Skip to content

Instantly share code, notes, and snippets.

@revolunet
Last active January 3, 2025 10:39
Show Gist options
  • Save revolunet/777adf2bbf261c43bc276aa9766aca66 to your computer and use it in GitHub Desktop.
Save revolunet/777adf2bbf261c43bc276aa9766aca66 to your computer and use it in GitHub Desktop.
ProConnect + oauth2-proxy test
#
# for some reason this give "neither the id_token nor the profileURL set an email"
#
#
#
# https://oauth2-proxy.github.io/oauth2-proxy/configuration/overview
#
OAUTH2_PROXY_HTTP_ADDRESS: "0.0.0.0:4180"
OAUTH2_PROXY_WHITELIST_DOMAINS: "*.kube-dev.incubateur.net"
OAUTH2_PROXY_DISPLAY_NAME: "test-pc provider"
OAUTH2_PROXY_BANNER: test-pc private access
OAUTH2_PROXY_FOOTER: test-pc auth
OAUTH2_PROXY_EMAIL_DOMAINS: "*"
OAUTH2_PROXY_COOKIE_SECURE: "true"
OAUTH2_PROXY_COOKIE_DOMAINS: ".kube-dev.incubateur.net"
OAUTH2_PROXY_CUSTOM_SIGN_IN_LOGO: "https://avatars.githubusercontent.com/u/7874148?s=200&v=4"
OAUTH2_PROXY_PROVIDER: oidc
OAUTH2_PROXY_SCOPE: "openid given_name usual_name email"
OAUTH2_PROXY_REDIRECT_URL: "https://oauth-pc.kube-dev.incubateur.net/oauth2/callback"
OAUTH2_PROXY_OIDC_ISSUER_URL: "https://fca.integ01.dev-agentconnect.fr/api/v2" # https://github.com/numerique-gouv/proconnect-documentation/blob/main/resources/valeur_ac_domain.md
OAUTH2_PROXY_SKIP_PROVIDER_BUTTON: "true"
OAUTH2_PROXY_PROMPT: "login" # https://openid.net/specs/openid-connect-core-1_0.html#AuthRequest
OAUTH2_PROXY_INSECURE_OIDC_SKIP_NONCE: "false"
OAUTH2_PROXY_SKIP_CLAIMS_FROM_PROFILE_URL: "true"
OAUTH2_PROXY_SHOW_DEBUG_ON_ERROR: "true"
OAUTH2_PROXY_CLIENT_ID: -
OAUTH2_PROXY_CLIENT_SECRET: -
OAUTH2_PROXY_COOKIE_SECRET: -
OAUTH2_PROXY_UPSTREAMS: "http://httpbin"
version: "3.0"
services:
oauth2-proxy:
container_name: oauth2-proxy
image: quay.io/oauth2-proxy/oauth2-proxy:v7.7.1
env_file: .env
restart: unless-stopped
ports:
- 3000:4180/tcp
httpbin:
container_name: httpbin
image: kennethreitz/httpbin
ports:
- 8080:80/tcp
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment