Commit Graph

308 Commits

Author SHA1 Message Date
Anderson Valério 2e210d1cfd
fix linter 2025-05-07 09:36:44 -03:00
Anderson Valério 1102ad256c
revoke access token on logout 2025-05-07 08:09:50 -03:00
Anderson Valério fb64fad321
add BackendLogoutAllSessionsURL configuration 2024-12-27 08:37:43 -03:00
Anderson Valério 262f01e313
Merge remote-tracking branch 'upstream/release/v7.7.1' into merge_7.7.1 2024-12-09 21:03:44 -03:00
Anderson Valério b71c2f8857
pics_oidc 2024-12-04 09:01:16 -03:00
Anderson Valério 8053bfe399
Revert "isolating changes on oidc provider"
This reverts commit c053cb8d0a.
2024-12-04 08:38:46 -03:00
Anderson Valério e6e7c91352
reverting formatting changes 2024-12-02 14:54:27 -03:00
Anderson Valério 8600d79ff5
reverting formatting changes 2024-12-02 14:39:15 -03:00
Anderson Valério 8b5b97c399
reverting formatting changes 2024-12-02 12:00:49 -03:00
Anderson Valério f0c2b53784
reverting changes that only cause conflicts 2024-11-29 15:15:55 -03:00
Anderson Valério c053cb8d0a
isolating changes on oidc provider 2024-11-29 15:14:58 -03:00
tuunit 41c8d5bfce chore(deps): update all golang dependencies 2024-09-23 16:38:40 +02:00
Koen van Zuijlen 343bd61ebb
chore(deps): Updated to ginkgo v2 (#2459)
* chore(deps): Updated to ginkgo v2

* fix basic auth test suite cleanup

* fix redis store tests

* add changelog entry

---------

Co-authored-by: Jan Larwig <jan@larwig.com>
2024-07-18 22:41:02 +02:00
Leandro Lafin 1b4c3d756e
Session aware logout, backend logout url approach 2024-07-15 10:14:25 -03:00
Leandro Lafin e684125ca7
upgrading to go 1.21 2024-07-15 09:54:57 -03:00
Jacob Middag 3045392c17
feat: Replace default Go user-agent with oauth2-proxy and version (#2570)
* feat: Replace default Go user-agent with oauth2-proxy and version

* Add to CHANGELOG

* Make userAgentTransport configurable and composable

* Use correct naming convention for DefaultHTTPClient

* Move version to own package and use named arguments

* Update version path in Makefile

* Fix import path in Makefile

* Change importpath in dist.sh

* Minor style issues
2024-07-14 21:09:17 +01:00
Leandro Lafin 822cfad994
Feature/add option to skip loading claims from profile url 2024-07-12 15:57:12 -03:00
Leandro Lafin 1fc5b5cf15
Update go-jose dependency as requested in #2350 2024-07-12 15:07:29 -03:00
Leandro Lafin 88b469bedd
Feature: Add GitHub groups (orgs/teams) support 2024-07-12 15:02:19 -03:00
Leandro Lafin bcd665c9a3
bugfix: OIDCConfig based providers are not respecting flags and configs 2024-07-12 14:44:22 -03:00
Leandro Lafin 1396a26221
add azure china support 2024-07-12 11:37:14 -03:00
Leandro Lafin 896c679146
Fixed Google ADC functionality 2024-07-12 11:00:33 -03:00
Leandro Lafin 466e91695e
Updated linters 2024-07-12 10:30:16 -03:00
Leandro Lafin 8b0632d7da
bugfix: gitea token validation 2024-07-12 08:32:55 -03:00
Leandro Lafin ee7a439f3d
bugfix: default scopes for OIDCProvider based providers 2024-07-12 08:21:55 -03:00
Leandro Lafin 511552c790
bugfix: move oidc scope logic to oidc provider 2024-07-11 17:59:13 -03:00
Leandro Lafin e645994bbe
Fixing format for v7.5.0 2024-07-11 17:56:20 -03:00
Leandro Lafin 7656a0aaf3
Workload identity support 2024-07-11 17:14:39 -03:00
Leandro Lafin 1175b65ab5
Issue 1878: Validate URL call does not correctly honor already set URL 2024-07-11 11:15:41 -03:00
Leandro Lafin 4d0303eef8
Fill empty UserIDClaim before assigning it to other values 2024-07-11 11:11:50 -03:00
Leandro Lafin e33bb5e8b0
Fix default scope settings for none oidc providers like GitHub 2024-07-10 18:02:50 -03:00
Leandro Lafin 05b688e088
Fix uninitialized user claim 2024-07-10 17:41:52 -03:00
Erikson Bahr 0ee3758b01
use introspect url from discovery 2024-04-23 12:43:42 -03:00
kvanzuijlen f8efdbae5f
chore: Updated go-jwt to v5 2024-03-04 01:42:00 +01:00
Erikson Bahr ac2d04686f
implement oidc singl sign on cookie refresher 2024-02-01 08:53:16 -03:00
Damien Degois e7d20519df
Session aware logout, backend logout url approach (#1876)
* Session aware logout, backend logout url approach

* Add CHANGELOG.md and documentation for #1876

* Proper http handling and case change for golint compliance

* Update alpha_config.md

* Fix case conformity

* Change placeholder from ${id_token} to {id_token}

As this should be specified in a URL and curly braces should be escaped as %7b and %7d, therefore using {} shouldn't be an issue

