Commit Graph

2491 Commits

Author SHA1 Message Date
Leandro Lafin ad8ba07b21
fix: use X-Forwarded-Uri if it exists for pathRegex match 2024-07-11 14:16:08 -03:00
Leandro Lafin 474f08f538
Update oauthproxy.go - typos in comment 2024-07-11 14:12:31 -03:00
Leandro Lafin ccf5bbad48
Update Dockerfile with qualified image names 2024-07-11 14:11:20 -03:00
Leandro Lafin 6d2cf6aa8d
Session-Cookie Support 2024-07-11 14:09:58 -03:00
Leandro Lafin e64f4d3bc5
Fixed build status badge in README.md 2024-07-11 13:46:24 -03:00
Leandro Lafin 27dc4ceecb
update: use go install in build step 2024-07-11 13:45:25 -03:00
Leandro Lafin 30751c7512
Update stale bot to v8 2024-07-11 13:44:33 -03:00
Leandro Lafin 03e49ae19a
Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS 2024-07-11 13:43:53 -03:00
Leandro Lafin b92604d224
Update golang.org/x/net to v0.7.0 ato address GHSA-vvpx-j8f3-3w6h 2024-07-11 13:36:46 -03:00
Leandro Lafin f8345d2986
Add documentation for --redis-insecure-skip-tls-verify flag 2024-07-11 13:35:16 -03:00
Leandro Lafin bc02aed6e8
Log the difference between invalid email and not authorized session 2024-07-11 13:34:39 -03:00
Leandro Lafin df0c641de9
Added documentation for the keycloak-oidc provider and the new Keycloak admin console 2024-07-11 13:32:39 -03:00
Leandro Lafin 3e21a6a203
Ensure sign-in page background is uniform throughout the page 2024-07-11 13:30:23 -03:00
Leandro Lafin 81b756a5d7
Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is 2024-07-11 13:29:30 -03:00
Leandro Lafin a8ad42e1e8
Fix a typo in oauthproxy.go 2024-07-11 11:19:45 -03:00
Leandro Lafin 596f4aaf26
fix typo in comment for oidc/provider.go 2024-07-11 11:19:02 -03:00
Leandro Lafin 1175b65ab5
Issue 1878: Validate URL call does not correctly honor already set URL 2024-07-11 11:15:41 -03:00
Leandro Lafin 734b1483d2
Update formatting error in overview for custom-sign-in-logo 2024-07-11 11:12:50 -03:00
Leandro Lafin 4d0303eef8
Fill empty UserIDClaim before assigning it to other values 2024-07-11 11:11:50 -03:00
Leandro Lafin 0c20afa6a3
Chnages checkout version to v3 2024-07-11 11:07:04 -03:00
Leandro Lafin 5e0b2d6f8a
feat: readiness check 2024-07-11 11:03:33 -03:00
Leandro Lafin e33bb5e8b0
Fix default scope settings for none oidc providers like GitHub 2024-07-10 18:02:50 -03:00
Leandro Lafin 8693c9a53b
Remove unsupported special characters from the code verifier runes 2024-07-10 17:58:34 -03:00
Leandro Lafin a4221a337d
Fix PKCE code verifier generation to never use UTF-8 characters 2024-07-10 17:57:26 -03:00
Leandro Lafin 05b688e088
Fix uninitialized user claim 2024-07-10 17:41:52 -03:00
Leandro Lafin be68c55542
Set correct platform type for arm v8 docker images 2024-07-10 17:38:17 -03:00
Leandro Lafin fc89630760
Protect htpasswd user list from race condition 2024-07-10 17:35:41 -03:00
Davi Rodrigues 9f64c67d65
Update SECURITY.md 2024-07-07 18:29:14 -03:00
Eduardo Vozniak 8f7537a6e9
add HSP IAM audit capabilities (#52)
<!--- Provide a general summary of your changes in the Title above -->

## Description

Add HSDP IAM audit capabilities to oauth2 proxy

## Motivation and Context

HSDP IAM does not provide important audit capabilities out of the box
such as successful login and some key auth errors.

