Logan McDonald

sso-{auth,proxy}: more verbose logging for debugging

8

As pointed out in #125, there are many places where it is hard to debug especially around validation of groups. We should make sure we have thorough logging throughout. An...

In auth/middleware.go, we appear to set an HSTS header regardless of whether or not we're serving over HTTPS.

sso-auth: check for valid certificate before serving

1

In auth/http.go/ServeHTTPS(), no check is done as to the validity of a certificate before it's used.

*: statsd should be optional

5

Not all environments may have need for metrics collection, as such the following options should be optional or have defaults: * STATSD_HOST * STATSD_PORT

**Is your feature request related to a problem? Please describe.** Create a default provider for the authenticator that can be used for quick-start purposes rather than having to set up...