oauth2-proxy/providers
ckwalsh c900c51a1b
Unbreak oauth2-proxy for keycloak provider after 2c668a (#1502)
* Unbreak oauth2-proxy for keycloak provider after 2c668a

With 2c668a, oauth2-proxy fails a request if the token validation fails.
Token validation always fails with the keycloak provider, due to the
valudation request passing the token via the URL, and keycloak not
parsing the url for tokens.

This is fixed by forcing the validation request to pass the token via a
header.

This code taken from the DigitalOcean provider, which presumably forcing
the token to be passed via header for the same reason.

Test plan: I was unable to build a docker image to test the fix, but I
believe it is relatively simple, and it passes the "looks good to me"
test plan.

* Add changelog entry for unbreak keycloak

Co-authored-by: Joel Speed <Joel.speed@hotmail.co.uk>
2022-05-29 11:08:04 +01:00
..
adfs.go Support for passing through URL query parameters from /oauth2/start to the ID provider's login URL. 2022-02-19 16:11:09 +00:00
adfs_test.go Support for passing through URL query parameters from /oauth2/start to the ID provider's login URL. 2022-02-19 16:11:09 +00:00
auth_test.go Integrate claim extractor into providers 2022-02-16 10:28:33 +00:00
azure.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
azure_test.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
bitbucket.go Move provider initialisation into providers package 2022-02-16 10:38:05 +00:00
bitbucket_test.go Move provider initialisation into providers package 2022-02-16 10:38:05 +00:00
digitalocean.go Integrate claim extractor into providers 2022-02-16 10:28:33 +00:00
digitalocean_test.go Fix import path for v7 (#800) 2020-09-29 17:44:42 +01:00
facebook.go Integrate claim extractor into providers 2022-02-16 10:28:33 +00:00
facebook_test.go Move provider URLs to package level vars 2020-07-19 18:34:55 +01:00
github.go Corrects request endpoint (#1650) 2022-05-25 20:05:12 +01:00
github_test.go Corrects request endpoint (#1650) 2022-05-25 20:05:12 +01:00
gitlab.go Move provider initialisation into providers package 2022-02-16 10:38:05 +00:00
gitlab_test.go Move provider initialisation into providers package 2022-02-16 10:38:05 +00:00
google.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
google_test.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
internal_util.go Fix import path for v7 (#800) 2020-09-29 17:44:42 +01:00
internal_util_test.go Cleanup method name refactors missed in comments 2020-11-29 14:18:14 -08:00
keycloak.go Unbreak oauth2-proxy for keycloak provider after 2c668a (#1502) 2022-05-29 11:08:04 +01:00
keycloak_oidc.go Move provider initialisation into providers package 2022-02-16 10:38:05 +00:00
keycloak_oidc_test.go Move OIDC IDToken verifier behind interface 2022-02-19 15:37:54 +00:00
keycloak_test.go Move provider initialisation into providers package 2022-02-16 10:38:05 +00:00
linkedin.go Integrate claim extractor into providers 2022-02-16 10:28:33 +00:00
linkedin_test.go Update LinkedIn provider validate URL (#1444) 2021-11-19 21:36:33 +00:00
logingov.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
logingov_test.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
nextcloud.go Move provider initialisation into providers package 2022-02-16 10:38:05 +00:00
nextcloud_test.go Integrate claim extractor into providers 2022-02-16 10:28:33 +00:00
oidc.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
oidc_test.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
provider_data.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
provider_data_test.go Support for passing through URL query parameters from /oauth2/start to the ID provider's login URL. 2022-02-19 16:11:09 +00:00
provider_default.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
provider_default_test.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
providers.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
providers_suite_test.go Ensure errors in tests are logged to the GinkgoWriter 2021-02-10 19:50:04 +00:00
providers_test.go PKCE Support (#1541) 2022-03-13 10:08:33 +00:00
util.go Support for passing through URL query parameters from /oauth2/start to the ID provider's login URL. 2022-02-19 16:11:09 +00:00
util_test.go Refactor OIDC to EnrichSession 2020-12-21 16:51:52 -08:00