* Apply suggestions from code review

Co-authored-by: Jan Larwig <jan@larwig.com>

* Add other suggestions

* Add suggestions and move background logout to generic provider

* Changelog updated

* Update oauthproxy.go

Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>

* Add comment for gosec, remove sensitive data from log

---------

Co-authored-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2024-01-26 12:48:09 +00:00
Jan Larwig 5e68dad636
upgrading to go 1.21 (#2235)
* chore: bump go to version 1.21

update all depedencies as well

* fix linting issues based on golang 1.20 deprecations

* cleanup go depedencies

* add custom gomega matcher for option intefaces

* revert and upgrade golangci-lint to 1.55.2

* fix lint issues for v1.55.2 of golangci-lint

* fix toml loading test

* remove second runspecs call

* update go.sum

* revert testutil package
2024-01-22 13:39:53 +00:00
Nils Gustav Stråbø 4c2bf5a2fe
Feature/add option to skip loading claims from profile url (#2329)
* add new flag skip-claims-from-profile-url

* skip passing profile URL if SkipClaimsFromProfileURL

* docs for --skip-claims-from-profile-url flag

* update flag comment

* update docs

* update CHANGELOG.md

* Update providers/provider_data.go

Co-authored-by: Jan Larwig <jan@larwig.com>

* Add tests for SkipClaimsFromProfileURL

* simplify tests for SkipClaimsFromProfileURL

* generate alpha_config.md

---------

Co-authored-by: Jan Larwig <jan@larwig.com>
2024-01-20 19:51:42 +00:00
darh bfd667e4a2
Update go-jose dependency as requested in #2350 (#2356)
* update go-jose dependency by switching gopkg.in/square/go-jose.v2
with github.com/go-jose/go-jose/v3

* updated `CHANGELOG.md` with entry for PR #2356

---------

Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2024-01-08 13:08:35 +00:00
Jan Larwig 52ad31752d
Feature: Add GitHub groups (orgs/teams) support (#2196)
* Add GitHub groups (orgs/teams) support

* align code of getTeams with getOrgs to support Github Enterprise Server instances with different domain

* add documentation

* add missing import after rebase

* add nightly build and push (#2297)

* add nightly build and push

* add date based nightly build tags

* only keep single multiarch image build and push

* add changelog

* add images to internal docs static files

* add docu for nightly builds

* remove unnecessary spaces

* update nightly repository

* Issue 978: Fix Custom cookie name breaks redis for session (#1949)

* Issue 978: Fix Custom cookie name breaks redis for session (see https://github.com/oauth2-proxy/oauth2-proxy/issues/978)

* Issue 978: Fix Custom cookie name breaks redis for session (see https://github.com/oauth2-proxy/oauth2-proxy/issues/978)

* Update CHANGELOG.md

* Issue 978: Fix Custom cookie name breaks redis for session

* Issue 978: Fix Custom cookie name breaks redis for session

* Issue 978: Fix Custom cookie name breaks redis for session

* Issue 978: Fix Custom cookie name breaks redis for session

* Issue 978: Fix Custom cookie name breaks redis for session

* Issue 978: Fix Custom cookie name breaks redis for session

* Update CHANGELOG.md

---------

Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com>
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>

* Support http.AllowQuerySemicolons (#2248)

* Support http.AllowQuerySemicolons

* Docs

* Make it clear we are overriding the handler

* Update documentation for allow-query-semicolons

* Fix changelog format

* Fix formatting

---------

Co-authored-by: MickMake <github@mickmake.com>

* Add GitHub groups (orgs/teams) support

* align code of getTeams with getOrgs to support Github Enterprise Server instances with different domain

* add documentation

* fix changelog & documentation

* fix missing import

---------

Co-authored-by: Tobias Mayer <github@tobiasm.de>
Co-authored-by: Nuno Miguel Micaelo Borges <miguelborges99@gmail.com>
Co-authored-by: Nuno Borges <Nuno.Borges@ctw.bmwgroup.com>
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
Co-authored-by: Tim White <tim.white@su.org.au>
Co-authored-by: MickMake <github@mickmake.com>
2023-12-18 10:03:19 +00:00
Jan Larwig fc6e7fdbd1
bugfix: OIDCConfig based providers are not respecting flags and configs (#2299)
* add full support for all oidc config based providers to use and respect all configs set via OIDCConfig

* add changelog entry

---------

Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2023-11-25 11:32:31 +00:00
Markus Blaschke 66bfd8ebd5
add azure china support (#2269)
* add azure china support

Signed-off-by: Markus Blaschke <mblaschke82@gmail.com>

* update changelog

Signed-off-by: Markus Blaschke <mblaschke82@gmail.com>

* fix lint

Signed-off-by: Markus Blaschke <mblaschke82@gmail.com>

---------

Signed-off-by: Markus Blaschke <mblaschke82@gmail.com>
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2023-11-01 10:12:34 +00:00
Joel Speed 48247d3e79
Merge pull request #2283 from kvanzuijlen/golint
Updated linters
2023-10-25 11:36:44 +01:00
Koen van Zuijlen 464f3bcf53
Fixed Google ADC functionality (#2282)
* Fixed Google ADC functionality

* Updated CHANGELOG.md

* Redo changes after merge-conflict

* Fixed docs

* Fixed linting issues

* Applied PR suggestions
2023-10-24 20:03:16 +01:00
kvanzuijlen e13a5048eb Updated linters 2023-10-24 16:37:57 +02:00
Eduardo Vozniak 91ddd6bd5e
Fixing introspect 2023-10-02 19:50:48 -03:00
Eduardo Vozniak aaf290193e
Removing hardcode 2023-10-02 10:48:00 -03:00
Eduardo Vozniak cbc7360195
100% passing tests 2023-10-02 10:27:46 -03:00
Jan Larwig 13af1b4786
fix gitea token validation by allowing custom validation url and extracting the proper base api url for github cloud, github enterprise and gitea (#2194) 2023-09-14 10:09:57 +01:00
tuunit 7683902a42 bugfix: default scopes for OIDCProvider based providers 2023-09-10 20:10:14 +00:00