5fe947eb07
Update go version to 1.16
...
This includes a fix for our samesite cookie parsing. The behaviour
changed in 1.16 so that the default value now leaves it empty, so it's
equivalent to not setting it (as per spec)
2021-02-19 11:30:58 +00:00
322308aab5
Merge pull request #1052 from oauth2-proxy/update-linter
...
Update golangci-lint to latest version (v1.36.0)
2021-02-17 20:56:43 +00:00
9cea4ea89b
Update golangci-lint version in CI workflow
2021-02-17 20:25:37 +00:00
76269a13b7
Support Traefik ForwardAuth without a 401 handler ( #1023 )
...
* GH-1015 Adds support for Traefik to OauthStart on '/oauth2/auth' endpoint
* Fix incorrect reference to signout path and point to signin path
- remove commented out alternative solutions and debug log statements
* Remove skip provider button check as SignIn method already does this
* Updated traefik example to match existing file configuration reference, updated tests
* Update doc and refactor nested conditional statements
* Revert code changes as static upstream provides the same functionality
- Add doc on using static upstream with Traefik ForwardAuth middleware
* update changelog
* Move the doc changes to 7.0.x versioned docs
* Re-add traefik docs update in the main docs overview.md
* add missing oauth2-proxy routing
Co-authored-by: Praveen Chinthala <PraveenChinthala@hollandandbarrett.com>
2021-02-15 19:31:08 +00:00
845235185d
Merge pull request #1049 from neuralsandwich/add-metrics
...
Fix #980 CHANGELOG link
2021-02-15 16:27:02 +00:00
b2d0b728ef
Fix #980 CHANGELOG link
2021-02-15 16:19:28 +00:00
59aeefcd8b
Merge pull request #980 from neuralsandwich/add-metrics
...
Add Prometheus metrics endpoint
2021-02-15 15:01:37 +00:00
a7c8a233ba
Add Prometheus metrics endpoint
...
Add the Prometheus http.Handler to serve metrics at MetricsPath ("/metrics"
by default). This allows Prometheus to scrape metrics from OAuth2 Proxy.
Add a new middleware NewRequestMetrics and attach it to the preAuth
chain. This will collect metrics on all requests made to OAuth2 Proxy
Collapse some calls to Prinf() and os.Exit(1) to Fatalf as they are
equivalent. main() has a strict 50 lines limit so brevity in these
calls appreciated
2021-02-15 13:45:26 +00:00
ce29b16d84
Merge pull request #1043 from oauth2-proxy/sign-in-page
...
Refactor Sign In Page rendering and capture all page rendering code in pagewriter package
2021-02-14 10:26:01 +00:00
425cff7af1
Add changelog entry for introduction of pagewriter package
2021-02-14 10:21:15 +00:00
225ff478a1
Move all pagewriter related code to dedicated pagewriter package
2021-02-14 10:21:13 +00:00
e8e2af73df
Wrap templates and page rendering in PageWriter interface
2021-02-14 10:20:26 +00:00
dba6989054
Move SignIn page rendering to app pkg
2021-02-13 11:35:38 +00:00
1e3d8547d7
Merge pull request #1029 from oauth2-proxy/error-pages
...
Refactor error page rendering and allow debug messages on error
2021-02-13 10:52:41 +00:00
9e8c2af86b
Update docs for new show-debug-on-error option
2021-02-13 10:48:03 +00:00
6ecbc7bc4e
Allow users to choose detailed error messages on error pages
2021-02-12 21:12:28 +00:00
a63ed0225c
Use ErrorPage to render proxy error page
2021-02-12 21:12:27 +00:00
ef457b1765
Move Error page rendering to app package
2021-02-12 21:12:05 +00:00
9cdcd2b2d4
Merge pull request #1028 from oauth2-proxy/templates
...
Refactor templates, update theme and provide styled error pages
2021-02-12 21:02:52 +00:00
881f43f793
Add changelog entry for refactored templates
2021-02-12 16:56:25 +00:00
0151ca11f6
Move template loading to app package
2021-02-12 16:55:52 +00:00
84f76c6060
Move template options to their own struct
2021-02-12 16:55:51 +00:00
801edeba23
Update templates to bulma framework
2021-02-12 16:55:45 +00:00
465789b044
Merge pull request #1039 from oauth2-proxy/fix-test-logging
...
