Commit Graph

1814 Commits

Author SHA1 Message Date
Leandro Lafin ae00d0ce64
Update alpine to 3.18 2024-07-11 18:10:02 -03:00
Leandro Lafin cfd3c20e89
Added arch types to Docker and binary releases 2024-07-11 18:09:16 -03:00
Leandro Lafin 101391424f
Fixed name for GoogleGroups env variable + unit tests 2024-07-11 18:04:34 -03:00
Leandro Lafin 7cf1624dc3
Improved session documentation 2024-07-11 17:59:59 -03:00
Leandro Lafin 511552c790
bugfix: move oidc scope logic to oidc provider 2024-07-11 17:59:13 -03:00
Leandro Lafin e645994bbe
Fixing format for v7.5.0 2024-07-11 17:56:20 -03:00
Leandro Lafin ad81d2f8fb
Fix for v7.5.0 2024-07-11 17:45:51 -03:00
Leandro Lafin f5ae9ad2d2
Release v7.5.0 2024-07-11 17:23:16 -03:00
Leandro Lafin 7656a0aaf3
Workload identity support 2024-07-11 17:14:39 -03:00
Leandro Lafin 48305ec3a0
documented default for errors-to-info-log 2024-07-11 14:42:01 -03:00
Leandro Lafin 6568c84494
Embed static stylesheets and dependencies 2024-07-11 14:39:38 -03:00
Leandro Lafin c3b846d16a
Bugfix/check json path 2024-07-11 14:20:07 -03:00
Leandro Lafin ad8ba07b21
fix: use X-Forwarded-Uri if it exists for pathRegex match 2024-07-11 14:16:08 -03:00
Leandro Lafin 474f08f538
Update oauthproxy.go - typos in comment 2024-07-11 14:12:31 -03:00
Leandro Lafin ccf5bbad48
Update Dockerfile with qualified image names 2024-07-11 14:11:20 -03:00
Leandro Lafin 6d2cf6aa8d
Session-Cookie Support 2024-07-11 14:09:58 -03:00
Leandro Lafin e64f4d3bc5
Fixed build status badge in README.md 2024-07-11 13:46:24 -03:00
Leandro Lafin 27dc4ceecb
update: use go install in build step 2024-07-11 13:45:25 -03:00
Leandro Lafin 30751c7512
Update stale bot to v8 2024-07-11 13:44:33 -03:00
Leandro Lafin 03e49ae19a
Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS 2024-07-11 13:43:53 -03:00
Leandro Lafin b92604d224
Update golang.org/x/net to v0.7.0 ato address GHSA-vvpx-j8f3-3w6h 2024-07-11 13:36:46 -03:00
Leandro Lafin f8345d2986
Add documentation for --redis-insecure-skip-tls-verify flag 2024-07-11 13:35:16 -03:00
Leandro Lafin bc02aed6e8
Log the difference between invalid email and not authorized session 2024-07-11 13:34:39 -03:00
Leandro Lafin df0c641de9
Added documentation for the keycloak-oidc provider and the new Keycloak admin console 2024-07-11 13:32:39 -03:00
Leandro Lafin 3e21a6a203
Ensure sign-in page background is uniform throughout the page 2024-07-11 13:30:23 -03:00
Leandro Lafin 81b756a5d7
Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is 2024-07-11 13:29:30 -03:00
Leandro Lafin a8ad42e1e8
Fix a typo in oauthproxy.go 2024-07-11 11:19:45 -03:00
Leandro Lafin 596f4aaf26
fix typo in comment for oidc/provider.go 2024-07-11 11:19:02 -03:00
Leandro Lafin 1175b65ab5
Issue 1878: Validate URL call does not correctly honor already set URL 2024-07-11 11:15:41 -03:00
Leandro Lafin 734b1483d2
Update formatting error in overview for custom-sign-in-logo 2024-07-11 11:12:50 -03:00
Leandro Lafin 4d0303eef8
Fill empty UserIDClaim before assigning it to other values 2024-07-11 11:11:50 -03:00
Leandro Lafin 0c20afa6a3
Chnages checkout version to v3 2024-07-11 11:07:04 -03:00
Leandro Lafin 5e0b2d6f8a
feat: readiness check 2024-07-11 11:03:33 -03:00
Leandro Lafin e33bb5e8b0
Fix default scope settings for none oidc providers like GitHub 2024-07-10 18:02:50 -03:00
Leandro Lafin 8693c9a53b
Remove unsupported special characters from the code verifier runes 2024-07-10 17:58:34 -03:00
Leandro Lafin a4221a337d
Fix PKCE code verifier generation to never use UTF-8 characters 2024-07-10 17:57:26 -03:00
Leandro Lafin 05b688e088
Fix uninitialized user claim 2024-07-10 17:41:52 -03:00
Leandro Lafin be68c55542
Set correct platform type for arm v8 docker images 2024-07-10 17:38:17 -03:00
Leandro Lafin fc89630760
Protect htpasswd user list from race condition 2024-07-10 17:35:41 -03:00
Eduardo Vozniak 8f7537a6e9
add HSP IAM audit capabilities (#52)
<!--- Provide a general summary of your changes in the Title above -->

