dd598b3e9b
Merge pull request #5 from outlook/pasoroki_fix
...
Fixing issues that caused test failures
2017-06-28 11:37:09 +08:00
d181279917
Test fixes
2017-06-28 11:34:25 +08:00
f65cea6197
Merge pull request #4 from outlook/pasoroki_fix
...
Fix for google_test validation
2017-06-27 23:28:56 +08:00
2c5f6145aa
Fix for google_test validation
2017-06-27 23:26:38 +08:00
7b2ac72834
Merge pull request #3 from outlook/pasoroki_fix
...
Code cleanup
2017-06-27 15:16:57 +08:00
95cd1ac5a5
Code cleanup
2017-06-27 15:14:18 +08:00
6f1622931d
Merge pull request #2 from outlook/pasoroki_fix
...
Fix state option
2017-06-27 15:12:01 +08:00
dba4f436c8
Cleanup
2017-06-27 08:33:35 +08:00
b801997624
Fix incorrect "state" header
2017-06-26 06:21:38 +00:00
47fe902cbc
Merge branch 'master' of https://github.com/bitly/oauth2_proxy into HEAD
2017-06-22 03:06:56 +00:00
3c51c914ac
Merge pull request #405 from bspaans/patch-1
...
Update Google Auth Provider instructions
2017-06-21 09:24:24 -04:00
7fea71a4ce
Update Google Auth Provider instructions
2017-06-21 11:03:24 +01:00
cddd2fcd7c
Merge pull request #402 from shividhar/master
...
Fix spelling mistake in docs
2017-06-09 12:23:50 -04:00
c8c6b66465
Fix spelling mistake in docs
2017-06-09 12:17:24 -04:00
6d6cb7e1f8
Merge pull request #392 from arnottcr/master
...
[github provider] use Authorization header, not access_token query parameter
2017-05-26 08:42:07 -04:00
17b1fa31dd
use Authorization header, not access_token query parameter
2017-05-18 03:45:34 +00:00
f4c356637f
Merge pull request #382 from ploxiln/auth_request_readme
...
README: nginx auth_request example updates
2017-05-15 20:50:28 -04:00
6d295f8446
README: nginx auth_request example refresh cookie handling
...
how to pass back the refreshed oauth2_proxy cookie from an nginx auth_request
2017-04-24 17:59:21 -04:00
7f5672b433
README: simplify nginx auth_request example
...
/oauth2/auth is not more sensitive than other /oauth2/ paths,
does not need "internal" protection
"spdy" protocol is obsolete, http2 is the thing to enable now.
But it's orthogonal anyway.
No need for two separate content/upstream location blocks in
this example, reduce to just one, with a comment that it could
be serving files instead of proxying.
2017-04-24 17:56:15 -04:00
ea2540bc89
Merge pull request #381 from ploxiln/dist_strip
...
dist.sh: use go build option to strip binaries
2017-04-24 16:34:22 -04:00
68e3178812
dist.sh: use go build option to strip binaries
...
30% release binary size reduction
2017-04-24 16:04:36 -04:00
d7e327d712
bump to version 2.2.1-alpha for development
2017-04-24 16:04:06 -04:00
b90a23473f
Merge pull request #380 from jehiah/release_380
...
Release v2.2
2017-04-24 12:22:11 -04:00
f457a9042a
Readme: update --help usage
2017-04-24 12:16:16 -04:00
3fa5635d6c
Release 2.2.0
2017-04-24 12:11:23 -04:00
f511cac6a6
Merge pull request #365 from travisofthenorth/fix/default-http-address
...
Fix url parse error
2017-04-20 14:57:39 -04:00
120a47a526
Merge pull request #370 from idntfy/master
...
#369 : Optionally allow skipping authentication for preflight requests
2017-04-07 09:20:33 -04:00
1e7d2a08a3
#369 : Optionally allow skipping authentication for preflight requests
2017-04-07 15:01:47 +03:00
ab89aef202
Add doc for Azure updates
2017-04-03 12:40:44 -07:00
5b0e28fcbe
Add unittests for group filtering (Azure) ( #1 )
...
* Add unittests for group filtering (Azure)
2017-04-03 12:40:44 -07:00
342cac58ca
Fix group limits and original azure unit tests
2017-04-03 12:40:44 -07:00
b546ef4a3f
Add support for permitted groups
2017-04-03 12:40:44 -07:00
2fd6f02cd8
Add support for a simple group filter
2017-04-03 12:40:44 -07:00
5e5717ded7
Add support for passing groups from Azure AD
2017-04-03 12:40:43 -07:00
02c70307d6
Ignore .vagrant dir
2017-04-03 12:24:51 -07:00
6cbed581c2
Change session cookie delimeter to colon from pipe
...
This is to permit us to store a user's Groups in a pipe-delimited list
without fear of bad splits or having to reassemble it in transit.
2017-04-03 12:24:51 -07:00
f983933d88
Parse http address without url
2017-04-02 16:23:27 -04:00
af7be2d622
Merge pull request #319 from advarisk/auth-request
...
various fixes for getting Nginx auth_request mode working
2017-03-29 12:14:24 -04:00
fe44b89f57
update documentation for Nginx auth_request mode
2017-03-29 21:28:55 +05:30
90a22b2f39
Use X-Auth-Request-Redirect request header in sign-in page
...
This is useful in Nginx auth_request mode, if a 401 handler is
configured to redirect to the sign-in page. As the request URL
does not reflect the actual URL, the value is taken from the
header "X-Auth-Request-Redirect" instead. Based on #247
2017-03-29 21:28:55 +05:30
829b442302
add --set-xauthrequest flag for use in Nginx auth_request mode
...
This is enhancement of #173 to use "Auth Request" consistently in
the command-line option, configuration file and response headers.
It always sets the X-Auth-Request-User response header and if the
email is available, sets X-Auth-Request-Email as well.
2017-03-29 21:28:55 +05:30
93852a24cb
Merge pull request #362 from jehiah/ssl_insecure_skip_verify_362
...
Option to skip SSL verification
2017-03-29 11:02:26 -04:00
dcf62d06df
option for skipping OAuth provider SSL verification
2017-03-29 10:57:07 -04:00
bb9b607440
Merge pull request #361 from jehiah/gofmt_361
...
travis: run gofmt and go vet
2017-03-29 09:53:19 -04:00
c5fc7baa86
gofmt
2017-03-29 09:36:38 -04:00
c1116ea506
travis: run gofmt and go vet
2017-03-29 09:36:23 -04:00
4464655276
Merge pull request #360 from jehiah/csrf_validation_360
...
CSRF protection for OAuth flow.
2017-03-29 09:36:04 -04:00
55085d9697
csrf protection; always set state
2017-03-29 09:31:10 -04:00
6c690b699b
Merge pull request #339 from omazhary/issue-205
...
Allow to pass user headers only
2017-03-28 21:42:29 -04:00
107b4811b4
Merge pull request #346 from bdwyertech/patch-1
...
Oversize Cookie Alert
2017-03-28 21:40:11 -04:00
Pavel Sorokin
Jehiah Czebotar
Bart Spaans
Shivansh Dhar
Colin Arnott
Pierce Lopez
idntfy
Brandon Matthews
Travis Hunter
Ashish Kulkarni
Sjoerd Mulder
Lukasz Siudut
Colin Arnott