position":[[447,9],[888,9]]},"254":{"position":[[826,11]]},"282":{"position":[[3252,10],[3298,9],[3485,9],[3711,9]]},"302":{"position":[[6816,9],[13390,9],[13426,10]]}}}],["discret",{"_index":287,"t":{"179":{"position":[[695,10]]}}}],["discuss",{"_index":264,"t":{"179":{"position":[[47,7],[216,10]]}}}],["display",{"_index":363,"t":{"187":{"position":[[821,7]]},"222":{"position":[[1591,7]]},"280":{"position":[[979,7]]},"290":{"position":[[332,7]]},"302":{"position":[[2449,7],[2476,7],[8445,7]]}}}],["doc",{"_index":1457,"t":{"302":{"position":[[66,4]]}}}],["docker",{"_index":70,"t":{"165":{"position":[[243,6],[339,6]]},"173":{"position":[[895,6],[1187,6],[1205,6],[1267,6],[1285,6]]},"280":{"position":[[1490,6]]},"282":{"position":[[2318,6],[2556,6],[2574,6]]}}}],["document",{"_index":290,"t":{"181":{"position":[[26,13]]},"232":{"position":[[742,14]]},"272":{"position":[[398,13],[1579,14],[5672,14],[6809,13]]},"280":{"position":[[2470,13]]},"284":{"position":[[387,13]]},"302":{"position":[[14320,14]]}}}],["doesn't",{"_index":1111,"t":{"262":{"position":[[2398,7]]},"264":{"position":[[545,7]]}}}],["domain",{"_index":563,"t":{"218":{"position":[[529,7],[655,7]]},"254":{"position":[[854,6],[964,6],[1064,6]]},"256":{"position":[[268,7]]},"258":{"position":[[147,6]]},"260":{"position":[[648,6],[1058,7],[2364,6]]},"268":{"position":[[407,8]]},"272":{"position":[[369,6]]},"274":{"position":[[1263,6]]},"280":{"position":[[1194,6]]},"282":{"position":[[3874,6]]},"292":{"position":[[22,6],[221,9]]},"302":{"position":[[1036,6],[1073,7],[1138,6],[1210,6],[2560,6],[2620,6],[15114,6],[15143,7],[15196,6],[15910,6],[15929,6],[16004,6],[16263,7]]},"306":{"position":[[469,6]]},"316":{"position":[[548,8]]},"320":{"position":[[469,8],[694,8]]},"322":{"position":[[646,8],[929,8],[1174,8],[1380,8]]}}}],["domain.com",{"_index":1611,"t":{"310":{"position":[[964,10]]},"312":{"position":[[819,10]]}}}],["domain.tld/gitlab",{"_index":1235,"t":{"274":{"position":[[1217,19]]}}}],["domain.tld/gitlab/oauth",{"_index":1240,"t":{"274":{"position":[[1366,24]]}}}],["domain.tld/oauth",{"_index":1238,"t":{"274":{"position":[[1332,16]]}}}],["domain=\"yourcompany.com",{"_index":908,"t":{"248":{"position":[[237,24]]},"250":{"position":[[1274,24]]}}}],["domain=git",{"_index":168,"t":{"171":{"position":[[159,24]]}}}],["feature/go",{"_index":171,"t":{"171":{"position":[[211,23]]}}}],["feder",{"_index":1042,"t":{"260":{"position":[[1222,10],[1661,10],[2048,10]]}}}],["field",{"_index":401,"t":{"190":{"position":[[23,5]]},"192":{"position":[[323,5]]},"194":{"position":[[23,5],[221,5]]},"196":{"position":[[23,5]]},"198":{"position":[[100,5]]},"202":{"position":[[23,5]]},"204":{"position":[[23,5]]},"206":{"position":[[23,5]]},"208":{"position":[[118,5]]},"210":{"position":[[116,5]]},"212":{"position":[[23,5]]},"214":{"position":[[23,5]]},"218":{"position":[[1087,5]]},"220":{"position":[[23,5]]},"222":{"position":[[79,5]]},"228":{"position":[[161,5]]},"230":{"position":[[85,5]]},"232":{"position":[[151,5]]},"234":{"position":[[297,5]]},"236":{"position":[[171,5]]},"238":{"position":[[95,5]]},"272":{"position":[[2235,6],[3251,5]]},"276":{"position":[[319,6]]},"280":{"position":[[3444,5]]},"286":{"position":[[135,6]]},"302":{"position":[[2916,7]]}}}],["file",{"_index":88,"t":{"165":{"position":[[506,4],[563,4],[804,5]]},"173":{"position":[[910,5]]},"177":{"position":[[428,5]]},"181":{"position":[[525,4],[698,4]]},"183":{"position":[[52,4],[136,4]]},"185":{"position":[[362,5]]},"210":{"position":[[310,4]]},"214":{"position":[[174,4]]},"228":{"position":[[355,4]]},"232":{"position":[[254,5],[350,5]]},"260":{"position":[[1125,4],[2802,4],[2871,4],[2900,4]]},"262":{"position":[[1169,5]]},"280":{"position":[[3025,4],[4353,4]]},"282":{"position":[[2329,5],[2387,5],[2458,4],[2610,4]]},"286":{"position":[[552,5]]},"296":{"position":[[89,4],[248,4]]},"300":{"position":[[57,4],[242,4]]},"302":{"position":[[430,4],[474,4],[823,4],[839,4],[1022,4],[2530,4],[4835,4],[4892,5],[5428,5],[5491,4],[5593,5],[5716,5],[5776,5],[5868,4],[6058,4],[6094,4],[8272,4],[14010,4],[14042,4],[14345,4],[14377,4],[14551,7],[14576,5]]},"304":{"position":[[123,5],[138,4],[496,4],[527,7],[579,5],[721,5],[861,5],[1180,5]]},"306":{"position":[[353,4]]},"308":{"position":[[106,4],[165,4],[205,4]]},"314":{"position":[[465,11],[638,4],[658,4]]},"320":{"position":[[283,4]]},"322":{"position":[[2321,4]]}}}],["file/client_secret_fil",{"_index":362,"t":{"187":{"position":[[779,23]]}}}],["file/jwt_key_fil",{"_index":386,"t":{"187":{"position":[[1167,17]]}}}],["file/provider_ca_fil",{"_index":366,"t":{"187":{"position":[[868,22]]}}}],["file://$pwd/#/stat",{"_index":1272,"t":{"280":{"position":[[1311,21]]}}}],["file:///var/www/stat",{"_index":1577,"t":{"304":{"position":[[540,23]]}}}],["file:///var/www/static/#/stat",{"_index":1581,"t":{"304":{"position":[[890,32]]}}}],["file://host/pathif",{"_index":769,"t":{"236":{"position":[[1349,18]]}}}],["file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1371,"t":{"282":{"position":[[2781,41]]},"302":{"position":[[6179,42]]}}}],["file=/path/to/cert.key",{"_index":907,"t":{"248":{"position":[[107,23],[346,22]]}}}],["file=/path/to/cert.pem",{"_index":906,"t":{"248":{"position":[[70,22],[311,22]]}}}],["file=/path/to/fil",{"_index":1415,"t":{"292":{"position":[[132,18]]}}}],["filebas",{"_index":763,"t":{"236":{"position":[[1167,9]]}}}],["filecontain",{"_index":645,"t":{"222":{"position":[[416,14]]}}}],["filenam",{"_index":1513,"t":{"302":{"position":[[5475,8],[5610,9]]},"308":{"position":[[131,8]]}}}],["fill",{"_index":1027,"t":{"260":{"position":[[366,4]]},"276":{"position":[[288,4]]},"280":{"position":[[2120,4],[2313,4]]},"286":{"position":[[39,4]]}}}],["filter",{"_index":1203,"t":{"272":{"position":[[4741,6],[6694,6]]},"274":{"position":[[420,10]]}}}],["find",{"_index":121,"t":{"167":{"position":[[46,4]]},"169":{"position":[[110,4]]},"244":{"position":[[1387,4]]},"262":{"position":[[2365,4]]},"264":{"position":[[512,4]]},"282":{"position":[[168,4]]}}}],["firewal",{"_index":1373,"t":{"282":{"position":[[3128,8]]}}}],["first",{"_index":1275,"t":{"280":{"position":[[1690,6]]},"282":{"position":[[758,6]]},"316":{"position":[[1836,5],[2121,5]]}}}],["fix",{"_index":133,"t":{"167":{"position":[[215,3]]},"177":{"position":[[632,3]]},"179":{"position":[[55,5],[244,5],[381,5],[428,3],[472,3],[585,5],[645,3]]},"216":{"position":[[501,5]]},"218":{"position":[[104,5],[268,5]]}}}],["flag",{"_index":312,"t":{"181":{"position":[[534,6]]},"183":{"position":[[166,5],[207,5]]},"185":{"position":[[98,4]]},"187":{"position":[[1381,5]]},"244":{"position":[[2898,5],[2929,5],[3142,5],[3166,5],[3229,5]]},"260":{"position":[[2407,5],[2629,5],[2675,4],[2940,5]]},"262":{"position":[[2084,5]]},"268":{"position":[[621,5],[767,4]]},"270":{"position":[[1122,5]]},"302":{"position":[[1437,4],[1963,4]]},"306":{"position":[[412,4],[476,4]]},"310":{"position":[[626,5]]},"312":{"position":[[362,5]]},"314":{"position":[[397,5]]},"316":{"position":[[1093,4],[1688,5]]}}}],["flags/opt",{"_index":333,"t":{"187":{"position":[[14,13]]}}}],["flaw",{"_index":1565,"t":{"302":{"position":[[15641,6]]}}}],["flight",{"_index":279,"t":{"179":{"position":[[541,6]]}}}],["flow",{"_index":614,"t":{"220":{"position":[[625,5]]},"244":{"position":[[1461,4]]},"272":{"position":[[2315,4],[2329,4]]}}}],["flush",{"_index":335,"t":{"187":{"position":[[127,5]]},"236":{"position":[[2143,8]]},"302":{"position":[[3149,5],[3188,8]]}}}],["flushinterv",{"_index":789,"t":{"236":{"position":[[2084,13],[2107,13]]}}}],["follow",{"_index":125,"t":{"167":{"position":[[125,6]]},"169":{"position":[[55,6]]},"173":{"position":[[312,9],[630,9]]},"187":{"position":[[4,9]]},"242":{"position":[[256,9]]},"244":{"position":[[246,10]]},"250":{"position":[[652,8]]},"252":{"position":[[38,9]]},"256":{"position":[[107,9]]},"260":{"position":[[1368,6],[1553,9],[1949,6],[2203,6]]},"264":{"position":[[210,6]]},"268":{"position":[[611,9],[757,9],[1733,9]]},"270":{"position":[[404,9]]},"272":{"position":[[1410,9],[5784,8],[6959,9]]},"274":{"position":[[201,6],[485,9],[584,6],[895,9],[1090,9]]},"278":{"position":[[52,6]]},"280":{"position":[[409,9],[939,9],[1585,9],[3039,10],[4715,9]]},"282":{"position":[[1530,9]]},"286":{"position":[[397,9]]},"288":{"position":[[334,9]]},"290":{"position":[[213,9]]},"294":{"position":[[0,6]]},"310":{"position":[[668,8]]},"312":{"position":[[404,8]]},"314":{"position":[[439,8]]},"316":{"position":[[2788,9]]},"322":{"position":[[165,9]]}}}],["foo",{"_index":746,"t":{"236":{"position":[[560,7],[597,4]]}}}],["foo/$1",{"_index":757,"t":{"236":{"position":[[988,7]]}}}],["foo/abc/123",{"_index":760,"t":{"236":{"position":[[1037,12]]}}}],["footer",{"_index":1497,"t":{"302":{"position":[[3464,6],[3492,6],[3534,7]]}}}],["forc",{"_index":830,"t":{"242":{"position":[[784,5]]},"302":{"position":[[253,7],[1084,5],[1676,5],[3246,5],[3294,5],[3317,5]]}}}],["forcestshead",{"_index":1709,"t":{"320":{"position":[[1023,15]]},"322":{"position":[[1781,15]]}}}],["forego",{"_index":273,"t":{"179":{"position":[[391,6]]}}}],["fork",{"_index":141,"t":{"167":{"position":[[294,5]]},"171":{"position":[[11,5]]}}}],["form",{"_index":578,"t":{"218":{"position":[[852,4]]},"284":{"position":[[318,4]]},"302":{"position":[[2466,4],[2510,4]]}}}],["format",{"_index":305,"t":{"181":{"position":[[390,7],[469,6],[912,7]]},"183":{"position":[[70,6]]},"185":{"position":[[148,7],[285,6]]},"214":{"position":[[91,6],[186,6]]},"218":{"position":[[965,6]]},"252":{"position":[[1060,7]]},"268":{"position":[[1137,9]]},"282":{"position":[[1028,6],[2532,6]]},"302":{"position":[[187,7],[329,6],[3782,9],[4289,9],[5929,6],[6106,6],[11200,6],[12949,7],[13927,6]]},"308":{"position":[[602,6],[641,7]]},"310":{"position":[[173,7],[556,6],[619,6],[644,6]]},"312":{"position":[[54,7],[289,6],[355,6],[380,6]]},"314":{"position":[[112,7],[227,6],[323,6],[390,6],[415,6]]}}}],["forward",{"_index":42,"t":{"163":{"position":[[599,9]]},"181":{"position":[[404,7]]},"244":{"position":[[2179,9]]},"270":{"position":[[1291,9]]},"302":{"position":[[7235,9],[7519,9],[7537,9],[7559,9],[7984,9],[8002,9],[8022,9],[8044,9],[9295,9],[11462,9],[13082,9]]},"304":{"position":[[279,7],[462,9]]},"322":{"position":[[339,9]]}}}],["forwardauth",{"_index":1690,"t":{"320":{"position":[[15,11],[1137,12]]},"322":{"position":[[96,11],[1904,12],[2069,12]]}}}],["found",{"_index":235,"t":{"177":{"position":[[29,5],[243,5]]},"232":{"position":[[718,5]]},"244":{"position":[[1556,5]]},"248":{"position":[[1053,5]]},"280":{"position":[[339,5]]},"302":{"position":[[14296,5]]}}}],["fraction",{"_index":479,"t":{"200":{"position":[[189,8]]}}}],["fragment",{"_index":1580,"t":{"304":{"position":[[759,8],[808,8]]}}}],["framedeni",{"_index":1713,"t":{"320":{"position":[[1109,10]]},"322":{"position":[[1867,10]]}}}],["freeform",{"_index":1034,"t":{"260":{"position":[[571,9]]}}}],["fromenv",{"_index":528,"t":{"210":{"position":[[197,7],[212,7]]},"228":{"position":[[242,7],[257,7]]}}}],["fromfil",{"_index":529,"t":{"210":{"position":[[265,8],[281,8]]},"228":{"position":[[310,8],[326,8]]}}}],["full",{"_index":223,"t":{"175":{"position":[[82,4]]},"272":{"position":[[4365,5],[5174,4],[6019,5]]},"310":{"position":[[1362,4]]},"312":{"position":[[1434,4]]}}}],["function",{"_index":139,"t":{"167":{"position":[[263,14]]},"322":{"position":[[20,13]]}}}],["further",{"_index":705,"t":{"230":{"position":[[446,7]]}}}],["futur",{"_index":619,"t":{"220":{"position":[[757,6]]},"260":{"position":[[1281,6]]},"280":{"position":[[4219,6]]}}}],["gap",{"_index":1540,"t":{"302":{"position":[[12478,3]]}}}],["gcp",{"_index":1051,"t":{"260":{"position":[[1770,4],[2025,4]]}}}],["gener",{"_index":322,"t":{"183":{"position":[[36,8]]},"272":{"position":[[7112,8]]},"280":{"position":[[2768,7],[3571,8]]},"282":{"position":[[1035,9]]},"290":{"position":[[381,9],[439,9]]},"298":{"position":[[3,8]]}}}],["get",{"_index":1256,"t":{"280":{"position":[[477,7]]}}}],["git",{"_index":164,"t":{"171":{"position":[[84,3]]}}}],["git@github.com:/oauth2",{"_index":165,"t":{"171":{"position":[[94,33]]}}}],["gitea",{"_index":1014,"t":{"258":{"position":[[355,5]]},"290":{"position":[[41,5],[394,5],[452,5],[489,5],[554,5],[624,5]]}}}],["github",{"_index":120,"t":{"167":{"position":[[31,7]]},"177":{"position":[[136,7],[729,6]]},"179":{"position":[[7,6],[109,6]]},"187":{"position":[[1302,7]]},"224":{"position":[[175,7]]},"258":{"position":[[72,6],[246,6]]},"268":{"position":[[172,6],[429,6],[628,6],[788,6],[801,6],[1069,6],[1396,6],[1612,6],[1692,6],[1801,6],[1871,6],[1946,6]]},"302":{"position":[[3544,6],[3612,6],[3711,6],[3810,6],[3931,6]]}}}],["github.com/dexidp/dex",{"_index":1255,"t":{"280":{"position":[[447,21]]}}}],["github.com/oauth2",{"_index":64,"t":{"165":{"position":[[132,17]]}}}],["githubc",{"_index":657,"t":{"222":{"position":[[921,7]]}}}],["githubconfig",{"_index":655,"t":{"222":{"position":[[852,12],[879,12]]}}}],["githubopt",{"_index":656,"t":{"222":{"position":[[865,13]]}}}],["gitlab",{"_index":394,"t":{"187":{"position":[[1310,7]]},"222":{"position":[[1008,6]]},"224":{"position":[[183,7]]},"258":{"position":[[262,6]]},"274":{"position":[[43,6],[71,6],[193,7],[739,6],[915,6],[1060,7],[1149,6],[1182,6]]},"302":{"position":[[4069,6],[4177,6],[4368,6],[15856,7]]}}}],["gitlab.com",{"_index":1221,"t":{"274":{"position":[[166,10]]}}}],["gitlab.domain.tld",{"_index":1237,"t":{"274":{"position":[[1276,19]]}}}],["gitlabconfig",{"_index":658,"t":{"222":{"position":[[939,12],[966,12]]}}}],["gitlabopt",{"_index":659,"t":{"222":{"position":[[952,13]]}}}],["give",{"_index":728,"t":{"234":{"position":[[409,5]]},"260":{"position":[[1518,4]]}}}],["given",{"_index":726,"t":{"234":{"position":[[196,5]]},"272":{"position":[[5045,5]]},"302":{"position":[[2635,5],[4267,5],[4568,5],[8503,5],[12830,5],[14179,5],[14846,5],[14945,5],[15375,5]]}}}],["gke",{"_index":1053,"t":{"260":{"position":[[1879,4]]},"302":{"position":[[4801,3]]}}}],["global",{"_index":1161,"t":{"270":{"position":[[1104,7]]}}}],["gmail",{"_index":1059,"t":{"260":{"position":[[2358,5]]}}}],["go",{"_index":61,"t":{"165":{"position":[[86,2],[121,2]]},"167":{"position":[[481,2]]},"169":{"position":[[38,2],[89,2],[115,2]]},"173":{"position":[[95,3],[207,5],[525,5]]},"181":{"position":[[398,5]]},"222":{"position":[[1805,2]]},"232":{"position":[[655,2]]},"248":{"position":[[947,2]]},"262":{"position":[[20,2],[1072,2]]},"280":{"position":[[440,2]]},"282":{"position":[[2885,2]]},"302":{"position":[[516,2],[8399,2],[14232,2]]}}}],["googl",{"_index":395,"t":{"187":{"position":[[1318,6]]},"206":{"position":[[108,6],[157,6]]},"222":{"position":[[1094,6],[1530,8]]},"224":{"position":[[191,7]]},"250":{"position":[[73,6],[269,6]]},"258":{"position":[[63,8],[211,6]]},"260":{"position":[[4,7],[1036,6],[2388,6],[2616,6],[2912,6]]},"302":{"position":[[4418,6],[4448,6],[4492,6],[4547,6],[4593,6],[4679,6],[8251,6],[15864,6]]}}}],["google'",{"_index":1054,"t":{"260":{"position":[[1956,8]]}}}],["googleconfig",{"_index":660,"t":{"222":{"position":[[1025,12],[1052,12]]}}}],["googleopt",{"_index":661,"t":{"222":{"position":[[1038,13]]}}}],["gopath/github.com/dexidp/dex",{"_index":1264,"t":{"280":{"position":[[812,30]]}}}],["goroot/bin",{"_index":68,"t":{"165":{"position":[[209,13]]}}}],["govern",{"_index":1319,"t":{"282":{"position":[[41,11],[69,10]]}}}],["grab",{"_index":1376,"t":{"282":{"position":[[3360,4]]}}}],["grant",{"_index":1080,"t":{"262":{"position":[[690,5]]},"272":{"position":[[2359,6]]},"280":{"position":[[2792,5],[4095,5]]}}}],["graph",{"_index":1078,"t":{"262":{"position":[[567,6]]}}}],["graphdefault",{"_index":453,"t":{"194":{"position":[[283,12]]}}}],["graphgroupfield",{"_index":449,"t":{"194":{"position":[[161,15],[184,15]]}}}],["grep",{"_index":99,"t":{"165":{"position":[[658,4]]}}}],["group",{"_index":450,"t":{"194":{"position":[[215,5],[256,6]]},"204":{"position":[[46,5],[61,5],[107,5]]},"206":{"position":[[46,5],[61,6],[115,5]]},"212":{"position":[[46,6],[62,5],[118,5]]},"220":{"position":[[1246,8]]},"222":{"position":[[2456,5]]},"256":{"position":[[200,6]]},"260":{"position":[[1043,6],[2584,5],[2623,5],[2695,6],[2756,7],[3006,5]]},"262":{"position":[[434,5],[625,5]]},"264":{"position":[[86,5]]},"270":{"position":[[332,6],[372,9],[1019,5],[1070,5],[1098,5],[1157,6],[1209,6],[1301,6],[1348,6],[1408,5],[1470,5],[1532,6]]},"272":{"position":[[610,5],[1178,6],[1218,9],[3986,7],[4092,5],[5448,6],[5488,5],[5549,6],[5630,6],[5742,5],[5833,6],[5878,5],[5926,6],[5975,6],[6025,5],[6100,5],[6137,5],[6255,6],[6382,6],[6452,5],[6539,5],[6562,6],[6579,5],[6704,5],[6772,7],[6870,6],[7100,7]]},"274":{"position":[[857,5],[995,6]]},"280":{"position":[[2958,6],[4067,5]]},"302":{"position":[[4076,5],[4139,6],[4499,5],[4554,5],[4977,5],[5001,6],[6922,6],[6977,6],[6984,8],[8012,7],[11854,7],[14777,5],[14832,5]]}}}],["group,otherwis",{"_index":673,"t":{"222":{"position":[[1514,15]]}}}],["group.read.al",{"_index":1079,"t":{"262":{"position":[[642,15]]}}}],["group/allowed_group",{"_index":382,"t":{"187":{"position":[[1095,20]]}}}],["group=\"mygroup,myothergroup",{"_index":1232,"t":{"274":{"position":[[922,29]]}}}],["group=/groupnam",{"_index":1214,"t":{"272":{"position":[[6655,16]]}}}],["group=/oauth2/callback",{"_index":1398,"t":{"286":{"position":[[611,24]]}}}],["headers.default",{"_index":521,"t":{"208":{"position":[[456,16]]}}}],["headers/pass_user_head",{"_index":347,"t":{"187":{"position":[[390,25]]}}}],["headers/skip_auth_strip_head",{"_index":357,"t":{"187":{"position":[[680,31]]}}}],["headershould",{"_index":516,"t":{"208":{"position":[[346,12]]}}}],["headervalu",{"_index":457,"t":{"198":{"position":[[13,12]]},"208":{"position":[[540,13]]},"210":{"position":[[21,11]]},"228":{"position":[[26,12]]}}}],["health",{"_index":967,"t":{"252":{"position":[[384,6]]},"302":{"position":[[8629,6],[8716,6],[8823,6]]}}}],["helm",{"_index":85,"t":{"165":{"position":[[446,6]]}}}],["here",{"_index":158,"t":{"169":{"position":[[92,5],[155,5]]},"282":{"position":[[344,5]]}}}],["hex",{"_index":839,"t":{"244":{"position":[[406,3]]}}}],["histor",{"_index":813,"t":{"242":{"position":[[103,13]]}}}],["hit",{"_index":1029,"t":{"260":{"position":[[408,3]]},"262":{"position":[[658,3],[1276,7]]}}}],["hold",{"_index":640,"t":{"222":{"position":[[33,5],[546,5],[631,5],[710,5],[803,5],[892,5],[979,5],[1065,5],[1145,5],[1275,5]]}}}],["homepag",{"_index":1390,"t":{"286":{"position":[[57,9]]}}}],["host",{"_index":337,"t":{"187":{"position":[[162,4]]},"236":{"position":[[2301,4]]},"250":{"position":[[1006,4],[1011,6]]},"274":{"position":[[185,7],[1053,6],[1175,6]]},"286":{"position":[[606,4]]},"290":{"position":[[47,4],[495,4],[560,4],[630,4]]},"302":{"position":[[1168,4],[7889,4],[7923,4]]},"310":{"position":[[959,4],[992,4]]},"312":{"position":[[475,9],[814,4],[847,4]]},"316":{"position":[[370,4],[375,6],[708,4],[713,6]]}}}],["host(`a",{"_index":1694,"t":{"320":{"position":[[342,8],[537,8]]},"322":{"position":[[432,8],[726,8],[1013,8]]}}}],["host(`oauth.example.com",{"_index":1724,"t":{"322":{"position":[[1255,26]]}}}],["host>/api/v3",{"_index":1143,"t":{"268":{"position":[[1953,13]]}}}],["host>/auth/realms//login/oauth/access_token",{"_index":1142,"t":{"268":{"position":[[1878,31]]}}}],["host>/login/oauth/author",{"_index":1141,"t":{"268":{"position":[[1808,28]]}}}],["host>/oauth2/callback",{"_index":1406,"t":{"290":{"position":[[144,21],[298,22]]}}}],["host>/realms/:::/sign_in",{"_index":1532,"t":{"302":{"position":[[9011,18]]}}}],["oauth2_proxy_",{"_index":1584,"t":{"306":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":1587,"t":{"306":{"position":[[425,27]]}}}],["oauth2_proxy_email_domain",{"_index":1588,"t":{"306":{"position":[[489,27]]}}}],["oauth2_proxy_jwt_key",{"_index":1349,"t":{"282":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1370,"t":{"282":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":1469,"t":{"302":{"position":[[1500,11]]}}}],["obtain",{"_index":1566,"t":{"302":{"position":[[15664,9]]}}}],["occur",{"_index":1641,"t":{"314":{"position":[[187,5]]}}}],["offici",{"_index":82,"t":{"165":{"position":[[417,8]]},"167":{"position":[[472,8]]}}}],["oidc",{"_index":391,"t":{"187":{"position":[[1278,5]]},"212":{"position":[[229,4]]},"220":{"position":[[442,4],[883,4]]},"222":{"position":[[1174,4],[1208,4]]},"224":{"position":[[218,5],[259,5]]},"254":{"position":[[481,4],[667,4],[780,4],[889,4]]},"262":{"position":[[1560,4],[1868,4]]},"270":{"position":[[60,4]]},"272":{"position":[[20,4],[161,4],[253,4],[1457,4],[1598,4],[1857,4],[2069,4],[4043,4],[4340,4],[5970,4]]},"274":{"position":[[1126,4]]},"280":{"position":[[244,6],[374,4],[965,4],[996,4],[1105,4],[1549,4]]},"282":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]},"302":{"position":[[6298,4],[6410,4],[6455,4],[6574,4],[6614,4],[6649,4],[6740,4],[6761,4],[6811,4],[6840,4],[6870,4],[6917,4],[6948,4],[6995,4],[7028,4],[7069,4],[7409,4],[8163,4],[13385,4],[13412,4],[13469,4],[14997,4],[15875,4]]}}}],["oidc\"redirect_url",{"_index":1282,"t":{"280":{"position":[[3061,18],[4388,18]]}}}],["oidc_issuer_url",{"_index":1104,"t":{"262":{"position":[[2036,16]]},"280":{"position":[[3372,15]]}}}],["oidcconfig",{"_index":662,"t":{"222":{"position":[[1111,10],[1134,10]]}}}],["oidcopt",{"_index":663,"t":{"222":{"position":[[1122,11]]}}}],["ok",{"_index":102,"t":{"165":{"position":[[697,2]]},"252":{"position":[[227,2],[340,2],[421,2]]}}}],["okoauth2",{"_index":100,"t":{"165":{"position":[[663,8]]}}}],["okta",{"_index":1254,"t":{"280":{"position":[[315,5],[1526,5],[1567,5],[1612,4],[2465,4],[3708,4],[3834,4],[4309,4],[4482,4]]}}}],["old",{"_index":862,"t":{"244":{"position":[[1530,3]]},"302":{"position":[[5708,3],[5768,3]]}}}],["omit",{"_index":1571,"t":{"302":{"position":[[16195,4]]}}}],["on",{"_index":30,"t":{"163":{"position":[[354,3]]},"177":{"position":[[674,4]]},"218":{"position":[[95,3],[259,3],[614,3],[1458,3]]},"228":{"position":[[101,3]]},"240":{"position":[[187,3]]},"282":{"position":[[2206,3]]},"288":{"position":[[683,3]]},"292":{"position":[[156,3]]},"298":{"position":[[39,3]]},"302":{"position":[[479,4],[9284,4],[13330,3]]},"310":{"position":[[313,3]]}}}],["onc",{"_index":274,"t":{"179":{"position":[[421,4]]},"260":{"position":[[3097,4]]},"282":{"position":[[2843,4]]}}}],["onlyvalu",{"_index":591,"t":{"218":{"position":[[1436,10]]}}}],["open",{"_index":123,"t":{"167":{"position":[[65,4],[85,7],[328,4],[372,4]]},"173":{"position":[[34,4],[1099,4],[1445,4]]},"177":{"position":[[113,4]]},"260":{"position":[[464,4]]},"264":{"position":[[0,4]]},"280":{"position":[[106,4]]}}}],["openid",{"_index":594,"t":{"220":{"position":[[80,6],[986,6]]},"258":{"position":[[297,6],[549,6]]},"272":{"position":[[993,7],[2158,7]]},"274":{"position":[[276,7]]},"280":{"position":[[0,6],[220,6],[2628,6]]},"282":{"position":[[862,6],[906,6]]},"302":{"position":[[6676,6]]}}}],["openssl",{"_index":1335,"t":{"282":{"position":[[1104,7]]},"298":{"position":[[78,7],[288,7]]}}}],["oppos",{"_index":1236,"t":{"274":{"position":[[1240,7]]}}}],["option",{"_index":110,"t":{"165":{"position":[[823,8]]},"181":{"position":[[164,7],[317,8],[373,7]]},"183":{"position":[[218,7],[263,7]]},"185":{"position":[[37,7],[256,7],[379,7],[437,7]]},"187":{"position":[[1233,8],[1251,6],[1369,7],[1480,7]]},"192":{"position":[[53,8],[77,7],[222,7]]},"198":{"position":[[246,8]]},"200":{"position":[[180,8]]},"208":{"position":[[416,6]]},"210":{"position":[[467,8]]},"216":{"position":[[186,6],[316,7]]},"218":{"position":[[1187,10],[1316,10]]},"224":{"position":[[101,7],[115,7]]},"232":{"position":[[102,8]]},"236":{"position":[[1585,6],[2039,6]]},"244":{"position":[[3337,6],[3432,7]]},"254":{"position":[[985,6]]},"260":{"position":[[1066,11],[2071,7]]},"268":{"position":[[276,8],[362,7]]},"270":{"position":[[1050,8]]},"272":{"position":[[391,6],[448,9],[527,9],[591,9],[4057,7],[4874,7],[5219,7],[5532,6],[5988,6],[6037,6],[6143,6],[6400,8],[6638,6],[6743,6],[7066,8]]},"274":{"position":[[905,7]]},"280":{"position":[[1721,10],[2023,6],[2452,8]]},"282":{"position":[[1540,8],[2132,7],[3495,7]]},"286":{"position":[[407,8],[530,7],[706,7]]},"288":{"position":[[344,8],[584,7]]},"290":{"position":[[223,7]]},"296":{"position":[[48,8],[148,7]]},"300":{"position":[[169,6]]},"302":{"position":[[0,6],[52,9],[1057,8],[1652,8],[1883,11],[10776,6],[10871,7],[12680,7],[15437,10],[15740,6],[15917,7],[16362,7]]},"304":{"position":[[61,6]]},"318":{"position":[[5,6],[37,6]]},"322":{"position":[[175,7],[2326,6]]}}}],["order",{"_index":1419,"t":{"296":{"position":[[109,5]]}}}],["org",{"_index":490,"t":{"202":{"position":[[46,3],[57,3],[478,3]]},"268":{"position":[[534,3],[635,7],[795,4],[1559,3]]},"302":{"position":[[3551,3],[4037,3]]}}}],["organ",{"_index":1128,"t":{"268":{"position":[[259,12],[580,12],[713,12]]}}}],["organis",{"_index":491,"t":{"202":{"position":[[101,12]]},"268":{"position":[[678,12]]},"302":{"position":[[3597,12]]}}}],["organization'",{"_index":562,"t":{"218":{"position":[[514,14]]}}}],["organizationdefault",{"_index":552,"t":{"218":{"position":[[6,20]]}}}],["orgname/repo",{"_index":1135,"t":{"268":{"position":[[1150,12]]},"302":{"position":[[3795,12]]}}}],["orgname/repo=accesslevel",{"_index":1498,"t":{"302":{"position":[[4302,25]]}}}],["origin",{"_index":170,"t":{"171":{"position":[[204,6]]},"260":{"position":[[632,7]]},"280":{"position":[[146,10]]}}}],["os,base64",{"_index":1426,"t":{"298":{"position":[[125,10]]}}}],["otherwis",{"_index":551,"t":{"216":{"position":[[751,10]]},"220":{"position":[[631,10]]},"238":{"position":[[232,9]]},"254":{"position":[[992,9]]},"280":{"position":[[1903,10]]}}}],["out",{"_index":974,"t":{"252":{"position":[[691,3]]},"254":{"position":[[17,4],[325,3]]},"280":{"position":[[2125,3],[2318,3]]},"282":{"position":[[1156,3]]}}}],["output",{"_index":1589,"t":{"308":{"position":[[34,6],[81,6]]},"310":{"position":[[142,6]]},"312":{"position":[[23,6]]},"314":{"position":[[80,6]]}}}],["outsid",{"_index":1055,"t":{"260":{"position":[[2014,7]]},"306":{"position":[[326,7]]},"314":{"position":[[193,7]]}}}],["overrid",{"_index":725,"t":{"234":{"position":[[178,9]]},"278":{"position":[[183,8]]},"302":{"position":[[8465,8],[9938,8]]}}}],["overridden",{"_index":544,"t":{"216":{"position":[[371,10]]},"218":{"position":[[245,10],[388,11],[1279,11]]}}}],["override_speci",{"_index":1452,"t":{"298":{"position":[[711,16]]}}}],["overwrit",{"_index":1420,"t":{"296":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":179,"t":{"173":{"position":[[106,8]]},"294":{"position":[[37,7]]}}}],["pad",{"_index":841,"t":{"244":{"position":[[479,9]]}}}],["page",{"_index":289,"t":{"181":{"position":[[12,4],[143,4],[190,4],[331,4]]},"222":{"position":[[1654,5]]},"252":{"position":[[656,5],[695,4],[1282,5]]},"254":{"position":[[329,4]]},"262":{"position":[[506,4],[1091,4],[1205,4]]},"302":{"position":[[2403,4],[3357,5],[8538,4],[12366,5],[13567,4]]}}}],["pair",{"_index":842,"t":{"244":{"position":[[533,4]]},"302":{"position":[[2924,5]]}}}],["pane",{"_index":1023,"t":{"260":{"position":[[237,5],[284,5],[325,5],[432,5]]},"272":{"position":[[2751,4]]}}}],["parallel",{"_index":1479,"t":{"302":{"position":[[2173,8]]}}}],["paramet",{"_index":405,"t":{"190":{"position":[[83,9]]},"216":{"position":[[81,9],[280,10],[347,9],[476,9],[654,9]]},"218":{"position":[[36,9],[198,9],[366,9],[1159,10]]},"222":{"position":[[1965,10]]},"234":{"position":[[82,10],[202,9],[600,9]]},"254":{"position":[[364,10]]},"256":{"position":[[123,10],[140,11]]},"272":{"position":[[7081,10]]},"304":{"position":[[258,10],[1096,10],[1121,9]]},"316":{"position":[[3773,10]]}}}],["part",{"_index":410,"t":{"192":{"position":[[149,4]]},"316":{"position":[[1796,6],[2177,4],[2455,4]]}}}],["particularli",{"_index":1586,"t":{"306":{"position":[[286,12]]}}}],["pass",{"_index":1,"t":{"163":{"position":[[12,7]]},"187":{"position":[[157,4],[312,4],[344,4],[380,4],[416,4]]},"216":{"position":[[103,6],[253,6],[560,6],[677,6]]},"218":{"position":[[58,6],[216,6]]},"220":{"position":[[1593,4]]},"222":{"position":[[1988,6]]},"234":{"position":[[93,6],[212,6]]},"238":{"position":[[154,4]]},"240":{"position":[[276,6]]},"244":{"position":[[2154,4]]},"260":{"position":[[2643,4]]},"262":{"position":[[2410,6]]},"264":{"position":[[557,6]]},"272":{"position":[[3100,4]]},"280":{"position":[[1795,6]]},"282":{"position":[[2283,4]]},"286":{"position":[[388,4]]},"288":{"position":[[325,4]]},"290":{"position":[[204,4]]},"302":{"position":[[644,7],[7145,4],[7170,4],[7193,4],[7373,4],[7404,4],[7474,4],[7495,4],[7698,7],[7836,4],[7858,4],[7884,4],[7906,4],[7954,4],[7977,4],[11992,4]]},"304":{"position":[[71,4]]},"316":{"position":[[990,4],[1301,4],[1330,4]]}}}],["passhosthead",{"_index":795,"t":{"236":{"position":[[2235,14],[2255,14]]}}}],["password",{"_index":217,"t":{"173":{"position":[[1381,8],[1393,9]]},"198":{"position":[[529,8]]},"210":{"position":[[750,8]]},"302":{"position":[[603,8],[623,8],[2495,8],[9860,8],[9882,9],[9951,8],[10007,8],[10038,9],[10098,9],[10128,8]]}}}],["password/basic_auth_password",{"_index":355,"t":{"187":{"position":[[635,28]]}}}],["patch",{"_index":283,"t":{"179":{"position":[[601,7]]}}}],["path",{"_index":323,"t":{"183":{"position":[[123,4]]},"192":{"position":[[536,4]]},"206":{"position":[[251,4]]},"210":{"position":[[300,4]]},"214":{"position":[[150,4]]},"222":{"position":[[1698,5]]},"228":{"position":[[345,4]]},"236":{"position":[[140,4],[165,5],[296,4],[308,4],[407,5],[592,4],[622,4],[671,4],[721,4],[824,4],[877,4],[949,4],[1199,5],[1378,4]]},"238":{"position":[[171,4],[397,4],[422,5]]},"252":{"position":[[279,6]]},"260":{"position":[[2888,4]]},"272":{"position":[[6031,5]]},"302":{"position":[[1007,4],[1637,4],[1668,4],[2295,4],[2354,4],[3037,4],[3073,5],[3131,5],[4632,4],[6070,4],[8291,5],[8572,4],[8766,4],[8961,4],[12805,5],[12943,5],[14022,4],[14357,4],[14559,5],[14653,4]]},"304":{"position":[[501,5],[703,4],[852,4],[1256,4]]},"312":{"position":[[177,8],[1166,4]]}}}],["path.eg",{"_index":765,"t":{"236":{"position":[[1257,8]]}}}],["path/to/cert.key",{"_index":944,"t":{"250":{"position":[[869,18]]}}}],["path/to/cert.pem",{"_index":942,"t":{"250":{"position":[[830,18]]}}}],["path/to/existing/config.cfg",{"_index":327,"t":{"185":{"position":[[204,29],[558,29]]}}}],["path/to/new/config.yaml",{"_index":332,"t":{"185":{"position":[[523,25]]}}}],["path/to/sit",{"_index":1666,"t":{"316":{"position":[[2623,15]]}}}],["path_regex",{"_index":1459,"t":{"302":{"position":[[195,10],[13015,10],[13029,12]]}}}],["pathprefix",{"_index":1720,"t":{"322":{"position":[[491,16],[1285,16]]}}}],["pathprefix(`/no",{"_index":1722,"t":{"322":{"position":[[760,15]]}}}],["pathprefix(`/oauth2",{"_index":1700,"t":{"320":{"position":[[592,23]]},"322":{"position":[[1072,23]]}}}],["pattern",{"_index":565,"t":{"218":{"position":[[561,8],[978,8]]},"234":{"position":[[259,7],[379,7],[396,7]]},"236":{"position":[[449,7]]}}}],["pem",{"_index":534,"t":{"214":{"position":[[87,3],[182,3]]},"282":{"position":[[1023,4],[2383,3],[2528,3]]},"302":{"position":[[5925,3],[6102,3]]}}}],["per",{"_index":1416,"t":{"292":{"position":[[166,3]]},"302":{"position":[[484,3],[2079,3],[2133,3]]}}}],["perform",{"_index":1202,"t":{"272":{"position":[[3849,7]]},"280":{"position":[[397,7],[1573,7]]}}}],["period",{"_index":475,"t":{"200":{"position":[[81,6]]},"236":{"position":[[2128,6]]},"302":{"position":[[3173,6]]}}}],["permiss",{"_index":1064,"t":{"260":{"position":[[2778,11]]},"262":{"position":[[445,11],[494,11],[538,11],[598,12],[666,11],[775,10],[2222,11]]},"288":{"position":[[176,11]]}}}],["pick",{"_index":1070,"t":{"262":{"position":[[144,4]]},"280":{"position":[[2235,4],[2660,4]]}}}],["pin",{"_index":937,"t":{"250":{"position":[[713,3]]}}}],["ping",{"_index":966,"t":{"252":{"position":[[318,5]]},"302":{"position":[[8567,4],[8588,4],[8643,7],[8653,4],[12546,4],[12595,4]]},"308":{"position":[[716,5],[743,4],[815,4]]}}}],["ping,/path2",{"_index":1492,"t":{"302":{"position":[[3109,14]]}}}],["pkce",{"_index":1179,"t":{"272":{"position":[[661,4]]},"302":{"position":[[904,4]]}}}],["plain",{"_index":1462,"t":{"302":{"position":[[959,7]]},"316":{"position":[[2894,5]]}}}],["plan",{"_index":1088,"t":{"262":{"position":[[1030,8]]}}}],["platform",{"_index":924,"t":{"250":{"position":[[86,8],[276,8]]},"262":{"position":[[270,8],[1660,8]]},"280":{"position":[[2603,8]]}}}],["pleas",{"_index":122,"t":{"167":{"position":[[58,6],[118,6],[278,6],[357,6]]},"177":{"position":[[99,6],[144,6],[346,6],[434,6]]},"181":{"position":[[260,6],[835,6]]},"258":{"position":[[430,6]]},"272":{"position":[[2205,6],[6780,6]]}}}],["plural",{"_index":1454,"t":{"300":{"position":[[186,6]]},"306":{"position":[[257,6]]}}}],["poc",{"_index":1472,"t":{"302":{"position":[[1699,6]]}}}],["point",{"_index":1239,"t":{"274":{"position":[[1349,8]]},"322":{"position":[[119,8]]}}}],["polici",{"_index":1085,"t":{"262":{"position":[[884,8]]},"280":{"position":[[2351,8]]}}}],["popul",{"_index":1165,"t":{"270":{"position":[[1276,8]]}}}],["port",{"_index":931,"t":{"250":{"position":[[390,4],[460,4]]},"254":{"position":[[1075,4]]},"280":{"position":[[584,5]]},"302":{"position":[[16059,5],[16118,4],[16231,5],[16302,5]]}}}],["possibl",{"_index":230,"t":{"175":{"position":[[165,9]]},"177":{"position":[[467,9]]},"200":{"position":[[125,8]]},"270":{"position":[[82,9]]},"274":{"position":[[877,8]]},"302":{"position":[[2156,8]]}}}],["post",{"_index":237,"t":{"177":{"position":[[158,4]]}}}],["potenti",{"_index":257,"t":{"177":{"position":[[622,9]]},"236":{"position":[[1619,9]]}}}],["powershel",{"_index":1424,"t":{"298":{"position":[[86,10]]}}}],["ppc64le",{"_index":73,"t":{"165":{"position":[[264,8],[360,8]]}}}],["pr",{"_index":143,"t":{"167":{"position":[[335,2],[409,2]]},"177":{"position":[[130,2]]},"179":{"position":[[373,3]]}}}],["practic",{"_index":1190,"t":{"272":{"position":[[1526,10]]}}}],["pre",{"_index":79,"t":{"165":{"position":[[319,3]]},"272":{"position":[[4214,3]]}}}],["prebuilt",{"_index":55,"t":{"165":{"position":[[33,8],[234,8],[453,8]]}}}],["preced",{"_index":740,"t":{"236":{"position":[[388,10]]},"296":{"position":[[118,11]]}}}],["preconfigur",{"_index":126,"t":{"167":{"position":[[136,13]]}}}],["prefer",{"_index":353,"t":{"187":{"position":[[582,6]]},"302":{"position":[[7569,9],[7619,6],[7645,6],[8054,9],[11902,9]]}}}],["preferred_usernam",{"_index":1015,"t":{"258":{"position":[[489,18]]}}}],["prefix",{"_index":462,"t":{"198":{"position":[[219,6],[233,6],[255,6]]},"210":{"position":[[440,6],[454,6],[476,6]]},"236":{"position":[[627,8],[676,8]]},"252":{"position":[[136,6],[175,6]]},"302":{"position":[[1555,6],[8934,6],[15189,6],[15936,8]]},"306":{"position":[[75,9]]}}}],["preflight",{"_index":1543,"t":{"302":{"position":[[12636,9]]}}}],["prepend",{"_index":463,"t":{"198":{"position":[[275,9]]},"210":{"position":[[496,9]]}}}],["present",{"_index":260,"t":{"177":{"position":[[705,7]]},"240":{"position":[[237,7]]},"302":{"position":[[8179,8],[13687,9],[13803,9]]}}}],["preserv",{"_index":517,"t":{"208":{"position":[[362,9]]}}}],["preserverequestvalu",{"_index":514,"t":{"208":{"position":[[260,20],[286,20]]}}}],["pretti",{"_index":1382,"t":{"284":{"position":[[282,6]]}}}],["prevent",{"_index":600,"t":{"220":{"position":[[200,8]]},"242":{"position":[[460,7]]}}}],["preview",{"_index":1216,"t":{"272":{"position":[[6910,7]]},"280":{"position":[[1682,7]]}}}],["previou",{"_index":286,"t":{"179":{"position":[[652,8]]}}}],["previous",{"_index":270,"t":{"179":{"position":[[287,10]]}}}],["primari",{"_index":411,"t":{"192":{"position":[[161,7]]}}}],["print",{"_index":329,"t":{"185":{"position":[[304,5]]},"302":{"position":[[15081,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":1427,"t":{"298":{"position":[[136,57]]}}}],["prior",{"_index":302,"t":{"181":{"position":[[245,5]]},"274":{"position":[[119,5]]}}}],["privat",{"_index":242,"t":{"177":{"position":[[222,8]]},"179":{"position":[[37,9]]},"214":{"position":[[72,7],[162,7]]},"268":{"position":[[1048,7]]},"282":{"position":[[1065,7]]},"302":{"position":[[5910,7],[6082,7],[14365,7]]}}}],["process",{"_index":1369,"t":{"282":{"position":[[2587,7]]},"312":{"position":[[965,8]]},"316":{"position":[[2934,9],[2980,9]]}}}],["product",{"_index":1028,"t":{"260":{"position":[[374,8]]},"282":{"position":[[294,10]]},"302":{"position":[[12437,11]]}}}],["profil",{"_index":371,"t":{"187":{"position":[[933,7]]},"222":{"position":[[2131,7]]},"270":{"position":[[727,7]]},"274":{"position":[[284,7]]},"282":{"position":[[1992,7]]},"302":{"position":[[8104,7],[8123,7]]}}}],["profileurl",{"_index":682,"t":{"222":{"position":[[2095,10],[2113,10]]}}}],["program",{"_index":185,"t":{"173":{"position":[[250,10],[568,10]]}}}],["project",{"_index":154,"t":{"169":{"position":[[5,7]]},"175":{"position":[[33,8],[74,7],[204,8]]},"204":{"position":[[113,8],[131,8],[184,8]]},"260":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"268":{"position":[[13,8]]},"274":{"position":[[411,8]]},"276":{"position":[[55,8]]},"280":{"position":[[118,9]]},"302":{"position":[[4184,8],[4250,8]]}}}],["prometheu",{"_index":970,"t":{"252":{"position":[[533,10]]},"302":{"position":[[8883,10]]}}}],["prompt",{"_index":376,"t":{"187":{"position":[[998,6]]},"302":{"position":[[217,6],[8149,6],[8168,7],[8197,6]]}}}],["prompt/approval_prompt",{"_index":378,"t":{"187":{"position":[[1014,22]]}}}],["promptallow",{"_index":554,"t":{"218":{"position":[[130,12]]}}}],["promptdefault",{"_index":557,"t":{"218":{"position":[[294,14]]}}}],["properli",{"_index":1225,"t":{"274":{"position":[[551,9]]}}}],["propos",{"_index":268,"t":{"179":{"position":[[257,8]]}}}],["protect",{"_index":684,"t":{"222":{"position":[[2213,9]]},"244":{"position":[[774,8]]},"262":{"position":[[315,7]]},"280":{"position":[[2189,11],[2279,8]]},"302":{"position":[[11310,9]]}}}],["protectedresourc",{"_index":683,"t":{"222":{"position":[[2171,17]]}}}],["proto,host,uri",{"_index":1536,"t":{"302":{"position":[[11472,16]]}}}],["protocol",{"_index":1184,"t":{"272":{"position":[[984,8]]},"282":{"position":[[842,9]]},"302":{"position":[[16136,8]]},"310":{"position":[[1071,8],[1101,9]]},"312":{"position":[[534,13],[860,8],[890,9]]}}}],["provid",{"_index":26,"t":{"163":{"position":[[309,8],[473,9],[740,8]]},"165":{"position":[[568,8],[709,8],[759,8],[912,8]]},"173":{"position":[[411,8],[734,8],[886,8],[963,9]]},"183":{"position":[[111,7]]},"187":{"position":[[803,8],[812,8],[856,8],[1215,8]]},"190":{"position":[[13,9]]},"192":{"position":[[1809,9],[1819,9],[1829,9],[1869,10]]},"194":{"position":[[13,9]]},"196":{"position":[[13,9]]},"202":{"position":[[13,9]]},"204":{"position":[[13,9]]},"206":{"position":[[13,9]]},"212":{"position":[[13,9],[234,9]]},"214":{"position":[[13,9]]},"216":{"position":[[13,9],[712,8]]},"220":{"position":[[13,9]]},"222":{"position":[[13,10],[24,8],[70,8],[212,10],[345,10],[584,9],[666,9],[744,9],[842,9],[929,9],[1015,9],[1101,9],[1190,9],[1313,9],[1414,10],[1425,8],[1504,9],[1581,9]]},"224":{"position":[[29,9],[87,8]]},"226":{"position":[[0,11],[47,9],[92,10]]},"248":{"position":[[47,9],[418,12]]},"250":{"position":[[1384,12]]},"254":{"position":[[169,8],[785,8]]},"258":{"position":[[54,8],[90,10],[195,9],[365,8],[400,8],[455,9],[564,9]]},"260":{"position":[[2747,8]]},"262":{"position":[[2308,8]]},"264":{"position":[[92,7],[455,8]]},"268":{"position":[[184,8],[1264,7]]},"270":{"position":[[24,8],[70,8],[1256,8]]},"272":{"position":[[4048,8]]},"274":{"position":[[10,8]]},"280":{"position":[[84,9],[133,8],[235,8],[297,9],[379,8],[553,8],[956,8],[970,8],[1001,9],[1554,8],[1918,8],[3050,8],[4377,8]]},"282":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"284":{"position":[[14,8],[125,9],[528,8]]},"286":{"position":[[378,9]]},"288":{"position":[[315,9]]},"290":{"position":[[323,8]]},"294":{"position":[[27,9],[61,8],[151,9]]},"302":{"position":[[1811,9],[2538,8],[8220,8],[8242,8],[8260,8],[8359,9],[8436,8],[8555,9],[13528,8],[13714,9],[15002,9],[15820,9],[16344,8]]},"304":{"position":[[194,9],[353,7],[691,7],[1149,9]]},"322":{"position":[[34,8],[2252,8]]}}}],["provider'",{"_index":990,"t":{"254":{"position":[[309,10]]},"282":{"position":[[3422,10]]},"302":{"position":[[8478,10]]},"316":{"position":[[1699,10]]}}}],["provider.example.com",{"_index":1002,"t":{"254":{"position":[[894,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":994,"t":{"254":{"position":[[486,36]]}}}],["provider.if",{"_index":677,"t":{"222":{"position":[[1766,11]]}}}],["provider.thi",{"_index":670,"t":{"222":{"position":[[1374,13]]}}}],["provider/sign_out_pag",{"_index":997,"t":{"254":{"position":[[672,25]]}}}],["provider=\"github",{"_index":1407,"t":{"290":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":1226,"t":{"274":{"position":[[605,17]]}}}],["provider=adf",{"_index":1121,"t":{"264":{"position":[[333,13]]}}}],["provider=azur",{"_index":1093,"t":{"262":{"position":[[1439,14],[1747,14]]}}}],["provider=bitbucket",{"_index":1401,"t":{"288":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":1394,"t":{"286":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":1149,"t":{"270":{"position":[[440,17]]},"272":{"position":[[2,17]]}}}],["providermust",{"_index":672,"t":{"222":{"position":[[1465,12]]}}}],["provideror",{"_index":664,"t":{"222":{"position":[[1179,10]]}}}],["providers.new",{"_index":1417,"t":{"294":{"position":[[98,15]]}}}],["providerthi",{"_index":642,"t":{"222":{"position":[[173,12],[306,12]]}}}],["providertyp",{"_index":671,"t":{"222":{"position":[[1434,12]]},"224":{"position":[[39,12]]}}}],["proxi",{"_index":3,"t":{"163":{"position":[[32,5],[729,5]]},"165":{"position":[[672,5],[785,5]]},"173":{"position":[[20,5],[182,5],[495,5],[777,5],[854,6],[1416,5]]},"175":{"position":[[12,5]]},"177":{"position":[[65,5],[339,6]]},"185":{"position":[[58,5],[163,5],[467,5],[502,5]]},"187":{"position":[[191,5],[1511,5]]},"192":{"position":[[204,6],[490,7],[973,5],[1045,5],[1262,5]]},"236":{"position":[[108,7],[1057,8],[1669,5],[2416,8]]},"238":{"position":[[365,7]]},"240":{"position":[[109,5]]},"242":{"position":[[97,5],[396,5],[655,6]]},"244":{"position":[[1021,5],[1374,5],[1644,5],[1848,5],[2166,5]]},"246":{"position":[[52,5],[69,5]]},"248":{"position":[[38,5],[162,5],[221,5],[978,5]]},"250":{"position":[[133,5],[432,8],[451,5],[478,5],[1199,5],[1258,5]]},"252":{"position":[[7,5],[87,7],[169,5]]},"258":{"position":[[179,5]]},"260":{"position":[[1694,5],[2845,5],[2961,6]]},"262":{"position":[[1303,5]]},"264":{"position":[[320,5]]},"272":{"position":[[1789,5],[3077,5],[3713,5],[3838,5],[5526,5],[5771,5],[6005,6],[6160,6],[6505,5],[6632,5]]},"280":{"position":[[530,5],[789,5],[924,5],[1028,5],[1048,5],[3656,5],[3676,5],[4817,5],[4837,5]]},"282":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"286":{"position":[[206,5],[249,5]]},"288":{"position":[[108,6],[152,5]]},"290":{"position":[[238,6]]},"294":{"position":[[130,5]]},"296":{"position":[[7,5]]},"302":{"position":[[8928,5],[8976,5],[9042,5],[9082,8],[9268,5],[11346,5],[11389,6],[13177,5],[15427,5],[15549,5],[15718,5]]},"304":{"position":[[7,5],[623,5],[978,5]]},"308":{"position":[[19,5]]},"310":{"position":[[937,5]]},"312":{"position":[[792,5]]},"316":{"position":[[192,8],[1763,5]]},"318":{"position":[[31,5]]},"320":{"position":[[223,8]]},"322":{"position":[[138,5],[208,6],[1236,5]]}}}],["proxiedto",{"_index":796,"t":{"236":{"position":[[2323,9]]}}}],["proxy'",{"_index":9,"t":{"163":{"position":[[96,7]]},"254":{"position":[[91,7]]},"286":{"position":[[296,7]]},"316":{"position":[[86,7]]},"320":{"position":[[93,7]]}}}],["proxy'secret",{"_index":1263,"t":{"280":{"position":[[775,13]]}}}],["proxy(e.g",{"_index":1075,"t":{"262":{"position":[[337,10]]}}}],["proxy.cfg",{"_index":192,"t":{"173":{"position":[[454,10]]},"300":{"position":[[225,9],[326,9]]}}}],["proxy.localtest.me:4180",{"_index":219,"t":{"173":{"position":[[1464,24]]}}}],["proxy.thi",{"_index":425,"t":{"192":{"position":[[929,10]]}}}],["proxy/oauth2",{"_index":65,"t":{"165":{"position":[[150,12]]}}}],["proxy/oauth2/callback",{"_index":1392,"t":{"286":{"position":[[163,22]]}}}],["proxy/v7@latest",{"_index":66,"t":{"165":{"position":[[163,16]]}}}],["proxy=tru",{"_index":960,"t":{"250":{"position":[[1409,10]]},"322":{"position":[[306,11]]}}}],["proxy>/oauth2/callback",{"_index":1400,"t":{"288":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":1114,"t":{"262":{"position":[[2451,17]]},"264":{"position":[[598,17]]}}}],["proxy_connect_timeout",{"_index":957,"t":{"250":{"position":[[1094,21]]}}}],["proxy_pass",{"_index":949,"t":{"250":{"position":[[955,10]]},"316":{"position":[[319,10],[657,10],[2584,10],[2948,10]]}}}],["proxy_pass_request_bodi",{"_index":1647,"t":{"316":{"position":[[883,23]]}}}],["proxy_read_timeout",{"_index":959,"t":{"250":{"position":[[1142,18]]}}}],["proxy_send_timeout",{"_index":958,"t":{"250":{"position":[[1119,18]]}}}],["proxy_set_head",{"_index":951,"t":{"250":{"position":[[989,16],[1018,16],[1059,16]]},"316":{"position":[[353,16],[382,16],[423,16],[458,16],[559,16],[691,16],[720,16],[761,16],[847,16],[1218,16],[1249,16],[1428,16]]}}}],["proxycd",{"_index":166,"t":{"171":{"position":[[128,7]]}}}],["proxygit",{"_index":167,"t":{"171":{"position":[[143,8]]}}}],["proxyrawpath",{"_index":805,"t":{"238":{"position":[[118,12],[136,12]]}}}],["proxyredirecturi",{"_index":1261,"t":{"280":{"position":[[702,18]]}}}],["proxyus",{"_index":1533,"t":{"302":{"position":[[9326,9]]}}}],["proxywebsocket",{"_index":798,"t":{"236":{"position":[[2371,15],[2392,15]]}}}],["pubjwk",{"_index":387,"t":{"187":{"position":[[1185,6]]},"282":{"position":[[1917,6]]},"302":{"position":[[9098,6]]}}}],["pubjwkurl",{"_index":536,"t":{"214":{"position":[[214,9],[231,9]]}}}],["pubkey",{"_index":538,"t":{"214":{"position":[[252,6]]},"302":{"position":[[9120,6]]}}}],["public",{"_index":1134,"t":{"268":{"position":[[1011,6],[1229,6]]},"282":{"position":[[974,6]]}}}],["public_repo",{"_index":1138,"t":{"268":{"position":[[1376,11]]}}}],["publicli",{"_index":239,"t":{"177":{"position":[[175,9]]}}}],["pull",{"_index":124,"t":{"167":{"position":[[105,4]]},"310":{"position":[[1173,6]]},"312":{"position":[[1036,6]]}}}],["push",{"_index":169,"t":{"171":{"position":[[184,4]]},"202":{"position":[[341,4]]},"268":{"position":[[994,4]]},"302":{"position":[[3898,4]]}}}],["put",{"_index":67,"t":{"165":{"position":[[191,3]]}}}],["python",{"_index":1422,"t":{"298":{"position":[[66,6],[107,6]]}}}],["queri",{"_index":540,"t":{"216":{"position":[[75,5],[390,5]]},"218":{"position":[[1153,5],[1405,5]]},"234":{"position":[[76,5]]},"254":{"position":[[358,5]]},"256":{"position":[[117,5],[134,5]]},"320":{"position":[[1287,6]]}}}],["quick",{"_index":1334,"t":{"282":{"position":[[1080,5]]}}}],["quickli",{"_index":229,"t":{"175":{"position":[[154,7]]}}}],["quit",{"_index":851,"t":{"244":{"position":[[964,5]]}}}],["quot",{"_index":577,"t":{"218":{"position":[[845,6]]}}}],["r_basicprofil",{"_index":1243,"t":{"276":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":1244,"t":{"276":{"position":[[187,15]]}}}],["rand",{"_index":1437,"t":{"298":{"position":[[296,4]]}}}],["random",{"_index":612,"t":{"220":{"position":[[586,6]]},"244":{"position":[[391,6],[442,6]]},"310":{"position":[[1210,6]]},"312":{"position":[[1073,6]]}}}],["random_password",{"_index":1450,"t":{"298":{"position":[[663,17]]}}}],["rang",{"_index":1559,"t":{"302":{"position":[[15326,6]]}}}],["raw",{"_index":806,"t":{"238":{"position":[[163,3]]},"316":{"position":[[2229,3]]}}}],["rd",{"_index":992,"t":{"254":{"position":[[355,2]]}}}],["re",{"_index":831,"t":{"242":{"position":[[799,2]]},"254":{"position":[[200,2]]}}}],["reach",{"_index":1550,"t":{"302":{"position":[[13584,5]]}}}],["read",{"_index":1065,"t":{"260":{"position":[[2862,4]]},"262":{"position":[[440,4]]},"268":{"position":[[1207,4]]},"272":{"position":[[5654,4]]},"288":{"position":[[240,4],[261,4]]}}}],["read_api",{"_index":1224,"t":{"274":{"position":[[445,8]]}}}],["readi",{"_index":284,"t":{"179":{"position":[[613,6]]},"252":{"position":[[398,6]]},"302":{"position