nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2024-11-26 08:53:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #307766 from SuperSandro2000/oauth2-proxy-fix-headers

Browse Source 
nixos/oauth2_proxy_nginx: fix proxy_set_header
This commit is contained in:
K900 2024-05-24 10:48:07 +03:00 committed by GitHub
commit 69aa70cddf
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 11 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
nixos/modules/services/security/oauth2-proxy-nginx.nix
View File

@ -83,6 +83,15 @@ in
} ++ (lib.mapAttrsToList (vhost: conf: { } ++ (lib.mapAttrsToList (vhost: conf: {
virtualHosts.${vhost} = { virtualHosts.${vhost} = {
locations = { locations = {
"/".extraConfig = ''
# pass information via X-User and X-Email headers to backend, requires running with --set-xauthrequest flag
proxy_set_header X-User $user;
proxy_set_header X-Email $email;
# if you enabled --cookie-refresh, this is needed for it to work with auth_request
add_header Set-Cookie $auth_cookie;
'';
"/oauth2/auth" = let "/oauth2/auth" = let
maybeQueryArg = name: value: maybeQueryArg = name: value:
if value == null then null if value == null then null
@ -102,6 +111,7 @@ in
proxy_pass_request_body off; proxy_pass_request_body off;
''; '';
}; };
"@redirectToAuth2ProxyLogin" = { "@redirectToAuth2ProxyLogin" = {
return = "307 https://${cfg.domain}/oauth2/start?rd=$scheme://$host$request_uri"; return = "307 https://${cfg.domain}/oauth2/start?rd=$scheme://$host$request_uri";
extraConfig = '' extraConfig = ''
@ -114,16 +124,10 @@ in
auth_request /oauth2/auth; auth_request /oauth2/auth;
error_page 401 = @redirectToAuth2ProxyLogin; error_page 401 = @redirectToAuth2ProxyLogin;
# pass information via X-User and X-Email headers to backend, # set variables being used in locations."/".extraConfig
# requires running with --set-xauthrequest flag
auth_request_set $user $upstream_http_x_auth_request_user; auth_request_set $user $upstream_http_x_auth_request_user;
auth_request_set $email $upstream_http_x_auth_request_email; auth_request_set $email $upstream_http_x_auth_request_email;
proxy_set_header X-User $user;
proxy_set_header X-Email $email;
# if you enabled --cookie-refresh, this is needed for it to work with auth_request
auth_request_set $auth_cookie $upstream_http_set_cookie; auth_request_set $auth_cookie $upstream_http_set_cookie;
add_header Set-Cookie $auth_cookie;
''; '';
}; };
}) cfg.virtualHosts))); }) cfg.virtualHosts)));