Commit Graph
100 Commits
Author SHA1 Message Date
Jehiah CzebotarandGitHub bc1b839f7f Merge pull request #484 from talam/update_assert_package
Swap out bmizerany/assert package in favor of stretchr/testify/assert
2017-10-23 13:56:35 -04:00
Jehiah CzebotarandGitHub fd3925d204 Merge pull request #444 from Starefossen/patch-1
Clarify that GitHub team option in README
2017-10-23 11:52:21 -04:00
Jehiah CzebotarandGitHub b7f9438b8a Merge pull request #473 from jmcarp/oidc-name
Add OpenID Connect provider name.
2017-10-13 09:10:44 -04:00
Jehiah CzebotarandGitHub f6828631cf Merge pull request #472 from jmcarp/drop-myusa
Drop deprecated MyUSA provider.
2017-10-08 13:05:15 -04:00
Jehiah CzebotarandGitHub 7b26256df6 Merge pull request #447 from Miouge1/master
Use read_user as default scope for GitLab
2017-09-13 10:27:36 -04:00
Jehiah CzebotarandGitHub e87c3eee13 Merge pull request #389 from ericchiang/oidc-provider
*: add an OpenID Connect provider
2017-09-09 20:44:59 -04:00
Jehiah CzebotarandGitHub b1e29c329b Merge pull request #407 from segmentio/sign-in-redirect
nginx auth_request: fix -skip-provider-button
2017-08-28 20:57:09 -04:00
Jehiah CzebotarandGitHub 678290035c Merge pull request #410 from sobolevn/patch-1
Updates README.md with svg badge
2017-08-28 20:50:07 -04:00
Jehiah CzebotarandGitHub 01ef8162a8 Merge pull request #422 from arnottcr/strip-all-tokens
strip all tokens
2017-08-28 20:48:43 -04:00
Jehiah CzebotarandGitHub 23cef89236 Merge pull request #431 from ploxiln/nil_upstream_url
gracefully report un-parsed upstream URL
2017-08-28 20:46:30 -04:00
Jehiah CzebotarandGitHub 11bdcc96c5 Merge pull request #426 from bluecmd/patch-4
Remove check for >0 upstreams
2017-08-28 20:45:26 -04:00
Jehiah CzebotarandGitHub 79fff53531 Merge pull request #425 from bluecmd/patch-3
Update cookie generation to match base64 encoding
2017-08-28 20:44:49 -04:00
Jehiah CzebotarandGitHub 3c51c914ac Merge pull request #405 from bspaans/patch-1
Update Google Auth Provider instructions
2017-06-21 09:24:24 -04:00
Jehiah CzebotarandGitHub cddd2fcd7c Merge pull request #402 from shividhar/master
Fix spelling mistake in docs
2017-06-09 12:23:50 -04:00
Jehiah CzebotarandGitHub 6d6cb7e1f8 Merge pull request #392 from arnottcr/master
[github provider] use Authorization header, not access_token query parameter
2017-05-26 08:42:07 -04:00
Jehiah CzebotarandGitHub f4c356637f Merge pull request #382 from ploxiln/auth_request_readme
README: nginx auth_request example updates
2017-05-15 20:50:28 -04:00
Jehiah CzebotarandGitHub ea2540bc89 Merge pull request #381 from ploxiln/dist_strip
dist.sh: use go build option to strip binaries
2017-04-24 16:34:22 -04:00
Jehiah CzebotarandGitHub b90a23473f Merge pull request #380 from jehiah/release_380
Release v2.2
2017-04-24 12:22:11 -04:00
Jehiah Czebotar f457a9042a Readme: update --help usage 2017-04-24 12:16:16 -04:00
Jehiah Czebotar 3fa5635d6c Release 2.2.0 2017-04-24 12:11:23 -04:00
Jehiah CzebotarandGitHub f511cac6a6 Merge pull request #365 from travisofthenorth/fix/default-http-address
Fix url parse error
2017-04-20 14:57:39 -04:00
Jehiah CzebotarandGitHub 120a47a526 Merge pull request #370 from idntfy/master
#369: Optionally allow skipping authentication for preflight requests
2017-04-07 09:20:33 -04:00
Jehiah CzebotarandGitHub af7be2d622 Merge pull request #319 from advarisk/auth-request
various fixes for getting Nginx auth_request mode working
2017-03-29 12:14:24 -04:00
Jehiah CzebotarandGitHub 93852a24cb Merge pull request #362 from jehiah/ssl_insecure_skip_verify_362
Option to skip SSL verification
2017-03-29 11:02:26 -04:00
Jehiah Czebotar dcf62d06df option for skipping OAuth provider SSL verification 2017-03-29 10:57:07 -04:00
Jehiah CzebotarandGitHub bb9b607440 Merge pull request #361 from jehiah/gofmt_361
travis: run gofmt and go vet
2017-03-29 09:53:19 -04:00
Jehiah Czebotar c5fc7baa86 gofmt 2017-03-29 09:36:38 -04:00
Jehiah Czebotar c1116ea506 travis: run gofmt and go vet 2017-03-29 09:36:23 -04:00
Jehiah CzebotarandGitHub 4464655276 Merge pull request #360 from jehiah/csrf_validation_360
CSRF protection for OAuth flow.
