1
0
mirror of https://github.com/oauth2-proxy/oauth2-proxy.git synced 2025-06-15 00:15:00 +02:00
Commit Graph

236 Commits

Author SHA1 Message Date
c5fc7baa86 gofmt 2017-03-29 09:36:38 -04:00
55085d9697 csrf protection; always set state 2017-03-29 09:31:10 -04:00
cd0d13e3fb Merge pull request #357 from wrapp/skip-group-lookup-404
Skip 404 errors when looking up Google groups
2017-03-28 21:38:55 -04:00
289a6ccf46 add check for //.* to prevent open redirect during oauth 2017-03-28 21:12:33 -04:00
652f43ed38 Skip 404 errors when looking up Google groups
When checking user membership against Google groups the groups are checked one
at a time and in the order that they were supplied. If one of the groups does
not exist then the checking is halted with the following error.

google.go:201: googleapi: Error 404: Resource Not Found: groupKey, notFound

None of the groups following the missing group are checked either. This means
that something as trivial as a typo in the first group will make it impossible
for anybody to login.

This change catches the 404, logs a message, and then carries on as usual. In
this way a typo will cause a particular group to stop working but will not
affect any other groups.
2017-03-28 16:06:15 +02:00
c566648127 add stripParam and stripToken methods to obfuscate log output 2016-08-02 21:01:44 -06:00
5acf96b75d Getting mail for Azure provider fix + tests 2016-06-29 09:00:08 +02:00
a0763477c5 Facebook Authentication Provider
* will not re-prompt if the email permission is denied, or if you previously authorized the same FB app without the email scope.
2016-06-23 08:43:21 -04:00
bcb8064831 github: fix github enterprise support 2016-06-20 08:15:07 -04:00
cdebfd6436 base64 cookie support 2016-06-20 07:45:43 -04:00
293d674e14 Merge pull request #214 from raphink/github_multiple_teams
github provider: allow multiple teams
2016-02-17 17:24:50 -05:00
338e99773a github provider: allow multiple teams 2016-02-17 23:17:08 +01:00
034612bf8b Add GitLab provider 2016-02-17 06:19:52 -06:00
36128e971f Merge pull request #197 from ruta-goomba/enterprise-github
use Github provider with GitHub enterprise
2016-02-06 13:24:48 -06:00
a9cf8b3313 adding enterprise github provider
print the error stack trace

point to my fork in oauthproxy.go

addint pointers to ruta-goomba fork in mulitple files

change api endpoint

replace hard-coded github api endpoint with variables

resetting fall through github urls to point to github.com

fix malformed url

changes to enable use with enterprise github
2016-01-21 21:22:18 +00:00
10f47e325b Add Azure Provider 2016-01-20 03:57:17 -05:00
51a2e4e48c *: rename Url to URL everywhere
Go coding style says that acronyms should be all lower or all upper. Fix
Url to URL.
2015-11-09 00:47:44 +01:00
3fd8f911c2 google: Support restricting access to a specific group(s) 2015-09-09 02:10:32 -07:00
d1c0208824 Merge pull request #131 from ebardsley/master
Allow passing the value of "approval_prompt" as a flag or option.
2015-08-27 07:33:07 -04:00
8da7325683 Update github.go 2015-08-26 00:11:24 +08:00
33045a792b Add a flag to set the value of "approval_prompt".
By setting this to "force", certain providers, like Google,
will interject an additional prompt on every new session. With other values,
like "auto", this prompt is not forced upon the user.
2015-07-31 00:43:47 -07:00
0692c3763f More robust handling for missing email 2015-07-24 16:26:40 -04:00
c1bf1ad167 github: better debug output for org/team validation 2015-07-24 16:10:10 -04:00
d49c3e167f SessionState refactoring; improve token renewal and cookie refresh
* New SessionState to consolidate email, access token and refresh token
* split ServeHttp into individual methods
* log on session renewal
* log on access token refresh
* refactor cookie encription/decription and session state serialization
2015-07-02 23:09:11 -04:00
8d50b372e4 immediately redeem refresh token for provider==Google 2015-06-23 13:56:14 -04:00
e9b5631eed cookie refresh: validation fixes, interval changes
* refresh now calculated as duration from cookie set
2015-06-23 07:51:00 -04:00
f5db2e1ff7 More complete HTTP error logging 2015-06-07 21:03:53 -04:00
a6694ad3c7 github: handle users part of an Org not on a team 2015-06-06 14:44:42 -04:00
b96a078839 Project Rename -> oauth2_proxy 2015-05-21 02:55:04 -04:00
37b38dd2f4 Github provider 2015-05-21 02:21:19 -04:00
8471f972e1 Move ValidateToken() to Provider 2015-05-21 02:06:23 -04:00
72857018ee Introduce validate-url flag/config 2015-05-08 17:13:35 -04:00
5bc77b0ee8 LinkedIn OAuth support. 2015-04-17 17:35:40 -07:00
59c3ba40f6 Add MyUSA provider 2015-03-31 15:17:17 -04:00
666e6ad436 Add ProviderName field; use in sign_in template 2015-03-31 12:59:07 -04:00
e2931da853 Create providers package with Google default 2015-03-31 09:34:50 -04:00