preichenberger/oauth2-router repository overview

⁠OAuth2 Router

Redirects an OAuth2 callback to a URL specified in the state parameter with all query parameters from the original request. This allows having one endpoint as the destination for different OAuth2 callbacks destinations. Allows for whitelisting redirect domains.

Possible use cases:

• Pull Request builds
• Heroku Review Apps
• any dynamic DNS hostname.

SECURITY: This allows for arbitrary redirects of OAuth2 Authorization Codes. Please understand the implications before using this.

⁠Install

⁠Binary

Grab a release from: https://github.com/preichenberger/oauth2-router/releases⁠

⁠Docker

https://hub.docker.com/r/preichenberger/oauth2-router⁠

⁠Heroku

⁠Start

$ oauth2-router -port 3000 -whitelist 'localhost,*.google.com'
$ 2018/06/08 12:48:09 Starting OAuth2 Router on port: 3000

⁠Client Implementation

For the following info:

• Whitelist: localhost
• OAuth2 Router redirect_uri: http://localhost:8080⁠
• Real redirect_uri: http://localhost:5000/random_endpoint?apple=pears⁠

1. Add the OAuth2 Router redirect_uri: http://localhost:8080⁠ to your OAuth2 provider (Google, Facebook, Github, etc...)
2. Create a JSON with any date to be passed in the OAuth2 state parameter. Add a redirect parameter, with the real redirect_uri

{
	"csrf": "39adsijdfiaj",
	"redirect": "http://localhost:5000/random_endpoint?apple=pears"
}

1. Base64 encode the json and set it as the state parameter in the OAuth2 implementation
2. Use OAuth2

⁠Tests

Run tests

$ go ./...