":[[8760,5],[8782,5],[8837,8],[12602,5]]},"308":{"position":[[768,6]]}}}],["real",{"_index":953,"t":{"250":{"position":[[1037,4]]},"282":{"position":[[3070,4],[3215,4]]},"302":{"position":[[9168,4],[9226,4],[9312,4],[9342,4],[11428,4],[15450,4]]},"310":{"position":[[899,4]]},"312":{"position":[[754,4]]},"316":{"position":[[401,4],[739,4]]}}}],["realm",{"_index":1145,"t":{"270":{"position":[[127,5]]},"272":{"position":[[214,6],[311,6],[467,5],[938,5],[1963,5],[2098,5],[3994,5],[4173,5],[4451,5],[4474,5],[4512,6],[4799,6],[4998,5],[7051,5]]}}}],["realm>/protocol/openid",{"_index":1155,"t":{"270":{"position":[[592,22],[687,22],[784,22],[885,22]]}}}],["reason",{"_index":878,"t":{"244":{"position":[[2364,7]]},"260":{"position":[[2537,6]]}}}],["recipi",{"_index":1192,"t":{"272":{"position":[[1754,9],[3402,11]]}}}],["recommend",{"_index":884,"t":{"244":{"position":[[2468,11]]},"246":{"position":[[14,11]]},"260":{"position":[[871,11],[1233,14],[1672,14]]},"272":{"position":[[1543,11]]},"302":{"position":[[977,13]]},"316":{"position":[[3574,11]]}}}],["redeem",{"_index":369,"t":{"187":{"position":[[911,6]]},"220":{"position":[[686,6]]},"268":{"position":[[1837,6]]},"270":{"position":[[631,6]]},"282":{"position":[[3765,6]]},"284":{"position":[[686,6]]},"290":{"position":[[527,6]]},"302":{"position":[[9352,6],[13452,6]]}}}],["redeemurl",{"_index":680,"t":{"222":{"position":[[2035,9],[2052,9]]}}}],["redempt",{"_index":681,"t":{"222":{"position":[[2075,10]]},"302":{"position":[[9376,10]]}}}],["redi",{"_index":40,"t":{"163":{"position":[[552,6]]},"240":{"position":[[326,5]]},"244":{"position":[[4,5],[57,6],[606,5],[711,5],[1421,5],[1565,5],[2635,5],[2698,5],[2726,5],[2817,5],[2874,5],[2937,5],[2970,5],[3016,5],[3119,5],[3174,5],[3237,5],[3267,5],[3323,5],[3370,5],[3418,5],[3531,5],[3580,5]]},"252":{"position":[[474,5]]},"262":{"position":[[2498,5]]},"264":{"position":[[645,5]]},"302":{"position":[[9503,5],[9555,5],[9640,5],[9660,5],[9695,5],[9712,5],[9763,5],[9840,5],[9854,5],[9876,5],[9911,5],[9969,5],[9992,5],[10023,5],[10087,5],[10122,5],[10139,5],[10173,5],[10228,5],[10249,5],[10302,5],[10388,5],[10409,5],[10443,5],[10469,5],[10527,5],[10562,5],[10594,5],[10627,5],[10686,5],[10720,5],[10762,5],[10809,5],[10857,5],[10966,5],[11015,5],[11767,5]]}}}],["redirect",{"_index":25,"t":{"163":{"position":[[276,10]]},"238":{"position":[[245,10]]},"252":{"position":[[816,8]]},"254":{"position":[[22,8],[269,8],[380,8],[550,8],[585,8],[646,9],[873,8],[1006,8]]},"258":{"position":[[123,8]]},"260":{"position":[[703,8]]},"262":{"position":[[232,8]]},"266":{"position":[[95,8]]},"270":{"position":[[174,8]]},"272":{"position":[[97,8],[1020,8],[2435,8]]},"274":{"position":[[322,8],[625,8],[703,8],[1318,8]]},"276":{"position":[[217,8]]},"280":{"position":[[1054,8],[2720,8],[3969,8],[4029,8]]},"282":{"position":[[1379,8],[1619,8],[3610,8]]},"284":{"position":[[448,12]]},"286":{"position":[[315,8],[562,8],[680,8]]},"290":{"position":[[87,8],[267,8]]},"302":{"position":[[127,11],[2716,9],[3277,8],[3366,9],[9398,8],[9428,8],[11511,8],[15155,11],[16022,8]]},"316":{"position":[[490,8],[591,8]]},"322":{"position":[[0,8],[372,9],[561,8],[572,9],[781,11],[849,8],[1894,9],[2059,9]]}}}],["redis.conf",{"_index":902,"t":{"244":{"position":[[3463,10]]},"302":{"position":[[10898,10]]}}}],["redis://host[:port",{"_index":1534,"t":{"302":{"position":[[9591,21],[9740,20],[10339,21]]}}}],["reduc",{"_index":1207,"t":{"272":{"position":[[5403,6]]},"308":{"position":[[828,8]]}}}],["refer",{"_index":314,"t":{"181":{"position":[[552,9],[853,9]]},"183":{"position":[[94,9]]},"228":{"position":[[57,10]]},"272":{"position":[[5641,5],[6787,5]]},"282":{"position":[[930,5],[1284,8]]},"284":{"position":[[367,5]]}}}],["refresh",{"_index":828,"t":{"242":{"position":[[734,10]]},"244":{"position":[[1053,7],[1070,7],[1249,7],[1403,7],[1453,7],[1534,7],[1608,8],[1659,7],[1736,10],[1801,7],[1859,7],[1962,9],[2007,7],[2403,7],[2552,7]]},"260":{"position":[[886,7],[940,7],[3079,9]]},"280":{"position":[[2830,7],[4138,7]]},"302":{"position":[[1719,7],[1736,7],[15847,8]]},"316":{"position":[[1494,8]]}}}],["refresh/access/id",{"_index":847,"t":{"244":{"position":[[787,17]]}}}],["refreshes.default",{"_index":617,"t":{"220":{"position":[[712,17]]}}}],["regardless",{"_index":917,"t":{"248":{"position":[[679,10]]}}}],["regex",{"_index":7,"t":{"163":{"position":[[70,6]]},"302":{"position":[[12715,5]]}}}],["regist",{"_index":104,"t":{"165":{"position":[[722,8]]},"258":{"position":[[17,8]]},"262":{"position":[[404,9]]},"282":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":1016,"t":{"260":{"position":[[16,12]]},"262":{"position":[[94,13],[130,13],[469,13],[1147,12]]},"276":{"position":[[18,12]]}}}],["regular",{"_index":272,"t":{"179":{"position":[[365,7]]},"218":{"position":[[432,7],[814,7]]},"234":{"position":[[417,7]]},"236":{"position":[[534,7]]}}}],["releas",{"_index":58,"t":{"165":{"position":[[58,7],[111,7],[323,7],[586,7]]},"179":{"position":[[493,8],[661,9]]},"192":{"position":[[298,8]]},"220":{"position":[[764,8]]},"272":{"position":[[846,7]]}}}],["relev",{"_index":877,"t":{"244":{"position":[[2282,8]]}}}],["reload",{"_index":1728,"t":{"322":{"position":[[2336,6]]}}}],["remain",{"_index":750,"t":{"236":{"position":[[711,9]]},"272":{"position":[[2225,9]]},"276":{"position":[[300,9]]}}}],["remot",{"_index":1563,"t":{"302":{"position":[[15581,6]]}}}],["remote_addr",{"_index":955,"t":{"250":{"position":[[1045,13]]},"316":{"position":[[409,13],[747,13]]}}}],["remote_address",{"_index":1595,"t":{"310":{"position":[[181,16]]},"312":{"position":[[62,16]]}}}],["remov",{"_index":298,"t":{"181":{"position":[[211,8]]},"183":{"position":[[255,7]]},"185":{"position":[[368,6],[429,7]]},"187":{"position":[[1467,6]]},"254":{"position":[[76,7]]},"272":{"position":[[829,7]]}}}],["renam",{"_index":299,"t":{"181":{"position":[[220,7]]}}}],["replac",{"_index":309,"t":{"181":{"position":[[479,7]]},"300":{"position":[[65,9]]},"306":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":1444,"t":{"298":{"position":[[550,19]]}}}],["repo",{"_index":145,"t":{"167":{"position":[[351,5]]},"202":{"position":[[176,4],[188,4]]},"268":{"position":[[1076,8]]},"282":{"position":[[2497,4]]},"302":{"position":[[3718,4]]}}}],["report",{"_index":1623,"t":{"310":{"position":[[1381,8]]},"312":{"position":[[1453,8]]}}}],["repositori",{"_index":456,"t":{"196":{"position":[[108,10],[126,10],[186,10]]},"202":{"position":[[239,10],[304,10],[360,10]]},"268":{"position":[[329,11],[953,11],[1018,10],[1056,11],[1126,10],[1236,10],[1320,11],[1445,10]]},"288":{"position":[[245,12],[696,10]]},"302":{"position":[[3771,10],[3862,10],[3917,11]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":1387,"t":{"284":{"position":[[714,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":1386,"t":{"284":{"position":[[647,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":1388,"t":{"284":{"position":[[786,39]]}}}],["url]/stat",{"_index":1583,"t":{"304":{"position":[[984,13]]}}}],["url]/var/www/stat",{"_index":1579,"t":{"304":{"position":[[629,21]]}}}],["urldefault",{"_index":607,"t":{"220":{"position":[[457,10]]}}}],["urleg",{"_index":597,"t":{"220":{"position":[[102,6],[1006,6]]}}}],["urlparameterrul",{"_index":589,"t":{"218":{"position":[[1297,18]]},"234":{"position":[[32,16]]}}}],["us",{"_index":51,"t":{"163":{"position":[[761,6]]},"165":{"position":[[25,5],[80,5],[226,5],[311,5],[407,5],[791,5]]},"167":{"position":[[25,5],[438,5]]},"169":{"position":[[32,5]]},"173":{"position":[[878,3],[984,5]]},"177":{"position":[[550,4]]},"179":{"position":[[3,3],[361,3]]},"181":{"position":[[293,3],[659,5]]},"183":{"position":[[3,3],[141,5],[182,5]]},"185":{"position":[[64,5],[473,5]]},"187":{"position":[[100,5],[1352,3]]},"192":{"position":[[394,4],[626,4],[861,4],[953,4],[963,5],[1217,4],[1433,3],[1539,4],[1741,3],[1842,4]]},"194":{"position":[[233,4]]},"198":{"position":[[517,4]]},"202":{"position":[[285,3]]},"206":{"position":[[391,3]]},"208":{"position":[[183,4]]},"210":{"position":[[738,4]]},"212":{"position":[[210,5]]},"214":{"position":[[98,4],[193,4]]},"216":{"position":[[542,4]]},"218":{"position":[[941,3]]},"220":{"position":[[902,3],[1478,4]]},"222":{"position":[[467,4],[1738,4],[1826,4]]},"224":{"position":[[55,4]]},"236":{"position":[[316,4],[462,4],[528,5],[730,3],[2058,4]]},"240":{"position":[[115,4]]},"242":{"position":[[78,4],[287,5]]},"244":{"position":[[992,4],[2306,4],[2625,5],[2864,3],[2880,3],[3125,3],[3243,3],[3273,3],[3497,5]]},"248":{"position":[[752,4],[942,4],[992,5]]},"250":{"position":[[218,5],[301,3],[670,3]]},"252":{"position":[[375,3],[751,4],[877,4],[1007,4],[1156,3],[1252,4]]},"254":{"position":[[345,5]]},"256":{"position":[[97,5]]},"258":{"position":[[390,5]]},"260":{"position":[[1144,5],[1577,5],[1709,3],[1812,3]]},"262":{"position":[[1042,3],[1947,5],[2287,5]]},"264":{"position":[[435,5]]},"268":{"position":[[1426,3],[1686,5]]},"270":{"position":[[47,3],[1135,4],[1440,5]]},"272":{"position":[[1469,5],[1934,3],[1975,5],[3218,3],[4024,5],[4331,5],[4831,5],[4920,5],[5341,6],[5509,5]]},"274":{"position":[[160,5],[1042,5]]},"278":{"position":[[175,4]]},"280":{"position":[[194,3],[263,4],[566,5],[1484,5],[1617,5],[4707,3]]},"282":{"position":[[2172,3],[3211,3]]},"284":{"position":[[105,5],[276,5]]},"286":{"position":[[370,3],[670,3]]},"288":{"position":[[43,3],[307,3],[555,3],[707,3]]},"292":{"position":[[29,3],[105,3],[209,3]]},"294":{"position":[[139,3]]},"298":{"position":[[35,3]]},"300":{"position":[[286,4]]},"302":{"position":[[900,3],[1181,4],[1542,3],[2414,3],[2658,3],[3427,3],[3507,3],[3843,3],[4686,3],[4727,3],[5448,5],[5571,3],[5936,4],[6113,4],[7271,4],[7655,3],[7741,3],[7809,4],[8331,4],[8420,4],[8517,4],[8614,4],[8701,4],[8809,4],[9204,4],[9613,4],[9646,3],[10048,4],[10116,3],[10201,4],[10234,3],[10361,4],[10394,3],[10415,3],[10502,3],[10533,3],[10661,3],[10932,5],[11095,3],[11503,4],[11938,7],[11980,4],[12148,7],[12256,7],[12430,3],[13702,5],[13818,5],[14108,4],[14255,5],[15731,3],[15890,5],[16308,3]]},"304":{"position":[[830,4],[1214,4]]},"306":{"position":[[299,6]]},"308":{"position":[[111,5],[735,5]]},"310":{"position":[[889,3]]},"312":{"position":[[744,3]]},"316":{"position":[[1651,5],[2677,3],[2719,3],[3589,3]]},"322":{"position":[[55,3],[330,3],[2299,3]]}}}],["us/azure/act",{"_index":1107,"t":{"262":{"position":[[2185,15]]}}}],["usag",{"_index":409,"t":{"192":{"position":[[62,5]]},"244":{"position":[[2613,6]]}}}],["use.typ",{"_index":709,"t":{"232":{"position":[[218,13],[314,13]]}}}],["useapplicationdefaultcredenti",{"_index":505,"t":{"206":{"position":[[296,32],[334,32]]}}}],["used.list",{"_index":723,"t":{"232":{"position":[[678,9]]}}}],["user",{"_index":22,"t":{"163":{"position":[[248,4],[643,4]]},"187":{"position":[[385,4],[1059,4]]},"192":{"position":[[92,5],[436,4]]},"196":{"position":[[161,4]]},"202":{"position":[[371,5],[386,5],[399,5]]},"212":{"position":[[173,5]]},"220":{"position":[[1120,4],[1220,4],[1321,4]]},"222":{"position":[[1635,5]]},"236":{"position":[[795,5]]},"240":{"position":[[138,4]]},"242":{"position":[[790,5]]},"244":{"position":[[184,4]]},"252":{"position":[[258,4]]},"254":{"position":[[12,4],[121,4],[282,4],[393,4]]},"260":{"position":[[397,6],[2710,4],[2978,4]]},"268":{"position":[[436,4],[463,5],[971,5],[1196,5],[1286,4],[1481,4],[1619,8]]},"272":{"position":[[380,6],[3667,4],[3892,5],[4290,4],[4684,4],[4689,5],[5280,5],[5355,4],[6603,4],[6920,5],[7057,4]]},"276":{"position":[[119,4]]},"280":{"position":[[2949,5]]},"284":{"position":[[58,5]]},"288":{"position":[[659,5]]},"302":{"position":[[3938,4],[3966,5],[4972,4],[5043,5],[6972,4],[7529,5],[7635,4],[7863,4],[7959,4],[7994,5],[8658,4],[8678,4],[8746,4],[11833,5],[14916,5]]},"308":{"position":[[748,4]]},"310":{"position":[[94,4],[356,4],[425,4],[1367,4]]},"312":{"position":[[1439,4]]},"316":{"position":[[1013,4],[1115,5],[1237,4],[1242,6]]}}}],["user'",{"_index":422,"t":{"192":{"position":[[760,6],[1148,6]]},"240":{"position":[[17,6]]},"252":{"position":[[1022,6]]},"272":{"position":[[3956,6],[5310,6]]},"302":{"position":[[6894,6]]}}}],["user/prefer_email_to_us",{"_index":354,"t":{"187":{"position":[[598,25]]}}}],["user/settings/appl",{"_index":1404,"t":{"290":{"position":[[52,28]]}}}],["user@domain.com",{"_index":1596,"t":{"310":{"position":[[215,17]]},"312":{"position":[[96,17]]}}}],["user_ag",{"_index":1628,"t":{"312":{"position":[[195,14]]}}}],["userag",{"_index":1622,"t":{"310":{"position":[[1346,9]]},"312":{"position":[[548,14],[1418,9]]}}}],["useridclaim",{"_index":631,"t":{"220":{"position":[[1255,11],[1274,11]]}}}],["userinfo",{"_index":1166,"t":{"270":{"position":[[1376,8]]}}}],["usernam",{"_index":214,"t":{"173":{"position":[[1338,8]]},"198":{"position":[[475,8]]},"202":{"position":[[416,9]]},"210":{"position":[[696,8]]},"268":{"position":[[1506,8],[1644,9]]},"272":{"position":[[4698,8]]},"302":{"position":[[2484,8],[3984,8],[7579,8],[7684,8],[7745,8],[8064,8],[11912,8]]},"310":{"position":[[63,8],[708,13],[1416,8],[1457,8]]},"312":{"position":[[444,13],[1488,8],[1529,8]]}}}],["username@email.com",{"_index":1624,"t":{"310":{"position":[[1425,18]]},"312":{"position":[[1497,18]]}}}],["usptream",{"_index":779,"t":{"236":{"position":[[1683,8]]}}}],["utc",{"_index":1515,"t":{"302":{"position":[[5631,3]]}}}],["util",{"_index":665,"t":{"222":{"position":[[1200,7]]}}}],["uuid",{"_index":1618,"t":{"310":{"position":[[1217,4]]},"312":{"position":[[1080,4]]}}}],["v1",{"_index":1091,"t":{"262":{"position":[[1319,2]]}}}],["v19.0.0",{"_index":1185,"t":{"272":{"position":[[1397,8]]}}}],["v2",{"_index":1099,"t":{"262":{"position":[[1617,2]]},"320":{"position":[[12,2]]},"322":{"position":[[93,2]]}}}],["v2.0",{"_index":1089,"t":{"262":{"position":[[1046,4],[1953,4]]}}}],["v3.0.0",{"_index":96,"t":{"165":{"position":[[616,7]]}}}],["v7.5.1",{"_index":59,"t":{"165":{"position":[[69,7]]}}}],["valid",{"_index":86,"t":{"165":{"position":[[478,9]]},"179":{"position":[[231,8]]},"187":{"position":[[966,8]]},"200":{"position":[[254,5]]},"222":{"position":[[2299,10]]},"224":{"position":[[109,5]]},"232":{"position":[[691,5]]},"234":{"position":[[172,5]]},"244":{"position":[[1795,5],[1928,6],[2082,5],[2250,8]]},"248":{"position":[[1017,5]]},"258":{"position":[[189,5]]},"260":{"position":[[962,9]]},"266":{"position":[[83,5]]},"268":{"position":[[1910,8]]},"270":{"position":[[168,5],[827,8]]},"272":{"position":[[354,8],[1014,5],[2429,5],[3886,5]]},"284":{"position":[[756,8],[849,8]]},"290":{"position":[[595,8]]},"298":{"position":[[572,5]]},"302":{"position":[[180,6],[13660,10],[13776,10],[14269,5],[15014,8],[15047,10],[16016,5]]}}}],["validateurl",{"_index":685,"t":{"222":{"position":[[2248,11],[2267,11]]}}}],["valu",{"_index":407,"t":{"190":{"position":[[117,5]]},"192":{"position":[[723,6],[798,6],[1111,6],[1186,6]]},"194":{"position":[[143,5],[296,5]]},"198":{"position":[[62,5],[191,5],[292,5],[433,5],[538,6]]},"208":{"position":[[330,6],[533,6],[554,6],[582,6]]},"210":{"position":[[60,5],[110,5],[139,5],[152,5],[190,6],[337,6],[412,5],[513,5],[654,5],[759,6]]},"216":{"position":[[215,5],[224,6],[521,5],[732,5]]},"218":{"position":[[117,6],[144,6],[158,6],[174,6],[281,6],[326,6],[342,6],[412,6],[1226,5],[1235,6]]},"222":{"position":[[186,5],[319,5],[1388,5]]},"228":{"position":[[89,6],[184,5],[197,5],[235,6],[382,6]]},"234":{"position":[[250,5],[320,5],[335,5],[373,5],[481,6],[560,6],[610,5]]},"236":{"position":[[259,5]]},"244":{"position":[[203,5],[1204,5],[1617,5]]},"258":{"position":[[423,6]]},"262":{"position":[[1264,5]]},"270":{"position":[[1539,5]]},"272":{"position":[[1823,6]]},"302":{"position":[[38,6],[4353,5]]},"304":{"position":[[795,5]]},"310":{"position":[[979,5]]},"312":{"position":[[834,5]]}}}],["values.nam",{"_index":512,"t":{"208":{"position":[[204,12]]}}}],["values/acr_valu",{"_index":380,"t":{"187":{"position":[[1041,17]]}}}],["var/www/stat",{"_index":1582,"t":{"304":{"position":[[933,16]]}}}],["variabl",{"_index":112,"t":{"165":{"position":[[847,9]]},"187":{"position":[[61,9]]},"210":{"position":[[255,9]]},"228":{"position":[[300,9]]},"252":{"position":[[189,9]]},"282":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"284":{"position":[[192,9]]},"296":{"position":[[69,9],[183,9],[209,9]]},"306":{"position":[[63,8],[238,8]]},"308":{"position":[[613,10]]},"310":{"position":[[776,9],[804,8]]},"312":{"position":[[628,9],[659,8]]},"314":{"position":[[500,9],[532,8]]},"316":{"position":[[2202,9],[2838,9],[3826,8]]}}}],["verif",{"_index":605,"t":{"220":{"position":[[364,12],[1487,13],[1598,12]]},"236":{"position":[[1543,12]]},"302":{"position":[[6427,12],[6785,13],[7150,12],[9808,12]]}}}],["verifi",{"_index":89,"t":{"165":{"position":[[515,9]]},"202":{"position":[[294,9]]},"220":{"position":[[530,9],[1424,8]]},"268":{"position":[[1435,9]]},"272":{"position":[[3807,9]]},"302":{"position":[[3852,9],[6384,8],[6600,9],[9787,6],[13247,8],[13643,6],[13759,6]]}}}],["verifieddefault",{"_index":603,"t":{"220":{"position":[[260,15]]}}}],["verify/ssl_upstream_insecure_skip_verifi",{"_index":341,"t":{"187":{"position":[[252,40]]}}}],["version",{"_index":95,"t":{"165":{"position":[[608,7]]},"169":{"position":[[118,7]]},"173":{"position":[[117,10],[836,7]]},"177":{"position":[[679,8]]},"232":{"position":[[123,7],[404,7],[466,7]]},"248":{"position":[[581,7],[670,8],[705,7],[772,8],[950,7]]},"272":{"position":[[237,8],[720,7],[857,7]]},"274":{"position":[[50,7],[111,7]]},"302":{"position":[[14392,7],[14419,7],[15069,7],[15087,7]]}}}],["version=tls1.3",{"_index":915,"t":{"248":{"position":[[615,15]]}}}],["via",{"_index":397,"t":{"187":{"position":[[1377,3],[1390,3]]},"216":{"position":[[382,3]]},"218":{"position":[[1397,3]]},"244":{"position":[[717,3],[2720,3]]},"250":{"position":[[733,3]]},"282":{"position":[[3308,3]]},"284":{"position":[[161,3]]},"296":{"position":[[31,3]]},"302":{"position":[[470,3],[7229,3],[7434,3],[10568,3]]},"310":{"position":[[1027,3]]},"316":{"position":[[71,3],[1007,3],[2944,3],[3755,3]]},"320":{"position":[[78,3]]}}}],["visit",{"_index":1273,"t":{"280":{"position":[[1351,8]]}}}],["visual",{"_index":150,"t":{"167":{"position":[[444,6],[488,6]]}}}],["volum",{"_index":1593,"t":{"308":{"position":[[841,7]]}}}],["vulner",{"_index":236,"t":{"177":{"position":[[37,13],[606,13]]},"179":{"position":[[75,16],[308,15]]}}}],["wait",{"_index":803,"t":{"236":{"position":[[2541,4]]},"302":{"position":[[14725,4]]}}}],["want",{"_index":132,"t":{"167":{"position":[[207,4]]},"234":{"position":[[574,4]]},"244":{"position":[[2856,4]]},"254":{"position":[[865,4]]},"262":{"position":[[307,4]]},"272":{"position":[[5395,4]]},"280":{"position":[[1739,4]]},"282":{"position":[[580,4]]},"304":{"position":[[677,5]]}}}],["warn",{"_index":303,"t":{"181":{"position":[[251,8]]},"302":{"position":[[12372,9],[15597,8]]}}}],["way",{"_index":543,"t":{"216":{"position":[[328,4]]},"268":{"position":[[217,4]]},"282":{"position":[[1086,3]]}}}],["web",{"_index":1033,"t":{"260":{"position":[[533,4]]},"262":{"position":[[266,3]]},"280":{"position":[[1259,3],[2591,3],[3802,3],[3921,3]]}}}],["websocket",{"_index":799,"t":{"236":{"position":[[2428,10]]},"302":{"position":[[9048,10],[9072,9]]}}}],["websockets/proxy_websocket",{"_index":339,"t":{"187":{"position":[[197,27]]}}}],["well",{"_index":706,"t":{"232":{"position":[[91,4]]},"244":{"position":[[2686,4],[2907,4],[3070,5]]},"302":{"position":[[2958,5],[2996,5]]}}}],["whenstream",{"_index":791,"t":{"236":{"position":[[2172,13]]}}}],["whether",{"_index":507,"t":{"206":{"position":[[380,7]]},"208":{"position":[[318,7]]},"234":{"position":[[155,7]]},"236":{"position":[[2281,7]]},"274":{"position":[[144,7]]},"284":{"position":[[241,7]]},"302":{"position":[[11405,7]]}}}],["whitelist",{"_index":1003,"t":{"254":{"position":[[954,9]]},"302":{"position":[[15104,9],[15900,9],[16251,11]]}}}],["whole",{"_index":734,"t":{"234":{"position":[[594,5]]},"244":{"position":[[939,5]]},"320":{"position":[[236,5]]}}}],["whose",{"_index":390,"t":{"187":{"position":[[1258,5]]}}}],["wide_authority_to_your_service_account",{"_index":1048,"t":{"260":{"position":[[1475,38]]}}}],["window",{"_index":1117,"t":{"264":{"position":[[45,7]]}}}],["wish",{"_index":1277,"t":{"280":{"position":[[1839,4],[2271,4],[2364,4],[2969,4]]},"286":{"position":[[95,5]]}}}],["within",{"_index":148,"t":{"167":{"position":[[397,6]]},"177":{"position":[[51,6]]},"181":{"position":[[131,6]]},"192":{"position":[[230,6]]},"198":{"position":[[81,6]]},"208":{"position":[[234,6]]},"228":{"position":[[112,6]]},"236":{"position":[[912,6]]},"242":{"position":[[568,6]]},"260":{"position":[[1763,6]]},"268":{"position":[[703,6]]},"280":{"position":[[4737,6]]}}}],["without",{"_index":301,"t":{"181":{"position":[[237,7]]},"192":{"position":[[307,7]]},"316":{"position":[[184,7]]},"320":{"position":[[215,7]]},"322":{"position":[[43,7]]}}}],["wizard",{"_index":1120,"t":{"264":{"position":[[221,6]]}}}],["wo",{"_index":1723,"t":{"322":{"position":[[846,2],[2056,2]]}}}],["won't",{"_index":1086,"t":{"262":{"position":[[897,5]]}}}],["work",{"_index":222,"t":{"175":{"position":[[61,4]]},"274":{"position":[[102,4],[546,4]]},"280":{"position":[[1236,7],[1940,5],[2437,4]]},"282":{"position":[[210,4]]},"302":{"position":[[14973,5]]},"316":{"position":[[1528,4]]}}}],["workload",{"_index":1041,"t":{"260":{"position":[[1184,8],[1204,8],[1623,8],[1643,8],[1930,8],[1981,8],[2030,8]]},"302":{"position":[[4805,8]]}}}],["workspacefold",{"_index":186,"t":{"173":{"position":[[261,21],[579,21]]}}}],["write",{"_index":1137,"t":{"268":{"position":[[1300,5]]}}}],["x",{"_index":952,"t":{"250":{"position":[[1035,1],[1076,1]]},"254":{"position":[[570,1]]},"270":{"position":[[1289,1]]},"302":{"position":[[7233,1],[7314,1],[7517,1],[7535,1],[7557,1],[7982,1],[8000,1],[8020,1],[8042,1],[9293,1],[9310,1],[9324,1],[9340,1],[11128,1],[11426,1],[11460,1],[11818,1],[11839,1],[11862,1],[11887,1],[12011,1],[13080,1]]},"310":{"position":[[897,1]]},"312":{"position":[[752,1]]},"316":{"position":[[399,1],[440,1],[475,1],[576,1],[737,1],[778,1],[1011,1],[1022,1],[1235,1],[1266,1],[1445,1]]},"322":{"position":[[337,1],[2001,1],[2177,1]]}}}],["x.y.z.linux",{"_index":101,"t":{"165":{"position":[[678,11]]}}}],["x509",{"_index":1337,"t":{"282":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":1526,"t":{"302":{"position":[[7287,12],[11796,12]]},"316":{"position":[[1080,12]]}}}],["xauthrequest/set_xauthrequest",{"_index":351,"t":{"187":{"position":[[502,29]]}}}],["xxx\"client_secret",{"_index":1313,"t":{"280":{"position":[[4580,18]]}}}],["xxxxx\"client_secret",{"_index":1287,"t":{"280":{"position":[[3263,20]]}}}],["yaml",{"_index":308,"t":{"181":{"position":[[464,4]]},"183":{"position":[[47,4]]},"185":{"position":[[295,4]]},"218":{"position":[[677,4]]},"320":{"position":[[288,6]]}}}],["you'd",{"_index":1136,"t":{"268":{"position":[[1166,5]]}}}],["you'r",{"_index":1040,"t":{"260":{"position":[[1133,6]]},"262":{"position":[[997,6]]}}}],["yourcompany.com",{"_index":1201,"t":{"272":{"position":[[3772,17]]},"302":{"position":[[1107,18]]}}}],["yourself",{"_index":736,"t":{"234":{"position":[[635,8]]}}}],["yyy\"pass_access_token",{"_index":1314,"t":{"280":{"position":[[4601,22]]}}}],["yyyyy\"pass_access_token",{"_index":1288,"t":{"280":{"position":[[3286,24]]}}}],["zero",{"_index":900,"t":{"244":{"position":[[3358,5]]},"302":{"position":[[10797,5]]}}}],["zzz\"cookie_secur",{"_index":1315,"t":{"280":{"position":[[4646,18]]}}}],["zzzzz\"skip_provider_button",{"_index":1290,"t":{"280":{"position":[[3333,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file +[{"documents":[{"i":162,"t":"Installation","u":"/oauth2-proxy/docs/","b":["Docs"]},{"i":164,"t":"Behaviour","u":"/oauth2-proxy/docs/behaviour","b":["Docs"]},{"i":166,"t":"Security","u":"/oauth2-proxy/docs/community/security","b":["Docs","Community"]},{"i":172,"t":"Alpha Configuration","u":"/oauth2-proxy/docs/configuration/alpha-config","b":["Docs","Configuration"]},{"i":231,"t":"Session Storage","u":"/oauth2-proxy/docs/configuration/session_storage","b":["Docs","Configuration"]},{"i":237,"t":"TLS Configuration","u":"/oauth2-proxy/docs/configuration/tls","b":["Docs","Configuration"]},{"i":243,"t":"Contribution Guide","u":"/oauth2-proxy/docs/community/contribution","b":["Docs","Community"]},{"i":251,"t":"Endpoints","u":"/oauth2-proxy/docs/features/endpoints","b":["Docs","Features"]},{"i":257,"t":"Overview","u":"/oauth2-proxy/docs/configuration/overview","b":["Docs","Configuration"]},{"i":285,"t":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/configuration/oauth_provider","b":["Docs","Configuration"]}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/162",[0,2.353]],["t/164",[1,2.353]],["t/166",[2,2.353]],["t/172",[3,1.808,4,1.039]],["t/231",[5,1.808,6,1.808]],["t/237",[4,1.039,7,1.808]],["t/243",[8,1.808,9,1.808]],["t/251",[10,2.353]],["t/257",[11,2.353]],["t/285",[4,0.843,12,1.467,13,1.467]]],"invertedIndex":[["alpha",{"_index":3,"t":{"172":{"position":[[0,5]]}}}],["behaviour",{"_index":1,"t":{"164":{"position":[[0,9]]}}}],["configur",{"_index":4,"t":{"172":{"position":[[6,13]]},"237":{"position":[[4,13]]},"285":{"position":[[15,13]]}}}],["contribut",{"_index":8,"t":{"243":{"position":[[0,12]]}}}],["endpoint",{"_index":10,"t":{"251":{"position":[[0,9]]}}}],["guid",{"_index":9,"t":{"243":{"position":[[13,5]]}}}],["instal",{"_index":0,"t":{"162":{"position":[[0,12]]}}}],["oauth",{"_index":12,"t":{"285":{"position":[[0,5]]}}}],["overview",{"_index":11,"t":{"257":{"position":[[0,8]]}}}],["provid",{"_index":13,"t":{"285":{"position":[[6,8]]}}}],["secur",{"_index":2,"t":{"166":{"position":[[0,8]]}}}],["session",{"_index":5,"t":{"231":{"position":[[0,7]]}}}],["storag",{"_index":6,"t":{"231":{"position":[[8,7]]}}}],["tl",{"_index":7,"t":{"237":{"position":[[0,3]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":168,"t":"Security Disclosures","u":"/oauth2-proxy/docs/community/security","h":"#security-disclosures","p":166},{"i":170,"t":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/community/security","h":"#how-will-we-respond-to-disclosures","p":166},{"i":174,"t":"Using Alpha Configuration","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#using-alpha-configuration","p":172},{"i":176,"t":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":172},{"i":178,"t":"Removed options","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#removed-options","p":172},{"i":180,"t":"Configuration Reference","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#configuration-reference","p":172},{"i":181,"t":"ADFSOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#adfsoptions","p":172},{"i":183,"t":"AlphaOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#alphaoptions","p":172},{"i":185,"t":"AzureOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#azureoptions","p":172},{"i":187,"t":"BitbucketOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#bitbucketoptions","p":172},{"i":189,"t":"ClaimSource","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#claimsource","p":172},{"i":191,"t":"Duration","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#duration","p":172},{"i":193,"t":"GitHubOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#githuboptions","p":172},{"i":195,"t":"GitLabOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#gitlaboptions","p":172},{"i":197,"t":"GoogleOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#googleoptions","p":172},{"i":199,"t":"Header","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#header","p":172},{"i":201,"t":"HeaderValue","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#headervalue","p":172},{"i":203,"t":"KeycloakOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#keycloakoptions","p":172},{"i":205,"t":"LoginGovOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#logingovoptions","p":172},{"i":207,"t":"LoginURLParameter","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#loginurlparameter","p":172},{"i":209,"t":"A parameter whose value is fixed","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"","p":172},{"i":211,"t":"OIDCOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#oidcoptions","p":172},{"i":213,"t":"Provider","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#provider","p":172},{"i":215,"t":"ProviderType","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#providertype","p":172},{"i":217,"t":"Providers","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#providers","p":172},{"i":219,"t":"SecretSource","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#secretsource","p":172},{"i":221,"t":"Server","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#server","p":172},{"i":223,"t":"TLS","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#tls","p":172},{"i":225,"t":"URLParameterRule","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#urlparameterrule","p":172},{"i":227,"t":"Upstream","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#upstream","p":172},{"i":229,"t":"UpstreamConfig","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#upstreamconfig","p":172},{"i":233,"t":"Cookie Storage","u":"/oauth2-proxy/docs/configuration/session_storage","h":"#cookie-storage","p":231},{"i":235,"t":"Redis Storage","u":"/oauth2-proxy/docs/configuration/session_storage","h":"#redis-storage","p":231},{"i":239,"t":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":237},{"i":241,"t":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":237},{"i":245,"t":"Go version","u":"/oauth2-proxy/docs/community/contribution","h":"","p":243},{"i":247,"t":"Preparing your fork","u":"/oauth2-proxy/docs/community/contribution","h":"","p":243},{"i":249,"t":"Testing / Debugging","u":"/oauth2-proxy/docs/community/contribution","h":"","p":243},{"i":253,"t":"Sign out","u":"/oauth2-proxy/docs/features/endpoints","h":"#sign-out","p":251},{"i":255,"t":"Auth","u":"/oauth2-proxy/docs/features/endpoints","h":"#auth","p":251},{"i":259,"t":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/configuration/overview","h":"#generating-a-cookie-secret","p":257},{"i":261,"t":"Config File","u":"/oauth2-proxy/docs/configuration/overview","h":"#config-file","p":257},{"i":263,"t":"Command Line Options","u":"/oauth2-proxy/docs/configuration/overview","h":"#command-line-options","p":257},{"i":265,"t":"Upstreams Configuration","u":"/oauth2-proxy/docs/configuration/overview","h":"#upstreams-configuration","p":257},{"i":267,"t":"Environment variables","u":"/oauth2-proxy/docs/configuration/overview","h":"#environment-variables","p":257},{"i":269,"t":"Logging Configuration","u":"/oauth2-proxy/docs/configuration/overview","h":"#logging-configuration","p":257},{"i":271,"t":"Auth Log Format","u":"/oauth2-proxy/docs/configuration/overview","h":"#auth-log-format","p":257},{"i":273,"t":"Request Log Format","u":"/oauth2-proxy/docs/configuration/overview","h":"#request-log-format","p":257},{"i":275,"t":"Standard Log Format","u":"/oauth2-proxy/docs/configuration/overview","h":"#standard-log-format","p":257},{"i":277,"t":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":257},{"i":279,"t":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":257},{"i":281,"t":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":257},{"i":283,"t":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":257},{"i":287,"t":"Google Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#google-auth-provider","p":285},{"i":289,"t":"Azure Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#azure-auth-provider","p":285},{"i":291,"t":"ADFS Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#adfs-auth-provider","p":285},{"i":293,"t":"Facebook Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#facebook-auth-provider","p":285},{"i":295,"t":"GitHub Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#github-auth-provider","p":285},{"i":297,"t":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#keycloak-auth-provider","p":285},{"i":299,"t":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":285},{"i":301,"t":"GitLab Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#gitlab-auth-provider","p":285},{"i":303,"t":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#linkedin-auth-provider","p":285},{"i":305,"t":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":285},{"i":307,"t":"OpenID Connect Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#openid-connect-provider","p":285},{"i":309,"t":"login.gov Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#logingov-provider","p":285},{"i":311,"t":"Nextcloud Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#nextcloud-provider","p":285},{"i":313,"t":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":285},{"i":315,"t":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":285},{"i":317,"t":"Gitea Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#gitea-auth-provider","p":285},{"i":319,"t":"Email Authentication","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#email-authentication","p":285},{"i":321,"t":"Adding a new Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#adding-a-new-provider","p":285}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/168",[0,4.077,1,3.539]],["t/170",[1,3.539,2,4.077]],["t/174",[3,2.679,4,3.43,5,1.893]],["t/176",[5,1.633,6,2.959,7,2.569,8,2.959]],["t/178",[9,4.077,10,3.539]],["t/180",[5,2.25,11,4.077]],["t/181",[12,5.026]],["t/183",[13,5.026]],["t/185",[14,5.026]],["t/187",[15,5.026]],["t/189",[16,5.026]],["t/191",[17,5.026]],["t/193",[18,5.026]],["t/195",[19,5.026]],["t/197",[20,5.026]],["t/199",[21,5.026]],["t/201",[22,5.026]],["t/203",[23,5.026]],["t/205",[24,5.026]],["t/207",[25,5.026]],["t/209",[26,2.959,27,2.959,28,2.959,29,2.959]],["t/211",[30,5.026]],["t/213",[31,1.696]],["t/215",[32,5.026]],["t/217",[31,1.696]],["t/219",[33,5.026]],["t/221",[34,5.026]],["t/223",[35,3.926]],["t/225",[36,5.026]],["t/227",[37,3.926]],["t/229",[38,5.026]],["t/233",[39,3.539,40,3.539]],["t/235",[40,3.539,41,4.077]],["t/239",[35,2.312,42,2.569,43,2.959,44,2.569]],["t/241",[35,1.814,42,2.016,44,2.016,45,2.323,46,2.323,47,2.016]],["t/245",[48,4.077,49,4.077]],["t/247",[50,4.077,51,4.077]],["t/249",[52,3.43,53,3.43,54,3.43]],["t/253",[55,4.077,56,4.077]],["t/255",[57,2.081]],["t/259",[39,2.977,58,3.43,59,3.43]],["t/261",[60,4.077,61,4.077]],["t/263",[10,2.977,62,3.43,63,3.43]],["t/265",[5,2.25,37,3.185]],["t/267",[64,4.077,65,4.077]],["t/269",[5,2.25,66,2.92]],["t/271",[57,1.42,66,2.456,67,2.679]],["t/273",[66,2.456,67,2.679,68,3.43]],["t/275",[66,2.456,67,2.679,69,3.43]],["t/277",[3,2.033,5,1.436,47,2.259,70,2.603,71,2.603]],["t/279",[3,1.814,5,1.282,72,2.323,73,2.323,74,1.814,75,2.016]],["t/281",[74,2.312,75,2.569,76,2.959,77,2.959]],["t/283",[5,1.633,37,2.312,74,2.312,78,2.959]],["t/287",[31,1.157,57,1.42,79,3.43]],["t/289",[31,1.157,57,1.42,80,2.977]],["t/291",[31,1.157,57,1.42,81,3.43]],["t/293",[31,1.157,57,1.42,82,3.43]],["t/295",[31,1.157,57,1.42,83,3.43]],["t/297",[31,1.157,57,1.42,84,2.977]],["t/299",[31,0.999,57,1.225,84,2.569,85,2.959]],["t/301",[31,1.157,57,1.42,86,3.43]],["t/303",[31,1.157,57,1.42,87,3.43]],["t/305",[31,0.999,80,2.569,88,2.959,89,2.569]],["t/307",[31,1.157,90,3.43,91,3.43]],["t/309",[31,1.376,92,4.077]],["t/311",[31,1.376,93,4.077]],["t/313",[31,1.157,57,1.42,94,3.43]],["t/315",[31,1.157,57,1.42,95,3.43]],["t/317",[31,1.157,57,1.42,96,3.43]],["t/319",[97,4.077,98,4.077]],["t/321",[7,2.977,31,1.157,89,2.977]]],"invertedIndex":[["",{"_index":53,"t":{"249":{"position":[[8,1]]}}}],["401",{"_index":76,"t":{"281":{"position":[[17,3]]}}}],["ad",{"_index":89,"t":{"305":{"position":[[16,2]]},"321":{"position":[[0,6]]}}}],["adf",{"_index":81,"t":{"291":{"position":[[0,4]]}}}],["adfsopt",{"_index":12,"t":{"181":{"position":[[0,11]]}}}],["alpha",{"_index":4,"t":{"174":{"position":[[6,5]]}}}],["alphaopt",{"_index":13,"t":{"183":{"position":[[0,12]]}}}],["auth",{"_index":57,"t":{"255":{"position":[[0,4]]},"271":{"position":[[0,4]]},"287":{"position":[[7,4]]},"289":{"position":[[6,4]]},"291":{"position":[[5,4]]},"293":{"position":[[9,4]]},"295":{"position":[[7,4]]},"297":{"position":[[9,4]]},"299":{"position":[[14,4]]},"301":{"position":[[7,4]]},"303":{"position":[[9,4]]},"313":{"position":[[13,4]]},"315":{"position":[[10,4]]},"317":{"position":[[6,4]]}}}],["auth_request",{"_index":70,"t":{"277":{"position":[[35,12]]}}}],["authent",{"_index":98,"t":{"319":{"position":[[6,14]]}}}],["azur",{"_index":80,"t":{"289":{"position":[[0,5]]},"305":{"position":[[10,5]]}}}],["azureopt",{"_index":14,"t":{"185":{"position":[[0,12]]}}}],["bitbucket",{"_index":95,"t":{"315":{"position":[[0,9]]}}}],["bitbucketopt",{"_index":15,"t":{"187":{"position":[[0,16]]}}}],["claimsourc",{"_index":16,"t":{"189":{"position":[[0,11]]}}}],["command",{"_index":62,"t":{"263":{"position":[[0,7]]}}}],["config",{"_index":60,"t":{"261":{"position":[[0,6]]}}}],["configur",{"_index":5,"t":{"174":{"position":[[12,13]]},"176":{"position":[[11,13]]},"180":{"position":[[0,13]]},"265":{"position":[[10,13]]},"269":{"position":[[8,13]]},"277":{"position":[[0,11]]},"279":{"position":[[0,11]]},"283":{"position":[[34,13]]}}}],["connect",{"_index":91,"t":{"307":{"position":[[7,7]]}}}],["convert",{"_index":6,"t":{"176":{"position":[[0,10]]}}}],["cooki",{"_index":39,"t":{"233":{"position":[[0,6]]},"259":{"position":[[13,6]]}}}],["debug",{"_index":54,"t":{"249":{"position":[[10,9]]}}}],["digitalocean",{"_index":94,"t":{"313":{"position":[[0,12]]}}}],["direct",{"_index":71,"t":{"277":{"position":[[48,9]]}}}],["disclosur",{"_index":1,"t":{"168":{"position":[[9,11]]},"170":{"position":[[23,12]]}}}],["durat",{"_index":17,"t":{"191":{"position":[[0,8]]}}}],["e.g",{"_index":46,"t":{"241":{"position":[[32,4]]}}}],["email",{"_index":97,"t":{"319":{"position":[[0,5]]}}}],["environ",{"_index":64,"t":{"267":{"position":[[0,11]]}}}],["error",{"_index":77,"t":{"281":{"position":[[21,6]]}}}],["facebook",{"_index":82,"t":{"293":{"position":[[0,8]]}}}],["file",{"_index":61,"t":{"261":{"position":[[7,4]]}}}],["fix",{"_index":29,"t":{"209":{"position":[[27,5]]}}}],["fork",{"_index":51,"t":{"247":{"position":[[15,4]]}}}],["format",{"_index":67,"t":{"271":{"position":[[9,6]]},"273":{"position":[[12,6]]},"275":{"position":[[13,6]]}}}],["forwardauth",{"_index":74,"t":{"279":{"position":[[42,11]]},"281":{"position":[[0,11]]},"283":{"position":[[0,11]]}}}],["gener",{"_index":58,"t":{"259":{"position":[[0,10]]}}}],["gitea",{"_index":96,"t":{"317":{"position":[[0,5]]}}}],["github",{"_index":83,"t":{"295":{"position":[[0,6]]}}}],["githubopt",{"_index":18,"t":{"193":{"position":[[0,13]]}}}],["gitlab",{"_index":86,"t":{"301":{"position":[[0,6]]}}}],["gitlabopt",{"_index":19,"t":{"195":{"position":[[0,13]]}}}],["go",{"_index":48,"t":{"245":{"position":[[0,2]]}}}],["googl",{"_index":79,"t":{"287":{"position":[[0,6]]}}}],["googleopt",{"_index":20,"t":{"197":{"position":[[0,13]]}}}],["header",{"_index":21,"t":{"199":{"position":[[0,6]]}}}],["headervalu",{"_index":22,"t":{"201":{"position":[[0,11]]}}}],["keycloak",{"_index":84,"t":{"297":{"position":[[0,8]]},"299":{"position":[[0,8]]}}}],["keycloakopt",{"_index":23,"t":{"203":{"position":[[0,15]]}}}],["line",{"_index":63,"t":{"263":{"position":[[8,4]]}}}],["linkedin",{"_index":87,"t":{"303":{"position":[[0,8]]}}}],["log",{"_index":66,"t":{"269":{"position":[[0,7]]},"271":{"position":[[5,3]]},"273":{"position":[[8,3]]},"275":{"position":[[9,3]]}}}],["login.gov",{"_index":92,"t":{"309":{"position":[[0,9]]}}}],["logingovopt",{"_index":24,"t":{"205":{"position":[[0,15]]}}}],["loginurlparamet",{"_index":25,"t":{"207":{"position":[[0,17]]}}}],["microsoft",{"_index":88,"t":{"305":{"position":[[0,9]]}}}],["middlewar",{"_index":75,"t":{"279":{"position":[[54,10]]},"281":{"position":[[28,10]]}}}],["new",{"_index":7,"t":{"176":{"position":[[32,3]]},"321":{"position":[[9,3]]}}}],["nextcloud",{"_index":93,"t":{"311":{"position":[[0,9]]}}}],["nginx",{"_index":47,"t":{"241":{"position":[[37,5]]},"277":{"position":[[29,5]]}}}],["oauth2",{"_index":43,"t":{"239":{"position":[[17,6]]}}}],["oidc",{"_index":85,"t":{"299":{"position":[[9,4]]}}}],["oidcopt",{"_index":30,"t":{"211":{"position":[[0,11]]}}}],["openid",{"_index":90,"t":{"307":{"position":[[0,6]]}}}],["option",{"_index":10,"t":{"178":{"position":[[8,7]]},"263":{"position":[[13,7]]}}}],["out",{"_index":56,"t":{"253":{"position":[[5,3]]}}}],["paramet",{"_index":26,"t":{"209":{"position":[[2,9]]}}}],["prepar",{"_index":50,"t":{"247":{"position":[[0,9]]}}}],["provid",{"_index":31,"t":{"213":{"position":[[0,8]]},"217":{"position":[[0,9]]},"287":{"position":[[12,8]]},"289":{"position":[[11,8]]},"291":{"position":[[10,8]]},"293":{"position":[[14,8]]},"295":{"position":[[12,8]]},"297":{"position":[[14,8]]},"299":{"position":[[19,8]]},"301":{"position":[[12,8]]},"303":{"position":[[14,8]]},"305":{"position":[[19,8]]},"307":{"position":[[15,8]]},"309":{"position":[[10,8]]},"311":{"position":[[10,8]]},"313":{"position":[[18,8]]},"315":{"position":[[15,8]]},"317":{"position":[[11,8]]},"321":{"position":[[13,8]]}}}],["providertyp",{"_index":32,"t":{"215":{"position":[[0,12]]}}}],["proxi",{"_index":44,"t":{"239":{"position":[[24,5]]},"241":{"position":[[25,6]]}}}],["redi",{"_index":41,"t":{"235":{"position":[[0,5]]}}}],["refer",{"_index":11,"t":{"180":{"position":[[14,9]]}}}],["remov",{"_index":9,"t":{"178":{"position":[[0,7]]}}}],["request",{"_index":68,"t":{"273":{"position":[[0,7]]}}}],["respond",{"_index":2,"t":{"170":{"position":[[12,7]]}}}],["revers",{"_index":45,"t":{"241":{"position":[[17,7]]}}}],["secret",{"_index":59,"t":{"259":{"position":[[20,6]]}}}],["secretsourc",{"_index":33,"t":{"219":{"position":[[0,12]]}}}],["secur",{"_index":0,"t":{"168":{"position":[[0,8]]}}}],["server",{"_index":34,"t":{"221":{"position":[[0,6]]}}}],["sign",{"_index":55,"t":{"253":{"position":[[0,4]]}}}],["standard",{"_index":69,"t":{"275":{"position":[[0,8]]}}}],["static",{"_index":78,"t":{"283":{"position":[[17,6]]}}}],["storag",{"_index":40,"t":{"233":{"position":[[7,7]]},"235":{"position":[[6,7]]}}}],["structur",{"_index":8,"t":{"176":{"position":[[36,9]]}}}],["termin",{"_index":42,"t":{"239":{"position":[[0,9]]},"241":{"position":[[0,9]]}}}],["test",{"_index":52,"t":{"249":{"position":[[0,7]]}}}],["tl",{"_index":35,"t":{"223":{"position":[[0,3]]},"239":{"position":[[10,3]]},"241":{"position":[[10,3]]}}}],["traefik",{"_index":72,"t":{"279":{"position":[[29,7]]}}}],["upstream",{"_index":37,"t":{"227":{"position":[[0,8]]},"265":{"position":[[0,9]]},"283":{"position":[[24,9]]}}}],["upstreamconfig",{"_index":38,"t":{"229":{"position":[[0,14]]}}}],["urlparameterrul",{"_index":36,"t":{"225":{"position":[[0,16]]}}}],["us",{"_index":3,"t":{"174":{"position":[[0,5]]},"277":{"position":[[16,3]]},"279":{"position":[[16,3]]}}}],["v2",{"_index":73,"t":{"279":{"position":[[37,4]]}}}],["valu",{"_index":28,"t":{"209":{"position":[[18,5]]}}}],["variabl",{"_index":65,"t":{"267":{"position":[[12,9]]}}}],["version",{"_index":49,"t":{"245":{"position":[[3,7]]}}}],["whose",{"_index":27,"t":{"209":{"position":[[12,5]]}}}]],"pipeline":["stemmer"]}},{"documents":[{"i":163,"t":"Choose how to deploy: a. Using a Prebuilt Binary (current release is v7.5.1) b. Using Go to install the latest release $ go install github.com/oauth2-proxy/oauth2-proxy/v7@latest# which will put the binary in `$GOROOT/bin` c. Using a Prebuilt Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available) d. Using a Pre-Release Nightly Docker Image (AMD64, PPC64LE, ARMv6, ARMv7, and ARM64 available) e. Using the official Kubernetes manifest (Helm) Prebuilt binaries can be validated by extracting the file and verifying it against the sha256sum.txt checksum file provided for each release starting with version v3.0.0. sha256sum -c sha256sum.txt 2>&1 | grep OKoauth2-proxy-x.y.z.linux-amd64: OK Select a Provider and Register an OAuth Application with a Provider Configure OAuth2 Proxy using config file, command line options, or environment variables Configure SSL or Deploy behind a SSL endpoint (example provided for Nginx)","s":"Installation","u":"/oauth2-proxy/docs/","h":"","p":162},{"i":165,"t":"Any request passing through the proxy (and not matched by --skip-auth-regex) is checked for the proxy's session cookie (--cookie-name) (or, if allowed, a JWT token - see --skip-jwt-bearer-tokens). If authentication is required but missing then the user is asked to log in and redirected to the authentication provider (unless it is an Ajax request, i.e. one with Accept: application/json, in which case 401 Unauthorized is returned) After returning from the authentication provider, the oauth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) Notice that the proxy also provides a number of useful endpoints.","s":"Behaviour","u":"/oauth2-proxy/docs/behaviour","h":"","p":164},{"i":167,"t":"note OAuth2 Proxy is a community project. Maintainers do not work on this project full time, and as such, while we endeavour to respond to disclosures as quickly as possible, this may take longer than in projects with corporate sponsorship.","s":"Security","u":"/oauth2-proxy/docs/community/security","h":"","p":166},{"i":169,"t":"info If you believe you have found a vulnerability within OAuth2 Proxy or any of its dependencies, please do NOT open an issue or PR on GitHub, please do NOT post any details publicly. Security disclosures MUST be done in private. If you have found an issue that you would like to bring to the attention of the maintenance team for OAuth2 Proxy, please compose an email and send it to the list of maintainers in our MAINTAINERS file. Please include as much detail as possible. Ideally, your disclosure should include: A reproducible case that can be used to demonstrate the exploit How you discovered this vulnerability A potential fix for the issue (if you have thought of one) Versions affected (if not present in master) Your GitHub ID","s":"Security Disclosures","u":"/oauth2-proxy/docs/community/security","h":"#security-disclosures","p":166},{"i":171,"t":"We use GitHub Security Advisories to privately discuss fixes for disclosed vulnerabilities. If you include a GitHub ID with your disclosure we will add you as a collaborator for the advisory so that you can join the discussion and validate any fixes we may propose. For minor issues and previously disclosed vulnerabilities (typically for dependencies), we may use regular PRs for fixes and forego the security advisory. Once a fix has been agreed upon, we will merge the fix and create a new release. If we have multiple security issues in flight simultaneously, we may delay merging fixes until all patches are ready. We may also backport the fix to previous releases, but this will be at the discretion of the maintainers.","s":"How will we respond to disclosures?","u":"/oauth2-proxy/docs/community/security","h":"#how-will-we-respond-to-disclosures","p":166},{"i":173,"t":"danger This page contains documentation for alpha features. We reserve the right to make breaking changes to the features detailed within this page with no notice. Options described in this page may be changed, removed, renamed or moved without prior warning. Please beware of this before you use alpha configuration options. This page details a set of alpha configuration options in a new format. Going forward we are intending to add structured configuration in YAML format to replace the existing TOML based configuration file and flags. Below is a reference for the structure of the configuration, with AlphaOptions as the root of the configuration. When using alpha configuration, your config file will look something like below: upstreams: - id: ... ...injectRequestHeaders: - name: ... ...injectResponseHeaders: - name: ... ... Please browse the reference below for the structure of the new configuration format.","s":"Alpha Configuration","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"","p":172},{"i":175,"t":"To use the new alpha configuration, generate a YAML file based on the format described in the reference below. Provide the path to this file using the --alpha-config flag. note When using the --alpha-config flag, some options are no longer available. See removed options below for more information.","s":"Using Alpha Configuration","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#using-alpha-configuration","p":172},{"i":177,"t":"Before adding the new --alpha-config option, start OAuth2 Proxy using the convert-config-to-alpha flag to convert existing configuration to the new format. oauth2-proxy --convert-config-to-alpha --config ./path/to/existing/config.cfg This will convert any options supported by the new format to YAML and print the new configuration to STDOUT. Copy this to a new file, remove any options from your existing configuration noted in removed options and then start OAuth2 Proxy using the new config. oauth2-proxy --alpha-config ./path/to/new/config.yaml --config ./path/to/existing/config.cfg","s":"Converting configuration to the new structure","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#converting-configuration-to-the-new-structure","p":172},{"i":179,"t":"The following flags/options and their respective environment variables are no longer available when using alpha configuration: flush-interval/flush_interval pass-host-header/pass_host_header proxy-websockets/proxy_websockets ssl-upstream-insecure-skip-verify/ssl_upstream_insecure_skip_verify upstream/upstreams pass-basic-auth/pass_basic_auth pass-access-token/pass_access_token pass-user-headers/pass_user_headers pass-authorization-header/pass_authorization_header set-basic-auth/set_basic_auth set-xauthrequest/set_xauthrequest set-authorization-header/set_authorization_header prefer-email-to-user/prefer_email_to_user basic-auth-password/basic_auth_password skip-auth-strip-headers/skip_auth_strip_headers client-id/client_id client-secret/client_secret, and client-secret-file/client_secret_file provider provider-display-name/provider_display_name provider-ca-file/provider_ca_files login-url/login_url redeem-url/redeem_url profile-url/profile_url resource validate-url/validate_url scope prompt approval-prompt/approval_prompt acr-values/acr_values user-id-claim/user_id_claim allowed-group/allowed_groups allowed-role/allowed_roles jwt-key/jwt_key jwt-key-file/jwt_key_file pubjwk-url/pubjwk_url and all provider-specific options, i.e. any option whose name includes oidc, azure, bitbucket, github, gitlab, google or keycloak. Attempting to use any of these options via flags or via config when --alpha-config is set will result in an error. info You must remove these options before starting OAuth2 Proxy with --alpha-config","s":"Removed options","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#removed-options","p":172},{"i":182,"t":"(Appears on: Provider) Field Type Description skipScope bool Skip adding the scope parameter in login requestDefault value is 'false'","s":"ADFSOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#adfsoptions","p":172},{"i":184,"t":"AlphaOptions contains alpha structured configuration options. Usage of these options allows users to access alpha features that are not available as part of the primary configuration structure for OAuth2 Proxy. danger The options within this structure are considered alpha. They may change between releases without notice. Field Type Description upstreamConfig UpstreamConfig UpstreamConfig is used to configure upstream servers.Once a user is authenticated, requests to the server will be proxied tothese upstream servers based on the path mappings defined in this list. injectRequestHeaders []Header InjectRequestHeaders is used to configure headers that should be addedto requests to upstream servers.Headers may source values from either the authenticated user's sessionor from a static secret value. injectResponseHeaders []Header InjectResponseHeaders is used to configure headers that should be addedto responses from the proxy.This is typically used when using the proxy as an external authenticationprovider in conjunction with another proxy such as NGINX and itsauth_request module.Headers may source values from either the authenticated user's sessionor from a static secret value. server Server Server is used to configure the HTTP(S) server for the proxy application.