Leandro Lafin
9b93433720
Upgrade golang.org/x/net to v0.17.0
2024-07-12 09:57:53 -03:00
Leandro Lafin
ee23b9ffc0
Update dependencies
2024-07-12 09:57:09 -03:00
Leandro Lafin
4df1497250
Missing closing quotes on api_routes example
2024-07-12 09:53:47 -03:00
Leandro Lafin
565f3eddd1
Release v7.5.1
2024-07-12 08:37:08 -03:00
Leandro Lafin
8b0632d7da
bugfix: gitea token validation
2024-07-12 08:32:55 -03:00
Leandro Lafin
9581a977ca
Docs: Add Search
2024-07-12 08:24:01 -03:00
Leandro Lafin
ee7a439f3d
bugfix: default scopes for OIDCProvider based providers
2024-07-12 08:21:55 -03:00
Leandro Lafin
ae00d0ce64
Update alpine to 3.18
2024-07-11 18:10:02 -03:00
Leandro Lafin
cfd3c20e89
Added arch types to Docker and binary releases
2024-07-11 18:09:16 -03:00
Leandro Lafin
101391424f
Fixed name for GoogleGroups env variable + unit tests
2024-07-11 18:04:34 -03:00
Leandro Lafin
7cf1624dc3
Improved session documentation
2024-07-11 17:59:59 -03:00
Leandro Lafin
511552c790
bugfix: move oidc scope logic to oidc provider
2024-07-11 17:59:13 -03:00
Leandro Lafin
e645994bbe
Fixing format for v7.5.0
2024-07-11 17:56:20 -03:00
Leandro Lafin
ad81d2f8fb
Fix for v7.5.0
2024-07-11 17:45:51 -03:00
Leandro Lafin
f5ae9ad2d2
Release v7.5.0
2024-07-11 17:23:16 -03:00
Leandro Lafin
7656a0aaf3
Workload identity support
2024-07-11 17:14:39 -03:00
Leandro Lafin
48305ec3a0
documented default for errors-to-info-log
2024-07-11 14:42:01 -03:00
Leandro Lafin
6568c84494
Embed static stylesheets and dependencies
2024-07-11 14:39:38 -03:00
Leandro Lafin
c3b846d16a
Bugfix/check json path
2024-07-11 14:20:07 -03:00
Leandro Lafin
ad8ba07b21
fix: use X-Forwarded-Uri if it exists for pathRegex match
2024-07-11 14:16:08 -03:00
Leandro Lafin
474f08f538
Update oauthproxy.go - typos in comment
2024-07-11 14:12:31 -03:00
Leandro Lafin
ccf5bbad48
Update Dockerfile with qualified image names
2024-07-11 14:11:20 -03:00
Leandro Lafin
6d2cf6aa8d
Session-Cookie Support
2024-07-11 14:09:58 -03:00
Leandro Lafin
e64f4d3bc5
Fixed build status badge in README.md
2024-07-11 13:46:24 -03:00
Leandro Lafin
27dc4ceecb
update: use go install in build step
2024-07-11 13:45:25 -03:00
Leandro Lafin
30751c7512
Update stale bot to v8
2024-07-11 13:44:33 -03:00
Leandro Lafin
03e49ae19a
Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS
2024-07-11 13:43:53 -03:00
Leandro Lafin
b92604d224
Update golang.org/x/net to v0.7.0 ato address GHSA-vvpx-j8f3-3w6h
2024-07-11 13:36:46 -03:00
Leandro Lafin
f8345d2986
Add documentation for --redis-insecure-skip-tls-verify flag
2024-07-11 13:35:16 -03:00
Leandro Lafin
bc02aed6e8
Log the difference between invalid email and not authorized session
2024-07-11 13:34:39 -03:00
Leandro Lafin
df0c641de9
Added documentation for the keycloak-oidc provider and the new Keycloak admin console
2024-07-11 13:32:39 -03:00
Leandro Lafin
3e21a6a203
Ensure sign-in page background is uniform throughout the page
2024-07-11 13:30:23 -03:00
Leandro Lafin
81b756a5d7
Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is
2024-07-11 13:29:30 -03:00
Leandro Lafin
a8ad42e1e8
Fix a typo in oauthproxy.go
2024-07-11 11:19:45 -03:00
Leandro Lafin
596f4aaf26
fix typo in comment for oidc/provider.go
2024-07-11 11:19:02 -03:00
Leandro Lafin
1175b65ab5
Issue 1878: Validate URL call does not correctly honor already set URL
2024-07-11 11:15:41 -03:00
Leandro Lafin
734b1483d2
Update formatting error in overview for custom-sign-in-logo
2024-07-11 11:12:50 -03:00
Leandro Lafin
4d0303eef8
Fill empty UserIDClaim before assigning it to other values
2024-07-11 11:11:50 -03:00
Leandro Lafin
0c20afa6a3
Chnages checkout version to v3
2024-07-11 11:07:04 -03:00
Leandro Lafin
5e0b2d6f8a
feat: readiness check
2024-07-11 11:03:33 -03:00
Leandro Lafin
e33bb5e8b0
Fix default scope settings for none oidc providers like GitHub
2024-07-10 18:02:50 -03:00
Leandro Lafin
8693c9a53b
Remove unsupported special characters from the code verifier runes
2024-07-10 17:58:34 -03:00
Leandro Lafin
a4221a337d
Fix PKCE code verifier generation to never use UTF-8 characters
2024-07-10 17:57:26 -03:00
Leandro Lafin
05b688e088
Fix uninitialized user claim
2024-07-10 17:41:52 -03:00
Leandro Lafin
be68c55542
Set correct platform type for arm v8 docker images
2024-07-10 17:38:17 -03:00
Leandro Lafin
fc89630760
Protect htpasswd user list from race condition
2024-07-10 17:35:41 -03:00
Davi Rodrigues
9f64c67d65
Update SECURITY.md
2024-07-07 18:29:14 -03:00
Eduardo Vozniak
8f7537a6e9
add HSP IAM audit capabilities ( #52 )
...
<!--- Provide a general summary of your changes in the Title above -->
## Description
Add HSDP IAM audit capabilities to oauth2 proxy
## Motivation and Context
HSDP IAM does not provide important audit capabilities out of the box
such as successful login and some key auth errors.
## How Has This Been Tested?
Tested locally with:
```sh
export OAUTH2_PROXY_ENABLE_AUDIT='true'
export OAUTH2_PROXY_AUDIT_URL='url'
export OAUTH2_PROXY_AUDIT_PRODUCT_NAME='Reporting'
export OAUTH2_PROXY_AUDIT_PRODUCT_KEY='product key'
export OAUTH2_PROXY_AUDIT_SHARED_KEY='shared key'
export OAUTH2_PROXY_AUDIT_SECRET_KEY='secret'
```
## Checklist:
<!--- Go over all the following points, and put an `x` in all the boxes
that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're
here to help! -->
- [ ] My change requires a change to the documentation or CHANGELOG.
- [ ] I have updated the documentation/CHANGELOG accordingly.
- [ ] I have created a feature (non-master) branch for my PR.
2024-07-03 10:11:30 -03:00
Erikson Bahr
ab969ac2bd
fix valueset and improve error handling
2024-07-03 09:34:44 -03:00
renovate[bot]
6c0d1c5672
chore(deps): update helm release oauth2-proxy to v7.7.8
2024-07-01 21:57:05 +02:00