github.com/vouch/vouch-proxy commits | Ecosyste.ms: OpenCollective

Make client_secret optional for oidc and adfs. Keycloak (generic oidc) specifically allows setting of 'authorized' clients, without this setting the client_secret is not needed. ADFS also only requires client_secret for server applications, and other clients do not need it, and error if they receive it.

dc68fa34ea64b012d55d5cc1e7cba0fd32009dd2 authored over 5 years ago by artagel <[email protected]>

Merge branch 'master' into artagel-allow_users_to_store_claims_in_JWT

964dda06330c79793d06f0873ac99ecd427db852 authored over 5 years ago by Benjamin Foote <[email protected]>

fix #115 state variable alpha num

0910c1c6907fb4f539bd90e6c77fcea32a1642ca authored over 5 years ago by Benjamin Foote <[email protected]>

Update jwt tests to support claims.

0adc4503f84b00e9772cbccd83516af679be0996 authored over 5 years ago by artagel <[email protected]>

Ensure config example comments out the optional param for header custom claims.

0e88ba534bde2ab271d6f1eeeb907a53f8623c07 authored over 5 years ago by artagel <[email protected]>

Update README and config example to include custom claim support.

7cf2372902a078f641f9a2829fc3fbf578683aad authored over 5 years ago by artagel <[email protected]>

Fix function argument order for updated customclaim support.

c093469cffe088ea5f4b49e70a0610711989190e authored over 5 years ago by artagel <[email protected]>

Properly add claims to user object.

f90c6932b1cdc57db0e07b31eb2a1e5ef631772c authored over 5 years ago by artagel <[email protected]>

Add new config option 'claimheader'

c7eee4730791c199037679ab094440923091dd89 authored over 5 years ago by artagel <[email protected]>

Add some useful logging.

f1f5424356df64ec7a182bb341e5f251ca83cedc authored over 5 years ago by artagel <[email protected]>

Add support for grabbing claims from the return of getuserinfo functions for all providers.

b09f2cfc52c8813ad8339b3b92ec6654782bfc8b authored over 5 years ago by artagel <[email protected]>

Make ClaimHeader default to X-Vouch-IdP-Claims-

f1fe6b8cc32fc90214f38e5b682480095d2cb95c authored over 5 years ago by artagel <[email protected]>

Add header claims to cfg

fcd86c13282a53ce47f5f858d827912f3b17c44e authored over 5 years ago by artagel <[email protected]>

Rework customClaims variable into a struct to be reusable and passable to jwt functions.

311c25f25f08932a8daefd84b1f04da6be5157da authored over 5 years ago by artagel <[email protected]>

Add claims to headers.

980355587e6a49d80103efbcde226fe56eb57c12 authored over 5 years ago by artagel <[email protected]>

Create the JWT token with newly added customClaims.

86c4fce975d895fa9557c38bdbf61160c9f29d69 authored over 5 years ago by artagel <[email protected]>

Remove redunant claim object. Fix Claim to be a map of strings.

38fb7682be54ed7587a6049a563a53b835869603 authored over 5 years ago by artagel <[email protected]>

Add custom claims to JWT

d918990c7db57c1701597527e711574b1d575db2 authored over 5 years ago by artagel <[email protected]>

Merge branch 'master' into add_support_to_pass_tokens

c8d1a955e9c68235c004130f030d63c2d54568ac authored over 5 years ago by artagel <[email protected]>

Merge pull request #3 from artagel/split_cookies

Split cookies

429f154cb8292926821c151cbb14aa7f60595943 authored over 5 years ago by artagel <[email protected]>

Merge branch 'master' into split_cookies

8f6fdb1a516cdeee2e346c13d88572c8eeaddd04 authored over 5 years ago by artagel <[email protected]>

Merge pull request #1 from vouch/master

Implement upstream repo changes.

bbccf8a04dcaacc2a35e8391cd264d85dbe7b1aa authored over 5 years ago by artagel <[email protected]>

Fix error with template path.

04a1e94c7d9841e0c2ad635d1ee728730d68a699 authored over 5 years ago by artagel <[email protected]>

Fix areas where errors weren't handled.

Implement goreportcard recommendations.

