Kenneth Jenkins e8b489eb87 authorize: rework token substitution in headers (#4456) ... Currently Pomerium replaces dynamic set_request_headers tokens sequentially. As a result, if a replacement value itself contained a supported "$pomerium" token, Pomerium may treat that as another replacement, resulting in incorrect output. This is unlikely to be a problem given the current set of dynamic tokens, but if we continue to add additional tokens, this will likely become more of a concern. To forestall any issues, let's perform all replacements in one pass, using the os.Expand() method. This does require a slight change to the syntax, as tokens containing a '.' will need to be wrapped in curly braces, e.g. ${pomerium.id_token}. A literal dollar sign can be included by using $$ in the input.		2023-08-14 15:28:10 -07:00
..
envoyconfig	config: support client certificate SAN match (#4453)	2023-08-11 13:27:12 -07:00
testdata	config: additional kubernetes token source support (#1200)	2020-08-04 09:40:51 -04:00
autocert.go	remove deprecated ioutil usages (#2877)	2021-12-30 10:02:12 -08:00
autocert_test.go	config: update logic for checking overlapping certificates (#4216)	2023-06-01 09:30:46 -06:00
codec_type.go	config: allow specifying auto codec type in all-in-one mode (#2846)	2021-12-22 12:34:58 -07:00
codec_type_test.go	config: default to http2 (#3660)	2022-10-12 14:46:06 -06:00
config.go	stub out HPKE public key fetch for self-hosted authenticate (#4360)	2023-07-13 10:04:34 -07:00
config_source.go	config: move mTLS settings to new struct (#4442)	2023-08-08 10:22:48 -07:00
config_source_test.go	test: use T.TempDir to create temporary test directory (#3725)	2022-11-08 09:16:32 -07:00
constants.go	envoy: add support for bind_config bootstrap options (#2772)	2021-12-01 13:02:49 -07:00
crypt.go	cryptutil: always use kek public id, add x509 support (#2066)	2021-04-07 09:44:36 -07:00
custom.go	envoy: add support for bind_config bootstrap options (#2772)	2021-12-01 13:02:49 -07:00
custom_test.go	all: remove unused handler code (#2439)	2021-08-16 16:04:39 -04:00
doc.go	*: remove import path comments (#545)	2020-03-16 10:13:47 -07:00
from.go	config: add support for wildcard from addresses (#4131)	2023-04-25 13:34:38 -06:00
from_test.go	config: add support for wildcard from addresses (#4131)	2023-04-25 13:34:38 -06:00
helpers.go	postgres: databroker storage backend (#3370)	2022-05-25 10:23:58 -06:00
helpers_test.go	databroker: rename cache service (#1790)	2021-01-21 08:41:22 -07:00
http.go	use tlsClientConfig instead of custom dialer (#3830)	2022-12-27 09:55:36 -07:00
http_test.go	httputil/reproxy: fix policy transport (#3322)	2022-05-04 18:32:36 -06:00
identity.go	move directory providers (#3633)	2022-11-03 11:33:56 -06:00
layered.go	auto tls (#3856)	2023-01-05 16:35:58 -05:00
layered_test.go	auto tls (#3856)	2023-01-05 16:35:58 -05:00
log.go	config: validate log levels (#4367)	2023-07-17 16:41:48 -06:00
log_level.go	config: validate log levels (#4367)	2023-07-17 16:41:48 -06:00
metrics.go	config: remove source, remove deadcode, fix linting issues (#4118)	2023-04-21 17:25:11 -06:00
metrics_test.go	config: remove source, remove deadcode, fix linting issues (#4118)	2023-04-21 17:25:11 -06:00
mtls.go	config: support client certificate SAN match (#4453)	2023-08-11 13:27:12 -07:00
mtls_test.go	config: support client certificate SAN match (#4453)	2023-08-11 13:27:12 -07:00
options.go	config: move mTLS settings to new struct (#4442)	2023-08-08 10:22:48 -07:00
options_check.go	add config option check logging (#3722)	2022-11-05 00:25:09 -04:00
options_test.go	config: extra CA and CRL validation (#4455)	2023-08-10 16:15:11 -07:00
policy.go	authorize: rework token substitution in headers (#4456)	2023-08-14 15:28:10 -07:00
policy_ppl.go	authorize: omit client cert rule when not needed (#4386)	2023-07-24 15:27:57 -07:00
policy_ppl_test.go	authorize: omit client cert rule when not needed (#4386)	2023-07-24 15:27:57 -07:00
policy_test.go	config: remove source, remove deadcode, fix linting issues (#4118)	2023-04-21 17:25:11 -06:00
session.go	config: add cookie_same_site option (#4148)	2023-05-03 14:36:42 -06:00
session_test.go	config: allow blank identity providers when loading sessions for service account support (#3709)	2022-10-27 08:32:06 -06:00
trace.go	config: remove source, remove deadcode, fix linting issues (#4118)	2023-04-21 17:25:11 -06:00
trace_test.go	log context (#2107)	2021-04-22 10:58:13 -04:00
validate.go	config: add cookie_same_site option (#4148)	2023-05-03 14:36:42 -06:00