mirror of
https://github.com/pomerium/pomerium.git
synced 2025-08-02 16:30:17 +02:00
proxy: fix forward auth, request signing
Signed-off-by: Bobby DeSimone <bobbydesimone@gmail.com>
This commit is contained in:
parent
ec9607d1d5
commit
0f6a9d7f1d
32 changed files with 928 additions and 522 deletions
24
internal/urlutil/query_params.go
Normal file
24
internal/urlutil/query_params.go
Normal file
|
@ -0,0 +1,24 @@
|
|||
package urlutil // import "github.com/pomerium/pomerium/internal/urlutil"
|
||||
|
||||
// Common query parameters used to set and send data between Pomerium
|
||||
// services over HTTP calls and redirects. They are typically used in
|
||||
// conjunction with a HMAC to ensure authenticity.
|
||||
const (
|
||||
QueryCallbackURI = "pomerium_callback_uri"
|
||||
QueryImpersonateEmail = "pomerium_impersonate_email"
|
||||
QueryImpersonateGroups = "pomerium_impersonate_groups"
|
||||
QueryIsProgrammatic = "pomerium_programmatic"
|
||||
QueryForwardAuth = "pomerium_forward_auth"
|
||||
QueryPomeriumJWT = "pomerium_jwt"
|
||||
QuerySessionEncrypted = "pomerium_session_encrypted"
|
||||
QueryRedirectURI = "pomerium_redirect_uri"
|
||||
QueryRefreshToken = "pomerium_refresh_token"
|
||||
)
|
||||
|
||||
// URL signature based query params used for verifying the authenticity of a URL.
|
||||
const (
|
||||
QueryHmacExpiry = "pomerium_expiry"
|
||||
QueryHmacIssued = "pomerium_issued"
|
||||
QueryHmacSignature = "pomerium_signature"
|
||||
QueryHmacURI = "pomerium_uri"
|
||||
)
|
Loading…
Add table
Add a link
Reference in a new issue