Commit Graph

146 Commits

Author SHA1 Message Date
Anderson Valério fd6f9c0c63
reverting formatting changes 2024-12-02 10:51:28 -03:00
Anderson Valério f0c2b53784
reverting changes that only cause conflicts 2024-11-29 15:15:55 -03:00
Leandro Lafin b8ba647fb2
Fixing unit tests 2024-07-15 12:06:42 -03:00
Leandro Lafin 1b4c3d756e
Session aware logout, backend logout url approach 2024-07-15 10:14:25 -03:00
Leandro Lafin e684125ca7
upgrading to go 1.21 2024-07-15 09:54:57 -03:00
Leandro Lafin c156c9f732
Add ability to configure username for Redis cluster connections 2024-07-15 08:43:15 -03:00
Leandro Lafin 822cfad994
Feature/add option to skip loading claims from profile url 2024-07-12 15:57:12 -03:00
Leandro Lafin 634fbe6dc6
Feature - Add env variable support for alpha struct 2024-07-12 15:29:38 -03:00
Leandro Lafin 2434369974
Add possibility to encode the state param as UrlEncodedBase64 2024-07-12 15:20:57 -03:00
Leandro Lafin b5a40ce6a5
Support http.AllowQuerySemicolons 2024-07-12 14:36:15 -03:00
Leandro Lafin 8fdec4fd9e
Refactored docs 2024-07-12 11:32:20 -03:00
Leandro Lafin ba306ce9cd
Add support for unix socket as upstream 2024-07-12 11:30:17 -03:00
Leandro Lafin 6aa359ae83
Issue: 2236 - adds an option to append CA certificates 2024-07-12 11:11:24 -03:00
Leandro Lafin 7ca3ec6357
Feature: Allowing relative redirect url though an option 2024-07-12 11:04:23 -03:00
Leandro Lafin 896c679146
Fixed Google ADC functionality 2024-07-12 11:00:33 -03:00
Leandro Lafin 466e91695e
Updated linters 2024-07-12 10:30:16 -03:00
Leandro Lafin ee23b9ffc0
Update dependencies 2024-07-12 09:57:09 -03:00
Leandro Lafin 101391424f
Fixed name for GoogleGroups env variable + unit tests 2024-07-11 18:04:34 -03:00
Leandro Lafin e645994bbe
Fixing format for v7.5.0 2024-07-11 17:56:20 -03:00
Leandro Lafin ad81d2f8fb
Fix for v7.5.0 2024-07-11 17:45:51 -03:00
Leandro Lafin 7656a0aaf3
Workload identity support 2024-07-11 17:14:39 -03:00
Leandro Lafin 5e0b2d6f8a
feat: readiness check 2024-07-11 11:03:33 -03:00
Erikson Bahr ce668ef7f6
add HSP IAM audit capabilities 2024-07-01 15:21:22 -03:00
Erikson Bahr 946f277f47
pass legacy url to actual one 2024-02-02 08:57:07 -03:00
Erikson Bahr 23cf172dd6
allow setting arbitrary cookie refresh url 2024-02-02 08:42:37 -03:00
Erikson Bahr e09053e3c3
fix unit tests 2024-02-01 13:59:16 -03:00
Erikson Bahr 4b00a44fcf
fix unit tests 2024-02-01 11:55:09 -03:00
Erikson Bahr 7ca98f24c8
fix unit tests 2024-02-01 11:15:02 -03:00
Erikson Bahr df015b5123
add 'OAUTH2_PROXY_OIDC_ENABLE_COOKIE_REFRESH' and 'OAUTH2_PROXY_OIDC_COOKIE_REFRESH_NAME' options 2024-02-01 10:38:06 -03:00
Erikson Bahr ac2d04686f
implement oidc singl sign on cookie refresher 2024-02-01 08:53:16 -03:00
Eduardo Vozniak 2c7543f38f
Merging 7.4.0 2023-09-01 08:09:44 -03:00
lohith-karlapudi c0fe7f62da Update legacy_options_test.go 2022-08-12 15:25:54 +05:30
lohith-karlapudi 1d1e415277 Update legacy_options_test.go 2022-08-11 17:21:59 +05:30
lohith-karlapudi 6eaacf791c adding id token header 2022-08-11 15:43:55 +05:30
prince-melvin eb092c97b3 Change flag names 2021-05-10 20:10:58 +05:30
prince-melvin 3f975235b1 Change header name 2021-05-10 15:04:36 +05:30
princemelvin 9d087603f2 added tests for options 2021-05-06 17:53:31 +05:30
princemelvin 35e1452e9d Added introspection support in OIDC 2021-05-05 18:07:25 +05:30
yanasega 42475c28f7
Multiple providers in alpha config (#947)
* Initial commit of multiple provider logic:
1. Created new provider options.
2. Created legacy provider options and conversion options.
3. Added Providers to alpha Options.
4. Started Validation migration of multiple providers
5. Tests.

