Vx.x.x (Pre-release)

Changes since v3.1.0

#110 Added GCP healthcheck option (@timothy-spencer)
#112 Improve websocket support (@gyson)
#63 Use encoding/json for SessionState serialization (@yaegashi)
- Use JSON to encode session state to be stored in browser cookies
- Implement legacy decode function to support existing cookies generated by older versions
- Add detailed table driven tests in session_state_test.go
#55 Added login.gov provider (@timothy-spencer)
#55 Added environment variables for all config options (@timothy-spencer)
#70 Fix handling of splitted cookies (@einfachchr)
#92 Merge websocket proxy feature from openshift/oauth-proxy (@butzist)
#57 Fall back to using OIDC Subject instead of Email (@aigarius)
#85 Use non-root user in docker images (@kskewes)
#68 forward X-Auth-Access-Token header (@davidholsgrove)
#41 Added option to manually specify OIDC endpoints instead of relying on discovery
#83 Add id_token refresh to Google provider (@leki75)
#10 fix redirect url param handling (@dt-rush)

If you have been using #bitly/621 and have cookies larger than the 4kb limit, the cookie splitting pattern has changed and now uses _ in place of - when indexing cookies. This will force users to reauthenticate the first time they use v3.1.0.
Streamed responses will now be flushed every 1 second by default. Previously streamed responses were flushed only when the buffer was full. To retain the old behaviour set --flush-interval=0. See #23 for further details.

#14 OIDC ID Token, Authorization Headers, Refreshing and Verification (@joelspeed)
- Implement pass-authorization-header and set-authorization-header flags
- Implement token refreshing in OIDC provider
- Split cookies larger than 4k limit into multiple cookies
- Implement token validation in OIDC provider
#15 WhitelistDomains (@joelspeed)
- Add --whitelist-domain flag to allow redirection to approved domains after OAuth flow
#21 Docker Improvement (@yaegashi)
- Move Docker base image from debian to alpine
- Install ca-certificates in docker image
#23 Flushed streaming responses
- Long-running upstream responses will get flushed every (1 second by default)
#24 Redirect fix (@agentgonzo)
- After a successful login, you will be redirected to your original URL rather than /
#35 arm and arm64 binary releases (@kskewes)
- Add armv6 and arm64 to Makefile release target
#37 cross build arm and arm64 docker images (@kskewes)

Adoption of OAuth2_Proxy by Pusher. Project was hard forked and tidied however no logical changes have occurred since v2.2 as released by Bitly.