You've already forked oauth2-proxy
mirror of
https://github.com/oauth2-proxy/oauth2-proxy.git
synced 2025-08-06 22:42:56 +02:00
3ac834dbcf
* Change Dex port in local-environment from 4190 to 5556
Port 4190 is blocked by standards-compliant browsers (e.g. Firefox), as per https://fetch.spec.whatwg.org/#port-blocking.
Port 5556 is used by Dex in its example config files: 745e1114f3/examples/config-dev.yaml (L50)
* Fix upstream in local-environment/oauth2-proxy.cfg
http://httpbin.localtest.me:8080 is only exposed to the host, not to httpbin Docker network.
Causes Bad Gateway before.
* Do not expose unauthenticated httpbin service in local-environment
This defeats the point of having oauth2-proxy.
It has already been misleading by causing the bug fixed in cafc6af48fc38f6fe4395fb0c7e2638bc84e6091.
It serves as a bad example: users might accidentally expose the service they're trying to protect in the first place.
* Remove unnecessary httpbin.localtest.me alias from local-environment
24 lines
490 B
YAML
24 lines
490 B
YAML
upstreams:
|
|
- id: httpbin
|
|
path: /
|
|
uri: http://httpbin
|
|
injectRequestHeaders:
|
|
- name: X-Forwarded-Groups
|
|
values:
|
|
- claim: groups
|
|
- name: X-Forwarded-User
|
|
values:
|
|
- claim: user
|
|
- name: X-Forwarded-Email
|
|
values:
|
|
- claim: email
|
|
- name: X-Forwarded-Preferred-Username
|
|
values:
|
|
- claim: preferred_username
|
|
providers:
|
|
- provider: oidc
|
|
clientSecret: b2F1dGgyLXByb3h5LWNsaWVudC1zZWNyZXQK
|
|
clientID: oauth2-proxy
|
|
oidcConfig:
|
|
issuerURL: http://dex.localhost:5556/dex
|