## How Has This Been Tested?

Tested locally with:

```sh
export OAUTH2_PROXY_ENABLE_AUDIT='true'
export OAUTH2_PROXY_AUDIT_URL='url'
export OAUTH2_PROXY_AUDIT_PRODUCT_NAME='Reporting'
export OAUTH2_PROXY_AUDIT_PRODUCT_KEY='product key'
export OAUTH2_PROXY_AUDIT_SHARED_KEY='shared key'
export OAUTH2_PROXY_AUDIT_SECRET_KEY='secret'
```

## Checklist:

<!--- Go over all the following points, and put an `x` in all the boxes
that apply. -->
<!--- If you're unsure about any of these, don't hesitate to ask. We're
here to help! -->

- [ ] My change requires a change to the documentation or CHANGELOG.
- [ ] I have updated the documentation/CHANGELOG accordingly.
- [ ] I have created a feature (non-master) branch for my PR.
2024-07-03 10:11:30 -03:00
Erikson Bahr ab969ac2bd
fix valueset and improve error handling 2024-07-03 09:34:44 -03:00
renovate[bot] 6c0d1c5672 chore(deps): update helm release oauth2-proxy to v7.7.8 2024-07-01 21:57:05 +02:00
Erikson Bahr a00969ab06
fix lint 2024-07-01 15:28:38 -03:00
Erikson Bahr 8e832221bb
no longer break pipeline if cookie refresher fail 2024-07-01 15:22:04 -03:00
Erikson Bahr ce668ef7f6
add HSP IAM audit capabilities 2024-07-01 15:21:22 -03:00
Blue Falcon 8dfb7e9b26
docs: update README and fix code some commentary typos (#2608)
* Update overview.md

see: fc701bfd6a/pkg/apis/options/options.go (L123)

* docs(code-commentary): typo

- fixed typo

---------

Co-authored-by: Jan Larwig <jan@larwig.com>
2024-06-24 22:15:24 +02:00
Jan Larwig 3460cd4c74
chore(deps): update dependency codeclimate/test-reporter to v1
Merge pull request #2564 from oauth2-proxy/renovate/codeclimate-test-reporter-1.x
2024-06-23 19:59:21 +02:00
Jan Larwig 70057d3056
strip v off of version for generating the correct download url 2024-06-23 19:54:01 +02:00
tuunit 72ee8c8146
fix test reporter flags 2024-06-23 19:42:33 +02:00
Jan Larwig ece8145bd4
Merge branch 'master' into renovate/codeclimate-test-reporter-1.x 2024-06-23 19:06:41 +02:00
Jan Larwig 94aa62eece
chore(deps): update helm release oauth2-proxy to v7
Merge pull request #2565 from oauth2-proxy/renovate/major-helmv3
2024-06-23 19:06:21 +02:00
renovate[bot] a472392b81
chore(deps): update helm release oauth2-proxy to v7 2024-06-23 16:52:19 +00:00
Jan Larwig 2bb7ea5cc9
Merge branch 'master' into renovate/codeclimate-test-reporter-1.x 2024-06-23 18:50:57 +02:00
Jan Larwig 3f042de6fc
Merge pull request #2593 from oauth2-proxy/renovate/gomod
chore(deps): update gomod
2024-06-23 18:50:37 +02:00
Jan Larwig f201dff10c
Merge branch 'master' into renovate/codeclimate-test-reporter-1.x 2024-06-23 18:49:17 +02:00
renovate[bot] 65225ba397
chore(deps): update gomod 2024-06-23 16:46:10 +00:00
Jan Larwig 5053a5d20e
chore(deps): update dependency @easyops-cn/docusaurus-search-local to v0.44.2
Merge pull request #2683 from oauth2-proxy/renovate/npm
2024-06-23 18:45:13 +02:00
Jan Larwig 7508c62c1f
fix version scheme for download url 2024-06-23 18:43:39 +02:00
renovate[bot] 02a272340f
chore(deps): update dependency codeclimate/test-reporter to v1 2024-06-23 16:36:21 +00:00
renovate[bot] 907b957018
chore(deps): update dependency @easyops-cn/docusaurus-search-local to v0.44.2 2024-06-23 16:36:12 +00:00
Jan Larwig f583dd0b80
Merge pull request #2580 from oauth2-proxy/renovate/actions-configure-pages-5.x
chore(deps): update actions/configure-pages action to v5
2024-06-23 18:35:08 +02:00