v1.0.3-securepoint

Changelog

• 2e04372 chore: sync fork
• 7cee02c Merge pull request oauth2-proxy#3015 from oauth2-proxy/renovate/docker-compose
• 3325dcb chore(deps): update docker-compose
• f6b95c0 feat: allow to set non-default authorization request response mode (oauth2-proxy#3001)
• b34b617 docs: fix gitlab docs url for oauth2 integration (oauth2-proxy#3002)
• 99c4c65 chore(deps): update docker-compose (oauth2-proxy#3005)
• b2c69e2 feat: update HashNonce to use crypto/sha256 (oauth2-proxy#2967)
• 44d035c chore(deps): update dependency golangci/golangci-lint to v1.64.8 (oauth2-proxy#3004)
• 2ab22bd release v7.8.2 (oauth2-proxy#3012)
• 46554b5 chore(deps): update golang dependencies and pin to latest golang v1.23.x release (oauth2-proxy#3011)
• 669acb9 chore(deps): update module github.com/golang-jwt/jwt/v5 to v5.2.2 [security] (oauth2-proxy#3003)
• 4e2100a chore(deps): update gomod (oauth2-proxy#2952)
• ef51685 chore(deps): update dependency @easyops-cn/docusaurus-search-local to ^0.49.0
• 8a8fcab deps: remove tools/reference-gen from go.mod
• 9ac8f4b chore(deps): update docker-compose
• a01abbd Merge pull request oauth2-proxy#2957 from oauth2-proxy/renovate/golangci-golangci-lint-1.x
• 67c1cd6 chore(deps): update dependency golangci/golangci-lint to v1.64.7
• 089c0ea Merge pull request oauth2-proxy#2956 from oauth2-proxy/renovate/alpine-3.x
• 33e7c05 chore(deps): update alpine docker tag to v3.21.3
• ee7d79c chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.4 [security]
• b05be4b Merge pull request oauth2-proxy#2977 from dsymonds/master
• 8a36a66 Update golang.org/x/net to v0.36.0.
• 5f4fdbb Merge pull request oauth2-proxy#2969 from dsymonds/master
• cc87465 Update golang.org/x/oauth2 to v0.27.0.
• a25fef7 Merge pull request oauth2-proxy#2697 from matpen-wi/feat/max-age-instead-of-expires
• a393ea3 pkg/cookies: use 'Max-Age' instead of 'Expires' for cookie expiration
• 80189a9 Merge pull request oauth2-proxy#2960 from v0tti/fix_trusted_ip_docs
• 876feee fix: wrong documentation for --trusted-ip in v7.6, v7.7, v7.8
• 38bb153 fix: wrong documentation for --trusted-ip (oauth2-proxy#2959)
• 2d29cee chore(deps): update helm release dex to v0.20.0 (oauth2-proxy#2936)
• b72a9f4 chore(deps): update gomod (oauth2-proxy#2937)
• 8b6e845 Merge pull request oauth2-proxy#2941 from tuunit/doc/add-entra-id-to-issue-template
• 0364f1b doc: add entra id to issue templates
• 39bae25 Merge pull request oauth2-proxy#2927 from tuunit/chore/bump-golang-1.23
• 67f3da2 fix(test): syntax violation of json with one too many closing curly brackets
• 3cf74c2 doc: update changelog
• 9b32699 chore(deps): update all go depedencies
• 58527ec chore(build): retrieve go version from go.mod as single point of truth
• 4c823a6 chore(deps): update helm release oauth2-proxy to v7.10.2 (oauth2-proxy#2934)
• b7a8d38 chore(deps): update dependency @easyops-cn/docusaurus-search-local to ^0.48.0
• 04cc932 Merge pull request oauth2-proxy#2922 from oauth2-proxy/release/v7.8.1
• 0edecd3 update release highlights
• c580b7f update to release version v7.8.1
• 46b3b26 Merge pull request oauth2-proxy#2920 from tuunit/fix/missing-version-during-docker-built
• a29eda3 Merge branch 'master' into fix/missing-version-during-docker-built
• f31e02c fix: jwt regex validation error during skip-jwt-bearer-tokens flow (oauth2-proxy#2888)
