Jan Larwig 4a14ad0d34 fix: csrf cookies and sane samesite defaults ...

Signed-off-by: Jan Larwig <jan@larwig.com>

2026-03-26 22:24:21 +01:00

..

apis

feat(cookie): change SameSiteMode and ScriptAccess enum values to PascalCasing

2026-03-26 22:24:21 +01:00

app

chore(lint): fix staticcheck issues (#3061)

2025-05-26 12:29:34 +02:00

authentication

fix: hmacauth dependency licensing issue (#3253)

2025-11-09 20:14:54 +01:00

cookies

fix: csrf cookies and sane samesite defaults

2026-03-26 22:24:21 +01:00

encryption

fix: cookie secret related test cases

2026-03-26 22:24:21 +01:00

header

revert: secrets as []byte instead of string

2025-11-16 22:38:42 +01:00

ip

fix: handle Unix socket RemoteAddr in IP resolution (#3374)

2026-03-23 10:22:36 +01:00

logger

…

middleware

fix: cookie secret related test cases

2026-03-26 22:24:21 +01:00

providers

feat: add support for specifying allowed OIDC JWT signing algorithms (#2753) (#2851)

2026-03-18 22:24:27 +08:00

proxyhttp

feat: add support for setting a unix binding's socket file mode (#3376)

2026-03-19 00:08:50 +08:00

requests

use official upstream yaml library v3

2025-11-16 22:38:22 +01:00

sessions

fix: cookie secret related test cases

2026-03-26 22:24:21 +01:00

upstream

fix: propagate errors during route building (#3383)

2026-03-23 11:25:20 +01:00

util

feat: allow arbitrary claims from the IDToken and IdentityProvider UserInfo endpoint to be added to the session state (#2685)

2026-03-14 12:04:33 +08:00

validation

feat(cookie): change SameSiteMode and ScriptAccess enum values to PascalCasing

2026-03-26 22:24:21 +01:00

version

feat: Replace default Go user-agent with oauth2-proxy and version (#2570)

2024-07-14 21:09:17 +01:00

watcher

Fix Linting Errors (#1835)

2022-10-21 11:57:51 +01:00