Comments (5)
aeneasr
commented on May 18, 2024
I'm confused, isn't that the case already?
from oathkeeper.
aeneasr
commented on May 18, 2024
Oh, it's HTTP and HTTPS, thanks!
from oathkeeper.
bensont1
commented on May 18, 2024
@aeneasr Sorry I should have been more clear, the docs in helper_messages.go shows the Environment variable as HTTPS_TLS_CERT_PATH but the code uses HTTP_TLS_CERT_PATH. Since I was looking at only the docs initially, took me a little while to figure out why it wasn't using the certs. Just wanted to make sure other people who look at the docs don't go in a circle figuring it out :)
from oathkeeper.
fredbi
commented on May 18, 2024
To be consistent with hydra, I am going to move them all to HTTPS.
I let live the same inconsistent setup in keto.
ok to make this all HTTTPS_xxx like with hydra?
from oathkeeper.
bensont1
commented on May 18, 2024
Yeah it should be HTTPS, maybe only two T’s :)
On Oct 11, 2018, at 12:20 AM, fredbi <[email protected]<mailto:[email protected]>> wrote:
To be consistent with hydra, I am going to move them all to HTTPS.
I let live the same inconsistent setup in keto.
ok to make this all HTTTPS_xxx like with hydra?
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub<#121 (comment)>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AFolT8gktFcbZZXAq2FPAEyceiQkaU49ks5ujvEwgaJpZM4W9sqv>.
from oathkeeper.
Related Issues (20)
- X-Forwarded headers missing from oauth2-client-credentials authenticator request on v.0.40.3, breaking hydra TLS termination HOT 1
- Authenticator: Bearer_token w. "query_parameter" selector consumes request body
- Observed memory leak in v0.40.3 HOT 4
- Configure JWT authenticator not to logging sensitive data
- Allow/deny `remote(_json)` authorizers depending response content
- Allow API key pre-authorization in oauth2_introspection authenticator HOT 2
- "any" matching option for "required_scope" in JWT authenticator HOT 1
- Docs wrong for `bearer_token` Subject default location
- upstream reference closed: github.com/GoogleContainerTools/distroless/issues/1342
- Authorizer "remote" throws exception "invalid Read on closed Body" if request body is present in request HOT 13
- Basic Authorization header result in Unauthorized when using `anonymous` authenticator handler
- Oathkeeper does not support X-Forwarded headers properly HOT 2
- Reference to .MatchContext.RegexpCaptureGroups doesn't render in access rules authenticator config
- Decision API is not respecting the token_from config
- Outdated OTEL dependencies prevent import
- None of the provided URLs returned a valid JSON Web Key Set HOT 1
- Implement a `delegate` authenticator
- Git as a repository for access rules & granularity: check against specific ingress against specific accessrule files HOT 1
- Duplicate requests using decisions endpoint via NGINX
- Oathkeeper returns encoded cookie
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from oathkeeper.