1
0
mirror of https://github.com/oauth2-proxy/oauth2-proxy.git synced 2024-11-24 08:52:25 +02:00
oauth2-proxy/pkg
Josef Johansson 6743a9cc89 Add support for systemd.socket
When using sockets to pass data between e.g. nginx and oauth2-proxy it's
simpler to use sockets. Systemd can even facilitate this and pass the
actual socket directly.

This also means that only the socket runs with the same group as nginx
while the service runs with DynamicUser.

Does not support TLS yet.

nginx
```
server {
    location /oauth2/ {
      proxy_pass http://unix:/run/oauth2-proxy/oauth2.sock;
}
```

oauth2-proxy.socket
```
[Socket]
ListenStream=%t/oauth2.sock
SocketGroup=www-data
SocketMode=0660
```

Start oauth2-proxy with the parameter `--http-address=fd:3`.

Signed-off-by: Josef Johansson <josef@oderland.se>
2024-10-23 09:35:47 +02:00
..
apis Add support for systemd.socket 2024-10-23 09:35:47 +02:00
app chore(deps): Updated to ginkgo v2 (#2459) 2024-07-18 22:41:02 +02:00
authentication/basic chore: fix function names in comment 2024-09-15 09:34:15 +02:00
clock chore(deps): Updated to ginkgo v2 (#2459) 2024-07-18 22:41:02 +02:00
cookies fix: runtime error: index out of range (0) with length 0 (#2328) 2024-10-08 14:40:41 +02:00
encryption Session-Cookie Support (#1713) 2023-08-16 12:23:02 +01:00
header chore(deps): Updated to ginkgo v2 (#2459) 2024-07-18 22:41:02 +02:00
http Add support for systemd.socket 2024-10-23 09:35:47 +02:00
ip feat: add X-Envoy-External-Address as supported header (#2755) 2024-10-13 19:55:47 +02:00
logger Request ID Logging (#1087) 2021-03-21 18:20:57 +00:00
middleware doc: fix typo in function description (#2738) 2024-08-20 18:41:23 +02:00
providers fix: unable to use hyphen in JSON path for oidc-groups-claim option (#2619) 2024-10-07 20:08:44 +02:00
requests better handling of default transport modification 2024-10-06 21:43:38 +02:00
sessions chore(deps): Updated to ginkgo v2 (#2459) 2024-07-18 22:41:02 +02:00
upstream Don't use http.StripPrefix when a file: upstream has rewriteTarget 2024-09-02 11:27:28 +01:00
util Issue: 2236 - adds an option to append CA certificates (#2237) 2023-10-25 11:36:17 +01:00
validation better handling of default transport modification 2024-10-06 21:43:38 +02:00
version feat: Replace default Go user-agent with oauth2-proxy and version (#2570) 2024-07-14 21:09:17 +01:00
watcher Fix Linting Errors (#1835) 2022-10-21 11:57:51 +01:00