Merge pull request #179 from buzzfeed/proxy-request-signatures-should…

…-include-token proxy/request signers: request signers should also sign access token
buzzfeed · Apr 17, 2019 · 3f8de31 · 3f8de31
2 parents c470b12 + 43aed9f
commit 3f8de31
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/internal/proxy/oauthproxy.go b/internal/proxy/oauthproxy.go
@@ -39,6 +39,7 @@ var SignatureHeaders = []string{
 	"X-Forwarded-User",
 	"X-Forwarded-Email",
 	"X-Forwarded-Groups",
+	"X-Forwarded-Access-Token",
 	"Cookie",
 }
 

diff --git a/internal/proxy/request_signer.go b/internal/proxy/request_signer.go
@@ -27,6 +27,7 @@ var signedHeaders = []string{
 	"X-Forwarded-User",
 	"X-Forwarded-Email",
 	"X-Forwarded-Groups",
+	"X-Forwarded-Access-Token",
 	"Cookie",
 }