Access token forwarding through nginx auth request

[patrickfuller]

Related to #420.

This enables expected behavior when using:

set_xauthrequest = true
pass_access_token = true

If both of these are set, the access token will be included in an X-Auth-Request-Access-Token header, following the X-Auth-Request-* pattern used for User and Email.

The access token allows for further validation by upstream services. In my case, I use the token to get more user information, which is then used to set read-only / read-write / admin permissions on internal software.

[ploxiln]

Looks good to me.

[JoelSpeed]

Is this going to be merged any time soon? This would be really useful for me

[kincl]

Agreed, this would be useful for me as well.

[jonassvatos]

Hi, can we have this merged soon, please? I've seen many issues related to this, and as this doesn't have any merge conflicts, it's just one-click-of-a-button ahead :) Thanks in advance

[devcomb]

Agree with Isde. This should be merged. Running into same issue where I would like to have token be usable in nginx that is in front of oauth2_proxy. Please merge.

[jayzeng]

Any update on merging this? will be super helpful

[ploxiln]

There will be no more merges or releases for this repository - see https://github.com/bitly/oauth2_proxy/issues/628#issuecomment-417121636 and read down to see discussion of a maintained fork.

I've started my own fork, and made a v2.3 release which includes this change, see https://github.com/ploxiln/oauth2_proxy/releases