Repository navigation

Upgrade to upstream v7.15.4 and port the Atlassian provider - #2

Merged

alexrunsk merged 729 commits into

upgrade-v7.15.4

Oct 1, 2026

This pull request is big! We're only showing the most recent 250 commits

Commits on Feb 18, 2025

Merge pull request #2960 from v0tti/fix_trusted_ip_docs
JoelSpeed
authored
80189a9

Commits on Feb 24, 2025

pkg/cookies: use 'Max-Age' instead of 'Expires' for cookie expiration
matpen-wi
committed
a393ea3
Merge pull request #2697 from matpen-wi/feat/max-age-instead-of-expires
JoelSpeed
authored
a25fef7

Commits on Feb 25, 2025

Update golang.org/x/oauth2 to v0.27.0.
dsymonds
committed
cc87465
Merge pull request #2969 from dsymonds/master
JoelSpeed
authored
5f4fdbb

Commits on Mar 4, 2025

Update golang.org/x/net to v0.36.0.
dsymonds
committed
8a36a66

Commits on Mar 5, 2025

Merge pull request #2977 from dsymonds/master
JoelSpeed
authored
b05be4b

Commits on Mar 12, 2025

chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.4 [security]

renovate[bot]
authored and
tuunit
committed
ee7d79c
chore(deps): update alpine docker tag to v3.21.3
renovate[bot]
authored
33e7c05
Merge pull request #2956 from oauth2-proxy/renovate/alpine-3.x
tuunit
authored
089c0ea
chore(deps): update dependency golangci/golangci-lint to v1.64.7
renovate[bot]
authored
67c1cd6
Merge pull request #2957 from oauth2-proxy/renovate/golangci-golangci-lint-1.x
tuunit
authored
a01abbd
chore(deps): update docker-compose

renovate[bot]
authored and
tuunit
committed
9ac8f4b

Commits on Mar 18, 2025

deps: remove tools/reference-gen from go.mod

dolmen
authored and
tuunit
committed
8a8fcab
chore(deps): update dependency @easyops-cn/docusaurus-search-local to ^0.49.0

renovate[bot]
authored and
tuunit
committed
ef51685

Commits on Mar 19, 2025

chore(deps): update gomod (#2952)

renovate[bot]
and
tuunit
authored
4e2100a

Commits on Mar 25, 2025

Commits on Mar 29, 2025

docs: fix gitlab docs url for oauth2 integration (#3002)

copolycube
and
tuunit
authored
b34b617

Commits on Mar 31, 2025

Commits on Apr 3, 2025

Merge pull request #3015 from oauth2-proxy/renovate/docker-compose
JoelSpeed
authored
7cee02c

Commits on Apr 13, 2025

chore(deps): update gitea/gitea docker tag to v1.23.7 (#3030)
renovate[bot]
authored
bb6ff4e

Commits on Apr 21, 2025

Add --bearer-token-login-fallback option (#2924)

Justin Ryan
and
Justin Ryan
authored
8abdbb5
chore(deps): update module golang.org/x/net to v0.38.0 [security] (#3035)
renovate[bot]
authored
16e453e

Commits on Apr 24, 2025

Commits on Apr 25, 2025

fix(entra-id): use federated credentials for refresh token (#3031)

Richard87
and
tuunit
authored
7d85c99

Commits on Apr 27, 2025

Commits on Apr 28, 2025

Commits on May 3, 2025

docs: add note about version obfuscation to footer option (#3051)
tuunit
authored
14d5355

Commits on May 23, 2025

chore(deps): update docker-compose (#3074)
renovate[bot]
authored
f82e904

Commits on May 26, 2025

Commits on May 29, 2025

feat: support for multiple github orgs (#3072)

daniel-mersch
and
tuunit
authored
7731437

Commits on Jul 11, 2025

Create FUNDING.yml
tuunit
authored
c8c160d
Merge pull request #3121 from oauth2-proxy/add-funding
JoelSpeed
authored
1a03217

Commits on Jul 13, 2025

Commits on Jul 17, 2025

Commits on Jul 20, 2025

chore(deps): update dependency @easyops-cn/docusaurus-search-local to ^0.52.0 (#3131)
renovate[bot]
authored
313a2cb
chore(deps): update gomod (#3132)
renovate[bot]
authored
658256d
chore(deps): update helm release oauth2-proxy to v7.14.1 (#3133)
renovate[bot]
authored
c403d61
chore(deps): update docker-compose (#3130)
renovate[bot]
authored
20f561c
chore(deps): update alpine docker tag to v3.22.1 (#3129)
renovate[bot]
authored
d5f8507
feat(cookie) csrf per request limit (#3134)

tuunit
and
bh-tt
authored
b57c821
fix: show login page on broken session cookie (#2605)