2017-03-29 09:36:04 -04:00
Jehiah CzebotarandGitHub 6c690b699b Merge pull request #339 from omazhary/issue-205
Allow to pass user headers only
2017-03-28 21:42:29 -04:00
Jehiah CzebotarandGitHub 107b4811b4 Merge pull request #346 from bdwyertech/patch-1
Oversize Cookie Alert
2017-03-28 21:40:11 -04:00
Jehiah CzebotarandGitHub cd0d13e3fb Merge pull request #357 from wrapp/skip-group-lookup-404
Skip 404 errors when looking up Google groups
2017-03-28 21:38:55 -04:00
Jehiah CzebotarandGitHub 86d083266b Merge pull request #359 from jehiah/redirect_check_359
Improve redirect checks
2017-03-28 21:34:23 -04:00
Jehiah CzebotarandGitHub 712739f777 Merge pull request #356 from jehiah/bump_dependencies_356
Update vendored dependencies.
2017-03-27 21:07:08 -04:00
Jehiah Czebotar 2ebab604eb bump golang.org/x/... and google.golang.org dependencies 2017-03-27 20:56:15 -04:00
Jehiah Czebotar b884b36f26 bump easy pkg upgrades; drop Go 1.6 (no httptest.NewRequest)
This fixes a test w request signing due to a content-length:0 header from Go 1.8
2017-03-27 20:36:35 -04:00
Jehiah CzebotarandGitHub 951b5f325b Merge pull request #355 from ploxiln/dist_updates
dist.sh and Godeps updates
2017-03-27 20:16:44 -04:00
Jehiah CzebotarandGitHub 7d920c98a6 Merge pull request #354 from ploxiln/dist_win_exe
dist.sh: add .exe for windows build
2017-03-27 14:49:40 -04:00
Jehiah CzebotarandGitHub 87847316d4 Merge pull request #349 from braincube-io/signout
[signout] Implement logout endpoint
2017-03-22 23:08:47 -04:00
Jehiah CzebotarandGitHub 89ba1d813a Merge pull request #322 from ReadmeCritic/master
Correct the spelling of GitHub in README
2016-11-18 13:00:22 -05:00
Jehiah CzebotarandGitHub a9c55bd6d1 Merge pull request #299 from tamsky/fix-travis-vs-upstream-golang-dependency
repo golang.org/x/oauth2/google has moved, fixes travis build
2016-08-24 22:01:54 -04:00
Jehiah CzebotarandGitHub a0e4a36821 Merge pull request #292 from nickmiller-wf/redact-access-token
Strip sensitive URL parameters from provider log output
2016-08-02 23:19:22 -04:00
Jehiah CzebotarandGitHub 78f2fe1306 Merge pull request #290 from MarkHerhold/patch-2
Adding skip-provider-button docs
2016-07-30 23:16:30 -04:00
Jehiah CzebotarandGitHub 2f0f95b523 Merge pull request #279 from tanuck/bump-travis-version
Bump travis version
2016-07-19 16:41:44 -04:00
Jehiah CzebotarandGitHub da0bb7656a Merge pull request #274 from ElDiabloComputatore/Azure_provider_mail_fix
Getting mail for Azure provider fix + tests
2016-07-03 21:50:51 -04:00
Jehiah CzebotarandGitHub 9babca599b bump version to 2.2.0-alpha 2016-07-03 21:50:38 -04:00
Jehiah CzebotarandGitHub f9e649456b Merge pull request #272 from semenko/master
Fix documentation for auth_request directive
2016-06-27 21:19:00 -04:00
Jehiah CzebotarandGitHub a66f7c50ea Merge pull request #193 from jehiah/release_193
A new tag
2016-06-23 10:11:59 -04:00
Jehiah Czebotar 671f00e60e cookie secret: give helper command for generating a secret 2016-06-23 09:42:32 -04:00
Jehiah Czebotar 3bba24ab31 Bump verison to 2.1 2016-06-23 09:35:33 -04:00
Jehiah Czebotar 27cc412d79 bump go-options dependency 2016-06-23 09:34:53 -04:00
Jehiah CzebotarandGitHub 4c6b579480 Merge pull request #270 from jehiah/fb_provider_270
Facebook auth Provider
2016-06-23 08:48:25 -04:00
Jehiah Czebotar a0763477c5 Facebook Authentication Provider
* will not re-prompt if the email permission is denied, or if you previously authorized the same FB app without the email scope.