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. metricsServer Server MetricsServer is used to configure the HTTP(S) server for metrics.You may choose to run both HTTP and HTTPS servers simultaneously.This can be done by setting the BindAddress and the SecureBindAddress simultaneously.To use the secure server you must configure a TLS certificate and key. providers Providers Providers is used to configure multiple providers.","s":"AlphaOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#alphaoptions","p":172},{"i":186,"t":"(Appears on: Provider) Field Type Description tenant string Tenant directs to a tenant-specific or common (tenant-independent) endpointDefault value is 'common' graphGroupField string GraphGroupField configures the group field to be used when building the groups list from Microsoft GraphDefault value is 'id'","s":"AzureOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#azureoptions","p":172},{"i":188,"t":"(Appears on: Provider) Field Type Description team string Team sets restrict logins to members of this team repository string Repository sets restrict logins to user with access to this repository","s":"BitbucketOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#bitbucketoptions","p":172},{"i":190,"t":"(Appears on: HeaderValue) ClaimSource allows loading a header value from a claim within the session Field Type Description claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"ClaimSource","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#claimsource","p":172},{"i":192,"t":"(string alias)​ (Appears on: Upstream) Duration is as string representation of a period of time. A duration string is a is a possibly signed sequence of decimal numbers, each with optional fraction and a unit suffix, such as \"300ms\", \"-1.5h\" or \"2h45m\". Valid time units are \"ns\", \"us\" (or \"µs\"), \"ms\", \"s\", \"m\", \"h\".","s":"Duration","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#duration","p":172},{"i":194,"t":"(Appears on: Provider) Field Type Description org string Org sets restrict logins to members of this organisation team string Team sets restrict logins to members of this team repo string Repo sets restrict logins to collaborators of this repository token string Token is the token to use when verifying repository collaboratorsit must have push access to the repository users []string Users allows users with these usernames to logineven if they do not belong to the specified org and team or collaborators","s":"GitHubOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#githuboptions","p":172},{"i":196,"t":"(Appears on: Provider) Field Type Description group []string Group sets restrict logins to members of this group projects []string Projects restricts logins to members of any of these projects","s":"GitLabOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#gitlaboptions","p":172},{"i":198,"t":"(Appears on: Provider) Field Type Description group []string Groups sets restrict logins to members of this google group adminEmail string AdminEmail is the google admin to impersonate for api calls serviceAccountJson string ServiceAccountJSON is the path to the service account json credentials useApplicationDefaultCredentials bool UseApplicationDefaultCredentials is a boolean whether to use Application Default Credentials instead of a ServiceAccountJSON","s":"GoogleOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#googleoptions","p":172},{"i":200,"t":"(Appears on: AlphaOptions) Header represents an individual header that will be added to a request or response header. Field Type Description name string Name is the header name to be used for this set of values.Names should be unique within a list of Headers. preserveRequestValue bool PreserveRequestValue determines whether any values for this headershould be preserved for the request to the upstream server.This option only applies to injected request headers.Defaults to false (headers that match this header will be stripped). values []HeaderValue Values contains the desired values for this header","s":"Header","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#header","p":172},{"i":202,"t":"(Appears on: Header) HeaderValue represents a single header value and the sources that can make up the header value Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value. claim string Claim is the name of the claim in the session that the value should beloaded from. prefix string Prefix is an optional prefix that will be prepended to the value of theclaim if it is non-empty. basicAuthPassword SecretSource BasicAuthPassword converts this claim into a basic auth header.Note the value of claim will become the basic auth username and thebasicAuthPassword will be used as the password value.","s":"HeaderValue","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#headervalue","p":172},{"i":204,"t":"(Appears on: Provider) Field Type Description groups []string Group enables to restrict login to members of indicated group roles []string Role enables to restrict login to users with role (only available when using the keycloak-oidc provider)","s":"KeycloakOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#keycloakoptions","p":172},{"i":206,"t":"(Appears on: Provider) Field Type Description jwtKey string JWTKey is a private key in PEM format used to sign JWT, jwtKeyFile string JWTKeyFile is a path to the private key file in PEM format used to sign the JWT pubjwkURL string PubJWKURL is the JWK pubkey access endpoint","s":"LoginGovOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#logingovoptions","p":172},{"i":208,"t":"(Appears on: Provider) LoginURLParameter is the configuration for a single query parameter that can be passed through from the /oauth2/start endpoint to the IdP login URL. The \"default\" option specifies the default value or values (if any) that will be passed to the IdP for this parameter, and \"allow\" is a list of options for ways in which this parameter can be set or overridden via the query string to /oauth2/start. If only a default is specified and no \"allow\" then the parameter is effectively fixed - the default value will always be used and anything passed to the start URL will be ignored. If only \"allow\" is specified but no default then the parameter will only be passed on to the IdP if the caller provides it, and no value will be sent otherwise. Examples:","s":"LoginURLParameter","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#loginurlparameter","p":172},{"i":210,"t":"name: organizationdefault:- myorg A parameter that is not passed by default, but may be set to one of a fixed set of values name: promptallow:- value: login- value: consent- value: select_account A parameter that is passed by default but may be overridden by one of a fixed set of values name: promptdefault: [\"login\"]allow:- value: consent- value: select_account A parameter that may be overridden, but only by values that match a regular expression. For example to restrict login_hint to email addresses in your organization's domain: name: login_hintallow:- pattern: '^[^@]*@example\\.com$'# this allows at most one \"@\" sign, and requires \"example.com\" domain. Note that the YAML rules around exactly which characters are allowed and/or require escaping in different types of string literals are convoluted. For regular expressions the single quoted form is simplest as backslash is not considered to be an escape character. Alternatively use the \"chomped block\" format |-: - pattern: |- ^[^@]*@example\\.com$ The hyphen is important, a | block would have a trailing newline character. Field Type Description name string Name specifies the name of the query parameter. default []string (Optional) Default specifies a default value or values that will bepassed to the IdP if not overridden. allow []URLParameterRule (Optional) Allow specifies rules about how the default (if any) may beoverridden via the query string to /oauth2/start. Onlyvalues that match one or more of the allow rules will beforwarded to the IdP.","s":"A parameter whose value is fixed","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"","p":172},{"i":212,"t":"(Appears on: Provider) Field Type Description issuerURL string IssuerURL is the OpenID Connect issuer URLeg: https://accounts.google.com insecureAllowUnverifiedEmail bool InsecureAllowUnverifiedEmail prevents failures if an email address in an id_token is not verifieddefault set to 'false' insecureSkipIssuerVerification bool InsecureSkipIssuerVerification skips verification of ID token issuers. When false, ID Token Issuers must match the OIDC discovery URLdefault set to 'false' insecureSkipNonce bool InsecureSkipNonce skips verifying the ID Token's nonce claim that must matchthe random nonce sent in the initial OAuth flow. Otherwise, the nonce is checkedafter the initial OAuth redeem & subsequent token refreshes.default set to 'true'Warning: In a future release, this will change to 'false' by default for enhanced security. skipDiscovery bool SkipDiscovery allows to skip OIDC discovery and use manually supplied Endpointsdefault set to 'false' jwksURL string JwksURL is the OpenID Connect JWKS URLeg: https://www.googleapis.com/oauth2/v3/certs emailClaim string EmailClaim indicates which claim contains the user email,default set to 'email' groupsClaim string GroupsClaim indicates which claim contains the user groupsdefault set to 'groups' userIDClaim string UserIDClaim indicates which claim contains the user IDdefault set to 'email' audienceClaims []string AudienceClaim allows to define any claim that is verified against the client idBy default aud claim is used for verification. extraAudiences []string ExtraAudiences is a list of additional audiences that are allowedto pass verification in addition to the client id.","s":"OIDCOptions","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#oidcoptions","p":172},{"i":214,"t":"(Appears on: Providers) Provider holds all configuration for a single provider Field Type Description clientID string ClientID is the OAuth Client ID that is defined in the providerThis value is required for all providers. clientSecret string ClientSecret is the OAuth Client Secret that is defined in the providerThis value is required for all providers. clientSecretFile string ClientSecretFile is the name of the filecontaining the OAuth Client Secret, it will be used if ClientSecret is not set. keycloakConfig KeycloakOptions KeycloakConfig holds all configurations for Keycloak provider. azureConfig AzureOptions AzureConfig holds all configurations for Azure provider. ADFSConfig ADFSOptions ADFSConfig holds all configurations for ADFS provider. bitbucketConfig BitbucketOptions BitbucketConfig holds all configurations for Bitbucket provider. githubConfig GitHubOptions GitHubConfig holds all configurations for GitHubC provider. gitlabConfig GitLabOptions GitLabConfig holds all configurations for GitLab provider. googleConfig GoogleOptions GoogleConfig holds all configurations for Google provider. oidcConfig OIDCOptions OIDCConfig holds all configurations for OIDC provideror providers utilize OIDC configurations. loginGovConfig LoginGovOptions LoginGovConfig holds all configurations for LoginGov provider. id string ID should be a unique identifier for the provider.This value is required for all providers. provider ProviderType Type is the OAuth providermust be set from the supported providers group,otherwise 'Google' is set as default name string Name is the providers display nameif set, it will be shown to the users in the login page. caFiles []string CAFiles is a list of paths to CA certificates that should be used when connecting to the provider.If not specified, the default Go trust sources are used instead loginURL string LoginURL is the authentication endpoint loginURLParameters []LoginURLParameter LoginURLParameters defines the parameters that can be passed from the start URL to the IdP login URL redeemURL string RedeemURL is the token redemption endpoint profileURL string ProfileURL is the profile access endpoint resource string ProtectedResource is the resource that is protected (Azure AD and ADFS only) validateURL string ValidateURL is the access token validation endpoint scope string Scope is the OAuth scope specification allowedGroups []string AllowedGroups is a list of restrict logins to members of this group code_challenge_method string The code challenge method","s":"Provider","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#provider","p":172},{"i":216,"t":"(string alias)​ (Appears on: Provider) ProviderType is used to enumerate the different provider type options Valid options are: adfs, azure, bitbucket, digitalocean facebook, github, gitlab, google, keycloak, keycloak-oidc, linkedin, login.gov, nextcloud and oidc.","s":"ProviderType","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#providertype","p":172},{"i":218,"t":"([]Provider alias)​ (Appears on: AlphaOptions) Providers is a collection of definitions for providers.","s":"Providers","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#providers","p":172},{"i":220,"t":"(Appears on: ClaimSource, HeaderValue, TLS) SecretSource references an individual secret value. Only one source within the struct should be defined at any time. Field Type Description value []byte Value expects a base64 encoded string value. fromEnv string FromEnv expects the name of an environment variable. fromFile string FromFile expects a path to a file containing the secret value.","s":"SecretSource","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#secretsource","p":172},{"i":222,"t":"(Appears on: AlphaOptions) Server represents the configuration for an HTTP(S) server Field Type Description BindAddress string BindAddress is the address on which to serve traffic.Leave blank or set to \"-\" to disable. SecureBindAddress string SecureBindAddress is the address on which to serve secure traffic.Leave blank or set to \"-\" to disable. TLS TLS TLS contains the information for loading the certificate and key for thesecure traffic and further configuration for the TLS server.","s":"Server","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#server","p":172},{"i":224,"t":"(Appears on: Server) TLS contains the information for loading a TLS certificate and key as well as an optional minimal TLS version that is acceptable. Field Type Description Key SecretSource Key is the TLS key data to use.Typically this will come from a file. Cert SecretSource Cert is the TLS certificate data to use.Typically this will come from a file. MinVersion string MinVersion is the minimal TLS version that is acceptable.E.g. Set to \"TLS1.3\" to select TLS version 1.3 CipherSuites []string CipherSuites is a list of TLS cipher suites that are allowed.E.g.:- TLS_RSA_WITH_RC4_128_SHA- TLS_RSA_WITH_AES_256_GCM_SHA384If not specified, the default Go safe cipher list is used.List of valid cipher suites can be found in the crypto/tls documentation.","s":"TLS","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#tls","p":172},{"i":226,"t":"(Appears on: LoginURLParameter) URLParameterRule represents a rule by which query parameters passed to the /oauth2/start endpoint are checked to determine whether they are valid overrides for the given parameter passed to the IdP's login URL. Either Value or Pattern should be supplied, not both. Field Type Description value string A Value rule matches just this specific value pattern string A Pattern rule gives a regular expression that must be matched bysome substring of the value. The expression is not automaticallyanchored to the start and end of the value, if you want to restrictthe whole parameter value you must anchor it yourself with ^ and $.","s":"URLParameterRule","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#urlparameterrule","p":172},{"i":228,"t":"(Appears on: UpstreamConfig) Upstream represents the configuration for an upstream server. Requests will be proxied to this upstream if the path matches the request path. Field Type Description id string ID should be a unique identifier for the upstream.This value is required for all upstreams. path string Path is used to map requests to the upstream server.The closest match will take precedence and all Paths must be unique.Path can also take a pattern when used with RewriteTarget.Path segments can be captured and matched using regular experessions.Eg:- ^/foo$: Match only the explicit path /foo- ^/bar/$: Match any path prefixed with /bar/- ^/baz/(.*)$: Match any path prefixed with /baz and capture the remaining path for use with RewriteTarget rewriteTarget string RewriteTarget allows users to rewrite the request path before it is sent tothe upstream server.Use the Path to capture segments for reuse within the rewrite target.Eg: With a Path of ^/baz/(.*), a RewriteTarget of /foo/$1 would rewritethe request /baz/abc/123 to /foo/abc/123 before proxying to theupstream server. uri string The URI of the upstream server. This may be an HTTP(S) server of a Filebased URL. It may include a path, in which case all requests will be servedunder that path.Eg:- http://localhost:8080- https://service.localhost- https://service.localhost/path- file://host/pathIf the URI's path is \"/base\" and the incoming request was for \"/dir\",the upstream request will be for \"/base/dir\". insecureSkipTLSVerify bool InsecureSkipTLSVerify will skip TLS verification of upstream HTTPS hosts.This option is insecure and will allow potential Man-In-The-Middle attacksbetweem OAuth2 Proxy and the usptream server.Defaults to false. static bool Static will make all requests to this upstream have a static response.The response will have a body of \"Authenticated\" and a response codematching StaticCode.If StaticCode is not set, the response will return a 200 response. staticCode int StaticCode determines the response code for the Static response.This option can only be used with Static enabled. flushInterval Duration FlushInterval is the period between flushing the response buffer whenstreaming response from the upstream.Defaults to 1 second. passHostHeader bool PassHostHeader determines whether the request host header should be proxiedto the upstream server.Defaults to true. proxyWebSockets bool ProxyWebSockets enables proxying of websockets to upstream serversDefaults to true. timeout Duration Timeout is the maximum duration the server will wait for a response from the upstream server.Defaults to 30 seconds.","s":"Upstream","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#upstream","p":172},{"i":230,"t":"(Appears on: AlphaOptions) UpstreamConfig is a collection of definitions for upstream servers. Field Type Description proxyRawPath bool ProxyRawPath will pass the raw url path to upstream allowing for url'slike: \"/%2F/\" which would otherwise be redirected to \"/\" upstreams []Upstream Upstreams represents the configuration for the upstream servers.Requests will be proxied to this upstream if the path matches the request path.","s":"UpstreamConfig","u":"/oauth2-proxy/docs/configuration/alpha-config","h":"#upstreamconfig","p":172},{"i":232,"t":"Sessions allow a user's authentication to be tracked between multiple HTTP requests to a service. The OAuth2 Proxy uses a Cookie to track user sessions and will store the session data in one of the available session storage backends. At present the available backends are (as passed to --session-store-type): cookie (default) redis","s":"Session Storage","u":"/oauth2-proxy/docs/configuration/session_storage","h":"","p":231},{"i":234,"t":"The Cookie storage backend is the default backend implementation and has been used in the OAuth2 Proxy historically. With the Cookie storage backend, all session information is stored in client side cookies and transferred with each and every request. The following should be known when using this implementation: Since all state is stored client side, this storage backend means that the OAuth2 Proxy is completely stateless Cookies are signed server side to prevent modification client-side It is mandatory to set a cookie-secret which will ensure data is encrypted within the cookie data. Since multiple requests can be made concurrently to the OAuth2 Proxy, this session implementation cannot lock sessions and while updating and refreshing sessions, there can be conflicts which force users to re-authenticate","s":"Cookie Storage","u":"/oauth2-proxy/docs/configuration/session_storage","h":"#cookie-storage","p":231},{"i":236,"t":"The Redis Storage backend stores sessions, encrypted, in redis. Instead sending all the information back the client for storage, as in the Cookie storage, a ticket is sent back to the user as the cookie value instead. A ticket is composed as the following: {CookieName}-{ticketID}.{secret} Where: The CookieName is the OAuth2 cookie name (_oauth2_proxy by default) The ticketID is a 128 bit random number, hex-encoded The secret is a 128 bit random number, base64url encoded (no padding). The secret is unique for every session. The pair of {CookieName}-{ticketID} comprises a ticket handle, and thus, the redis key to which the session is stored. The encoded session is encrypted with the secret and stored in redis via the SETEX command. Encrypting every session uniquely protects the refresh/access/id tokens stored in the session from disclosure. Additionally the browser only has to send a short Cookie with every request and not the whole JWT, which can get quite big. Two settings are used to configure the OAuth2 Proxy cookie lifetime: --cookie-refresh duration refresh the cookie after this duration; 0 to disable--cookie-expire duration expire timeframe for cookie 168h0m0s The \"cookie-expire\" value should be equal to the lifetime of the Refresh-Token that is issued by the OAuth2 authorization server. If it expires earlier and is deleted by the browser, OAuth2 Proxy cannot find the stored Refresh-Tokens in Redis and thus cannot start the refresh flow to get new Access-Tokens. If it is longer, it might be that the old Refresh-Token will be found in Redis but has already expired. The \"cookie-refresh\" value controls when OAuth2 Proxy tries to refresh an Access-Token. If it is set to \"0\", the Access-Token will never be refreshed, even it is already expired and there would be a valid Refresh-Token in the available. If set, OAuth2 Proxy will refresh the Access-Token after this many seconds even if it is still valid. Of course, it will also be refreshed after it has expired, as long as a Refresh Token is available. Caveat: It can happen that the Access-Token is valid for e.g. \"1m\" and a request happens after exactly \"59s\". It would pass OAuth2 Proxy and be forwarded to the backend but is just expired when the backend tries to validate it. This is especially relevant if the backend uses the JWT to make requests to other backends. For this reason, it's advised to set the cookie-refresh a couple of seconds less than the Access-Token lifespan. Recommended settings: cookie_refresh := Access-Token lifespan - 1m cookie_expire := Refresh-Token lifespan (i.e. Keycloak's client_session_idle) Usage​ When using the redis store, specify --session-store-type=redis as well as the Redis connection URL, via --redis-connection-url=redis://host[:port][/db-number]. You may also configure the store for Redis Sentinel. In this case, you will want to use the --redis-use-sentinel=true flag, as well as configure the flags --redis-sentinel-master-name and --redis-sentinel-connection-urls appropriately. Redis Cluster is available to be the backend store as well. To leverage it, you will need to set the --redis-use-cluster=true flag, and configure the flags --redis-cluster-connection-urls appropriately. Note that flags --redis-use-sentinel=true and --redis-use-cluster=true are mutually exclusive. Note, if Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. For example: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14","s":"Redis Storage","u":"/oauth2-proxy/docs/configuration/session_storage","h":"#redis-storage","p":231},{"i":238,"t":"There are two recommended configurations: At OAuth2 Proxy At Reverse Proxy","s":"TLS Configuration","u":"/oauth2-proxy/docs/configuration/tls","h":"","p":237},{"i":240,"t":"Configure SSL Termination with OAuth2 Proxy by providing a --tls-cert-file=/path/to/cert.pem and --tls-key-file=/path/to/cert.key. The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --tls-cert-file=/path/to/cert.pem \\ --tls-key-file=/path/to/cert.key \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --client-id=... \\ --client-secret=... With this configuration approach the customization of the TLS settings is limited. The minimal acceptable TLS version can be set with --tls-min-version=TLS1.3. The defaults set TLS1.2 as the minimal version. Regardless of the minimum version configured, TLS1.3 is currently always used as the maximal version. TLS server side cipher suites can be specified with --tls-cipher-suite=TLS_RSA_WITH_RC4_128_SHA. If not specified, the defaults from crypto/tls of the currently used go version for building oauth2-proxy will be used. A complete list of valid TLS cipher suite names can be found in crypto/tls.","s":"Terminate TLS at OAuth2 Proxy","u":"/oauth2-proxy/docs/configuration/tls","h":"#terminate-tls-at-oauth2-proxy","p":237},{"i":242,"t":"Configure SSL Termination with Nginx (example config below), Amazon ELB, Google Cloud Platform Load Balancing, or ... Because oauth2-proxy listens on 127.0.0.1:4180 by default, to listen on all interfaces (needed when using an external load balancer like Amazon ELB or Google Platform Load Balancing) use --http-address=\"0.0.0.0:4180\" or --http-address=\"http://:4180\". Nginx will listen on port 443 and handle SSL connections while proxying to oauth2-proxy on port 4180. oauth2-proxy will then authenticate requests for an upstream application. The external endpoint for this example would be https://internal.yourcompany.com/. An example Nginx config follows. Note the use of Strict-Transport-Security header to pin requests to SSL via HSTS: server { listen 443 default ssl; server_name internal.yourcompany.com; ssl_certificate /path/to/cert.pem; ssl_certificate_key /path/to/cert.key; add_header Strict-Transport-Security max-age=2592000; location / { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_connect_timeout 1; proxy_send_timeout 30; proxy_read_timeout 30; }} The command line to run oauth2-proxy in this configuration would look like this: ./oauth2-proxy \\ --email-domain=\"yourcompany.com\" \\ --upstream=http://127.0.0.1:8080/ \\ --cookie-secret=... \\ --cookie-secure=true \\ --provider=... \\ --reverse-proxy=true \\ --client-id=... \\ --client-secret=...","s":"Terminate TLS at Reverse Proxy, e.g. Nginx","u":"/oauth2-proxy/docs/configuration/tls","h":"#terminate-tls-at-reverse-proxy-eg-nginx","p":237},{"i":244,"t":"We track bugs and issues using Github. If you find a bug, please open an Issue. When opening an Issue or Pull Request please follow the preconfigured template and take special note of the checkboxes. If you want to fix a bug, add a new feature or extend existing functionality, please create a fork, create a feature branch and open a PR back to this repo. Please mention open bug issue number(s) within your PR if applicable. We suggest using Visual Studio Code with the official Go for Visual Studio Code extension.","s":"Contribution Guide","u":"/oauth2-proxy/docs/community/contribution","h":"","p":243},{"i":246,"t":"This project is currently still using go 1.19. You can follow the installation guide for go here. And you can find go version 1.19 in the archived section here.","s":"Go version","u":"/oauth2-proxy/docs/community/contribution","h":"","p":243},{"i":248,"t":"Clone your fork, create a feature branch and update the depedencies to get started. git clone git@github.com:/oauth2-proxycd oauth2-proxygit branch feature/git push --set-upstream origin feature/go mod download","s":"Preparing your fork","u":"/oauth2-proxy/docs/community/contribution","h":"","p":243},{"i":250,"t":"For starting oauth2-proxy locally open the debugging tab and create the launch.json and select Go: Launch Package. { \"version\": \"0.2.0\", \"configurations\": [ { \"name\": \"Launch OAuth2-Proxy with Dex\", \"type\": \"go\", \"request\": \"launch\", \"mode\": \"auto\", \"program\": \"${workspaceFolder}\", \"args\": [ \"--config\", // The following configuration contains settings for a locally deployed // upstream and dex as an idetity provider \"contrib/local-environment/oauth2-proxy.cfg\" ] }, { \"name\": \"Launch OAuth2-Proxy with Keycloak\", \"type\": \"go\", \"request\": \"launch\", \"mode\": \"auto\", \"program\": \"${workspaceFolder}\", \"args\": [ \"--config\", // The following configuration contains settings for a locally deployed // upstream and keycloak as an idetity provider \"contrib/local-environment/oauth2-proxy-keycloak.cfg\" ] } ]} Before you can start your local version of oauth2-proxy, you will have to use the provided docker compose files to start a local upstream service and identity provider. We suggest using httpbin as your upstream for testing as it allows for request and response introspection of all things HTTP. Open a terminal and switch to the contrib/local-environment directory. Dex as your IdP: docker compose -f docker-compose.yaml up dex etcd httpbin Keycloak as your IdP: docker compose -f docker-compose-keycloak.yaml up keycloak httpbin The username for both is admin@example.com and password is password. Start oauth2-proxy from the debug tab and open http://oauth2-proxy.localtest.me:4180/ for testing.","s":"Testing / Debugging","u":"/oauth2-proxy/docs/community/contribution","h":"","p":243},{"i":252,"t":"OAuth2 Proxy responds directly to the following endpoints. All other endpoints will be proxied upstream when authenticated. The /oauth2 prefix can be changed with the --proxy-prefix config variable. /robots.txt - returns a 200 OK response that disallows all User-agents from all paths; see robotstxt.org for more info /ping - returns a 200 OK response, which is intended for use with health checks /ready - returns a 200 OK response if all the underlying connections (e.g., Redis store) are connected /metrics - Metrics endpoint for Prometheus to scrape, serve on the address specified by --metrics-address, disabled by default /oauth2/sign_in - the login page, which also doubles as a sign out page (it clears cookies) /oauth2/sign_out - this URL is used to clear the session cookie /oauth2/start - a URL that will redirect to start the OAuth cycle /oauth2/callback - the URL used at the end of the OAuth cycle. The oauth app will be configured with this as the callback url. /oauth2/userinfo - the URL is used to return user's email from the session in JSON format. /oauth2/auth - only returns a 202 Accepted response or a 401 Unauthorized response; for use with the Nginx auth_request directive /oauth2/static/* - stylesheets and other dependencies used in the sign_in and error pages","s":"Endpoints","u":"/oauth2-proxy/docs/features/endpoints","h":"","p":251},{"i":254,"t":"To sign the user out, redirect them to /oauth2/sign_out. This endpoint only removes oauth2-proxy's own cookies, i.e. the user is still logged in with the authentication provider and may automatically re-login when accessing the application again. You will also need to redirect the user to the authentication provider's sign out page afterwards using the rd query parameter, i.e. redirect the user to something like (notice the url-encoding!): /oauth2/sign_out?rd=https%3A%2F%2Fmy-oidc-provider.example.com%2Fsign_out_page Alternatively, include the redirect URL in the X-Auth-Request-Redirect header: GET /oauth2/sign_out HTTP/1.1X-Auth-Request-Redirect: https://my-oidc-provider/sign_out_page... (The \"sign_out_page\" should be the end_session_endpoint from the metadata if your OIDC provider supports Session Management and Discovery.) BEWARE that the domain you want to redirect to (my-oidc-provider.example.com in the example) must be added to the --whitelist-domain configuration option otherwise the redirect will be ignored. Make sure to include the actual domain and port (if needed) and not the URL (e.g \"localhost:8081\" instead of \"http://localhost:8081\").","s":"Sign out","u":"/oauth2-proxy/docs/features/endpoints","h":"#sign-out","p":251},{"i":256,"t":"This endpoint returns 202 Accepted response or a 401 Unauthorized response. It can be configured using the following query parameters: allowed_groups: comma separated list of allowed groups allowed_email_domains: comma separated list of allowed email domains allowed_emails: comma separated list of allowed emails","s":"Auth","u":"/oauth2-proxy/docs/features/endpoints","h":"#auth","p":251},{"i":258,"t":"oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).","s":"Overview","u":"/oauth2-proxy/docs/configuration/overview","h":"","p":257},{"i":260,"t":"To generate a strong cookie secret use one of the below commands: Python Bash OpenSSL PowerShell Terraform python -c 'import os,base64; print(base64.urlsafe_b64encode(os.urandom(32)).decode())' dd if=/dev/urandom bs=32 count=1 2>/dev/null | base64 | tr -d -- '\\n' | tr -- '+/' '-_'; echo openssl rand -base64 32 | tr -- '+/' '-_' # Add System.Web assembly to session, just in caseAdd-Type -AssemblyName System.Web[Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes([System.Web.Security.Membership]::GeneratePassword(32,4))).Replace(\"+\",\"-\").Replace(\"/\",\"_\") # Valid 32 Byte Base64 URL encoding set that will decode to 24 []byte AES-192 secretresource \"random_password\" \"cookie_secret\" { length = 32 override_special = \"-_\"}","s":"Generating a Cookie Secret","u":"/oauth2-proxy/docs/configuration/overview","h":"#generating-a-cookie-secret","p":257},{"i":262,"t":"Every command line argument can be specified in a config file by replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the config option should be plural (trailing s). An example oauth2-proxy.cfg config file is in the contrib directory. It can be used by specifying --config=/etc/oauth2-proxy.cfg","s":"Config File","u":"/oauth2-proxy/docs/configuration/overview","h":"#config-file","p":257},{"i":264,"t":"Option Type Description Default --acr-values string optional, see docs \"\" --api-route string | list return HTTP 401 instead of redirecting to authentication server if token is not valid. Format: path_regex --approval-prompt string OAuth approval_prompt \"force\" --auth-logging bool Log authentication attempts true --auth-logging-format string Template for authentication log lines see Logging Configuration --authenticated-emails-file string authenticate against emails via file (one per line) --azure-tenant string go to a tenant-specific or common (tenant-independent) endpoint. \"common\" --basic-auth-password string the password to set when passing the HTTP Basic Auth header --client-id string the OAuth Client ID, e.g. \"123456.apps.googleusercontent.com\" --client-secret string the OAuth Client Secret --client-secret-file string the file with OAuth Client Secret --code-challenge-method string use PKCE code challenges with the specified method. Either 'plain' or 'S256' (recommended) --config string path to config file --cookie-domain string | list Optional cookie domains to force cookies to (e.g. .yourcompany.com). The longest domain matching the request's host will be used (or the shortest cookie domain if there is no match). --cookie-expire duration expire timeframe for cookie. If set to 0, cookie becomes a session-cookie which will expire when the browser is closed. 168h0m0s --cookie-httponly bool set HttpOnly cookie flag true --cookie-name string the name of the cookie that the oauth_proxy creates. Should be changed to use a cookie prefix (__Host- or __Secure-) if --cookie-secure is set. \"_oauth2_proxy\" --cookie-path string an optional cookie path to force cookies to (e.g. /poc/) \"/\" --cookie-refresh duration refresh the cookie after this duration; 0 to disable; not supported by all providers [1] --cookie-secret string the seed string for secure cookies (optionally base64 encoded) --cookie-secure bool set secure (HTTPS only) cookie flag true --cookie-samesite string set SameSite cookie attribute (\"lax\", \"strict\", \"none\", or \"\"). \"\" --cookie-csrf-per-request bool Enable having different CSRF cookies per request, making it possible to have parallel requests. false --cookie-csrf-expire duration expire timeframe for CSRF cookie 15m --custom-templates-dir string path to custom html templates --custom-sign-in-logo string path or a URL to an custom image for the sign_in page logo. Use \"-\" to disable default logo. --display-htpasswd-form bool display username / password login form if an htpasswd file is provided true --email-domain string | list authenticate emails with the specified domain (may be given multiple times). Use * to authenticate any email --errors-to-info-log bool redirects error-level logging to default log channel instead of stderr false --extra-jwt-issuers string if --skip-jwt-bearer-tokens is set, a list of extra JWT issuer=audience (see a token's iss, aud fields) pairs (where the issuer URL has a .well-known/openid-configuration or a .well-known/jwks.json) --exclude-logging-path string comma separated list of paths to exclude from logging, e.g. \"/ping,/path2\" \"\" (no paths excluded) --flush-interval duration period between flushing response buffers when streaming responses \"1s\" --force-https bool enforce https redirect false --force-json-errors bool force JSON errors instead of HTTP error pages or redirects false --banner string custom (html) banner string. Use \"-\" to disable default banner. --footer string custom (html) footer string. Use \"-\" to disable default footer. --github-org string restrict logins to members of this organisation --github-team string restrict logins to members of any of these teams (slug), separated by a comma --github-repo string restrict logins to collaborators of this repository formatted as orgname/repo --github-token string the token to use when verifying repository collaborators (must have push access to the repository) --github-user string | list To allow users to login by username even if they do not belong to the specified org and team or collaborators --gitlab-group string | list restrict logins to members of any of these groups (slug), separated by a comma --gitlab-projects string | list restrict logins to members of any of these projects (may be given multiple times) formatted as orgname/repo=accesslevel. Access level should be a value matching Gitlab access levels, defaulted to 20 if absent --google-admin-email string the google admin to impersonate for api calls --google-group string restrict logins to members of this google group (may be given multiple times). --google-service-account-json string the path to the service account json credentials --google-use-application-default-credentials bool use application default credentials instead of service account json (i.e. GKE Workload Identity) --htpasswd-file string additionally authenticate against a htpasswd file. Entries must be created with htpasswd -B for bcrypt encryption --htpasswd-user-group string | list the groups to be set on sessions for htpasswd users --http-address string [http://]: or unix:// to listen on for HTTP clients. Square brackets are required for ipv6 address, e.g. http://[::1]:4180 \"127.0.0.1:4180\" --https-address string [https://]: to listen on for HTTPS clients. Square brackets are required for ipv6 address, e.g. https://[::1]:443 \":443\" --logging-compress bool Should rotated log files be compressed using gzip false --logging-filename string File to log requests to, empty for stdout \"\" (stdout) --logging-local-time bool Use local time in log files and backup filenames instead of UTC true (local time) --logging-max-age int Maximum number of days to retain old log files 7 --logging-max-backups int Maximum number of old log files to retain; 0 to disable 0 --logging-max-size int Maximum size in megabytes of the log file before rotation 100 --jwt-key string private key in PEM format used to sign JWT, so that you can say something like --jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\": required by login.gov --jwt-key-file string path to the private key file in PEM format used to sign the JWT so that you can say something like --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem: required by login.gov --login-url string Authentication endpoint --insecure-oidc-allow-unverified-email bool don't fail if an email address in an id_token is not verified false --insecure-oidc-skip-issuer-verification bool allow the OIDC issuer URL to differ from the expected (currently required for Azure multi-tenant compatibility) false --insecure-oidc-skip-nonce bool skip verifying the OIDC ID Token's nonce claim true --oidc-issuer-url string the OpenID Connect issuer URL, e.g. \"https://accounts.google.com\" --oidc-jwks-url string OIDC JWKS URI for token verification; required if OIDC discovery is disabled --oidc-email-claim string which OIDC claim contains the user's email \"email\" --oidc-groups-claim string which OIDC claim contains the user groups \"groups\" --oidc-audience-claim string which OIDC claim contains the audience \"aud\" --oidc-extra-audience string | list additional audiences which are allowed to pass verification \"[]\" --pass-access-token bool pass OAuth access_token to upstream via X-Forwarded-Access-Token header. When used with --set-xauthrequest this adds the X-Auth-Request-Access-Token header to the response false --pass-authorization-header bool pass OIDC IDToken to upstream via Authorization Bearer header false --pass-basic-auth bool pass HTTP Basic Auth, X-Forwarded-User, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --prefer-email-to-user bool Prefer to use the Email address as the Username when passing information to upstream. Will only use Username if Email is unavailable, e.g. htaccess authentication. Used in conjunction with --pass-basic-auth and --pass-user-headers false --pass-host-header bool pass the request Host Header to upstream true --pass-user-headers bool pass X-Forwarded-User, X-Forwarded-Groups, X-Forwarded-Email and X-Forwarded-Preferred-Username information to upstream true --profile-url string Profile access endpoint --prompt string OIDC prompt; if present, approval-prompt is ignored \"\" --provider string OAuth provider google --provider-ca-file string | list Paths to CA certificates that should be used when connecting to the provider. If not specified, the default Go trust sources are used instead. --provider-display-name string Override the provider's name with the given string; used for the sign-in page (depends on provider) --ping-path string the ping endpoint that can be used for basic health checks \"/ping\" --ping-user-agent string a User-Agent that can be used for basic health checks \"\" (don't check user agent) --ready-path string the ready endpoint that can be used for deep health checks \"/ready\" --metrics-address string the address prometheus metrics will be scraped from \"\" --proxy-prefix string the url root path that this proxy should be nested under (e.g. //sign_in) \"/oauth2\" --proxy-websockets bool enables WebSocket proxying true --pubjwk-url string JWK pubkey access endpoint: required by login.gov --real-client-ip-header string Header used to determine the real IP of the client, requires --reverse-proxy to be set (one of: X-Forwarded-For, X-Real-IP, or X-ProxyUser-IP) X-Real-IP --redeem-url string Token redemption endpoint --redirect-url string the OAuth Redirect URL, e.g. \"https://internalapp.yourcompany.com/oauth2/callback\" --redis-cluster-connection-urls string | list List of Redis cluster connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-cluster --redis-connection-url string URL of redis server for redis session storage (e.g. redis://HOST[:PORT]) --redis-insecure-skip-tls-verify bool skip TLS verification when connecting to Redis false --redis-password string Redis password. Applicable for all Redis configurations. Will override any password set in --redis-connection-url --redis-sentinel-password string Redis sentinel password. Used only for sentinel connection; any redis node passwords need to use --redis-password --redis-sentinel-master-name string Redis sentinel master name. Used in conjunction with --redis-use-sentinel --redis-sentinel-connection-urls string | list List of Redis sentinel connection URLs (e.g. redis://HOST[:PORT]). Used in conjunction with --redis-use-sentinel --redis-use-cluster bool Connect to redis cluster. Must set --redis-cluster-connection-urls to use this feature false --redis-use-sentinel bool Connect to redis via sentinels. Must set --redis-sentinel-master-name and --redis-sentinel-connection-urls to use this feature false --redis-connection-idle-timeout int Redis connection idle timeout seconds. If Redis timeout option is set to non-zero, the --redis-connection-idle-timeout must be less than Redis timeout option. Exmpale: if either redis.conf includes timeout 15 or using CONFIG SET timeout 15 the --redis-connection-idle-timeout must be at least --redis-connection-idle-timeout=14 0 --request-id-header string Request header to use as the request ID in logging X-Request-Id --request-logging bool Log requests true --request-logging-format string Template for request log lines see Logging Configuration --resource string The resource that is protected (Azure AD only) --reverse-proxy bool are we running behind a reverse proxy, controls whether headers like X-Real-IP are accepted and allows X-Forwarded-{Proto,Host,Uri} headers to be used on redirect selection false --scope string OAuth scope specification --session-cookie-minimal bool strip OAuth tokens from cookie session stores if they aren't needed (cookie session store only) false --session-store-type string Session data storage backend; redis or cookie cookie --set-xauthrequest bool set X-Auth-Request-User, X-Auth-Request-Groups, X-Auth-Request-Email and X-Auth-Request-Preferred-Username response headers (useful in Nginx auth_request mode). When used with --pass-access-token, X-Auth-Request-Access-Token is added to response headers. false --set-authorization-header bool set Authorization Bearer response header (useful in Nginx auth_request mode) false --set-basic-auth bool set HTTP Basic Auth information in response (useful in Nginx auth_request mode) false --show-debug-on-error bool show detailed error information on error pages (WARNING: this may contain sensitive information - do not use in production) false --signature-key string GAP-Signature request signature key (algorithm:secretkey) --silence-ping-logging bool disable logging of requests to ping & ready endpoints false --skip-auth-preflight bool will skip authentication for OPTIONS requests false --skip-auth-regex string | list (DEPRECATED for --skip-auth-route) bypass authentication for requests paths that match (may be given multiple times) --skip-auth-route string | list bypass authentication for requests that match the method & path. Format: method=path_regex OR method!