lukaszraczylo/traefikoidc
1
0
Fork 0
mirror of https://github.com/lukaszraczylo/traefikoidc.git synced 2026-10-18 04:47:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(lib): add TrustForwardedURI to honor X-Forwarded-Uri for post-login redirect target

Browse Source
This commit is contained in:
lukaszraczylo
2026-05-19 13:07:35 +01:00
parent 85eb9ecd16
commit f990365cb8
6 changed files with 61 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
settings.go
+7
View File
@@ -125,6 +125,13 @@ type Config struct {
// ClientAssertionAlg is the JWS signing algorithm. Defaults to RS256.
// Supported: RS256/384/512, PS256/384/512, ES256/384/512.
ClientAssertionAlg string `json:"clientAssertionAlg,omitempty"`
// TrustForwardedURI, when true, makes the middleware prefer the
// X-Forwarded-Uri request header (set by an upstream reverse proxy)
// over req.URL when capturing the "where was the user going" target
// stored for post-login redirect. Used by the oidcgate standalone
// daemon. Default false preserves the Traefik plugin behavior exactly.
TrustForwardedURI bool `json:"trustForwardedURI,omitempty"`
}
// loadCACertPool assembles an x509.CertPool from CACertPath and CACertPEM.