2016-06-23 08:43:21 -04:00
Jehiah CzebotarandGitHub 3a79827af2 Merge pull request #199 from hundt/master
Add URL fragment to sign-in form
2016-06-20 08:42:36 -04:00
Jehiah CzebotarandGitHub f6778c79f8 Merge pull request #251 from bluecmd/patch-2
Remove superfluous quotes from config path
2016-06-20 08:20:13 -04:00
Jehiah CzebotarandGitHub 9b68e8be8d Merge pull request #269 from jehiah/github_enterprise_269
github enterprise provider
2016-06-20 08:17:20 -04:00
Jehiah Czebotar bcb8064831 github: fix github enterprise support 2016-06-20 08:15:07 -04:00
Jehiah CzebotarandGitHub 2fa0a35c7f Merge pull request #227 from jehiah/base64_cookie_encoding_227
Cookie secret encoding?
2016-06-20 07:48:38 -04:00
Jehiah Czebotar cdebfd6436 base64 cookie support 2016-06-20 07:45:43 -04:00
Jehiah Czebotar 57f82ed71e Custom footer text (optional)
Closes #256 and #166
2016-06-18 23:54:32 -04:00
Jehiah CzebotarandGitHub 168cff9d4b Merge pull request #161 from rahdjoudj/master
adding option to skip provider button sign_in page
2016-06-18 23:31:39 -04:00
Jehiah CzebotarandGitHub fe143ca9e8 Merge pull request #257 from jhoblitt/bugfix/mktemp
fix dist.sh compatibility with GNU coreutils mktemp
2016-06-18 23:24:04 -04:00
Jehiah Czebotar a631197138 Merge pull request #249 from rremer/update-golang
fix master build by upgrading with supported golang versions
2016-05-26 12:49:14 -04:00
Jehiah Czebotar 62c80df1a5 Merge pull request #235 from gust1n/patch-1
Fix typo
2016-04-12 04:20:07 -07:00
Jehiah Czebotar 42f1651ba5 Merge pull request #219 from 18F/signature-key-env-var
OAUTH2_PROXY_SIGNATURE_KEY env var, README update
2016-02-25 09:57:23 -05:00
Jehiah Czebotar 293d674e14 Merge pull request #214 from raphink/github_multiple_teams
github provider: allow multiple teams
2016-02-17 17:24:50 -05:00
Jehiah Czebotar bfb8dc13bf Merge pull request #211 from pmosbach/gitlab-provider
Add GitLab provider
2016-02-17 09:04:07 -05:00
Jehiah Czebotar 54efb1a2e1 Merge pull request #208 from sgnn7/add_service_example
Added SystemD example service file
2016-02-17 04:45:18 -05:00
Jehiah Czebotar 97ec9995aa Merge pull request #213 from rhencke/patch-1
Fix small typo in README.md.
2016-02-17 04:42:58 -05:00
Jehiah Czebotar b1ccb058d3 Merge pull request #210 from funkymrrogers/master
fixed formatting
2016-02-13 08:43:01 -05:00
Jehiah Czebotar 36128e971f Merge pull request #197 from ruta-goomba/enterprise-github
use Github provider with GitHub enterprise
2016-02-06 13:24:48 -06:00
Jehiah Czebotar d5a332c3f2 Merge pull request #194 from r4um/validate-state
Validate state param while redirecting.
