Jehiah Czebotar and GitHub
bc1b839f7f
Merge pull request #484 from talam/update_assert_package
...
Swap out bmizerany/assert package in favor of stretchr/testify/assert
2017-10-23 13:56:35 -04:00
Jehiah Czebotar and GitHub
fd3925d204
Merge pull request #444 from Starefossen/patch-1
...
Clarify that GitHub team option in README
2017-10-23 11:52:21 -04:00
Jehiah Czebotar and GitHub
b7f9438b8a
Merge pull request #473 from jmcarp/oidc-name
...
Add OpenID Connect provider name.
2017-10-13 09:10:44 -04:00
Jehiah Czebotar and GitHub
f6828631cf
Merge pull request #472 from jmcarp/drop-myusa
...
Drop deprecated MyUSA provider.
2017-10-08 13:05:15 -04:00
Jehiah Czebotar and GitHub
7b26256df6
Merge pull request #447 from Miouge1/master
...
Use read_user as default scope for GitLab
2017-09-13 10:27:36 -04:00
Jehiah Czebotar and GitHub
e87c3eee13
Merge pull request #389 from ericchiang/oidc-provider
...
*: add an OpenID Connect provider
2017-09-09 20:44:59 -04:00
Jehiah Czebotar and GitHub
b1e29c329b
Merge pull request #407 from segmentio/sign-in-redirect
...
nginx auth_request: fix -skip-provider-button
2017-08-28 20:57:09 -04:00
Jehiah Czebotar and GitHub
678290035c
Merge pull request #410 from sobolevn/patch-1
...
Updates README.md with svg badge
2017-08-28 20:50:07 -04:00
Jehiah Czebotar and GitHub
01ef8162a8
Merge pull request #422 from arnottcr/strip-all-tokens
...
strip all tokens
2017-08-28 20:48:43 -04:00
Jehiah Czebotar and GitHub
23cef89236
Merge pull request #431 from ploxiln/nil_upstream_url
...
gracefully report un-parsed upstream URL
2017-08-28 20:46:30 -04:00
Jehiah Czebotar and GitHub
11bdcc96c5
Merge pull request #426 from bluecmd/patch-4
...
Remove check for >0 upstreams
2017-08-28 20:45:26 -04:00
Jehiah Czebotar and GitHub
79fff53531
Merge pull request #425 from bluecmd/patch-3
...
Update cookie generation to match base64 encoding
2017-08-28 20:44:49 -04:00
Jehiah Czebotar and GitHub
3c51c914ac
Merge pull request #405 from bspaans/patch-1
...
Update Google Auth Provider instructions
2017-06-21 09:24:24 -04:00
Jehiah Czebotar and GitHub
cddd2fcd7c
Merge pull request #402 from shividhar/master
...
Fix spelling mistake in docs
2017-06-09 12:23:50 -04:00
Jehiah Czebotar and GitHub
6d6cb7e1f8
Merge pull request #392 from arnottcr/master
...
[github provider] use Authorization header, not access_token query parameter
2017-05-26 08:42:07 -04:00
Jehiah Czebotar and GitHub
f4c356637f
Merge pull request #382 from ploxiln/auth_request_readme
...
README: nginx auth_request example updates
2017-05-15 20:50:28 -04:00
Jehiah Czebotar and GitHub
ea2540bc89
Merge pull request #381 from ploxiln/dist_strip
...
dist.sh: use go build option to strip binaries
2017-04-24 16:34:22 -04:00
Jehiah Czebotar and GitHub
b90a23473f
Merge pull request #380 from jehiah/release_380
...
Release v2.2
2017-04-24 12:22:11 -04:00
Jehiah Czebotar
f457a9042a
Readme: update --help usage
2017-04-24 12:16:16 -04:00
Jehiah Czebotar
3fa5635d6c
Release 2.2.0
2017-04-24 12:11:23 -04:00
Jehiah Czebotar and GitHub
f511cac6a6
Merge pull request #365 from travisofthenorth/fix/default-http-address
...
Fix url parse error
2017-04-20 14:57:39 -04:00
Jehiah Czebotar and GitHub
120a47a526
Merge pull request #370 from idntfy/master
...
#369 : Optionally allow skipping authentication for preflight requests
2017-04-07 09:20:33 -04:00
Jehiah Czebotar and GitHub
af7be2d622
Merge pull request #319 from advarisk/auth-request
...
various fixes for getting Nginx auth_request mode working
2017-03-29 12:14:24 -04:00
Jehiah Czebotar and GitHub
93852a24cb
Merge pull request #362 from jehiah/ssl_insecure_skip_verify_362
...
