Commit Graph

113 Commits

Author SHA1 Message Date
Leandro Lafin c156c9f732
Add ability to configure username for Redis cluster connections 2024-07-15 08:43:15 -03:00
Leandro Lafin 822cfad994
Feature/add option to skip loading claims from profile url 2024-07-12 15:57:12 -03:00
Leandro Lafin 634fbe6dc6
Feature - Add env variable support for alpha struct 2024-07-12 15:29:38 -03:00
Leandro Lafin 2434369974
Add possibility to encode the state param as UrlEncodedBase64 2024-07-12 15:20:57 -03:00
Leandro Lafin b5a40ce6a5
Support http.AllowQuerySemicolons 2024-07-12 14:36:15 -03:00
Leandro Lafin 8fdec4fd9e
Refactored docs 2024-07-12 11:32:20 -03:00
Leandro Lafin ba306ce9cd
Add support for unix socket as upstream 2024-07-12 11:30:17 -03:00
Leandro Lafin 6aa359ae83
Issue: 2236 - adds an option to append CA certificates 2024-07-12 11:11:24 -03:00
Leandro Lafin 7ca3ec6357
Feature: Allowing relative redirect url though an option 2024-07-12 11:04:23 -03:00
Leandro Lafin 896c679146
Fixed Google ADC functionality 2024-07-12 11:00:33 -03:00
Leandro Lafin ee23b9ffc0
Update dependencies 2024-07-12 09:57:09 -03:00
Leandro Lafin 101391424f
Fixed name for GoogleGroups env variable + unit tests 2024-07-11 18:04:34 -03:00
Leandro Lafin e645994bbe
Fixing format for v7.5.0 2024-07-11 17:56:20 -03:00
Leandro Lafin 7656a0aaf3
Workload identity support 2024-07-11 17:14:39 -03:00
Leandro Lafin 5e0b2d6f8a
feat: readiness check 2024-07-11 11:03:33 -03:00
Erikson Bahr ce668ef7f6
add HSP IAM audit capabilities 2024-07-01 15:21:22 -03:00
Erikson Bahr 946f277f47
pass legacy url to actual one 2024-02-02 08:57:07 -03:00
Erikson Bahr 23cf172dd6
allow setting arbitrary cookie refresh url 2024-02-02 08:42:37 -03:00
Erikson Bahr e09053e3c3
fix unit tests 2024-02-01 13:59:16 -03:00
Erikson Bahr 4b00a44fcf
fix unit tests 2024-02-01 11:55:09 -03:00
Erikson Bahr 7ca98f24c8
fix unit tests 2024-02-01 11:15:02 -03:00
Erikson Bahr df015b5123
add 'OAUTH2_PROXY_OIDC_ENABLE_COOKIE_REFRESH' and 'OAUTH2_PROXY_OIDC_COOKIE_REFRESH_NAME' options 2024-02-01 10:38:06 -03:00
Eduardo Vozniak 2c7543f38f
Merging 7.4.0 2023-09-01 08:09:44 -03:00
lohith-karlapudi c0fe7f62da Update legacy_options_test.go 2022-08-12 15:25:54 +05:30
lohith-karlapudi 1d1e415277 Update legacy_options_test.go 2022-08-11 17:21:59 +05:30
lohith-karlapudi 6eaacf791c adding id token header 2022-08-11 15:43:55 +05:30
prince-melvin eb092c97b3 Change flag names 2021-05-10 20:10:58 +05:30
prince-melvin 3f975235b1 Change header name 2021-05-10 15:04:36 +05:30
princemelvin 9d087603f2 added tests for options 2021-05-06 17:53:31 +05:30
princemelvin 35e1452e9d Added introspection support in OIDC 2021-05-05 18:07:25 +05:30
yanasega 42475c28f7
Multiple providers in alpha config (#947)
* Initial commit of multiple provider logic:
1. Created new provider options.
2. Created legacy provider options and conversion options.
3. Added Providers to alpha Options.
4. Started Validation migration of multiple providers
5. Tests.

* fixed lint issues

* additional lint fixes

* Nits and alterations based on CR: manliy splitting large providers validation function and adding comments to provider options

* fixed typo

* removed weird : file

* small CR changes

* Removed GoogleGroups validation due to new allowed-groups (including tests). Added line in CHANGELOG

* Update pkg/apis/options/providers.go

Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>

* Update pkg/apis/options/providers.go

Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>

* Update pkg/apis/options/providers.go

Co-authored-by: Nick Meves <nick.meves@greenhouse.io>

* Initial commit of multiple provider logic:
1. Created new provider options.
2. Created legacy provider options and conversion options.
3. Added Providers to alpha Options.
4. Started Validation migration of multiple providers
5. Tests.

