5b0e28fcbe
Add unittests for group filtering (Azure) ( #1 )
...
* Add unittests for group filtering (Azure)
2017-04-03 12:40:44 -07:00
342cac58ca
Fix group limits and original azure unit tests
2017-04-03 12:40:44 -07:00
b546ef4a3f
Add support for permitted groups
2017-04-03 12:40:44 -07:00
2fd6f02cd8
Add support for a simple group filter
2017-04-03 12:40:44 -07:00
5e5717ded7
Add support for passing groups from Azure AD
2017-04-03 12:40:43 -07:00
6cbed581c2
Change session cookie delimeter to colon from pipe
...
This is to permit us to store a user's Groups in a pipe-delimited list
without fear of bad splits or having to reassemble it in transit.
2017-04-03 12:24:51 -07:00
c5fc7baa86
gofmt
2017-03-29 09:36:38 -04:00
55085d9697
csrf protection; always set state
2017-03-29 09:31:10 -04:00
cd0d13e3fb
Merge pull request #357 from wrapp/skip-group-lookup-404
...
Skip 404 errors when looking up Google groups
2017-03-28 21:38:55 -04:00
289a6ccf46
add check for //.* to prevent open redirect during oauth
2017-03-28 21:12:33 -04:00
652f43ed38
Skip 404 errors when looking up Google groups
...
When checking user membership against Google groups the groups are checked one
at a time and in the order that they were supplied. If one of the groups does
not exist then the checking is halted with the following error.
google.go:201: googleapi: Error 404: Resource Not Found: groupKey, notFound
None of the groups following the missing group are checked either. This means
that something as trivial as a typo in the first group will make it impossible
for anybody to login.
This change catches the 404, logs a message, and then carries on as usual. In
this way a typo will cause a particular group to stop working but will not
affect any other groups.
2017-03-28 16:06:15 +02:00
c566648127
add stripParam and stripToken methods to obfuscate log output
2016-08-02 21:01:44 -06:00
5acf96b75d
Getting mail for Azure provider fix + tests
2016-06-29 09:00:08 +02:00
a0763477c5
Facebook Authentication Provider
...
* will not re-prompt if the email permission is denied, or if you previously authorized the same FB app without the email scope.
2016-06-23 08:43:21 -04:00
bcb8064831
github: fix github enterprise support
2016-06-20 08:15:07 -04:00
cdebfd6436
base64 cookie support
2016-06-20 07:45:43 -04:00
293d674e14
Merge pull request #214 from raphink/github_multiple_teams
...
github provider: allow multiple teams
2016-02-17 17:24:50 -05:00
338e99773a
github provider: allow multiple teams
2016-02-17 23:17:08 +01:00
034612bf8b
Add GitLab provider
2016-02-17 06:19:52 -06:00
36128e971f
Merge pull request #197 from ruta-goomba/enterprise-github
...
use Github provider with GitHub enterprise
2016-02-06 13:24:48 -06:00
a9cf8b3313
adding enterprise github provider
...
print the error stack trace
point to my fork in oauthproxy.go
addint pointers to ruta-goomba fork in mulitple files
change api endpoint
replace hard-coded github api endpoint with variables
resetting fall through github urls to point to github.com
fix malformed url
changes to enable use with enterprise github
2016-01-21 21:22:18 +00:00
10f47e325b
Add Azure Provider
2016-01-20 03:57:17 -05:00
51a2e4e48c
*: rename Url to URL everywhere
...
Go coding style says that acronyms should be all lower or all upper. Fix
Url to URL.
2015-11-09 00:47:44 +01:00
3fd8f911c2
google: Support restricting access to a specific group(s)
2015-09-09 02:10:32 -07:00
d1c0208824
Merge pull request #131 from ebardsley/master
...
Allow passing the value of "approval_prompt" as a flag or option.
2015-08-27 07:33:07 -04:00
8da7325683
Update github.go
2015-08-26 00:11:24 +08:00
33045a792b
Add a flag to set the value of "approval_prompt".
...
By setting this to "force", certain providers, like Google,
will interject an additional prompt on every new session. With other values,
like "auto", this prompt is not forced upon the user.
2015-07-31 00:43:47 -07:00
0692c3763f
More robust handling for missing email
2015-07-24 16:26:40 -04:00
c1bf1ad167
github: better debug output for org/team validation
2015-07-24 16:10:10 -04:00
d49c3e167f
SessionState refactoring; improve token renewal and cookie refresh
...
* New SessionState to consolidate email, access token and refresh token
* split ServeHttp into individual methods
* log on session renewal
* log on access token refresh
* refactor cookie encription/decription and session state serialization
2015-07-02 23:09:11 -04:00
8d50b372e4
immediately redeem refresh token for provider==Google
2015-06-23 13:56:14 -04:00
e9b5631eed
cookie refresh: validation fixes, interval changes
...
* refresh now calculated as duration from cookie set
2015-06-23 07:51:00 -04:00
f5db2e1ff7
More complete HTTP error logging
2015-06-07 21:03:53 -04:00
a6694ad3c7
github: handle users part of an Org not on a team
2015-06-06 14:44:42 -04:00
b96a078839
Project Rename -> oauth2_proxy
2015-05-21 02:55:04 -04:00
37b38dd2f4
Github provider
2015-05-21 02:21:19 -04:00
8471f972e1
Move ValidateToken() to Provider
2015-05-21 02:06:23 -04:00
72857018ee
Introduce `validate-url` flag/config
2015-05-08 17:13:35 -04:00
5bc77b0ee8
LinkedIn OAuth support.
2015-04-17 17:35:40 -07:00
59c3ba40f6
Add MyUSA provider
2015-03-31 15:17:17 -04:00
666e6ad436
Add ProviderName field; use in sign_in template
2015-03-31 12:59:07 -04:00
e2931da853
Create providers package with Google default
2015-03-31 09:34:50 -04:00
Pavel Sorokin
Brandon Matthews
Jehiah Czebotar
Colin Arnott
Eskil Andreen
nickmiller-wf
Tomas Pramuka
Raphaël Pinson
pmosbach
Ruta Sakalauskaite
Eelco Cramer
Brandon Philips
Justin Burnham
铁哥
Ed Bardsley
Mike Bland
Darren Lee