Br1anandJan Larwig ff357daa04 fix: use CSRFExpire instead of Expire for CSRF cookie validation (#3369) ...

* fix: use CSRFExpire instead of Expire for CSRF cookie validation

Signed-off-by: Br1an67 <932039080@qq.com>

* doc: add changelog entry for #3369

Signed-off-by: Jan Larwig <jan@larwig.com>

---------

Signed-off-by: Br1an67 <932039080@qq.com>
Signed-off-by: Jan Larwig <jan@larwig.com>
Co-authored-by: Jan Larwig <jan@larwig.com>

2026-03-18 22:30:07 +08:00

..

apis

feat: add support for specifying allowed OIDC JWT signing algorithms (#2753) (#2851)

2026-03-18 22:24:27 +08:00

app

chore(lint): fix staticcheck issues (#3061)

2025-05-26 12:29:34 +02:00

authentication

fix: hmacauth dependency licensing issue (#3253)

2025-11-09 20:14:54 +01:00

cookies

fix: use CSRFExpire instead of Expire for CSRF cookie validation (#3369)

2026-03-18 22:30:07 +08:00

encryption

fix alpha config

2025-11-16 22:38:40 +01:00

header

revert: secrets as []byte instead of string

2025-11-16 22:38:42 +01:00

ip

feat: add CF-Connecting-IP as supported real ip header (#2821)

2024-11-04 23:28:08 +01:00

logger

Request ID Logging (#1087)

2021-03-21 18:20:57 +00:00

middleware

feat: migrate google used organization id and header normalization booleans to pointers

2025-11-16 22:39:01 +01:00

providers

feat: add support for specifying allowed OIDC JWT signing algorithms (#2753) (#2851)

2026-03-18 22:24:27 +08:00

proxyhttp

chore(deps): update dependency golangci/golangci-lint to v2.7.2 (#3254)

2026-01-04 10:23:26 +01:00

requests

use official upstream yaml library v3

2025-11-16 22:38:22 +01:00

sessions

fix: add tests for configure options and URL overrides when empty

2026-02-19 10:16:47 +01:00

upstream

docs: add todo for revamping the usage / naming of PassHostHeader

2026-01-17 11:06:24 +01:00

util

feat: allow arbitrary claims from the IDToken and IdentityProvider UserInfo endpoint to be added to the session state (#2685)

2026-03-14 12:04:33 +08:00

validation

feat: add support for specifying allowed OIDC JWT signing algorithms (#2753) (#2851)

2026-03-18 22:24:27 +08:00

version

feat: Replace default Go user-agent with oauth2-proxy and version (#2570)

2024-07-14 21:09:17 +01:00

watcher

Fix Linting Errors (#1835)

2022-10-21 11:57:51 +01:00