sso
sso copied to clipboard
buzzfeed
sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for securing internal services
**Describe the bug** Currently the proxy has routes under `/oauth2`. While it's unlikely that apps that use SSO would also implement an OAuth 2 server, it's not impossible. In addition,...
Hey! I searched the issue tracker of this project but was not able to find an issue related to adding GitHub as an SSO provider. Is this being considered? Right...
**Is your feature request related to a problem? Please describe.** Following the docs for getting up and running, I ran into a hurdle wherein some config values defined use the...
Please support LDAP or Active Directory?
**Is your feature request related to a problem? Please describe.** To make this easier to use, it would be great if there was a Helm Chart or a guide for...
**Describe the bug** Setting `SkipProviderButton` using `SKIP_PROVIDER_BUTTON=true` in the environment doesn't do anything. Looking at the code it just shoves it into a struct and never touches it again. **Expected...
I just tried to setup the SSO application on my kubernetes cluster. Unfortunately I ran into this screen (Invalid redirect parameter):  Hence I followed the logs of my proxy...
In auth/middleware.go, we appear to set an HSTS header regardless of whether or not we're serving over HTTPS.
In auth/http.go/ServeHTTPS(), no check is done as to the validity of a certificate before it's used.
When implementing an upstream service, it's not desirable to use the production auth service or proxy service. Developers often need to test out different permission sets, which means they may...