Commit graph

4 commits

Author SHA1 Message Date
Kenneth Jenkins
42be134173 authorize: compute "real" IP from X-Forwarded-For
WIP -- this doesn't work correctly yet

Update the authorize log IP address field to match the access log IP
address field.

Add a new method getIPAddress() to compute the "real" client IP address
based on the contents of the X-Forwarded-For header and the
XffNumTrustedHops and SkipXffAppend configuration option.

This is intended to match downstream_remote_address from the access log:
https://www.envoyproxy.io/docs/envoy/latest/api-v3/data/accesslog/v3/accesslog.proto#envoy-v3-api-field-data-accesslog-v3-accesslogcommon-downstream-remote-address
2023-08-30 17:43:37 -07:00
Caleb Doxsey
6c1416fc0f
authorize: log id token claims separately from id token (#4394) 2023-07-26 11:45:10 -06:00
Caleb Doxsey
1aa8187a4b
authorize: add support for logging id token (#4392) 2023-07-25 15:44:25 -06:00
Caleb Doxsey
baf8918676
logs: add support for logging the http query (#4390)
* config: add customization options for logging

* config: validate log fields

* proxy: add support for logging http request headers

* log subset of headers

* add support for logging the http query

* fix test name

* use strings.Cut, add unit tests
2023-07-25 12:56:49 -06:00