 Alan Hazelton
|
7c049d95ba
|
use state only during oidc callback instead of redundant cookie
|
2026-04-05 14:10:38 -04:00 |
|
|
Alan Hazelton
|
5119acaf14
|
change response-access-control-allow-origin if * for dynamicProxy
|
2026-04-05 12:23:24 -04:00 |
|
|
Alan Hazelton
|
2579fefd9c
|
change response-access-control-allow-origin if *
|
2026-04-05 11:01:55 -04:00 |
|
|
Alan Hazelton
|
533a6b6eca
|
fix zrok cookie to work with XHR
|
2026-04-05 09:03:12 -04:00 |
|
 Tod Burtchell
|
e156581f31
|
Reverting the cookie change
|
2026-04-03 15:51:39 -04:00 |
|
|
Tod Burtchell
|
0e2a4a4cbc
|
Removing relying party cookie handler. Falling back to the state url parameter
|
2026-04-03 12:34:25 -04:00 |
|
|
Tod Burtchell
|
c5922ce8ef
|
OAuth state cookie is set as SameSite=None; Secure, allowing it to be sent on cross-site redirects
|
2026-04-03 09:37:33 -04:00 |
|
|
Tod Burtchell
|
6e23e4f2fa
|
Calling the endpoint for OPTIONS to get CORS headers when returning a 401
|
2026-04-02 16:29:32 -04:00 |
|
|
Tod Burtchell
|
afee99950f
|
Testing javascript-driven auth
|
2026-04-02 09:18:00 -04:00 |
|
|
Tod Burtchell
|
26bd60d423
|
Changing approach to fall through to the backend for OPTIONS requests submitted to the oauth endpoint
|
2026-04-01 15:39:31 -04:00 |
|
|
Tod Burtchell
|
6cf9c81a02
|
hacking zt-session header for now so we can find what else breaks
|
2026-04-01 13:25:39 -04:00 |
|
|
Tod Burtchell
|
caa1848a88
|
Short-cutting OPTIONS requests to the auth endpoint
|
2026-04-01 11:18:51 -04:00 |
|
|
Tod Burtchell
|
3bd6899de5
|
Using only the host origin. Last patch set two hosts, which is not allowed
|
2026-04-01 10:47:55 -04:00 |
|
|
Tod Burtchell
|
3939cfb42a
|
Using only the host origin. Last patch set two hosts, which is not allowed
|
2026-04-01 10:40:05 -04:00 |
|
|
Tod Burtchell
|
a429b0f190
|
Using request origin as the auth redirect allowed origin header
|
2026-04-01 10:04:20 -04:00 |
|
|
Tod Burtchell
|
ebf5b1ca49
|
Playing around with cors options on auth re-direct
|
2026-03-31 14:53:58 -04:00 |
|
 Michael Quigley
|
9c46c760ff
|
preflight OPTIONS handling
|
2026-03-31 11:09:59 -04:00 |
|
|
Michael Quigley
|
4f6f82431e
|
Merge branch 'main' into v2.0.1_cookie_striping
|
2026-03-30 15:17:41 -04:00 |
|
|
Michael Quigley
|
fab1d3e1e5
|
cookie striping max count/clamping (#1217)
|
2026-03-30 14:20:31 -04:00 |
|
|
Michael Quigley
|
8b926531a3
|
escaped proxyUi output by switching to html/template and removed reflected refreshInterval values from github oauth error pages
|
2026-03-30 13:35:23 -04:00 |
|
 Kenneth Bingham
|
2c5c33a8c8
|
normalize vars; simplify docs
|
2026-03-18 16:18:29 -04:00 |
|
|
Kenneth Bingham
|
3a32771549
|
stop using public token url template; override canary frontend port
|
2026-03-18 15:25:09 -04:00 |
|
  dovholuknfandJens Alm
|
0a3d6ce138
|
Added configuration option to dynamic proxy for oidc prompt.