=path_regex. For all methods: path_regex OR !=path_regex --skip-auth-strip-headers bool strips X-Forwarded-* style authentication headers & Authorization header if they would be set by oauth2-proxy true --skip-jwt-bearer-tokens bool will skip requests that have verified JWT bearer tokens (the token must have aud that matches this client id or one of the extras from extra-jwt-issuers) false --skip-oidc-discovery bool bypass OIDC endpoint discovery. --login-url, --redeem-url and --oidc-jwks-url must be configured in this case false --skip-provider-button bool will skip sign-in-page to directly reach the next step: oauth/start false --ssl-insecure-skip-verify bool skip validation of certificates presented when using HTTPS providers false --ssl-upstream-insecure-skip-verify bool skip validation of certificates presented when using HTTPS upstreams false --standard-logging bool Log standard runtime information true --standard-logging-format string Template for standard log lines see Logging Configuration --tls-cert-file string path to certificate file --tls-cipher-suite string | list Restricts TLS cipher suites used by server to those listed (e.g. TLS_RSA_WITH_RC4_128_SHA) (may be given multiple times). If not specified, the default Go safe cipher list is used. List of valid cipher suites can be found in the crypto/tls documentation. --tls-key-file string path to private key file --tls-min-version string minimum TLS version that is acceptable, either \"TLS1.2\" or \"TLS1.3\" \"TLS1.2\" --upstream string | list the http url(s) of the upstream endpoint, file:// paths for static files or static:// for static response. Routing is based on the path --upstream-timeout duration maximum amount of time the server will wait for a response from the upstream 30s --allowed-group string | list restrict logins to members of this group (may be given multiple times) --allowed-role string | list restrict logins to users with this role (may be given multiple times). Only works with the keycloak-oidc provider. --validate-url string Access token validation endpoint --version n/a print version string --whitelist-domain string | list allowed domains for redirection after authentication. Prefix domain with a . or a *. to allow subdomains (e.g. .example.com, *.example.com) [2] --trusted-ip string | list list of IPs or CIDR ranges to allow to bypass authentication (may be given multiple times). When combined with --reverse-proxy and optionally --real-client-ip-header this will evaluate the trust of the IP stored in an HTTP header by a reverse proxy rather than the layer-3/4 remote address. WARNING: trusting IPs has inherent security flaws, especially when obtaining the IP address from an HTTP header (reverse-proxy mode). Use this option only if you understand the risks and how to manage them. [1]: Only these providers support --cookie-refresh: GitLab, Google and OIDC [2]: When using the whitelist-domain option, any domain prefixed with a . or a *. will allow any subdomain of the specified domain as a valid redirect URL. By default, only empty ports are allowed. This translates to allowing the default port of the URL's protocol (80 for HTTP, 443 for HTTPS, etc.) since browsers omit them. To allow only a specific port, add it to the whitelisted domain: example.com:8080. To allow any port, use *: example.com:*. See below for provider specific options","s":"Command Line Options","u":"/oauth2-proxy/docs/configuration/overview","h":"#command-line-options","p":257},{"i":266,"t":"oauth2-proxy supports having multiple upstreams, and has the option to pass requests on to HTTP(S) servers or serve static files from the file system. HTTP and HTTPS upstreams are configured by providing a URL such as http://127.0.0.1:8080/ for the upstream parameter. This will forward all authenticated requests to the upstream server. If you instead provide http://127.0.0.1:8080/some/path/ then it will only be requests that start with /some/path/ which are forwarded to the upstream. Static file paths are configured as a file:// URL. file:///var/www/static/ will serve the files from that directory at http://[oauth2-proxy url]/var/www/static/, which may not be what you want. You can provide the path to where the files should be available by adding a fragment to the configured URL. The value of the fragment will then be used to specify which path the files are available at, e.g. file:///var/www/static/#/static/ will make /var/www/static/ available at http://[oauth2-proxy url]/static/. Multiple upstreams can either be configured by supplying a comma separated list to the --upstream parameter, supplying the parameter multiple times or providing a list in the config file. When multiple upstreams are used routing to them will be based on the path they are set up with.","s":"Upstreams Configuration","u":"/oauth2-proxy/docs/configuration/overview","h":"#upstreams-configuration","p":257},{"i":268,"t":"Every command line argument can be specified as an environment variable by prefixing it with OAUTH2_PROXY_, capitalising it, and replacing hyphens (-) with underscores (_). If the argument can be specified multiple times, the environment variable should be plural (trailing S). This is particularly useful for storing secrets outside of a configuration file or the command line. For example, the --cookie-secret flag becomes OAUTH2_PROXY_COOKIE_SECRET, and the --email-domain flag becomes OAUTH2_PROXY_EMAIL_DOMAINS.","s":"Environment variables","u":"/oauth2-proxy/docs/configuration/overview","h":"#environment-variables","p":257},{"i":270,"t":"By default, OAuth2 Proxy logs all output to stdout. Logging can be configured to output to a rotating log file using the --logging-filename command. If logging to a file you can also configure the maximum file size (--logging-max-size), age (--logging-max-age), max backup logs (--logging-max-backups), and if backup logs should be compressed (--logging-compress). There are three different types of logging: standard, authentication, and HTTP requests. These can each be enabled or disabled with --standard-logging, --auth-logging, and --request-logging. Each type of logging has its own configurable format and variables. By default these formats are similar to the Apache Combined Log. Logging of requests to the /ping endpoint (or using --ping-user-agent) and the /ready endpoint can be disabled with --silence-ping-logging reducing log volume.","s":"Logging Configuration","u":"/oauth2-proxy/docs/configuration/overview","h":"#logging-configuration","p":257},{"i":272,"t":"Authentication logs are logs which are guaranteed to contain a username or email address of a user attempting to authenticate. These logs are output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] [] The status block will contain one of the below strings: AuthSuccess If a user has authenticated successfully by any method AuthFailure If the user failed to authenticate explicitly AuthError If there was an unexpected error during authentication If you require a different format than that, you can configure it with the --auth-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] [{{.Status}}] {{.Message}} Available variables for auth logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Message Authenticated via OAuth2 The details of the auth attempt. Protocol HTTP/1.0 The request protocol. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request. Status AuthSuccess The status of the auth request. See above for details.","s":"Auth Log Format","u":"/oauth2-proxy/docs/configuration/overview","h":"#auth-log-format","p":257},{"i":274,"t":"HTTP request logs will output by default in the below format: - - [19/Mar/2015:17:20:19 -0400] GET \"/path/\" HTTP/1.1 \"\" If you require a different format than that, you can configure it with the --request-logging-format flag. The default format is configured as follows: {{.Client}} - {{.RequestID}} - {{.Username}} [{{.Timestamp}}] {{.Host}} {{.RequestMethod}} {{.Upstream}} {{.RequestURI}} {{.Protocol}} {{.UserAgent}} {{.StatusCode}} {{.ResponseSize}} {{.RequestDuration}} Available variables for request logging: Variable Example Description Client 74.125.224.72 The client/remote IP address. Will use the X-Real-IP header it if exists & reverse-proxy is set to true. Host domain.com The value of the Host header. Protocol HTTP/1.0 The request protocol. RequestDuration 0.001 The time in seconds that a request took to process. RequestID 00010203-0405-4607-8809-0a0b0c0d0e0f The request ID pulled from the --request-id-header. Random UUID if empty RequestMethod GET The request method. RequestURI \"/oauth2/auth\" The URI path of the request. ResponseSize 12 The size in bytes of the response. StatusCode 200 The HTTP status code of the response. Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. Upstream - The upstream data of the HTTP request. UserAgent - The full user agent as reported by the requesting client. Username username@email.com The email or username of the auth request.","s":"Request Log Format","u":"/oauth2-proxy/docs/configuration/overview","h":"#request-log-format","p":257},{"i":276,"t":"All other logging that is not covered by the above two types of logging will be output in this standard logging format. This includes configuration information at startup and errors that occur outside of a session. The default format is below: [19/Mar/2015:17:20:19 -0400] [main.go:40] If you require a different format than that, you can configure it with the --standard-logging-format flag. The default format is configured as follows: [{{.Timestamp}}] [{{.File}}] {{.Message}} Available variables for standard logging: Variable Example Description Timestamp 19/Mar/2015:17:20:19 -0400 The date and time of the logging event. File main.go:40 The file and line number of the logging statement. Message HTTP: listening on 127.0.0.1:4180 The details of the log statement.","s":"Standard Log Format","u":"/oauth2-proxy/docs/configuration/overview","h":"#standard-log-format","p":257},{"i":278,"t":"The Nginx auth_request directive allows Nginx to authenticate requests via the oauth2-proxy's /auth endpoint, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the request through. For example: server { listen 443 ssl; server_name ...; include ssl/ssl.conf; location /oauth2/ { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; proxy_set_header X-Auth-Request-Redirect $request_uri; # or, if you are handling multiple domains: # proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri; } location = /oauth2/auth { proxy_pass http://127.0.0.1:4180; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Scheme $scheme; # nginx auth_request includes headers but not body proxy_set_header Content-Length \"\"; proxy_pass_request_body off; } location / { auth_request /oauth2/auth; error_page 401 = /oauth2/sign_in; # pass information via X-User and X-Email headers to backend, # requires running with --set-xauthrequest flag auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $email $upstream_http_x_auth_request_email; proxy_set_header X-User $user; proxy_set_header X-Email $email; # if you enabled --pass-access-token, this will pass the token to the backend auth_request_set $token $upstream_http_x_auth_request_access_token; proxy_set_header X-Access-Token $token; # if you enabled --cookie-refresh, this is needed for it to work with auth_request auth_request_set $auth_cookie $upstream_http_set_cookie; add_header Set-Cookie $auth_cookie; # When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb # limit and so the OAuth2 Proxy splits these into multiple parts. # Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response, # so if your cookies are larger than 4kb, you will need to extract additional cookies manually. auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1; # Extract the Cookie attributes from the first Set-Cookie header and append them # to the second part ($upstream_cookie_* variables only contain the raw cookie content) if ($auth_cookie ~* \"(; .*)\") { set $auth_cookie_name_0 $auth_cookie; set $auth_cookie_name_1 \"auth_cookie_name_1=$auth_cookie_name_upstream_1$1\"; } # Send both Set-Cookie headers now if there was a second part if ($auth_cookie_name_upstream_1) { add_header Set-Cookie $auth_cookie_name_0; add_header Set-Cookie $auth_cookie_name_1; } proxy_pass http://backend/; # or \"root /path/to/site;\" or \"fastcgi_pass ...\" etc }} When you use ingress-nginx in Kubernetes, you MUST use kubernetes/ingress-nginx (which includes the Lua module) and the following configuration snippet for your Ingress. Variables set with auth_request_set are not set-able in plain nginx config when the location is processed via proxy_pass and then may only be processed by Lua. Note that nginxinc/kubernetes-ingress does not include the Lua module. nginx.ingress.kubernetes.io/auth-response-headers: Authorizationnginx.ingress.kubernetes.io/auth-signin: https://$host/oauth2/start?rd=$escaped_request_uringinx.ingress.kubernetes.io/auth-url: https://$host/oauth2/authnginx.ingress.kubernetes.io/configuration-snippet: | auth_request_set $name_upstream_1 $upstream_cookie_name_1; access_by_lua_block { if ngx.var.name_upstream_1 ~= \"\" then ngx.header[\"Set-Cookie\"] = \"name_1=\" .. ngx.var.name_upstream_1 .. ngx.var.auth_cookie:match(\"(; .*)\") end } It is recommended to use --session-store-type=redis when expecting large sessions/OIDC tokens (e.g. with MS Azure). You have to substitute name with the actual cookie name you configured via --cookie-name parameter. If you don't set a custom cookie name the variable should be \"$upstream_cookie__oauth2_proxy_1\" instead of \"$upstream_cookie_name_1\" and the new cookie-name should be \"_oauth2_proxy_1=\" instead of \"name_1=\".","s":"Configuring for use with the Nginx auth_request directive","u":"/oauth2-proxy/docs/configuration/overview","h":"#configuring-for-use-with-the-nginx-auth_request-directive","p":257},{"i":280,"t":"This option requires --reverse-proxy option to be set.","s":"Configuring for use with the Traefik (v2) ForwardAuth middleware","u":"/oauth2-proxy/docs/configuration/overview","h":"#configuring-for-use-with-the-traefik-v2-forwardauth-middleware","p":257},{"i":282,"t":"The Traefik v2 ForwardAuth middleware allows Traefik to authenticate requests via the oauth2-proxy's /oauth2/auth endpoint on every request, which only returns a 202 Accepted response or a 401 Unauthorized response without proxying the whole request through. For example, on Dynamic File (YAML) Configuration: http: routers: a-service: rule: \"Host(`a-service.example.com`)\" service: a-service-backend middlewares: - oauth-errors - oauth-auth tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth: rule: \"Host(`a-service.example.com`, `oauth.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true oauth-errors: errors: status: - \"401-403\" service: oauth-backend query: \"/oauth2/sign_in?rd={url}\"","s":"ForwardAuth with 401 errors middleware","u":"/oauth2-proxy/docs/configuration/overview","h":"#forwardauth-with-401-errors-middleware","p":257},{"i":284,"t":"Redirect to sign_in functionality provided without the use of errors middleware with Traefik v2 ForwardAuth middleware pointing to oauth2-proxy service's / endpoint Following options need to be set on oauth2-proxy: --upstream=static://202: Configures a static response for authenticated sessions --reverse-proxy=true: Enables the use of X-Forwarded-* headers to determine redirects correctly http: routers: a-service-route-1: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/`)\" service: a-service-backend middlewares: - oauth-auth-redirect # redirects all unauthenticated to oauth2 signin tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" a-service-route-2: rule: \"Host(`a-service.example.com`) && PathPrefix(`/no-auto-redirect`)\" service: a-service-backend middlewares: - oauth-auth-wo-redirect # unauthenticated session will return a 401 tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services-oauth2-route: rule: \"Host(`a-service.example.com`, `b-service.example.com`) && PathPrefix(`/oauth2/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" oauth2-proxy-route: rule: \"Host(`oauth.example.com`) && PathPrefix(`/`)\" middlewares: - auth-headers service: oauth-backend tls: certResolver: default domains: - main: \"example.com\" sans: - \"*.example.com\" services: a-service-backend: loadBalancer: servers: - url: http://172.16.0.2:7555 b-service-backend: loadBalancer: servers: - url: http://172.16.0.3:7555 oauth-backend: loadBalancer: servers: - url: http://172.16.0.1:4180 middlewares: auth-headers: headers: sslRedirect: true stsSeconds: 315360000 browserXssFilter: true contentTypeNosniff: true forceSTSHeader: true sslHost: example.com stsIncludeSubdomains: true stsPreload: true frameDeny: true oauth-auth-redirect: forwardAuth: address: https://oauth.example.com/ trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization oauth-auth-wo-redirect: forwardAuth: address: https://oauth.example.com/oauth2/auth trustForwardHeader: true authResponseHeaders: - X-Auth-Request-Access-Token - Authorization note If you set up your OAuth2 provider to rotate your client secret, you can use the client-secret-file option to reload the secret when it is updated.","s":"ForwardAuth with static upstreams configuration","u":"/oauth2-proxy/docs/configuration/overview","h":"#forwardauth-with-static-upstreams-configuration","p":257},{"i":286,"t":"You will need to register an OAuth application with a Provider (Google, GitHub or another provider), and configure it with Redirect URI(s) for the domain you intend to run oauth2-proxy on. Valid providers are : Google default Azure ADFS Facebook GitHub Keycloak GitLab LinkedIn Microsoft Azure AD OpenID Connect login.gov Nextcloud DigitalOcean Bitbucket Gitea The provider can be selected using the provider configuration value. Please note that not all providers support all claims. The preferred_username claim is currently only supported by the OpenID Connect provider.","s":"OAuth Provider Configuration","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"","p":285},{"i":288,"t":"For Google, the registration steps are: Create a new project: https://console.developers.google.com/project Choose the new project from the top right project dropdown (only if another project is selected) In the project Dashboard center pane, choose \"APIs & Services\" In the left Nav pane, choose \"Credentials\" In the center pane, choose \"OAuth consent screen\" tab. Fill in \"Product name shown to users\" and hit save. In the center pane, choose \"Credentials\" tab. Open the \"New credentials\" drop down Choose \"OAuth client ID\" Choose \"Web application\" Application name is freeform, choose something appropriate Authorized JavaScript origins is your domain ex: https://internal.yourcompany.com Authorized redirect URIs is the location of oauth2/callback ex: https://internal.yourcompany.com/oauth2/callback Choose \"Create\" Take note of the Client ID and Client Secret It's recommended to refresh sessions on a short interval (1h) with cookie-refresh setting which validates that the account is still authorized. Restrict auth to specific Google groups on your domain. (optional)​ Create a service account and download the json file if you're not using Application Default Credentials / Workload Identity / Workload Identity Federation (recommended). Make note of the Client ID for a future step. Under \"APIs & Auth\", choose APIs. Click on Admin SDK and then Enable API. Follow the steps on https://developers.google.com/admin-sdk/directory/v1/guides/delegation#delegate_domain-wide_authority_to_your_service_account and give the client id from step 2 the following oauth scopes: Using Application Default Credentials (ADC) / Workload Identity / Workload Identity Federation (recommended)​ oauth2-proxy can make use of Application Default Credentials. When deployed within GCP, this means that it can automatically use the service account attached to the resource. When deployed to GKE, ADC can be leveraged through a feature called Workload Identity. Follow Google's guide to set up Workload Identity. When deployed outside of GCP, Workload Identity Federation might be an option. https://www.googleapis.com/auth/admin.directory.group.readonlyhttps://www.googleapis.com/auth/admin.directory.user.readonly Follow the steps on https://support.google.com/a/answer/60757 to enable Admin API access. Create or choose an existing administrative email address on the Gmail domain to assign to the google-admin-email flag. This email will be impersonated by this client to make calls to the Admin SDK. See the note on the link from step 5 for the reason why. Create or choose an existing email group and set that email to the google-group flag. You can pass multiple instances of this flag with different groups and the user will be checked against all the provided groups. Lock down the permissions on the json file downloaded from step 1 so only oauth2-proxy is able to read the file and set the path to the file in the google-service-account-json flag. Restart oauth2-proxy. Note: The user is checked against the group members list on initial authentication and every time the token is refreshed ( about once an hour ).","s":"Google Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#google-auth-provider","p":285},{"i":290,"t":"Add an application: go to https://portal.azure.com, choose Azure Active Directory, select App registrations and then click on New registration. Pick a name, check the supported account type(single-tenant, multi-tenant, etc). In the Redirect URI section create a new Web platform entry for each app that you want to protect by the oauth2 proxy(e.g. https://internal.yourcompanycom/oauth2/callback). Click Register. Next we need to add group read permissions for the app registration, on the API Permissions page of the app, click on Add a permission, select Microsoft Graph, then select Application permissions, then click on Group and select Group.Read.All. Hit Add permissions and then on Grant admin consent (you might need an admin to do this).**IMPORTANT**: Even if this permission is listed with **\"Admin consent required=No\"** the consent might actually be required, due to AAD policies you won't be able to see. If you get a **\"Need admin approval\"** during login, most likely this is what you're missing! Next, if you are planning to use v2.0 Azure Auth endpoint, go to the Manifest page and set \"accessTokenAcceptedVersion\": 2 in the App registration manifest file. On the Certificates & secrets page of the app, add a new client secret and note down the value after hitting Add. Configure the proxy with: for V1 Azure Auth endpoint (Azure Active Directory Endpoints - https://login.microsoftonline.com/common/oauth2/authorize) --provider=azure --client-id= --client-secret= --azure-tenant={tenant-id} --oidc-issuer-url=https://sts.windows.net/{tenant-id}/ for V2 Azure Auth endpoint (Microsoft Identity Platform Endpoints - https://login.microsoftonline.com/common/oauth2/v2.0/authorize) --provider=azure --client-id= --client-secret= --azure-tenant={tenant-id} --oidc-issuer-url=https://login.microsoftonline.com/{tenant-id}/v2.0 Notes: When using v2.0 Azure Auth endpoint (https://login.microsoftonline.com/{tenant-id}/v2.0) as --oidc_issuer_url, in conjunction with --resource flag, be sure to append /.default at the end of the resource name. See https://docs.microsoft.com/en-us/azure/active-directory/develop/v2-permissions-and-consent#the-default-scope for more details. When using the Azure Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"Azure Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#azure-auth-provider","p":285},{"i":292,"t":"Open the ADFS administration console on your Windows Server and add a new Application Group Provide a name for the integration, select Server Application from the Standalone applications section and click Next Follow the wizard to get the client-id, client-secret and configure the application credentials Configure the proxy with --provider=adfs --client-id= --client-secret= Note: When using the ADFS Auth provider with nginx and the cookie session store you may find the cookie is too large and doesn't get passed through correctly. Increasing the proxy_buffer_size in nginx or implementing the redis session storage should resolve this.","s":"ADFS Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#adfs-auth-provider","p":285},{"i":294,"t":"Create a new FB App from https://developers.facebook.com/ Under FB Login, set your Valid OAuth redirect URIs to https://internal.yourcompany.com/oauth2/callback","s":"Facebook Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#facebook-auth-provider","p":285},{"i":296,"t":"Create a new project: https://github.com/settings/developers Under Authorization callback URL enter the correct url ie https://internal.yourcompany.com/oauth2/callback The GitHub auth provider supports two additional ways to restrict authentication to either organization and optional team level access, or to collaborators of a repository. Restricting by these options is normally accompanied with --email-domain=* NOTE: When --github-user is set, the specified users are allowed to login even if they do not belong to the specified org and team or collaborators. To restrict by organization only, include the following flag: -github-org=\"\": restrict logins to members of this organisation To restrict within an organization to specific teams, include the following flag in addition to -github-org: -github-team=\"\": restrict logins to members of any of these teams (slug), separated by a comma If you would rather restrict access to collaborators of a repository, those users must either have push access to a public repository or any access to a private repository: -github-repo=\"\": restrict logins to collaborators of this repository formatted as orgname/repo If you'd like to allow access to users with read only access to a public repository you will need to provide a token for a user that has write access to the repository. The token must be created with at least the public_repo scope: -github-token=\"\": the token to use when verifying repository collaborators To allow a user to login with their username even if they do not belong to the specified org and team or collaborators, separated by a comma -github-user=\"\": allow logins by username, separated by a comma If you are using GitHub enterprise, make sure you set the following to the appropriate url: -login-url=\"http(s):///login/oauth/authorize\"-redeem-url=\"http(s):///login/oauth/access_token\"-validate-url=\"http(s):///api/v3\"","s":"GitHub Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#github-auth-provider","p":285},{"i":298,"t":"note This is the legacy provider for Keycloak, use Keycloak OIDC Auth Provider if possible. Create new client in your Keycloak realm with Access Type 'confidental' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Make sure you set the following to the appropriate url: --provider=keycloak --client-id= --client-secret= --login-url=\"http(s):///auth/realms//protocol/openid-connect/auth\" --redeem-url=\"http(s):///auth/realms//protocol/openid-connect/token\" --profile-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --validate-url=\"http(s):///auth/realms//protocol/openid-connect/userinfo\" --keycloak-group= --keycloak-group= For group based authorization, the optional --keycloak-group (legacy) or --allowed-group (global standard) flags can be used to specify which groups to limit access to. If these are unset but a groups mapper is set up above in step (3), the provider will still populate the X-Forwarded-Groups header to your upstream server with the groups data in the Keycloak userinfo endpoint response. The group management in keycloak is using a tree. If you create a group named admin in keycloak you should define the 'keycloak-group' value to /admin.","s":"Keycloak Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#keycloak-auth-provider","p":285},{"i":300,"t":"--provider=keycloak-oidc --client-id= --client-secret= --redirect-url=https://internal.yourcompany.com/oauth2/callback --oidc-issuer-url=https:///realms/ // For Keycloak versions <17: --oidc-issuer-url=https:///auth/realms/ --email-domain= // Validate email domain for users, see option documentation --allowed-role= // Optional, required realm role --allowed-role=: // Optional, required client role --allowed-group= // Optional, requires group client scope --code-challenge-method=S256 // PKCE note Keycloak has updated its admin console and as of version 19.0.0, the new admin console is enabled by default. The legacy admin console has been announced for removal with the release of version 21.0.0. Keycloak legacy admin console Create new client in your Keycloak realm with Access Type 'confidential', Client protocol 'openid-connect' and Valid Redirect URIs 'https://internal.yourcompany.com/oauth2/callback' Take note of the Secret in the credential tab of the client Create a mapper with Mapper Type 'Group Membership' and Token Claim Name 'groups'. Create a mapper with Mapper Type 'Audience' and Included Client Audience and Included Custom Audience set to your client name. Keycloak new admin console (default as of v19.0.0) The following example shows how to create a simple OIDC client using the new Keycloak admin2 console. However, for best practices, it is recommended to consult the Keycloak documentation. The OIDC client must be configured with an audience mapper to include the client's name in the aud claim of the JWT token. The aud claim specifies the intended recipient of the token, and OAuth2 Proxy expects a match against the values of either --client-id or --oidc-extra-audience. In Keycloak, claims are added to JWT tokens through the use of mappers at either the realm level using \"client scopes\" or through \"dedicated\" client mappers. Creating the client Create a new OIDC client in your Keycloak realm by navigating to:Clients -> Create client Client Type 'OpenID Connect' Client ID , please complete the remaining fields as appropriate and click Next. Client authentication 'On' Authentication flow Standard flow 'selected' Direct access grants 'deselect' Save the configuration. Settings / Access settings: Valid redirect URIs https://internal.yourcompany.com/oauth2/callback Save the configuration. Under the Credentials tab you will now be able to locate . Configure a dedicated audience mapper for your client by navigating to Clients -> -> Client scopes. Access the dedicated mappers pane by clicking -dedicated, located under Assigned client scope.(It should have a description of \"Dedicated scope and mappers for this client\") Click Configure a new mapper and select Audience Name 'aud-mapper-' Included Client Audience select from the dropdown. OAuth2 proxy can be set up to pass both the access and ID JWT tokens to your upstream services. If you require additional audience entries, you can use the Included Custom Audience field in addition to the \"Included Client Audience\" dropdown. Note that the \"aud\" claim of a JWT token should be limited and only specify its intended recipients. Add to ID token 'On' Add to access token 'On' - #1916 Save the configuration. Any subsequent dedicated client mappers can be defined by clicking Dedicated scopes -> Add mapper -> By configuration -> Select mapper You should now be able to create a test user in Keycloak and get access to the OAuth2 Proxy instance, make sure to set an email address matching and select Email verified. Authorization OAuth2 Proxy will perform authorization by requiring a valid user, this authorization can be extended to take into account a user's membership in Keycloak groups, realm roles, and client roles using the keycloak-oidc provider options--allowed-role or --allowed-group Roles A standard Keycloak installation comes with the required mappers for realm roles and client roles through the pre-defined client scope \"roles\". This ensures that any roles assigned to a user are included in the JWT tokens when using an OIDC client that has the \"Full scope allowed\" feature activated, the feature is enabled by default. Creating a realm role Navigate to Realm roles -> Create role Role name, -> save Creating a client role Navigate to Clients -> -> Roles -> Create role Role name, -> save Assign a role to a user Users -> Username -> Role mapping -> Assign role -> filter by roles or clients and select -> Assign. Keycloak \"realm roles\" can be authorized using the --allowed-role= option, while \"client roles\" can be evaluated using --allowed-role=:. You may limit the realm roles included in the JWT tokens for any given client by navigating to: Clients -> -> Client scopes -> -dedicated -> Scope Disabling Full scope allowed activates the Assign role option, allowing you to select which roles, if assigned to a user, will be included in the user's JWT tokens. This can be useful when a user has many associated roles, and you want to reduce the size and impact of the JWT token. Groups You may also do authorization on group memberships by using the OAuth2 Proxy option --allowed-group. We will only do a brief description of creating the required client scope groups and refer you to read the Keycloak documentation. To summarize, the steps required to authorize Keycloak group membership with OAuth2 Proxy are as follows: Create a new Client Scope with the name groups in Keycloak. Include a mapper of type Group Membership. Set the \"Token Claim Name\" to groups or customize by matching it to the --oidc-groups-claim option of OAuth2 Proxy. If the \"Full group path\" option is selected, you need to include a \"/\" separator in the group names defined in the --allowed-group option of OAuth2 Proxy. Example: \"/groupname\" or \"/groupname/childgroup\". After creating the Client Scope named groups you will need to attach it to your client. Clients -> -> Client scopes -> Add client scope -> Select groups and choose Optional and you should now have a client that maps group memberships into the JWT tokens so that Oauth2 Proxy may evaluate them. Create a group by navigating to Groups -> Create group and add your test user as a member. The OAuth2 Proxy option --allowed-group=/groupname will now allow you to filter on group membership Keycloak also has the option of attaching roles to groups, please refer to the Keycloak documentation for more information. Tip To check if roles or groups are added to JWT tokens, you can preview a users token in the Keycloak console by following these steps: Clients -> -> Client scopes -> Evaluate. Select a realm user and optional scope parameters such as groups, and generate the JSON representation of an access or id token to examine its contents.","s":"Keycloak OIDC Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#keycloak-oidc-auth-provider","p":285},{"i":302,"t":"This auth provider has been tested against Gitlab version 12.X. Due to Gitlab API changes, it may not work for version prior to 12.X (see 994). Whether you are using GitLab.com or self-hosting GitLab, follow these steps to add an application. Make sure to enable at least the openid, profile and email scopes, and set the redirect url to your application url e.g. https://myapp.com/oauth2/callback. If you need projects filtering, add the extra read_api scope to your application. The following config should be set to ensure that the oauth will work properly. To get a cookie secret follow these steps --provider=\"gitlab\" --redirect-url=\"https://myapp.com/oauth2/callback\" // Should be the same as the redirect url for the application in gitlab --client-id=GITLAB_CLIENT_ID --client-secret=GITLAB_CLIENT_SECRET --cookie-secret=COOKIE_SECRET Restricting by group membership is possible with the following option: --gitlab-group=\"mygroup,myothergroup\": restrict logins to members of any of these groups (slug), separated by a comma If you are using self-hosted GitLab, make sure you set the following to the appropriate URL: --oidc-issuer-url=\"\" If your self-hosted GitLab is on a sub-directory (e.g. domain.tld/gitlab), as opposed to its own sub-domain (e.g. gitlab.domain.tld), you may need to add a redirect from domain.tld/oauth pointing at e.g. domain.tld/gitlab/oauth.","s":"GitLab Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#gitlab-auth-provider","p":285},{"i":304,"t":"For LinkedIn, the registration steps are: Create a new project: https://www.linkedin.com/secure/developer In the OAuth User Agreement section: In default scope, select r_basicprofile and r_emailaddress. In \"OAuth 2.0 Redirect URLs\", enter https://internal.yourcompany.com/oauth2/callback Fill in the remaining required fields and Save. Take note of the Consumer Key / API Key and Consumer Secret / Secret Key","s":"LinkedIn Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#linkedin-auth-provider","p":285},{"i":306,"t":"For adding an application to the Microsoft Azure AD follow these steps to add an application. Take note of your TenantId if applicable for your situation. The TenantId can be used to override the default common authorization server with a tenant specific server.","s":"Microsoft Azure AD Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#microsoft-azure-ad-provider","p":285},{"i":308,"t":"OpenID Connect is a spec for OAUTH 2.0 + identity that is implemented by many major providers and several open source projects. This provider was originally built against CoreOS Dex and we will use it as an example. The OpenID Connect Provider (OIDC) can also be used to connect to other Identity Providers such as Okta, an example can be found below. Dex​ To configure the OIDC provider for Dex, perform the following steps: Download Dex: go get github.com/dexidp/dex See the getting started guide for more details. Setup oauth2-proxy with the correct provider and using the default ports and callbacks. Add a configuration block to the staticClients section of examples/config-dev.yaml: - id: oauth2-proxyredirectURIs:- 'http://127.0.0.1:4180/oauth2/callback'name: 'oauth2-proxy'secret: proxy Launch Dex: from $GOPATH/github.com/dexidp/dex, run: bin/dex serve examples/config-dev.yaml In a second terminal, run the oauth2-proxy with the following args: -provider oidc-provider-display-name \"My OIDC Provider\"-client-id oauth2-proxy-client-secret proxy-redirect-url http://127.0.0.1:4180/oauth2/callback-oidc-issuer-url http://127.0.0.1:5556/dex-cookie-secure=false-cookie-secret=secret-email-domain kilgore.trout To serve the current working directory as a web site under the /static endpoint, add: -upstream file://$PWD/#/static/ Test the setup by visiting http://127.0.0.1:4180 or http://127.0.0.1:4180/static . See also our local testing environment for a self-contained example using Docker and etcd as storage for Dex. Okta​ To configure the OIDC provider for Okta, perform the following steps: Log in to Okta using an administrative account. It is suggested you try this in preview first, example.oktapreview.com (OPTIONAL) If you want to configure authorization scopes and claims to be passed on to multiple applications, you may wish to configure an authorization server for each application. Otherwise, the provided default will work. Navigate to Security then select API Click Add Authorization Server, if this option is not available you may require an additional license for a custom authorization server. Fill out the Name with something to describe the application you are protecting. e.g. 'Example App'. For Audience, pick the URL of the application you wish to protect: https://example.corp.com Fill out a Description Add any Access Policies you wish to configure to limit application access. The default settings will work for other options. See Okta documentation for more information on Authorization Servers Navigate to Applications then select Add Application. Select Web for the Platform setting. Select OpenID Connect and click Create Pick an Application Name such as Example App. Set the Login redirect URI to https://example.corp.com. Under General set the Allowed grant types to Authorization Code and Refresh Token. Leave the rest as default, taking note of the Client ID and Client Secret. Under Assignments select the users or groups you wish to access your application. Create a configuration file like the following: provider = \"oidc\"redirect_url = \"https://example.corp.com/oauth2/callback\"oidc_issuer_url = \"https://corp.okta.com/oauth2/abCd1234\"upstreams = [ \"https://example.corp.com\"]email_domains = [ \"corp.com\"]client_id = \"XXXXX\"client_secret = \"YYYYY\"pass_access_token = truecookie_secret = \"ZZZZZ\"skip_provider_button = true The oidc_issuer_url is based on URL from your Authorization Server's Issuer field in step 2, or simply https://corp.okta.com . The client_id and client_secret are configured in the application settings. Generate a unique cookie_secret to encrypt the cookie. Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/example.cfg Okta - localhost​ Signup for developer account: https://developer.okta.com/signup/ Create New Web Application: https://${your-okta-domain}/dev/console/apps/new Example Application Settings for localhost: Name: My Web App Base URIs: http://localhost:4180/ Login redirect URIs: http://localhost:4180/oauth2/callback Logout redirect URIs: http://localhost:4180/ Group assignments: Everyone Grant type allowed: Authorization Code and Refresh Token Make note of the Client ID and Client secret, they are needed in a future step Make note of the default Authorization Server Issuer URI from: https://${your-okta-domain}/admin/oauth2/as Example config file /etc/localhost.cfg provider = \"oidc\"redirect_url = \"http://localhost:4180/oauth2/callback\"oidc_issuer_url = \"https://${your-okta-domain}/oauth2/default\"upstreams = [ \"http://0.0.0.0:8080\"]email_domains = [ \"*\"]client_id = \"XXX\"client_secret = \"YYY\"pass_access_token = truecookie_secret = \"ZZZ\"cookie_secure = falseskip_provider_button = true# Note: use the following for testing within a container# http_address = \"0.0.0.0:4180\" Then you can start the oauth2-proxy with ./oauth2-proxy --config /etc/localhost.cfg","s":"OpenID Connect Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#openid-connect-provider","p":285},{"i":310,"t":"login.gov is an OIDC provider for the US Government. If you are a US Government agency, you can contact the login.gov team through the contact information that you can find on https://login.gov/developers/ and work with them to understand how to get login.gov accounts for integration/test and production access. A developer guide is available here: https://developers.login.gov/, though this proxy handles everything but the data you need to create to register your application in the login.gov dashboard. As a demo, we will assume that you are running your application that you want to secure locally on http://localhost:3000/, that you will be starting your proxy up on http://localhost:4180/, and that you have an agency integration account for testing. First, register your application in the dashboard. The important bits are: Identity protocol: make this Openid connect Issuer: do what they say for OpenID Connect. We will refer to this string as ${LOGINGOV_ISSUER}. Public key: This is a self-signed certificate in .pem format generated from a 2048 bit RSA private key. A quick way to do this is openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days 3650 -nodes -subj '/C=US/ST=Washington/L=DC/O=GSA/OU=18F/CN=localhost', The contents of the key.pem shall be referred to as ${OAUTH2_PROXY_JWT_KEY}. Return to App URL: Make this be http://localhost:4180/ Redirect URIs: Make this be http://localhost:4180/oauth2/callback. Attribute Bundle: Make sure that email is selected. Now start the proxy up with the following options: ./oauth2-proxy -provider login.gov \\ -client-id=${LOGINGOV_ISSUER} \\ -redirect-url=http://localhost:4180/oauth2/callback \\ -oidc-issuer-url=https://idp.int.identitysandbox.gov/ \\ -cookie-secure=false \\ -email-domain=gsa.gov \\ -upstream=http://localhost:3000/ \\ -cookie-secret=somerandomstring12341234567890AB \\ -cookie-domain=localhost \\ -skip-provider-button=true \\ -pubjwk-url=https://idp.int.identitysandbox.gov/api/openid_connect/certs \\ -profile-url=https://idp.int.identitysandbox.gov/api/openid_connect/userinfo \\ -jwt-key=\"${OAUTH2_PROXY_JWT_KEY}\" You can also set all these options with environment variables, for use in cloud/docker environments. One tricky thing that you may encounter is that some cloud environments will pass in environment variables in a docker env-file, which does not allow multiline variables like a PEM file. If you encounter this, then you can create a jwt_signing_key.pem file in the top level directory of the repo which contains the key in PEM format and then do your docker build. The docker build process will copy that file into your image which you can then access by setting the OAUTH2_PROXY_JWT_KEY_FILE=/etc/ssl/private/jwt_signing_key.pem environment variable, or by setting --jwt-key-file=/etc/ssl/private/jwt_signing_key.pem on the commandline. Once it is running, you should be able to go to http://localhost:4180/ in your browser, get authenticated by the login.gov integration server, and then get proxied on to your application running on http://localhost:3000/. In a real deployment, you would secure your application with a firewall or something so that it was only accessible from the proxy, and you would use real hostnames everywhere. Skip OIDC discovery​ Some providers do not support OIDC discovery via their issuer URL, so oauth2-proxy cannot simply grab the authorization, token and jwks URI endpoints from the provider's metadata. In this case, you can set the --skip-oidc-discovery option, and supply those required endpoints manually: -provider oidc -client-id oauth2-proxy -client-secret proxy -redirect-url http://127.0.0.1:4180/oauth2/callback -oidc-issuer-url http://127.0.0.1:5556 -skip-oidc-discovery -login-url http://127.0.0.1:5556/authorize -redeem-url http://127.0.0.1:5556/token -oidc-jwks-url http://127.0.0.1:5556/keys -cookie-secure=false -email-domain example.com","s":"login.gov Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#logingov-provider","p":285},{"i":312,"t":"The Nextcloud provider allows you to authenticate against users in your Nextcloud instance. When you are using the Nextcloud provider, you must specify the urls via configuration, environment variable, or command line argument. Depending on whether your Nextcloud instance is using pretty urls your urls may be of the form /index.php/apps/oauth2/* or /apps/oauth2/*. Refer to the OAuth2 documentation to setup the client id and client secret. Your \"Redirection URI\" will be https://internalapp.yourcompany.com/oauth2/callback. -provider nextcloud -client-id -client-secret -login-url=\"/index.php/apps/oauth2/authorize\" -redeem-url=\"/index.php/apps/oauth2/api/v1/token\" -validate-url=\"/ocs/v2.php/cloud/user?format=json\" Note: in all cases the validate-url will not have the index.php.","s":"Nextcloud Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#nextcloud-provider","p":285},{"i":314,"t":"Create a new OAuth application You can fill in the name, homepage, and description however you wish. In the \"Application callback URL\" field, enter: https://oauth-proxy/oauth2/callback, substituting oauth2-proxy with the actual hostname that oauth2-proxy is running on. The URL must match oauth2-proxy's configured redirect URL. Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=digitalocean --client-id= --client-secret= Alternatively, set the equivalent options in the config file. The redirect URL defaults to https:///oauth2/callback. If you need to change it, you can use the --redirect-url command-line option.","s":"DigitalOcean Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#digitalocean-auth-provider","p":285},{"i":316,"t":"Add a new OAuth consumer In \"Callback URL\" use https:///oauth2/callback, substituting with the actual hostname that oauth2-proxy is running on. In Permissions section select: Account -> Email Team membership -> Read Repositories -> Read Note the Client ID and Client Secret. To use the provider, pass the following options: --provider=bitbucket --client-id= --client-secret= The default configuration allows everyone with Bitbucket account to authenticate. To restrict the access to the team members use additional configuration option: --bitbucket-team=. To restrict the access to only these users who has access to one selected repository use --bitbucket-repository=.","s":"Bitbucket Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#bitbucket-auth-provider","p":285},{"i":318,"t":"Create a new application: https://< your gitea host >/user/settings/applications Under Redirect URI enter the correct URL i.e. https:///oauth2/callback Note the Client ID and Client Secret. Pass the following options to the proxy: --provider=\"github\" --redirect-url=\"https:///oauth2/callback\" --provider-display-name=\"Gitea\" --client-id=\"< client_id as generated by Gitea >\" --client-secret=\"< client_secret as generated by Gitea >\" --login-url=\"https://< your gitea host >/login/oauth/authorize\" --redeem-url=\"https://< your gitea host >/login/oauth/access_token\" --validate-url=\"https://< your gitea host >/api/v1\"","s":"Gitea Auth Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#gitea-auth-provider","p":285},{"i":320,"t":"To authorize by email domain use --email-domain=yourcompany.com. To authorize individual email addresses use --authenticated-emails-file=/path/to/file with one email per line. To authorize all email addresses use --email-domain=*.","s":"Email Authentication","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#email-authentication","p":285},{"i":322,"t":"Follow the examples in the providers package to define a new Provider instance. Add a new case to providers.New() to allow oauth2-proxy to use the new Provider.","s":"Adding a new Provider","u":"/oauth2-proxy/docs/configuration/oauth_provider","h":"#adding-a-new-provider","p":285}],"index":{"version":"2.3.9","fields":["t"],"fieldVectors":[["t/163",[0,2.868,1,4.152,2,0.545,3,6.479,4,6.479,5,2.69,6,4.675,7,4.253,8,3.35,9,2.684,10,4.513,11,4.253,12,1.268,13,4.253,14,4.253,15,4.253,16,4.253,17,4.253,18,4.996,19,4.152,20,4.513,21,6.479,22,5.73,23,5.73,24,5.73,25,5.73,26,2.574,27,3.709,28,3.709,29,4.253,30,4.253,31,3.709,32,3.709,33,3.709,34,4.253,35,1.465,36,3.709,37,1.942,38,2.69,39,2.404,40,5.73,41,4.253,42,1.205,43,2.69,44,1.911,45,2.285,46,4.253,47,4.253,48,4.253,49,4.253,50,4.253,51,1.068,52,4.253,53,3.709,54,1.911,55,3.082,56,1.697,57,1.697,58,0.996,59,0.85,60,1.634,61,2.082,62,2.082,63,0.941,64,2.179,65,1.834,66,3.624,67,3.709,68,1.518,69,1.697,70,2.404]],["t/165",[2,0.35,12,1.371,42,1.194,51,1.155,56,1.91,58,1.077,68,1.709,71,2.366,72,1.538,73,2.573,74,2.452,75,3.696,76,1.773,77,4.175,78,2.856,79,3.229,80,2.471,81,2.689,82,1.538,83,1.435,84,3.696,85,2.962,86,2.452,87,4.175,88,2.253,89,1.985,90,4.175,91,1.735,92,4.788,93,2.706,94,1.649,95,4.788,96,4.788,97,2.856,98,2.343,99,2.706,100,4.788,101,2.706,102,2.856,103,3.229,104,3.329,105,3.173,106,2.856,107,0.832,108,2.856,109,1.773,110,1.649,111,2.343,112,3.229,113,1.985,114,3.028,115,3.469,116,3.229]],["t/167",[51,1.128,59,1.208,117,1.876,118,6.047,119,4.099,120,4.763,121,3.824,122,4.382,123,2.959,124,3.824,125,6.047,126,5.273,127,4.382,128,6.047,129,3.824,130,3.249,131,4.382,132,6.047,133,6.047]],["t/169",[2,0.366,37,1.5,45,2.689,51,1.189,59,1.274,98,2.449,101,2.828,112,3.374,114,3.165,120,5.02,127,4.619,129,3.165,134,5.004,135,4.031,136,5.558,137,2.344,138,4.979,139,3.165,140,5.082,141,3.941,142,3.602,143,5.004,144,3.802,145,5.004,146,2.689,147,4.364,148,3.165,149,5.004,150,5.004,151,5.004,152,2.985,153,3.941,154,1.664,155,3.941,156,2.158,157,3.119,158,5.004,159,5.004,160,5.004,161,5.004,162,5.004,163,5.004,164,4.364,165,3.374,166,5.004,167,5.004,168,3.941,169,3.941,170,1.552]],["t/171",[2,0.469,6,4.32,35,1.738,114,3.191,120,3.974,127,3.656,136,5.587,140,4.643,141,3.974,142,3.621,146,3.783,148,3.191,157,2.469,165,5.352,170,1.565,171,7.041,172,6.408,173,6.408,174,2.266,175,3.656,176,5.046,177,5.046,178,5.046,179,5.046,180,4.4,181,3.656,182,5.046,183,3.974,184,5.046,185,5.046,186,6.408,187,2.013,188,1.738,189,2.469,190,5.046,191,5.046,192,5.046,193,5.046,194,5.046,195,3.656,196,5.046,197,5.046,198,5.046]],["t/173",[2,0.437,9,2.118,12,1.573,37,1.789,58,1.364,60,1.737,63,1.479,82,1.917,107,0.786,108,2.697,109,1.674,115,3.276,137,2.118,138,4.024,144,3.56,170,1.403,174,2.031,188,2.056,199,3.943,200,4.493,201,1.95,202,2.86,203,4.791,204,3.56,205,4.522,206,3.943,207,1.95,208,4.522,209,3.56,210,3.561,211,2.86,212,4.522,213,4.522,214,3.049,215,3.943,216,3.943,217,3.943,218,2.86,219,3.001,220,3.276,221,5.825,222,3.049,223,3.561,224,2.86,225,4.522,226,2.555,227,1.874,228,3.589,229,3.774,230,2.86,231,3.561,232,3.561,233,2.86,234,3.943,235,3.943,236,4.522]],["t/175",[2,0.544,26,2.564,37,2.073,42,0.992,58,0.992,60,2.657,63,1.531,86,2.923,117,1.771,131,4.136,188,1.966,203,5.018,210,4.495,211,3.609,219,2.564,222,3.848,226,3.226,227,2.867,228,3.716,229,3.609,237,3.609,238,2.366,239,3.609,240,2.793]],["t/177",[2,0.471,37,1.525,44,2.893,51,1.385,58,1.228,59,1.485,60,3.055,63,1.644,111,2.49,117,1.578,188,2.697,203,5.01,211,4.074,218,3.218,219,2.893,222,3.431,224,4.074,227,2.109,241,5.851,242,6.441,243,2.734,244,4.436,245,4.007,246,4.007,247,5.088]],["t/179",[2,0.395,26,1.752,35,1.343,42,1.162,44,1.752,51,1.007,58,0.678,59,0.779,60,2.379,63,1.48,64,1.997,65,1.682,66,2.466,72,2.254,75,3.221,76,1.999,82,1.252,83,1.619,84,3.221,91,1.512,97,2.326,107,1.162,109,1.444,112,2.629,131,2.826,142,2.204,154,1.297,157,1.908,170,1.21,203,4.177,211,2.466,218,2.466,227,1.617,248,1.056,249,3.9,250,3.9,251,3.071,252,3.9,253,1.997,254,3.9,255,3.9,256,3.071,257,3.9,258,3.9,259,4.488,260,3.9,261,1.444,262,3.9,263,3.9,264,2.425,265,3.9,266,3.9,267,3.9,268,3.9,269,3.4,270,3.9,271,3.9,272,3.071,273,3.9,274,1.922,275,3.9,276,3.9,277,1.092,278,3.9,279,2.629,280,3.9,281,3.071,282,3.9,283,1.21,284,3.9,285,2.204,286,3.9,287,2.466,288,3.9,289,2.629,290,3.9,291,1.908,292,3.4,293,3.071,294,3.9,295,3.4,296,3.9,297,3.9,298,3.9,299,3.9,300,3.9,301,1.997,302,3.9,303,3.071,304,3.9,305,2.204,306,3.9,307,1.752,308,2.204,309,2.629,310,2.466,311,2.204,312,2.095,313,3.071,314,2.53,315,3.9,316,2.326]],["t/182",[42,1.083,75,3.718,111,3.05,283,1.934,291,3.05,317,1.934,318,1.746,319,1.476,320,1.632,321,6.233,322,3.718,323,3.192,324,6.233,325,2.072,326,4.203]],["t/184",[0,3.4,2,0.559,6,2.385,26,1.589,42,1.113,51,1.262,58,1.328,59,0.707,63,1.3,70,1.999,71,1.737,83,1.06,88,1.823,91,1.412,107,0.876,109,2.175,110,2.691,113,2.655,115,2.563,124,2.237,137,1.657,146,2.709,147,4.397,156,1.526,180,3.084,189,1.731,199,3.084,201,1.526,203,3.962,204,2.11,209,2.11,214,2.385,221,5.123,226,1.999,230,2.237,234,4.397,235,4.397,238,1.466,261,1.31,277,1.412,301,2.583,318,0.991,319,0.838,320,0.926,325,2.13,327,3.084,328,3.084,329,3.537,330,3.084,331,2.563,332,4.628,333,3.537,334,3.537,335,2.786,336,2.11,337,5.042,338,3.537,339,3.189,340,3.4,341,5.042,342,3.189,343,1.657,344,3.537,345,3.084,346,3.537,347,2.786,348,2.786,349,3.537,350,3.537,351,3.654,352,3.537,353,2.583,354,3.4,355,2.877,356,5.042,357,4.397,358,4.397,359,5.042,360,2.709,361,3.008,362,5.042,363,3.537]],["t/186",[2,0.421,42,1.001,58,1.001,156,2.485,170,1.787,305,3.256,317,1.787,318,1.948,319,1.364,320,1.509,325,2.313,364,5.623,365,2.085,366,4.175,367,5.479,368,5.024,369,5.761,370,6.956,371,2.884,372,4.538,373,4.175,374,5.761]],["t/188",[42,1.046,91,1.685,107,1.241,152,4.541,261,2.228,283,2.215,317,1.867,318,1.685,319,1.425,320,1.576,365,2.14,375,3.345,376,2.819,377,5.133]],["t/190",[2,0.388,63,1.175,76,2.449,80,2.639,82,1.705,83,1.592,113,2.201,137,2.487,241,4.182,259,4.794,317,1.647,318,1.487,319,1.257,320,1.39,325,2.581,365,1.983,378,3.847,379,4.63,380,3.847,381,4.473,382,4.63,383,4.558,384,4.63,385,4.63,386,3.847,387,3.58,388,5.769,389,3.847,390,4.63,391,3.847,392,2.853,393,4.63,394,3.847]],["t/192",[12,1.252,35,1.948,43,3.576,63,1.252,109,2.093,116,3.813,123,3.366,124,3.576,129,3.576,317,1.754,365,2.222,395,4.453,396,4.983,397,4.93,398,4.453,399,3.196,400,5.654,401,5.654,402,5.654,403,6.878,404,5.654,405,5.654,406,5.654,407,5.654,408,5.654,409,5.417,410,4.93,411,5.654,412,5.654]],["t/194",[2,0.383,38,3.315,42,0.911,83,1.571,85,3.09,91,2.007,107,1.245,152,4.48,175,4.755,261,1.94,283,2.223,317,1.626,318,1.468,319,1.241,320,1.372,365,2.318,375,3.357,376,3.074,377,4.831,392,2.816,413,5.643,414,4.128,415,4.425,416,5.241,417,3.798,418,5.241,419,4.128,420,2.091]],["t/196",[42,1.056,107,1.056,119,4.107,283,2.228,317,1.885,318,1.702,319,1.439,320,1.591,365,2.153,371,3.169,375,3.364,376,3.364]],["t/198",[2,0.402,42,0.956,57,2.194,107,0.956,238,2.281,283,1.707,311,3.822,317,1.707,318,1.541,319,1.303,320,1.441,322,3.282,365,2.195,371,3.036,375,2.577,376,2.577,421,6.763,422,3.282,423,4.333,424,3.282,425,4.333,426,7.323,427,3.109,428,3.109,429,3.709,430,4.277,431,6.763,432,5.501,433,3.282,434,1.441,435,3.282]],["t/200",[2,0.382,63,1.155,71,2.463,74,2.673,82,2.296,107,0.907,109,1.932,111,2.554,113,3.352,137,2.445,156,2.251,201,2.251,230,3.3,272,4.11,317,1.619,318,1.462,319,1.236,320,1.367,322,3.113,325,2.493,326,3.519,343,2.445,365,1.564,378,3.781,433,3.113,436,3.3,437,4.11,438,5.219,439,3.519,440,6.545,441,3.519,442,5.219,443,5.219,444,5.219,445,5.219,446,5.219,447,5.219,448,5.219]],["t/202",[2,0.349,37,1.43,63,1.056,64,2.443,65,2.057,76,2.288,80,1.902,82,1.985,113,2.842,201,2.057,207,2.057,238,1.977,241,3.756,259,4.478,277,1.336,317,1.48,318,1.336,319,1.129,320,1.249,325,2.692,339,3.016,365,2.252,378,3.456,381,4.246,382,4.159,383,4.336,384,4.159,385,4.159,386,3.456,387,3.216,388,5.389,389,3.456,390,4.159,391,3.456,392,2.562,393,4.159,394,3.456,436,3.016,449,3.456,450,2.695,451,3.456,452,4.623,453,3.456,454,3.016,455,5.389,456,5.389]],["t/204",[2,0.43,26,2.638,42,1.223,91,1.645,283,2.183,307,2.638,312,3.155,317,1.822,318,1.645,319,1.39,320,1.538,365,2.109,371,3.123,375,3.296,376,2.751,457,3.78,458,5.12,459,5.934]],["t/206",[2,0.505,37,1.703,42,0.987,68,2.028,84,4.114,148,4.362,219,3.098,238,2.355,261,2.103,301,3.533,317,1.762,318,1.591,319,1.345,320,1.488,365,2.226,399,3.898,460,6.897,461,5.432,462,6.897,463,6.897,464,4.116,465,4.953]],["t/208",[2,0.369,42,1.113,44,2.266,58,0.877,63,1.418,68,1.801,69,2.013,72,2.379,73,2.711,83,2.111,107,0.877,156,2.176,165,3.402,283,1.565,314,2.364,317,1.565,323,3.916,325,2.463,365,1.513,420,2.808,434,2.002,449,3.656,466,3.974,467,4.052,468,4.643,469,5.102,470,1.921,471,3.974,472,4.4,473,5.046,474,4.4,475,5.046,476,3.974,477,5.046,478,3.656,479,3.402]],["t/210",[2,0.277,12,1.538,63,1.172,69,1.512,72,1.7,74,2.712,82,2.372,83,2.083,89,2.195,98,3.232,107,1.06,117,1.176,154,1.26,165,3.57,181,3.836,219,1.703,222,2.556,239,2.397,283,1.176,314,1.776,318,1.062,319,1.254,320,0.993,323,3.383,325,2.579,330,3.305,365,1.98,375,1.776,399,2.142,420,2.434,434,1.885,449,2.747,467,3.348,468,2.747,469,3.836,472,5.32,480,3.79,481,3.79,482,3.79,483,4.17,484,5.294,485,3.79,486,3.79,487,4.616,488,3.79,489,1.776,490,3.79,491,2.112,492,3.79,493,4.17,494,5.294,495,2.556,496,4.421,497,3.79,498,3.305,499,6.101,500,3.79,501,5.294,502,2.142,503,3.79,504,3.79,505,3.79,506,2.985,507,3.79,508,3.79,509,2.985,510,3.79,511,4.17,512,2.985,513,2.985,514,2.985,515,3.79,516,3.79,517,3.305,518,3.79,519,3.79,520,3.79]],["t/212",[2,0.376,6,2.449,12,0.804,38,3.249,39,2.053,42,0.631,56,2.049,72,1.166,74,1.86,75,3.556,83,1.54,85,2.571,91,1.67,107,1.268,146,1.952,154,1.982,156,1.566,170,2.011,201,2.571,209,2.167,274,1.594,285,2.053,307,2.308,317,1.127,318,1.017,319,0.86,320,0.951,322,3.866,326,4.611,336,2.167,365,2.188,371,1.506,381,4.013,434,1.345,458,5.198,464,2.632,478,2.632,479,2.449,489,1.702,521,5.138,522,3.065,523,2.632,524,3.556,525,5.138,526,3.167,527,5.138,528,3.167,529,3.632,530,3.167,531,3.632,532,5.138,533,4.695,534,3.723,535,3.632,536,5.138,537,3.167,538,5.198,539,3.632,540,2.632,541,4.48,542,2.861,543,3.632,544,3.167,545,3.632,546,3.632,547,2.861,548,3.632,549,5.138,550,2.861,551,2.632,552,3.632,553,5.138,554,3.632,555,5.138,556,3.632,557,5.138,558,3.632,559,5.138,560,3.632,561,5.138,562,3.632,563,2.861,564,5.138,565,3.065,566,2.632,567,3.632]],["t/214",[2,0.394,9,1.422,35,1.046,42,1.38,44,1.363,56,2.54,58,1.301,68,2.127,72,0.975,82,1.728,85,1.945,88,0.942,89,2.231,91,0.85,107,1.035,111,1.485,156,1.945,170,1.67,200,1.92,238,1.258,243,1.631,261,1.67,274,1.67,277,1.263,279,2.047,281,2.391,283,1.67,287,1.92,289,3.041,291,2.634,305,1.715,307,2.026,308,2.549,309,2.047,310,1.92,311,2.549,312,1.631,317,0.942,318,0.85,319,1.068,320,0.795,323,1.555,325,1.79,336,3.211,339,1.92,361,1.811,365,2.318,371,1.258,375,1.422,376,1.422,420,1.211,434,1.181,435,1.811,439,2.047,449,2.199,466,4.239,469,2.199,470,1.352,523,1.555,568,7.38,569,4.511,570,4.511,571,5.383,572,4.511,573,3.035,574,4.511,575,3.035,576,4.511,577,3.035,578,4.511,579,3.035,580,3.268,581,4.511,582,3.035,583,4.511,584,3.035,585,3.035,586,4.511,587,3.035,588,4.511,589,3.035,590,4.511,591,3.035,592,3.035,593,3.035,594,4.511,595,3.035,596,3.035,597,2.647,598,3.035,599,2.647,600,3.035,601,3.035,602,3.035,603,2.647,604,4.511,605,3.035,606,2.647,607,4.511,608,4.511,609,2.647,610,4.511,611,3.035,612,2.047,613,4.511,614,4.511,615,3.035,616,1.811,617,2.391,618,2.199]],["t/216",[2,0.428,35,2.013,42,1.219,63,1.553,142,3.303,307,3.151,308,3.303,309,3.941,310,3.696,311,3.303,312,3.77,317,1.813,319,1.384,365,1.752,395,4.603,502,3.303,580,4.235,599,5.096,619,5.844,620,5.096,621,5.096,622,4.603,623,4.235,624,4.603]],["t/218",[42,1.363,230,4.088,317,2.005,395,5.091,625,5.636,626,5.636]],["t/220",[37,1.642,64,2.805,65,2.362,82,1.759,98,2.68,123,2.68,137,2.566,201,2.362,229,3.463,238,2.27,277,1.889,317,1.699,318,1.534,319,1.297,320,1.434,325,2.604,336,3.267,339,3.463,360,2.942,365,2.191,378,3.968,379,4.775,389,3.968,437,4.313,451,3.968,452,4.928,453,3.968,454,3.463,455,5.881,456,5.881,627,5.477]],["t/222",[12,1.675,58,1.156,107,1.156,110,2.492,146,2.878,201,2.31,230,3.387,240,2.621,301,2.743,317,1.662,318,1.5,319,1.268,320,1.403,351,3.881,357,5.8,358,5.8,360,4.066,361,3.195,365,1.994,380,3.881,436,3.387,489,3.116,628,4.82,629,6.652,630,6.652,631,4.207,632,5.356,633,5.356,634,5.356]],["t/224",[9,2.261,35,1.662,37,1.867,45,3.704,54,2.168,63,1.068,99,2.727,107,0.839,110,1.662,135,3.052,156,2.686,201,2.081,202,3.052,240,2.362,301,3.731,317,1.497,318,1.352,319,1.143,320,1.264,360,4.277,361,3.715,365,1.867,380,3.497,389,4.512,420,1.925,434,1.264,635,3.801,636,4.905,637,3.715,638,6.227,639,5.43,640,4.905,641,6.227,642,4.826,643,3.801,644,4.826,645,6.227,646,5.43,647,4.905,648,4.826,649,4.208,650,4.826,651,4.208,652,4.826,653,3.801]],["t/226",[12,1.422,35,1.745,44,2.276,68,1.809,72,2.063,74,3.29,78,3.023,181,3.671,283,1.572,305,2.864,317,1.572,318,1.419,319,1.2,320,1.327,323,3.613,325,2.642,354,3.416,365,1.926,433,3.023,436,3.204,441,3.416,466,3.991,467,3.204,468,3.671,470,1.519,487,5.602,493,5.556,496,5.112,517,4.418,551,3.671,654,3.991,655,3.991,656,5.067,657,4.418,658,5.067,659,5.067,660,5.067,661,3.671,662,2.722,663,5.067,664,3.991,665,5.067,666,5.067]],["t/228",[2,0.462,51,1.1,58,0.517,59,0.595,63,0.984,71,2.53,74,3.393,75,1.775,83,1.332,88,0.923,89,1.234,91,0.834,101,1.682,104,1.599,107,0.517,109,2.825,110,2.175,113,1.234,130,2.388,137,1.394,157,1.456,164,2.595,170,1.379,181,2.156,207,1.283,218,2.811,226,1.682,238,3.193,251,2.344,253,1.524,256,2.344,317,0.923,318,0.834,319,0.705,320,0.779,322,3.52,325,0.99,326,2.007,331,2.156,332,2.344,335,2.344,342,3.993,343,3.306,351,2.156,355,1.337,360,1.599,365,1.769,383,2.811,396,3.855,398,2.344,433,1.775,436,1.882,439,2.007,441,2.997,457,2.388,470,0.892,478,2.156,493,2.344,533,2.344,597,2.595,616,1.775,667,2.976,668,2.976,669,2.976,670,2.595,671,2.976,672,2.976,673,4.445,674,5.32,675,2.976,676,4.445,677,2.976,678,4.445,679,5.32,680,2.344,681,5.901,682,4.445,683,2.976,684,2.976,685,2.976,686,2.976,687,2.976,688,2.976,689,2.976,690,2.976,691,2.976,692,2.082,693,2.976,694,2.976,695,2.976,696,2.976,697,2.976,698,2.976,699,2.976,700,2.976,701,2.976,702,2.976,703,2.976,704,4.445,705,2.976,706,2.976,707,2.976,708,2.976,709,2.976,710,5.32,711,2.976,712,2.595,713,2.976,714,2.976,715,5.32,716,2.344,717,2.595,718,2.976,719,4.445,720,2.595,721,2.976,722,2.976,723,2.007,724,2.811,725,4.445,726,2.976,727,2.651,728,4.445,729,2.595,730,2.976,731,3.501,732,2.344,733,2.595,734,2.344]],["t/230",[12,1.24,51,1.045,58,0.974,71,1.93,72,1.799,74,2.869,83,1.679,94,1.93,109,3.006,110,1.93,230,3.543,238,3.06,317,1.738,318,1.569,319,1.326,320,1.467,322,3.342,332,4.412,436,3.543,470,1.679,479,3.778,625,4.885,626,4.885,735,6.839,736,4.885,737,5.603,738,5.603,739,5.603]],["t/232",[2,0.414,26,3.089,51,1.054,59,1.13,71,1.948,72,1.816,80,3.152,81,2.546,83,1.695,88,1.754,91,1.584,98,2.767,105,3.523,106,3.373,168,4.453,189,2.767,319,1.339,331,4.097,340,3.813,355,2.54,427,3.196,434,1.481,637,3.373,740,5.997,741,3.373,742,4.103]],["t/234",[2,0.454,43,3.04,51,1.283,59,1.375,71,2.14,80,2.902,81,2.856,88,1.491,91,1.346,105,3.181,107,0.835,110,1.656,137,2.252,189,2.352,240,2.352,248,1.302,274,2.135,277,1.346,399,2.717,434,1.259,528,4.191,637,3.705,741,4.105,742,4.339,743,4.987,744,4.807,745,6.343,746,4.807,747,4.807,748,4.807,749,4.191,750,3.786,751,4.807,752,4.807,753,4.807,754,3.786,755,3.483,756,4.807,757,4.807,758,4.191,759,3.483,760,3.04,761,4.807,762,4.191,763,4.191]],["t/236",[2,0.489,12,0.806,26,2.032,35,1.773,44,1.032,51,1.046,58,0.894,59,1.25,60,0.882,61,1.124,63,0.806,69,0.916,71,1.558,72,0.738,80,2.495,81,2.631,82,1.169,84,2.172,85,3.15,91,0.643,97,1.37,101,1.298,105,3.422,106,4.663,107,1.127,108,1.37,110,0.791,116,3.05,117,1.13,127,1.665,131,1.665,135,1.453,140,1.665,153,1.809,155,2.868,157,1.124,169,1.809,188,0.791,207,0.991,227,2.326,240,1.124,248,0.622,261,2.316,264,1.032,274,0.713,277,1.267,301,1.177,314,1.706,325,1.504,327,2.003,386,1.665,396,3.278,420,0.916,434,0.602,435,2.172,439,2.455,454,2.861,470,1.356,478,1.665,498,2.003,523,3.204,540,2.639,542,1.809,612,1.549,631,1.453,635,3.563,662,1.234,664,1.809,724,2.303,731,4.702,741,2.698,742,3.561,755,3.278,760,4.672,764,3.175,765,4.524,766,4.524,767,2.297,768,2.003,769,3.641,770,3.641,771,3.175,772,2.297,773,2.297,774,2.297,775,2.003,776,2.297,777,1.665,778,3.641,779,2.297,780,2.297,781,2.003,782,2.868,783,2.003,784,2.297,785,2.297,786,1.665,787,3.641,788,3.175,789,5.658,790,2.003,791,2.003,792,2.297,793,2.297,794,2.297,795,1.453,796,2.003,797,3.641,798,2.003,799,3.175,800,2.297,801,2.639,802,1.809,803,1.549,804,2.297,805,2.297,806,2.297,807,3.641,808,1.298,809,3.641,810,2.297,811,2.003,812,2.297,813,2.003,814,2.003,815,2.297,816,2.297,817,3.175,818,4.524,819,1.453,820,2.297,821,2.297,822,2.297,823,2.297,824,2.003,825,2.297,826,3.944,827,3.641,828,2.303,829,3.175,830,2.003,831,0.991,832,3.641,833,2.297,834,2.297,835,2.003,836,3.944,837,2.003,838,3.175,839,2.003]],["t/238",[51,1.392,58,1.129,59,1.299,786,4.709,819,4.11,840,3.877]],["t/240",[2,0.474,5,3.624,9,1.993,12,1.737,35,1.465,42,0.996,45,3.888,51,1.293,58,1.205,59,1.385,61,2.082,62,2.082,66,2.69,81,2.121,82,1.366,99,2.404,107,1.126,110,1.465,135,2.69,154,1.414,156,1.834,170,1.319,232,3.35,274,1.777,277,1.605,301,2.935,353,2.179,360,4.262,372,3.35,420,2.285,434,1.5,474,3.709,636,4.513,640,4.513,643,3.35,646,5.103,647,4.513,653,4.513,745,3.709,750,3.35,841,3.082,842,5.73,843,5.73,844,3.709,845,3.709,846,3.709,847,4.253,848,2.868,849,2.868,850,3.709,851,4.253,852,3.709,853,4.253,854,3.709,855,4.253,856,4.253]],["t/242",[2,0.441,12,1.758,42,0.645,51,1.333,57,1.48,58,0.906,59,1.377,60,2.003,61,1.815,62,1.815,66,4.137,68,1.324,69,2.405,70,3.408,71,1.796,81,1.931,88,1.151,109,1.373,110,1.278,113,1.538,117,1.151,146,2.802,154,1.234,170,1.151,228,1.993,232,2.922,248,1.005,253,2.671,274,1.618,277,1.461,311,2.947,314,1.738,345,4.547,353,1.9,355,2.342,380,4.37,434,1.366,523,1.9,723,2.501,734,4.107,777,2.688,831,1.6,840,2.213,841,2.688,844,3.235,845,3.235,846,3.235,857,5.215,858,5.215,859,3.235,860,4.107,861,6.031,862,4.74,863,2.922,864,3.71,865,3.71,866,3.71,867,3.779,868,4.107,869,3.71,870,3.235,871,4.547,872,5.215,873,3.71,874,3.71,875,3.235,876,3.71,877,3.71,878,3.71,879,3.71,880,3.71,881,3.235,882,2.922,883,3.71,884,2.688,885,3.235,886,2.922,887,5.258,888,2.947,889,2.346,890,2.501,891,3.235,892,4.547,893,3.71,894,3.71,895,3.71,896,3.235]],["t/244",[2,0.469,9,2.364,31,4.4,57,2.013,71,1.738,117,1.565,130,2.711,137,2.364,138,4.994,139,4.684,140,5.367,141,5.047,142,2.852,165,3.402,174,2.266,187,2.556,188,1.738,204,3.822,224,3.191,248,1.366,415,3.402,616,3.822,662,2.711,740,4.4,764,4.4,795,3.191,897,7.407,898,3.974,899,5.046,900,4.4,901,5.046,902,5.046,903,4.4,904,4.4,905,4.4,906,4.4,907,5.046,908,5.046,909,3.974,910,6.408,911,6.408,912,5.046]],["t/246",[2,0.449,5,3.882,9,3.596,10,4.835,45,3.298,119,3.298,248,1.662,795,3.882,803,4.139,913,7.224,914,4.448,915,6.299,916,6.139,917,3.882]],["t/248",[44,2.69,59,1.197,107,1.04,109,2.217,187,2.388,204,3.572,417,4.339,759,4.339,905,5.221,906,6.207,918,7.119,919,5.988,920,5.988,921,5.988,922,5.988,923,5.988,924,5.988,925,4.716,926,5.988,927,5.988,928,4.716]],["t/250",[1,3.684,2,0.372,9,2.77,12,1.79,19,4.928,37,1.073,42,1.119,44,2.892,45,2.732,51,1.318,54,1.608,58,1.028,59,1.359,60,1.953,64,1.833,71,2.037,82,1.633,83,1.073,107,0.884,109,2.383,139,3.74,153,5.071,187,1.428,201,2.193,218,2.263,248,1.377,312,3.459,319,1.204,343,1.677,354,2.413,355,1.608,392,1.923,394,3.684,427,2.023,450,2.873,469,3.684,841,2.593,909,2.819,929,4.928,930,4.433,931,3.684,932,3.579,933,5.93,934,3.121,935,3.579,936,5.614,937,4.433,938,4.433,939,5.084,940,5.084,941,4.433,942,5.084,943,5.914,944,5.084,945,3.121,946,3.579,947,2.263,948,5.914,949,3.428,950,3.579,951,3.121,952,3.579,953,2.135,954,5.084,955,3.579,956,3.121,957,3.579,958,3.579,959,3.579,960,3.579]],["t/252",[2,0.537,44,1.81,51,1.175,53,5.494,56,2.513,58,0.7,59,1.104,60,1.547,65,1.737,68,2.249,70,2.277,78,2.403,80,2.203,81,2.044,86,2.063,88,1.25,91,1.128,94,1.388,99,2.277,102,2.403,103,2.716,104,3.816,105,2.063,106,2.403,109,1.491,112,2.716,114,2.548,126,3.513,154,1.34,195,2.919,200,3.985,209,2.403,219,1.81,220,2.919,238,1.67,239,2.548,248,1.091,283,1.25,316,2.403,340,2.716,343,3.327,366,2.919,383,3.492,399,2.277,420,1.607,429,2.716,434,1.055,468,2.919,470,2.129,489,2.587,523,2.828,628,2.919,631,2.548,661,2.919,716,4.962,808,2.277,961,3.513,962,4.029,963,4.029,964,2.716,965,4.029,966,3.173,967,3.513,968,4.029,969,5.494,970,3.513,971,3.513,972,3.513,973,4.029,974,2.919,975,5.522,976,3.513,977,5.522,978,3.513,979,2.716,980,2.716,981,4.029,982,2.919,983,2.919,984,3.173,985,4.029,986,4.029,987,3.173]],["t/254",[2,0.32,42,1.015,57,1.745,58,0.76,59,0.874,63,0.968,68,1.562,69,1.745,71,2.011,76,2.162,79,2.95,80,1.745,81,1.62,88,1.812,91,1.964,93,2.473,94,2.685,97,3.483,111,2.141,113,1.814,115,3.171,157,2.858,200,2.767,207,1.887,211,2.767,217,3.815,233,2.767,243,2.351,261,1.62,283,1.357,307,3.15,323,2.241,399,3.3,435,2.61,454,2.767,467,2.767,470,1.97,476,3.446,479,2.95,491,2.622,509,3.446,534,3.171,662,2.351,763,3.815,803,2.95,808,2.473,831,2.518,867,3.171,888,2.473,974,4.231,976,5.092,988,3.815,989,4.376,990,3.171,991,4.376,992,4.376,993,4.376,994,4.376,995,4.376,996,4.376,997,4.376,998,4.376,999,4.376,1000,3.815,1001,3.446,1002,4.376,1003,3.815,1004,2.61,1005,2.95,1006,4.376,1007,4.376]],["t/256",[2,0.419,58,0.996,68,2.047,83,2.235,99,3.241,102,3.421,103,3.867,104,3.081,154,2.306,156,3.216,248,1.553,323,2.937,343,3.249,371,2.377,467,3.626,491,2.287,983,4.155,1008,5.734,1009,5.028,1010,4.716,1011,5.734,1012,5.734]],["t/258",[37,2.109,51,1.095,58,1.223,59,1.174,60,2.256,61,3.443,62,3.443,63,1.557,64,3.859,65,3.249,97,3.503,107,1.02,314,2.751,670,5.12,1013,5.872,1014,5.872,1015,7.036]],["t/260",[2,0.345,12,1.83,18,4.11,27,4.11,35,1.624,61,2.307,80,1.88,81,1.745,98,2.307,107,0.819,174,2.117,228,2.533,237,2.981,277,1.32,319,1.116,451,4.444,453,4.94,454,2.981,470,1.413,513,3.713,1016,4.714,1017,6.133,1018,4.714,1019,5.348,1020,4.714,1021,4.714,1022,4.714,1023,4.714,1024,4.714,1025,4.714,1026,4.714,1027,4.714,1028,4.714,1029,6.818,1030,4.714,1031,5.37,1032,4.714,1033,4.714,1034,6.818,1035,4.714,1036,4.714,1037,4.714,1038,4.714,1039,4.714,1040,4.714,1041,4.714,1042,4.714,1043,4.714,1044,4.714,1045,4.714,1046,4.714,1047,4.11,1048,4.11,1049,4.714]],["t/262",[2,0.419,12,1.535,37,2.079,59,1.146,60,2.865,61,2.806,62,2.806,63,1.269,69,2.287,123,2.806,189,2.806,223,4.516,409,4.516,420,2.975,512,4.516,514,4.516,945,6.048,953,3.421,1031,4.516,1050,5.463,1051,5,1052,5,1053,5.734,1054,5.734]],["t/264",[2,0.504,5,0.364,8,0.453,9,0.715,12,1.491,20,0.453,35,0.996,37,1.624,38,1.828,39,0.611,42,0.728,45,1.034,51,0.713,54,0.259,56,1.355,57,0.609,58,0.452,59,0.216,60,0.586,62,0.941,63,0.888,66,0.683,67,0.502,68,1.365,70,0.863,71,1.926,72,1.491,74,1.332,75,3.119,76,1.897,77,0.502,78,1.148,80,1.259,81,2.309,82,0.928,83,1.349,84,2.393,85,2.002,86,1.332,87,1.988,88,1.44,89,1.308,91,1.261,93,3.525,94,1.17,97,0.343,98,0.747,99,0.611,101,0.325,102,0.343,104,0.309,105,0.985,106,3.78,107,0.926,108,2.281,109,1.485,110,0.663,111,0.529,112,0.388,113,2.317,114,0.364,116,0.728,119,0.58,121,0.364,123,1.964,129,0.364,135,0.364,142,1.288,144,0.343,146,1.225,148,0.965,152,0.911,154,1.588,156,2.477,157,0.282,168,1.202,169,1.202,170,0.897,174,0.485,175,1.106,187,0.431,189,1.544,195,1.394,200,1.442,201,0.83,202,0.364,204,0.644,207,0.248,209,0.343,216,0.942,218,0.364,219,1.526,226,0.325,227,0.448,228,0.309,231,0.453,233,0.683,238,2.125,240,1.415,243,0.58,244,0.502,245,0.851,251,0.851,253,0.782,256,2.048,259,2.462,261,1.415,264,1.024,269,1.988,272,1.202,274,1.245,277,0.639,279,1.029,281,0.851,283,1.245,285,0.611,287,0.683,289,0.728,291,0.529,292,1.677,293,0.851,295,0.502,301,1.74,303,0.453,305,1.087,307,2.434,308,0.863,310,1.217,311,1.784,312,0.309,313,0.453,314,0.901,316,1.883,318,0.161,319,0.256,320,0.151,322,3.86,325,0.359,326,3.823,331,0.417,339,0.364,340,0.388,342,0.683,343,1.592,347,1.515,353,0.295,355,2.253,360,1.696,361,1.148,364,1.394,365,2.278,367,0.851,368,0.502,371,1.736,375,1.592,376,1.218,377,1.029,381,1.634,383,1.217,386,0.417,387,0.728,391,0.417,392,1.553,394,2.623,396,1.884,398,0.453,399,1.288,413,0.851,414,0.453,415,0.388,417,0.417,419,0.453,420,1.037,422,0.644,423,0.453,424,0.644,425,0.453,427,0.863,428,0.863,429,1.537,430,0.965,433,0.343,434,1.051,435,1.551,441,0.388,452,0.388,453,0.417,454,0.364,457,0.58,459,0.851,461,0.851,464,1.394,465,0.502,470,1.722,476,0.453,489,1.696,491,1.67,495,1.029,502,0.611,506,0.851,522,0.343,523,2.569,524,1.725,526,0.502,530,0.502,533,1.515,534,1.106,537,0.942,538,0.942,563,1.202,565,0.343,566,1.394,606,1.677,609,0.502,612,0.388,616,0.644,617,0.851,618,1.394,623,1.106,631,1.828,635,0.851,636,0.453,637,0.343,640,0.453,643,0.453,646,1.515,647,1.202,649,0.502,651,0.502,653,0.453,654,0.851,655,2.676,692,0.27,717,1.677,720,0.502,723,0.728,724,0.364,727,2.498,729,0.942,731,2.676,732,1.515,733,0.502,734,0.453,741,0.644,742,0.343,755,0.417,760,0.965,762,2.268,768,0.502,775,0.502,781,0.502,782,0.851,788,1.988,789,1.988,790,0.942,791,0.502,796,0.942,798,0.502,801,0.417,808,2.544,811,0.502,817,0.502,819,0.364,826,3.651,829,2.268,831,0.466,835,0.502,836,1.988,837,0.502,838,0.942,839,0.502,840,1.551,848,1.754,850,0.502,852,0.942,854,0.502,862,0.783,863,0.453,867,1.394,868,0.851,871,0.502,882,1.202,888,3.01,889,1.645,890,2.705,900,1.988,929,1.106,930,0.502,937,1.677,947,0.364,961,0.502,964,1.029,966,2.048,967,1.331,969,0.942,970,0.502,971,0.502,984,1.202,987,0.453,990,0.417,1001,0.453,1003,1.331,1009,1.029,1010,0.965,1055,0.576,1056,1.515,1057,1.527,1058,0.576,1059,1.331,1060,0.576,1061,0.502,1062,0.502,1063,0.576,1064,0.502,1065,0.576,1066,0.576,1067,0.576,1068,0.576,1069,1.08,1070,0.576,1071,0.576,1072,0.576,1073,0.576,1074,0.576,1075,1.08,1076,0.453,1077,0.576,1078,0.576,1079,1.924,1080,0.502,1081,0.576,1082,0.576,1083,0.576,1084,1.527,1085,1.527,1086,2.891,1087,1.106,1088,0.576,1089,0.576,1090,1.796,1091,0.576,1092,0.576,1093,0.576,1094,0.576,1095,1.527,1096,0.576,1097,0.502,1098,0.576,1099,0.576,1100,0.576,1101,1.527,1102,1.527,1103,0.851,1104,0.502,1105,0.576,1106,0.576,1107,0.576,1108,0.502,1109,0.502,1110,0.453,1111,0.576,1112,0.576,1113,0.576,1114,1.08,1115,1.08,1116,1.08,1117,0.576,1118,0.576,1119,0.576,1120,0.942,1121,0.851,1122,0.576,1123,0.942,1124,0.942,1125,0.576,1126,0.502,1127,0.502,1128,1.08,1129,0.576,1130,0.783,1131,0.576,1132,0.576,1133,0.502,1134,0.502,1135,0.576,1136,0.942,1137,0.502,1138,0.502,1139,0.576,1140,0.576,1141,0.942,1142,0.576,1143,0.576,1144,0.576,1145,0.576,1146,0.576,1147,0.343,1148,0.576,1149,0.576,1150,0.502,1151,1.527,1152,0.502,1153,0.576,1154,0.576,1155,0.576,1156,0.942,1157,0.576,1158,0.453,1159,1.527,1160,0.576,1161,0.576,1162,0.502,1163,0.576,1164,0.576,1165,1.924,1166,0.576,1167,0.576,1168,0.576,1169,0.576,1170,0.576,1171,0.417,1172,0.295,1173,0.576,1174,1.297,1175,0.576,1176,0.453,1177,0.576,1178,0.576,1179,0.576,1180,0.576,1181,1.08,1182,0.728,1183,0.576,1184,0.576,1185,0.502,1186,0.502,1187,0.576,1188,0.576,1189,0.576,1190,0.576,1191,0.576,1192,0.576,1193,0.502,1194,0.576,1195,0.576,1196,0.576,1197,0.388,1198,0.576,1199,0.453,1200,0.576,1201,0.576]],["t/266",[2,0.424,26,2.936,37,2.331,42,1.213,44,1.944,51,1.219,58,1.213,59,0.865,60,1.663,63,0.958,71,2.252,72,1.39,88,1.343,107,0.752,108,3.459,109,2.879,110,1.997,111,2.119,123,2.119,124,2.738,156,2.5,189,3.417,207,1.867,226,2.447,238,2.895,243,2.326,323,3.348,325,1.439,342,3.667,351,3.137,355,2.604,420,1.727,435,2.582,450,2.447,470,1.96,551,4.201,628,4.201,662,2.326,808,2.447,953,2.582,1009,2.919,1010,2.738,1056,3.409,1080,3.775,1202,4.329,1203,4.329,1204,4.329,1205,4.329,1206,4.329,1207,5.798,1208,4.329,1209,5.798,1210,4.329,1211,4.329,1212,4.329]],["t/268",[2,0.397,12,1.485,37,1.627,58,0.943,61,3.282,62,3.282,64,3.435,65,2.893,69,2.165,81,2.009,105,2.78,123,2.656,154,1.805,189,2.656,223,4.275,227,2.78,277,1.879,383,3.433,391,4.86,409,4.275,420,2.675,491,2.165,512,4.275,514,4.275,1031,4.275,1050,5.283,1051,4.733,1052,4.733,1213,5.428,1214,5.428,1215,5.428,1216,4.275,1217,5.428,1218,5.428]],["t/270",[2,0.436,12,1.57,37,1.999,43,3.765,51,0.84,58,1.159,59,0.9,61,2.205,65,1.943,68,2.125,71,2.297,76,1.668,88,1.398,91,1.262,93,4.735,195,3.264,219,2.674,245,3.548,319,1.41,355,2.024,434,1.559,457,2.42,502,2.546,631,3.765,732,3.548,882,5.587,964,3.038,966,5.252,1120,5.191,1121,3.548,1123,3.928,1124,5.815,1126,5.191,1130,4.314,1162,3.928,1174,4.014,1185,3.928,1219,4.314,1220,4.505,1221,4.505,1222,4.505,1223,3.928,1224,4.505]],["t/272",[2,0.271,12,0.821,26,1.666,51,0.692,58,0.906,59,0.741,65,2.249,69,1.48,71,2.582,76,2.552,86,1.9,88,2.218,89,1.538,91,1.832,93,4.04,98,1.815,107,0.645,113,2.5,122,2.688,123,1.815,144,3.111,154,1.734,170,1.871,201,2.249,219,2.939,224,2.346,227,1.538,228,2.802,248,1.005,253,2.671,274,1.871,313,4.107,314,1.738,316,2.213,320,0.971,325,1.234,365,1.112,387,2.501,392,3.515,434,1.366,489,2.443,502,2.097,511,2.922,540,2.688,618,3.779,727,2.213,840,2.213,888,2.097,889,2.346,890,3.516,898,2.922,964,2.501,1137,3.235,1197,3.516,1219,2.688,1225,3.71,1226,3.235,1227,3.235,1228,4.107,1229,4.107,1230,5.429,1231,5.258,1232,5.215,1233,3.71,1234,3.71,1235,3.71,1236,3.71,1237,3.71,1238,3.235,1239,4.547,1240,4.107,1241,3.235,1242,3.235,1243,3.235,1244,3.235,1245,3.235,1246,3.235,1247,3.235,1248,3.235,1249,3.235,1250,3.235,1251,3.235,1252,2.922,1253,2.922,1254,3.235,1255,3.235,1256,3.235,1257,2.922]],["t/274",[2,0.275,12,0.831,26,1.687,51,0.7,58,0.914,65,2.268,69,1.498,71,2.741,76,1.39,89,1.557,91,1.052,93,3.717,107,0.653,109,2.247,113,2.517,122,2.721,123,2.574,154,1.249,170,1.883,219,2.954,224,2.375,227,1.557,228,2.018,238,2.18,248,1.017,253,3.109,274,1.883,320,0.983,325,1.249,343,2.464,355,2.727,387,2.532,392,3.262,434,1.377,451,2.721,489,1.759,502,2.122,540,2.721,616,2.24,618,2.721,637,2.24,692,1.759,716,2.958,724,2.375,727,2.24,840,2.24,888,2.122,889,2.375,890,3.547,898,2.958,964,2.532,982,2.721,1130,2.721,1197,4.093,1219,2.721,1226,3.275,1227,3.275,1228,4.143,1229,4.143,1230,2.958,1239,4.586,1240,4.143,1241,3.275,1242,3.275,1243,3.275,1244,3.275,1245,3.275,1246,3.275,1247,3.275,1248,3.275,1249,3.275,1250,3.275,1251,4.586,1252,2.958,1253,2.958,1254,4.586,1255,3.275,1256,3.275,1258,3.755,1259,3.755,1260,3.755,1261,3.755,1262,3.755,1263,3.755,1264,3.755,1265,5.26,1266,5.26,1267,5.26,1268,5.26,1269,3.755,1270,3.755,1271,2.958,1272,3.755]],["t/276",[26,2.203,37,2.083,58,1.207,62,2.4,65,2.713,69,1.956,80,1.956,89,2.033,93,4.514,116,3.307,123,2.4,144,2.925,157,2.4,219,3.404,227,2.033,228,2.635,240,2.4,248,1.328,316,2.925,319,1.161,320,1.284,355,2.203,434,1.648,502,2.771,786,3.553,862,3.553,863,3.862,1174,4.684,1216,3.862,1219,3.553,1228,4.955,1229,4.955,1231,6.058,1240,4.955,1252,3.862,1253,3.862,1257,3.862,1273,4.904,1274,4.904,1275,4.904,1276,6.292,1277,6.292]],["t/278",[2,0.371,12,1.821,32,1.952,36,3.11,51,0.665,58,0.62,59,0.889,60,0.86,65,1.918,66,1.415,68,0.799,69,0.893,70,3.499,71,1.747,72,1.428,73,1.203,76,1.646,79,1.509,80,0.893,81,2.772,82,1.779,83,0.671,85,2.546,88,0.694,89,0.928,91,1.421,94,1.229,99,1.265,102,2.128,103,1.509,104,1.203,105,1.146,107,1.245,110,0.771,113,2.567,117,0.694,121,1.415,154,1.687,155,1.763,157,2.482,188,0.771,189,1.745,201,0.965,214,1.509,227,1.479,231,1.763,240,1.095,246,1.763,248,0.606,253,2.598,261,1.32,264,1.005,308,1.265,314,2.376,323,1.146,328,3.877,343,2.376,353,1.146,354,1.509,366,1.622,410,1.952,435,2.128,452,1.509,457,1.916,470,0.671,491,0.893,550,1.763,565,1.335,661,1.622,712,1.952,724,2.256,736,1.952,742,2.128,760,1.415,777,1.622,808,1.265,819,1.415,824,1.952,831,1.538,848,1.509,849,1.509,862,1.622,868,1.763,875,1.952,881,3.877,884,3.675,885,4.423,886,2.809,887,6.154,888,3.919,889,2.256,890,2.405,891,3.11,892,4.423,972,1.952,982,2.584,983,1.622,984,4.363,990,1.622,1005,1.509,1048,1.952,1062,1.952,1076,1.763,1136,1.952,1141,1.952,1199,1.763,1271,2.809,1278,2.238,1279,2.238,1280,2.238,1281,2.809,1282,2.238,1283,2.238,1284,6.192,1285,2.238,1286,2.238,1287,2.238,1288,5.072,1289,2.238,1290,2.238,1291,3.567,1292,2.238,1293,1.952,1294,2.809,1295,2.238,1296,3.567,1297,2.238,1298,1.952,1299,2.238,1300,3.567,1301,3.567,1302,2.238,1303,1.763,1304,2.238,1305,2.238,1306,2.238,1307,4.447,1308,2.238,1309,4.447,1310,3.567,1311,3.567,1312,2.238,1313,2.238,1314,2.238,1315,1.952,1316,2.238,1317,2.238,1318,2.238,1319,3.567,1320,2.238,1321,3.567,1322,2.238,1323,3.567,1324,2.238,1325,1.763,1326,2.238,1327,1.763,1328,2.238,1329,2.238]],["t/280",[51,1.218,63,1.658,89,2.708,107,1.135,840,3.897]],["t/282",[12,0.877,37,1.188,51,0.739,56,3.039,58,0.689,59,0.792,68,1.415,69,1.581,71,2.152,73,2.129,76,2.492,79,2.672,83,1.188,88,1.229,99,2.24,102,3.257,103,2.672,104,2.129,110,1.881,113,2.59,214,2.672,222,2.672,314,1.857,316,3.727,343,2.558,355,1.78,360,2.934,427,4.226,434,1.43,467,2.506,470,1.637,489,1.857,491,2.178,495,4.761,496,3.956,664,3.121,727,4.545,742,4.212,982,2.872,983,2.872,1230,3.121,1330,4.761,1331,3.121,1332,4.761,1333,5.87,1334,3.963,1335,3.456,1336,4.761,1337,4.761,1338,4.761,1339,4.761,1340,4.761,1341,3.963,1342,3.456,1343,4.761,1344,3.456,1345,3.456,1346,3.456,1347,3.456,1348,3.456,1349,3.456,1350,3.456,1351,3.456,1352,3.456,1353,3.456,1354,3.456,1355,3.456,1356,3.456,1357,3.456,1358,3.963,1359,3.963]],["t/284",[2,0.384,8,4.136,12,1.552,37,0.873,42,0.76,51,0.979,56,2.718,58,0.506,59,1.313,63,0.968,68,1.04,71,1.506,76,2.655,80,1.744,85,1.886,88,0.903,94,2.415,102,1.737,104,1.565,107,0.76,108,1.737,110,1.809,113,2.593,117,0.903,214,1.964,248,0.789,261,1.619,264,1.964,274,1.357,277,1.471,316,1.737,342,1.842,343,1.364,355,1.308,360,3.136,427,4.247,434,1.529,441,1.964,450,1.646,457,1.565,470,1.574,489,2.049,491,2.328,495,4.835,496,4.23,723,1.964,727,4.278,742,4.066,759,2.11,831,1.256,840,1.737,888,2.968,896,2.539,904,2.539,938,2.539,987,2.294,1056,4.597,1121,2.294,1182,1.964,1315,2.539,1330,2.539,1331,2.294,1332,4.579,1333,5.943,1335,2.539,1336,4.579,1337,5.455,1338,5.09,1339,5.09,1340,5.09,1342,2.539,1343,4.579,1344,2.539,1345,2.539,1346,2.539,1347,2.539,1348,2.539,1349,2.539,1350,2.539,1351,2.539,1352,2.539,1353,2.539,1354,2.539,1355,2.539,1356,2.539,1357,3.813,1360,2.539,1361,2.912,1362,2.912,1363,2.294,1364,4.373,1365,4.373,1366,2.912,1367,4.373,1368,2.912,1369,2.912,1370,2.912,1371,4.373,1372,2.912]],["t/286",[2,0.375,5,3.245,12,1.136,35,1.767,42,1.384,51,0.957,54,2.305,55,3.718,56,2.047,57,2.047,58,1.125,59,1.025,94,1.767,111,2.511,117,1.592,138,3.46,142,3.66,220,3.718,243,3.479,308,3.66,309,3.46,310,3.245,311,3.66,312,2.757,325,1.706,348,4.041,353,2.628,373,3.718,381,3.66,434,1.344,491,2.047,522,3.863,523,3.317,580,3.718,620,4.474,621,4.474,622,4.041,623,3.718,624,4.041,831,2.213,1373,5.131,1374,4.474,1375,5.131]],["t/288",[0,4.898,1,3.471,2,0.395,12,1.48,35,0.865,37,1.62,39,2.206,42,0.436,51,0.893,54,1.128,56,1.911,57,2.335,59,0.957,63,0.864,72,0.806,73,1.349,76,1.445,78,2.329,80,1.001,81,0.929,82,1.254,85,1.083,86,1.286,88,0.779,91,1.342,94,0.865,107,0.939,117,1.676,119,3.145,123,1.228,130,1.349,137,1.176,139,1.587,154,1.946,156,1.083,170,1.676,183,1.977,187,2.335,188,1.65,189,1.228,204,1.497,206,2.189,207,2.066,224,2.469,227,2.24,233,1.587,238,1.041,248,1.463,261,0.929,264,2.152,274,1.923,277,0.703,289,1.693,291,1.228,305,1.419,311,3.308,348,1.977,371,2.569,375,1.176,376,1.176,422,3.224,423,1.977,424,3.492,425,3.075,427,3.054,428,3.054,429,3.23,430,3.919,434,1.254,450,1.419,457,2.097,483,1.977,489,1.176,491,1.911,502,1.419,541,2.189,547,1.977,603,2.189,657,2.189,692,1.176,723,1.693,749,2.189,758,2.189,760,3.029,783,2.189,803,1.693,813,2.189,814,2.189,819,3.029,828,1.587,830,2.189,870,2.189,884,1.819,914,1.819,925,1.977,928,3.075,931,2.829,947,4.091,978,2.189,988,2.189,1097,2.189,1108,2.189,1109,5.641,1147,1.497,1158,1.977,1172,3.313,1182,1.693,1216,1.977,1376,1.977,1377,2.51,1378,2.189,1379,2.189,1380,2.189,1381,4.79,1382,4.712,1383,2.51,1384,2.51,1385,2.51,1386,1.819,1387,2.189,1388,1.977,1389,2.51,1390,3.404,1391,1.977,1392,2.51,1393,2.51,1394,3.904,1395,1.587,1396,2.51,1397,2.189,1398,4.79,1399,1.693,1400,3.904,1401,2.51,1402,2.51,1403,2.51,1404,3.904,1405,3.904,1406,2.189,1407,2.51,1408,2.51,1409,2.51,1410,1.977,1411,2.51,1412,1.977,1413,2.51,1414,2.189,1415,1.819,1416,1.977,1417,1.693,1418,2.51,1419,2.51]],["t/290",[0,1.992,2,0.387,9,2.071,12,0.654,33,3.854,37,0.886,42,0.513,43,1.868,51,0.551,54,2.641,55,2.141,57,1.763,58,0.513,59,0.59,68,2.358,70,2.498,72,0.949,73,1.587,76,2.33,78,1.762,80,1.763,81,1.636,82,1.42,86,2.264,89,1.225,90,2.576,94,1.018,105,1.513,106,1.762,107,0.513,117,1.371,144,1.762,156,1.274,170,1.953,174,2.967,187,1.178,188,1.825,200,3.35,227,1.225,239,1.868,243,1.587,274,1.953,277,1.238,283,0.917,289,2.981,291,1.446,293,2.327,307,1.986,308,4.069,325,0.982,347,2.327,361,1.762,364,3.203,371,1.833,373,3.203,422,3.507,424,1.762,428,1.67,434,1.158,483,4.172,524,2.637,612,1.992,661,2.141,662,1.587,692,1.384,741,1.762,743,2.141,795,1.868,801,2.141,831,2.284,860,3.482,917,1.868,947,1.868,953,2.637,979,4.454,1004,1.762,1005,1.992,1110,2.327,1138,2.576,1171,3.203,1172,3.011,1182,1.992,1199,2.327,1238,2.576,1298,2.576,1325,2.327,1331,2.327,1363,2.327,1376,4.631,1387,3.854,1390,2.576,1391,2.327,1397,2.576,1399,3.964,1414,3.854,1416,5.394,1417,1.992,1420,2.954,1421,3.854,1422,2.576,1423,2.954,1424,2.954,1425,2.954,1426,2.954,1427,2.954,1428,2.327,1429,2.954,1430,2.954,1431,2.576,1432,2.954,1433,2.576,1434,2.954,1435,2.954,1436,4.421,1437,2.954,1438,2.954,1439,2.954,1440,4.421,1441,3.854,1442,3.482,1443,3.854,1444,4.421,1445,2.954,1446,2.954,1447,2.954,1448,4.421,1449,2.954,1450,2.576,1451,2.954,1452,2.954,1453,2.954,1454,2.954,1455,2.576,1456,2.576,1457,2.576,1458,2.576]],["t/292",[2,0.362,42,1.099,51,0.922,54,2.221,57,2.932,58,1.099,70,3.574,72,1.587,73,2.656,76,1.83,80,2.523,81,2.341,82,1.587,105,2.532,106,2.949,110,2.178,117,1.534,139,3.126,170,1.962,174,2.221,188,1.703,248,1.339,274,2.28,277,1.385,371,2.049,430,3.126,580,4.583,741,2.949,743,3.582,795,3.126,917,3.126,1171,3.582,1172,3.239,1325,3.893,1363,3.893,1399,3.333,1410,3.893,1441,4.31,1442,4.981,1443,4.31,1455,4.31,1456,4.31,1457,4.31,1458,4.31,1459,4.31,1460,4.944,1461,4.31,1462,4.944,1463,4.944,1464,4.944]],["t/294",[35,2.158,56,2.499,94,2.158,107,1.089,187,2.499,188,2.158,283,1.943,692,2.935,979,4.224,1147,3.737,1395,3.962,1465,7.311,1466,6.265]],["t/296",[2,0.367,35,1.208,38,2.218,42,0.871,63,1.109,76,1.298,83,1.912,85,2.751,88,1.088,91,2.024,107,0.871,117,1.088,119,1.884,137,1.643,142,4.408,148,2.218,152,4.187,154,1.166,157,2.452,175,5.085,187,1.999,188,1.208,207,1.512,219,1.575,227,2.077,243,1.884,248,1.584,261,2.675,264,1.575,283,2.241,285,1.982,291,1.716,305,1.982,375,3.461,376,2.348,377,4.982,392,2.692,413,5.025,414,2.762,415,2.365,417,2.541,419,3.947,420,2.332,470,1.753,471,2.762,491,1.399,565,2.989,786,2.541,801,3.631,828,2.218,831,1.512,980,2.365,1004,2.092,1009,3.943,1010,3.698,1087,2.541,1103,2.762,1104,3.058,1147,2.092,1176,2.762,1293,3.058,1395,2.218,1417,2.365,1467,3.507,1468,2.541,1469,2.762,1470,3.507,1471,5.847,1472,3.507,1473,4.37,1474,3.507,1475,3.507,1476,3.507,1477,3.507,1478,5.847,1479,3.507,1480,3.507,1481,3.507]],["t/298",[2,0.454,35,1.864,42,1.078,63,0.866,68,1.397,76,1.448,82,1.738,83,1.173,85,1.687,94,1.348,107,0.94,108,2.334,109,1.448,110,1.348,113,1.622,117,1.679,129,2.474,130,2.102,187,2.67,188,1.348,207,1.687,226,2.211,227,1.622,248,1.059,261,2.003,264,1.757,274,2.077,277,1.516,283,1.214,285,2.211,287,2.474,307,1.757,312,4.194,319,1.281,325,1.301,336,2.334,343,1.833,371,3.296,381,2.211,420,1.56,422,3.228,430,2.474,450,2.211,470,1.173,637,2.334,692,1.833,803,2.638,828,2.474,849,2.638,888,2.211,931,2.835,1001,3.081,1004,2.334,1172,2.004,1174,2.638,1257,3.081,1395,2.474,1442,3.081,1482,4.719,1483,3.411,1484,3.912,1485,5.41,1486,2.835,1487,3.411,1488,3.081,1489,3.411,1490,3.411,1491,6.695,1492,5.838,1493,6.695,1494,3.912,1495,3.912,1496,5.412,1497,3.912,1498,3.912,1499,3.912,1500,3.912,1501,3.912,1502,3.912,1503,3.912]],["t/300",[0,0.869,2,0.406,6,0.869,10,1.015,12,1.679,28,1.124,35,1.233,38,0.815,39,0.729,42,0.224,45,1.606,51,1.035,54,2.494,58,0.833,59,1.109,63,1.4,69,0.897,72,0.414,73,1.606,74,1.531,78,0.769,82,2.1,83,1.859,84,3.312,85,2.821,86,0.66,88,0.697,89,2.108,91,1.609,94,1.03,107,0.775,109,0.477,111,1.1,117,0.927,122,2.166,124,0.815,130,1.208,138,1.516,154,1.19,157,2.811,170,1.997,174,1.824,187,2.609,188,1.652,202,2.263,204,1.341,207,0.556,211,0.815,220,1.629,229,1.422,237,0.815,238,0.534,239,0.815,240,0.631,248,0.809,261,1.882,264,2.003,274,2.439,277,0.837,291,3.201,307,2.494,312,3.654,318,0.63,319,0.961,320,0.589,323,0.66,325,0.429,335,1.77,336,1.783,340,1.516,354,0.869,366,0.934,371,2.994,376,0.604,381,2.711,392,0.693,397,1.124,420,0.897,422,2.422,427,0.729,428,0.729,429,0.869,430,1.422,434,0.783,450,0.729,452,0.869,457,1.208,459,5.952,489,0.604,491,0.514,522,1.341,523,1.151,524,1.341,542,1.77,544,1.124,563,2.819,565,1.341,566,4.162,616,0.769,617,1.015,631,0.815,639,1.124,655,1.015,662,0.693,680,1.015,692,1.053,750,1.015,754,1.015,759,0.934,802,1.015,819,0.815,828,0.815,831,0.969,848,2.015,849,1.516,884,1.629,903,1.124,931,1.629,949,1.516,1004,0.769,1010,0.815,1061,1.124,1064,1.124,1087,0.934,1090,1.015,1110,1.015,1130,0.934,1147,1.341,1156,1.124,1171,0.934,1172,1.151,1174,1.516,1186,2.606,1197,0.869,1223,1.124,1281,1.015,1303,2.819,1379,1.96,1382,1.124,1388,3.197,1395,1.422,1399,2.413,1406,1.96,1412,3.777,1415,0.934,1417,0.869,1421,1.96,1428,1.015,1459,4.182,1482,1.96,1483,5.408,1485,5.703,1486,3.475,1487,1.124,1489,1.124,1490,5.516,1492,1.124,1504,1.289,1505,1.289,1506,2.248,1507,1.289,1508,1.289,1509,1.289,1510,2.248,1511,1.289,1512,2.248,1513,1.289,1514,1.289,1515,1.289,1516,1.289,1517,1.289,1518,1.289,1519,1.289,1520,1.289,1521,1.289,1522,1.289,1523,1.289,1524,1.289,1525,2.248,1526,5.084,1527,3.888,1528,1.289,1529,1.289,1530,1.289,1531,1.289,1532,1.124,1533,1.96,1534,1.289,1535,1.289,1536,1.289,1537,1.289,1538,1.289,1539,1.289,1540,1.289,1541,1.289,1542,1.289