3d22a11658 
								
							 
						 
						
							
							
								
								added better tests for gcp healthcheck stuff  
							
							
							
						 
						
							2019-03-25 09:56:56 -07:00  
				
					
						
							
							
								 
						
							
								8816a2a972 
								
							 
						 
						
							
							
								
								Add -skip-oidc-discovery option ( #41 )  
							
							... 
							
							
							
							* added karrieretutor go-oidc fork for using an AAD B2C Policy
* added karrieretutor go-oidc fork for using an AAD B2C Policy
* added --skip-oidc-discovery option
* added --skip-oidc-discovery option
* add simple test for skip-oidc-discovery option
* revert Dockerfile to pusher upstream
* revert Dockerfile to pusher upstream
* remove karrieretutor b2c option leftover
* remove karrieretutor b2c option leftover
* Fix typo (missing letters)
Co-Authored-By: marratj <marrat@marrat.de>
* Fix typo (missing letters)
Co-Authored-By: marratj <marrat@marrat.de>
* replace fake http client with NewProvider() from go-oidc
* remove OIDC UserInfo URL option (not required)
* add info about -skip-oidc-discovery to README
* add note to changelog
* Update outdated comment 
							
						 
						
							2019-03-04 13:54:22 +00:00  
				
					
						
							
							
								 
						
							
								8ee802d4e5 
								
							 
						 
						
							
							
								
								Lint for non-comment linter errors  
							
							
							
						 
						
							2018-11-29 14:26:41 +00:00  
				
					
						
							
							
								 
						
							
								e955d2be0e 
								
							 
						 
						
							
							
								
								options: update options parsing for better handling of incorrect values  
							
							... 
							
							
							
							* don't add in failed compiled regexes for skip auth regex option
* improve test coverage for skip auth regex option to handle partial
success case
* add tests for incorrect upstream options parsing errors 
							
						 
						
							2017-11-20 11:37:53 -05:00  
				
					
						
							
							
								 
						
							
								8a77cfcac3 
								
							 
						 
						
							
							
								
								Swap out bmizerany/assert package that is deprecated in favor of stretchr/testify/assert  
							
							
							
						 
						
							2017-10-23 12:24:17 -04:00  
				
					
						
							
							
								 
						
							
								0b117133b9 
								
							 
						 
						
							
							
								
								Remove check for >0 upstreams  
							
							... 
							
							
							
							When used solely for auth_request there is no upstream.
Instead of forcing users to set a dummy upstream, remove
the check. 
							
						 
						
							2017-07-20 21:54:31 +02:00  
				
					
						
							
							
								 
						
							
								c015075996 
								
							 
						 
						
							
							
								
								Validate cookie name  ( #278 )  
							
							... 
							
							
							
							Validate cookie name passes go's isCookieNameValid check 
							
						 
						
							2016-07-19 15:51:25 -04:00  
				
					
						
							
							
								 
						
							
								cdebfd6436 
								
							 
						 
						
							
							
								
								base64 cookie support  
							
							
							
						 
						
							2016-06-20 07:45:43 -04:00  
				
					
						
							
							
								 
						
							
								e4626c1360 
								
							 
						 
						
							
							
								
								Sign Upstream requests with HMAC.  closes   #147  
							
							
							
						 
						
							2015-11-15 22:09:30 -05:00  
				
					
						
							
							
								 
						
							
								51a2e4e48c 
								
							 
						 
						
							
							
								
								*: rename Url to URL everywhere  
							
							... 
							
							
							
							Go coding style says that acronyms should be all lower or all upper. Fix
Url to URL. 
							
						 
						
							2015-11-09 00:47:44 +01:00  
				
					
						
							
							
								 
						
							
								3fd8f911c2 
								
							 
						 
						
							
							
								
								google: Support restricting access to a specific group(s)  
							
							
							
						 
						
							2015-09-09 02:10:32 -07:00  
				
					
						
							
							
								 
						
							
								0692c3763f 
								
							 
						 
						
							
							
								
								More robust handling for missing email  
							
							
							
						 
						
							2015-07-24 16:26:40 -04:00  
				
					
						
							
							
								 
						
							
								8d50b372e4 
								
							 
						 
						
							
							
								
								immediately redeem refresh token for provider==Google  
							
							
							
						 
						
							2015-06-23 13:56:14 -04:00  
				
					
						
							
							
								 
						
							
								41b21dd0b1 
								
							 
						 
						
							
							
								
								Enforce that cookie_refresh < cookie_expire  
							
							
							
						 
						
							2015-05-09 17:37:33 -04:00  
				
					
						
							
							
								 
						
							
								8ec967ac32 
								
							 
						 
						
							
							
								
								Check cookie_secret size when cookie_refresh set  
							
							
							
						 
						
							2015-05-09 17:37:33 -04:00  
				
					
						
							
							
								 
						
							
								cf79fd9e4c 
								
							 
						 
						
							
							
								
								Refactor pass_access_token+cookie_secret check  
							
							... 
							
							
							
							Moves the check from NewOauthProxy() to Options.Validate() and adds a test. 
							
						 
						
							2015-04-07 05:53:40 -04:00  
				
					
						
							
							
								 
						
							
								d9a945ebc3 
								
							 
						 
						
							
							
								
								Integrate Provider into Options and OauthProxy  
							
							
							
						 
						
							2015-03-31 09:34:50 -04:00  
				
					
						
							
							
								 
						
							
								263e16eeea 
								
							 
						 
						
							
							
								
								add --proxy-host-header option  
							
							
							
						 
						
							2015-03-17 15:53:01 -04:00  
				
					
						
							
							
								 
						
							
								d751bbea4c 
								
							 
						 
						
							
							
								
								Catch more options errors at once; add test  
							
							
							
						 
						
							2015-03-16 14:45:20 -04:00