You've already forked oauth2-proxy
mirror of
https://github.com/oauth2-proxy/oauth2-proxy.git
synced 2025-08-06 22:42:56 +02:00
3ac834dbcf
* Change Dex port in local-environment from 4190 to 5556
Port 4190 is blocked by standards-compliant browsers (e.g. Firefox), as per https://fetch.spec.whatwg.org/#port-blocking.
Port 5556 is used by Dex in its example config files: 745e1114f3/examples/config-dev.yaml (L50)
* Fix upstream in local-environment/oauth2-proxy.cfg
http://httpbin.localtest.me:8080 is only exposed to the host, not to httpbin Docker network.
Causes Bad Gateway before.
* Do not expose unauthenticated httpbin service in local-environment
This defeats the point of having oauth2-proxy.
It has already been misleading by causing the bug fixed in cafc6af48fc38f6fe4395fb0c7e2638bc84e6091.
It serves as a bad example: users might accidentally expose the service they're trying to protect in the first place.
* Remove unnecessary httpbin.localtest.me alias from local-environment
33 lines
1.0 KiB
YAML
33 lines
1.0 KiB
YAML
# This configuration is intended to be used with the docker-compose testing
|
|
# environment.
|
|
# This should configure Dex to run on port 5556 and provides a static login
|
|
issuer: http://dex.localtest.me:5556/dex
|
|
storage:
|
|
type: etcd
|
|
config:
|
|
endpoints:
|
|
- http://etcd:2379
|
|
namespace: dex/
|
|
web:
|
|
http: 0.0.0.0:5556
|
|
oauth2:
|
|
skipApprovalScreen: true
|
|
expiry:
|
|
signingKeys: "4h"
|
|
idTokens: "1h"
|
|
staticClients:
|
|
- id: oauth2-proxy
|
|
redirectURIs:
|
|
# These redirect URIs point to the `--redirect-url` for OAuth2 proxy.
|
|
- 'http://oauth2-proxy.localtest.me:4180/oauth2/callback' # For basic proxy example.
|
|
- 'http://oauth2-proxy.oauth2-proxy.localhost/oauth2/callback' # For nginx and traefik example.
|
|
name: 'OAuth2 Proxy'
|
|
secret: b2F1dGgyLXByb3h5LWNsaWVudC1zZWNyZXQK
|
|
enablePasswordDB: true
|
|
staticPasswords:
|
|
- email: "admin@example.com"
|
|
# bcrypt hash of the string "password"
|
|
hash: "$2a$10$2b2cU8CPhOTaGrs1HRQuAueS7JTT5ZHsHSzYiFPm1leZck7Mc8T4W"
|
|
username: "admin"
|
|
userID: "08a8684b-db88-4b73-90a9-3cd1661f5466"
|