lukaszraczylo bbcde3ef9c feat: Add allowPrivateIPAddresses config option for internal networks ...

Adds a new configuration option `allowPrivateIPAddresses` that allows
OIDC provider URLs to use private IP addresses (10.x.x.x, 172.16-31.x.x,
192.168.x.x). This is useful for internal deployments where Keycloak or
other OIDC providers run on private networks without DNS resolution.

Security considerations:
- Loopback addresses (127.0.0.1, localhost, ::1) remain blocked
- Link-local addresses (169.254.x.x) remain blocked
- Default is false (secure by default)

Fixes #97

2025-12-08 12:34:36 +00:00

..

auth_handler_test.go

feat: Add allowPrivateIPAddresses config option for internal networks

2025-12-08 12:34:36 +00:00

auth_handler.go

feat: Add allowPrivateIPAddresses config option for internal networks

2025-12-08 12:34:36 +00:00

url_validation_test.go

feat: Add allowPrivateIPAddresses config option for internal networks

2025-12-08 12:34:36 +00:00