* fixed lint issues

* additional lint fixes

* Nits and alterations based on CR: manliy splitting large providers validation function and adding comments to provider options

* fixed typo

* removed weird : file

* small CR changes

* Removed GoogleGroups validation due to new allowed-groups (including tests). Added line in CHANGELOG

* Update pkg/apis/options/providers.go

Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>

* Update pkg/apis/options/providers.go

Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>

* Update pkg/apis/options/providers.go

Co-authored-by: Nick Meves <nick.meves@greenhouse.io>

* Initial commit of multiple provider logic:
1. Created new provider options.
2. Created legacy provider options and conversion options.
3. Added Providers to alpha Options.
4. Started Validation migration of multiple providers
5. Tests.

* fixed lint issues

* additional lint fixes

* Nits and alterations based on CR: manliy splitting large providers validation function and adding comments to provider options

* small CR changes

* auto generates alpha_config.md

* rebase (mainly service alpha options related conflicts)

* removed :

* Nits and alterations based on CR: manliy splitting large providers validation function and adding comments to provider options

* small CR changes

* Removed GoogleGroups validation due to new allowed-groups (including tests). Added line in CHANGELOG

* "cntd. rebase"

* ran make generate again

* last conflicts

* removed duplicate client id validation

* 1. Removed provider prefixes
2. altered optionsWithNilProvider logic
3. altered default provider logic
4. moved change in CHANELOG to 7.0.0

* fixed TestGoogleGroupOptions test

* ran make generate

* moved CHANGLOG line to 7.1.1

* moved changelog comment to 7.1.2 (additional rebase)

Co-authored-by: Yana Segal <yana.segal@nielsen.com>
Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
Co-authored-by: Nick Meves <nick.meves@greenhouse.io>
2021-04-03 17:06:30 +01:00
Oliver 7ebeecb128
Fix metrics server (#1141)
* fix MetricsSecureAddress cfg tag

* add metrics* flags to docs

* update CHANGELOG
2021-04-01 13:58:13 +01:00
Joel Speed 64f0a9f580
Reinstate preferEmailToUser behaviour for basic auth sessions 2021-03-22 13:13:26 +00:00
Nick Meves c1267bb92d
Request ID Logging (#1087)
* Add RequestID to the RequestScope

* Expose RequestID to auth & request loggers

* Use the RequestID in templated HTML pages

* Allow customizing the RequestID header

* Document new Request ID support

* Add more cases to scope/requestID tests

* Split Get vs Generate RequestID funtionality

* Add {{.RequestID}} to the request logger tests

* Move RequestID management to RequestScope

* Use HTML escape instead of sanitization for Request ID rendering
2021-03-21 18:20:57 +00:00
Joel Speed f4b3115dd3
Add complete metrics server configuration 2021-03-07 11:49:12 +00:00
Joel Speed 3d457a8cdf
Create server options struct and move legacy server options to legacyOptions 2021-03-07 11:49:08 +00:00
Nick Meves 602dac7852
Move Logging to Middleware Package (#1070)
* Use a specialized ResponseWriter in middleware

* Track User & Upstream in RequestScope

* Wrap responses in our custom ResponseWriter

* Add tests for logging middleware

* Inject upstream metadata into request scope

* Use custom ResponseWriter only in logging middleware

* Assume RequestScope is never nil
2021-03-06 17:27:16 +00:00
Stefan Sedich 220b3708fc
Add support for setting groups on session when using basic auth (#1064)
* Add support for setting groups on session when using basic auth

* Refactoring based on feedback

* Attribution
2021-02-25 13:02:23 -08:00
Joel Speed 23e545a639
Add option for custom logos on the sign in page 2021-02-19 13:23:55 +00:00
Sean Jones a7c8a233ba
Add Prometheus metrics endpoint
Add the Prometheus http.Handler to serve metrics at MetricsPath ("/metrics"
by default). This allows Prometheus to scrape metrics from OAuth2 Proxy.

Add a new middleware NewRequestMetrics and attach it to the preAuth
chain. This will collect metrics on all requests made to OAuth2 Proxy

Collapse some calls to Prinf() and os.Exit(1) to Fatalf as they are
equivalent. main() has a strict 50 lines limit so brevity in these
calls appreciated
2021-02-15 13:45:26 +00:00
Joel Speed 6ecbc7bc4e
Allow users to choose detailed error messages on error pages 2021-02-12 21:12:28 +00:00
Joel Speed 84f76c6060
Move template options to their own struct 2021-02-12 16:55:51 +00:00