<feed xmlns='http://www.w3.org/2005/Atom'>
<title>sproxy2/src, branch state</title>
<subtitle>HTTP proxy for authenticating users via OAuth2</subtitle>
<id>https://git.pashev.ru/sproxy2/atom?h=state</id>
<link rel='self' href='https://git.pashev.ru/sproxy2/atom?h=state'/>
<link rel='alternate' type='text/html' href='https://git.pashev.ru/sproxy2/'/>
<updated>2017-07-26T18:09:57Z</updated>
<entry>
<title>[WIP] State in OAuth2 callback should be short-lived</title>
<updated>2017-07-26T18:09:57Z</updated>
<author>
<name>Igor Pashev</name>
<email>pashev.igor@gmail.com</email>
</author>
<published>2017-07-26T18:09:57Z</published>
<link rel='alternate' type='text/html' href='https://git.pashev.ru/sproxy2/commit/?id=bb31be8f6072e4dd72c8630c019f7ab5e0bc9fa9'/>
<id>urn:sha1:bb31be8f6072e4dd72c8630c019f7ab5e0bc9fa9</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Respond with 502 on every backend exception</title>
<updated>2017-05-13T20:45:56Z</updated>
<author>
<name>Igor Pashev</name>
<email>pashev.igor@gmail.com</email>
</author>
<published>2017-05-13T20:45:56Z</published>
<link rel='alternate' type='text/html' href='https://git.pashev.ru/sproxy2/commit/?id=41133e1f2e83fff0dea8a5a1ce1ea53b2d9aa2d8'/>
<id>urn:sha1:41133e1f2e83fff0dea8a5a1ce1ea53b2d9aa2d8</id>
<content type='text'>
From RFC 7231:

6.6.3.  502 Bad Gateway

   The 502 (Bad Gateway) status code indicates that the server, while
   acting as a gateway or proxy, received an invalid response from an
   inbound server it accessed while attempting to fulfill the request.
</content>
</entry>
<entry>
<title>Add end-point for checking access in a bunch</title>
<updated>2017-05-13T20:16:09Z</updated>
<author>
<name>Igor Pashev</name>
<email>pashev.igor@gmail.com</email>
</author>
<published>2017-05-13T20:09:56Z</published>
<link rel='alternate' type='text/html' href='https://git.pashev.ru/sproxy2/commit/?id=850e5cc2d4ef96a2dd2a43c9b8d4c1355eb7a148'/>
<id>urn:sha1:850e5cc2d4ef96a2dd2a43c9b8d4c1355eb7a148</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Oops ¯\_(ツ)_/¯</title>
<updated>2017-02-07T13:30:44Z</updated>
<author>
<name>Igor Pashev</name>
<email>pashev.igor@gmail.com</email>
</author>
<published>2017-02-07T13:30:44Z</published>
<link rel='alternate' type='text/html' href='https://git.pashev.ru/sproxy2/commit/?id=2afaf4bf4532acd4a151c23ec2aa97842e9e3020'/>
<id>urn:sha1:2afaf4bf4532acd4a151c23ec2aa97842e9e3020</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Disregard possible port in the Host HTTP header</title>
<updated>2016-12-27T18:53:30Z</updated>
<author>
<name>Igor Pashev</name>
<email>pashev.igor@gmail.com</email>
</author>
<published>2016-12-27T18:53:30Z</published>
<link rel='alternate' type='text/html' href='https://git.pashev.ru/sproxy2/commit/?id=d7e5277c680d73ac2e11aea0b473d98b2d48350c'/>
<id>urn:sha1:d7e5277c680d73ac2e11aea0b473d98b2d48350c</id>
<content type='text'>
Motivation: to make it easy to switch Sproxy's primary port.
This could be useful when running private (behind Sproxy) and public
(e. g. nginx) HTTPS services on the same server.  In such a setup
one can use port 443 for public services and alt. HTTPS port 8443
for Sproxy.

Before this change, Sproxy took possible port number into account
when looking for backend and privileges. Now it ignores port and
considers domain name only.

This also gets Sproxy in line with browsers and SSL certificates:
certificates do not include port numbers, browsers ignore ports
when sending cookies.
</content>
</entry>
<entry>
<title>BREAKING: no wildcards for domain names</title>
<updated>2016-12-18T11:31:10Z</updated>
<author>
<name>Igor Pashev</name>
<email>pashev.igor@gmail.com</email>
</author>
<published>2016-12-18T11:29:18Z</published>
<link rel='alternate' type='text/html' href='https://git.pashev.ru/sproxy2/commit/?id=dcebf4705dfe974746519a37570aecd7eb4e2b2c'/>
<id>urn:sha1:dcebf4705dfe974746519a37570aecd7eb4e2b2c</id>
<content type='text'>
This feature was ambiguous (in the same way as paths are)
and never used anyway.
</content>
</entry>
<entry>
<title>BREAKING: Allow !include in config file</title>
<updated>2016-12-01T19:43:08Z</updated>
<author>
<name>Igor Pashev</name>
<email>pashev.igor@gmail.com</email>
</author>
<published>2016-12-01T19:32:09Z</published>
<link rel='alternate' type='text/html' href='https://git.pashev.ru/sproxy2/commit/?id=b0c5ffbe1d2dbbf1f9c460be0b4f18500c50a90f'/>
<id>urn:sha1:b0c5ffbe1d2dbbf1f9c460be0b4f18500c50a90f</id>
<content type='text'>
This changes semantics of these options:

  - key
  - oauth2.&lt;provider&gt;.client_secret

They are no longer files, but strings.  To read content
from files, use !include.  The point of being files or
read from files is to segregate secrets from non-sensitive
easily discoverable settings.  With !include it is much
more simple and flexible.
</content>
</entry>
<entry>
<title>Allow running in plain HTTP mode (no SSL)</title>
<updated>2016-11-28T18:24:51Z</updated>
<author>
<name>Igor Pashev</name>
<email>pashev.igor@gmail.com</email>
</author>
<published>2016-11-28T18:24:51Z</published>
<link rel='alternate' type='text/html' href='https://git.pashev.ru/sproxy2/commit/?id=02e85ea26fc297d41a91c91d12b3e2aa290e62ff'/>
<id>urn:sha1:02e85ea26fc297d41a91c91d12b3e2aa290e62ff</id>
<content type='text'>
This can be useful when Sproxy is behind some
other proxy or load-balancer.
</content>
</entry>
<entry>
<title>Apply same settings to redirect server</title>
<updated>2016-11-28T12:57:23Z</updated>
<author>
<name>Igor Pashev</name>
<email>pashev.igor@gmail.com</email>
</author>
<published>2016-11-28T12:57:23Z</published>
<link rel='alternate' type='text/html' href='https://git.pashev.ru/sproxy2/commit/?id=1183905204bf70e69a2c853e71efed378f05d0b9'/>
<id>urn:sha1:1183905204bf70e69a2c853e71efed378f05d0b9</id>
<content type='text'>
</content>
</entry>
<entry>
<title>Refactored data import</title>
<updated>2016-11-26T19:53:22Z</updated>
<author>
<name>Igor Pashev</name>
<email>pashev.igor@gmail.com</email>
</author>
<published>2016-11-26T19:42:00Z</published>
<link rel='alternate' type='text/html' href='https://git.pashev.ru/sproxy2/commit/?id=a3b5b7ac059e473e10749591c11aee97482b88d1'/>
<id>urn:sha1:a3b5b7ac059e473e10749591c11aee97482b88d1</id>
<content type='text'>
Use persistent prepared statements for PostgreSQL data source.
Import should be faster from now on.
</content>
</entry>
</feed>