545aa9c53c683f8dba403a6d3bcfe6151abbd5c3 authored over 5 years ago by artagel <[email protected]>

fix #92 default to jwt.maxage, warn if exceeds jwt.maxage, as minutes

3b50cc5f19eec6457a6a4b349c1793b7ba2a1bfb authored over 5 years ago by Benjamin Foote <[email protected]>

Add cfg param in cookies to support customizable maxage. Also allows 'session' cookies, or cookies that delete after browser is closed.

3fb15d9d18cc1d2cba2bc7f64c054ca9deb20257 authored over 5 years ago by artagel <[email protected]>

Set warning to be more specific.

b02c914e7c1a643666a093c6672000982bf0c434 authored over 5 years ago by artagel <[email protected]>

Update warning message.

6c182172a5e7117d251c239226373c2113208f89 authored over 5 years ago by artagel <[email protected]>

Rework cookie handling to split and reassemble cookies if they are over 4000 bytes.

d32824a852a67d5c591342f941694170d9888be4 authored over 5 years ago by artagel <[email protected]>

Add tests for tokens in jwt.

be43b4db017fe2b36b5c0492b1341d71c4ffb345 authored over 5 years ago by artagel <[email protected]>

Move tokens from user to jwt.

e7f83356c3e2ec7154c6a167ac936c31ecb8712c authored over 5 years ago by artagel <[email protected]>

update example nginx config

1f31974562db9d32b3dd99101ac87404ad92c009 authored over 5 years ago by Benjamin Foote <[email protected]>

Add openresty examples to readme.

705b5e34c5ca0fe5319fca25b79f7ffe0f3ac9f9 authored over 5 years ago by artagel <[email protected]>

fix #105 Vouch Proxy supports AWS Cognito

1fb2d06731fe94c88a5832541ac5eaa04afbd0a1 authored over 5 years ago by Benjamin Foote <[email protected]>

Update nginx info in the readme.

a217cd9802f34bac2bb904c4246e7c0a47d0777e authored over 5 years ago by artagel <[email protected]>

Add accesstoken and idtoken config option to example config.

1f86f9e573973969fdcfac3bebbeb594e28f0bb3 authored over 5 years ago by artagel <[email protected]>

Fix deprecated nocontext call for oauth2.

Add headers for accesstoken and idtoken.

a77405a335f4790bb604b0d805750a9002552251 authored over 5 years ago by artagel <[email protected]>

Add accesstoken and idtoken config option to headers.

6f5bb19215b5ac788177f5466b472042ecfdcaf6 authored over 5 years ago by artagel <[email protected]>

Add accesstoken and idtoken to user struct.

67d9291d00d915927ee269f5c4d2ae389d11bb2b authored over 5 years ago by artagel <[email protected]>

cleanup .gitignore

2a19997b844403e52b795743d2efc79d38fbac24 authored over 5 years ago by Benjamin Foote <[email protected]>

URL encode the state

7ee988d43d2de7e10f02281fee54a9008ade2bac authored over 5 years ago by Benjamin Foote <[email protected]>

improve sed regex

058a4f0d6913c9852e65541bef11f2b94b426f7d authored over 5 years ago by Benjamin Foote <[email protected]>

add self help and proxy_set_header Host

ee9eb079384fbed63e3d6c190db69e9ebd25042e authored over 5 years ago by Benjamin Foote <[email protected]>

make it easy to redact logs and configs

b47349224979af40e95919ddb1b0a4758bd52ff8 authored almost 6 years ago by Benjamin Foote <[email protected]>

include OAuth provider in starting log

48b5876e1321421559cd4e73aab800c95652788c authored almost 6 years ago by Benjamin Foote <[email protected]>

fix regression, populate sites in all cases

f560a838a182d2feed7a84312687ecf31ebfbbf4 authored almost 6 years ago by Benjamin Foote <[email protected]>

move setDevelopmentLogger to its own function

ab9e97c79a5488b385915f4f2ae165c0cc4476ee authored almost 6 years ago by Benjamin Foote <[email protected]>

merge good logging into good testing

c7e158e4cb40dd47a8a112f21ae1e00ae1a01f37 authored almost 6 years ago by Benjamin Foote <[email protected]>

use console logging output when testing

935de015ea47188b85ecae5f3104610a5f8e3ca2 authored almost 6 years ago by Benjamin Foote <[email protected]>

bail on config loading if we're in `go test`

f0747d029c47c55696888e93157da42064d1d959 authored almost 6 years ago by Benjamin Foote <[email protected]>

cleanup existing tests, modify cfg to accomodate tests

cecac6babf2414415540d7d101a8d3b67e0bc93c authored almost 6 years ago by Benjamin Foote <[email protected]>

remove log.setLevel

72b4494f5f19457b55d38cf2cb8d6a49fb76e30b authored almost 6 years ago by Benjamin Foote <[email protected]>

fix #88 replace logrus with zap

f200ff989ab0468e9613429241fb35b3128dffc4 authored almost 6 years ago by Benjamin Foote <[email protected]>

fix #85 set config from command line

29d334956b1007e97a522072f335b77a7b2b481a authored almost 6 years ago by Benjamin Foote <[email protected]>

