GitLab

This allows eventual future usage of 307 redirects and us accepting
POST requests without having to decode the request body.

The sso service endpoint should send the proper CORS headers and
respond to OPTIONS (for CORS prefetches) so that XmlHttpRequests on
authenticated sites can (partially) work.

This caused the SSO server to generate bad form links, which caused a
302, preventing POST requests to succeed.

Support serving site-specific logo, favicon, and setting a site title.

Just serve an error on the logout page if there is no valid session,
instead of redirecting to the login workflow.

Fixes issue #8.

Fixes issue #6.

And standardize on a single structure for the gorilla session
map, using the 'data' key for our gob-encoded objects.

Using the new configuration variable 'keystore_enable_groups'.

Likely fixes issue #7 (untested).

There seems to be no good reason to change group membership when
exchanging tokens, let's try just passing the old one over.

Using CORS-enabled requests in the background.

Allow loading remote images.

Should make the subdivision between apps (idp, sso) more obvious.

Uses the clientutil.Backend abstraction for the keystore client API.

It left the Prometheus instrumentation in server/http.go, while
it is already provided by the ai3/go-common package.

Uses 'go generate' to invoke sri.py.

Classic mistake with strings.Split("").

Otherwise gopkg.in/yaml.v2 won't decode strings to []bytes.

The proxy wraps endpoints (exposed as separate HTTP hosts) with single-sign-on
authentication.