#security - February 2019

finally an official fork of bitly oauth2 proxy

with fixes for OIDC support

It works well!

the official stable chart has been updated to reflect that: https://github.com/helm/charts/tree/master/stable/oauth2-proxy
not sure https://github.com/cloudposse/charts/tree/master/incubator/oauth2-proxy is still needed (it's out of date)

Its a shame that buzzfeed/sso is so poorly documented

because the idea of splitting the proxy part (so it can be used as sidecar) is really nice

Im also looking at https://ory.sh but seems so young (oathkeeper)

set the channel description: Archive: https://archive.sweetops.com/security/

I’ve been pretty active in getting http://github.com/pomerium/pomerium up and working, which is a fork of buzzfeed/sso with OIDC support (not my project, but have been contributing to it since I found it).

Yay https://coocoor.com/advisory/cve/CVE-2019-8912

and https://snyk.io/blog/88-increase-in-application-library-vulnerabilities-over-two-years/