Option to skip SSL verification
2017-03-29 11:02:26 -04:00
Jehiah Czebotar
dcf62d06df
option for skipping OAuth provider SSL verification
2017-03-29 10:57:07 -04:00
Jehiah Czebotar and GitHub
bb9b607440
Merge pull request #361 from jehiah/gofmt_361
...
travis: run gofmt and go vet
2017-03-29 09:53:19 -04:00
Jehiah Czebotar
c5fc7baa86
gofmt
2017-03-29 09:36:38 -04:00
Jehiah Czebotar
c1116ea506
travis: run gofmt and go vet
2017-03-29 09:36:23 -04:00
Jehiah Czebotar and GitHub
4464655276
Merge pull request #360 from jehiah/csrf_validation_360
...
CSRF protection for OAuth flow.
2017-03-29 09:36:04 -04:00
Jehiah Czebotar and GitHub
6c690b699b
Merge pull request #339 from omazhary/issue-205
...
Allow to pass user headers only
2017-03-28 21:42:29 -04:00
Jehiah Czebotar and GitHub
107b4811b4
Merge pull request #346 from bdwyertech/patch-1
...
Oversize Cookie Alert
2017-03-28 21:40:11 -04:00
Jehiah Czebotar and GitHub
cd0d13e3fb
Merge pull request #357 from wrapp/skip-group-lookup-404
...
Skip 404 errors when looking up Google groups
2017-03-28 21:38:55 -04:00
Jehiah Czebotar and GitHub
86d083266b
Merge pull request #359 from jehiah/redirect_check_359
...
Improve redirect checks
2017-03-28 21:34:23 -04:00
Jehiah Czebotar and GitHub
712739f777
Merge pull request #356 from jehiah/bump_dependencies_356
...
Update vendored dependencies.
2017-03-27 21:07:08 -04:00
Jehiah Czebotar
2ebab604eb
bump golang.org/x/... and google.golang.org dependencies
2017-03-27 20:56:15 -04:00
Jehiah Czebotar
b884b36f26
bump easy pkg upgrades; drop Go 1.6 (no httptest.NewRequest)
...
This fixes a test w request signing due to a content-length:0 header from Go 1.8
2017-03-27 20:36:35 -04:00
Jehiah Czebotar and GitHub
951b5f325b
Merge pull request #355 from ploxiln/dist_updates
...
dist.sh and Godeps updates
2017-03-27 20:16:44 -04:00
Jehiah Czebotar and GitHub
7d920c98a6
Merge pull request #354 from ploxiln/dist_win_exe
...
dist.sh: add .exe for windows build
2017-03-27 14:49:40 -04:00
Jehiah Czebotar and GitHub
87847316d4
Merge pull request #349 from braincube-io/signout
...
[signout] Implement logout endpoint
2017-03-22 23:08:47 -04:00
Jehiah Czebotar and GitHub
89ba1d813a
Merge pull request #322 from ReadmeCritic/master
...
Correct the spelling of GitHub in README
2016-11-18 13:00:22 -05:00
Jehiah Czebotar and GitHub
a9c55bd6d1
Merge pull request #299 from tamsky/fix-travis-vs-upstream-golang-dependency
...
repo golang.org/x/oauth2/google has moved, fixes travis build
2016-08-24 22:01:54 -04:00
Jehiah Czebotar and GitHub
a0e4a36821
Merge pull request #292 from nickmiller-wf/redact-access-token
...
Strip sensitive URL parameters from provider log output
2016-08-02 23:19:22 -04:00
Jehiah Czebotar and GitHub
78f2fe1306
Merge pull request #290 from MarkHerhold/patch-2
...
Adding skip-provider-button docs
2016-07-30 23:16:30 -04:00
Jehiah Czebotar and GitHub
2f0f95b523
Merge pull request #279 from tanuck/bump-travis-version
...
Bump travis version
2016-07-19 16:41:44 -04:00
Jehiah Czebotar and GitHub
da0bb7656a
Merge pull request #274 from ElDiabloComputatore/Azure_provider_mail_fix
...
Getting mail for Azure provider fix + tests
2016-07-03 21:50:51 -04:00
Jehiah Czebotar and GitHub
9babca599b
bump version to 2.2.0-alpha
2016-07-03 21:50:38 -04:00
Jehiah Czebotar and GitHub
f9e649456b
Merge pull request #272 from semenko/master
...
Fix documentation for auth_request directive
2016-06-27 21:19:00 -04:00
Jehiah Czebotar and GitHub
a66f7c50ea
Merge pull request #193 from jehiah/release_193
...
