Files
computer-playbook/roles/sys-svc-proxy/templates/headers/untrusted_identity_strips.conf.j2

11 lines
464 B
Django/Jinja

# Identity headers oauth2-proxy never sets upstream; always cleared so a client cannot forge them.
proxy_set_header Remote-User "";
proxy_set_header Remote-Groups "";
proxy_set_header Remote-Email "";
proxy_set_header Remote-Name "";
proxy_set_header X-Auth-Request-User "";
proxy_set_header X-Auth-Request-Preferred-Username "";
proxy_set_header X-Auth-Request-Email "";
proxy_set_header X-Auth-Request-Groups "";
proxy_set_header X-Auth-Request-Access-Token "";