Code

Update source code to origin v7.6.0#54

Code

Merged

l-lafin merged 95 commits intopicsphilips-forks/oauth2-proxy:picsfrom merge_7.6.0philips-forks/oauth2-proxy:merge_7.6.0Copy head branch name to clipboardJul 16, 2024

+20,689-19,008

Commits

Commits on Jul 10, 2024

• Protect htpasswd user list from race condition

  l-lafin

  committed
  fc89630

• Set correct platform type for arm v8 docker images

  l-lafin

  committed
  be68c55

• Fix uninitialized user claim

  l-lafin

  committed
  05b688e

• Fix PKCE code verifier generation to never use UTF-8 characters

  l-lafin

  committed
  a4221a3

• Remove unsupported special characters from the code verifier runes

  l-lafin

  committed
  8693c9a

• Fix default scope settings for none oidc providers like GitHub

  l-lafin

  committed
  e33bb5e

Commits on Jul 11, 2024

• feat: readiness check

  l-lafin

  committed
  5e0b2d6

• Chnages checkout version to v3

  l-lafin

  committed
  0c20afa

• Fill empty UserIDClaim before assigning it to other values

  l-lafin

  committed
  4d0303e

• Update formatting error in overview for custom-sign-in-logo

  l-lafin

  committed
  734b148

• Issue 1878: Validate URL call does not correctly honor already set URL

  l-lafin

  committed
  1175b65

• fix typo in comment for oidc/provider.go

  l-lafin

  committed
  596f4aa

• Fix a typo in oauthproxy.go

  l-lafin

  committed
  a8ad42e

• Issue 1929: Oauth2-proxy v7.4.0 is not using alpine:3.16 as it is

  l-lafin

  committed
  81b756a

• Ensure sign-in page background is uniform throughout the page

  l-lafin

  committed
  3e21a6a

• Added documentation for the keycloak-oidc provider and the new Keycloak admin console

  l-lafin

  committed
  df0c641

• Log the difference between invalid email and not authorized session

  l-lafin

  committed
  bc02aed

• Add documentation for --redis-insecure-skip-tls-verify flag

  l-lafin

  committed
  f8345d2

• Update golang.org/x/net to v0.7.0 ato address GHSA-vvpx-j8f3-3w6h

  l-lafin

  committed
  b92604d

• Issue 2016: CVE-2022-41717: DoS in Go net/http may lead to DoS

  l-lafin

  committed
  03e49ae

• Update stale bot to v8

  l-lafin

  committed
  30751c7

• update: use go install in build step

  l-lafin

  committed
  27dc4ce

• Fixed build status badge in README.md

  l-lafin

  committed
  e64f4d3

• Session-Cookie Support

  l-lafin

  committed
  6d2cf6a

• Update Dockerfile with qualified image names

  l-lafin

  committed
  ccf5bba

• Update oauthproxy.go - typos in comment

  l-lafin

  committed
  474f08f

• fix: use X-Forwarded-Uri if it exists for pathRegex match

  l-lafin

  committed
  ad8ba07

• Bugfix/check json path

  l-lafin

  committed
  c3b846d

• Embed static stylesheets and dependencies

  l-lafin

  committed
  6568c84

• documented default for errors-to-info-log

  l-lafin

  committed
  48305ec

• Workload identity support

  l-lafin

  committed
  7656a0a

• Release v7.5.0

  l-lafin

  committed
  f5ae9ad

• Fix for v7.5.0

  l-lafin

  committed
  ad81d2f

• Fixing format for v7.5.0

  l-lafin

  committed
  e645994

• bugfix: move oidc scope logic to oidc provider

  l-lafin

  committed
  511552c

• Improved session documentation

  l-lafin

  committed
  7cf1624

• Fixed name for GoogleGroups env variable + unit tests

  l-lafin

  committed
  1013914

• Added arch types to Docker and binary releases

  l-lafin

  committed
  cfd3c20

• Update alpine to 3.18

  l-lafin

  committed
  ae00d0c

Commits on Jul 12, 2024

• bugfix: default scopes for OIDCProvider based providers

  l-lafin

  committed
  ee7a439

• Docs: Add Search

  l-lafin

  committed
  9581a97

• bugfix: gitea token validation

  l-lafin

  committed
  8b0632d

• Release v7.5.1

  l-lafin

  committed
  565f3ed

• Missing closing quotes on api_routes example

  l-lafin

  committed
  4df1497

• Update dependencies

  l-lafin

  committed
  ee23b9f

• Upgrade golang.org/x/net to v0.17.0

  l-lafin

  committed
  9b93433

• Updated linters

  l-lafin

  committed
  466e916

• update error middleware definition (for traefik)

