Add support to pass tokens

[artagel]

I believe this fixes #74, by adding the support to pass tokens to downstream apps.
Fixes #43
I also believe this is a more complete implementation of #71, which was focused on ADFS. This works for all providers.

[bnfinet]

@artagel did you mean to close the PR or is that GitHub being too smart for us.

Sorry for the delay in reviewing.

[artagel]

/sigh.. no :)

[bnfinet]

:)

[karthikv2k]

I am looking forward to get this feature. This is useful for securing services running in https://cloud.google.com/run/ that currently needs a header with a JWT.

[karthikv2k]

Thanks for the PR @artagel

[bnfinet]

@karthikv2k have you confirmed that the PR works well for that config? If not, would you be in a position to test that?

[karthikv2k]

@bnfinet I tested by running vouch proxy locally and connecting it a cloud run service and it works :) Next step is to run the vouch proxy itself as a cloud run service and test. I will get that done by tomorrow.
The end result will have two services, one Nginx+Vouch and other is the destination service. In this way, the destination service run can use cloud run's IAM policy to authorize users for each service separately. Nginx and vouch does the job of reverse proxy, oauth flow, and passing the user's JWT token.

[karthikv2k]

@bnfinet I tested this PR in cloud run (as described in my prev comment) and it works.

[bnfinet]

Thanks so much for doing that @karthikv2k

Much appreciated!

[karthikv2k]

https://github.com/karthikv2k/oauth_reverse_proxy has the config to work with cloud run.
Any help I can do to get this PR merged?

[bnfinet]

@karthikv2k can you please test the branch artagel-add_support_to_pass_tokens

we're getting closer to full merge :)

[karthikv2k]

@bnfinet, I am able to test artagel-add_support_to_pass_tokens and it works as expected. Updated the setup details in https://github.com/karthikv2k/oauth_reverse_proxy

[bnfinet]

Much appreciated! I'm traveling through tomorrow and will look again when I've returned.

…

On Mon, May 6, 2019, 1:46 PM Karthik Ramasamy ***@***.***> wrote: @bnfinet <https://github.com/bnfinet>, I am able to test artagel-add_support_to_pass_tokens and it works as expected. Updated the setup details in https://github.com/karthikv2k/oauth_reverse_proxy — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#104 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAJUV23YYSRPPP2EN2CDZUDPUCKLBANCNFSM4HF2ZB6Q> .