Error 500: https://accounts.google.com/o/oauth2/token: x509: certificate has expired or is not yet valid about oauth2_proxy HOT 9 CLOSED

@jos3k4 can you check the system date on the machine where you are running?

The part of the log where it says "or is not yet valid" implies that your system date is behind. If the log entry you posted is recent, it has a date of May 31st but it's now June 12th.

from oauth2_proxy.

Maybe is useful for others... I've found that the client application (In this case oauth2_proxy) should run as HTTPS https://developers.google.com/identity/protocols/OAuth2UserAgent

from oauth2_proxy.

Thanks! I solved it updating the time on the machine (I'm using a test box)

from oauth2_proxy.

I know that probably this is not the thread for ask it, but for avoid open another issue/question... How can I redirect to another context? I mean, the redirect_url should point to the context where I have the Google Auth API (/oauth2/callback) but if I want to redirect to another one, can I do it?

Edit. is the upstream option related to this?

from oauth2_proxy.

@jos3k4 can you clarify what you mean by "redirect to another context"? I'm not sure i follow so perhaps if you share what you are trying to accomplish with your setup i can give some guidance.

The upstream option specifies where traffic goes after it passes through oauth2_proxy (assuming it's an authenticated session). If you specify multiple upstream addresses, with different path prefixes oauth2_proxy should just "do the right thing". (ie: you can send /a/ to one upstream and /b/ to another)

from oauth2_proxy.

@jos3k4 If by "redirect to another context" you mean use the host running oauth2_proxy to handle authentication for another host, such as when you're using a single-sign on (SSO) across multiple hosts, there is a way to configure that. See the SSO.md from my project, which was inspired by #12.

from oauth2_proxy.

@jehiah Well, my idea is use this API for check the users credentials and then do something like a ProxyPass to the application that the user wan't to see. My target is replace AuthBasic of Apache using this nice service. It can be possible?

from oauth2_proxy.

@jos3k4 correct oauth2_proxy is a proxy_pass which authenticates requests. upstream is the address of where requests are proxied to, and only authenticated requests are proxied along.

from oauth2_proxy.

Thanks for the help guys, I like this project.

from oauth2_proxy.