public_git
/
oauth2-proxy
mirror of https://github.com/oauth2-proxy/oauth2-proxy.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Add support for becoming an AudienceClient.

This commit is contained in:
kfox 2017-10-18 19:21:13 -07:00
parent bfda078caa
commit 322425614c
2 changed files with 10 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
oauthproxy.go
View File

@ -155,6 +155,7 @@ func NewOAuthProxy(opts *Options, validator func(string) bool) *OAuthProxy {
redirectURL.Path = fmt.Sprintf("%s/callback", opts.ProxyPrefix)
log.Printf("OAuthProxy configured for %s Client ID: %s", opts.provider.Data().ProviderName, opts.ClientID)
log.Printf("OAuthProxy configured for %s Audience Client ID: %s", opts.provider.Data().ProviderName, opts.AudienceClientID)
refresh := "disabled"
if opts.CookieRefresh != time.Duration(0) {
refresh = fmt.Sprintf("after %s", opts.CookieRefresh)

10
options.go
View File

@ -25,6 +25,7 @@ type Options struct {
HttpsAddress string `flag:"https-address" cfg:"https_address"`
RedirectURL string `flag:"redirect-url" cfg:"redirect_url"`
ClientID string `flag:"client-id" cfg:"client_id" env:"OAUTH2_PROXY_CLIENT_ID"`
AudienceClientID string `flag:"audience-client-id" cfg:"audience_client_id" env:"OAUTH2_PROXY_AUDIENCE_CLIENT_ID"`
ClientSecret string `flag:"client-secret" cfg:"client_secret" env:"OAUTH2_PROXY_CLIENT_SECRET"`
TLSCertFile string `flag:"tls-cert" cfg:"tls_cert_file"`
TLSKeyFile string `flag:"tls-key" cfg:"tls_key_file"`
@ -153,8 +154,15 @@ func (o *Options) Validate() error {
if err != nil {
return err
}
ClientID := o.AudienceClientID
if ClientID == "" {
ClientID = o.ClientID
}
o.oidcVerifier = provider.Verifier(&oidc.Config{
ClientID: o.ClientID,
ClientID: ClientID,
})
o.LoginURL = provider.Endpoint().AuthURL
o.RedeemURL = provider.Endpoint().TokenURL