kevinveenbirkenbachandClaude Opus 4.8 b0255bb6c4 fix(sso): scope oauth2-proxy cookie to a multi-domain app's shared parent ...

The oauth2-proxy sidecar set cookie_domains to the app's primary domain only. A role served under several sibling subdomains (e.g. SeaweedFS filer/master/api under one base) therefore could not read its session cookie on the non-primary hosts, looping the auth chain. Add the common_dns_suffix filter and use it so cookie_domains becomes the longest DNS suffix shared by all of the app's domains: a single-domain app keeps its exact host (unchanged), a multi-domain app collapses to the shared parent so one session cookie spans every subdomain.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-17 11:30:34 +02:00

..

action

Add uri_probe action plugin for short reachability checks

2026-03-31 20:35:57 +02:00

filter

fix(sso): scope oauth2-proxy cookie to a multi-domain app's shared parent

2026-06-17 11:30:34 +02:00

lookup

feat(objstore): consume the object store across 14 web-app roles

2026-06-17 11:30:33 +02:00

__init__.py

…