• f1a5011 fix: setting missing version during docker built
• fafb47e Merge pull request oauth2-proxy#2914 from oauth2-proxy/release/v7.8.0
• 8dd2cbe fix: systemd socket support build handling for windows
• ae5b5dc doc: update release v7.8.0 changelog
• f2ce83b doc: add new docs version 7.8.x
• f400e6f chore(deps): update gitea/gitea docker tag to v1.23.1
• c904879 chore(deps): update alpine docker tag to v3.21.2
• f5631a6 chore(deps): update dependency @easyops-cn/docusaurus-search-local to ^0.47.0 (oauth2-proxy#2911)
• 01b01d8 Merge pull request oauth2-proxy#2376 from tuunit/feature/static-public-keys-support
• e28603f feature: static public keys file support for oidc provider
• ae8fb08 feat(entra): add Workload Identity support for Entra ID (oauth2-proxy#2902)
• 60570cc doc: fix formatting issue in Google provider doc (oauth2-proxy#2907)
• 5df6053 chore(deps): update helmv3
• 75a1099 chore(deps): update docker-compose
• 1c3bc31 chore(deps): update dependency golangci/golangci-lint to v1.63.4
• 5260633 doc: fix dex helm chart values for k8s example (oauth2-proxy#2880)
• 507d63e chore(deps): update dependency @easyops-cn/docusaurus-search-local to ^0.46.0
• 140674e chore(deps): update alpine docker tag to v3.21.0 (oauth2-proxy#2877)
• cdcc620 Merge pull request oauth2-proxy#2894 from oauth2-proxy/fix-lint
• f41a686 Fix linting after updating golangci-lint to 1.62.2
• c1a21aa Merge pull request oauth2-proxy#2872 from oauth2-proxy/renovate/golangci-golangci-lint-1.x
• 1346ae6 chore(deps): update dependency golangci/golangci-lint to v1.62.2
• fe6f8dd Merge pull request oauth2-proxy#2878 from oauth2-proxy/renovate/golang-1.x
• 5edff8f chore(deps): update dependency golang to v1.23.4
• 5f188e5 Microsoft Entra ID provider (oauth2-proxy#2390)
• c64ec12 Merge pull request oauth2-proxy#2886 from oauth2-proxy/renovate/go-golang.org-x-net-vulnerability
• 47638db chore(deps): update module golang.org/x/net to v0.33.0 [security]
• bcf2034 Merge pull request oauth2-proxy#2884 from oauth2-proxy/renovate/go-golang.org-x-crypto-vulnerability
• 0dca9af chore(deps): update module golang.org/x/crypto to v0.31.0 [security]
• ef8ba75 docs: fix insecure Caddy configuration example (oauth2-proxy#2827)
• 5042203 chore(deps): update docker-compose
• bc12242 chore(deps): update gomod
• 05b91f3 chore: extend test cases for oidc provider and documentation regarding implicit setting of the groups scope when no scope was specified in the config
• 2fd2f8c chore(deps): update gomod
• 4e2013e fix: update code_verifier to use recommended method (oauth2-proxy#2620)
• 3ceef0c feat: add CF-Connecting-IP as supported real ip header (oauth2-proxy#2821)
• 64e736f fix: websocket path rewrite (oauth2-proxy#2300)
• 96f0288 chore(deps): update alpine docker tag to v3.20.3 (oauth2-proxy#2682)
• 0bc8dd9 chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security] (oauth2-proxy#2831)
• 50ec7fa chore(deps): update dependency node to v22 (oauth2-proxy#2836)
• b4f7e06 doc: fix relative URLs to configuration page (oauth2-proxy#2818)
• 4d2b5c3 Merge pull request oauth2-proxy#1985 from isodude/systemd-socket
• 5ec03ab chore(deps): update module github.com/go-jose/go-jose/v3 to v4 (oauth2-proxy#2598)
• 9945b68 doc: readme overhaul and azure sponsorship (oauth2-proxy#2826)
• 6743a9c Add support for systemd.socket
• bc8e716 Allow parsing remote address headers over unix sockets