2016-01-19 10:21:32 -05:00
Jehiah Czebotar 613a342115 Merge pull request #184 from stanhu/trim-trailing-spaces
Ignore spaces in authorized emails list
2015-12-23 07:43:36 -05:00
Jehiah Czebotar beebf4dff9 Merge pull request #182 from funkymrrogers/master
Google UI changes
2015-12-16 20:20:48 -05:00
Jehiah Czebotar 7c241ec1fe Merge pull request #153 from 18F/auth-only-endpoint
Add /auth endpoint to support Nginx's auth_request
2015-11-09 11:12:16 -05:00
Jehiah Czebotar e6e2dbe459 Merge pull request #164 from philips/go-code-style
Go code style
2015-11-09 09:37:11 -05:00
Jehiah Czebotar 1b0144ba75 Merge pull request #148 from johnboxall/patch-1
Pass `ProxyPrefix` into the error template.
2015-10-03 20:06:23 -04:00
Jehiah Czebotar 3ed828ef45 Merge pull request #142 from Tenzer/static-file-server
Add support for serving static files from a directory
2015-09-24 09:48:04 -04:00
Jehiah Czebotar 2a784ae0d0 Merge pull request #139 from jburnham/google_group_auth
[RDY] google: Support restricting access to a specific group(s)
2015-09-09 07:19:33 -04:00
Jehiah Czebotar d1c0208824 Merge pull request #131 from ebardsley/master
Allow passing the value of "approval_prompt" as a flag or option.
2015-08-27 07:33:07 -04:00
Jehiah Czebotar ba81a0d30a Merge pull request #137 from guotie/master
Update github.go
2015-08-25 12:22:40 -04:00
Jehiah Czebotar 7ba51ba9f2 Merge pull request #133 from sricola/master
Google auth configuration screen flow has changed
2015-08-09 15:22:02 -04:00
Jehiah Czebotar 5ff8aa3581 Merge pull request #128 from jehiah/github_debug_128
provider github not work with scope read:org
2015-07-28 07:58:54 -04:00
Jehiah Czebotar 221c99b1ec Merge pull request #130 from mrwacky42/patch-1
Fix spelling
2015-07-24 17:35:26 -04:00
Jehiah Czebotar 0692c3763f More robust handling for missing email 2015-07-24 16:26:40 -04:00
Jehiah Czebotar c1bf1ad167 github: better debug output for org/team validation 2015-07-24 16:10:10 -04:00
Jehiah Czebotar 1e48d89e00 clarify required email validation settings 2015-07-24 16:09:33 -04:00
Jehiah Czebotar c086bddcbe Merge pull request #129 from jburnham/basic_auth_password
Add support for setting the basic auth password.
2015-07-24 11:06:32 -04:00
Jehiah Czebotar 58d2b88406 Merge pull request #126 from mattk42/master
Check email validity on all requests rather than only on login.
2015-07-14 12:04:44 -04:00
Jehiah Czebotar 3a792555f1 tag v2.0.1 2015-07-02 23:29:25 -04:00
Jehiah Czebotar 51852c045a Doc updates clarifying external Load Balancer config 2015-07-02 23:21:59 -04:00
Jehiah Czebotar 01c9d04feb Merge pull request #117 from jehiah/always_refresh_117
Google - continually use refresh token
2015-07-02 23:14:01 -04:00
Jehiah Czebotar d49c3e167f SessionState refactoring; improve token renewal and cookie refresh
* New SessionState to consolidate email, access token and refresh token
* split ServeHttp into individual methods
* log on session renewal
* log on access token refresh
* refactor cookie encription/decription and session state serialization
2015-07-02 23:09:11 -04:00
Jehiah Czebotar b9ae5dc8d7 Merge pull request #116 from jehiah/google_refresh_token_116
Google - use offline access token
2015-06-23 14:01:35 -04:00
Jehiah Czebotar aa0a725a3a Readme: doc updates 2015-06-23 14:01:05 -04:00
Jehiah Czebotar 8d50b372e4 immediately redeem refresh token for provider==Google 2015-06-23 13:56:14 -04:00
Jehiah Czebotar ae2a1e55ab Merge pull request #115 from jehiah/cookie_renew_115
Cookie Refresh Improvements
2015-06-23 07:57:07 -04:00
Jehiah Czebotar e9b5631eed cookie refresh: validation fixes, interval changes
* refresh now calculated as duration from cookie set
2015-06-23 07:51:00 -04:00
Jehiah Czebotar 66a0484721 Merge pull request #111 from jehiah/version_two_111
Release Version Two
2015-06-12 13:12:20 -04:00
Jehiah Czebotar d78aa13464 v2.0 & cleanup changes
* bump version to 2.0
* remove --cookie-https-only option
* add windows build to dist.sh
* rename --cookie-key to --cookie-name
2015-06-12 13:07:26 -04:00