,1543,1.124,1544,1.289]],["t/302",[2,0.402,12,0.886,39,2.262,42,0.695,45,2.953,56,1.596,57,2.696,60,1.537,63,0.886,76,1.482,81,2.035,86,2.05,94,2.328,107,1.091,119,2.15,121,3.476,129,2.531,154,1.331,174,2.82,207,2.371,209,2.387,215,3.49,248,1.919,253,3.216,274,1.705,277,1.121,283,1.242,287,2.531,291,2.69,307,1.798,310,4.83,371,2.279,375,2.575,376,1.875,424,2.387,433,2.387,457,2.15,470,2.124,491,1.596,522,2.387,524,2.387,754,3.152,808,3.82,828,2.531,831,2.371,949,2.699,953,2.387,1004,3.279,1009,2.699,1010,2.531,1090,3.152,1103,3.152,1172,2.816,1360,3.49,1431,3.49,1486,2.9,1533,3.49,1545,5.497,1546,4.002,1547,4.002,1548,4.945,1549,4.002,1550,4.002,1551,4.002,1552,4.002,1553,4.002,1554,4.002,1555,4.002,1556,4.002,1557,4.002,1558,4.002,1559,3.49,1560,5.497,1561,4.002,1562,4.002,1563,4.002,1564,4.002,1565,4.002]],["t/304",[12,1.505,54,2.494,56,2.713,89,2.301,91,1.555,94,1.912,117,1.722,119,2.983,130,2.983,187,2.214,188,1.912,277,1.905,291,2.717,301,3.766,318,1.555,424,3.312,434,1.454,470,1.664,622,4.372,680,4.372,917,3.511,1172,2.843,1376,4.372,1386,4.023,1388,4.372,1395,3.511,1468,4.023,1566,5.551,1567,5.551,1568,5.551,1569,5.551,1570,4.841,1571,5.93]],["t/306",[2,0.436,57,3.024,110,2.445,111,3.473,117,1.848,130,3.201,174,2.676,248,1.614,264,2.676,305,3.367,308,3.367,364,4.318,367,4.693,373,4.318,434,1.56,654,4.693,1172,3.052,1572,7.098,1573,5.959]],["t/308",[2,0.402,5,1.209,9,0.896,12,1.728,19,1.385,26,0.859,37,0.941,39,1.08,42,1.195,43,1.209,44,1.794,51,1.17,54,2.294,56,0.763,57,2.694,58,1.053,59,1.254,60,1.534,63,0.884,64,0.979,68,0.682,69,2.314,72,0.614,81,1.479,82,1.485,83,0.941,85,1.354,86,2.046,89,0.793,91,0.535,93,1.08,94,1.593,107,0.954,109,0.708,110,1.759,117,1.435,119,1.027,121,2.526,124,1.985,130,1.027,135,1.209,137,0.896,139,1.209,144,1.14,146,1.027,154,0.636,170,1.435,174,2.294,187,1.593,188,0.659,189,0.936,201,1.354,202,1.209,207,1.354,210,1.506,226,1.774,228,1.027,233,1.209,237,1.985,239,1.985,240,0.936,248,1.383,261,1.479,264,2.818,274,1.703,277,1.119,279,1.289,283,0.974,291,0.936,307,2.466,318,0.535,319,0.743,320,0.501,339,1.209,342,1.209,353,1.608,371,1.301,381,1.08,424,1.14,428,1.774,434,1.338,439,1.289,470,1.386,479,1.289,491,0.763,511,1.506,522,2.383,523,2.369,524,2.383,547,1.506,565,1.14,566,1.385,612,2.117,616,1.873,628,2.275,662,1.027,692,2.393,724,1.209,727,1.873,741,1.14,743,1.385,755,1.385,760,1.985,799,1.667,802,1.506,808,1.08,831,0.824,841,1.385,848,1.289,849,1.289,860,1.506,867,1.385,886,1.506,909,1.506,914,1.385,917,1.209,925,1.506,928,1.506,929,1.385,933,1.667,936,4.787,941,1.667,947,1.985,949,2.694,953,1.14,956,1.667,974,2.275,979,2.694,980,1.289,1047,1.667,1147,2.383,1172,2.369,1182,1.289,1294,1.506,1386,2.275,1391,3.642,1399,2.117,1410,1.506,1412,2.473,1422,2.738,1428,2.473,1433,1.667,1450,1.667,1469,1.506,1527,2.738,1532,2.738,1543,1.667,1548,1.506,1570,1.667,1574,1.912,1575,1.912,1576,1.912,1577,1.912,1578,1.912,1579,6.273,1580,1.912,1581,1.912,1582,2.738,1583,1.912,1584,3.14,1585,3.14,1586,1.912,1587,1.912,1588,1.912,1589,1.912,1590,1.912,1591,1.667,1592,1.912,1593,1.667,1594,1.912,1595,1.912,1596,1.912,1597,1.912,1598,1.912,1599,1.912,1600,1.912,1601,4.032,1602,1.912,1603,3.14,1604,1.912,1605,1.912,1606,3.14,1607,1.912,1608,1.912,1609,1.912,1610,1.912,1611,1.912,1612,1.912,1613,3.14,1614,1.912,1615,1.912,1616,1.667,1617,1.912,1618,2.738,1619,1.667,1620,1.912,1621,3.14,1622,1.912,1623,1.667,1624,1.912,1625,3.995,1626,1.912,1627,2.738,1628,1.667,1629,1.912,1630,1.667,1631,1.912,1632,3.14,1633,1.912,1634,1.912,1635,1.912,1636,1.912,1637,1.912,1638,1.912,1639,1.912,1640,1.912,1641,1.912]],["t/310",[1,1.797,2,0.283,9,1.162,12,1.603,19,3.444,20,1.953,26,1.114,37,1.609,42,1.011,44,1.737,51,1.276,54,1.114,55,2.802,57,2.321,59,0.95,63,1.052,64,2.981,65,2.315,68,1.38,72,0.796,73,1.332,75,3.202,81,1.987,83,0.743,84,2.307,85,1.069,88,0.769,89,1.028,94,1.637,98,1.213,101,1.401,104,1.332,107,0.933,110,0.854,121,1.568,146,2.077,148,1.568,152,1.479,154,1.58,170,0.769,183,1.953,187,1.542,201,1.069,207,2.315,219,1.737,229,2.445,233,1.568,237,1.568,240,1.213,243,1.332,246,1.953,248,0.672,261,1.759,264,1.114,274,1.474,277,0.695,283,0.769,285,1.401,287,1.568,301,2.749,303,1.953,307,3.074,314,1.162,353,2.434,361,1.479,365,0.743,372,3.045,399,1.401,415,1.672,428,2.185,450,2.185,461,3.743,464,2.802,470,1.93,471,1.953,491,0.989,495,1.672,513,1.953,522,2.307,523,1.98,524,3.202,534,3.89,550,1.953,551,1.797,623,4.468,637,1.479,662,1.332,692,1.811,771,3.371,777,1.797,782,1.953,795,1.568,831,1.069,859,2.162,889,2.445,914,1.797,915,2.162,929,1.797,947,1.568,949,1.672,951,2.162,953,1.479,974,1.797,979,1.672,990,1.797,1000,2.162,1004,1.479,1019,2.162,1076,1.953,1087,1.797,1127,2.162,1133,2.162,1134,2.162,1152,2.162,1158,1.953,1176,1.953,1193,2.162,1197,1.672,1271,1.953,1281,1.953,1294,1.953,1303,1.953,1378,2.162,1380,3.371,1461,3.371,1473,2.162,1548,1.953,1591,2.162,1593,3.371,1616,2.162,1623,2.162,1627,4.144,1628,2.162,1642,3.867,1643,3.867,1644,3.867,1645,2.48,1646,2.48,1647,2.48,1648,2.48,1649,2.48,1650,2.48,1651,2.48,1652,3.867,1653,2.48,1654,2.48,1655,2.48,1656,2.48,1657,2.48,1658,2.48,1659,2.48,1660,2.48,1661,2.48,1662,3.867,1663,2.48,1664,2.48,1665,2.48,1666,2.48,1667,2.48,1668,2.48,1669,2.48,1670,2.48,1671,2.48,1672,2.48,1673,2.48,1674,2.48,1675,2.48,1676,2.48,1677,2.48,1678,2.48,1679,2.48,1680,2.48,1681,2.48,1682,3.867,1683,2.48,1684,2.48,1685,2.48,1686,2.48,1687,2.48,1688,2.48,1689,1.953,1690,2.48,1691,2.48,1692,2.48,1693,2.48,1694,2.48,1695,2.48]],["t/312",[2,0.459,35,2.162,39,2.76,42,1.205,58,0.849,59,0.976,61,2.39,62,2.39,64,2.502,65,2.106,83,1.464,88,1.515,91,1.368,94,1.682,101,2.76,114,3.089,117,1.515,170,1.947,202,3.089,229,3.089,274,2.27,277,1.758,283,1.515,285,2.76,314,2.288,420,1.948,422,3.744,433,2.914,470,2.194,506,3.847,624,6.402,692,2.288,1050,3.847,1150,4.259,1415,4.547,1559,6.046,1582,4.259,1696,4.884,1697,4.884,1698,4.884,1699,4.884,1700,4.884,1701,4.884,1702,4.884]],["t/314",[2,0.46,37,1.47,42,0.852,51,1.173,56,1.956,57,2.51,58,0.852,59,1.388,60,1.884,61,2.4,62,2.4,63,1.538,72,1.575,74,2.512,79,3.307,82,1.575,94,2.393,107,0.852,117,1.521,170,1.952,187,1.956,188,1.689,209,2.925,248,1.328,253,2.512,274,2.274,277,1.762,318,1.374,320,1.284,353,2.512,434,1.284,470,2.272,509,3.862,831,2.115,980,3.307,1005,3.307,1327,3.862,1386,3.553,1468,3.553,1488,3.862,1601,4.276,1689,3.862,1703,4.904,1704,4.904,1705,4.904,1706,4.904,1707,4.276,1708,4.904,1709,4.904,1710,4.904]],["t/316",[2,0.53,12,1.515,42,0.826,51,1.149,54,2.769,56,1.895,58,1.071,59,1.232,63,1.364,72,1.526,82,1.98,83,1.424,88,1.474,91,1.331,98,2.325,117,1.474,152,3.677,154,1.58,170,1.912,174,2.134,188,1.636,248,1.287,261,2.533,274,2.247,277,1.727,309,4.614,353,2.433,375,2.888,376,2.226,377,4.157,428,3.484,434,1.244,470,1.424,565,2.834,917,3.004,980,3.203,1005,3.203,1327,3.742,1416,3.742,1417,4.157,1486,3.442,1488,3.742,1571,4.142,1630,4.142,1689,3.742,1707,4.142,1711,4.751,1712,4.751,1713,4.751,1714,4.751,1715,4.751]],["t/318",[12,1.426,35,1.753,42,0.884,51,0.949,57,2.029,63,1.126,72,1.634,94,2.219,97,3.035,117,1.578,170,1.998,187,2.029,188,1.753,237,4.074,248,1.378,253,3.805,274,2.305,277,1.804,279,3.431,283,1.578,285,2.875,355,2.285,470,1.525,692,2.384,1147,3.035,1374,6.827,1468,3.687,1469,4.007,1618,4.436,1619,4.436,1716,5.088,1717,5.088,1718,6.441,1719,5.088,1720,5.088,1721,5.088,1722,7.068,1723,5.088,1724,5.088,1725,5.088]],["t/320",[2,0.555,62,2.916,88,1.848,98,2.916,154,2.733,264,3.405,437,4.693,489,3.325,491,2.831,1059,5.196,1726,5.959,1727,5.959]],["t/322",[2,0.449,42,1.334,51,1.145,59,1.227,69,2.449,83,1.84,101,3.469,174,2.757,188,2.644,248,1.662,336,3.662,934,5.353,1415,4.448,1728,6.139]]],"invertedIndex":[["",{"_index":12,"t":{"163":{"position":[[119,1],[656,1]]},"165":{"position":[[119,1],[559,4]]},"173":{"position":[[752,3],[789,3],[827,3],[831,3]]},"192":{"position":[[234,1]]},"210":{"position":[[618,3],[972,1],[974,1],[987,1],[1038,1]]},"212":{"position":[[693,1]]},"222":{"position":[[202,1],[204,1],[331,1],[333,1]]},"226":{"position":[[649,1],[655,2]]},"230":{"position":[[259,3]]},"236":{"position":[[2505,2],[2549,2]]},"240":{"position":[[227,1],[262,1],[298,1],[334,1],[369,1],[391,1],[414,1],[431,1],[449,1]]},"242":{"position":[[114,3],[750,1],[951,1],[953,1],[1165,2],[1264,1],[1299,1],[1335,1],[1357,1],[1380,1],[1397,1],[1420,1],[1438,1]]},"250":{"position":[[115,1],[155,1],[157,1],[291,1],[293,1],[305,2],[377,2],[465,1],[467,2],[470,1],[609,1],[611,1],[623,2],[695,2],[797,1],[799,1],[801,2]]},"260":{"position":[[239,1],[248,1],[264,1],[272,4],[277,1],[312,1],[320,4],[325,1],[330,1],[570,1],[697,1],[706,1],[728,1],[730,1]]},"262":{"position":[[83,1],[85,1]]},"264":{"position":[[71,2],[93,1],[1050,1],[1583,1],[1706,3],[2057,4],[2062,2],[2418,1],[2420,1],[2493,1],[2574,1],[2662,1],[3124,2],[3431,1],[3433,1],[3511,1],[3513,1],[3950,1],[4089,1],[4200,1],[4990,1],[5533,2],[7096,1],[7163,4],[8215,2],[8284,1],[8730,2],[8923,2],[9540,1],[10287,1],[12600,1],[12728,1],[12877,1],[12941,1],[13092,1],[13123,1],[14073,1],[14502,1],[14790,1],[14890,1],[15128,1],[15210,1],[15217,2],[15299,1],[15952,1],[15959,2],[16312,2]]},"268":{"position":[[147,1],[149,1]]},"270":{"position":[[215,1],[241,1],[278,1],[343,1]]},"272":{"position":[[927,1]]},"274":{"position":[[782,1]]},"278":{"position":[[242,1],[272,4],[317,1],[513,1],[557,1],[629,1],[640,1],[655,1],[796,1],[879,3],[912,1],[923,1],[925,1],[969,1],[988,1],[1050,1],[1282,1],[1468,1],[1644,1],[1737,1],[1803,1],[1901,1],[2080,1],[2161,1],[2266,2],[2269,3],[2273,5],[2279,1],[2396,1],[2398,1],[2494,1],[2582,1],[2612,1],[2656,4],[2665,2],[3338,1],[3419,1],[3448,2],[3451,2],[3484,1],[3496,2],[3523,2],[3556,5],[3566,1]]},"282":{"position":[[589,2]]},"284":{"position":[[154,1],[349,1],[488,2],[570,1],[757,2],[858,1],[1069,2],[1282,2]]},"286":{"position":[[209,1]]},"288":{"position":[[256,1],[1182,1],[1202,1],[1306,1],[1621,1],[1641,1],[3089,1],[3110,2]]},"290":{"position":[[1195,1]]},"300":{"position":[[221,2],[351,2],[445,2],[524,2],[588,2],[658,2],[2130,1],[2410,1],[2683,1],[2705,1],[3577,1],[3591,1],[3611,1],[4487,1],[4531,1],[4582,1],[4604,1],[4613,1],[4658,1],[4696,1],[4708,1],[4724,1],[4739,1],[4780,1],[5085,1],[5107,1],[5124,1],[5156,1],[6079,3],[6314,1],[6336,1],[6353,1],[6373,1],[6570,1],[6991,1],[7013,1],[7030,1]]},"302":{"position":[[674,2]]},"304":{"position":[[366,1],[396,1]]},"308":{"position":[[39,1],[1414,1],[3059,1],[3080,1],[3140,1],[3191,1],[3193,1],[3236,1],[3238,1],[3261,1],[3284,1],[3311,1],[3331,1],[3361,1],[3493,1],[4386,1],[4407,1],[4464,1],[4520,1],[4522,1],[4560,1],[4562,1],[4578,1],[4599,1],[4624,1],[4644,1],[4665,1],[4693,1],[4770,1]]},"310":{"position":[[1584,1],[1616,1],[1670,1],[1726,1],[1749,1],[1773,1],[1808,1],[1858,1],[1885,1],[1914,1],[1989,1],[2068,1]]},"316":{"position":[[213,1],[238,1],[259,1]]},"318":{"position":[[400,2],[458,2]]}}}],["0",{"_index":788,"t":{"236":{"position":[[1110,1],[1700,4]]},"264":{"position":[[1304,2],[1776,1],[5793,1],[5806,1],[11048,1]]}}}],["0.0.0.0:4180",{"_index":1641,"t":{"308":{"position":[[4772,14]]}}}],["0.001",{"_index":1269,"t":{"274":{"position":[[916,5]]}}}],["0.2.0",{"_index":935,"t":{"250":{"position":[[128,8]]}}}],["00010203",{"_index":1245,"t":{"272":{"position":[[1121,8]]},"274":{"position":[[984,8]]}}}],["0400",{"_index":1229,"t":{"272":{"position":[[256,5],[1301,4]]},"274":{"position":[[137,5],[1323,4]]},"276":{"position":[[267,5],[593,4]]}}}],["0405",{"_index":1246,"t":{"272":{"position":[[1130,4]]},"274":{"position":[[993,4]]}}}],["0a0b0c0d0e0f",{"_index":1249,"t":{"272":{"position":[[1145,12]]},"274":{"position":[[1008,12]]}}}],["1",{"_index":723,"t":{"228":{"position":[[2225,1]]},"242":{"position":[[1116,2]]},"264":{"position":[[1821,3],[15804,4]]},"284":{"position":[[423,2]]},"288":{"position":[[2828,1]]}}}],["1.19",{"_index":913,"t":{"246":{"position":[[41,5],[126,4]]}}}],["1.3",{"_index":644,"t":{"224":{"position":[[474,3]]}}}],["1.5h",{"_index":406,"t":{"192":{"position":[[236,5]]}}}],["100",{"_index":1132,"t":{"264":{"position":[[5889,3]]}}}],["12",{"_index":1272,"t":{"274":{"position":[[1200,2]]}}}],["12.x",{"_index":1545,"t":{"302":{"position":[[58,5],[128,4]]}}}],["123456.apps.googleusercontent.com",{"_index":1060,"t":{"264":{"position":[[724,35]]}}}],["127.0.0.1:4180",{"_index":863,"t":{"242":{"position":[[150,14]]},"264":{"position":[[5212,16]]},"276":{"position":[[732,14]]}}}],["128",{"_index":770,"t":{"236":{"position":[[383,3],[434,3]]}}}],["15",{"_index":838,"t":{"236":{"position":[[3491,2],[3522,2]]},"264":{"position":[[10926,2],[10957,2]]}}}],["15m",{"_index":1082,"t":{"264":{"position":[[2261,3]]}}}],["168h0m0",{"_index":791,"t":{"236":{"position":[[1175,8]]},"264":{"position":[[1385,8]]}}}],["17",{"_index":1508,"t":{"300":{"position":[[246,4]]}}}],["19.0.0",{"_index":1515,"t":{"300":{"position":[[728,7]]}}}],["19/mar/2015:17:20:19",{"_index":1228,"t":{"272":{"position":[[233,21],[1279,20]]},"274":{"position":[[114,21],[1301,20]]},"276":{"position":[[244,21],[571,20]]}}}],["1916",{"_index":1531,"t":{"300":{"position":[[3462,5]]}}}],["192",{"_index":1044,"t":{"260":{"position":[[644,3]]}}}],["1h",{"_index":1396,"t":{"288":{"position":[[923,4]]}}}],["1m",{"_index":809,"t":{"236":{"position":[[2097,4],[2532,2]]}}}],["1s",{"_index":1099,"t":{"264":{"position":[[3239,4]]}}}],["2",{"_index":1182,"t":{"264":{"position":[[15275,3],[15880,4]]},"284":{"position":[[717,2]]},"288":{"position":[[1547,1]]},"290":{"position":[[1134,1]]},"308":{"position":[[3458,2]]}}}],["2.0",{"_index":1570,"t":{"304":{"position":[[213,3]]},"308":{"position":[[35,3]]}}}],["20",{"_index":1106,"t":{"264":{"position":[[4403,2]]}}}],["200",{"_index":716,"t":{"228":{"position":[[1941,3]]},"252":{"position":[[223,3],[336,3],[417,3]]},"274":{"position":[[1249,3]]}}}],["202",{"_index":983,"t":{"252":{"position":[[1098,3]]},"256":{"position":[[22,3]]},"278":{"position":[[131,3]]},"282":{"position":[[162,3]]}}}],["2048",{"_index":1654,"t":{"310":{"position":[[1052,4]]}}}],["21.0.0",{"_index":1517,"t":{"300":{"position":[[865,7]]}}}],["24",{"_index":1042,"t":{"260":{"position":[[630,2]]}}}],["2>&1",{"_index":48,"t":{"163":{"position":[[651,4]]}}}],["2>/dev/nul",{"_index":1028,"t":{"260":{"position":[[227,11]]}}}],["2f",{"_index":738,"t":{"230":{"position":[[212,7]]}}}],["2h45m",{"_index":407,"t":{"192":{"position":[[245,8]]}}}],["3",{"_index":1442,"t":{"290":{"position":[[1492,2],[1800,2]]},"292":{"position":[[385,2],[421,2]]},"298":{"position":[[1247,4]]}}}],["3/4",{"_index":1188,"t":{"264":{"position":[[15577,3]]}}}],["30",{"_index":734,"t":{"228":{"position":[[2598,2]]},"242":{"position":[[1138,3],[1161,3]]},"264":{"position":[[14763,3]]}}}],["300m",{"_index":405,"t":{"192":{"position":[[225,8]]}}}],["315360000",{"_index":1348,"t":{"282":{"position":[[965,9]]},"284":{"position":[[1723,9]]}}}],["32",{"_index":1034,"t":{"260":{"position":[[309,2],[578,2],[708,2]]}}}],["3650",{"_index":1664,"t":{"310":{"position":[[1175,4]]}}}],["401",{"_index":102,"t":{"165":{"position":[[403,3]]},"252":{"position":[[1125,3]]},"256":{"position":[[49,3]]},"264":{"position":[[112,3]]},"278":{"position":[[158,3],[965,3]]},"282":{"position":[[189,3],[1254,4]]},"284":{"position":[[898,3]]}}}],["403",{"_index":1358,"t":{"282":{"position":[[1259,4]]}}}],["4180",{"_index":869,"t":{"242":{"position":[[465,5]]}}}],["443",{"_index":868,"t":{"242":{"position":[[395,3],[759,3]]},"264":{"position":[[5378,6],[16159,3]]},"278":{"position":[[251,3]]}}}],["4607",{"_index":1247,"t":{"272":{"position":[[1135,4]]},"274":{"position":[[998,4]]}}}],["4kb",{"_index":1291,"t":{"278":{"position":[[1733,3],[1938,4]]}}}],["5",{"_index":1414,"t":{"288":{"position":[[2527,1]]},"290":{"position":[[1528,2],[1836,2]]}}}],["59",{"_index":810,"t":{"236":{"position":[[2138,6]]}}}],["7",{"_index":1129,"t":{"264":{"position":[[5722,1]]}}}],["74.125.224.72",{"_index":1241,"t":{"272":{"position":[[840,13]]},"274":{"position":[[695,13]]}}}],["80",{"_index":1198,"t":{"264":{"position":[[16145,3]]}}}],["8809",{"_index":1248,"t":{"272":{"position":[[1140,4]]},"274":{"position":[[1003,4]]}}}],["994",{"_index":1546,"t":{"302":{"position":[[138,5]]}}}],["_",{"_index":1031,"t":{"260":{"position":[[279,3],[327,2],[732,3]]},"262":{"position":[[104,4]]},"268":{"position":[[168,4]]}}}],["__host",{"_index":1071,"t":{"264":{"position":[[1562,7]]}}}],["__secur",{"_index":1072,"t":{"264":{"position":[[1574,8]]}}}],["_oauth2_proxi",{"_index":768,"t":{"236":{"position":[[338,14]]},"264":{"position":[[1612,15]]}}}],["_oauth2_proxy_1",{"_index":1329,"t":{"278":{"position":[[3951,18]]}}}],["aad",{"_index":1432,"t":{"290":{"position":[[880,3]]}}}],["abov",{"_index":1257,"t":{"272":{"position":[[1542,5]]},"276":{"position":[[45,5]]},"298":{"position":[[1233,5]]}}}],["absent",{"_index":1107,"t":{"264":{"position":[[4409,6]]}}}],["accept",{"_index":99,"t":{"165":{"position":[[363,7]]},"224":{"position":[[139,11]]},"240":{"position":[[566,10]]},"252":{"position":[[1102,8]]},"256":{"position":[[26,8]]},"264":{"position":[[11440,8],[14435,11]]},"278":{"position":[[135,8]]},"282":{"position":[[166,8]]}}}],["acceptable.e.g",{"_index":642,"t":{"224":{"position":[[420,15]]}}}],["access",{"_index":261,"t":{"179":{"position":[[349,6]]},"184":{"position":[[101,6]]},"188":{"position":[[171,6]]},"194":{"position":[[346,6]]},"206":{"position":[[259,6]]},"214":{"position":[[2139,6],[2286,6]]},"236":{"position":[[1477,6],[1670,6],[1709,6],[1871,6],[2066,6],[2445,6],[2508,6]]},"254":{"position":[[214,9]]},"264":{"position":[[3903,6],[4328,6],[4375,6],[7175,6],[7245,6],[7329,6],[8131,6],[9127,6],[11997,6],[12026,6],[15034,6]]},"278":{"position":[[1306,6],[1447,6]]},"284":{"position":[[2016,6],[2192,6]]},"288":{"position":[[2285,7]]},"296":{"position":[[296,7],[924,6],[999,6],[1036,6],[1186,6],[1217,6],[1306,6]]},"298":{"position":[[138,6],[1173,6]]},"300":{"position":[[949,6],[2352,6],[2412,6],[2722,6],[3114,6],[3442,6],[3692,6],[7151,6]]},"308":{"position":[[2344,6],[2403,7],[2977,6]]},"310":{"position":[[305,7],[2650,6],[3170,10]]},"316":{"position":[[528,6],[638,6],[673,6]]}}}],["access_by_lua_block",{"_index":1320,"t":{"278":{"position":[[3399,19]]}}}],["access_token",{"_index":1140,"t":{"264":{"position":[[7204,12]]}}}],["accesstokenacceptedvers",{"_index":1437,"t":{"290":{"position":[[1104,29]]}}}],["accompani",{"_index":1472,"t":{"296":{"position":[[382,11]]}}}],["account",{"_index":428,"t":{"198":{"position":[[271,7]]},"264":{"position":[[4608,7],[4652,7],[4782,7]]},"288":{"position":[[981,7],[1095,7],[1828,7],[2927,7]]},"290":{"position":[[177,7]]},"300":{"position":[[3946,7]]},"308":{"position":[[1641,8],[3747,8]]},"310":{"position":[[260,8],[737,7]]},"316":{"position":[[204,7],[487,7]]}}}],["acr",{"_index":295,"t":{"179":{"position":[[1037,3]]},"264":{"position":[[34,3]]}}}],["activ",{"_index":1421,"t":{"290":{"position":[[65,6],[1349,6]]},"300":{"position":[[4394,10],[5193,9]]}}}],["actual",{"_index":1005,"t":{"254":{"position":[[1057,6]]},"278":{"position":[[3721,6]]},"290":{"position":[[851,8]]},"314":{"position":[[221,6]]},"316":{"position":[[124,6]]}}}],["ad",{"_index":111,"t":{"165":{"position":[[637,5]]},"177":{"position":[[7,6]]},"182":{"position":[[66,6]]},"200":{"position":[[79,5]]},"214":{"position":[[2230,2]]},"254":{"position":[[939,5]]},"264":{"position":[[11327,2],[12042,5]]},"266":{"position":[[750,6]]},"286":{"position":[[294,2]]},"300":{"position":[[1902,5],[6881,5]]},"306":{"position":[[4,6],[49,2]]}}}],["adc",{"_index":1404,"t":{"288":{"position":[[1615,5],[1884,3]]}}}],["add",{"_index":174,"t":{"171":{"position":[[148,3]]},"173":{"position":[[432,3]]},"244":{"position":[[226,3]]},"260":{"position":[[332,3]]},"264":{"position":[[7305,4],[16237,3]]},"290":{"position":[[0,3],[430,3],[532,3],[662,3],[1222,3],[1284,4]]},"292":{"position":[[64,3]]},"300":{"position":[[3414,3],[3435,3],[3579,3],[6355,3],[6589,3]]},"302":{"position":[[223,3],[431,3],[1312,3]]},"306":{"position":[[74,3]]},"308":{"position":[[605,3],[1296,4],[1989,3],[2336,3],[2567,3]]},"316":{"position":[[0,3]]},"322":{"position":[[80,3]]}}}],["add_head",{"_index":881,"t":{"242":{"position":[[888,10]]},"278":{"position":[[1608,10],[2496,10],[2539,10]]}}}],["addedto",{"_index":337,"t":{"184":{"position":[[667,7],[902,7]]}}}],["addit",{"_index":565,"t":{"212":{"position":[[1553,10],[1614,8]]},"264":{"position":[[7103,10]]},"278":{"position":[[1968,10]]},"296":{"position":[[206,10],[775,8]]},"300":{"position":[[3181,10],[3260,8]]},"308":{"position":[[2066,10]]},"316":{"position":[[559,10]]}}}],["addition",{"_index":781,"t":{"236":{"position":[[851,12]]},"264":{"position":[[4847,12]]}}}],["address",{"_index":489,"t":{"210":{"position":[[496,9]]},"212":{"position":[[230,7]]},"222":{"position":[[146,7],[268,7]]},"252":{"position":[[568,7],[599,8]]},"264":{"position":[[5056,7],[5180,8],[5237,7],[5346,8],[6354,7],[7669,7],[8856,7],[8875,7],[15588,8],[15681,7]]},"272":{"position":[[81,7],[875,8]]},"274":{"position":[[730,8]]},"282":{"position":[[1150,8]]},"284":{"position":[[1917,8],[2082,8]]},"288":{"position":[[2343,7]]},"300":{"position":[[3755,7]]},"320":{"position":[[95,9],[199,9]]}}}],["address=\"0.0.0.0:4180",{"_index":865,"t":{"242":{"position":[[312,22]]}}}],["address=\"http://:4180",{"_index":866,"t":{"242":{"position":[[345,23]]}}}],["adf",{"_index":580,"t":{"214":{"position":[[739,4],[2237,4]]},"216":{"position":[[128,5]]},"286":{"position":[[232,4]]},"292":{"position":[[9,4],[445,4]]}}}],["adfsconfig",{"_index":578,"t":{"214":{"position":[[676,10],[699,10]]}}}],["adfsopt",{"_index":579,"t":{"214":{"position":[[687,11]]}}}],["admin",{"_index":422,"t":{"198":{"position":[[164,5]]},"264":{"position":[[4425,5],[4455,5]]},"288":{"position":[[1337,5],[2275,5],[2395,5],[2481,5]]},"290":{"position":[[696,5],[729,5],[801,8],[940,5]]},"298":{"position":[[1482,5],[1548,7]]},"300":{"position":[[696,5],[744,5],[792,5],[889,5],[1368,5]]},"312":{"position":[[574,6],[612,6]]}}}],["admin2",{"_index":1521,"t":{"300":{"position":[[1492,6]]}}}],["admin@example.com",{"_index":958,"t":{"250":{"position":[[1359,17]]}}}],["adminemail",{"_index":421,"t":{"198":{"position":[[121,10],[139,10]]}}}],["administr",{"_index":1410,"t":{"288":{"position":[[2322,14]]},"292":{"position":[[14,14]]},"308":{"position":[[1626,14]]}}}],["advis",{"_index":815,"t":{"236":{"position":[[2377,7]]}}}],["advisori",{"_index":171,"t":{"171":{"position":[[23,10],[182,8],[411,9]]}}}],["ae",{"_index":1043,"t":{"260":{"position":[[640,3]]}}}],["affect",{"_index":167,"t":{"169":{"position":[[688,8]]}}}],["afterward",{"_index":991,"t":{"254":{"position":[[334,10]]}}}],["ag",{"_index":1126,"t":{"264":{"position":[[5667,3]]},"270":{"position":[[237,3],[256,5]]}}}],["again",{"_index":989,"t":{"254":{"position":[[240,6]]}}}],["against",{"_index":39,"t":{"163":{"position":[[528,7]]},"212":{"position":[[1433,7]]},"264":{"position":[[455,7],[4873,7]]},"288":{"position":[[2731,7],[2994,7]]},"300":{"position":[[1811,7]]},"302":{"position":[[35,7]]},"308":{"position":[[163,7]]},"312":{"position":[[50,7]]}}}],["age=2592000",{"_index":883,"t":{"242":{"position":[[929,12]]}}}],["agenc",{"_index":1643,"t":{"310":{"position":[[80,7],[718,6]]}}}],["agent",{"_index":964,"t":{"252":{"position":[[263,6]]},"264":{"position":[[8663,5],[8683,5],[8751,6]]},"270":{"position":[[753,6]]},"272":{"position":[[1372,5]]},"274":{"position":[[1444,5]]}}}],["agre",{"_index":184,"t":{"171":{"position":[[441,6]]}}}],["agreement",{"_index":1567,"t":{"304":{"position":[[124,9]]}}}],["ajax",{"_index":96,"t":{"165":{"position":[[335,4]]}}}],["algorithm:secretkey",{"_index":1161,"t":{"264":{"position":[[12514,21]]}}}],["alia",{"_index":395,"t":{"192":{"position":[[8,7]]},"216":{"position":[[8,7]]},"218":{"position":[[12,7]]}}}],["allow",{"_index":83,"t":{"165":{"position":[[143,8]]},"179":{"position":[[1087,7],[1116,7]]},"184":{"position":[[85,6]]},"190":{"position":[[38,6]]},"194":{"position":[[392,6]]},"208":{"position":[[295,7],[459,7],[609,7]]},"210":{"position":[[599,6],[724,7],[1291,5],[1327,5],[1477,5]]},"212":{"position":[[868,6],[1389,6]]},"228":{"position":[[788,6],[1613,5]]},"230":{"position":[[188,8]]},"232":{"position":[[9,5]]},"250":{"position":[[1033,6]]},"256":{"position":[[175,7],[237,7],[299,7]]},"264":{"position":[[3960,5],[6303,5],[6445,5],[7134,7],[11453,6],[14769,7],[14870,7],[15135,7],[15223,5],[15336,5],[15967,5],[16069,8],[16097,8],[16209,5],[16292,5]]},"278":{"position":[[33,6]]},"282":{"position":[[38,6]]},"296":{"position":[[473,7],[1180,5],[1473,5],[1628,5]]},"298":{"position":[[1090,7]]},"300":{"position":[[414,7],[480,7],[560,7],[4066,7],[4084,7],[4377,8],[4843,7],[4928,7],[5185,7],[5227,8],[5541,7],[6129,7],[6647,7],[6681,5]]},"308":{"position":[[2784,7],[4106,8]]},"310":{"position":[[2350,5]]},"312":{"position":[[23,6]]},"316":{"position":[[456,6]]},"322":{"position":[[117,5]]}}}],["allowed.e.g",{"_index":648,"t":{"224":{"position":[[553,13]]}}}],["allowed_email",{"_index":1012,"t":{"256":{"position":[[259,15]]}}}],["allowed_email_domain",{"_index":1011,"t":{"256":{"position":[[190,22]]}}}],["allowed_group",{"_index":1008,"t":{"256":{"position":[[135,15]]}}}],["allowedgroup",{"_index":614,"t":{"214":{"position":[[2371,13],[2394,13]]}}}],["allowedto",{"_index":567,"t":{"212":{"position":[[1583,9]]}}}],["alpha",{"_index":203,"t":{"173":{"position":[[44,5],[297,5],[353,5],[665,5]]},"175":{"position":[[15,5],[153,5],[194,5]]},"177":{"position":[[24,5],[92,5],[189,5],[510,5]]},"179":{"position":[[106,5],[1408,5],[1524,5]]},"184":{"position":[[22,5],[108,5],[267,6]]}}}],["alphaopt",{"_index":230,"t":{"173":{"position":[[607,12]]},"184":{"position":[[0,12]]},"200":{"position":[[13,13]]},"218":{"position":[[33,13]]},"222":{"position":[[13,13]]},"230":{"position":[[13,13]]}}}],["alreadi",{"_index":797,"t":{"236":{"position":[[1579,7],[1758,7]]}}}],["altern",{"_index":509,"t":{"210":{"position":[[927,13]]},"254":{"position":[[523,14]]},"314":{"position":[[496,14]]}}}],["alway",{"_index":474,"t":{"208":{"position":[[532,6]]},"240":{"position":[[745,6]]}}}],["amazon",{"_index":857,"t":{"242":{"position":[[61,6],[255,6]]}}}],["amd64",{"_index":21,"t":{"163":{"position":[[256,7],[352,7],[690,6]]}}}],["amount",{"_index":1179,"t":{"264":{"position":[[14694,6]]}}}],["anchor",{"_index":665,"t":{"226":{"position":[[625,6]]}}}],["and/or",{"_index":500,"t":{"210":{"position":[[732,6]]}}}],["announc",{"_index":1516,"t":{"300":{"position":[[815,9]]}}}],["anoth",{"_index":348,"t":{"184":{"position":[[1037,7]]},"286":{"position":[[82,7]]},"288":{"position":[[176,7]]}}}],["anyth",{"_index":475,"t":{"208":{"position":[[551,8]]}}}],["apach",{"_index":1222,"t":{"270":{"position":[[668,6]]}}}],["api",{"_index":424,"t":{"198":{"position":[[189,3]]},"264":{"position":[[76,3],[4480,3]]},"288":{"position":[[250,5],[1300,5],[1322,5],[1363,4],[2281,3]]},"290":{"position":[[490,3]]},"302":{"position":[[78,3]]},"304":{"position":[[368,3]]},"308":{"position":[[1979,3]]}}}],["api/v1",{"_index":1725,"t":{"318":{"position":[[635,9]]}}}],["app",{"_index":979,"t":{"252":{"position":[[923,3]]},"290":{"position":[[90,3],[294,3],[465,3],[518,4],[1143,3],[1217,4]]},"294":{"position":[[16,3]]},"308":{"position":[[2215,5],[2701,4],[3925,3]]},"310":{"position":[[1334,3]]}}}],["appear",{"_index":317,"t":{"182":{"position":[[0,8]]},"186":{"position":[[0,8]]},"188":{"position":[[0,8]]},"190":{"position":[[0,8]]},"192":{"position":[[16,8]]},"194":{"position":[[0,8]]},"196":{"position":[[0,8]]},"198":{"position":[[0,8]]},"200":{"position":[[0,8]]},"202":{"position":[[0,8]]},"204":{"position":[[0,8]]},"206":{"position":[[0,8]]},"208":{"position":[[0,8]]},"212":{"position":[[0,8]]},"214":{"position":[[0,8]]},"216":{"position":[[16,8]]},"218":{"position":[[20,8]]},"220":{"position":[[0,8]]},"222":{"position":[[0,8]]},"224":{"position":[[0,8]]},"226":{"position":[[0,8]]},"228":{"position":[[0,8]]},"230":{"position":[[0,8]]}}}],["append",{"_index":1298,"t":{"278":{"position":[[2149,6]]},"290":{"position":[[2101,6]]}}}],["appli",{"_index":445,"t":{"200":{"position":[[428,7]]}}}],["applic",{"_index":57,"t":{"163":{"position":[[740,11]]},"198":{"position":[[395,11]]},"242":{"position":[[532,12]]},"244":{"position":[[415,11]]},"254":{"position":[[228,11]]},"264":{"position":[[4690,11],[4731,11],[9892,10]]},"286":{"position":[[35,11]]},"288":{"position":[[538,12],[551,11],[1150,11],[1583,11],[1716,11]]},"290":{"position":[[7,12],[586,11]]},"292":{"position":[[74,11],[142,11],[174,12],[282,11]]},"302":{"position":[[230,12],[343,11],[468,12],[724,11]]},"306":{"position":[[14,11],[81,12],[124,10]]},"308":{"position":[[1817,13],[1890,12],[2169,11],[2255,11],[2391,11],[2542,12],[2571,12],[2668,11],[2989,12],[3549,11],[3806,12],[3876,11]]},"310":{"position":[[467,11],[559,11],[779,11],[3018,11],[3109,11]]},"314":{"position":[[19,11],[108,12]]},"318":{"position":[[13,12]]}}}],["application.y",{"_index":352,"t":{"184":{"position":[[1268,15]]}}}],["application/json",{"_index":100,"t":{"165":{"position":[[371,17]]}}}],["approach",{"_index":847,"t":{"240":{"position":[[495,8]]}}}],["appropri",{"_index":828,"t":{"236":{"position":[[3001,14],[3204,14]]},"288":{"position":[[598,11]]},"296":{"position":[[1750,11]]},"298":{"position":[[421,11]]},"300":{"position":[[2245,11]]},"302":{"position":[[1107,11]]}}}],["approv",{"_index":293,"t":{"179":{"position":[[1005,8]]},"264":{"position":[[208,8],[8188,8]]},"290":{"position":[[946,11]]}}}],["approval_prompt",{"_index":1058,"t":{"264":{"position":[[237,15]]}}}],["apps/oauth2",{"_index":1698,"t":{"312":{"position":[[351,15]]}}}],["archiv",{"_index":916,"t":{"246":{"position":[[138,8]]}}}],["aren't",{"_index":1155,"t":{"264":{"position":[[11661,6]]}}}],["arg",{"_index":941,"t":{"250":{"position":[[283,7],[601,7]]},"308":{"position":[[949,5]]}}}],["argument",{"_index":1050,"t":{"262":{"position":[[19,8],[116,8]]},"268":{"position":[[19,8],[180,8]]},"312":{"position":[[218,9]]}}}],["arm64",{"_index":25,"t":{"163":{"position":[[291,5],[387,5]]}}}],["armv6",{"_index":23,"t":{"163":{"position":[[273,6],[369,6]]}}}],["armv7",{"_index":24,"t":{"163":{"position":[[280,6],[376,6]]}}}],["around",{"_index":497,"t":{"210":{"position":[[688,6]]}}}],["ask",{"_index":92,"t":{"165":{"position":[[256,5]]}}}],["assembl",{"_index":1036,"t":{"260":{"position":[[347,8]]}}}],["assemblynam",{"_index":1038,"t":{"260":{"position":[[390,12]]}}}],["assign",{"_index":1412,"t":{"288":{"position":[[2374,6]]},"300":{"position":[[2812,8],[4276,8],[4665,6],[4726,6],[4782,7],[5207,6],[5266,8]]},"308":{"position":[[2926,11],[4073,12]]}}}],["associ",{"_index":1535,"t":{"300":{"position":[[5369,10]]}}}],["assum",{"_index":1651,"t":{"310":{"position":[[526,6]]}}}],["attach",{"_index":1406,"t":{"288":{"position":[[1836,8]]},"300":{"position":[[6279,6],[6753,9]]}}}],["attacksbetweem",{"_index":708,"t":{"228":{"position":[[1647,14]]}}}],["attempt",{"_index":313,"t":{"179":{"position":[[1338,10]]},"264":{"position":[[300,8]]},"272":{"position":[[99,10],[1062,8]]}}}],["attent",{"_index":150,"t":{"169":{"position":[[294,9]]}}}],["attribut",{"_index":1076,"t":{"264":{"position":[[2018,9]]},"278":{"position":[[2101,10]]},"310":{"position":[[1446,9]]}}}],["aud",{"_index":563,"t":{"212":{"position":[[1465,3]]},"264":{"position":[[2912,3],[7061,5],[13295,3]]},"300":{"position":[[1689,3],[1721,3],[2968,4],[3327,5]]}}}],["audienc",{"_index":566,"t":{"212":{"position":[[1564,9]]},"264":{"position":[[7000,8],[7052,8],[7080,8],[7114,9]]},"300":{"position":[[1261,10],[1292,8],[1321,8],[1637,8],[1868,9],[2625,8],[2954,8],[3016,8],[3192,8],[3242,8],[3293,9]]},"308":{"position":[[2225,9]]}}}],["audienceclaim",{"_index":561,"t":{"212":{"position":[[1351,14],[1375,13]]}}}],["auth",{"_index":76,"t":{"165":{"position":[[65,4]]},"179":{"position":[[630,4],[669,4]]},"190":{"position":[[412,4],[470,4]]},"202":{"position":[[633,4],[691,4]]},"254":{"position":[[572,4],[633,4]]},"264":{"position":[[263,4],[316,4],[598,4],[667,4],[7316,4],[7485,4],[7511,5],[7847,4],[11820,4],[11841,4],[11864,4],[11889,4],[12013,4],[12202,4],[12227,4],[12631,4],[12710,4],[12758,4],[12859,4],[13049,4]]},"270":{"position":[[519,4]]},"272":{"position":[[606,4],[790,4],[1057,4],[1473,4],[1524,4]]},"274":{"position":[[1545,4]]},"278":{"position":[[94,5],[477,4],[578,4]]},"282":{"position":[[437,4],[631,4],[912,4],[1131,5]]},"284":{"position":[[556,4],[841,4],[1111,4],[1317,4],[1670,4],[1889,4],[2003,4],[2051,4],[2179,4]]},"288":{"position":[[1019,4],[1308,6]]},"290":{"position":[[1057,4],[1328,4],[1626,4],[1964,4],[2303,4]]},"292":{"position":[[450,4]]},"296":{"position":[[179,4]]},"298":{"position":[[65,4]]},"302":{"position":[[5,4]]}}}],["auth/pass_basic_auth",{"_index":260,"t":{"179":{"position":[[323,20]]}}}],["auth/set_basic_auth",{"_index":266,"t":{"179":{"position":[[478,19]]}}}],["auth_cooki",{"_index":1288,"t":{"278":{"position":[[1568,12],[1630,13],[2252,13],[2305,13]]}}}],["auth_cookie_name_0",{"_index":1300,"t":{"278":{"position":[[2285,19],[2518,20]]}}}],["auth_cookie_name_1",{"_index":1301,"t":{"278":{"position":[[2323,19],[2561,20]]}}}],["auth_cookie_name_1=$auth_cookie_name_upstream_1$1",{"_index":1302,"t":{"278":{"position":[[2343,52]]}}}],["auth_cookie_name_upstream_1",{"_index":1296,"t":{"278":{"position":[[2014,28],[2463,30]]}}}],["auth_request",{"_index":984,"t":{"252":{"position":[[1175,12]]},"264":{"position":[[11955,12],[12165,12],[12273,12]]},"278":{"position":[[10,12],[804,12],[927,12],[1538,12],[1871,12]]}}}],["auth_request_set",{"_index":1284,"t":{"278":{"position":[[1098,16],[1157,16],[1360,16],[1551,16],[1997,16],[2857,16],[3340,16]]}}}],["authent",{"_index":88,"t":{"165":{"position":[[200,14],[294,14],[458,14],[657,14]]},"184":{"position":[[444,14],[746,13],[1134,13]]},"214":{"position":[[1871,14]]},"228":{"position":[[1833,15]]},"232":{"position":[[24,14]]},"234":{"position":[[802,12]]},"242":{"position":[[494,12]]},"252":{"position":[[109,14]]},"254":{"position":[[154,14],[294,14]]},"264":{"position":[[142,14],[285,14],[356,14],[409,13],[442,12],[2581,12],[2667,12],[4860,12],[6263,14],[7793,15],[12661,14],[12777,14],[12891,14],[13100,14],[15173,15],[15352,14]]},"266":{"position":[[291,13]]},"270":{"position":[[419,15]]},"272":{"position":[[0,14],[113,13],[365,13],[440,12],[514,14],[1013,13]]},"278":{"position":[[49,12]]},"282":{"position":[[56,12]]},"284":{"position":[[273,13]]},"288":{"position":[[3036,14]]},"296":{"position":[[234,14]]},"300":{"position":[[2280,14],[2300,14]]},"310":{"position":[[2935,13]]},"312":{"position":[[37,12]]},"316":{"position":[[498,13]]},"320":{"position":[[111,13]]}}}],["authenticationprovid",{"_index":346,"t":{"184":{"position":[[994,22]]}}}],["autherror",{"_index":1236,"t":{"272":{"position":[[464,9]]}}}],["authfailur",{"_index":1234,"t":{"272":{"position":[[406,11]]}}}],["author",{"_index":264,"t":{"179":{"position":[[421,13],[536,13]]},"236":{"position":[[1292,13]]},"264":{"position":[[7378,13],[7438,13],[12081,13],[12111,13],[13125,13]]},"278":{"position":[[1667,13]]},"284":{"position":[[2031,13],[2207,13]]},"288":{"position":[[610,10],[692,10],[998,11]]},"296":{"position":[[67,13]]},"298":{"position":[[1031,14]]},"300":{"position":[[3817,13],[3857,13],[3903,13],[4820,10],[5471,13],[5723,9]]},"306":{"position":[[211,13]]},"308":{"position":[[1757,13],[1860,13],[1993,13],[2098,13],[2508,13],[2807,13],[3414,13],[4115,13],[4256,13]]},"310":{"position":[[3369,14]]},"320":{"position":[[3,9],[68,9],[179,9]]}}}],["authorizationnginx.ingress.kubernetes.io/auth",{"_index":1314,"t":{"278":{"position":[[3120,45]]}}}],["authresponsehead",{"_index":1371,"t":{"284":{"position":[[1978,20],[2154,20]]}}}],["authsuccess",{"_index":1232,"t":{"272":{"position":[[339,11],[1494,11]]}}}],["auto",{"_index":938,"t":{"250":{"position":[[242,7],[560,7]]},"284":{"position":[[776,4]]}}}],["automat",{"_index":988,"t":{"254":{"position":[[186,13]]},"288":{"position":[[1798,13]]}}}],["automaticallyanchor",{"_index":660,"t":{"226":{"position":[[510,21]]}}}],["avail",{"_index":26,"t":{"163":{"position":[[297,10],[393,10]]},"175":{"position":[[240,10]]},"179":{"position":[[85,9]]},"184":{"position":[[136,9]]},"204":{"position":[[195,9]]},"232":{"position":[[198,9],[249,9]]},"236":{"position":[[1822,10],[2024,10],[3033,9]]},"266":{"position":[[737,9],[871,9],[950,9]]},"272":{"position":[[766,9]]},"274":{"position":[[618,9]]},"276":{"position":[[490,9]]},"308":{"position":[[2037,9]]},"310":{"position":[[334,9]]}}}],["azur",{"_index":308,"t":{"179":{"position":[[1284,6]]},"214":{"position":[[660,5],[2223,6]]},"216":{"position":[[134,6]]},"264":{"position":[[496,5],[6523,5],[11320,6]]},"278":{"position":[[3676,7]]},"286":{"position":[[226,5],[288,5]]},"290":{"position":[[59,5],[1051,5],[1322,5],[1342,6],[1533,5],[1620,5],[1841,5],[1958,5],[2297,5]]},"306":{"position":[[43,5]]}}}],["azureconfig",{"_index":576,"t":{"214":{"position":[[594,11],[619,11]]}}}],["azureopt",{"_index":577,"t":{"214":{"position":[[606,12]]}}}],["b",{"_index":8,"t":{"163":{"position":[[77,2]]},"264":{"position":[[4937,1]]},"284":{"position":[[463,2],[1044,2],[1517,1]]}}}],["back",{"_index":764,"t":{"236":{"position":[[100,4],[172,4]]},"244":{"position":[[338,4]]}}}],["backend",{"_index":742,"t":{"232":{"position":[[224,9],[259,8]]},"234":{"position":[[19,7],[42,7],[141,8],[366,7]]},"236":{"position":[[18,7],[2196,7],[2233,7],[2298,7],[2345,9],[3053,7]]},"264":{"position":[[11758,8]]},"278":{"position":[[1041,8],[1352,7]]},"282":{"position":[[393,7],[659,7],[769,8],[837,8],[1279,7]]},"284":{"position":[[527,7],[812,7],[1139,7],[1345,7],[1455,8],[1527,8],[1595,8]]}}}],["backport",{"_index":196,"t":{"171":{"position":[[632,8]]}}}],["backslash",{"_index":508,"t":{"210":{"position":[[872,9]]}}}],["backup",{"_index":1124,"t":{"264":{"position":[[5603,6],[5738,7]]},"270":{"position":[[266,6],[293,9],[310,6]]}}}],["balanc",{"_index":861,"t":{"242":{"position":[[100,10],[241,8],[290,10]]}}}],["banner",{"_index":1101,"t":{"264":{"position":[[3384,6],[3412,6],[3454,7]]}}}],["bar",{"_index":678,"t":{"228":{"position":[[603,8],[641,5]]}}}],["base",{"_index":226,"t":{"173":{"position":[[505,5]]},"175":{"position":[[57,5]]},"184":{"position":[[523,5]]},"228":{"position":[[1386,7]]},"264":{"position":[[14640,5]]},"266":{"position":[[1243,5]]},"298":{"position":[[1025,5]]},"308":{"position":[[3391,5],[3929,4]]}}}],["base/dir",{"_index":703,"t":{"228":{"position":[[1467,12]]}}}],["base64",{"_index":453,"t":{"202":{"position":[[168,6]]},"220":{"position":[[213,6]]},"260":{"position":[[241,6],[302,6],[586,6]]},"264":{"position":[[1895,6]]}}}],["base64url",{"_index":773,"t":{"236":{"position":[[457,9]]}}}],["bash",{"_index":1018,"t":{"260":{"position":[[73,4]]}}}],["basic",{"_index":259,"t":{"179":{"position":[[317,5],[472,5],[624,5]]},"190":{"position":[[406,5],[464,5]]},"202":{"position":[[627,5],[685,5]]},"264":{"position":[[592,5],[661,5],[7479,5],[7505,5],[7841,5],[8623,5],[8710,5],[12196,5],[12221,5]]}}}],["basicauthpassword",{"_index":388,"t":{"190":{"position":[[330,17],[361,17]]},"202":{"position":[[551,17],[582,17]]}}}],["baz",{"_index":679,"t":{"228":{"position":[[648,12],[690,4],[957,11]]}}}],["baz/abc/123",{"_index":689,"t":{"228":{"position":[[1021,12]]}}}],["bcrypt",{"_index":1111,"t":{"264":{"position":[[4943,6]]}}}],["bearer",{"_index":87,"t":{"165":{"position":[[181,6]]},"264":{"position":[[2834,6],[7452,6],[12125,6],[13199,6],[13260,6]]}}}],["becom",{"_index":391,"t":{"190":{"position":[[453,6]]},"202":{"position":[[674,6]]},"264":{"position":[[1314,7]]},"268":{"position":[[417,7],[481,7]]}}}],["befor",{"_index":218,"t":{"173":{"position":[[282,6]]},"177":{"position":[[0,6]]},"179":{"position":[[1488,6]]},"228":{"position":[[829,6],[1050,6]]},"250":{"position":[[804,6]]},"264":{"position":[[5873,6]]}}}],["beforward",{"_index":520,"t":{"210":{"position":[[1494,11]]}}}],["behind",{"_index":67,"t":{"163":{"position":[[881,6]]},"264":{"position":[[11372,6]]}}}],["believ",{"_index":134,"t":{"169":{"position":[[12,7]]}}}],["beload",{"_index":382,"t":{"190":{"position":[[204,8]]},"202":{"position":[[425,8]]}}}],["belong",{"_index":419,"t":{"194":{"position":[[454,6]]},"264":{"position":[[4013,6]]},"296":{"position":[[510,6],[1535,6]]}}}],["below",{"_index":228,"t":{"173":{"position":[[541,5],[728,6],[863,5]]},"175":{"position":[[104,6],[271,5]]},"242":{"position":[[53,7]]},"260":{"position":[[50,5]]},"264":{"position":[[16334,5]]},"272":{"position":[[167,5],[324,5]]},"274":{"position":[[48,5]]},"276":{"position":[[237,6]]},"308":{"position":[[345,6]]}}}],["beoverridden",{"_index":518,"t":{"210":{"position":[[1384,12]]}}}],["bepass",{"_index":516,"t":{"210":{"position":[[1252,8]]}}}],["best",{"_index":1522,"t":{"300":{"position":[[1521,4]]}}}],["between",{"_index":331,"t":{"184":{"position":[[290,7]]},"228":{"position":[[2135,7]]},"232":{"position":[[53,7]]},"264":{"position":[[3180,7]]}}}],["bewar",{"_index":217,"t":{"173":{"position":[[267,6]]},"254":{"position":[[838,6]]}}}],["big",{"_index":785,"t":{"236":{"position":[[970,4]]}}}],["bin/dex",{"_index":1590,"t":{"308":{"position":[[848,7]]}}}],["binari",{"_index":4,"t":{"163":{"position":[[42,6],[199,6],[462,8]]}}}],["bindaddress",{"_index":357,"t":{"184":{"position":[[1377,11],[1685,11]]},"222":{"position":[[108,11],[127,11]]}}}],["bit",{"_index":771,"t":{"236":{"position":[[387,3],[438,3]]},"310":{"position":[[823,4],[1057,3]]}}}],["bitbucket",{"_index":309,"t":{"179":{"position":[[1291,10]]},"214":{"position":[[832,9]]},"216":{"position":[[141,10]]},"286":{"position":[[345,9]]},"316":{"position":[[477,9],[594,9],[713,9]]}}}],["bitbucketconfig",{"_index":581,"t":{"214":{"position":[[754,15],[787,15]]}}}],["bitbucketopt",{"_index":582,"t":{"214":{"position":[[770,16]]}}}],["blank",{"_index":630,"t":{"222":{"position":[[186,5],[315,5]]}}}],["block",{"_index":511,"t":{"210":{"position":[[958,6],[1040,5]]},"272":{"position":[[294,5]]},"308":{"position":[[625,5]]}}}],["bodi",{"_index":712,"t":{"228":{"position":[[1825,4]]},"278":{"position":[[842,4]]}}}],["bool",{"_index":322,"t":{"182":{"position":[[56,4]]},"198":{"position":[[329,4]]},"200":{"position":[[281,4]]},"212":{"position":[[166,4],[322,4],[501,4],[849,4]]},"228":{"position":[[1502,4],[1725,4],[2250,4],[2387,4]]},"230":{"position":[[131,4]]},"264":{"position":[[276,4],[1412,4],[1927,4],[2091,4],[2471,4],[2711,4],[3258,4],[3312,4],[4722,4],[5404,4],[5566,4],[6326,4],[6440,4],[6590,4],[7188,4],[7399,4],[7490,4],[7640,4],[7901,4],[7972,4],[9059,4],[9794,4],[10427,4],[10546,4],[11159,4],[11352,4],[11602,4],[11809,4],[12102,4],[12207,4],[12320,4],[12559,4],[12646,4],[13068,4],[13213,4],[13400,4],[13544,4],[13650,4],[13766,4],[13865,4]]}}}],["boolean",{"_index":432,"t":{"198":{"position":[[372,7]]}}}],["both",{"_index":354,"t":{"184":{"position":[[1302,4],[1610,4]]},"226":{"position":[[291,5]]},"250":{"position":[[1351,4]]},"278":{"position":[[2405,4]]},"300":{"position":[[3105,4]]}}}],["bracket",{"_index":1115,"t":{"264":{"position":[[5149,8],[5315,8]]}}}],["branch",{"_index":906,"t":{"244":{"position":[[317,6]]},"248":{"position":[[34,6],[152,6]]}}}],["break",{"_index":208,"t":{"173":{"position":[[89,8]]}}}],["brief",{"_index":1537,"t":{"300":{"position":[[5574,5]]}}}],["bring",{"_index":149,"t":{"169":{"position":[[281,5]]}}}],["brows",{"_index":236,"t":{"173":{"position":[[842,6]]}}}],["browser",{"_index":782,"t":{"236":{"position":[[868,7],[1358,8]]},"264":{"position":[[1366,7],[16186,8]]},"310":{"position":[[2922,8]]}}}],["browserxssfilt",{"_index":1349,"t":{"282":{"position":[[975,17]]},"284":{"position":[[1733,17]]}}}],["bs=32",{"_index":1026,"t":{"260":{"position":[[213,5]]}}}],["buffer",{"_index":720,"t":{"228":{"position":[[2165,6]]},"264":{"position":[[3206,7]]}}}],["bug",{"_index":897,"t":{"244":{"position":[[9,4],[53,4],[221,4],[377,3]]}}}],["build",{"_index":372,"t":{"186":{"position":[[243,8]]},"240":{"position":[[962,8]]},"310":{"position":[[2563,6],[2581,5]]}}}],["built",{"_index":1577,"t":{"308":{"position":[[157,5]]}}}],["bundl",{"_index":1669,"t":{"310":{"position":[[1456,7]]}}}],["button",{"_index":1169,"t":{"264":{"position":[[13537,6]]}}}],["button=tru",{"_index":1677,"t":{"310":{"position":[[1902,11]]}}}],["bypass",{"_index":1165,"t":{"264":{"position":[[12770,6],[12884,6],[13405,6],[15345,6]]}}}],["bysom",{"_index":658,"t":{"226":{"position":[[457,6]]}}}],["byte",{"_index":451,"t":{"202":{"position":[[145,6]]},"220":{"position":[[190,6]]},"260":{"position":[[581,4],[633,6]]},"274":{"position":[[1215,5]]}}}],["c",{"_index":18,"t":{"163":{"position":[[223,2],[635,1]]},"260":{"position":[[115,1]]}}}],["c=us/st=washington/l=dc/o=gsa/ou=18f/cn=localhost",{"_index":1666,"t":{"310":{"position":[[1193,53]]}}}],["ca",{"_index":281,"t":{"179":{"position":[[865,2]]},"214":{"position":[[1707,2]]},"264":{"position":[[8269,2],[8300,2]]}}}],["cafil",{"_index":604,"t":{"214":{"position":[[1660,7],[1677,7]]}}}],["call",{"_index":425,"t":{"198":{"position":[[193,5]]},"264":{"position":[[4484,5]]},"288":{"position":[[1923,6],[2468,5]]}}}],["callback",{"_index":980,"t":{"252":{"position":[[963,8]]},"296":{"position":[[81,8]]},"308":{"position":[[594,10]]},"314":{"position":[[121,8]]},"316":{"position":[[28,9]]}}}],["caller",{"_index":477,"t":{"208":{"position":[[705,6]]}}}],["capitalis",{"_index":1214,"t":{"268":{"position":[[108,12]]}}}],["captur",{"_index":674,"t":{"228":{"position":[[507,8],[699,7],[885,7]]}}}],["case",{"_index":101,"t":{"165":{"position":[[398,4]]},"169":{"position":[[533,4]]},"228":{"position":[[1214,4]]},"236":{"position":[[2841,5]]},"264":{"position":[[13510,4]]},"310":{"position":[[3451,5]]},"312":{"position":[[839,5]]},"322":{"position":[[90,4]]}}}],["caseadd",{"_index":1037,"t":{"260":{"position":[[376,7]]}}}],["caveat",{"_index":806,"t":{"236":{"position":[[2035,7]]}}}],["center",{"_index":1381,"t":{"288":{"position":[[230,6],[318,6],[425,6]]}}}],["cert",{"_index":640,"t":{"224":{"position":[[260,4],[278,4]]},"240":{"position":[[65,4],[306,4]]},"264":{"position":[[14005,4]]}}}],["cert.pem",{"_index":1663,"t":{"310":{"position":[[1160,8]]}}}],["certif",{"_index":361,"t":{"184":{"position":[[1480,11],[1788,11]]},"214":{"position":[[1710,12]]},"222":{"position":[[400,11]]},"224":{"position":[[68,11],[294,11]]},"264":{"position":[[8303,12],[13674,12],[13790,12],[14030,11]]},"290":{"position":[[1182,12]]},"310":{"position":[[1008,11]]}}}],["certresolv",{"_index":1338,"t":{"282":{"position":[[447,13],[672,13]]},"284":{"position":[[624,13],[907,13],[1152,13],[1358,13]]}}}],["challeng",{"_index":617,"t":{"214":{"position":[[2500,9]]},"264":{"position":[[876,9],[914,10]]},"300":{"position":[[636,9]]}}}],["chang",{"_index":209,"t":{"173":{"position":[[98,7],[202,8]]},"184":{"position":[[283,6]]},"212":{"position":[[783,6]]},"252":{"position":[[150,7]]},"264":{"position":[[1531,7]]},"302":{"position":[[82,8]]},"314":{"position":[[651,6]]}}}],["channel",{"_index":1088,"t":{"264":{"position":[[2761,7]]}}}],["charact",{"_index":499,"t":{"210":{"position":[[709,10],[916,10],[1076,10]]}}}],["check",{"_index":78,"t":{"165":{"position":[[80,7]]},"226":{"position":[[134,7]]},"252":{"position":[[391,6]]},"264":{"position":[[8636,6],[8723,6],[8740,5],[8830,6]]},"288":{"position":[[2723,7],[2986,7]]},"290":{"position":[[157,5]]},"300":{"position":[[6852,5]]}}}],["checkbox",{"_index":902,"t":{"244":{"position":[[188,11]]}}}],["checkedaft",{"_index":543,"t":{"212":{"position":[[655,12]]}}}],["checksum",{"_index":41,"t":{"163":{"position":[[554,8]]}}}],["chomp",{"_index":510,"t":{"210":{"position":[[949,8]]}}}],["choos",{"_index":0,"t":{"163":{"position":[[0,6]]},"184":{"position":[[1288,6],[1596,6]]},"288":{"position":[[108,6],[243,6],[290,6],[331,6],[438,6],[501,6],[526,6],[581,6],[805,6],[1315,6],[2303,6],[2559,6]]},"290":{"position":[[52,6]]},"300":{"position":[[6393,6]]}}}],["cidr",{"_index":1183,"t":{"264":{"position":[[15321,4]]}}}],["cipher",{"_index":646,"t":{"224":{"position":[[530,6],[663,6],