12 Commits

Author	SHA1	Message	Date
Viktor Liu	d689718b50	Improve logging and error handling	2026-02-12 15:12:41 +08:00
Viktor Liu	07e59b2708	Add reverse proxy header security and forwarding ... - Rewrite Host header to backend target (configurable via pass_host_header per mapping) - Strip and set X-Forwarded-For/X-Real-IP from direct connection (trust boundary) - Set X-Forwarded-Host and X-Forwarded-Proto headers - Strip nb_session cookie and session_token query param before forwarding - Add --forwarded-proto flag (auto/http/https) for proto detection - Fix OIDC redirect hardcoded https scheme - Add pass_host_header to proto, API, and management model	2026-02-08 15:00:35 +08:00
Alisdair MacLeod	694ae13418	add stateless proxy sessions	2026-02-04 16:52:35 +00:00
Alisdair MacLeod	a0005a604e	fix minor potential security issues with OIDC	2026-02-04 12:25:19 +00:00
Alisdair MacLeod	562923c600	management OIDC implementation using pkce	2026-02-04 11:51:46 +00:00
Alisdair MacLeod	5243481316	get OIDC configuration from proxy flags/env	2026-02-03 12:10:23 +00:00
Alisdair MacLeod	30cfc22cb6	correct proto and proxy authentication for oidc	2026-02-03 09:01:39 +00:00
Alisdair MacLeod	3a6f364b03	use a defined logger ... this should avoid issues with the embedded client also attempting to use the same global logger	2026-01-30 16:31:32 +00:00
Alisdair MacLeod	f882c36e0a	simplify authentication	2026-01-30 14:08:52 +00:00
Alisdair MacLeod	e95cfa1a00	add support for some basic authentication methods	2026-01-29 16:34:52 +00:00
Alisdair MacLeod	3d116c9d33	add debug logs and switch to logrus for logs	2026-01-28 15:44:35 +00:00
Alisdair MacLeod	1d8390b935	refactor layout and structure	2026-01-26 09:28:46 +00:00