5 commits

Author	SHA1	Message	Date
Jeremiah Lowin	ea529f6a49	feat: make upstream_client_secret optional in OAuthProxy (#3486) ... * feat: make upstream_client_secret optional in OAuthProxy Extract _create_upstream_oauth_client() factory method for subclass override. Cookie signing falls back to JWT key material when no secret. * fix: include client_id in revocation requests for public clients * fix: use factory method for revocation auth	2026-03-15 11:14:56 -04:00
Jeremiah Lowin	568300e8b5	Remove automatic environment variable loading from auth providers (#2752)	2025-12-26 15:37:59 -05:00
William Easton	063ffe9f64	Derive jwt_signing_key from Client Secret, default to Encrypted Disk Store (#2223) ... * Checkpoint progress * Checkpoint progress * add derive b64 method * PR clean-up * refactor da proxy * Updates to tests * Make jwt_signing_key required for oauth proxy * use typing_extensions and fix tests * PR Cleanup * also adjust integration tests * Update docs, use client secret to derive jwt signing key * You win some you lose some, gg claude * check for both in derive * update documentation / clean up * Update http.mdx --------- Co-authored-by: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>	2025-10-24 19:08:58 -04:00
Ruhul Alam	2df8a0f915	chore: Set redirect_path default in function (#1833)	2025-09-15 18:33:44 -04:00
Ruhul Alam	972521146f	feat: Add support for OIDC configuration (#1817)	2025-09-14 14:54:48 -04:00