traefik-forward-auth

What's Changed

• Fix simple-separate-pod url path by @Sykkro in https://github.com/thomseddon/traefik-forward-auth/pull/148
• Support concurrent CSRF cookies by using a prefix of nonce by @thomseddon in https://github.com/thomseddon/traefik-forward-auth/pull/187
• Allow override of domains and whitelist in rules by @thomseddon in https://github.com/thomseddon/traefik-forward-auth/pull/169
• Remove double brackets typo in readme by @thomseddon in https://github.com/thomseddon/traefik-forward-auth/pull/218
• Add go build/test workflow by @thomseddon in https://github.com/thomseddon/traefik-forward-auth/pull/219
• Add port config by @hesstobi in https://github.com/thomseddon/traefik-forward-auth/pull/230
• Add GitHub Actions workflow for creating binaries for releases (#184) by @leona-ya in https://github.com/thomseddon/traefik-forward-auth/pull/199
• Allow to be run without middleware + improve request reading consistency by @thomseddon in https://github.com/thomseddon/traefik-forward-auth/pull/217
• Update dependencies by @six3six in https://github.com/thomseddon/traefik-forward-auth/pull/354

New Contributors

• @Sykkro made their first contribution in https://github.com/thomseddon/traefik-forward-auth/pull/148
• @hesstobi made their first contribution in https://github.com/thomseddon/traefik-forward-auth/pull/230
• @leona-ya made their first contribution in https://github.com/thomseddon/traefik-forward-auth/pull/199
• @six3six made their first contribution in https://github.com/thomseddon/traefik-forward-auth/pull/354

Full Changelog: https://github.com/thomseddon/traefik-forward-auth/compare/v2.2.0...v2.3.0

Features

• Add a generic oauth provider (for providers that's don't yet support oidc) (#138)
• Add logout endpoint (#107)
• Optionally match emails against either whitelist or domains when both are provided (#106)
• Add support for resource indicator to OIDC provider (#131)
• Improve logging detail and consistency (#114)

Fixes

• Always prompt user to select account on google login (#103)
• Fail if there is an error getting the user info in the login callback (#142)
• Use golang 1.13 in arm builds (#90)
• Allow multiple cookie domains, domains and whitelists to be specified via environment variables (#98)
• Warn when using http without insecure cookie (#114)

Docs

• Add traefik v2 examples
• Add extensive k8s examples (traefik v1.7 and v2)
• Use traefik v2 examples in README
• Add Provider Setup page to wiki

• Refactor to support multiple providers
• Add support for any provider supporting OpenID Connect (oidc provider)
• Update to go 1.13

Project refactor, primarily motivated by the desire to selectively apply authentication.

Changes:

• Refactor codebase into smaller chunks
• Support selective authentication (use matchers to selectively apply authentication to some paths/hosts)
• Improve logging
• Facilitate multiple authentication providers
• Support multiple config files
• Maintain backwards compatibility for all flags
• Update tests to use testify
• Improve documentation

Initial public release