lukaszraczylo dc0e7e0238 fix(oidcgate): gosec G304 — clean config path + native #nosec directive ...

The //nolint:gosec directive only suppresses golangci-lint; the standalone
gosec GitHub Action uses its own '#nosec G304 -- reason' syntax. Use both
filepath.Clean as canonical mitigation and the native directive.

2026-05-19 16:41:57 +01:00

..

config_test.go

fix(oidcgate): security hardening — sanitize XFU, guardrails, validations

2026-05-19 15:17:04 +01:00

config.go

fix(oidcgate): gosec G304 — clean config path + native #nosec directive

2026-05-19 16:41:57 +01:00

endpoints_test.go

refactor(oidcgate): simplify cloneAndRewrite, flip ?rd precedence, assert XFU passthrough

2026-05-19 14:07:44 +01:00

endpoints.go

refactor(oidcgate): simplify cloneAndRewrite, flip ?rd precedence, assert XFU passthrough

2026-05-19 14:07:44 +01:00

health_test.go

feat(oidcgate): healthz and readyz endpoints

2026-05-19 14:08:53 +01:00

health.go

feat(oidcgate): healthz and readyz endpoints

2026-05-19 14:08:53 +01:00

helpers_test.go

feat(oidcgate): mux wiring and http.Server with graceful shutdown

2026-05-19 14:13:13 +01:00

interceptor_test.go

refactor(oidcgate): idempotent Finalize; document and test 307/308 intercept

2026-05-19 13:57:15 +01:00

interceptor.go

refactor(oidcgate): idempotent Finalize; document and test 307/308 intercept

2026-05-19 13:57:15 +01:00

main.go

fix(oidcgate): security hardening — sanitize XFU, guardrails, validations

2026-05-19 15:17:04 +01:00

server_test.go

feat(oidcgate): mux wiring and http.Server with graceful shutdown

2026-05-19 14:13:13 +01:00

server.go

refactor(oidcgate): WriteTimeout for slowloris guard, nolint reason

2026-05-19 14:18:28 +01:00

success_test.go

refactor(oidcgate): drop unreachable lowercase prefix; add multi-value mirror test

2026-05-19 13:48:13 +01:00

success.go

refactor(oidcgate): drop unreachable lowercase prefix; add multi-value mirror test

2026-05-19 13:48:13 +01:00