-
Notifications
You must be signed in to change notification settings - Fork 1.2k
Pass in the original email address too as X-Forwarded-Email. #35
Conversation
19211ab
to
150c77c
Compare
@@ -368,6 +368,7 @@ func (p *OauthProxy) ServeHTTP(rw http.ResponseWriter, req *http.Request) { | |||
if *passBasicAuth { | |||
req.SetBasicAuth(user, "") | |||
req.Header["X-Forwarded-User"] = []string{user} | |||
req.Header["X-Remote-User"] = []string{email} |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
What do you think about X-Forwarded-Email
?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Good idea..changed!
This is a great idea; It makes a lot of sense when allowing auth to more than a single google apps domain. |
👍 specifically splunk requires this for us! And that requirement is for x-forwarded-user |
@adepue are you saying splunk requires the email address in that field? |
@jehiah yep that's exactly it. Splunk Sso integration depends on the full email address in that field. |
X-Forwarded-Email should be fine. We can reconfigure splunk if needed, as long as the full email comes through. Thanks! |
👍 very helpful! |
Pass in the original email address too as X-Forwarded-Email.
Need this info to be able to determine whether to login a user on some of our apps.