e4626c1360
Sign Upstream requests with HMAC. closes #147
2015-11-15 22:09:30 -05:00
d247274b06
Add nginx auth_request config to README
2015-11-09 11:00:18 -05:00
e61fc9e7a6
Add /auth endpoint to support Nginx's auth_request
...
Closes #152 .
2015-11-09 10:31:41 -05:00
ffeccfe552
Add support for serving static files from a directory
...
The path should be provided as a file:// url with the full operating system path.
An alias to where the directory is available as can be specified by appending
a fragment (ie. "#/static/") at the end of the URL.
2015-09-24 15:37:45 +02:00
3fd8f911c2
google: Support restricting access to a specific group(s)
2015-09-09 02:10:32 -07:00
d1c0208824
Merge pull request #131 from ebardsley/master
...
Allow passing the value of "approval_prompt" as a flag or option.
2015-08-27 07:33:07 -04:00
85fcd66be6
Google auth configuration screen flow has changed
2015-08-09 12:08:21 -07:00
33045a792b
Add a flag to set the value of "approval_prompt".
...
By setting this to "force", certain providers, like Google,
will interject an additional prompt on every new session. With other values,
like "auto", this prompt is not forced upon the user.
2015-07-31 00:43:47 -07:00
f3353c0eea
Fix spelling
...
*snicker*
*titter*
*giggle*
2015-07-24 14:31:25 -07:00
7dd5d299e1
Add support for setting the basic auth password.
...
For tools that don't like empty passwords, this change allows
one to set a shared secret password for all users.
2015-07-24 09:17:43 +00:00
3a792555f1
tag v2.0.1
2015-07-02 23:29:25 -04:00
51852c045a
Doc updates clarifying external Load Balancer config
2015-07-02 23:21:59 -04:00
aa0a725a3a
Readme: doc updates
2015-06-23 14:01:05 -04:00
d78aa13464
v2.0 & cleanup changes
...
* bump version to 2.0
* remove --cookie-https-only option
* add windows build to dist.sh
* rename --cookie-key to --cookie-name
2015-06-12 13:07:26 -04:00
f5b2b20f67
support TLS directly
2015-06-07 23:14:48 -04:00
f5db2e1ff7
More complete HTTP error logging
2015-06-07 21:03:53 -04:00
56d19b1c84
disable email validation; rename email-domain argument
...
This adds a "*" option to --email-domain to disable email validation, and this renames `--google-apps-domain` to `--email-domain` for clarity across providers
2015-06-06 14:37:54 -04:00
c5ccd43767
Enable specific oauth2proxy path; change cookie name to _oauth2proxy
2015-06-06 14:21:42 -04:00
a80aad04f7
Readme Updates
2015-05-21 09:54:21 -04:00
b96a078839
Project Rename -> oauth2_proxy
2015-05-21 02:55:04 -04:00
37b38dd2f4
Github provider
2015-05-21 02:21:19 -04:00
9047920e90
Merge pull request #88 from 18F/auto-refresh
...
Auto refresh auth token
2015-05-11 22:24:50 -04:00
2808ba7beb
Update cookie-refresh doc string
2015-05-11 09:55:07 -04:00
5b07d9fcef
Provide a robots.txt that denies all crawlers
2015-05-10 15:15:52 -04:00
082b7c0ec8
Set cookie-refresh flag = 0; update README, config
2015-05-09 17:36:17 -04:00
5bc77b0ee8
LinkedIn OAuth support.
2015-04-17 17:35:40 -07:00
ad3c9a886f
Pass the access token to the upstream client
...
This is accomplished by encoding the access_token in the auth cookie and
unpacking it as the X-Forwarded-Access-Token header for upstream requests.
2015-04-03 15:32:01 -04:00
291a0b76b9
Add alternate provider information to README
2015-03-31 15:31:22 -04:00
b9b5e817fc
improve request logging (closer to Apache Common Log)
2015-03-19 22:34:01 -04:00
de04e0c519
rename cookie secure flag
2015-03-19 14:08:17 -04:00
ebae065b11
make redirect_uri optional
2015-03-19 14:03:05 -04:00
2b2324e410
support (optional) custom templates
2015-03-17 18:11:58 -04:00
263e16eeea
add --proxy-host-header option
2015-03-17 15:53:01 -04:00
975c7173c2
Added scheme parsing to http-address param
...
Can now listen for HTTP clients on unix sockets (and any other Go-supported stream oriented network - see golang.org/pkg/net/#Listen). Default behaviour is unchanged, any http-address without a scheme is given the default of tcp.
Amended the README so that the usage output is up to date.
2015-02-11 14:51:57 +11:00
942245f93d
Fix typo
2014-12-29 11:24:46 +01:00
ba7aee91d6
update install steps; show login img
2014-11-09 22:06:40 -05:00
9060feb436
better environment parsing
2014-11-09 21:12:36 -05:00
d4fe9a4f57
Add config file support
2014-11-09 20:33:12 -05:00
bc26835076
always set httponly (there is no good reason not to); simplify httponly and expire flags
2014-11-08 14:32:35 -05:00
8702ad2e52
Add /ping endpoint
2014-10-14 16:22:38 -04:00
e52a86d027
Update README with new Google Developers workflow
...
The Google Developers Console has a new interface and workflow. Updated the **OAuth Configuration** section with the correct steps, including a few notes on potential missteps.
2014-06-20 16:00:34 -04:00
7dc5b691e7
secrets as environment variables. closes #5
2013-07-30 17:32:27 -04:00
e3002667fc
readme example updates
2012-12-26 21:53:02 +00:00
4fd712566a
simpler binary install steps
2012-12-26 20:02:26 +00:00
37ca0fba18
readme updates
2012-12-26 18:26:07 +00:00
7eb17ba9e0
enable travis
...
add travis badge
2012-12-26 18:26:05 +00:00
c459806ab0
promote basic auth to cookie
2012-12-26 10:35:02 -05:00
4177e94a09
Update README.md
...
fix markdown syntax
2012-12-17 13:04:48 -05:00
4861cb8e65
update readme
2012-12-17 13:03:34 -05:00
1f4eb9f534
add example nginx config
2012-12-10 21:11:24 -05:00
fb636396a3
initial code import
2012-12-10 20:59:23 -05:00
c6f07d54d7
initial import
2012-12-10 20:34:58 -05:00
Mike Bland
Jeppe Toustrup
Justin Burnham
Jehiah Czebotar
Srivatsa Ray
Ed Bardsley
Sharif Nassar
tonymeng
Mike Bland
Darren Lee
David Howden
Rhommel Lamas
Jason Swank
Justin Downing
Kevin Lamontagne