  l-lafin

  committed
  443231f

• Fix oidc-issuer-url in example

  l-lafin

  committed
  ec2b521

• Fixed Google ADC functionality

  l-lafin

  committed
  896c679

• Feature: Allowing relative redirect url though an option

  l-lafin

  committed
  7ca3ec6

• Issue: 2236 - adds an option to append CA certificates

  l-lafin

  committed
  6aa359a

• Add support for unix socket as upstream

  l-lafin

  committed
  ba306ce

• Refactored docs

  l-lafin

  committed
  8fdec4f

• Use updated key names in oauth2-proxy-alpha-config.yaml

  l-lafin

  committed
  580d231

• Updated oauth2-proxy tags to 7.5.1

  l-lafin

  committed
  d654f10

• add azure china support

  l-lafin

  committed
  1396a26

• Improve the Nginx auth_request example

  l-lafin

  committed
  cecc63b

• add contribution guide to documentation

  l-lafin

  committed
  fc4f7a0

• add nightly build and push

  l-lafin

  committed
  d0bbe7f

• add nightly build and push

  l-lafin

  committed
  bcdb575

• Issue 978: Fix Custom cookie name breaks redis for session

  l-lafin

  committed
  91be581

• bugfix: fix nightly date tagging

  l-lafin

  committed
  6b19c7d

• Support http.AllowQuerySemicolons

  l-lafin

  committed
  b5a40ce

• Don't run the nightly build and push job in forked repositories

  l-lafin

  committed
  eff95e3

• bugfix: OIDCConfig based providers are not respecting flags and configs

  l-lafin

  committed
  bcd665c

• Feature: Add GitHub groups (orgs/teams) support

  l-lafin

  committed
  88b469b

• add breaking change notice for the new auth route regex matching behaviour introduced by oauth2-proxy#2193

  l-lafin

  committed
  7d977cc

• fix: fix nginx setup

  l-lafin

  committed
  a16786a

• Update ojg to latest release

  l-lafin

  committed
  02f26d6

• Update go-jose dependency as requested in oauth2-proxy#2350

  l-lafin

  committed
  1fc5b5c

• enhancement: Change base image from alpine to distroless

  l-lafin

  committed
  9473f31

• Add possibility to encode the state param as UrlEncodedBase64

  l-lafin

  committed
  2434369

• NGINX return 403 for sign_in (oauth2-proxy#2322)

  l-lafin

  committed
  c6858c0

• chore: Create sha256sum for tar instead of binary

  l-lafin

  committed
  3d28f6a

• Log error details when failed loading CSRF cookie

  l-lafin

  committed
  a63b535

• Feature - Add env variable support for alpha struct

  l-lafin

  committed
  634fbe6

• Remove nsswitch DNS resolution workaround

  l-lafin

  committed
  0fb3937

• Feature/add option to skip loading claims from profile url

  l-lafin

  committed
  822cfad

Commits on Jul 15, 2024

• Add ability to configure username for Redis cluster connections

  l-lafin

  committed
  c156c9f

• Improved dev environment

  l-lafin

  committed
  f1c5809

• chore(deps): update module github.com/bsm/redislock to v0.9.4

  l-lafin

  committed
  8b86911

• chore(deps): update alpine docker tag to v3.19.0

  l-lafin

  committed
  20624f1

• upgrading to go 1.21

  l-lafin

  committed
  e684125

• chore(deps): update github.com/ghodss/yaml digest to d8423dc

  l-lafin

  committed
  f072a89

• chore(deps): update module k8s.io/apimachinery to v0.29.1

  l-lafin

  committed
  94dec38

• chore(deps): update actions/checkout action to v4

  l-lafin

  committed
  6502eb2

• chore(deps): update actions/setup-go action to v5

  l-lafin

  committed
  7a32e57

• chore(deps): update module google.golang.org/api to v0.157.0

  l-lafin

  committed
  2d7a6b9

• docs: add code of conduct

  l-lafin

  committed
  b6842a9

• chore(deps): update mcr.microsoft.com/vscode/devcontainers/go docker tag to v1

  l-lafin

  committed
  99bafcf

• Session aware logout, backend logout url approach

  l-lafin

  committed
  1b4c3d7

• release v7.6.0

  l-lafin

  committed
  4ea0183

• Update alpha config

  l-lafin

  committed
  4ddb75c

• Fixing unit tests

  l-lafin

  committed
  b8ba647