Primexz
and
tuunit
authored
5e7f14b
Fix local-environment ports (#3136)
sim642
authored
3ac834d

Commits on Jul 21, 2025

feat: allow use more possible google admin-sdk api scopes (#2743)

BobDu
and
tuunit
authored
4d17bc1

Commits on Jul 22, 2025

feat: add SourceHut (sr.ht) provider (#2359)

bitfehler
and
tuunit
authored
a88306b
fix: regex substitution for $ signs in upstream path handling before running envsubst (#2524)

dashkan
and
tuunit
authored
137e59d
feat(cookie): add feature support for cookie-secret-file (#3104)

sandy2008
and
tuunit
authored
dc8b162

Commits on Jul 23, 2025

feat: use non-default authorization request response mode in OIDC providers (#3055)
stieler-it
authored
b905f2c

Commits on Jul 24, 2025

Commits on Jul 30, 2025

Merge commit from fork
tuunit
authored
9ffafad
release v7.11.0 (#3145)

github-actions[bot]
and
tuunit
authored
c0a928e

Commits on Aug 1, 2025

fix: port for local-environment (#3148)
hunterboerner
authored
4eaa1bc

Commits on Aug 12, 2025

feat(e2e): add workflow to trigger e2e test suite through PR comments (#3153)
tuunit
authored
9667bce
feat: add Cidaas provider (#2273)

authored
4c86a4d

Commits on Aug 19, 2025

feat: allow disable-keep-alives configuration in upstream (#3156)
jet-go
authored
f18a0b7
fix: Gitea team membership (#3150)

MagicRB
and
tuunit
authored
8c1b2b6
add new docs version 7.12.x

github-actions[bot]
authored and
tuunit
committed
413d4f6
update to release version v7.12.0

github-actions[bot]
authored and
tuunit
committed
b4b69a6
add changelog entry for v7.12.0
tuunit
committed
7294eeb
Merge pull request #3169 from oauth2-proxy/release/v7.12.0
tuunit
authored
5082db0

Commits on Aug 20, 2025

doc: SourceHut documentation fixes (#3170)
bitfehler
authored
8afb047

Commits on Sep 25, 2025

Commits on Sep 28, 2025

fix(deps): revert actions/upload-pages-artifact action to v3 (#3211)
illrill
authored
9168731

Commits on Oct 28, 2025

Commits on Nov 7, 2025

feat: added organizationId/employee id as preferred username (#3237)
pixeldrew
authored
8782743

Commits on Nov 8, 2025

Merge commit from fork
tuunit
authored
5993067
Merge commit from fork
tuunit
authored
f3f30fa
fix: validation of refreshed sessions using the access_token in the OIDC provider (#1933)
gysel
authored
22053dc
feat: add allowed_* constraint option to proxy endpoint query string (#2841)

jacobalberty
and
tuunit
authored
fcc2db0
release: v7.13.0 (#3251)

github-actions[bot]
and
tuunit
authored
082b49a

Commits on Nov 9, 2025

fix: hmacauth dependency licensing issue (#3253)
tuunit
authored
fcf4e79
Add license scan report and status (#3248)

fossabot
and
tuunit
authored
0107d6d

Commits on Nov 11, 2025

chore(deps): update docker-compose (#3255)
renovate[bot]
authored
6a4255c
chore(deps): update dependency node to v24 (#3256)
renovate[bot]
authored
e4becfd
fix: NewRemoteKeySet is not using DefaultHTTPClient (#3197)

rsrdesarrollo
and
tuunit
authored
7cf69b2

Commits on Nov 16, 2025

introduce mapstructure decoder for yaml parsing
tuunit
committed
7c20001
apply review suggestions
tuunit
committed
676f56a
add duration test
tuunit
committed
6720d8d
use official upstream yaml library v3
tuunit
committed
c186d40
fix alpha config example
tuunit
committed
4c0dd28
resolve cipher deprecation and update mapstructures v2
tuunit
committed
18fc898
fix alpha config
tuunit
committed
aaf1889
revert: secrets as []byte instead of string
tuunit
committed
810f629
fix merge problems and test cases
tuunit
committed
48bd2d7
fix test setup and add local image build make target
tuunit
committed
955ab6b
return nil directly
tuunit
committed
5041435
feat: migrate all alpha config booleans to pointers
tuunit
committed
9d70e04
chore(deps): replace with forked official yaml library
tuunit
committed
51b1fd0
feat: add ensure defaults to all migrated structs
tuunit
committed
527c72f
deref everything... but why?
tuunit
committed
ceb9a38
deref everything but now with default constants
tuunit
committed
638fba4
adapting unit tests and fixing minor issues introduced with the derefing
tuunit
committed
137decb
refactor: ptr.Ptr to ptr.To
tuunit
committed
0eec65e
feat: migrate google used organization id and header normalization booleans to pointers
tuunit
committed
15041dd

