lukaszraczylo
2af05701dc
build(release): publish multi-arch oidcgate Docker image per release tag
...
- Add 'oidcgate' build entry (linux/darwin × amd64/arm64) to goreleaser.
- Add per-OS/arch tar.gz archives for the daemon binary.
- Add dockers + docker_manifests entries publishing
ghcr.io/lukaszraczylo/oidcgate:vX.Y.Z (release tag), :vX.Y, :vX, :latest
as multi-arch manifests (linux/amd64 + linux/arm64).
- Add cmd/oidcgate/Dockerfile (distroless static, nonroot user).
- Sign images with cosign keyless (docker_signs).
- Preserve existing source-only Traefik plugin archive via meta:true.
- Update README to advertise the published image.
2026-05-19 17:14:29 +01:00
lukaszraczylo
dc0e7e0238
fix(oidcgate): gosec G304 — clean config path + native #nosec directive
...
The //nolint:gosec directive only suppresses golangci-lint; the standalone
gosec GitHub Action uses its own '#nosec G304 -- reason' syntax. Use both
filepath.Clean as canonical mitigation and the native directive.
2026-05-19 16:41:57 +01:00
lukaszraczylo
52ef32ece7
fix(oidcgate): security hardening — sanitize XFU, guardrails, validations
2026-05-19 15:17:04 +01:00
lukaszraczylo
3bf7c60ef4
chore: gofmt
2026-05-19 15:00:42 +01:00
lukaszraczylo
a1273e6883
feat(oidcgate): main entrypoint with graceful shutdown
2026-05-19 14:22:46 +01:00
lukaszraczylo
0bc0079a58
refactor(oidcgate): WriteTimeout for slowloris guard, nolint reason
2026-05-19 14:18:28 +01:00
lukaszraczylo
20294f1339
feat(oidcgate): mux wiring and http.Server with graceful shutdown
2026-05-19 14:13:13 +01:00
lukaszraczylo
43938ed8a8
feat(oidcgate): healthz and readyz endpoints
2026-05-19 14:08:53 +01:00
lukaszraczylo
46679c82eb
refactor(oidcgate): simplify cloneAndRewrite, flip ?rd precedence, assert XFU passthrough
2026-05-19 14:07:44 +01:00
lukaszraczylo
a46be72be5
feat(oidcgate): auth/start/callback/logout endpoint handlers
2026-05-19 13:59:20 +01:00
lukaszraczylo
91966c1bec
refactor(oidcgate): idempotent Finalize; document and test 307/308 intercept
2026-05-19 13:57:15 +01:00
lukaszraczylo
c465fc888b
feat(oidcgate): response-writer interceptor converts 302->401 for /oauth2/auth
2026-05-19 13:50:03 +01:00
lukaszraczylo
047fea3c75
refactor(oidcgate): drop unreachable lowercase prefix; add multi-value mirror test
2026-05-19 13:48:13 +01:00
lukaszraczylo
0c092a5a22
feat(oidcgate): synthetic success handler mirrors X-* headers to response
2026-05-19 13:41:51 +01:00
lukaszraczylo
8f458b4f6e
fix(oidcgate): quality fixes — rune-safe snake-upper, drop dead import, listen validation, nested-struct test
2026-05-19 13:40:24 +01:00
lukaszraczylo
17c28fd574
feat(oidcgate): YAML config loader with env-var overrides
2026-05-19 13:30:28 +01:00
lukaszraczylo