- Apr 12, 2019
-
-
Joel Speed authored
-
Joel Speed authored
Co-Authored-By:
martin-loetzsch <martin.loetzsch@gmail.com>
-
Joel Speed authored
Co-Authored-By:
martin-loetzsch <martin.loetzsch@gmail.com>
-
Joel Speed authored
Co-Authored-By:
martin-loetzsch <martin.loetzsch@gmail.com>
-
Joel Speed authored
Co-Authored-By:
martin-loetzsch <martin.loetzsch@gmail.com>
-
Joel Speed authored
Co-Authored-By:
martin-loetzsch <martin.loetzsch@gmail.com>
-
Joel Speed authored
Co-Authored-By:
martin-loetzsch <martin.loetzsch@gmail.com>
-
- Apr 10, 2019
-
-
Costel Moraru authored
-
Costel Moraru authored
-
- Mar 26, 2019
-
-
daB0bby authored
-
timothy-spencer authored
-
- Mar 21, 2019
-
-
timothy-spencer authored
-
- Mar 20, 2019
-
-
Tim Spencer authored
* first stab at login.gov provider * fixing bugs now that I think I understand things better * fixing up dependencies * remove some debug stuff * Fixing all dependencies to point at my fork * forgot to hit save on the github rehome here * adding options for setting keys and so on, use JWT workflow instead of PKCE * forgot comma * was too aggressive with search/replace * need JWTKey to be byte array * removed custom refresh stuff * do our own custom jwt claim and store it in the normal session store * golang json types are strange * I have much to learn about golang * fix time and signing key * add http lib * fixed claims up since we don't need custom claims * add libs * forgot ioutil * forgot ioutil * moved back to pusher location * changed proxy github location back so that it builds externally, fixed up []byte stuff, removed client_secret if we are using login.gov * update dependencies * do JWTs properly * finished oidc flow, fixed up tests to work better * updated comments, added test that we set expiresOn properly * got confused with header and post vs get * clean up debug and test dir * add login.gov to README, remove references to my repo * forgot to remove un-needed code * can use sample_key* instead of generating your own * updated changelog * apparently golint wants comments like this * linter wants non-standard libs in a separate grouping * Update options.go Co-Authored-By:
timothy-spencer <timothy.spencer@gsa.gov> * Update options.go Co-Authored-By:
timothy-spencer <timothy.spencer@gsa.gov> * remove sample_key, improve comments related to client-secret, fix changelog related to PR feedback * github doesn't seem to do gofmt when merging. :-) * update CODEOWNERS * check the nonce * validate the JWT fully * forgot to add pubjwk-url to README * unexport the struct * fix up the err masking that travis found * update nonce comment by request of @JoelSpeed * argh. Thought I'd formatted the merge properly, but apparently not. * fixed test to not fail if the query time was greater than zero
-
- Mar 11, 2019
-
-
Adam Szalkowski authored
Merge websocket proxy feature from openshift/oauth-proxy. Original author: Hiram Chirino <hiram@hiramchirino.com>
-
- Mar 05, 2019
-
-
Ben authored
Type: docs I simply added the word health check. I was searching all over the package for a health check, to only realise that it had been called ping. I think the small addition might help others avoid my troubles.
-
- Mar 04, 2019
-
-
Marcel D. Juhnke authored
* added karrieretutor go-oidc fork for using an AAD B2C Policy * added karrieretutor go-oidc fork for using an AAD B2C Policy * added --skip-oidc-discovery option * added --skip-oidc-discovery option * add simple test for skip-oidc-discovery option * revert Dockerfile to pusher upstream * revert Dockerfile to pusher upstream * remove karrieretutor b2c option leftover * remove karrieretutor b2c option leftover * Fix typo (missing letters) Co-Authored-By:
marratj <marrat@marrat.de> * Fix typo (missing letters) Co-Authored-By:
marratj <marrat@marrat.de> * replace fake http client with NewProvider() from go-oidc * remove OIDC UserInfo URL option (not required) * add info about -skip-oidc-discovery to README * add note to changelog * Update outdated comment
-
- Feb 22, 2019
-
-
David Holsgrove authored
* Access token forwarding through nginx auth request Related to #420. (cherry picked from commit b138872beaaa7f47d43a1c0fef11a67f57e61eff) Signed-off-by:
David Holsgrove <david.holsgrove@biarri.com> * Improved documentation for auth request token (cherry picked from commit 6fab314f7203f4d652bb34247abb4e7cb497c41d) Signed-off-by:
David Holsgrove <david.holsgrove@biarri.com> * Update README.md Example should set header as `X-Access-Token` Co-Authored-By:
davidholsgrove <davidholsgrove@users.noreply.github.com> * Update Changelog to reference https://github.com/pusher/oauth2_proxy/pull/68 * Fix Changelog message location
-
- Feb 19, 2019
-
-
Martin Loetzsch authored
-
- Feb 13, 2019
- Feb 08, 2019
-
-
Joel Speed authored
-
Joel Speed authored
-
- Feb 07, 2019
-
-
Martin Loetzsch authored
-
- Feb 02, 2019
-
-
Marcel D. Juhnke authored
-
Joel Speed authored
Co-Authored-By:
marratj <marrat@marrat.de>
-
Karl Skewes authored
-
Karl Skewes authored
- Requires `qemu-user-static`, added to travis - maybe incorrect? - Add build guide - `.gitignore` `release/` directory
-
Marcel Juhnke authored
-
- Jan 31, 2019
-
-
Joel Speed authored
-
- Jan 22, 2019
-
-
Joel Speed authored
-
- Jan 14, 2019
-
-
Joel Speed authored
-
- Jan 08, 2019
-
-
Joel Speed authored
-
- Dec 20, 2018
-
-
Joel Speed authored
-
Joel Speed authored
-
Joel Speed authored
-
- Nov 27, 2018
-
-
Joel Speed authored
-
Joel Speed authored
-
- Mar 02, 2018
-
-
Jérôme Lecorvaisier authored
-
- Dec 19, 2017
-
-
Pierce Lopez authored
Nginx never sends the body with the auth_request sub-request, but keeps the original Content-Length header by default. Without some config tweaks, this results in the request to /oauth2/auth hanging.
-
- Dec 05, 2017
-
-
Paul Seiffert authored
-