• e00c7a7 fix(contrib): revamped systemd service example (oauth2-proxy#2655)
• 66f1063 feat: add X-Envoy-External-Address as supported header (oauth2-proxy#2755)
• 798b846 chore(deps): update dependency @easyops-cn/docusaurus-search-local to ^0.45.0
• c555f5f chore: removed duplicate image line in docker-compose (oauth2-proxy#2817)
• defc456 doc: expand on --upstream URL matching and trailing slash behaviour (oauth2-proxy#2813)
• ab448cf doc: add standard opencontainer docker labels (oauth2-proxy#2800)
• 6fb0201 Merge pull request oauth2-proxy#2807 from oauth2-proxy/release/v7.7.1
• 055a634 update to release version v7.7.1
• ff761d2 fix: runtime error: index out of range (0) with length 0 (oauth2-proxy#2328)
• 642ba17 fix: unable to use hyphen in JSON path for oidc-groups-claim option (oauth2-proxy#2619)
• d68336d Merge pull request oauth2-proxy#2803 from tuunit/bugfix/self-signed-certificate-handling
• 4bd920b add changelog entry
• bae168f better handling of default transport modification
• 8fd7312 fix: self signed certificate handling
• cda6414 Merge pull request oauth2-proxy#2798 from oauth2-proxy/release/v7.7.0
• 07230ea fix(ci): testing full release cycle before release branches can be merged
• f5d3670 Merge pull request oauth2-proxy#2792 from oauth2-proxy/release/v7.7.0
• 1dd4a41 add new loop var linter for go1.22 and remove unnecessary exportloopref linter
• 3c7dadc add v7.7.0 release highlights
• 6e32bd6 fix missing 'changes since' section logic
• f0fe33e enforce go 1.22.7
• 7159958 fix golangci-lint version in pipelines
• f432cf7 update to release version v7.7.0
• f978388 add new docs version 7.7.x
• 65e83fc fix(csrf): possible infinite loop (oauth2-proxy#2607)
• 021d940 Merge pull request oauth2-proxy#2790 from oauth2-proxy/chore/update-all-dependencies
• ad3ee0f update relase pipeline
• 41c8d5b chore(deps): update all golang dependencies
• fff5dd3 doc: add example for caddy v2 forward_auth (oauth2-proxy#2759)
• bc03445 fix go version in DevContainer and contibution guide (oauth2-proxy#2768)
• d365d5f doc: fix toml key for provider ca certs (oauth2-proxy#2780)
• 4fe0d56 chore: fix function names in comment
• e91f098 Update docker-compose-nginx.yaml
• d436e19 Fix broken traefik docs link
• e293ddd Merge pull request oauth2-proxy#2589 from ianroberts/file-upstream-rewrite
• e12ae03 doc: explain value comma separation for plural environment variables (oauth2-proxy#2732)
• 51c65c9 docs: added changelog entry for file upstream rewriteTarget
• 16f032b Clarify what rewriteTarget means for a file: upstream
• cb53401 Don't use http.StripPrefix when a file: upstream has rewriteTarget
• b618ed7 Test for a file:/// upstream combined with regex path rewrite
• 076d2df fix: add the OAuth2 image to the local environment examples in the compose file
• 1ba2353 chore(deps): update dependency golangci/golangci-lint to v1.60.3
• 87b598c Add s390x nightly build
• f71a7fd feature/s390x architecture support (oauth2-proxy#2734)
• ecfa2ca chore(deps): update dependency golangci/golangci-lint to v1.60.2
• e22b8d0 doc: update maintainer emails (oauth2-proxy#2748)
• f9a0a4a doc: fix typo in function description (oauth2-proxy#2738)
• 9a9e7b7 docs: restructure all options and flags (oauth2-proxy#2747)
• 95cbd0c Merge pull request oauth2-proxy#2723 from tuunit/docs/add-toml-fields
• 12105c4 add toml field
