-
-
Notifications
You must be signed in to change notification settings - Fork 20
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Added support for an authentication verify path
- Loading branch information
Showing
7 changed files
with
189 additions
and
56 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,27 @@ | ||
| package server | ||
|
|
||
| import "time" | ||
|
|
||
| type Config struct { | ||
| Version bool `usage:"show version and exit" env:""` | ||
| Bind string `default:":8080" usage:"[host:port] to bind for serving HTTP"` | ||
| BaseUrl string `usage:"External [URL] of this proxy"` | ||
| BackendUrl string `usage:"[URL] of the backend being proxied"` | ||
| IdpMetadataUrl string `usage:"[URL] of the IdP's metadata XML, can be a local file by specifying the file:// scheme"` | ||
| IdpCaPath string `usage:"Optional [path] to a CA certificate PEM file for the IdP"` | ||
| NameIdFormat string `usage:"One of unspecified, transient, email, or persistent to use a standard format or give a full URN of the name ID format" default:"transient"` | ||
| SpKeyPath string `default:"saml-auth-proxy.key" usage:"The [path] to the X509 private key PEM file for this SP"` | ||
| SpCertPath string `default:"saml-auth-proxy.cert" usage:"The [path] to the X509 public certificate PEM file for this SP"` | ||
| NameIdMapping string `usage:"Name of the request [header] to convey the SAML nameID/subject"` | ||
| AttributeHeaderMappings map[string]string `usage:"Comma separated list of [attribute=header] pairs mapping SAML IdP response attributes to forwarded request header"` | ||
| AttributeHeaderWildcard string `usage:"Maps all SAML attributes with this option as a prefix` | ||
| NewAuthWebhookUrl string `usage:"[URL] of webhook that will get POST'ed when a new authentication is processed"` | ||
| AuthorizeAttribute string `usage:"Enables authorization and specifies the [attribute] to check for authorized values"` | ||
| AuthorizeValues []string `usage:"If enabled, comma separated list of [values] that must be present in the authorize attribute"` | ||
| CookieName string `usage:"Name of the cookie that tracks session token" default:"token"` | ||
| CookieMaxAge time.Duration `usage:"Specifies the amount of time the authentication token will remain valid" default:"2h"` | ||
| CookieDomain string `usage:"Overrides the domain set on the session cookie. By default the BaseUrl host is used."` | ||
| AllowIdpInitiated bool `usage:"If set, allows for IdP initiated authentication flow"` | ||
| AuthVerifyPath string `default:"/_verify" usage:"Path under BaseUrl that will respond with a 200 when authenticated"` | ||
| Debug bool `usage:"Enable debug logs"` | ||
| } |
Oops, something went wrong.