Trong Huu Nguyen 10e71a7bb5 feat(handler/reverseproxy): remove x-wonderwall headers ...

The use of these headers in upstreams may be risky, espeically
if Wonderwall is accidentally misconfigured or disabled, or requests
are performed directly to the upstream circumventing Wonderwall.

We should prefer using a signed token or similar that can be verified by
the upstreams.

2024-01-16 08:57:07 +01:00

..

acr

refactor(openid): move acr to own package

2023-10-11 14:25:12 +02:00

autologin

fix(autologin): do not return ambiguous 3xx redirect

2023-09-22 14:51:35 +02:00

templates

refactor(handler): split up request handlers into separate modules

2022-09-02 14:53:11 +02:00

error_test.go

revert: "feat(handler/error): remove automatic retry"

2023-12-20 11:17:51 +01:00

error.go

revert: "feat(handler/error): remove automatic retry"

2023-12-20 11:17:51 +01:00

handler_sso_proxy.go

feat(handler/reverseproxy): add toggle for access logs

2023-12-20 08:25:35 +01:00

handler_sso_server.go

revert: "style: go fmt"

2023-10-10 14:51:12 +02:00

handler_test.go

feat(handler/login): remove legacy cookie

2023-12-19 08:46:08 +01:00

handler.go

revert: "feat(handler/error): remove automatic retry"

2023-12-20 11:17:51 +01:00

path.go

refactor(handler): inline error handler, remove unnecessary getters

2023-02-24 19:24:02 +01:00

reverseproxy_test.go

fix(reverseproxy/autologin): handle multiple accept headers

2023-10-16 12:01:15 +02:00

reverseproxy.go

feat(handler/reverseproxy): remove x-wonderwall headers

2024-01-16 08:57:07 +01:00