[697,6]]},"240":{"position":[[797,6],[839,6],[1027,6]]},"264":{"position":[[14053,6],[14094,6],[14240,6],[14275,6]]}}}],["ciphersuit",{"_index":645,"t":{"224":{"position":[[478,12],[500,12]]}}}],["claim",{"_index":381,"t":{"190":{"position":[[75,5],[123,5],[136,5],[161,5],[393,5],[442,5]]},"202":{"position":[[344,5],[357,5],[382,5],[614,5],[663,5]]},"212":{"position":[[561,5],[1101,5],[1201,5],[1302,5],[1410,5],[1469,5]]},"264":{"position":[[6636,5],[6851,5],[6875,5],[6929,5],[6953,5],[7009,5],[7033,5]]},"286":{"position":[[477,7],[508,5]]},"298":{"position":[[361,5]]},"300":{"position":[[1207,5],[1693,5],[1725,5],[1891,6],[3333,5],[5911,5],[5982,5]]},"308":{"position":[[1782,6]]}}}],["claim/user_id_claim",{"_index":297,"t":{"179":{"position":[[1067,19]]}}}],["claimsourc",{"_index":379,"t":{"190":{"position":[[26,11]]},"220":{"position":[[13,12]]}}}],["clear",{"_index":975,"t":{"252":{"position":[[704,6],[759,5]]}}}],["click",{"_index":1399,"t":{"288":{"position":[[1328,5]]},"290":{"position":[[117,5],[398,5],[523,5],[616,5]]},"292":{"position":[[199,5]]},"300":{"position":[[2261,5],[2759,8],[2914,5],[3550,8]]},"308":{"position":[[1983,5],[2647,5]]}}}],["client",{"_index":274,"t":{"179":{"position":[[712,6],[732,6],[765,6]]},"212":{"position":[[1445,6],[1630,6]]},"214":{"position":[[140,6],[269,6],[441,6]]},"234":{"position":[[187,6],[340,6],[481,6]]},"236":{"position":[[109,6]]},"240":{"position":[[435,6],[453,6]]},"242":{"position":[[1424,6],[1442,6]]},"264":{"position":[[681,6],[708,6],[762,6],[793,6],[809,6],[855,6],[5133,8],[5299,8],[9173,6],[9241,7],[13317,6],[15455,6]]},"272":{"position":[[677,11],[833,6],[1408,7]]},"274":{"position":[[413,11],[688,6],[1480,7]]},"284":{"position":[[2276,6],[2307,6]]},"288":{"position":[[515,6],[838,6],[852,6],[1265,6],[1527,6],[2453,6]]},"290":{"position":[[1232,6],[1456,6],[1497,6],[1764,6],[1805,6]]},"292":{"position":[[239,6],[250,6],[349,6],[390,6]]},"298":{"position":[[103,6],[292,6],[460,6],[498,6]]},"300":{"position":[[27,6],[58,6],[546,6],[616,6],[914,6],[977,6],[1138,6],[1285,6],[1342,6],[1462,6],[1603,6],[1842,6],[1981,7],[2020,6],[2049,6],[2074,6],[2139,6],[2146,6],[2175,6],[2273,6],[2650,6],[2674,7],[2707,6],[2821,6],[2905,8],[3009,6],[3286,6],[3517,6],[4011,6],[4189,6],[4226,6],[4345,6],[4549,6],[4573,7],[4638,7],[4760,7],[4888,7],[5051,6],[5076,7],[5109,6],[5617,6],[5806,6],[6236,6],[6297,7],[6305,7],[6338,6],[6359,6],[6435,6],[6982,7],[7015,6]]},"302":{"position":[[748,6],[777,6]]},"308":{"position":[[1011,6],[1034,6],[2891,6],[2905,6],[4169,6],[4183,6]]},"310":{"position":[[1587,6],[3565,6],[3589,6]]},"312":{"position":[[414,6],[428,6],[548,6],[582,6]]},"314":{"position":[[338,6],[352,6],[442,6],[466,6]]},"316":{"position":[[275,6],[289,6],[376,6],[400,6]]},"318":{"position":[[175,6],[189,6],[355,6],[405,6]]}}}],["client'",{"_index":1490,"t":{"298":{"position":[[518,8]]},"300":{"position":[[43,8],[78,8],[1668,8],[2191,8],[2585,8],[2691,8],[2774,8],[2986,8],[3038,8],[4590,8],[4947,8],[5093,8],[5132,8],[6322,8],[6999,8]]}}}],["client/remot",{"_index":1242,"t":{"272":{"position":[[858,13]]},"274":{"position":[[713,13]]}}}],["client_id",{"_index":1618,"t":{"308":{"position":[[3499,9],[4564,13]]},"318":{"position":[[368,9]]}}}],["client_secret",{"_index":1619,"t":{"308":{"position":[[3513,13]]},"318":{"position":[[422,13]]}}}],["client_session_idl",{"_index":823,"t":{"236":{"position":[[2592,20]]}}}],["clientid",{"_index":569,"t":{"214":{"position":[[102,8],[118,8]]}}}],["clientsecret",{"_index":571,"t":{"214":{"position":[[223,12],[243,12],[475,12]]}}}],["clientsecretfil",{"_index":572,"t":{"214":{"position":[[356,16],[380,16]]}}}],["clone",{"_index":918,"t":{"248":{"position":[[0,5],[88,5]]}}}],["close",{"_index":1068,"t":{"264":{"position":[[1377,7]]}}}],["closest",{"_index":669,"t":{"228":{"position":[[364,7]]}}}],["cloud",{"_index":859,"t":{"242":{"position":[[80,5]]},"310":{"position":[[2259,5]]}}}],["cloud/dock",{"_index":1680,"t":{"310":{"position":[[2179,12]]}}}],["cluster",{"_index":829,"t":{"236":{"position":[[3022,7],[3180,7]]},"264":{"position":[[9509,7],[9561,7],[9650,7],[10419,7],[10449,8],[10475,7]]}}}],["cluster=tru",{"_index":832,"t":{"236":{"position":[[3129,12],[3277,12]]}}}],["code",{"_index":616,"t":{"214":{"position":[[2495,4]]},"228":{"position":[[2005,4]]},"244":{"position":[[458,4],[502,4]]},"264":{"position":[[871,4],[909,4]]},"274":{"position":[[1269,4]]},"300":{"position":[[631,4]]},"308":{"position":[[2821,4],[4129,4]]}}}],["code_challenge_method",{"_index":615,"t":{"214":{"position":[[2462,21]]}}}],["codematch",{"_index":713,"t":{"228":{"position":[[1864,12]]}}}],["collabor",{"_index":175,"t":{"171":{"position":[[161,12]]},"194":{"position":[[217,13],[494,13]]},"264":{"position":[[3749,13],[3873,13],[4053,13]]},"296":{"position":[[310,13],[550,14],[934,13],[1104,13],[1456,13],[1575,14]]}}}],["collaboratorsit",{"_index":416,"t":{"194":{"position":[[315,15]]}}}],["collect",{"_index":625,"t":{"218":{"position":[[62,10]]},"230":{"position":[[47,10]]}}}],["combin",{"_index":1185,"t":{"264":{"position":[[15403,8]]},"270":{"position":[[675,8]]}}}],["come",{"_index":639,"t":{"224":{"position":[[242,4],[338,4]]},"300":{"position":[[4137,5]]}}}],["comma",{"_index":1009,"t":{"256":{"position":[[151,5],[213,5],[275,5]]},"264":{"position":[[3049,5],[3703,5],[4169,5]]},"266":{"position":[[1057,5]]},"296":{"position":[[889,5],[1605,5],[1669,5]]},"302":{"position":[[1025,5]]}}}],["command",{"_index":61,"t":{"163":{"position":[[810,7]]},"236":{"position":[[731,8]]},"240":{"position":[[135,7]]},"242":{"position":[[1172,7]]},"258":{"position":[[35,7],[135,7]]},"260":{"position":[[56,9]]},"262":{"position":[[6,7]]},"268":{"position":[[6,7],[365,7]]},"270":{"position":[[140,8]]},"312":{"position":[[205,7]]},"314":{"position":[[693,7]]}}}],["commandlin",{"_index":1687,"t":{"310":{"position":[[2830,12]]}}}],["common",{"_index":367,"t":{"186":{"position":[[99,6],[152,8]]},"264":{"position":[[543,6],[581,8]]},"306":{"position":[[204,6]]}}}],["commun",{"_index":118,"t":{"167":{"position":[[23,9]]}}}],["compat",{"_index":1139,"t":{"264":{"position":[[6542,14]]}}}],["complet",{"_index":750,"t":{"234":{"position":[[405,10]]},"240":{"position":[[1000,8]]},"300":{"position":[[2212,8]]}}}],["compos",{"_index":153,"t":{"169":{"position":[[353,7]]},"236":{"position":[[230,8]]},"250":{"position":[[902,7],[1194,7],[1274,7],[1292,7]]}}}],["compose.yaml",{"_index":955,"t":{"250":{"position":[[1212,12]]}}}],["compress",{"_index":1120,"t":{"264":{"position":[[5395,8],[5437,10]]},"270":{"position":[[332,10],[354,10]]}}}],["compris",{"_index":776,"t":{"236":{"position":[[565,9]]}}}],["concurr",{"_index":757,"t":{"234":{"position":[[628,12]]}}}],["confident",{"_index":1484,"t":{"298":{"position":[[150,13]]}}}],["confidenti",{"_index":1518,"t":{"300":{"position":[[961,15]]}}}],["config",{"_index":60,"t":{"163":{"position":[[797,6]]},"173":{"position":[[691,6]]},"175":{"position":[[159,6],[200,6]]},"177":{"position":[[30,6],[82,6],[179,6],[197,6],[487,7],[516,6],[551,6]]},"179":{"position":[[1394,6],[1414,6],[1530,6]]},"236":{"position":[[3503,6]]},"242":{"position":[[46,6],[645,6]]},"250":{"position":[[296,8],[614,8]]},"252":{"position":[[182,6]]},"258":{"position":[[82,6]]},"262":{"position":[[50,6],[162,6],[235,6]]},"264":{"position":[[993,6],[1015,6],[10938,6]]},"266":{"position":[[1173,6]]},"278":{"position":[[2906,6]]},"302":{"position":[[495,6]]},"308":{"position":[[3684,6],[4346,6],[4845,6]]},"314":{"position":[[545,6]]}}}],["config=/etc/oauth2",{"_index":1054,"t":{"262":{"position":[[307,18]]}}}],["configur",{"_index":58,"t":{"163":{"position":[[768,9],[857,9]]},"165":{"position":[[518,10],[698,14]]},"173":{"position":[[303,13],[359,13],[447,13],[511,13],[587,14],[639,14],[671,14],[898,13]]},"175":{"position":[[21,14]]},"177":{"position":[[123,13],[318,13],[406,13]]},"179":{"position":[[112,14]]},"184":{"position":[[39,13],[169,13],[402,9],[634,9],[869,9],[1225,9],[1464,9],[1547,9],[1772,9],[1850,9]]},"186":{"position":[[200,10]]},"208":{"position":[[48,13]]},"214":{"position":[[43,13],[556,14],[641,14],[720,14],[813,14],[902,14],[989,14],[1075,14],[1155,14],[1213,15],[1285,14]]},"222":{"position":[[49,13],[454,13]]},"228":{"position":[[53,13]]},"230":{"position":[[309,13]]},"236":{"position":[[1000,9],[2793,9],[2915,9],[3152,9]]},"238":{"position":[[26,15]]},"240":{"position":[[0,9],[176,13],[481,13],[713,11]]},"242":{"position":[[0,9],[1213,13]]},"250":{"position":[[137,17],[322,13],[640,13]]},"252":{"position":[[935,10]]},"254":{"position":[[971,13]]},"256":{"position":[[86,10]]},"258":{"position":[[20,10],[234,13]]},"264":{"position":[[393,13],[2977,13],[9917,15],[11257,13],[13491,10],[13985,13]]},"266":{"position":[[180,10],[511,10],[775,10],[1031,10]]},"268":{"position":[[339,13]]},"270":{"position":[[67,10],[183,9],[589,12]]},"272":{"position":[[582,9],[654,10]]},"274":{"position":[[315,9],[390,10]]},"276":{"position":[[134,13],[349,9],[425,10]]},"278":{"position":[[2798,13],[3744,10]]},"282":{"position":[[295,14]]},"284":{"position":[[240,10]]},"286":{"position":[[105,9],[409,13]]},"290":{"position":[[1289,9]]},"292":{"position":[[268,9],[306,9]]},"300":{"position":[[1618,10],[2386,14],[2507,14],[2603,9],[2920,9],[3477,14],[3596,13]]},"308":{"position":[[360,9],[611,13],[1535,9],[1747,9],[1847,9],[2372,9],[3011,13],[3531,10]]},"312":{"position":[[165,14]]},"314":{"position":[[304,10]]},"316":{"position":[[442,13],[570,13]]}}}],["conflict",{"_index":761,"t":{"234":{"position":[[768,9]]}}}],["conjunct",{"_index":347,"t":{"184":{"position":[[1020,11]]},"264":{"position":[[7817,11],[9621,11],[10209,11],[10369,11]]},"290":{"position":[[2056,11]]}}}],["connect",{"_index":523,"t":{"212":{"position":[[87,7],[993,7]]},"214":{"position":[[1748,10]]},"236":{"position":[[2704,10],[2732,10],[2985,10],[3188,10],[3376,10],[3537,10],[3586,10]]},"242":{"position":[[414,11]]},"252":{"position":[[455,11],[491,9]]},"264":{"position":[[6683,7],[8341,10],[9517,10],[9569,10],[9666,10],[9826,10],[9975,10],[10071,11],[10264,10],[10317,10],[10432,7],[10483,10],[10551,7],[10642,10],[10692,10],[10726,10],[10815,10],[10972,10],[11021,10]]},"286":{"position":[[304,7],[556,7]]},"300":{"position":[[1001,8],[2166,8]]},"308":{"position":[[7,7],[227,7],[271,7],[2635,7]]},"310":{"position":[[869,7],[913,8]]}}}],["connect/auth",{"_index":1494,"t":{"298":{"position":[[615,13]]}}}],["connect/token",{"_index":1495,"t":{"298":{"position":[[710,14]]}}}],["connect/userinfo",{"_index":1496,"t":{"298":{"position":[[807,17],[908,17]]}}}],["consent",{"_index":483,"t":{"210":{"position":[[165,7],[333,7]]},"288":{"position":[[345,7]]},"290":{"position":[[702,7],[810,7],[837,7]]}}}],["consent#th",{"_index":1454,"t":{"290":{"position":[[2238,11]]}}}],["consid",{"_index":330,"t":{"184":{"position":[[256,10]]},"210":{"position":[[889,10]]}}}],["consol",{"_index":1459,"t":{"292":{"position":[[29,7]]},"300":{"position":[[702,7],[750,7],[798,7],[895,7],[1374,7],[1499,8],[6948,7]]}}}],["consult",{"_index":1524,"t":{"300":{"position":[[1558,7]]}}}],["consum",{"_index":1571,"t":{"304":{"position":[[353,8],[380,8]]},"316":{"position":[[16,8]]}}}],["contact",{"_index":1644,"t":{"310":{"position":[[96,7],[135,7]]}}}],["contain",{"_index":201,"t":{"173":{"position":[[17,8]]},"184":{"position":[[13,8]]},"200":{"position":[[561,8]]},"202":{"position":[[315,10]]},"212":{"position":[[1107,8],[1207,8],[1308,8]]},"220":{"position":[[360,10]]},"222":{"position":[[359,8]]},"224":{"position":[[25,8]]},"250":{"position":[[336,8],[654,8]]},"264":{"position":[[6881,8],[6959,8],[7039,8],[12391,7]]},"272":{"position":[[53,7],[305,7]]},"278":{"position":[[2217,7]]},"308":{"position":[[1466,9],[4746,10]]},"310":{"position":[[2508,8]]}}}],["content",{"_index":1281,"t":{"278":{"position":[[864,7],[2240,8]]},"300":{"position":[[7185,9]]},"310":{"position":[[1251,8]]}}}],["contenttypenosniff",{"_index":1350,"t":{"282":{"position":[[998,19]]},"284":{"position":[[1756,19]]}}}],["contrib",{"_index":1053,"t":{"262":{"position":[[257,7]]}}}],["contrib/loc",{"_index":943,"t":{"250":{"position":[[420,14],[743,14],[1133,13]]}}}],["control",{"_index":798,"t":{"236":{"position":[[1623,8]]},"264":{"position":[[11396,8]]}}}],["convert",{"_index":241,"t":{"177":{"position":[[74,7],[106,7],[171,7],[244,7]]},"190":{"position":[[379,8]]},"202":{"position":[[600,8]]}}}],["convolut",{"_index":504,"t":{"210":{"position":[[798,11]]}}}],["cooki",{"_index":81,"t":{"165":{"position":[[112,6],[122,6],[543,8],[570,6]]},"232":{"position":[[122,6],[309,6]]},"234":{"position":[[4,6],[126,6],[199,7],[426,7],[518,6],[579,6]]},"236":{"position":[[139,6],[196,6],[326,6],[901,6],[1027,6],[1046,6],[1082,6],[1124,6],[1168,6],[1188,7],[1600,7],[2396,6]]},"240":{"position":[[373,6],[395,6]]},"242":{"position":[[1339,6],[1361,6]]},"252":{"position":[[711,8],[777,6]]},"254":{"position":[[103,8]]},"260":{"position":[[21,6]]},"264":{"position":[[1029,6],[1066,6],[1090,7],[1203,6],[1242,6],[1286,7],[1307,6],[1332,6],[1396,6],[1430,6],[1449,6],[1484,6],[1548,6],[1590,6],[1630,6],[1661,6],[1682,7],[1712,6],[1748,6],[1827,6],[1875,7],[1913,6],[1956,6],[1975,6],[2011,6],[2067,6],[2125,7],[2200,6],[2254,6],[11587,6],[11631,6],[11675,7],[11776,6],[11783,6],[15840,6]]},"268":{"position":[[398,6]]},"278":{"position":[[1487,6],[1623,6],[1710,7],[1847,7],[1914,7],[1979,7],[2094,6],[2131,6],[2233,6],[2414,6],[2511,6],[2554,6],[3475,8],[3728,6],[3761,6],[3810,6],[3929,6]]},"288":{"position":[[933,6]]},"290":{"position":[[2336,6],[2374,6]]},"292":{"position":[[483,6],[521,6]]},"302":{"position":[[570,6],[814,6]]},"308":{"position":[[1147,6],[1167,6],[3618,7]]},"310":{"position":[[1729,6],[1811,6],[1861,6],[3847,6]]}}}],["cookie_expir",{"_index":821,"t":{"236":{"position":[[2535,13]]}}}],["cookie_refresh",{"_index":820,"t":{"236":{"position":[[2490,14]]}}}],["cookie_secret",{"_index":1047,"t":{"260":{"position":[[681,15]]},"308":{"position":[[3589,13]]}}}],["cookienam",{"_index":766,"t":{"236":{"position":[[257,12],[301,10],[541,12]]}}}],["copi",{"_index":246,"t":{"177":{"position":[[343,4]]},"278":{"position":[[1825,6]]},"310":{"position":[[2600,4]]}}}],["coreo",{"_index":1578,"t":{"308":{"position":[[171,6]]}}}],["corp.com\"]client_id",{"_index":1610,"t":{"308":{"position":[[3240,20]]}}}],["corpor",{"_index":132,"t":{"167":{"position":[[218,9]]}}}],["correct",{"_index":1469,"t":{"296":{"position":[[104,7]]},"308":{"position":[[545,7]]},"318":{"position":[[110,7]]}}}],["correctli",{"_index":1363,"t":{"284":{"position":[[382,9]]},"290":{"position":[[2425,10]]},"292":{"position":[[572,10]]}}}],["count=1",{"_index":1027,"t":{"260":{"position":[[219,7]]}}}],["coupl",{"_index":816,"t":{"236":{"position":[[2413,6]]}}}],["cours",{"_index":804,"t":{"236":{"position":[[1938,7]]}}}],["cover",{"_index":1273,"t":{"276":{"position":[[30,7]]}}}],["creat",{"_index":187,"t":{"171":{"position":[[480,6]]},"244":{"position":[[285,6],[300,6]]},"248":{"position":[[17,6]]},"250":{"position":[[61,6]]},"264":{"position":[[1512,8],[4914,7]]},"288":{"position":[[40,6],[812,8],[1078,6],[2293,6],[2549,6]]},"290":{"position":[[253,6]]},"294":{"position":[[0,6]]},"296":{"position":[[0,6],[1350,7]]},"298":{"position":[[92,6],[299,6],[487,8],[1461,6]]},"300":{"position":[[903,6],[1145,6],[1228,6],[1441,6],[2036,8],[2056,6],[2132,6],[3653,6],[4440,8],[4489,6],[4538,8],[4615,6],[5595,8],[5793,6],[6223,8],[6530,6],[6572,6]]},"304":{"position":[[42,6]]},"308":{"position":[[2653,6],[3002,6],[3791,6]]},"310":{"position":[[443,6],[2429,6]]},"314":{"position":[[0,6]]},"318":{"position":[[0,6]]}}}],["credenti",{"_index":430,"t":{"198":{"position":[[284,11],[415,11]]},"264":{"position":[[4665,11],[4710,11],[4751,11]]},"288":{"position":[[297,13],[445,13],[478,12],[1170,11],[1603,11],[1736,12]]},"292":{"position":[[294,11]]},"298":{"position":[[270,10]]},"300":{"position":[[1116,10],[2532,11]]}}}],["crypto/tl",{"_index":653,"t":{"224":{"position":[[731,10]]},"240":{"position":[[914,10],[1062,11]]},"264":{"position":[[14309,10]]}}}],["csrf",{"_index":1079,"t":{"264":{"position":[[2074,4],[2120,4],[2207,4],[2249,4]]}}}],["current",{"_index":5,"t":{"163":{"position":[[49,8]]},"240":{"position":[[735,9],[932,9]]},"246":{"position":[[16,9]]},"264":{"position":[[6499,10]]},"286":{"position":[[517,9]]},"308":{"position":[[1228,7]]}}}],["custom",{"_index":848,"t":{"240":{"position":[[508,13]]},"264":{"position":[[2267,6],[2303,6],[2327,6],[2374,6],[3398,6],[3478,6]]},"278":{"position":[[3803,6]]},"300":{"position":[[1314,6],[3235,6],[5936,9]]},"308":{"position":[[2091,6]]}}}],["cycl",{"_index":977,"t":{"252":{"position":[[844,5],[906,6]]}}}],["d",{"_index":27,"t":{"163":{"position":[[308,2]]},"260":{"position":[[254,1]]}}}],["danger",{"_index":199,"t":{"173":{"position":[[0,6]]},"184":{"position":[[211,6]]}}}],["dashboard",{"_index":1380,"t":{"288":{"position":[[220,9]]},"310":{"position":[[496,10],[798,10]]}}}],["data",{"_index":637,"t":{"224":{"position":[[210,4],[306,4]]},"232":{"position":[[179,4]]},"234":{"position":[[550,4],[586,5]]},"264":{"position":[[11745,4]]},"274":{"position":[[1392,4]]},"298":{"position":[[1355,4]]},"310":{"position":[[426,4]]}}}],["date",{"_index":1252,"t":{"272":{"position":[[1310,4]]},"274":{"position":[[1332,4]]},"276":{"position":[[602,4]]}}}],["day",{"_index":1127,"t":{"264":{"position":[[5693,4]]},"310":{"position":[[1170,4]]}}}],["dd",{"_index":1024,"t":{"260":{"position":[[194,2]]}}}],["debug",{"_index":930,"t":{"250":{"position":[[43,9],[1431,5]]},"264":{"position":[[12305,5]]}}}],["decim",{"_index":401,"t":{"192":{"position":[[153,7]]}}}],["decod",{"_index":1041,"t":{"260":{"position":[[620,6]]}}}],["decreas",{"_index":1013,"t":{"258":{"position":[[98,10]]}}}],["dedic",{"_index":1526,"t":{"300":{"position":[[2008,11],[2615,9],[2733,9],[2787,10],[2867,10],[3507,9],[3559,9],[5145,9]]}}}],["deep",{"_index":1145,"t":{"264":{"position":[[8818,4]]}}}],["default",{"_index":434,"t":{"198":{"position":[[407,7]]},"208":{"position":[[176,9],[207,7],[431,7],[513,7],[637,7]]},"210":{"position":[[68,8],[226,7],[1170,7],[1198,7],[1218,7],[1363,7]]},"212":{"position":[[804,7],[1457,7]]},"214":{"position":[[1549,7],[1797,7]]},"224":{"position":[[647,7]]},"232":{"position":[[316,9]]},"234":{"position":[[34,7]]},"236":{"position":[[356,8]]},"240":{"position":[[635,8],[900,8]]},"242":{"position":[[168,8],[763,7]]},"252":{"position":[[620,7]]},"264":{"position":[[24,7],[2433,7],[2749,7],[3446,7],[3526,7],[4390,9],[4702,7],[4743,7],[8391,7],[14224,7],[16039,8],[16110,7]]},"270":{"position":[[3,8],[627,7]]},"272":{"position":[[152,7],[636,7]]},"274":{"position":[[33,7],[372,7]]},"276":{"position":[[219,7],[407,7]]},"282":{"position":[[461,7],[686,7]]},"284":{"position":[[638,7],[921,7],[1166,7],[1372,7]]},"286":{"position":[[218,7]]},"288":{"position":[[1162,7],[1595,7],[1728,7]]},"290":{"position":[[2108,9],[2250,7]]},"300":{"position":[[772,8],[1382,8],[4431,8]]},"304":{"position":[[146,7]]},"306":{"position":[[196,7]]},"308":{"position":[[576,7],[1927,7],[2415,7],[2863,8],[4248,7]]},"314":{"position":[[575,8]]},"316":{"position":[[434,7]]}}}],["defin",{"_index":336,"t":{"184":{"position":[[550,7]]},"212":{"position":[[1399,6]]},"214":{"position":[[158,7],[291,7],[1953,7]]},"220":{"position":[[140,7]]},"298":{"position":[[1511,6]]},"300":{"position":[[3539,7],[4218,7],[6112,7]]},"322":{"position":[[48,6]]}}}],["definit",{"_index":626,"t":{"218":{"position":[[76,11]]},"230":{"position":[[61,11]]}}}],["delay",{"_index":192,"t":{"171":{"position":[[571,5]]}}}],["delet",{"_index":794,"t":{"236":{"position":[[1343,7]]}}}],["demo",{"_index":1650,"t":{"310":{"position":[[512,5]]}}}],["demonstr",{"_index":161,"t":{"169":{"position":[[558,11]]}}}],["deped",{"_index":919,"t":{"248":{"position":[[56,11]]}}}],["depend",{"_index":114,"t":{"165":{"position":[[680,10]]},"169":{"position":[[85,13]]},"171":{"position":[[339,14]]},"252":{"position":[[1239,12]]},"264":{"position":[[8543,8]]},"312":{"position":[[228,9]]}}}],["deploy",{"_index":1,"t":{"163":{"position":[[14,7],[874,6]]},"250":{"position":[[368,8],[686,8]]},"288":{"position":[[1754,8],[1867,8],[2005,8]]},"310":{"position":[[3075,11]]}}}],["deprec",{"_index":1164,"t":{"264":{"position":[[12735,11]]}}}],["describ",{"_index":210,"t":{"173":{"position":[[172,9]]},"175":{"position":[[77,9]]},"308":{"position":[[2156,8]]}}}],["descript",{"_index":320,"t":{"182":{"position":[[34,11]]},"184":{"position":[[334,11]]},"186":{"position":[[34,11]]},"188":{"position":[[34,11]]},"190":{"position":[[111,11]]},"194":{"position":[[34,11]]},"196":{"position":[[34,11]]},"198":{"position":[[34,11]]},"200":{"position":[[129,11]]},"202":{"position":[[127,11]]},"204":{"position":[[34,11]]},"206":{"position":[[34,11]]},"210":{"position":[[1098,11]]},"212":{"position":[[34,11]]},"214":{"position":[[90,11]]},"220":{"position":[[172,11]]},"222":{"position":[[96,11]]},"224":{"position":[[162,11]]},"226":{"position":[[308,11]]},"228":{"position":[[182,11]]},"230":{"position":[[106,11]]},"264":{"position":[[12,11]]},"272":{"position":[[821,11]]},"274":{"position":[[676,11]]},"276":{"position":[[549,11]]},"300":{"position":[[2852,11],[5580,11]]},"308":{"position":[[2324,11]]},"314":{"position":[[71,11]]}}}],["deselect",{"_index":1529,"t":{"300":{"position":[[2366,10]]}}}],["desir",{"_index":448,"t":{"200":{"position":[[574,7]]}}}],["detail",{"_index":144,"t":{"169":{"position":[[167,7],[457,6]]},"173":{"position":[[122,8],[336,7]]},"264":{"position":[[12330,8]]},"272":{"position":[[1042,7],[1552,8]]},"276":{"position":[[751,7]]},"290":{"position":[[2273,8]]},"308":{"position":[[508,8]]}}}],["determin",{"_index":441,"t":{"200":{"position":[[307,10]]},"226":{"position":[[145,9]]},"228":{"position":[[1981,10],[2270,10]]},"264":{"position":[[9212,9]]},"284":{"position":[[362,9]]}}}],["dev.yaml",{"_index":1585,"t":{"308":{"position":[[679,9],[878,8]]}}}],["develop",{"_index":1623,"t":{"308":{"position":[[3737,9]]},"310":{"position":[[315,9]]}}}],["dex",{"_index":936,"t":{"250":{"position":[[193,5],[393,3],[1170,3],[1228,3]]},"308":{"position":[[178,3],[352,4],[392,4],[435,4],[802,4],[1521,4]]}}}],["differ",{"_index":502,"t":{"210":{"position":[[759,9]]},"216":{"position":[[77,9]]},"264":{"position":[[2110,9],[6474,6]]},"270":{"position":[[381,9]]},"272":{"position":[[546,9]]},"274":{"position":[[279,9]]},"276":{"position":[[313,9]]},"288":{"position":[[2685,9]]}}}],["digitalocean",{"_index":620,"t":{"216":{"position":[[152,12]]},"286":{"position":[[332,12]]}}}],["dir",{"_index":1083,"t":{"264":{"position":[[2284,3]]}}}],["dir\",th",{"_index":702,"t":{"228":{"position":[[1427,10]]}}}],["direct",{"_index":366,"t":{"186":{"position":[[67,7]]},"252":{"position":[[1188,9]]},"278":{"position":[[23,9]]},"300":{"position":[[2345,6]]}}}],["directli",{"_index":961,"t":{"252":{"position":[[22,8]]},"264":{"position":[[13575,8]]}}}],["directori",{"_index":953,"t":{"250":{"position":[[1159,10]]},"262":{"position":[[265,10]]},"266":{"position":[[595,9]]},"290":{"position":[[72,10],[1356,9]]},"302":{"position":[[1201,9]]},"308":{"position":[[1244,9]]},"310":{"position":[[2480,9]]}}}],["directory/develop/v2",{"_index":1453,"t":{"290":{"position":[[2201,20]]}}}],["disabl",{"_index":631,"t":{"222":{"position":[[209,8],[338,8]]},"236":{"position":[[1115,7]]},"252":{"position":[[608,8]]},"264":{"position":[[1781,8],[2425,7],[3438,7],[3518,7],[5798,7],[6829,8],[12564,7]]},"270":{"position":[[483,8],[791,8]]},"300":{"position":[[5164,9]]}}}],["disallow",{"_index":963,"t":{"252":{"position":[[244,9]]}}}],["disclos",{"_index":173,"t":{"171":{"position":[[65,9],[298,9]]}}}],["disclosur",{"_index":127,"t":{"167":{"position":[[139,11]]},"169":{"position":[[194,11],[491,10]]},"171":{"position":[[129,10]]},"236":{"position":[[839,11]]}}}],["discov",{"_index":163,"t":{"169":{"position":[[590,10]]}}}],["discoveri",{"_index":534,"t":{"212":{"position":[[447,9],[888,9]]},"254":{"position":[[826,11]]},"264":{"position":[[6816,9],[13390,9],[13426,10]]},"310":{"position":[[3252,10],[3298,9],[3485,9],[3711,9]]}}}],["discret",{"_index":198,"t":{"171":{"position":[[695,10]]}}}],["discuss",{"_index":172,"t":{"171":{"position":[[47,7],[216,10]]}}}],["display",{"_index":279,"t":{"179":{"position":[[821,7]]},"214":{"position":[[1591,7]]},"264":{"position":[[2449,7],[2476,7],[8445,7]]},"308":{"position":[[979,7]]},"318":{"position":[[332,7]]}}}],["doc",{"_index":1055,"t":{"264":{"position":[[66,4]]}}}],["docker",{"_index":19,"t":{"163":{"position":[[243,6],[339,6]]},"250":{"position":[[895,6],[1187,6],[1205,6],[1267,6],[1285,6]]},"308":{"position":[[1490,6]]},"310":{"position":[[2318,6],[2556,6],[2574,6]]}}}],["document",{"_index":202,"t":{"173":{"position":[[26,13]]},"224":{"position":[[742,14]]},"264":{"position":[[14320,14]]},"300":{"position":[[398,13],[1579,14],[5672,14],[6809,13]]},"308":{"position":[[2470,13]]},"312":{"position":[[387,13]]}}}],["doesn't",{"_index":1455,"t":{"290":{"position":[[2398,7]]},"292":{"position":[[545,7]]}}}],["domain",{"_index":491,"t":{"210":{"position":[[529,7],[655,7]]},"254":{"position":[[854,6],[964,6],[1064,6]]},"256":{"position":[[251,7]]},"264":{"position":[[1036,6],[1073,7],[1138,6],[1210,6],[2560,6],[2620,6],[15114,6],[15143,7],[15196,6],[15910,6],[15929,6],[16004,6],[16263,7]]},"268":{"position":[[469,6]]},"278":{"position":[[548,8]]},"282":{"position":[[469,8],[694,8]]},"284":{"position":[[646,8],[929,8],[1174,8],[1380,8]]},"286":{"position":[[147,6]]},"288":{"position":[[648,6],[1058,7],[2364,6]]},"296":{"position":[[407,8]]},"300":{"position":[[369,6]]},"302":{"position":[[1263,6]]},"308":{"position":[[1194,6]]},"310":{"position":[[3874,6]]},"320":{"position":[[22,6],[221,9]]}}}],["domain.com",{"_index":1243,"t":{"272":{"position":[[964,10]]},"274":{"position":[[819,10]]}}}],["domain.tld/gitlab",{"_index":1561,"t":{"302":{"position":[[1217,19]]}}}],["domain.tld/gitlab/oauth",{"_index":1565,"t":{"302":{"position":[[1366,24]]}}}],["domain.tld/oauth",{"_index":1564,"t":{"302":{"position":[[1332,16]]}}}],["domain=\"yourcompany.com",{"_index":844,"t":{"240":{"position":[[237,24]]},"242":{"position":[[1274,24]]}}}],["domain=git",{"_index":924,"t":{"248":{"position":[[159,24]]}}}],["feature/go",{"_index":926,"t":{"248":{"position":[[211,23]]}}}],["feder",{"_index":1398,"t":{"288":{"position":[[1222,10],[1661,10],[2048,10]]}}}],["field",{"_index":318,"t":{"182":{"position":[[23,5]]},"184":{"position":[[323,5]]},"186":{"position":[[23,5],[221,5]]},"188":{"position":[[23,5]]},"190":{"position":[[100,5]]},"194":{"position":[[23,5]]},"196":{"position":[[23,5]]},"198":{"position":[[23,5]]},"200":{"position":[[118,5]]},"202":{"position":[[116,5]]},"204":{"position":[[23,5]]},"206":{"position":[[23,5]]},"210":{"position":[[1087,5]]},"212":{"position":[[23,5]]},"214":{"position":[[79,5]]},"220":{"position":[[161,5]]},"222":{"position":[[85,5]]},"224":{"position":[[151,5]]},"226":{"position":[[297,5]]},"228":{"position":[[171,5]]},"230":{"position":[[95,5]]},"264":{"position":[[2916,7]]},"300":{"position":[[2235,6],[3251,5]]},"304":{"position":[[319,6]]},"308":{"position":[[3444,5]]},"314":{"position":[[135,6]]}}}],["file",{"_index":37,"t":{"163":{"position":[[506,4],[563,4],[804,5]]},"169":{"position":[[428,5]]},"173":{"position":[[525,4],[698,4]]},"175":{"position":[[52,4],[136,4]]},"177":{"position":[[362,5]]},"202":{"position":[[310,4]]},"206":{"position":[[174,4]]},"220":{"position":[[355,4]]},"224":{"position":[[254,5],[350,5]]},"250":{"position":[[910,5]]},"258":{"position":[[89,4],[248,4]]},"262":{"position":[[57,4],[242,4]]},"264":{"position":[[430,4],[474,4],[823,4],[839,4],[1022,4],[2530,4],[4835,4],[4892,5],[5428,5],[5491,4],[5593,5],[5716,5],[5776,5],[5868,4],[6058,4],[6094,4],[8272,4],[14010,4],[14042,4],[14345,4],[14377,4],[14551,7],[14576,5]]},"266":{"position":[[123,5],[138,4],[496,4],[527,7],[579,5],[721,5],[861,5],[1180,5]]},"268":{"position":[[353,4]]},"270":{"position":[[106,4],[165,4],[205,4]]},"276":{"position":[[465,11],[638,4],[658,4]]},"282":{"position":[[283,4]]},"284":{"position":[[2321,4]]},"288":{"position":[[1125,4],[2802,4],[2871,4],[2900,4]]},"290":{"position":[[1169,5]]},"308":{"position":[[3025,4],[4353,4]]},"310":{"position":[[2329,5],[2387,5],[2458,4],[2610,4]]},"314":{"position":[[552,5]]}}}],["file/client_secret_fil",{"_index":278,"t":{"179":{"position":[[779,23]]}}}],["file/jwt_key_fil",{"_index":302,"t":{"179":{"position":[[1167,17]]}}}],["file/provider_ca_fil",{"_index":282,"t":{"179":{"position":[[868,22]]}}}],["file://$pwd/#/stat",{"_index":1597,"t":{"308":{"position":[[1311,21]]}}}],["file:///var/www/stat",{"_index":1206,"t":{"266":{"position":[[540,23]]}}}],["file:///var/www/static/#/stat",{"_index":1210,"t":{"266":{"position":[[890,32]]}}}],["file://host/pathif",{"_index":699,"t":{"228":{"position":[[1349,18]]}}}],["file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1134,"t":{"264":{"position":[[6179,42]]},"310":{"position":[[2781,41]]}}}],["file=/path/to/cert.key",{"_index":843,"t":{"240":{"position":[[107,23],[346,22]]}}}],["file=/path/to/cert.pem",{"_index":842,"t":{"240":{"position":[[70,22],[311,22]]}}}],["file=/path/to/fil",{"_index":1727,"t":{"320":{"position":[[132,18]]}}}],["filebas",{"_index":693,"t":{"228":{"position":[[1167,9]]}}}],["filecontain",{"_index":573,"t":{"214":{"position":[[416,14]]}}}],["filenam",{"_index":1123,"t":{"264":{"position":[[5475,8],[5610,9]]},"270":{"position":[[131,8]]}}}],["fill",{"_index":1386,"t":{"288":{"position":[[366,4]]},"304":{"position":[[288,4]]},"308":{"position":[[2120,4],[2313,4]]},"314":{"position":[[39,4]]}}}],["filter",{"_index":1533,"t":{"300":{"position":[[4741,6],[6694,6]]},"302":{"position":[[420,10]]}}}],["find",{"_index":795,"t":{"236":{"position":[[1387,4]]},"244":{"position":[[46,4]]},"246":{"position":[[110,4]]},"290":{"position":[[2365,4]]},"292":{"position":[[512,4]]},"310":{"position":[[168,4]]}}}],["firewal",{"_index":1688,"t":{"310":{"position":[[3128,8]]}}}],["first",{"_index":1294,"t":{"278":{"position":[[1836,5],[2121,5]]},"308":{"position":[[1690,6]]},"310":{"position":[[758,6]]}}}],["fix",{"_index":165,"t":{"169":{"position":[[632,3]]},"171":{"position":[[55,5],[244,5],[381,5],[428,3],[472,3],[585,5],[645,3]]},"208":{"position":[[501,5]]},"210":{"position":[[104,5],[268,5]]},"244":{"position":[[215,3]]}}}],["flag",{"_index":227,"t":{"173":{"position":[[534,6]]},"175":{"position":[[166,5],[207,5]]},"177":{"position":[[98,4]]},"179":{"position":[[1381,5]]},"236":{"position":[[2898,5],[2929,5],[3142,5],[3166,5],[3229,5]]},"264":{"position":[[1437,4],[1963,4]]},"268":{"position":[[412,4],[476,4]]},"272":{"position":[[626,5]]},"274":{"position":[[362,5]]},"276":{"position":[[397,5]]},"278":{"position":[[1093,4],[1688,5]]},"288":{"position":[[2407,5],[2629,5],[2675,4],[2940,5]]},"290":{"position":[[2084,5]]},"296":{"position":[[621,5],[767,4]]},"298":{"position":[[1122,5]]}}}],["flags/opt",{"_index":249,"t":{"179":{"position":[[14,13]]}}}],["flaw",{"_index":1191,"t":{"264":{"position":[[15641,6]]}}}],["flight",{"_index":190,"t":{"171":{"position":[[541,6]]}}}],["flow",{"_index":542,"t":{"212":{"position":[[625,5]]},"236":{"position":[[1461,4]]},"300":{"position":[[2315,4],[2329,4]]}}}],["flush",{"_index":251,"t":{"179":{"position":[[127,5]]},"228":{"position":[[2143,8]]},"264":{"position":[[3149,5],[3188,8]]}}}],["flushinterv",{"_index":719,"t":{"228":{"position":[[2084,13],[2107,13]]}}}],["follow",{"_index":248,"t":{"179":{"position":[[4,9]]},"234":{"position":[[256,9]]},"236":{"position":[[246,10]]},"242":{"position":[[652,8]]},"244":{"position":[[125,6]]},"246":{"position":[[55,6]]},"250":{"position":[[312,9],[630,9]]},"252":{"position":[[38,9]]},"256":{"position":[[107,9]]},"272":{"position":[[668,8]]},"274":{"position":[[404,8]]},"276":{"position":[[439,8]]},"278":{"position":[[2788,9]]},"284":{"position":[[165,9]]},"288":{"position":[[1368,6],[1553,9],[1949,6],[2203,6]]},"292":{"position":[[210,6]]},"296":{"position":[[611,9],[757,9],[1733,9]]},"298":{"position":[[404,9]]},"300":{"position":[[1410,9],[5784,8],[6959,9]]},"302":{"position":[[201,6],[485,9],[584,6],[895,9],[1090,9]]},"306":{"position":[[52,6]]},"308":{"position":[[409,9],[939,9],[1585,9],[3039,10],[4715,9]]},"310":{"position":[[1530,9]]},"314":{"position":[[397,9]]},"316":{"position":[[334,9]]},"318":{"position":[[213,9]]},"322":{"position":[[0,6]]}}}],["foo",{"_index":676,"t":{"228":{"position":[[560,7],[597,4]]}}}],["foo/$1",{"_index":687,"t":{"228":{"position":[[988,7]]}}}],["foo/abc/123",{"_index":690,"t":{"228":{"position":[[1037,12]]}}}],["footer",{"_index":1102,"t":{"264":{"position":[[3464,6],[3492,6],[3534,7]]}}}],["forc",{"_index":762,"t":{"234":{"position":[[784,5]]},"264":{"position":[[253,7],[1084,5],[1676,5],[3246,5],[3294,5],[3317,5]]}}}],["forcestshead",{"_index":1351,"t":{"282":{"position":[[1023,15]]},"284":{"position":[[1781,15]]}}}],["forego",{"_index":182,"t":{"171":{"position":[[391,6]]}}}],["fork",{"_index":905,"t":{"244":{"position":[[294,5]]},"248":{"position":[[11,5]]}}}],["form",{"_index":506,"t":{"210":{"position":[[852,4]]},"264":{"position":[[2466,4],[2510,4]]},"312":{"position":[[318,4]]}}}],["format",{"_index":219,"t":{"173":{"position":[[390,7],[469,6],[912,7]]},"175":{"position":[[70,6]]},"177":{"position":[[148,7],[285,6]]},"206":{"position":[[91,6],[186,6]]},"210":{"position":[[965,6]]},"252":{"position":[[1060,7]]},"264":{"position":[[187,7],[329,6],[3782,9],[4289,9],[5929,6],[6106,6],[11200,6],[12949,7],[13927,6]]},"270":{"position":[[602,6],[641,7]]},"272":{"position":[[173,7],[556,6],[619,6],[644,6]]},"274":{"position":[[54,7],[289,6],[355,6],[380,6]]},"276":{"position":[[112,7],[227,6],[323,6],[390,6],[415,6]]},"296":{"position":[[1137,9]]},"310":{"position":[[1028,6],[2532,6]]}}}],["forward",{"_index":108,"t":{"165":{"position":[[599,9]]},"173":{"position":[[404,7]]},"236":{"position":[[2179,9]]},"264":{"position":[[7235,9],[7519,9],[7537,9],[7559,9],[7984,9],[8002,9],[8022,9],[8044,9],[9295,9],[11462,9],[13082,9]]},"266":{"position":[[279,7],[462,9]]},"284":{"position":[[339,9]]},"298":{"position":[[1291,9]]}}}],["forwardauth",{"_index":1332,"t":{"282":{"position":[[15,11],[1137,12]]},"284":{"position":[[96,11],[1904,12],[2069,12]]}}}],["found",{"_index":135,"t":{"169":{"position":[[29,5],[243,5]]},"224":{"position":[[718,5]]},"236":{"position":[[1556,5]]},"240":{"position":[[1053,5]]},"264":{"position":[[14296,5]]},"308":{"position":[[339,5]]}}}],["fraction",{"_index":402,"t":{"192":{"position":[[189,8]]}}}],["fragment",{"_index":1209,"t":{"266":{"position":[[759,8],[808,8]]}}}],["framedeni",{"_index":1355,"t":{"282":{"position":[[1109,10]]},"284":{"position":[[1867,10]]}}}],["freeform",{"_index":1392,"t":{"288":{"position":[[571,9]]}}}],["fromenv",{"_index":455,"t":{"202":{"position":[[197,7],[212,7]]},"220":{"position":[[242,7],[257,7]]}}}],["fromfil",{"_index":456,"t":{"202":{"position":[[265,8],[281,8]]},"220":{"position":[[310,8],[326,8]]}}}],["full",{"_index":122,"t":{"167":{"position":[[82,4]]},"272":{"position":[[1362,4]]},"274":{"position":[[1434,4]]},"300":{"position":[[4365,5],[5174,4],[6019,5]]}}}],["function",{"_index":904,"t":{"244":{"position":[[263,14]]},"284":{"position":[[20,13]]}}}],["further",{"_index":634,"t":{"222":{"position":[[446,7]]}}}],["futur",{"_index":547,"t":{"212":{"position":[[757,6]]},"288":{"position":[[1281,6]]},"308":{"position":[[4219,6]]}}}],["gap",{"_index":1160,"t":{"264":{"position":[[12478,3]]}}}],["gcp",{"_index":1405,"t":{"288":{"position":[[1770,4],[2025,4]]}}}],["gener",{"_index":237,"t":{"175":{"position":[[36,8]]},"260":{"position":[[3,8]]},"300":{"position":[[7112,8]]},"308":{"position":[[2768,7],[3571,8]]},"310":{"position":[[1035,9]]},"318":{"position":[[381,9],[439,9]]}}}],["get",{"_index":1581,"t":{"308":{"position":[[477,7]]}}}],["git",{"_index":920,"t":{"248":{"position":[[84,3]]}}}],["git@github.com:/oauth2",{"_index":921,"t":{"248":{"position":[[94,33]]}}}],["gitea",{"_index":1374,"t":{"286":{"position":[[355,5]]},"318":{"position":[[41,5],[394,5],[452,5],[489,5],[554,5],[624,5]]}}}],["github",{"_index":142,"t":{"169":{"position":[[136,7],[729,6]]},"171":{"position":[[7,6],[109,6]]},"179":{"position":[[1302,7]]},"216":{"position":[[175,7]]},"244":{"position":[[31,7]]},"264":{"position":[[3544,6],[3612,6],[3711,6],[3810,6],[3931,6]]},"286":{"position":[[72,6],[246,6]]},"296":{"position":[[172,6],[429,6],[628,6],[788,6],[801,6],[1069,6],[1396,6],[1612,6],[1692,6],[1801,6],[1871,6],[1946,6]]}}}],["github.com/dexidp/dex",{"_index":1580,"t":{"308":{"position":[[447,21]]}}}],["github.com/oauth2",{"_index":13,"t":{"163":{"position":[[132,17]]}}}],["githubc",{"_index":585,"t":{"214":{"position":[[921,7]]}}}],["githubconfig",{"_index":583,"t":{"214":{"position":[[852,12],[879,12]]}}}],["githubopt",{"_index":584,"t":{"214":{"position":[[865,13]]}}}],["gitlab",{"_index":310,"t":{"179":{"position":[[1310,7]]},"214":{"position":[[1008,6]]},"216":{"position":[[183,7]]},"264":{"position":[[4069,6],[4177,6],[4368,6],[15856,7]]},"286":{"position":[[262,6]]},"302":{"position":[[43,6],[71,6],[193,7],[739,6],[915,6],[1060,7],[1149,6],[1182,6]]}}}],["gitlab.com",{"_index":1547,"t":{"302":{"position":[[166,10]]}}}],["gitlab.domain.tld",{"_index":1563,"t":{"302":{"position":[[1276,19]]}}}],["gitlabconfig",{"_index":586,"t":{"214":{"position":[[939,12],[966,12]]}}}],["gitlabopt",{"_index":587,"t":{"214":{"position":[[952,13]]}}}],["give",{"_index":657,"t":{"226":{"position":[[409,5]]},"288":{"position":[[1518,4]]}}}],["given",{"_index":655,"t":{"226":{"position":[[196,5]]},"264":{"position":[[2635,5],[4267,5],[4568,5],[8503,5],[12830,5],[14179,5],[14846,5],[14945,5],[15375,5]]},"300":{"position":[[5045,5]]}}}],["gke",{"_index":1108,"t":{"264":{"position":[[4801,3]]},"288":{"position":[[1879,4]]}}}],["global",{"_index":1499,"t":{"298":{"position":[[1104,7]]}}}],["gmail",{"_index":1411,"t":{"288":{"position":[[2358,5]]}}}],["go",{"_index":9,"t":{"163":{"position":[[86,2],[121,2]]},"173":{"position":[[398,5]]},"214":{"position":[[1805,2]]},"224":{"position":[[655,2]]},"240":{"position":[[947,2]]},"244":{"position":[[481,2]]},"246":{"position":[[38,2],[89,2],[115,2]]},"250":{"position":[[95,3],[207,5],[525,5]]},"264":{"position":[[516,2],[8399,2],[14232,2]]},"290":{"position":[[20,2],[1072,2]]},"308":{"position":[[440,2]]},"310":{"position":[[2885,2]]}}}],["googl",{"_index":311,"t":{"179":{"position":[[1318,6]]},"198":{"position":[[108,6],[157,6]]},"214":{"position":[[1094,6],[1530,8]]},"216":{"position":[[191,7]]},"242":{"position":[[73,6],[269,6]]},"264":{"position":[[4418,6],[4448,6],[4492,6],[4547,6],[4593,6],[4679,6],[8251,6],[15864,6]]},"286":{"position":[[63,8],[211,6]]},"288":{"position":[[4,7],[1036,6],[2388,6],[2616,6],[2912,6]]}}}],["google'",{"_index":1407,"t":{"288":{"position":[[1956,8]]}}}],["googleconfig",{"_index":588,"t":{"214":{"position":[[1025,12],[1052,12]]}}}],["googleopt",{"_index":589,"t":{"214":{"position":[[1038,13]]}}}],["gopath/github.com/dexidp/dex",{"_index":1589,"t":{"308":{"position":[[812,30]]}}}],["goroot/bin",{"_index":17,"t":{"163":{"position":[[209,13]]}}}],["govern",{"_index":1642,"t":{"310":{"position":[[41,11],[69,10]]}}}],["grab",{"_index":1691,"t":{"310":{"position":[[3360,4]]}}}],["grant",{"_index":1428,"t":{"290":{"position":[[690,5]]},"300":{"position":[[2359,6]]},"308":{"position":[[2792,5],[4095,5]]}}}],["graph",{"_index":1426,"t":{"290":{"position":[[567,6]]}}}],["graphdefault",{"_index":374,"t":{"186":{"position":[[283,12]]}}}],["graphgroupfield",{"_index":370,"t":{"186":{"position":[[161,15],[184,15]]}}}],["grep",{"_index":49,"t":{"163":{"position":[[658,4]]}}}],["group",{"_index":371,"t":{"186":{"position":[[215,5],[256,6]]},"196":{"position":[[46,5],[61,5],[107,5]]},"198":{"position":[[46,5],[61,6],[115,5]]},"204":{"position":[[46,6],[62,5],[118,5]]},"212":{"position":[[1246,8]]},"214":{"position":[[2456,5]]},"256":{"position":[[183,6]]},"264":{"position":[[4076,5],[4139,6],[4499,5],[4554,5],[4977,5],[5001,6],[6922,6],[6977,6],[6984,8],[8012,7],[11854,7],[14777,5],[14832,5]]},"288":{"position":[[1043,6],[2584,5],[2623,5],[2695,6],[2756,7],[3006,5]]},"290":{"position":[[434,5],[625,5]]},"292":{"position":[[86,5]]},"298":{"position":[[332,6],[372,9],[1019,5],[1070,5],[1098,5],[1157,6],[1209,6],[1301,6],[1348,6],[1408,5],[1470,5],[1532,6]]},"300":{"position":[[610,5],[1178,6],[1218,9],[3986,7],[4092,5],[5448,6],[5488,5],[5549,6],[5630,6],[5742,5],[5833,6],[5878,5],[5926,6],[5975,6],[6025,5],[6100,5],[6137,5],[6255,6],[6382,6],[6452,5],[6539,5],[6562,6],[6579,5],[6704,5],[6772,7],[6870,6],[7100,7]]},"302":{"position":[[857,5],[995,6]]},"308":{"position":[[2958,6],[4067,5]]}}}],["group,otherwis",{"_index":601,"t":{"214":{"position":[[1514,15]]}}}],["group.read.al",{"_index":1427,"t":{"290":{"position":[[642,15]]}}}],["group/allowed_group",{"_index":298,"t":{"179":{"position":[[1095,20]]}}}],["group=\"mygroup,myothergroup",{"_index":1558,"t":{"302":{"position":[[922,29]]}}}],["group=/groupnam",{"_index":1541,"t":{"300":{"position":[[6655,16]]}}}],["group=/oauth2/callback",{"_index":1710,"t":{"314":{"position":[[611,24]]}}}],["headers.default",{"_index":447,"t":{"200":{"position":[[456,16]]}}}],["headers/pass_user_head",{"_index":263,"t":{"179":{"position":[[390,25]]}}}],["headers/skip_auth_strip_head",{"_index":273,"t":{"179":{"position":[[680,31]]}}}],["headershould",{"_index":442,"t":{"200":{"position":[[346,12]]}}}],["headervalu",{"_index":378,"t":{"190":{"position":[[13,12]]},"200":{"position":[[540,13]]},"202":{"position":[[21,11]]},"220":{"position":[[26,12]]}}}],["health",{"_index":967,"t":{"252":{"position":[[384,6]]},"264":{"position":[[8629,6],[8716,6],[8823,6]]}}}],["helm",{"_index":34,"t":{"163":{"position":[[446,6]]}}}],["here",{"_index":915,"t":{"246":{"position":[[92,5],[155,5]]},"310":{"position":[[344,5]]}}}],["hex",{"_index":772,"t":{"236":{"position":[[406,3]]}}}],["histor",{"_index":744,"t":{"234":{"position":[[103,13]]}}}],["hit",{"_index":1387,"t":{"288":{"position":[[408,3]]},"290":{"position":[[658,3],[1276,7]]}}}],["hold",{"_index":568,"t":{"214":{"position":[[33,5],[546,5],[631,5],[710,5],[803,5],[892,5],[979,5],[1065,5],[1145,5],[1275,5]]}}}],["homepag",{"_index":1703,"t":{"314":{"position":[[57,9]]}}}],["host",{"_index":253,"t":{"179":{"position":[[162,4]]},"228":{"position":[[2301,4]]},"242":{"position":[[1006,4],[1011,6]]},"264":{"position":[[1168,4],[7889,4],[7923,4]]},"272":{"position":[[959,4],[992,4]]},"274":{"position":[[475,9],[814,4],[847,4]]},"278":{"position":[[370,4],[375,6],[708,4],[713,6]]},"302":{"position":[[185,7],[1053,6],[1175,6]]},"314":{"position":[[606,4]]},"318":{"position":[[47,4],[495,4],[560,4],[630,4]]}}}],["host(`a",{"_index":1336,"t":{"282":{"position":[[342,8],[537,8]]},"284":{"position":[[432,8],[726,8],[1013,8]]}}}],["host(`oauth.example.com",{"_index":1368,"t":{"284":{"position":[[1255,26]]}}}],["host>/api/v3",{"_index":1481,"t":{"296":{"position":[[1953,13]]}}}],["host>/auth/realms//login/oauth/access_token",{"_index":1480,"t":{"296":{"position":[[1878,31]]}}}],["host>/login/oauth/author",{"_index":1479,"t":{"296":{"position":[[1808,28]]}}}],["host>/oauth2/callback",{"_index":1718,"t":{"318":{"position":[[144,21],[298,22]]}}}],["host>/realms/:::/sign_in",{"_index":1148,"t":{"264":{"position":[[9011,18]]}}}],["oauth2_proxy_",{"_index":1213,"t":{"268":{"position":[[93,14]]}}}],["oauth2_proxy_cookie_secret",{"_index":1217,"t":{"268":{"position":[[425,27]]}}}],["oauth2_proxy_email_domain",{"_index":1218,"t":{"268":{"position":[[489,27]]}}}],["oauth2_proxy_jwt_key",{"_index":1668,"t":{"310":{"position":[[1299,24]]}}}],["oauth2_proxy_jwt_key_file=/etc/ssl/private/jwt_signing_key.pem",{"_index":1686,"t":{"310":{"position":[[2672,62]]}}}],["oauth_proxi",{"_index":1070,"t":{"264":{"position":[[1500,11]]}}}],["obtain",{"_index":1192,"t":{"264":{"position":[[15664,9]]}}}],["occur",{"_index":1275,"t":{"276":{"position":[[187,5]]}}}],["offici",{"_index":31,"t":{"163":{"position":[[417,8]]},"244":{"position":[[472,8]]}}}],["oidc",{"_index":307,"t":{"179":{"position":[[1278,5]]},"204":{"position":[[229,4]]},"212":{"position":[[442,4],[883,4]]},"214":{"position":[[1174,4],[1208,4]]},"216":{"position":[[218,5],[259,5]]},"254":{"position":[[481,4],[667,4],[780,4],[889,4]]},"264":{"position":[[6298,4],[6410,4],[6455,4],[6574,4],[6614,4],[6649,4],[6740,4],[6761,4],[6811,4],[6840,4],[6870,4],[6917,4],[6948,4],[6995,4],[7028,4],[7069,4],[7409,4],[8163,4],[13385,4],[13412,4],[13469,4],[14997,4],[15875,4]]},"290":{"position":[[1560,4],[1868,4]]},"298":{"position":[[60,4]]},"300":{"position":[[20,4],[161,4],[253,4],[1457,4],[1598,4],[1857,4],[2069,4],[4043,4],[4340,4],[5970,4]]},"302":{"position":[[1126,4]]},"308":{"position":[[244,6],[374,4],[965,4],[996,4],[1105,4],[1549,4]]},"310":{"position":[[16,4],[1673,4],[3247,4],[3293,4],[3480,4],[3559,4],[3662,4],[3706,4],[3805,4]]}}}],["oidc\"redirect_url",{"_index":1606,"t":{"308":{"position":[[3061,18],[4388,18]]}}}],["oidc_issuer_url",{"_index":1450,"t":{"290":{"position":[[2036,16]]},"308":{"position":[[3372,15]]}}}],["oidcconfig",{"_index":590,"t":{"214":{"position":[[1111,10],[1134,10]]}}}],["oidcopt",{"_index":591,"t":{"214":{"position":[[1122,11]]}}}],["ok",{"_index":53,"t":{"163":{"position":[[697,2]]},"252":{"position":[[227,2],[340,2],[421,2]]}}}],["okoauth2",{"_index":50,"t":{"163":{"position":[[663,8]]}}}],["okta",{"_index":1579,"t":{"308":{"position":[[315,5],[1526,5],[1567,5],[1612,4],[2465,4],[3708,4],[3834,4],[4309,4],[4482,4]]}}}],["old",{"_index":796,"t":{"236":{"position":[[1530,3]]},"264":{"position":[[5708,3],[5768,3]]}}}],["omit",{"_index":1200,"t":{"264":{"position":[[16195,4]]}}}],["on",{"_index":98,"t":{"165":{"position":[[354,3]]},"169":{"position":[[674,4]]},"210":{"position":[[95,3],[259,3],[614,3],[1458,3]]},"220":{"position":[[101,3]]},"232":{"position":[[187,3]]},"260":{"position":[[39,3]]},"264":{"position":[[479,4],[9284,4],[13330,3]]},"272":{"position":[[313,3]]},"310":{"position":[[2206,3]]},"316":{"position":[[683,3]]},"320":{"position":[[156,3]]}}}],["onc",{"_index":183,"t":{"171":{"position":[[421,4]]},"288":{"position":[[3097,4]]},"310":{"position":[[2843,4]]}}}],["onlyvalu",{"_index":519,"t":{"210":{"position":[[1436,10]]}}}],["open",{"_index":139,"t":{"169":{"position":[[113,4]]},"244":{"position":[[65,4],[85,7],[328,4],[372,4]]},"250":{"position":[[34,4],[1099,4],[1445,4]]},"288":{"position":[[464,4]]},"292":{"position":[[0,4]]},"308":{"position":[[106,4]]}}}],["openid",{"_index":522,"t":{"212":{"position":[[80,6],[986,6]]},"264":{"position":[[6676,6]]},"286":{"position":[[297,6],[549,6]]},"300":{"position":[[993,7],[2158,7]]},"302":{"position":[[276,7]]},"308":{"position":[[0,6],[220,6],[2628,6]]},"310":{"position":[[862,6],[906,6]]}}}],["openssl",{"_index":1019,"t":{"260":{"position":[[78,7],[288,7]]},"310":{"position":[[1104,7]]}}}],["oppos",{"_index":1562,"t":{"302":{"position":[[1240,7]]}}}],["option",{"_index":63,"t":{"163":{"position":[[823,8]]},"173":{"position":[[164,7],[317,8],[373,7]]},"175":{"position":[[218,7],[263,7]]},"177":{"position":[[37,7],[256,7],[379,7],[437,7]]},"179":{"position":[[1233,8],[1251,6],[1369,7],[1480,7]]},"184":{"position":[[53,8],[77,7],[222,7]]},"190":{"position":[[246,8]]},"192":{"position":[[180,8]]},"200":{"position":[[416,6]]},"202":{"position":[[467,8]]},"208":{"position":[[186,6],[316,7]]},"210":{"position":[[1187,10],[1316,10]]},"216":{"position":[[101,7],[115,7]]},"224":{"position":[[102,8]]},"228":{"position":[[1585,6],[2039,6]]},"236":{"position":[[3337,6],[3432,7]]},"254":{"position":[[985,6]]},"258":{"position":[[48,8],[148,7]]},"262":{"position":[[169,6]]},"264":{"position":[[0,6],[52,9],[1057,8],[1652,8],[1883,11],[10776,6],[10871,7],[12680,7],[15437,10],[15740,6],[15917,7],[16362,7]]},"266":{"position":[[61,6]]},"280":{"position":[[5,6