* fixed lint issues

* additional lint fixes

* Nits and alterations based on CR: manliy splitting large providers validation function and adding comments to provider options

* small CR changes

* auto generates alpha_config.md

* rebase (mainly service alpha options related conflicts)

* removed :

* Nits and alterations based on CR: manliy splitting large providers validation function and adding comments to provider options

* small CR changes

* Removed GoogleGroups validation due to new allowed-groups (including tests). Added line in CHANGELOG

* "cntd. rebase"

* ran make generate again

* last conflicts

* removed duplicate client id validation

* 1. Removed provider prefixes
2. altered optionsWithNilProvider logic
3. altered default provider logic
4. moved change in CHANELOG to 7.0.0

* fixed TestGoogleGroupOptions test

* ran make generate

* moved CHANGLOG line to 7.1.1

* moved changelog comment to 7.1.2 (additional rebase)

Co-authored-by: Yana Segal <yana.segal@nielsen.com>
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
Co-authored-by: Nick Meves <nick.meves@greenhouse.io>
2021-04-03 17:06:30 +01:00
Oliver 7ebeecb128
Fix metrics server (#1141)
* fix MetricsSecureAddress cfg tag

* add metrics* flags to docs

* update CHANGELOG
2021-04-01 13:58:13 +01:00
Joel Speed 64f0a9f580
Reinstate preferEmailToUser behaviour for basic auth sessions 2021-03-22 13:13:26 +00:00
Nick Meves c1267bb92d
Request ID Logging (#1087)
* Add RequestID to the RequestScope

* Expose RequestID to auth & request loggers

* Use the RequestID in templated HTML pages

* Allow customizing the RequestID header

* Document new Request ID support

* Add more cases to scope/requestID tests

* Split Get vs Generate RequestID funtionality

* Add {{.RequestID}} to the request logger tests

* Move RequestID management to RequestScope

* Use HTML escape instead of sanitization for Request ID rendering
2021-03-21 18:20:57 +00:00
Joel Speed f4b3115dd3
Add complete metrics server configuration 2021-03-07 11:49:12 +00:00
Joel Speed 3d457a8cdf
Create server options struct and move legacy server options to legacyOptions 2021-03-07 11:49:08 +00:00
Stefan Sedich 220b3708fc
Add support for setting groups on session when using basic auth (#1064)
* Add support for setting groups on session when using basic auth

* Refactoring based on feedback

* Attribution
2021-02-25 13:02:23 -08:00
Joel Speed 23e545a639
Add option for custom logos on the sign in page 2021-02-19 13:23:55 +00:00
Sean Jones a7c8a233ba
Add Prometheus metrics endpoint
Add the Prometheus http.Handler to serve metrics at MetricsPath ("/metrics"
by default). This allows Prometheus to scrape metrics from OAuth2 Proxy.

Add a new middleware NewRequestMetrics and attach it to the preAuth
chain. This will collect metrics on all requests made to OAuth2 Proxy

Collapse some calls to Prinf() and os.Exit(1) to Fatalf as they are
equivalent. main() has a strict 50 lines limit so brevity in these
calls appreciated
2021-02-15 13:45:26 +00:00
Joel Speed 6ecbc7bc4e
Allow users to choose detailed error messages on error pages 2021-02-12 21:12:28 +00:00
Joel Speed 84f76c6060
Move template options to their own struct 2021-02-12 16:55:51 +00:00
Joel Speed b6cca79cb9
Ensure errors in tests are logged to the GinkgoWriter 2021-02-10 19:50:04 +00:00
Joel Speed 5c64e236fb
Generate reference page in configuration 2021-01-18 09:57:44 +00:00
Nick Meves 3369799853
Migrate Keycloak to EnrichSession & support multiple groups 2020-12-24 14:04:19 -08:00
Nick Meves eb56f24d6d
Deprecate UserIDClaim in config and docs 2020-12-21 16:52:17 -08:00
Mathieu Lecarme d67d6e3152
Add authorization support for Gitlab projects (#630)
* Add support for gitlab projets

* Add group membership in state

* Use prefixed allowed groups everywhere

* Fix: remove unused function

* Fix: rename func that add data to session

* Simplify projects and groups session funcs

* Add project access level for gitlab projects

* Fix: default access level

* Add per project access level

* Add user email when missing access level

* Fix: harmonize errors

* Update docs and flags description for gitlab project

* Add test with both projects and groups

* Fix: log error message

Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>

* Fix: make doc a markdown link

* Add notes about read_api scope for projects

* Fix: Verifier override in Gitlab Provider

This commit fixes a bug caused by an override of the Verifier value from *ProviderData inside GitlabProvider struct

* Fix: ensure data in session before using it

* Update providers/gitlab.go

Co-authored-by: Nick Meves <nick.meves@greenhouse.io>

* Rename gitlab project initializer

* Improve return value readbility

* Use splitN

* Handle space delimiters in set project scope

* Reword comment for AddProjects

* Fix: typo

* Rework error handling in addProjectsToSession

* Reduce branching complexity in addProjectsToSession

* Fix: line returns

* Better comment for addProjectsToSession

* Fix: enrich session comment

* Fix: email domains is handled before provider mechanism

* Add archived project unit test

* Fix: emails handling in gitlab provider

Co-authored-by: Wilfried OLLIVIER <wollivier@bearstech.com>
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
Co-authored-by: Nick Meves <nick.meves@greenhouse.io>
2020-12-05 10:57:33 -08:00
Joel Speed b201dbb2d3
Add convert-config-to-alpha flag to convert existing configuration to alpha structure 2020-12-01 08:56:51 +00:00
Joel Speed f36dfbb494
Introduce alpha configuration loading 2020-12-01 08:56:49 +00:00
Joel Speed 5b003a5657
SecretSource.Value should be plain text in memory 2020-12-01 08:56:46 +00:00
Joel Speed 482cd32a17
Fix basic auth legacy header conversion 2020-11-19 20:07:59 +00:00