7d910c0ae8
* Check Google group membership with hasMember and get. This PR is an enhancement built on https://github.com/pusher/oauth2_proxy/pull/160. That PR reduces the number of calls to the Google Admin API and simplifies the code by using the hasMember method. It also supports checking membership in nested groups. However, the above message doesn't handle members who are not a part of the domain. The hasMember API returns a 400 for that case. As a fallback, when the API returns a 400, this change will try using the `get` API which works as expected for members who aren't a part of the domain. Supporting members who belong to the Google group but aren't part of the domain is a requested feature from https://github.com/pusher/oauth2_proxy/issues/95. https://developers.google.com/admin-sdk/directory/v1/reference/members/get Note that nested members who are not a part of the domain will not be correctly detected with this change. * Update CHANGELOG. * Fix incorrect JSON and stop escaping strings. * Add comments for each scenario. |
||
---|---|---|
.. | ||
azure_test.go | ||
azure.go | ||
facebook.go | ||
github_test.go | ||
github.go | ||
gitlab_test.go | ||
gitlab.go | ||
google_test.go | ||
google.go | ||
internal_util_test.go | ||
internal_util.go | ||
linkedin_test.go | ||
linkedin.go | ||
logingov_test.go | ||
logingov.go | ||
oidc.go | ||
provider_data.go | ||
provider_default_test.go | ||
provider_default.go | ||
providers.go |