oauth2-proxy/pkg
stagswtf 51e80f24ef
fix: use GetSecret() in ticket.go makeCookie to respect cookie-secret-file (#3228)
* fix: use GetSecret() in ticket.go makeCookie

The makeCookie method in ticket.go was using t.options.Secret directly, which
meant cookie-secret-file was not being respected. Updated to use GetSecret()
which handles both cookie-secret and cookie-secret-file properly.

Also added test coverage for cookie-secret-file functionality.

Fixes #3224

Signed-off-by: stagswtf <142280349+stagswtf@users.noreply.github.com>

* docs: update CHANGELOG.md for cookie-secret-file fix

Signed-off-by: stagswtf <142280349+stagswtf@users.noreply.github.com>

* correct PR link and undo file formatting

Signed-off-by: stagswtf <142280349+stagswtf@users.noreply.github.com>

* fix: error wrapping

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: stagswtf <142280349+stagswtf@users.noreply.github.com>
Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>
2025-10-28 08:37:25 +01:00
..
apis feat: allow disable-keep-alives configuration in upstream (#3156) 2025-08-19 07:56:16 +02:00
app chore(lint): fix staticcheck issues (#3061) 2025-05-26 12:29:34 +02:00
authentication/basic
clock
cookies feat(cookie): add feature support for cookie-secret-file (#3104) 2025-07-22 18:59:55 +02:00
encryption feat: bump to go1.24.5 and full dependency update (#3116) 2025-07-13 21:55:57 +02:00
header
http
ip
logger
middleware Add --bearer-token-login-fallback option (#2924) 2025-04-21 13:40:39 +01:00
providers feat: ability to parse JWT encoded profile claims (#3014) 2025-04-28 16:39:09 +02:00
requests Merge commit from fork 2025-07-30 19:46:58 +02:00
sessions fix: use GetSecret() in ticket.go makeCookie to respect cookie-secret-file (#3228) 2025-10-28 08:37:25 +01:00
upstream feat: allow disable-keep-alives configuration in upstream (#3156) 2025-08-19 07:56:16 +02:00
util
validation feat: make google-groups argument optional (#3138) 2025-07-24 07:55:54 +02:00
version
watcher