Merge branch 'cyounkins-master'

c9d7f955058814e015394988e2333fbf12cbfa9a authored almost 6 years ago by Benjamin Foote <[email protected]>

Merge branch 'master' of https://github.com/cyounkins/vouch-proxy into cyounkins-master

0bd0b191d6df755c6cb08e95928a6be9bd5807d2 authored almost 6 years ago by Benjamin Foote <[email protected]>

improve randomness of state session value

83c422eb99d3bec5dd492f1672dc1fc2f87efb8c authored almost 6 years ago by Benjamin Foote <[email protected]>

fix #87 set session cookie options from vouch cookie config items

15f40da8b7187cadb0f271efaa7ab75ef027f919 authored almost 6 years ago by Benjamin Foote <[email protected]>

Set err when username not found in whitelist. Fixes #81

9d1b35455b586674538bdb813010a8c23f298234 authored almost 6 years ago by Craig Younkins <[email protected]>

#83 errant db file committed during rename

7d302a226b93fb0863587acbb133a0a02dfbc17a authored almost 6 years ago by Benjamin Foote <[email protected]>

#54 logFatal on randomness error

8b5328ee110a33c19dd4298e9de1b9ce0ac9274c authored almost 6 years ago by Benjamin Foote <[email protected]>

#76 link to Nginx cache example

7b77c55e7f727b07d5b2f012ed0ca7e452f9799a authored almost 6 years ago by Benjamin Foote <[email protected]>

Alpine automated build

eda81b0c885b9f044f7524ded299a5a80b340b6f authored almost 6 years ago by Benjamin Foote <[email protected]>

Merge branch 'dockerfile_alpine' of https://github.com/simongottschlag/vouch-proxy into simongottschlag-dockerfile_alpine

e7406ebaadd3cf986d6aa1dde969d754decbcd84 authored almost 6 years ago by Benjamin Foote <[email protected]>

Merge branch 'simongottschlag-adfs_get_username'

d03ada9870c43a5a46fc5ff26159749caf14a038 authored almost 6 years ago by Benjamin Foote <[email protected]>

Add dockerfile alpine

5cd00f90a72564e5feba3463da4b88b53fe0950b authored almost 6 years ago by Simon Gottschlag <[email protected]>

add alpine dockerfile

506f5285cc6ad11445e48ea29a9b8694fdb8ee3c authored almost 6 years ago by Simon Gottschlag <[email protected]>

Merge branch 'adfs_get_username' of github.com:simongottschlag/vouch-proxy into simongottschlag-adfs_get_username

a009b2fcd9e997fadfbe8c237e508f62d0496058 authored almost 6 years ago by Benjamin Foote <[email protected]>

Add resource to redirect query

90905b1ed903c78acf45e63c6d6dfbe73a4360d5 authored almost 6 years ago by Simon Gottschlag <[email protected]>

#68 move struct outside of function, minor cleanup

3705f2eafb60405428b9d419e4106c216e74b05a authored almost 6 years ago by Benjamin Foote <[email protected]>

Revert "Fix cookies (#3)"

This reverts commit c3ea803e765a70509b609141233b772b828a1f16.

9798367a0bf7d113d3f1fd44d050be7eff391082 authored almost 6 years ago by Benjamin Foote <[email protected]>

Merge branch 'master' into simongottschlag-adfs_get_username

fbe6e7af1f1f0e71842c3f7cf7fe7f273417d33f authored almost 6 years ago by Benjamin Foote <[email protected]>

#65 check your indentation (yaml is so spacey)

eef9c6fe2474b571c1fed15aa6414b8d97b87ede authored almost 6 years ago by Benjamin Foote <[email protected]>

ignore local configs

71829597d4c66888cc8092411f3cb4ec8661aa8c authored almost 6 years ago by Benjamin Foote <[email protected]>

link to #64 https nginx vouch config

07e62eecb10ccc88aa4de9b45147661aa68611fc authored almost 6 years ago by Benjamin Foote <[email protected]>