A new tag
2016-06-23 10:11:59 -04:00
Jehiah Czebotar
671f00e60e
cookie secret: give helper command for generating a secret
2016-06-23 09:42:32 -04:00
Jehiah Czebotar
3bba24ab31
Bump verison to 2.1
2016-06-23 09:35:33 -04:00
Jehiah Czebotar
27cc412d79
bump go-options dependency
2016-06-23 09:34:53 -04:00
Jehiah Czebotar and GitHub
4c6b579480
Merge pull request #270 from jehiah/fb_provider_270
...
Facebook auth Provider
2016-06-23 08:48:25 -04:00
Jehiah Czebotar
a0763477c5
Facebook Authentication Provider
...
* will not re-prompt if the email permission is denied, or if you previously authorized the same FB app without the email scope.
2016-06-23 08:43:21 -04:00
Jehiah Czebotar and GitHub
3a79827af2
Merge pull request #199 from hundt/master
...
Add URL fragment to sign-in form
2016-06-20 08:42:36 -04:00
Jehiah Czebotar and GitHub
f6778c79f8
Merge pull request #251 from bluecmd/patch-2
...
Remove superfluous quotes from config path
2016-06-20 08:20:13 -04:00
Jehiah Czebotar and GitHub
9b68e8be8d
Merge pull request #269 from jehiah/github_enterprise_269
...
github enterprise provider
2016-06-20 08:17:20 -04:00
Jehiah Czebotar
bcb8064831
github: fix github enterprise support
2016-06-20 08:15:07 -04:00
Jehiah Czebotar and GitHub
2fa0a35c7f
Merge pull request #227 from jehiah/base64_cookie_encoding_227
...
Cookie secret encoding?
2016-06-20 07:48:38 -04:00
Jehiah Czebotar
cdebfd6436
base64 cookie support
2016-06-20 07:45:43 -04:00
Jehiah Czebotar
57f82ed71e
Custom footer text (optional)
...
Closes #256 and #166
2016-06-18 23:54:32 -04:00
Jehiah Czebotar and GitHub
168cff9d4b
Merge pull request #161 from rahdjoudj/master
...
adding option to skip provider button sign_in page
2016-06-18 23:31:39 -04:00
Jehiah Czebotar and GitHub
fe143ca9e8
Merge pull request #257 from jhoblitt/bugfix/mktemp
...
fix dist.sh compatibility with GNU coreutils mktemp
2016-06-18 23:24:04 -04:00
Jehiah Czebotar
a631197138
Merge pull request #249 from rremer/update-golang
...
fix master build by upgrading with supported golang versions
2016-05-26 12:49:14 -04:00
Jehiah Czebotar
62c80df1a5
Merge pull request #235 from gust1n/patch-1
...
Fix typo
2016-04-12 04:20:07 -07:00
Jehiah Czebotar
42f1651ba5
Merge pull request #219 from 18F/signature-key-env-var
...
OAUTH2_PROXY_SIGNATURE_KEY env var, README update
2016-02-25 09:57:23 -05:00
Jehiah Czebotar
293d674e14
Merge pull request #214 from raphink/github_multiple_teams
...
github provider: allow multiple teams
2016-02-17 17:24:50 -05:00
Jehiah Czebotar
bfb8dc13bf
Merge pull request #211 from pmosbach/gitlab-provider
...
Add GitLab provider
2016-02-17 09:04:07 -05:00
Jehiah Czebotar
54efb1a2e1
Merge pull request #208 from sgnn7/add_service_example
...
Added SystemD example service file
2016-02-17 04:45:18 -05:00
Jehiah Czebotar
97ec9995aa
Merge pull request #213 from rhencke/patch-1
...
Fix small typo in README.md.
2016-02-17 04:42:58 -05:00
Jehiah Czebotar
b1ccb058d3
Merge pull request #210 from funkymrrogers/master
...
fixed formatting
2016-02-13 08:43:01 -05:00
Jehiah Czebotar
36128e971f
Merge pull request #197 from ruta-goomba/enterprise-github
...
use Github provider with GitHub enterprise
2016-02-06 13:24:48 -06:00
Jehiah Czebotar
d5a332c3f2
Merge pull request #194 from r4um/validate-state
...
Validate state param while redirecting.
2016-01-19 10:21:32 -05:00
Jehiah Czebotar
613a342115
Merge pull request #184 from stanhu/trim-trailing-spaces
...
Ignore spaces in authorized emails list
2015-12-23 07:43:36 -05:00
Jehiah Czebotar
beebf4dff9
Merge pull request #182 from funkymrrogers/master
...
