Mike Bland
25372567ac
ValidateToken() to check access_token validity
2015-05-09 13:17:37 -04:00
Mike Bland
72857018ee
Introduce validate-url flag/config
2015-05-08 17:13:35 -04:00
Mike Bland
8e2d83600c
Implement cookie auto-refresh
...
The intention is to refresh the cookie whenever the user accesses an
authenticated service with less than `cookie-refresh` time to go before the
cookie expires.
2015-05-08 14:05:09 -04:00
Mike Bland
5cbdb74518
Add ProcessCookie() test
2015-05-08 14:05:09 -04:00
Mike Bland
f554f99abd
Ensure all errors are logged in ProcessCookie()
2015-05-08 14:05:09 -04:00
Mike Bland
beed9fb9a2
Extract MakeCookie()
2015-05-08 14:05:09 -04:00
Mike Bland
1bd90cefe7
Extract ProcessCookie() from ServeHTTP()
2015-05-08 12:41:22 -04:00
Mike Bland
781f34e817
Make address/domain comparisons case-insensitive
2015-04-07 17:25:46 -04:00
Mike Bland
83ad43a571
Make proper PassAccessTokenTest methods
2015-04-07 10:11:35 -04:00
Mike Bland
9887ac3be5
Refactor cookie building and parsing
...
Extracts buildCookieValue() and parseCookieValue() from OauthProxy.ServeHTTP()
and adds tests for both.
2015-04-07 05:53:41 -04:00
Mike Bland
cf79fd9e4c
Refactor pass_access_token+cookie_secret check
...
Moves the check from NewOauthProxy() to Options.Validate() and adds a test.
2015-04-07 05:53:40 -04:00
Mike Bland
ca32394c6f
Add vim .swp files to gitignore
2015-04-07 05:53:40 -04:00
Mike Bland
5f747bb768
Redirect to / when /oauth2/sign_in accessed
...
Without this change, clicking the sign-in button on /oauth2/sign_in will
always redirect back to /oauth2/sign_in, essentially creating an infinite
loop.
2015-04-06 22:10:03 -04:00
Mike Bland
ad3c9a886f
Pass the access token to the upstream client
...
This is accomplished by encoding the access_token in the auth cookie and
unpacking it as the X-Forwarded-Access-Token header for upstream requests.
2015-04-03 15:32:01 -04:00
Mike Bland
a9837f90aa
Ensure TestNewReverseProxy() passes when offline
...
This reflects the apparent intent of TestNewReverseProxy(). Without this
change, the test will fail when run without an Internet connection.
2015-04-02 21:38:48 -04:00
Mike Bland
291a0b76b9
Add alternate provider information to README
2015-03-31 15:31:22 -04:00
Mike Bland
59c3ba40f6
Add MyUSA provider
2015-03-31 15:17:17 -04:00
Mike Bland
666e6ad436
Add ProviderName field; use in sign_in template
2015-03-31 12:59:07 -04:00
Mike Bland
d9a945ebc3
Integrate Provider into Options and OauthProxy
2015-03-31 09:34:50 -04:00
Mike Bland
e2931da853
Create providers package with Google default
2015-03-31 09:34:50 -04:00
Mike Bland
45286af4a4
s/18F/bitly/ in import path
2015-03-30 11:42:37 -04:00
Mike Bland
9d8f932797
Extract api package
...
This is the first step towards genericizing the google_auth_proxy to support
OAuth2 providers other than Google as discussed in #65 . The `api` package will
enable multiple providers to use the same `api.Request()` implementation.
2015-03-30 10:23:30 -04:00
Mike Bland
d751bbea4c
Catch more options errors at once; add test
2015-03-16 14:45:20 -04:00
Mike Bland