sproxy2 - HTTP proxy for authenticating users via OAuth2

Age	Commit message (Collapse)	Author	Files	Lines
2017-08-06	Encode full URL in state	Igor Pashev	1	-5/+5
	Encode full URL in state, not just path. Use encoded URL for cross-domain redirect. This is useful for OAuth2 providers that do not support multiple callback URLs, like https://oauth.yandex.com/
2017-08-06	Fix POST requests for tokens	Igor Pashev	2	-118/+131
	Really use application/x-www-form-urlencoded instead of query paramaters. Apparently, Google and LinkedIn are too tolerant. Yandex is not.
2017-08-06	Add Yandex	Igor Pashev	2	-8/+94
	https://tech.yandex.com/oauth/
2017-05-13	Respond with 502 on every backend exception	Igor Pashev	1	-2/+6
	From RFC 7231: 6.6.3. 502 Bad Gateway The 502 (Bad Gateway) status code indicates that the server, while acting as a gateway or proxy, received an invalid response from an inbound server it accessed while attempting to fulfill the request.
2017-05-13	Add end-point for checking access in a bunch	Igor Pashev	3	-16/+87

2017-02-07	Oops ¯\_(ツ)_/¯	Igor Pashev	1	-1/+1

2016-12-27	Disregard possible port in the Host HTTP header	Igor Pashev	1	-10/+14
	Motivation: to make it easy to switch Sproxy's primary port. This could be useful when running private (behind Sproxy) and public (e. g. nginx) HTTPS services on the same server. In such a setup one can use port 443 for public services and alt. HTTPS port 8443 for Sproxy. Before this change, Sproxy took possible port number into account when looking for backend and privileges. Now it ignores port and considers domain name only. This also gets Sproxy in line with browsers and SSL certificates: certificates do not include port numbers, browsers ignore ports when sending cookies.
2016-12-18	BREAKING: no wildcards for domain names	Igor Pashev	1	-2/+2
	This feature was ambiguous (in the same way as paths are) and never used anyway.
2016-12-01	BREAKING: Allow !include in config file	Igor Pashev	2	-17/+8
	This changes semantics of these options: - key - oauth2.<provider>.client_secret They are no longer files, but strings. To read content from files, use !include. The point of being files or read from files is to segregate secrets from non-sensitive easily discoverable settings. With !include it is much more simple and flexible.
2016-11-28	Allow running in plain HTTP mode (no SSL)	Igor Pashev	2	-19/+42
	This can be useful when Sproxy is behind some other proxy or load-balancer.
2016-11-28	Apply same settings to redirect server	Igor Pashev	1	-7/+7

2016-11-26	Refactored data import	Igor Pashev	1	-63/+54
	Use persistent prepared statements for PostgreSQL data source. Import should be faster from now on.
2016-11-26	Populate permission database from a file	Igor Pashev	4	-13/+133

2016-11-25	Make sure all HTTP headers are UTF8-encoded	Igor Pashev	6	-48/+90
	Especially X-Family-Name, X-Given-Name. Since we get all the data from JSON and JSON is in UTF8 by default RFC 7159, we are safe. Refactored to make it less error-prone and to get as small number of encoding/decoding as possible.
2016-11-25	/.sproxy/logout just redirects if no cookie	Igor Pashev	1	-20/+20

2016-11-24	Disable printing exceptions	Igor Pashev	1	-2/+4
	We have our own traps and logging.
2016-11-24	Added comments on proxying	Igor Pashev	1	-1/+9

2016-11-23	Differentiate exceptions	Igor Pashev	1	-4/+15

2016-11-22	Print original headers from backends	Igor Pashev	1	-3/+3

2016-11-21	Remove some headers which are set automatically	Igor Pashev	1	-3/+6
	By underlying HTTP Client or WAI
2016-11-20	Show HTTP version in logs	Igor Pashev	1	-0/+1

2016-11-20	oauth2 callback state: include query params	Igor Pashev	1	-1/+3
	If method of the original query is GET, redirect to original path with query parameters. Otherwise redirect to "/". Previously, when unauthenticated users click on "https://example.net/foo?bar", they are redirected to "https://example.net/foo" after authentication. Now, they will be redirected to "https://example.net/foo?bar"
2016-11-19	Initial release (1.90.0)1.90.0	Igor Pashev	11	-0/+1230