],[37,6]]},"284":{"position":[[175,7],[2326,6]]},"288":{"position":[[1066,11],[2071,7]]},"296":{"position":[[276,8],[362,7]]},"298":{"position":[[1050,8]]},"300":{"position":[[391,6],[448,9],[527,9],[591,9],[4057,7],[4874,7],[5219,7],[5532,6],[5988,6],[6037,6],[6143,6],[6400,8],[6638,6],[6743,6],[7066,8]]},"302":{"position":[[905,7]]},"308":{"position":[[1721,10],[2023,6],[2452,8]]},"310":{"position":[[1540,8],[2132,7],[3495,7]]},"314":{"position":[[407,8],[530,7],[706,7]]},"316":{"position":[[344,8],[584,7]]},"318":{"position":[[223,7]]}}}],["order",{"_index":1014,"t":{"258":{"position":[[109,5]]}}}],["org",{"_index":413,"t":{"194":{"position":[[46,3],[57,3],[478,3]]},"264":{"position":[[3551,3],[4037,3]]},"296":{"position":[[534,3],[635,7],[795,4],[1559,3]]}}}],["organ",{"_index":1471,"t":{"296":{"position":[[259,12],[580,12],[713,12]]}}}],["organis",{"_index":414,"t":{"194":{"position":[[101,12]]},"264":{"position":[[3597,12]]},"296":{"position":[[678,12]]}}}],["organization'",{"_index":490,"t":{"210":{"position":[[514,14]]}}}],["organizationdefault",{"_index":480,"t":{"210":{"position":[[6,20]]}}}],["orgname/repo",{"_index":1104,"t":{"264":{"position":[[3795,12]]},"296":{"position":[[1150,12]]}}}],["orgname/repo=accesslevel",{"_index":1105,"t":{"264":{"position":[[4302,25]]}}}],["origin",{"_index":925,"t":{"248":{"position":[[204,6]]},"288":{"position":[[632,7]]},"308":{"position":[[146,10]]}}}],["os,base64",{"_index":1022,"t":{"260":{"position":[[125,10]]}}}],["otherwis",{"_index":479,"t":{"208":{"position":[[751,10]]},"212":{"position":[[631,10]]},"230":{"position":[[232,9]]},"254":{"position":[[992,9]]},"308":{"position":[[1903,10]]}}}],["out",{"_index":974,"t":{"252":{"position":[[691,3]]},"254":{"position":[[17,4],[325,3]]},"308":{"position":[[2125,3],[2318,3]]},"310":{"position":[[1156,3]]}}}],["output",{"_index":1219,"t":{"270":{"position":[[34,6],[81,6]]},"272":{"position":[[142,6]]},"274":{"position":[[23,6]]},"276":{"position":[[80,6]]}}}],["outsid",{"_index":1216,"t":{"268":{"position":[[326,7]]},"276":{"position":[[193,7]]},"288":{"position":[[2014,7]]}}}],["overrid",{"_index":654,"t":{"226":{"position":[[178,9]]},"264":{"position":[[8465,8],[9938,8]]},"306":{"position":[[183,8]]}}}],["overridden",{"_index":472,"t":{"208":{"position":[[371,10]]},"210":{"position":[[245,10],[388,11],[1279,11]]}}}],["override_speci",{"_index":1049,"t":{"260":{"position":[[711,16]]}}}],["overwrit",{"_index":1015,"t":{"258":{"position":[[161,9],[224,9]]}}}],["packag",{"_index":934,"t":{"250":{"position":[[106,8]]},"322":{"position":[[37,7]]}}}],["pad",{"_index":774,"t":{"236":{"position":[[479,9]]}}}],["page",{"_index":200,"t":{"173":{"position":[[12,4],[143,4],[190,4],[331,4]]},"214":{"position":[[1654,5]]},"252":{"position":[[656,5],[695,4],[1282,5]]},"254":{"position":[[329,4]]},"264":{"position":[[2403,4],[3357,5],[8538,4],[12366,5],[13567,4]]},"290":{"position":[[506,4],[1091,4],[1205,4]]}}}],["pair",{"_index":775,"t":{"236":{"position":[[533,4]]},"264":{"position":[[2924,5]]}}}],["pane",{"_index":1382,"t":{"288":{"position":[[237,5],[284,5],[325,5],[432,5]]},"300":{"position":[[2751,4]]}}}],["parallel",{"_index":1081,"t":{"264":{"position":[[2173,8]]}}}],["paramet",{"_index":323,"t":{"182":{"position":[[83,9]]},"208":{"position":[[81,9],[280,10],[347,9],[476,9],[654,9]]},"210":{"position":[[36,9],[198,9],[366,9],[1159,10]]},"214":{"position":[[1965,10]]},"226":{"position":[[82,10],[202,9],[600,9]]},"254":{"position":[[364,10]]},"256":{"position":[[123,11]]},"266":{"position":[[258,10],[1096,10],[1121,9]]},"278":{"position":[[3773,10]]},"300":{"position":[[7081,10]]}}}],["part",{"_index":328,"t":{"184":{"position":[[149,4]]},"278":{"position":[[1796,6],[2177,4],[2455,4]]}}}],["particularli",{"_index":1215,"t":{"268":{"position":[[286,12]]}}}],["pass",{"_index":72,"t":{"165":{"position":[[12,7]]},"179":{"position":[[157,4],[312,4],[344,4],[380,4],[416,4]]},"208":{"position":[[103,6],[253,6],[560,6],[677,6]]},"210":{"position":[[58,6],[216,6]]},"212":{"position":[[1593,4]]},"214":{"position":[[1988,6]]},"226":{"position":[[93,6],[212,6]]},"230":{"position":[[154,4]]},"232":{"position":[[276,6]]},"236":{"position":[[2154,4]]},"264":{"position":[[644,7],[7145,4],[7170,4],[7193,4],[7373,4],[7404,4],[7474,4],[7495,4],[7698,7],[7836,4],[7858,4],[7884,4],[7906,4],[7954,4],[7977,4],[11992,4]]},"266":{"position":[[71,4]]},"278":{"position":[[990,4],[1301,4],[1330,4]]},"288":{"position":[[2643,4]]},"290":{"position":[[2410,6]]},"292":{"position":[[557,6]]},"300":{"position":[[3100,4]]},"308":{"position":[[1795,6]]},"310":{"position":[[2283,4]]},"314":{"position":[[388,4]]},"316":{"position":[[325,4]]},"318":{"position":[[204,4]]}}}],["passhosthead",{"_index":725,"t":{"228":{"position":[[2235,14],[2255,14]]}}}],["password",{"_index":394,"t":{"190":{"position":[[529,8]]},"202":{"position":[[750,8]]},"250":{"position":[[1381,8],[1393,9]]},"264":{"position":[[603,8],[623,8],[2495,8],[9860,8],[9882,9],[9951,8],[10007,8],[10038,9],[10098,9],[10128,8]]}}}],["password/basic_auth_password",{"_index":271,"t":{"179":{"position":[[635,28]]}}}],["patch",{"_index":194,"t":{"171":{"position":[[601,7]]}}}],["path",{"_index":238,"t":{"175":{"position":[[123,4]]},"184":{"position":[[536,4]]},"198":{"position":[[251,4]]},"202":{"position":[[300,4]]},"206":{"position":[[150,4]]},"214":{"position":[[1698,5]]},"220":{"position":[[345,4]]},"228":{"position":[[140,4],[165,5],[296,4],[308,4],[407,5],[592,4],[622,4],[671,4],[721,4],[824,4],[877,4],[949,4],[1199,5],[1378,4]]},"230":{"position":[[171,4],[397,4],[422,5]]},"252":{"position":[[279,6]]},"264":{"position":[[1007,4],[1637,4],[1668,4],[2295,4],[2354,4],[3037,4],[3073,5],[3131,5],[4632,4],[6070,4],[8291,5],[8572,4],[8766,4],[8961,4],[12805,5],[12943,5],[14022,4],[14357,4],[14559,5],[14653,4]]},"266":{"position":[[501,5],[703,4],[852,4],[1256,4]]},"274":{"position":[[177,8],[1166,4]]},"288":{"position":[[2888,4]]},"300":{"position":[[6031,5]]}}}],["path.eg",{"_index":695,"t":{"228":{"position":[[1257,8]]}}}],["path/to/cert.key",{"_index":880,"t":{"242":{"position":[[869,18]]}}}],["path/to/cert.pem",{"_index":878,"t":{"242":{"position":[[830,18]]}}}],["path/to/existing/config.cfg",{"_index":242,"t":{"177":{"position":[[204,29],[558,29]]}}}],["path/to/new/config.yaml",{"_index":247,"t":{"177":{"position":[[523,25]]}}}],["path/to/sit",{"_index":1305,"t":{"278":{"position":[[2623,15]]}}}],["path_regex",{"_index":1057,"t":{"264":{"position":[[195,10],[13015,10],[13029,12]]}}}],["pathprefix",{"_index":1364,"t":{"284":{"position":[[491,16],[1285,16]]}}}],["pathprefix(`/no",{"_index":1366,"t":{"284":{"position":[[760,15]]}}}],["pathprefix(`/oauth2",{"_index":1342,"t":{"282":{"position":[[592,23]]},"284":{"position":[[1072,23]]}}}],["pattern",{"_index":493,"t":{"210":{"position":[[561,8],[978,8]]},"226":{"position":[[259,7],[379,7],[396,7]]},"228":{"position":[[449,7]]}}}],["pem",{"_index":461,"t":{"206":{"position":[[87,3],[182,3]]},"264":{"position":[[5925,3],[6102,3]]},"310":{"position":[[1023,4],[2383,3],[2528,3]]}}}],["per",{"_index":1059,"t":{"264":{"position":[[484,3],[2079,3],[2133,3]]},"320":{"position":[[166,3]]}}}],["perform",{"_index":1532,"t":{"300":{"position":[[3849,7]]},"308":{"position":[[397,7],[1573,7]]}}}],["period",{"_index":398,"t":{"192":{"position":[[81,6]]},"228":{"position":[[2128,6]]},"264":{"position":[[3173,6]]}}}],["permiss",{"_index":1416,"t":{"288":{"position":[[2778,11]]},"290":{"position":[[445,11],[494,11],[538,11],[598,12],[666,11],[775,10],[2222,11]]},"316":{"position":[[176,11]]}}}],["pick",{"_index":1422,"t":{"290":{"position":[[144,4]]},"308":{"position":[[2235,4],[2660,4]]}}}],["pin",{"_index":873,"t":{"242":{"position":[[713,3]]}}}],["ping",{"_index":966,"t":{"252":{"position":[[318,5]]},"264":{"position":[[8567,4],[8588,4],[8643,7],[8653,4],[12546,4],[12595,4]]},"270":{"position":[[716,5],[743,4],[815,4]]}}}],["ping,/path2",{"_index":1096,"t":{"264":{"position":[[3109,14]]}}}],["pkce",{"_index":1061,"t":{"264":{"position":[[904,4]]},"300":{"position":[[661,4]]}}}],["plain",{"_index":1062,"t":{"264":{"position":[[959,7]]},"278":{"position":[[2894,5]]}}}],["plan",{"_index":1435,"t":{"290":{"position":[[1030,8]]}}}],["platform",{"_index":860,"t":{"242":{"position":[[86,8],[276,8]]},"290":{"position":[[270,8],[1660,8]]},"308":{"position":[[2603,8]]}}}],["pleas",{"_index":138,"t":{"169":{"position":[[99,6],[144,6],[346,6],[434,6]]},"173":{"position":[[260,6],[835,6]]},"244":{"position":[[58,6],[118,6],[278,6],[357,6]]},"286":{"position":[[430,6]]},"300":{"position":[[2205,6],[6780,6]]}}}],["plural",{"_index":1052,"t":{"262":{"position":[[186,6]]},"268":{"position":[[257,6]]}}}],["poc",{"_index":1073,"t":{"264":{"position":[[1699,6]]}}}],["point",{"_index":1360,"t":{"284":{"position":[[119,8]]},"302":{"position":[[1349,8]]}}}],["polici",{"_index":1433,"t":{"290":{"position":[[884,8]]},"308":{"position":[[2351,8]]}}}],["popul",{"_index":1501,"t":{"298":{"position":[[1276,8]]}}}],["port",{"_index":867,"t":{"242":{"position":[[390,4],[460,4]]},"254":{"position":[[1075,4]]},"264":{"position":[[16059,5],[16118,4],[16231,5],[16302,5]]},"308":{"position":[[584,5]]}}}],["possibl",{"_index":129,"t":{"167":{"position":[[165,9]]},"169":{"position":[[467,9]]},"192":{"position":[[125,8]]},"264":{"position":[[2156,8]]},"298":{"position":[[82,9]]},"302":{"position":[[877,8]]}}}],["post",{"_index":143,"t":{"169":{"position":[[158,4]]}}}],["potenti",{"_index":164,"t":{"169":{"position":[[622,9]]},"228":{"position":[[1619,9]]}}}],["powershel",{"_index":1020,"t":{"260":{"position":[[86,10]]}}}],["ppc64le",{"_index":22,"t":{"163":{"position":[[264,8],[360,8]]}}}],["pr",{"_index":141,"t":{"169":{"position":[[130,2]]},"171":{"position":[[373,3]]},"244":{"position":[[335,2],[409,2]]}}}],["practic",{"_index":1523,"t":{"300":{"position":[[1526,10]]}}}],["pre",{"_index":28,"t":{"163":{"position":[[319,3]]},"300":{"position":[[4214,3]]}}}],["prebuilt",{"_index":3,"t":{"163":{"position":[[33,8],[234,8],[453,8]]}}}],["preced",{"_index":670,"t":{"228":{"position":[[388,10]]},"258":{"position":[[118,11]]}}}],["preconfigur",{"_index":899,"t":{"244":{"position":[[136,13]]}}}],["prefer",{"_index":269,"t":{"179":{"position":[[582,6]]},"264":{"position":[[7569,9],[7619,6],[7645,6],[8054,9],[11902,9]]}}}],["preferred_usernam",{"_index":1375,"t":{"286":{"position":[[489,18]]}}}],["prefix",{"_index":383,"t":{"190":{"position":[[219,6],[233,6],[255,6]]},"202":{"position":[[440,6],[454,6],[476,6]]},"228":{"position":[[627,8],[676,8]]},"252":{"position":[[136,6],[175,6]]},"264":{"position":[[1555,6],[8934,6],[15189,6],[15936,8]]},"268":{"position":[[75,9]]}}}],["preflight",{"_index":1163,"t":{"264":{"position":[[12636,9]]}}}],["prepend",{"_index":384,"t":{"190":{"position":[[275,9]]},"202":{"position":[[496,9]]}}}],["present",{"_index":168,"t":{"169":{"position":[[705,7]]},"232":{"position":[[237,7]]},"264":{"position":[[8179,8],[13687,9],[13803,9]]}}}],["preserv",{"_index":443,"t":{"200":{"position":[[362,9]]}}}],["preserverequestvalu",{"_index":440,"t":{"200":{"position":[[260,20],[286,20]]}}}],["pretti",{"_index":1696,"t":{"312":{"position":[[282,6]]}}}],["prevent",{"_index":528,"t":{"212":{"position":[[200,8]]},"234":{"position":[[460,7]]}}}],["preview",{"_index":1543,"t":{"300":{"position":[[6910,7]]},"308":{"position":[[1682,7]]}}}],["previou",{"_index":197,"t":{"171":{"position":[[652,8]]}}}],["previous",{"_index":179,"t":{"171":{"position":[[287,10]]}}}],["primari",{"_index":329,"t":{"184":{"position":[[161,7]]}}}],["print",{"_index":244,"t":{"177":{"position":[[304,5]]},"264":{"position":[[15081,5]]}}}],["print(base64.urlsafe_b64encode(os.urandom(32)).decod",{"_index":1023,"t":{"260":{"position":[[136,57]]}}}],["prior",{"_index":215,"t":{"173":{"position":[[245,5]]},"302":{"position":[[119,5]]}}}],["privat",{"_index":148,"t":{"169":{"position":[[222,8]]},"171":{"position":[[37,9]]},"206":{"position":[[72,7],[162,7]]},"264":{"position":[[5910,7],[6082,7],[14365,7]]},"296":{"position":[[1048,7]]},"310":{"position":[[1065,7]]}}}],["process",{"_index":1271,"t":{"274":{"position":[[965,8]]},"278":{"position":[[2934,9],[2980,9]]},"310":{"position":[[2587,7]]}}}],["product",{"_index":1158,"t":{"264":{"position":[[12437,11]]},"288":{"position":[[374,8]]},"310":{"position":[[294,10]]}}}],["profil",{"_index":287,"t":{"179":{"position":[[933,7]]},"214":{"position":[[2131,7]]},"264":{"position":[[8104,7],[8123,7]]},"298":{"position":[[727,7]]},"302":{"position":[[284,7]]},"310":{"position":[[1992,7]]}}}],["profileurl",{"_index":610,"t":{"214":{"position":[[2095,10],[2113,10]]}}}],["program",{"_index":939,"t":{"250":{"position":[[250,10],[568,10]]}}}],["project",{"_index":119,"t":{"167":{"position":[[33,8],[74,7],[204,8]]},"196":{"position":[[113,8],[131,8],[184,8]]},"246":{"position":[[5,7]]},"264":{"position":[[4184,8],[4250,8]]},"288":{"position":[[53,8],[123,7],[150,7],[184,7],[212,7]]},"296":{"position":[[13,8]]},"302":{"position":[[411,8]]},"304":{"position":[[55,8]]},"308":{"position":[[118,9]]}}}],["prometheu",{"_index":970,"t":{"252":{"position":[[533,10]]},"264":{"position":[[8883,10]]}}}],["prompt",{"_index":292,"t":{"179":{"position":[[998,6]]},"264":{"position":[[217,6],[8149,6],[8168,7],[8197,6]]}}}],["prompt/approval_prompt",{"_index":294,"t":{"179":{"position":[[1014,22]]}}}],["promptallow",{"_index":482,"t":{"210":{"position":[[130,12]]}}}],["promptdefault",{"_index":485,"t":{"210":{"position":[[294,14]]}}}],["properli",{"_index":1551,"t":{"302":{"position":[[551,9]]}}}],["propos",{"_index":177,"t":{"171":{"position":[[257,8]]}}}],["protect",{"_index":612,"t":{"214":{"position":[[2213,9]]},"236":{"position":[[774,8]]},"264":{"position":[[11310,9]]},"290":{"position":[[315,7]]},"308":{"position":[[2189,11],[2279,8]]}}}],["protectedresourc",{"_index":611,"t":{"214":{"position":[[2171,17]]}}}],["proto,host,uri",{"_index":1154,"t":{"264":{"position":[[11472,16]]}}}],["protocol",{"_index":1197,"t":{"264":{"position":[[16136,8]]},"272":{"position":[[1071,8],[1101,9]]},"274":{"position":[[534,13],[860,8],[890,9]]},"300":{"position":[[984,8]]},"310":{"position":[[842,9]]}}}],["provid",{"_index":42,"t":{"163":{"position":[[568,8],[709,8],[759,8],[912,8]]},"165":{"position":[[309,8],[473,9],[740,8]]},"175":{"position":[[111,7]]},"179":{"position":[[803,8],[812,8],[856,8],[1215,8]]},"182":{"position":[[13,9]]},"184":{"position":[[1809,9],[1819,9],[1829,9],[1869,10]]},"186":{"position":[[13,9]]},"188":{"position":[[13,9]]},"194":{"position":[[13,9]]},"196":{"position":[[13,9]]},"198":{"position":[[13,9]]},"204":{"position":[[13,9],[234,9]]},"206":{"position":[[13,9]]},"208":{"position":[[13,9],[712,8]]},"212":{"position":[[13,9]]},"214":{"position":[[13,10],[24,8],[70,8],[212,10],[345,10],[584,9],[666,9],[744,9],[842,9],[929,9],[1015,9],[1101,9],[1190,9],[1313,9],[1414,10],[1425,8],[1504,9],[1581,9]]},"216":{"position":[[29,9],[87,8]]},"218":{"position":[[0,11],[47,9],[92,10]]},"240":{"position":[[47,9],[418,12]]},"242":{"position":[[1384,12]]},"250":{"position":[[411,8],[734,8],[886,8],[963,9]]},"254":{"position":[[169,8],[785,8]]},"264":{"position":[[1811,9],[2538,8],[8220,8],[8242,8],[8260,8],[8359,9],[8436,8],[8555,9],[13528,8],[13714,9],[15002,9],[15820,9],[16344,8]]},"266":{"position":[[194,9],[353,7],[691,7],[1149,9]]},"284":{"position":[[34,8],[2252,8]]},"286":{"position":[[54,8],[90,10],[195,9],[365,8],[400,8],[455,9],[564,9]]},"288":{"position":[[2747,8]]},"290":{"position":[[2308,8]]},"292":{"position":[[92,7],[455,8]]},"296":{"position":[[184,8],[1264,7]]},"298":{"position":[[24,8],[70,8],[1256,8]]},"300":{"position":[[4048,8]]},"302":{"position":[[10,8]]},"308":{"position":[[84,9],[133,8],[235,8],[297,9],[379,8],[553,8],[956,8],[970,8],[1001,9],[1554,8],[1918,8],[3050,8],[4377,8]]},"310":{"position":[[21,8],[1565,8],[1893,8],[3268,9],[3550,8]]},"312":{"position":[[14,8],[125,9],[528,8]]},"314":{"position":[[378,9]]},"316":{"position":[[315,9]]},"318":{"position":[[323,8]]},"322":{"position":[[27,9],[61,8],[151,9]]}}}],["provider'",{"_index":990,"t":{"254":{"position":[[309,10]]},"264":{"position":[[8478,10]]},"278":{"position":[[1699,10]]},"310":{"position":[[3422,10]]}}}],["provider.example.com",{"_index":1002,"t":{"254":{"position":[[894,20]]}}}],["provider.example.com%2fsign_out_pag",{"_index":994,"t":{"254":{"position":[[486,36]]}}}],["provider.if",{"_index":605,"t":{"214":{"position":[[1766,11]]}}}],["provider.thi",{"_index":598,"t":{"214":{"position":[[1374,13]]}}}],["provider/sign_out_pag",{"_index":997,"t":{"254":{"position":[[672,25]]}}}],["provider=\"github",{"_index":1719,"t":{"318":{"position":[[247,17]]}}}],["provider=\"gitlab",{"_index":1552,"t":{"302":{"position":[[605,17]]}}}],["provider=adf",{"_index":1464,"t":{"292":{"position":[[333,13]]}}}],["provider=azur",{"_index":1440,"t":{"290":{"position":[[1439,14],[1747,14]]}}}],["provider=bitbucket",{"_index":1713,"t":{"316":{"position":[[355,18]]}}}],["provider=digitalocean",{"_index":1706,"t":{"314":{"position":[[418,21]]}}}],["provider=keycloak",{"_index":1487,"t":{"298":{"position":[[440,17]]},"300":{"position":[[2,17]]}}}],["providermust",{"_index":600,"t":{"214":{"position":[[1465,12]]}}}],["provideror",{"_index":592,"t":{"214":{"position":[[1179,10]]}}}],["providers.new",{"_index":1728,"t":{"322":{"position":[[98,15]]}}}],["providerthi",{"_index":570,"t":{"214":{"position":[[173,12],[306,12]]}}}],["providertyp",{"_index":599,"t":{"214":{"position":[[1434,12]]},"216":{"position":[[39,12]]}}}],["proxi",{"_index":51,"t":{"163":{"position":[[672,5],[785,5]]},"165":{"position":[[32,5],[729,5]]},"167":{"position":[[12,5]]},"169":{"position":[[65,5],[339,6]]},"177":{"position":[[58,5],[163,5],[467,5],[502,5]]},"179":{"position":[[191,5],[1511,5]]},"184":{"position":[[204,6],[490,7],[973,5],[1045,5],[1262,5]]},"228":{"position":[[108,7],[1057,8],[1669,5],[2416,8]]},"230":{"position":[[365,7]]},"232":{"position":[[109,5]]},"234":{"position":[[97,5],[396,5],[655,6]]},"236":{"position":[[1021,5],[1374,5],[1644,5],[1848,5],[2166,5]]},"238":{"position":[[52,5],[69,5]]},"240":{"position":[[38,5],[162,5],[221,5],[978,5]]},"242":{"position":[[133,5],[432,8],[451,5],[478,5],[1199,5],[1258,5]]},"250":{"position":[[20,5],[182,5],[495,5],[777,5],[854,6],[1416,5]]},"252":{"position":[[7,5],[87,7],[169,5]]},"258":{"position":[[7,5]]},"264":{"position":[[8928,5],[8976,5],[9042,5],[9082,8],[9268,5],[11346,5],[11389,6],[13177,5],[15427,5],[15549,5],[15718,5]]},"266":{"position":[[7,5],[623,5],[978,5]]},"270":{"position":[[19,5]]},"272":{"position":[[937,5]]},"274":{"position":[[792,5]]},"278":{"position":[[192,8],[1763,5]]},"280":{"position":[[31,5]]},"282":{"position":[[223,8]]},"284":{"position":[[138,5],[208,6],[1236,5]]},"286":{"position":[[179,5]]},"288":{"position":[[1694,5],[2845,5],[2961,6]]},"290":{"position":[[1303,5]]},"292":{"position":[[320,5]]},"300":{"position":[[1789,5],[3077,5],[3713,5],[3838,5],[5526,5],[5771,5],[6005,6],[6160,6],[6505,5],[6632,5]]},"308":{"position":[[530,5],[789,5],[924,5],[1028,5],[1048,5],[3656,5],[3676,5],[4817,5],[4837,5]]},"310":{"position":[[393,5],[661,5],[1512,5],[1558,5],[2999,7],[3190,6],[3340,5],[3582,5],[3603,5]]},"314":{"position":[[206,5],[249,5]]},"316":{"position":[[108,6],[152,5]]},"318":{"position":[[238,6]]},"322":{"position":[[130,5]]}}}],["proxiedto",{"_index":726,"t":{"228":{"position":[[2323,9]]}}}],["proxy'",{"_index":79,"t":{"165":{"position":[[96,7]]},"254":{"position":[[91,7]]},"278":{"position":[[86,7]]},"282":{"position":[[93,7]]},"314":{"position":[[296,7]]}}}],["proxy'secret",{"_index":1588,"t":{"308":{"position":[[775,13]]}}}],["proxy(e.g",{"_index":1424,"t":{"290":{"position":[[337,10]]}}}],["proxy.cfg",{"_index":945,"t":{"250":{"position":[[454,10]]},"262":{"position":[[225,9],[326,9]]}}}],["proxy.localtest.me:4180",{"_index":960,"t":{"250":{"position":[[1464,24]]}}}],["proxy.thi",{"_index":344,"t":{"184":{"position":[[929,10]]}}}],["proxy/oauth2",{"_index":14,"t":{"163":{"position":[[150,12]]}}}],["proxy/oauth2/callback",{"_index":1705,"t":{"314":{"position":[[163,22]]}}}],["proxy/v7@latest",{"_index":15,"t":{"163":{"position":[[163,16]]}}}],["proxy=tru",{"_index":896,"t":{"242":{"position":[[1409,10]]},"284":{"position":[[306,11]]}}}],["proxy>/oauth2/callback",{"_index":1712,"t":{"316":{"position":[[63,23]]}}}],["proxy_buffer_s",{"_index":1457,"t":{"290":{"position":[[2451,17]]},"292":{"position":[[598,17]]}}}],["proxy_connect_timeout",{"_index":893,"t":{"242":{"position":[[1094,21]]}}}],["proxy_pass",{"_index":885,"t":{"242":{"position":[[955,10]]},"278":{"position":[[319,10],[657,10],[2584,10],[2948,10]]}}}],["proxy_pass_request_bodi",{"_index":1282,"t":{"278":{"position":[[883,23]]}}}],["proxy_read_timeout",{"_index":895,"t":{"242":{"position":[[1142,18]]}}}],["proxy_send_timeout",{"_index":894,"t":{"242":{"position":[[1119,18]]}}}],["proxy_set_head",{"_index":887,"t":{"242":{"position":[[989,16],[1018,16],[1059,16]]},"278":{"position":[[353,16],[382,16],[423,16],[458,16],[559,16],[691,16],[720,16],[761,16],[847,16],[1218,16],[1249,16],[1428,16]]}}}],["proxycd",{"_index":922,"t":{"248":{"position":[[128,7]]}}}],["proxygit",{"_index":923,"t":{"248":{"position":[[143,8]]}}}],["proxyrawpath",{"_index":735,"t":{"230":{"position":[[118,12],[136,12]]}}}],["proxyredirecturi",{"_index":1586,"t":{"308":{"position":[[702,18]]}}}],["proxyus",{"_index":1149,"t":{"264":{"position":[[9326,9]]}}}],["proxywebsocket",{"_index":728,"t":{"228":{"position":[[2371,15],[2392,15]]}}}],["pubjwk",{"_index":303,"t":{"179":{"position":[[1185,6]]},"264":{"position":[[9098,6]]},"310":{"position":[[1917,6]]}}}],["pubjwkurl",{"_index":463,"t":{"206":{"position":[[214,9],[231,9]]}}}],["pubkey",{"_index":465,"t":{"206":{"position":[[252,6]]},"264":{"position":[[9120,6]]}}}],["public",{"_index":1473,"t":{"296":{"position":[[1011,6],[1229,6]]},"310":{"position":[[974,6]]}}}],["public_repo",{"_index":1476,"t":{"296":{"position":[[1376,11]]}}}],["publicli",{"_index":145,"t":{"169":{"position":[[175,9]]}}}],["pull",{"_index":898,"t":{"244":{"position":[[105,4]]},"272":{"position":[[1173,6]]},"274":{"position":[[1036,6]]}}}],["push",{"_index":417,"t":{"194":{"position":[[341,4]]},"248":{"position":[[184,4]]},"264":{"position":[[3898,4]]},"296":{"position":[[994,4]]}}}],["put",{"_index":16,"t":{"163":{"position":[[191,3]]}}}],["python",{"_index":1017,"t":{"260":{"position":[[66,6],[107,6]]}}}],["queri",{"_index":467,"t":{"208":{"position":[[75,5],[390,5]]},"210":{"position":[[1153,5],[1405,5]]},"226":{"position":[[76,5]]},"254":{"position":[[358,5]]},"256":{"position":[[117,5]]},"282":{"position":[[1287,6]]}}}],["quick",{"_index":1656,"t":{"310":{"position":[[1080,5]]}}}],["quickli",{"_index":128,"t":{"167":{"position":[[154,7]]}}}],["quit",{"_index":784,"t":{"236":{"position":[[964,5]]}}}],["quot",{"_index":505,"t":{"210":{"position":[[845,6]]}}}],["r_basicprofil",{"_index":1568,"t":{"304":{"position":[[168,14]]}}}],["r_emailaddress",{"_index":1569,"t":{"304":{"position":[[187,15]]}}}],["rand",{"_index":1033,"t":{"260":{"position":[[296,4]]}}}],["random",{"_index":540,"t":{"212":{"position":[[586,6]]},"236":{"position":[[391,6],[442,6]]},"272":{"position":[[1210,6]]},"274":{"position":[[1073,6]]}}}],["random_password",{"_index":1046,"t":{"260":{"position":[[663,17]]}}}],["rang",{"_index":1184,"t":{"264":{"position":[[15326,6]]}}}],["raw",{"_index":736,"t":{"230":{"position":[[163,3]]},"278":{"position":[[2229,3]]}}}],["rd",{"_index":992,"t":{"254":{"position":[[355,2]]}}}],["re",{"_index":763,"t":{"234":{"position":[[799,2]]},"254":{"position":[[200,2]]}}}],["reach",{"_index":1170,"t":{"264":{"position":[[13584,5]]}}}],["read",{"_index":1417,"t":{"288":{"position":[[2862,4]]},"290":{"position":[[440,4]]},"296":{"position":[[1207,4]]},"300":{"position":[[5654,4]]},"316":{"position":[[240,4],[261,4]]}}}],["read_api",{"_index":1550,"t":{"302":{"position":[[445,8]]}}}],["readi",{"_index":195,"t":{"171":{"position":[[613,6]]},"252":{"position":[[398,6]]},"264":{"position":[[8760,5],[8782,5],[8837,8],[12602,5]]},"270":{"position":[[768,6]]}}}],["real",{"_index":889,"t":{"242":{"position":[[1037,4]]},"264":{"position":[[9168,4],[9226,4],[9312,4],[9342,4],[11428,4],[15450,4]]},"272":{"position":[[899,4]]},"274":{"position":[[754,4]]},"278":{"position":[[401,4],[739,4]]},"310":{"position":[[3070,4],[3215,4]]}}}],["realm",{"_index":1483,"t":{"298":{"position":[[127,5]]},"300":{"position":[[214,6],[311,6],[467,5],[938,5],[1963,5],[2098,5],[3994,5],[4173,5],[4451,5],[4474,5],[4512,6],[4799,6],[4998,5],[7051,5]]}}}],["realm>/protocol/openid",{"_index":1493,"t":{"298":{"position":[[592,22],[687,22],[784,22],[885,22]]}}}],["reason",{"_index":813,"t":{"236":{"position":[[2364,7]]},"288":{"position":[[2537,6]]}}}],["recipi",{"_index":1525,"t":{"300":{"position":[[1754,9],[3402,11]]}}}],["recommend",{"_index":819,"t":{"236":{"position":[[2468,11]]},"238":{"position":[[14,11]]},"264":{"position":[[977,13]]},"278":{"position":[[3574,11]]},"288":{"position":[[871,11],[1233,14],[1672,14]]},"300":{"position":[[1543,11]]}}}],["redeem",{"_index":285,"t":{"179":{"position":[[911,6]]},"212":{"position":[[686,6]]},"264":{"position":[[9352,6],[13452,6]]},"296":{"position":[[1837,6]]},"298":{"position":[[631,6]]},"310":{"position":[[3765,6]]},"312":{"position":[[686,6]]},"318":{"position":[[527,6]]}}}],["redeemurl",{"_index":608,"t":{"214":{"position":[[2035,9],[2052,9]]}}}],["redempt",{"_index":609,"t":{"214":{"position":[[2075,10]]},"264":{"position":[[9376,10]]}}}],["redi",{"_index":106,"t":{"165":{"position":[[552,6]]},"232":{"position":[[326,5]]},"236":{"position":[[4,5],[57,6],[606,5],[711,5],[1421,5],[1565,5],[2635,5],[2698,5],[2726,5],[2817,5],[2874,5],[2937,5],[2970,5],[3016,5],[3119,5],[3174,5],[3237,5],[3267,5],[3323,5],[3370,5],[3418,5],[3531,5],[3580,5]]},"252":{"position":[[474,5]]},"264":{"position":[[9503,5],[9555,5],[9640,5],[9660,5],[9695,5],[9712,5],[9763,5],[9840,5],[9854,5],[9876,5],[9911,5],[9969,5],[9992,5],[10023,5],[10087,5],[10122,5],[10139,5],[10173,5],[10228,5],[10249,5],[10302,5],[10388,5],[10409,5],[10443,5],[10469,5],[10527,5],[10562,5],[10594,5],[10627,5],[10686,5],[10720,5],[10762,5],[10809,5],[10857,5],[10966,5],[11015,5],[11767,5]]},"290":{"position":[[2498,5]]},"292":{"position":[[645,5]]}}}],["redirect",{"_index":94,"t":{"165":{"position":[[276,10]]},"230":{"position":[[245,10]]},"252":{"position":[[816,8]]},"254":{"position":[[22,8],[269,8],[380,8],[550,8],[585,8],[646,9],[873,8],[1006,8]]},"264":{"position":[[127,11],[2716,9],[3277,8],[3366,9],[9398,8],[9428,8],[11511,8],[15155,11],[16022,8]]},"278":{"position":[[490,8],[591,8]]},"284":{"position":[[0,8],[372,9],[561,8],[572,9],[781,11],[849,8],[1894,9],[2059,9]]},"286":{"position":[[123,8]]},"288":{"position":[[703,8]]},"290":{"position":[[232,8]]},"294":{"position":[[95,8]]},"298":{"position":[[174,8]]},"300":{"position":[[97,8],[1020,8],[2435,8]]},"302":{"position":[[322,8],[625,8],[703,8],[1318,8]]},"304":{"position":[[217,8]]},"308":{"position":[[1054,8],[2720,8],[3969,8],[4029,8]]},"310":{"position":[[1379,8],[1619,8],[3610,8]]},"312":{"position":[[448,12]]},"314":{"position":[[315,8],[562,8],[680,8]]},"318":{"position":[[87,8],[267,8]]}}}],["redis.conf",{"_index":837,"t":{"236":{"position":[[3463,10]]},"264":{"position":[[10898,10]]}}}],["redis://host[:port",{"_index":1151,"t":{"264":{"position":[[9591,21],[9740,20],[10339,21]]}}}],["reduc",{"_index":1223,"t":{"270":{"position":[[828,8]]},"300":{"position":[[5403,6]]}}}],["refer",{"_index":229,"t":{"173":{"position":[[552,9],[853,9]]},"175":{"position":[[94,9]]},"220":{"position":[[57,10]]},"300":{"position":[[5641,5],[6787,5]]},"310":{"position":[[930,5],[1284,8]]},"312":{"position":[[367,5]]}}}],["refresh",{"_index":760,"t":{"234":{"position":[[734,10]]},"236":{"position":[[1053,7],[1070,7],[1249,7],[1403,7],[1453,7],[1534,7],[1608,8],[1659,7],[1736,10],[1801,7],[1859,7],[1962,9],[2007,7],[2403,7],[2552,7]]},"264":{"position":[[1719,7],[1736,7],[15847,8]]},"278":{"position":[[1494,8]]},"288":{"position":[[886,7],[940,7],[3079,9]]},"308":{"position":[[2830,7],[4138,7]]}}}],["refresh/access/id",{"_index":780,"t":{"236":{"position":[[787,17]]}}}],["refreshes.default",{"_index":545,"t":{"212":{"position":[[712,17]]}}}],["regardless",{"_index":853,"t":{"240":{"position":[[679,10]]}}}],["regex",{"_index":77,"t":{"165":{"position":[[70,6]]},"264":{"position":[[12715,5]]}}}],["regist",{"_index":55,"t":{"163":{"position":[[722,8]]},"286":{"position":[[17,8]]},"290":{"position":[[404,9]]},"310":{"position":[[453,8],[765,8]]}}}],["registr",{"_index":1376,"t":{"288":{"position":[[16,12]]},"290":{"position":[[94,13],[130,13],[469,13],[1147,12]]},"304":{"position":[[18,12]]}}}],["regular",{"_index":181,"t":{"171":{"position":[[365,7]]},"210":{"position":[[432,7],[814,7]]},"226":{"position":[[417,7]]},"228":{"position":[[534,7]]}}}],["releas",{"_index":6,"t":{"163":{"position":[[58,7],[111,7],[323,7],[586,7]]},"171":{"position":[[493,8],[661,9]]},"184":{"position":[[298,8]]},"212":{"position":[[764,8]]},"300":{"position":[[846,7]]}}}],["relev",{"_index":812,"t":{"236":{"position":[[2282,8]]}}}],["reload",{"_index":1372,"t":{"284":{"position":[[2336,6]]}}}],["remain",{"_index":680,"t":{"228":{"position":[[711,9]]},"300":{"position":[[2225,9]]},"304":{"position":[[300,9]]}}}],["remot",{"_index":1189,"t":{"264":{"position":[[15581,6]]}}}],["remote_addr",{"_index":891,"t":{"242":{"position":[[1045,13]]},"278":{"position":[[409,13],[747,13]]}}}],["remote_address",{"_index":1226,"t":{"272":{"position":[[181,16]]},"274":{"position":[[62,16]]}}}],["remov",{"_index":211,"t":{"173":{"position":[[211,8]]},"175":{"position":[[255,7]]},"177":{"position":[[368,6],[429,7]]},"179":{"position":[[1467,6]]},"254":{"position":[[76,7]]},"300":{"position":[[829,7]]}}}],["renam",{"_index":212,"t":{"173":{"position":[[220,7]]}}}],["replac",{"_index":223,"t":{"173":{"position":[[479,7]]},"262":{"position":[[65,9]]},"268":{"position":[[129,9]]}}}],["replace(\"/\",\"_",{"_index":1040,"t":{"260":{"position":[[550,19]]}}}],["repo",{"_index":415,"t":{"194":{"position":[[176,4],[188,4]]},"244":{"position":[[351,5]]},"264":{"position":[[3718,4]]},"296":{"position":[[1076,8]]},"310":{"position":[[2497,4]]}}}],["report",{"_index":1255,"t":{"272":{"position":[[1381,8]]},"274":{"position":[[1453,8]]}}}],["repositori",{"_index":377,"t":{"188":{"position":[[108,10],[126,10],[186,10]]},"194":{"position":[[239,10],[304,10],[360,10]]},"264":{"position":[[3771,10],[3862,10],[3917,11]]},"296":{"position":[[329,11],[953,11],[1018,10],[1056,11],[1126,10],[1236,10],[1320,11],[1445,10]]},"316":{"position":[[245,12],[696,10]]}}}],["repository=/index.php/apps/oauth2/api/v1/token",{"_index":1700,"t":{"312":{"position":[[714,40]]}}}],["url>/index.php/apps/oauth2/author",{"_index":1699,"t":{"312":{"position":[[647,37]]}}}],["url>/ocs/v2.php/cloud/user?format=json",{"_index":1701,"t":{"312":{"position":[[786,39]]}}}],["url]/stat",{"_index":1212,"t":{"266":{"position":[[984,13]]}}}],["url]/var/www/stat",{"_index":1208,"t":{"266":{"position":[[629,21]]}}}],["urldefault",{"_index":535,"t":{"212":{"position":[[457,10]]}}}],["urleg",{"_index":525,"t":{"212":{"position":[[102,6],[1006,6]]}}}],["urlparameterrul",{"_index":517,"t":{"210":{"position":[[1297,18]]},"226":{"position":[[32,16]]}}}],["us",{"_index":2,"t":{"163":{"position":[[25,5],[80,5],[226,5],[311,5],[407,5],[791,5]]},"165":{"position":[[761,6]]},"169":{"position":[[550,4]]},"171":{"position":[[3,3],[361,3]]},"173":{"position":[[293,3],[659,5]]},"175":{"position":[[3,3],[141,5],[182,5]]},"177":{"position":[[64,5],[473,5]]},"179":{"position":[[100,5],[1352,3]]},"184":{"position":[[394,4],[626,4],[861,4],[953,4],[963,5],[1217,4],[1433,3],[1539,4],[1741,3],[1842,4]]},"186":{"position":[[233,4]]},"190":{"position":[[517,4]]},"194":{"position":[[285,3]]},"198":{"position":[[391,3]]},"200":{"position":[[183,4]]},"202":{"position":[[738,4]]},"204":{"position":[[210,5]]},"206":{"position":[[98,4],[193,4]]},"208":{"position":[[542,4]]},"210":{"position":[[941,3]]},"212":{"position":[[902,3],[1478,4]]},"214":{"position":[[467,4],[1738,4],[1826,4]]},"216":{"position":[[55,4]]},"228":{"position":[[316,4],[462,4],[528,5],[730,3],[2058,4]]},"232":{"position":[[115,4]]},"234":{"position":[[78,4],[287,5]]},"236":{"position":[[992,4],[2306,4],[2625,5],[2864,3],[2880,3],[3125,3],[3243,3],[3273,3],[3497,5]]},"240":{"position":[[752,4],[942,4],[992,5]]},"242":{"position":[[218,5],[301,3],[670,3]]},"244":{"position":[[25,5],[438,5]]},"246":{"position":[[32,5]]},"250":{"position":[[878,3],[984,5]]},"252":{"position":[[375,3],[751,4],[877,4],[1007,4],[1156,3],[1252,4]]},"254":{"position":[[345,5]]},"256":{"position":[[97,5]]},"260":{"position":[[35,3]]},"262":{"position":[[286,4]]},"264":{"position":[[900,3],[1181,4],[1542,3],[2414,3],[2658,3],[3427,3],[3507,3],[3843,3],[4686,3],[4727,3],[5448,5],[5571,3],[5936,4],[6113,4],[7271,4],[7655,3],[7741,3],[7809,4],[8331,4],[8420,4],[8517,4],[8614,4],[8701,4],[8809,4],[9204,4],[9613,4],[9646,3],[10048,4],[10116,3],[10201,4],[10234,3],[10361,4],[10394,3],[10415,3],[10502,3],[10533,3],[10661,3],[10932,5],[11095,3],[11503,4],[11938,7],[11980,4],[12148,7],[12256,7],[12430,3],[13702,5],[13818,5],[14108,4],[14255,5],[15731,3],[15890,5],[16308,3]]},"266":{"position":[[830,4],[1214,4]]},"268":{"position":[[299,6]]},"270":{"position":[[111,5],[735,5]]},"272":{"position":[[889,3]]},"274":{"position":[[744,3]]},"278":{"position":[[1651,5],[2677,3],[2719,3],[3589,3]]},"284":{"position":[[55,3],[330,3],[2299,3]]},"286":{"position":[[390,5]]},"288":{"position":[[1144,5],[1577,5],[1709,3],[1812,3]]},"290":{"position":[[1042,3],[1947,5],[2287,5]]},"292":{"position":[[435,5]]},"296":{"position":[[1426,3],[1686,5]]},"298":{"position":[[47,3],[1135,4],[1440,5]]},"300":{"position":[[1469,5],[1934,3],[1975,5],[3218,3],[4024,5],[4331,5],[4831,5],[4920,5],[5341,6],[5509,5]]},"302":{"position":[[160,5],[1042,5]]},"306":{"position":[[175,4]]},"308":{"position":[[194,3],[263,4],[566,5],[1484,5],[1617,5],[4707,3]]},"310":{"position":[[2172,3],[3211,3]]},"312":{"position":[[105,5],[276,5]]},"314":{"position":[[370,3],[670,3]]},"316":{"position":[[43,3],[307,3],[555,3],[707,3]]},"320":{"position":[[29,3],[105,3],[209,3]]},"322":{"position":[[139,3]]}}}],["us/azure/act",{"_index":1452,"t":{"290":{"position":[[2185,15]]}}}],["usag",{"_index":327,"t":{"184":{"position":[[62,5]]},"236":{"position":[[2613,6]]}}}],["use.typ",{"_index":638,"t":{"224":{"position":[[218,13],[314,13]]}}}],["useapplicationdefaultcredenti",{"_index":431,"t":{"198":{"position":[[296,32],[334,32]]}}}],["used.list",{"_index":652,"t":{"224":{"position":[[678,9]]}}}],["user",{"_index":91,"t":{"165":{"position":[[248,4],[643,4]]},"179":{"position":[[385,4],[1059,4]]},"184":{"position":[[92,5],[436,4]]},"188":{"position":[[161,4]]},"194":{"position":[[371,5],[386,5],[399,5]]},"204":{"position":[[173,5]]},"212":{"position":[[1120,4],[1220,4],[1321,4]]},"214":{"position":[[1635,5]]},"228":{"position":[[795,5]]},"232":{"position":[[138,4]]},"234":{"position":[[790,5]]},"236":{"position":[[184,4]]},"252":{"position":[[258,4]]},"254":{"position":[[12,4],[121,4],[282,4],[393,4]]},"264":{"position":[[3938,4],[3966,5],[4972,4],[5043,5],[6972,4],[7529,5],[7635,4],[7863,4],[7959,4],[7994,5],[8658,4],[8678,4],[8746,4],[11833,5],[14916,5]]},"270":{"position":[[748,4]]},"272":{"position":[[94,4],[356,4],[425,4],[1367,4]]},"274":{"position":[[1439,4]]},"278":{"position":[[1013,4],[1115,5],[1237,4],[1242,6]]},"288":{"position":[[397,6],[2710,4],[2978,4]]},"296":{"position":[[436,4],[463,5],[971,5],[1196,5],[1286,4],[1481,4],[1619,8]]},"300":{"position":[[380,6],[3667,4],[3892,5],[4290,4],[4684,4],[4689,5],[5280,5],[5355,4],[6603,4],[6920,5],[7057,4]]},"304":{"position":[[119,4]]},"308":{"position":[[2949,5]]},"312":{"position":[[58,5]]},"316":{"position":[[659,5]]}}}],["user'",{"_index":340,"t":{"184":{"position":[[760,6],[1148,6]]},"232":{"position":[[17,6]]},"252":{"position":[[1022,6]]},"264":{"position":[[6894,6]]},"300":{"position":[[3956,6],[5310,6]]}}}],["user/prefer_email_to_us",{"_index":270,"t":{"179":{"position":[[598,25]]}}}],["user/settings/appl",{"_index":1716,"t":{"318":{"position":[[52,28]]}}}],["user@domain.com",{"_index":1227,"t":{"272":{"position":[[215,17]]},"274":{"position":[[96,17]]}}}],["user_ag",{"_index":1261,"t":{"274":{"position":[[195,14]]}}}],["userag",{"_index":1254,"t":{"272":{"position":[[1346,9]]},"274":{"position":[[548,14],[1418,9]]}}}],["useridclaim",{"_index":559,"t":{"212":{"position":[[1255,11],[1274,11]]}}}],["userinfo",{"_index":1502,"t":{"298":{"position":[[1376,8]]}}}],["usernam",{"_index":392,"t":{"190":{"position":[[475,8]]},"194":{"position":[[416,9]]},"202":{"position":[[696,8]]},"250":{"position":[[1338,8]]},"264":{"position":[[2484,8],[3984,8],[7579,8],[7684,8],[7745,8],[8064,8],[11912,8]]},"272":{"position":[[63,8],[708,13],[1416,8],[1457,8]]},"274":{"position":[[444,13],[1488,8],[1529,8]]},"296":{"position":[[1506,8],[1644,9]]},"300":{"position":[[4698,8]]}}}],["username@email.com",{"_index":1256,"t":{"272":{"position":[[1425,18]]},"274":{"position":[[1497,18]]}}}],["usptream",{"_index":709,"t":{"228":{"position":[[1683,8]]}}}],["utc",{"_index":1125,"t":{"264":{"position":[[5631,3]]}}}],["util",{"_index":593,"t":{"214":{"position":[[1200,7]]}}}],["uuid",{"_index":1250,"t":{"272":{"position":[[1217,4]]},"274":{"position":[[1080,4]]}}}],["v1",{"_index":1438,"t":{"290":{"position":[[1319,2]]}}}],["v19.0.0",{"_index":1519,"t":{"300":{"position":[[1397,8]]}}}],["v2",{"_index":1331,"t":{"282":{"position":[[12,2]]},"284":{"position":[[93,2]]},"290":{"position":[[1617,2]]}}}],["v2.0",{"_index":1436,"t":{"290":{"position":[[1046,4],[1953,4]]}}}],["v3.0.0",{"_index":46,"t":{"163":{"position":[[616,7]]}}}],["v7.5.1",{"_index":7,"t":{"163":{"position":[[69,7]]}}}],["valid",{"_index":35,"t":{"163":{"position":[[478,9]]},"171":{"position":[[231,8]]},"179":{"position":[[966,8]]},"192":{"position":[[254,5]]},"214":{"position":[[2299,10]]},"216":{"position":[[109,5]]},"224":{"position":[[691,5]]},"226":{"position":[[172,5]]},"236":{"position":[[1795,5],[1928,6],[2082,5],[2250,8]]},"240":{"position":[[1017,5]]},"260":{"position":[[572,5]]},"264":{"position":[[180,6],[13660,10],[13776,10],[14269,5],[15014,8],[15047,10],[16016,5]]},"286":{"position":[[189,5]]},"288":{"position":[[962,9]]},"294":{"position":[[83,5]]},"296":{"position":[[1910,8]]},"298":{"position":[[168,5],[827,8]]},"300":{"position":[[354,8],[1014,5],[2429,5],[3886,5]]},"312":{"position":[[756,8],[849,8]]},"318":{"position":[[595,8]]}}}],["validateurl",{"_index":613,"t":{"214":{"position":[[2248,11],[2267,11]]}}}],["valu",{"_index":325,"t":{"182":{"position":[[117,5]]},"184":{"position":[[723,6],[798,6],[1111,6],[1186,6]]},"186":{"position":[[143,5],[296,5]]},"190":{"position":[[62,5],[191,5],[292,5],[433,5],[538,6]]},"200":{"position":[[330,6],[533,6],[554,6],[582,6]]},"202":{"position":[[60,5],[110,5],[139,5],[152,5],[190,6],[337,6],[412,5],[513,5],[654,5],[759,6]]},"208":{"position":[[215,5],[224,6],[521,5],[732,5]]},"210":{"position":[[117,6],[144,6],[158,6],[174,6],[281,6],[326,6],[342,6],[412,6],[1226,5],[1235,6]]},"214":{"position":[[186,5],[319,5],[1388,5]]},"220":{"position":[[89,6],[184,5],[197,5],[235,6],[382,6]]},"226":{"position":[[250,5],[320,5],[335,5],[373,5],[481,6],[560,6],[610,5]]},"228":{"position":[[259,5]]},"236":{"position":[[203,5],[1204,5],[1617,5]]},"264":{"position":[[38,6],[4353,5]]},"266":{"position":[[795,5]]},"272":{"position":[[979,5]]},"274":{"position":[[834,5]]},"286":{"position":[[423,6]]},"290":{"position":[[1264,5]]},"298":{"position":[[1539,5]]},"300":{"position":[[1823,6]]}}}],["values.nam",{"_index":438,"t":{"200":{"position":[[204,12]]}}}],["values/acr_valu",{"_index":296,"t":{"179":{"position":[[1041,17]]}}}],["var/www/stat",{"_index":1211,"t":{"266":{"position":[[933,16]]}}}],["variabl",{"_index":65,"t":{"163":{"position":[[847,9]]},"179":{"position":[[61,9]]},"202":{"position":[[255,9]]},"220":{"position":[[300,9]]},"252":{"position":[[189,9]]},"258":{"position":[[69,9],[183,9],[209,9]]},"268":{"position":[[63,8],[238,8]]},"270":{"position":[[613,10]]},"272":{"position":[[776,9],[804,8]]},"274":{"position":[[628,9],[659,8]]},"276":{"position":[[500,9],[532,8]]},"278":{"position":[[2202,9],[2838,9],[3826,8]]},"310":{"position":[[2157,10],[2303,9],[2366,9],[2747,9]]},"312":{"position":[[192,9]]}}}],["verif",{"_index":533,"t":{"212":{"position":[[364,12],[1487,13],[1598,12]]},"228":{"position":[[1543,12]]},"264":{"position":[[6427,12],[6785,13],[7150,12],[9808,12]]}}}],["verifi",{"_index":38,"t":{"163":{"position":[[515,9]]},"194":{"position":[[294,9]]},"212":{"position":[[530,9],[1424,8]]},"264":{"position":[[3852,9],[6384,8],[6600,9],[9787,6],[13247,8],[13643,6],[13759,6]]},"296":{"position":[[1435,9]]},"300":{"position":[[3807,9]]}}}],["verifieddefault",{"_index":531,"t":{"212":{"position":[[260,15]]}}}],["verify/ssl_upstream_insecure_skip_verifi",{"_index":257,"t":{"179":{"position":[[252,40]]}}}],["version",{"_index":45,"t":{"163":{"position":[[608,7]]},"169":{"position":[[679,8]]},"224":{"position":[[123,7],[404,7],[466,7]]},"240":{"position":[[581,7],[670,8],[705,7],[772,8],[950,7]]},"246":{"position":[[118,7]]},"250":{"position":[[117,10],[836,7]]},"264":{"position":[[14392,7],[14419,7],[15069,7],[15087,7]]},"300":{"position":[[237,8],[720,7],[857,7]]},"302":{"position":[[50,7],[111,7]]}}}],["version=tls1.3",{"_index":851,"t":{"240":{"position":[[615,15]]}}}],["via",{"_index":314,"t":{"179":{"position":[[1377,3],[1390,3]]},"208":{"position":[[382,3]]},"210":{"position":[[1397,3]]},"236":{"position":[[717,3],[2720,3]]},"242":{"position":[[733,3]]},"258":{"position":[[31,3]]},"264":{"position":[[470,3],[7229,3],[7434,3],[10568,3]]},"272":{"position":[[1027,3]]},"278":{"position":[[71,3],[1007,3],[2944,3],[3755,3]]},"282":{"position":[[78,3]]},"310":{"position":[[3308,3]]},"312":{"position":[[161,3]]}}}],["visit",{"_index":1598,"t":{"308":{"position":[[1351,8]]}}}],["visual",{"_index":910,"t":{"244":{"position":[[444,6],[488,6]]}}}],["volum",{"_index":1224,"t":{"270":{"position":[[841,7]]}}}],["vulner",{"_index":136,"t":{"169":{"position":[[37,13],[606,13]]},"171":{"position":[[75,16],[308,15]]}}}],["wait",{"_index":733,"t":{"228":{"position":[[2541,4]]},"264":{"position":[[14725,4]]}}}],["want",{"_index":662,"t":{"226":{"position":[[574,4]]},"236":{"position":[[2856,4]]},"244":{"position":[[207,4]]},"254":{"position":[[865,4]]},"266":{"position":[[677,5]]},"290":{"position":[[307,4]]},"300":{"position":[[5395,4]]},"308":{"position":[[1739,4]]},"310":{"position":[[580,4]]}}}],["warn",{"_index":216,"t":{"173":{"position":[[251,8]]},"264":{"position":[[12372,9],[15597,8]]}}}],["way",{"_index":471,"t":{"208":{"position":[[328,4]]},"296":{"position":[[217,4]]},"310":{"position":[[1086,3]]}}}],["web",{"_index":1391,"t":{"288":{"position":[[533,4]]},"290":{"position":[[266,3]]},"308":{"position":[[1259,3],[2591,3],[3802,3],[3921,3]]}}}],["websocket",{"_index":729,"t":{"228":{"position":[[2428,10]]},"264":{"position":[[9048,10],[9072,9]]}}}],["websockets/proxy_websocket",{"_index":255,"t":{"179":{"position":[[197,27]]}}}],["well",{"_index":635,"t":{"224":{"position":[[91,4]]},"236":{"position":[[2686,4],[2907,4],[3070,5]]},"264":{"position":[[2958,5],[2996,5]]}}}],["whenstream",{"_index":721,"t":{"228":{"position":[[2172,13]]}}}],["whether",{"_index":433,"t":{"198":{"position":[[380,7]]},"200":{"position":[[318,7]]},"226":{"position":[[155,7]]},"228":{"position":[[2281,7]]},"264":{"position":[[11405,7]]},"302":{"position":[[144,7]]},"312":{"position":[[241,7]]}}}],["whitelist",{"_index":1003,"t":{"254":{"position":[[954,9]]},"264":{"position":[[15104,9],[15900,9],[16251,11]]}}}],["whole",{"_index":664,"t":{"226":{"position":[[594,5]]},"236":{"position":[[939,5]]},"282":{"position":[[236,5]]}}}],["whose",{"_index":306,"t":{"179":{"position":[[1258,5]]}}}],["wide_authority_to_your_service_account",{"_index":1403,"t":{"288":{"position":[[1475,38]]}}}],["window",{"_index":1460,"t":{"292":{"position":[[45,7]]}}}],["wish",{"_index":1601,"t":{"308":{"position":[[1839,4],[2271,4],[2364,4],[2969,4]]},"314":{"position":[[95,5]]}}}],["within",{"_index":137,"t":{"169":{"position":[[51,6]]},"173":{"position":[[131,6]]},"184":{"position":[[230,6]]},"190":{"position":[[81,6]]},"200":{"position":[[234,6]]},"220":{"position":[[112,6]]},"228":{"position":[[912,6]]},"234":{"position":[[568,6]]},"244":{"position":[[397,6]]},"288":{"position":[[1763,6]]},"296":{"position":[[703,6]]},"308":{"position":[[4737,6]]}}}],["without",{"_index":214,"t":{"173":{"position":[[237,7]]},"184":{"position":[[307,7]]},"278":{"position":[[184,7]]},"282":{"position":[[215,7]]},"284":{"position":[[43,7]]}}}],["wizard",{"_index":1463,"t":{"292":{"position":[[221,6]]}}}],["wo",{"_index":1367,"t":{"284":{"position":[[846,2],[2056,2]]}}}],["won't",{"_index":1434,"t":{"290":{"position":[[897,5]]}}}],["work",{"_index":121,"t":{"167":{"position":[[61,4]]},"264":{"position":[[14973,5]]},"278":{"position":[[1528,4]]},"302":{"position":[[102,4],[546,4]]},"308":{"position":[[1236,7],[1940,5],[2437,4]]},"310":{"position":[[210,4]]}}}],["workload",{"_index":1109,"t":{"264":{"position":[[4805,8]]},"288":{"position":[[1184,8],[1204,8],[1623,8],[1643,8],[1930,8],[1981,8],[2030,8]]}}}],["workspacefold",{"_index":940,"t":{"250":{"position":[[261,21],[579,21]]}}}],["write",{"_index":1475,"t":{"296":{"position":[[1300,5]]}}}],["x",{"_index":888,"t":{"242":{"position":[[1035,1],[1076,1]]},"254":{"position":[[570,1]]},"264":{"position":[[7233,1],[7314,1],[7517,1],[7535,1],[7557,1],[7982,1],[8000,1],[8020,1],[8042,1],[9293,1],[9310,1],[9324,1],[9340,1],[11128,1],[11426,1],[11460,1],[11818,1],[11839,1],[11862,1],[11887,1],[12011,1],[13080,1]]},"272":{"position":[[897,1]]},"274":{"position":[[752,1]]},"278":{"position":[[399,1],[440,1],[475,1],[576,1],[737,1],[778,1],[1011,1],[1022,1],[1235,1],[1266,1],[1445,1]]},"284":{"position":[[337,1],[2001,1],[2177,1]]},"298":{"position":[[1289,1]]}}}],["x.y.z.linux",{"_index":52,"t":{"163":{"position":[[678,11]]}}}],["x509",{"_index":1658,"t":{"310":{"position":[[1117,4]]}}}],["xauthrequest",{"_index":1141,"t":{"264":{"position":[[7287,12],[11796,12]]},"278":{"position":[[1080,12]]}}}],["xauthrequest/set_xauthrequest",{"_index":267,"t":{"179":{"position":[[502,29]]}}}],["xxx\"client_secret",{"_index":1636,"t":{"308":{"position":[[4580,18]]}}}],["xxxxx\"client_secret",{"_index":1611,"t":{"308":{"position":[[3263,20]]}}}],["yaml",{"_index":222,"t":{"173":{"position":[[464,4]]},"175":{"position":[[47,4]]},"177":{"position":[[295,4]]},"210":{"position":[[677,4]]},"282":{"position":[[288,6]]}}}],["you'd",{"_index":1474,"t":{"296":{"position":[[1166,5]]}}}],["you'r",{"_index":1397,"t":{"288":{"position":[[1133,6]]},"290":{"position":[[997,6]]}}}],["yourcompany.com",{"_index":1064,"t":{"264":{"position":[[1107,18]]},"300":{"position":[[3772,17]]}}}],["yourself",{"_index":666,"t":{"226":{"position":[[635,8]]}}}],["yyy\"pass_access_token",{"_index":1637,"t":{"308":{"position":[[4601,22]]}}}],["yyyyy\"pass_access_token",{"_index":1612,"t":{"308":{"position":[[3286,24]]}}}],["zero",{"_index":835,"t":{"236":{"position":[[3358,5]]},"264":{"position":[[10797,5]]}}}],["zzz\"cookie_secur",{"_index":1638,"t":{"308":{"position":[[4646,18]]}}}],["zzzzz\"skip_provider_button",{"_index":1614,"t":{"308":{"position":[[3333,27]]}}}]],"pipeline":["stemmer"]}}] \ No newline at end of file diff --git a/search/index.html b/search/index.html index 8a5bd1d9..0174baf1 100644 --- a/search/index.html +++ b/search/index.html @@ -4,13 +4,13 @@ Search the documentation - +

    Search the documentation

    Copyright © 2023 OAuth2 Proxy.
    - + \ No newline at end of file