Google UI changes
2015-12-16 20:20:48 -05:00
Jehiah Czebotar
7c241ec1fe
Merge pull request #153 from 18F/auth-only-endpoint
...
Add /auth endpoint to support Nginx's auth_request
2015-11-09 11:12:16 -05:00
Jehiah Czebotar
e6e2dbe459
Merge pull request #164 from philips/go-code-style
...
Go code style
2015-11-09 09:37:11 -05:00
Jehiah Czebotar
1b0144ba75
Merge pull request #148 from johnboxall/patch-1
...
Pass `ProxyPrefix` into the error template.
2015-10-03 20:06:23 -04:00
Jehiah Czebotar
3ed828ef45
Merge pull request #142 from Tenzer/static-file-server
...
Add support for serving static files from a directory
2015-09-24 09:48:04 -04:00
Jehiah Czebotar
2a784ae0d0
Merge pull request #139 from jburnham/google_group_auth
...
[RDY] google: Support restricting access to a specific group(s)
2015-09-09 07:19:33 -04:00
Jehiah Czebotar
d1c0208824
Merge pull request #131 from ebardsley/master
...
Allow passing the value of "approval_prompt" as a flag or option.
2015-08-27 07:33:07 -04:00
Jehiah Czebotar
ba81a0d30a
Merge pull request #137 from guotie/master
...
Update github.go
2015-08-25 12:22:40 -04:00
Jehiah Czebotar
7ba51ba9f2
Merge pull request #133 from sricola/master
...
Google auth configuration screen flow has changed
2015-08-09 15:22:02 -04:00
Jehiah Czebotar
5ff8aa3581
Merge pull request #128 from jehiah/github_debug_128
...
provider github not work with scope read:org
2015-07-28 07:58:54 -04:00
Jehiah Czebotar
221c99b1ec
Merge pull request #130 from mrwacky42/patch-1
...
Fix spelling
2015-07-24 17:35:26 -04:00
Jehiah Czebotar
0692c3763f
More robust handling for missing email
2015-07-24 16:26:40 -04:00
Jehiah Czebotar
c1bf1ad167
github: better debug output for org/team validation
2015-07-24 16:10:10 -04:00
Jehiah Czebotar
1e48d89e00
clarify required email validation settings
2015-07-24 16:09:33 -04:00
Jehiah Czebotar
c086bddcbe
Merge pull request #129 from jburnham/basic_auth_password
...
Add support for setting the basic auth password.
2015-07-24 11:06:32 -04:00
Jehiah Czebotar
58d2b88406
Merge pull request #126 from mattk42/master
...
Check email validity on all requests rather than only on login.
2015-07-14 12:04:44 -04:00
Jehiah Czebotar
3a792555f1
tag v2.0.1
2015-07-02 23:29:25 -04:00
Jehiah Czebotar
51852c045a
Doc updates clarifying external Load Balancer config
2015-07-02 23:21:59 -04:00
Jehiah Czebotar
01c9d04feb
Merge pull request #117 from jehiah/always_refresh_117
...
Google - continually use refresh token
2015-07-02 23:14:01 -04:00
Jehiah Czebotar
d49c3e167f
SessionState refactoring; improve token renewal and cookie refresh
...
* New SessionState to consolidate email, access token and refresh token
* split ServeHttp into individual methods
* log on session renewal
* log on access token refresh
* refactor cookie encription/decription and session state serialization
2015-07-02 23:09:11 -04:00
Jehiah Czebotar
b9ae5dc8d7
Merge pull request #116 from jehiah/google_refresh_token_116
...
Google - use offline access token
2015-06-23 14:01:35 -04:00
Jehiah Czebotar
aa0a725a3a
Readme: doc updates
2015-06-23 14:01:05 -04:00
Jehiah Czebotar
8d50b372e4
immediately redeem refresh token for provider==Google
2015-06-23 13:56:14 -04:00
Jehiah Czebotar
ae2a1e55ab
Merge pull request #115 from jehiah/cookie_renew_115
...
Cookie Refresh Improvements
2015-06-23 07:57:07 -04:00
Jehiah Czebotar
e9b5631eed
cookie refresh: validation fixes, interval changes
...
* refresh now calculated as duration from cookie set
2015-06-23 07:51:00 -04:00
Jehiah Czebotar
66a0484721
Merge pull request #111 from jehiah/version_two_111
...
Release Version Two
2015-06-12 13:12:20 -04:00
Jehiah Czebotar
d78aa13464
v2.0 & cleanup changes
...
* bump version to 2.0
* remove --cookie-https-only option
* add windows build to dist.sh
* rename --cookie-key to --cookie-name
2015-06-12 13:07:26 -04:00