## Description

Add HSDP IAM audit capabilities to oauth2 proxy

## Motivation and Context

HSDP IAM does not provide important audit capabilities out of the box
such as successful login and some key auth errors.

## How Has This Been Tested?

Tested locally with:

```sh
export OAUTH2_PROXY_ENABLE_AUDIT='true'
export OAUTH2_PROXY_AUDIT_URL='url'
export OAUTH2_PROXY_AUDIT_PRODUCT_NAME='Reporting'
export OAUTH2_PROXY_AUDIT_PRODUCT_KEY='product key'
export OAUTH2_PROXY_AUDIT_SHARED_KEY='shared key'
export OAUTH2_PROXY_AUDIT_SECRET_KEY='secret'
```

## Checklist:

<!--- Go over all the following points, and put an `x` in all the boxes
that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're
here to help! -->

- [ ] My change requires a change to the documentation or CHANGELOG.
- [ ] I have updated the documentation/CHANGELOG accordingly.
- [ ] I have created a feature (non-master) branch for my PR.
2024-07-03 10:11:30 -03:00
Erikson Bahr ab969ac2bd
fix valueset and improve error handling 2024-07-03 09:34:44 -03:00
Erikson Bahr a00969ab06
fix lint 2024-07-01 15:28:38 -03:00
Erikson Bahr 8e832221bb
no longer break pipeline if cookie refresher fail 2024-07-01 15:22:04 -03:00
Erikson Bahr ce668ef7f6
add HSP IAM audit capabilities 2024-07-01 15:21:22 -03:00
Eduardo Vozniak f7de8bbb22
use introspect url from discovery (#51)
<!--- Provide a general summary of your changes in the Title above -->

## Description

<!--- Describe your changes in detail -->

## Motivation and Context

<!--- Why is this change required? What problem does it solve? -->
<!--- If it fixes an open issue, please link to the issue here. -->

## How Has This Been Tested?

<!--- Please describe in detail how you tested your changes. -->
<!--- Include details of your testing environment, and the tests you ran
to -->
<!--- see how your change affects other areas of the code, etc. -->

## Checklist:

<!--- Go over all the following points, and put an `x` in all the boxes
that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're
here to help! -->

- [ ] My change requires a change to the documentation or CHANGELOG.
- [ ] I have updated the documentation/CHANGELOG accordingly.
- [ ] I have created a feature (non-master) branch for my PR.
2024-04-23 12:48:03 -03:00
Erikson Bahr 0ee3758b01
use introspect url from discovery 2024-04-23 12:43:42 -03:00
Eduardo Vozniak 0bf401c2d1
allow setting arbitrary cookie refresh url (#50)
<!--- Provide a general summary of your changes in the Title above -->

## Description

<!--- Describe your changes in detail -->

Allow setting arbitrary URLs for oauth2 proxy cookie refresh mechanism.
#49

## Motivation and Context

<!--- Why is this change required? What problem does it solve? -->
<!--- If it fixes an open issue, please link to the issue here. -->

## How Has This Been Tested?

<!--- Please describe in detail how you tested your changes. -->
<!--- Include details of your testing environment, and the tests you ran
to -->
<!--- see how your change affects other areas of the code, etc. -->

## Checklist:

<!--- Go over all the following points, and put an `x` in all the boxes
that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're
here to help! -->

- [ ] My change requires a change to the documentation or CHANGELOG.
- [ ] I have updated the documentation/CHANGELOG accordingly.
- [ ] I have created a feature (non-master) branch for my PR.
2024-02-02 09:45:08 -03:00
Erikson Bahr 946f277f47
pass legacy url to actual one 2024-02-02 08:57:07 -03:00
Erikson Bahr 153743e952
update docs 2024-02-02 08:46:24 -03:00
Erikson Bahr 23cf172dd6
allow setting arbitrary cookie refresh url 2024-02-02 08:42:37 -03:00