Ensure errors in tests are logged to the GinkgoWriter
2021-02-11 09:48:24 +00:00
b6cca79cb9
Ensure errors in tests are logged to the GinkgoWriter
2021-02-10 19:50:04 +00:00
4fa607f173
Merge pull request #1038 from oauth2-proxy/prep-7.0.1
...
Prepare for release v7.0.1
2021-02-10 19:34:51 +00:00
e87a51f0e5
Prepare for release v7.0.1
2021-02-10 18:25:39 +00:00
7def4bf360
[DOC] Fix broken link to cookie secret generation ( #1024 )
...
* [DOC] Fix broken link
* Update auth.md
* Update auth.md
* Update auth.md
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2021-02-10 17:55:42 +00:00
0f859215f0
[DOC] Add header to cookie secret paragraph ( #1025 )
...
* [DOC] Add header to cookie secret paragraph
* Update overview.md
* Update overview.md
* Update overview.md
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2021-02-08 12:58:38 +00:00
b97c83297e
Update release process to use makefile go version check ( #1027 )
...
Co-authored-by: Nick Meves <nick.meves@greenhouse.io>
2021-02-06 15:19:33 -08:00
c9d9769f6f
Merge pull request #1026 from oauth2-proxy/fix-flag-loading
...
Ensure config flags get parsed correctly when other flags preceed them
2021-02-06 14:49:45 -08:00
ae17e38403
Ensure config flags get parsed correctly when other flags preceed them
2021-02-06 15:25:08 +00:00
9df3a752a6
Merge pull request #1020 from grnhse/flatten-response-headers
...
Flatten array-based response headers
2021-02-04 08:10:59 +00:00
c3f31b4dd5
Flatten array-based response headers
2021-02-03 16:48:26 -08:00
06985879e1
Merge pull request #1007 from oauth2-proxy/release-v7.0.0
...
Prepare for Release v7.0.0
2021-02-01 18:16:08 +00:00
1ccaea7710
Add advisory note to changelog
2021-02-01 18:12:34 +00:00
d1a249262f
Create v7.0.x versioned docs
...
Created within: yarn run docusaurus docs:version 7.0.x
2021-02-01 18:05:47 +00:00
a909d33355
Update CHANGELOG for release v7.0.0
2021-02-01 18:05:44 +00:00
780ae4f3c9
Merge pull request from GHSA-4mf2-f3wh-gvf2
2021-02-01 18:04:33 +00:00
48b1658e5d
Update alpine version to 3.13 ( #1013 )
...
* Update alpine version to 3.13
alpine 3.12 has a CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-28928 which got fixed in recent version
* address review comments
2021-01-30 15:33:28 +00:00
b541805dc1
Use comma separated multiple values for header ( #799 )
...
* Use comma separated value for multiple claims
* Fix lint error
* Fix more tests
* Fix one more test
* Always flatten the headers
* Ensure we test the real multi-groups
* Only update map when necessary
* Update CHANGELOG
* Move to the right location of change log
* Fix blank line
2021-01-22 08:48:34 +00:00
8087de7a03
Add Gitlab version warning/constaint in documentation ( #1004 )
2021-01-20 19:57:22 +00:00
57640764c0
Use logger for sensitive data logging to be able to disable it ( #1002 )
...
* Add sensible logging flag to default setup for logger
* Use logger instead of fmt for info logging with sensible data
* Remove sensible logging flag
* Update CHANGELOG.md
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2021-01-20 19:56:13 +00:00
56075e3776
Merge pull request #903 from oauth2-proxy/reference-generator
...
Add docs and generated reference for Alpha configuration
2021-01-19 19:27:38 +00:00
fbfc0959cb
Add changelog entry for new alpha configuration docs
2021-01-18 09:57:51 +00:00
5c64e236fb
Generate reference page in configuration
2021-01-18 09:57:44 +00:00
eb129a342c
Ensure code is generated during CI
2021-01-18 09:56:07 +00:00
9c126f5740
Merge pull request #964 from grnhse/reverse-proxy-context
...
Track the ReverseProxy config setting in the request Scope
2021-01-17 18:32:32 +00:00
da02914a9c
Log IsValidRedirect violations and do a final safety call
2021-01-16 13:56:38 -08:00
fa6a785eaf
Improve handler vs helper organization in oauthproxy.go
...
Additionally, convert a lot of helper methods to be private
2021-01-16 13:55:49 -08:00
Joel Speed
Praveen Chinthala
Sean Jones
Aleksander Stelmaczonek
Nick Meves
Nishanth Reddy
Lida Li
Wilfried OLLIVIER
Kevin Kreitner