Add secure middleware to enable more header options

bitly / oauth2_proxy

A reverse proxy that provides authentication with Google, Github or other provider

MIT License

5.1k stars 1.21k forks source link

Add secure middleware to enable more header options #618

Open timothy-spencer opened 6 years ago

timothy-spencer commented 6 years ago

I needed to be have XSS and nosniff headers set to help compliance scans not complain, so I followed through with the suggestion in https://github.com/bitly/oauth2_proxy/issues/384.

Please let me know if you have any suggestions or things that I could do to help this get merged in. We would love to be able to just use upstream for this.

Thanks!