|
2026-03-03 10:31:04 -05:00 |
|
|
Michael Quigley
|
9fac243a8f
|
fix for missing oauth configuration/defaults (#1128)
|
2026-02-03 14:41:55 -05:00 |
|
|
Michael Quigley
|
60f8aea58b
|
zrok->zrok2 (#1134)
|
2026-01-29 16:41:35 -05:00 |
|
|
Michael Quigley
|
e7f093447a
|
github.com/openziti/zrok -> github.com/openziti/zrokv/v2 (#1124)
|
2025-12-19 12:05:45 -05:00 |
|
|
Michael Quigley
|
fdc5c68c46
|
Merge branch 'main' into v2.0
|
2025-12-08 14:53:50 -05:00 |
|
|
Michael Quigley
|
dc86c0c17d
|
removed the vpn functionality
|
2025-12-08 12:31:19 -05:00 |
|
|
Michael Quigley
|
9700c1b741
|
Merge branch 'main' into v2.0
|
2025-10-16 14:41:30 -04:00 |
|
|
Michael Quigley
|
20ba2b5a3a
|
striped cookie implementation for publicProxy (#1101)
|
2025-10-16 14:26:09 -04:00 |
|
|
Michael Quigley
|
db0f4487f3
|
striped cookies for dynamicProxy and publicProxy in v2 (#1101)
|
2025-10-16 13:53:03 -04:00 |
|
|
Michael Quigley
|
d00e4a5290
|
everything -> dl (#1078)
|
2025-09-25 13:25:46 -04:00 |
|
|
Michael Quigley
|
4f05f1f98c
|
remove the 'version' concept from 'frontend_mapping' and all related infrastructure (#1041)
|
2025-09-22 13:09:46 -04:00 |
|
|
Michael Quigley
|
d0ad088a58
|
logging improvements (#1041)
|
2025-09-22 12:54:54 -04:00 |
|
|
Michael Quigley
|
debb52be91
|
removed 'version' from 'frontend_mappings' and re-introduced a primary key (#1041)
|
2025-09-22 12:47:48 -04:00 |
|
|
Michael Quigley
|
8e36958c86
|
lint
|
2025-09-15 16:00:51 -04:00 |
|
|
Michael Quigley
|
822a55799b
|
tracing improvements; don't clear mappings on update (#1041)
|
2025-09-15 15:54:15 -04:00 |
|
|
Michael Quigley
|
b67af3b05b
|
pfxlog -> dl
|
2025-09-15 15:35:59 -04:00 |
|
|
Michael Quigley
|
687e3518d4
|
better logging
|
2025-09-15 12:27:36 -04:00 |
|
|
Michael Quigley
|
63144078a1
|
df -> v0.3.0
|
2025-09-13 23:30:21 -04:00 |
|
|
Michael Quigley
|
d05ad7a7cd
|
log lint
|
2025-09-13 23:16:50 -04:00 |
|
|
Michael Quigley
|
9a3104e97f
|
logging lint
|
2025-09-12 16:52:05 -04:00 |
|
|
Michael Quigley
|
5f49765d4b
|
no longer use gRPC keepalives in controllerClient (#1035, #1041)
|
2025-09-12 15:36:56 -04:00 |
|
|
Michael Quigley
|
c20c4f1057
|
no more global handler paths for oauth providers -> oauthRouter (#1041)
|
2025-09-12 15:14:37 -04:00 |
|
|
Michael Quigley
|
9fd56f9295
|
model into dynamicProxyController (#1035)
|
2025-09-12 13:47:47 -04:00 |
|
|
Michael Quigley
|
37638d70c6
|
the full, initial, working dynamicProxy implementation (#1041)
|
2025-09-12 12:51:02 -04:00 |
|
|
Michael Quigley
|
076eabc4c1
|
initial port of the publicProxy core logic into dynamicProxy (#1041)
|
2025-09-12 12:03:49 -04:00 |
|
|
Michael Quigley
|
f7fb07e55f
|
full mapping management; dynamic and reload (#1035, #1041)
|
2025-09-12 11:23:38 -04:00 |
|
|
Michael Quigley
|
af4a8e62c1
|
wiring lint (#1035, #1041)
|
2025-09-12 10:33:22 -04:00 |
|
|
Michael Quigley
|
011e23941c
|
mappings container (#1041)
|
2025-09-11 22:49:53 -04:00 |
|