Commits on Nov 28, 2025

Commits on Jan 4, 2026

chore(deps): update dependency golangci/golangci-lint to v2.7.2 (#3254)

renovate[bot]
and
tuunit
authored
854a747

Commits on Jan 6, 2026

chore(deps): update alpine docker tag to v3.23.2 (#3296)
renovate[bot]
authored
0100ca9

Commits on Jan 14, 2026

doc: improved clarity and correctness of proxy behaviour (#3305)

NirronCD
and
tuunit
authored
a2f2223
docs: add Cisco Duo SSO provider documentation (#3306)

shri3016
and
tuunit
authored
a8e2084
fix: added conditional so default is not always set and env vars are honored #3303 (#3304)
pixeldrew
authored
3c37312
chore(deps): update traefik docker tag to v2.11.35 (#3295)
renovate[bot]
authored
f3dcffe
feat: more aggressively truncate logged access_token (#3264)

MartinNowak
and
tuunit
authored
b4eb611
fix: session refresh handling in OIDC provider (#3267)
gysel
authored
4953603

Commits on Jan 16, 2026

Commits on Jan 17, 2026

docs: clarify secret file format requirements (#3311)

shri3016
and
tuunit
authored
86c2469
add new docs version 7.14.x

github-actions[bot]
authored and
tuunit
committed
d16a0c4
update to release version v7.14.0

github-actions[bot]
authored and
tuunit
committed
3124bf7
doc: add changelog and migration guide for v7.14.0 alpha config changes
tuunit
committed
34c2712
doc: cncf onboarding and sponsor update
tuunit
committed
f46dcc7
docs: backport integrations split to v7.14.x & v7.13.x
tuunit
committed
a360cb3
doc: extend the alpha config changelog notice
tuunit
committed
3bc1a53
docs: add todo for revamping the usage / naming of PassHostHeader
tuunit
committed
1f29953
Merge pull request #3308 from oauth2-proxy/release/v7.14.0
tuunit
authored
707e6c4
fix: skip provider button auth only redirect (#3309)

StefanMarkmann
and
tuunit
authored
9c61c49
fix: static upstreams failing validation due to `passHostHeader` and `proxyWebSockets` defaults being set incorrectly (#3302)

sourava01
and
tuunit
authored
59f4e42
chore(deps): upgrade to go1.25.6; upgrade all go dependencies
tuunit
committed
844e4e3
ci: fix linter warnings for preallocation
tuunit
committed
cc0b48d
ci: fix qlty coverage upload
tuunit
committed
5020c33
Merge pull request #3312 from oauth2-proxy/chore/gomod
tuunit
authored
56b5c08
update to release version v7.14.1
github-actions[bot]
committed
3ed3baf
doc: changelog entry for v7.14.1
tuunit
committed
8f52b14
Merge pull request #3313 from oauth2-proxy/release/v7.14.1
tuunit
authored
7bf586c
revert: "fix: skip provider button auth only redirect (#3309)" (#3314)

StefanMarkmann
and
tuunit
authored
cf5d34a
docs: fix how to use skip-provider-button with proper auth redirect handling (#3315)
StefanMarkmann
authored
dcc7970

Commits on Jan 18, 2026

ci: avoid running qlty coverage report for PRs (#3316)
tuunit
authored
d5ea33b
release v7.14.2 (#3317)

github-actions[bot]
and
tuunit
authored
3a55dad

Commits on Feb 12, 2026

ci: ensure release branches originate from the local repository and reduce residual risk of command injection (#3337)
tuunit
authored
e7724f3

Commits on Feb 26, 2026

ci: ensure we always use the latest patch version of golang (#3349)
tuunit
authored
06f1234
ci: ensure we always use the latest patch version of golang (#3350)
tuunit
authored
788f3d0
release v7.14.3 (#3351)

github-actions[bot]
and
tuunit
authored
b5c8df7

Commits on Feb 27, 2026

chore(deps): update alpine docker tag to v3.23.3 (#3329)
renovate[bot]
authored
8807573

Commits on Mar 14, 2026

Commits on Mar 17, 2026

Commits on Mar 18, 2026

feat: possibility to inject id_token in redirect url during sign out (#3278)

albanf
and
tuunit
authored
3085309
feat: add support for specifying allowed OIDC JWT signing algorithms (#2753) (#2851)

andoks
and
tuunit
authored
7c96234
fix: use CSRFExpire instead of Expire for CSRF cookie validation (#3369)

Br1an67
and
tuunit
authored
ff357da
fix: filter empty strings from allowed groups (#3365)