• a15eba4 reformatting of markdown tables
• 100ffdc chore(deps): update docker-compose (oauth2-proxy#2714)
• 5aea780 chore(deps): update helm release oauth2-proxy to v7.7.9
• 4929dc4 docs: fix broken traefik docs link in overview.md (oauth2-proxy#2717)
• ce8b63b chore(examples): update keycloak to v25 (oauth2-proxy#2706)
• ca25c90 docs: update provider list with refresh support (oauth2-proxy#2711)
• 49aa69b revert: ignoring non-code paths
• 0e4962a chore(ci): ignore markdown files for ci
• f60b7f3 chore(ci): add paths-ignore for none code related directories (oauth2-proxy#2695)
• 343bd61 chore(deps): Updated to ginkgo v2 (oauth2-proxy#2459)
• 211c605 docs: additional notes about available claims for HeaderValue (oauth2-proxy#2674)
• a22668e docs: make clear that any access token expiry dates are ignored (oauth2-proxy#2644)
• 3045392 feat: Replace default Go user-agent with oauth2-proxy and version (oauth2-proxy#2570)
• 45ec12b Merge pull request oauth2-proxy#2700 from oauth2-proxy/renovate/docker-compose
• 8a6a3ef chore(deps): update docker-compose
• 9e23b57 Merge pull request oauth2-proxy#2705 from oauth2-proxy/renovate/npm
• 4122e64 chore(deps): update dependency @easyops-cn/docusaurus-search-local to v0.44.3
• 45fe2dc fix: docs link in SECURITY.md
• 9f64c67 Update SECURITY.md
• 6c0d1c5 chore(deps): update helm release oauth2-proxy to v7.7.8
• 8dfb7e9 docs: update README and fix code some commentary typos (oauth2-proxy#2608)
• 3460cd4 chore(deps): update dependency codeclimate/test-reporter to v1
• 70057d3 strip v off of version for generating the correct download url
• 72ee8c8 fix test reporter flags
• ece8145 Merge branch 'master' into renovate/codeclimate-test-reporter-1.x
• 94aa62e chore(deps): update helm release oauth2-proxy to v7
• a472392 chore(deps): update helm release oauth2-proxy to v7
• 2bb7ea5 Merge branch 'master' into renovate/codeclimate-test-reporter-1.x
• 3f042de Merge pull request oauth2-proxy#2593 from oauth2-proxy/renovate/gomod
• f201dff Merge branch 'master' into renovate/codeclimate-test-reporter-1.x
• 65225ba chore(deps): update gomod
• 5053a5d chore(deps): update dependency @easyops-cn/docusaurus-search-local to v0.44.2
• 7508c62 fix version scheme for download url
• 02a2723 chore(deps): update dependency codeclimate/test-reporter to v1
• 907b957 chore(deps): update dependency @easyops-cn/docusaurus-search-local to v0.44.2
• f583dd0 Merge pull request oauth2-proxy#2580 from oauth2-proxy/renovate/actions-configure-pages-5.x
• 38d70fe chore(deps): update actions/configure-pages action to v5
• 10f2636 Merge pull request oauth2-proxy#2563 from oauth2-proxy/renovate/helmv3
• 92c2f06 chore(deps): update helmv3
• 0f5abe5 Merge pull request oauth2-proxy#2592 from oauth2-proxy/renovate/golang-1.x
• ca9c0fb chore(deps): update dependency golang to v1.22.4
• 7dd8640 Merge pull request oauth2-proxy#2609 from oauth2-proxy/renovate/docker-compose
• 252c978 chore(deps): update docker-compose
• a5fdb35 Merge pull request oauth2-proxy#2594 from oauth2-proxy/renovate/npm
• 8ee859b chore(deps): update npm
• f450bf4 Merge pull request oauth2-proxy#2648 from oauth2-proxy/renovate/alpine-3.x
• 0998ca6 chore(deps): update alpine docker tag to v3.20.0
• 5c315cd Merge pull request oauth2-proxy#2663 from pierluigilenoci/CVE_fix
• 2d07c08 Added changelog and docs
• 60b879f Upgraded all modules to the latest version