Add initial support for ADFS

0ad33aea975bed909ee83a15317a4999b823376c authored almost 6 years ago by Simon Gottschlag <[email protected]>

change encoding to support adfs (#4)

0342ab7041069218fd0ebf0c6b28788f82cb9233 authored almost 6 years ago by Simon Gottschlag <[email protected]>

Fix cookies (#3)

fix cookies

adb063b509435fe7f0fc132a949edcfa172418d1 authored almost 6 years ago by Simon Gottschlag <[email protected]>

#40 document `logout?url=` redirection

6749373ee28cf568240e79ec0c548b177b78b16b authored almost 6 years ago by Benjamin Foote <[email protected]>

travis just test, docker just build

145325356e6e57ce76c9e8b0fd17c415daff9db3 authored almost 6 years ago by Benjamin Foote <[email protected]>

move -race test

a4fb3d42d5f5224a54f5bc7be28a86b066839d1e authored almost 6 years ago by Benjamin Foote <[email protected]>

Merge branch 'master' into halkeye-travis-ci

a41c46e689cceab868026969220696f7bb3d11ef authored almost 6 years ago by Benjamin Foote <[email protected]>

fix #63 read only scope for github user info

e97ebe29f0bb88c10e721c6ad6a09ff0e7fab0a6 authored almost 6 years ago by Benjamin Foote <[email protected]>

remove binary

699e35c928beb180cb290f4cc2dfef5dc49488a9 authored almost 6 years ago by Benjamin Foote <[email protected]>

Merge branch 'master' into Fundbox-jacobs/okta_forbidden

e12304d837b9cbbb551061b6b5653d723058f545 authored almost 6 years ago by Benjamin Foote <[email protected]>

LASSO --> VOUCH

f541ffded5acef278a21c4a84a20ae750d79eee3 authored almost 6 years ago by Benjamin Foote <[email protected]>

#62 #61 make auth_url check provider aware

e12afd6aedec55361a974405762a42ec78291f91 authored almost 6 years ago by Benjamin Foote <[email protected]>

properly position domains log notices

4908ab7b9fb312558cc01dc2b12a1441444ea824 authored almost 6 years ago by Benjamin Foote <[email protected]>

set secure cookie notice as warning

d321adb88f6de0243eb8a671d73c1d1b0bee8320 authored almost 6 years ago by Benjamin Foote <[email protected]>

notify irc

8721bb2ec8f873805c355711b43efbf7ffeda748 authored almost 6 years ago by Gavin Mogan <[email protected]>

add import path so forks/PRs will have the right path

8e1ff3bdcd63c59ceb81ab965024181c684cd475 authored almost 6 years ago by Gavin Mogan <[email protected]>

Merge remote-tracking branch 'origin/master' into travis-ci

ddeacb9a01903bcfc89559a78163481b4ca55d30 authored almost 6 years ago by Gavin Mogan <[email protected]>

use existing variable to get current directory

3ab1980c71b837cbcc367c399ad1ceb864f9444c authored almost 6 years ago by Gavin Mogan <[email protected]>

#61 add oauth config to BasicTest

5be041d5431a9145b5403c2f3cc0bae8497fdd95 authored almost 6 years ago by Benjamin Foote <[email protected]>

make cookie name test pass

9644d521b5c3a8fae8be183093c5a2e417429795 authored almost 6 years ago by Gavin Mogan <[email protected]>

voucher => vouch

93f5e3826aced06bd1ae3c81606528e49e21aa49 authored almost 6 years ago by Gavin Mogan <[email protected]>

test config starting point

09a94aa2459182cc21f85e0caa2d13aaa96b6992 authored almost 6 years ago by Gavin Mogan <[email protected]>

load that VOUCH_CONFIG file

9e8438b4c9fcfd321101dd6c6361ef468e8e055c authored almost 6 years ago by Gavin Mogan <[email protected]>

Merge remote-tracking branch 'origin/master' into travis-ci

68be51e502fd313715fd7d977f48868313732070 authored almost 6 years ago by Gavin Mogan <[email protected]>

add -cover to do.sh coverage

39969e0b5a28b999f7fc371036c956fd98030b18 authored almost 6 years ago by Gavin Mogan <[email protected]>