Br1an67
and
tuunit
authored
779cc5f
doc: add missing redis-ca-path documentation (#3341)

ganeshjp
and
tuunit
authored
fe5c6be
feat: add --config-test flag for validating configuration (#3338)

MayorFaj
and
tuunit
authored
51ecc50
feat: add same site option for csrf cookies (#3347)

jvnoije
and
tuunit
authored
cdbdb11
feat: add support for setting a unix binding's socket file mode (#3376)

tuunit
and
Tristan971
authored
9ae0b32
release v7.15.0 (#3378)

github-actions[bot]
and
tuunit
authored
96c9ec6

Commits on Mar 23, 2026

chore(deps): update gomod and golangci/golangci-lint to v2.11.4 (#3382)
tuunit
authored
0ecc35e
chore(deps): update actions/upload-artifact action to v7 (#3358)
renovate[bot]
authored
9f09d54
fix: handle Unix socket RemoteAddr in IP resolution (#3374)

H1net
and
tuunit
authored
a4d8903
fix: do not log error for backend logout 204 (#3381)

artificiosus
and
tuunit
authored
44236f0
doc: update PR template with additional checklist items
tuunit
authored
5ca3012
fix: improve logging when session refresh token is missing (#3327)

yosri-brh
and
tuunit
authored
e2682f7
fix: propagate errors during route building (#3383)

tuunit
and
sybereal
authored
46be69c
release v7.15.1 (#3384)

github-actions[bot]
and
tuunit
authored
848ec8b
doc: fix changelog for v7.15.0
tuunit
authored
7bc4b5e
doc: fix config validation formatting (#3386)
tuunit
authored
da9123f

Commits on Apr 8, 2026

build(deps): bump github.com/go-jose/go-jose/v4 to 4.1.4 (#3400)
Juqsi
authored
761bf3b

Commits on Apr 12, 2026

Commits on Apr 13, 2026

Merge commit from fork

tuunit
and
cschrewing-WI
authored
0337a95
Merge commit from fork
tuunit
authored
43596a7
Merge commit from fork
tuunit
authored
aff369d
Merge commit from fork
tuunit
authored
cc0e033
Merge commit from fork
tuunit
authored
bdfde72

Commits on Apr 14, 2026

release v7.15.2 (#3413)

github-actions[bot]
and
tuunit
authored
5961fd9

Commits on Apr 17, 2026

change affiliation
tuunit
authored
65037b0

Commits on Jun 8, 2026

Commits on Jun 9, 2026

Merge pull request #3447 from oauth2-proxy/chore/bump-go-to-1.26-and-migrate-of-reverse-proxy-handling
tuunit
authored
61151b4
release v7.15.3 (#3450)

github-actions[bot]
and
tuunit
authored
66b3a17
docs: update slack reference for CNCF
tuunit
committed
09979d4

Commits on Jun 13, 2026

chore(deps): update gomod
renovate[bot]
authored
2479410

Commits on Jun 14, 2026

Commits on Jul 30, 2026

chore(deps): update gomod (#3461)
renovate[bot]
authored
d2a4782
chore(deps): update actions/checkout action to v7 (#3462)
renovate[bot]
authored
14af295

Commits on Aug 12, 2026

docs: update inviter link (#3500)

jsoref
and
tuunit
authored
1f049e5

Commits on Aug 18, 2026

chore(deps): update gomod

renovate[bot]
authored and
tuunit
committed
09aa14a
ci: use go tool for running golangci-lint
tuunit
committed
3040774
test: fix expected error message wording
tuunit
committed
d707a36
ci: hardening by replacing all tags using immutable commit hashes (#3507)
tuunit
authored
c404323
chore(deps): update alpine docker tag to v3.24.1 (#3421)
renovate[bot]
authored
aad15f3
chore(deps): update docker-compose (#3460)
renovate[bot]
authored
5aeb458
chore(deps): update helm release dex to v0.24.1 (#3446)
renovate[bot]
authored
aa9690a
chore(deps): update docker-compose

renovate[bot]
authored and
tuunit
committed
ff9b942
test: update traefik setup and use in-memory for all dex instances instead of etcd
tuunit
committed
f7ae0ae

Commits on Aug 20, 2026

docs: clarify alpha upstream path syntax (#3504)

nightcityblade
and
nightcityblade
authored
d122f0c
docs: clarify structured claim header serialization (#3501)
nightcityblade
authored
061685f
docs: clarify the default nginx split-cookie example (#3474)
ihopenre-eng
authored
61caa9e
release v7.15.4 (#3508)

github-actions[bot]
and
tuunit
authored
81ff034

Commits on Sep 30, 2026

Upgrade to upstream v7.15.4 and port the Atlassian provider

alexrunsk
and
claude
committed
b6b6124