search

buzzfeed / sso

sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for securing internal services
MIT License
3.09k stars 184 forks source link

Test suite fails if network is DNS hijacked #140

Open sporkmonger opened 5 years ago

sporkmonger commented 5 years ago

Describe the bug If you're on a network that doesn't use a well-behaved DNS server (like 1.1.1.1 or 8.8.8.8), and DNS is hijacked for NXDOMAIN responses, the test suite will fail when run locally.

To Reproduce Steps to reproduce the behavior:

  1. Get onto a DNS-hijacked network
  2. Run make test or go test ./...

Expected behavior Test suite should pass regardless of what network you're on.

Test failures

./scripts/test
running gofmt ...
running golint ...
running go vet ...
running tests ...
ok      github.com/buzzfeed/sso/internal/auth   (cached)    coverage: 81.9% of statements
ok      github.com/buzzfeed/sso/internal/auth/circuit   (cached)    coverage: 88.8% of statements
ok      github.com/buzzfeed/sso/internal/auth/providers (cached)    coverage: 33.5% of statements
?       github.com/buzzfeed/sso/internal/auth/statik    [no test files]
ok      github.com/buzzfeed/sso/internal/pkg/aead   (cached)    coverage: 74.5% of statements
ok      github.com/buzzfeed/sso/internal/pkg/groups (cached)    coverage: 55.8% of statements
?       github.com/buzzfeed/sso/internal/pkg/logging    [no test files]
ok      github.com/buzzfeed/sso/internal/pkg/options    (cached)    coverage: 100.0% of statements
ok      github.com/buzzfeed/sso/internal/pkg/sessions   (cached)    coverage: 59.8% of statements
ok      github.com/buzzfeed/sso/internal/pkg/singleflight   (cached)    coverage: 100.0% of statements
ok      github.com/buzzfeed/sso/internal/pkg/templates  (cached)    coverage: 81.8% of statements
?       github.com/buzzfeed/sso/internal/pkg/testutil   [no test files]
2019/01/12 01:49:16 server.go:2979: http: TLS handshake error from 127.0.0.1:55101: remote error: tls: bad certificate
{"error":"x509: certificate signed by unknown authority","level":"error","msg":"error in upstreamTransport RoundTrip","service":"sso","time":"2019-01-12 01:49:16.1121"}
2019/01/12 01:49:16 reverseproxy.go:395: http: proxy error: x509: certificate signed by unknown authority
{"error":"dial tcp 93.184.216.34:443: i/o timeout","level":"error","msg":"error in upstreamTransport RoundTrip","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"unsupported protocol scheme \"\"","level":"error","msg":"error in upstreamTransport RoundTrip","service":"sso","time":"2019-01-12 01:49:46.1121"}
--- FAIL: TestRoundTrip (30.00s)
    --- FAIL: TestRoundTrip/no_error (30.00s)
        oauthproxy_test.go:342: unexpected error dial tcp 93.184.216.34:443: i/o timeout
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"http: named cookie not present","level":"error","msg":"error authenticating user","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.437189 -0800 PST 2119-01-12 01:49:46.437189 -0800 PST 2119-01-12 01:49:46.437189 -0800 PST 0001-01-01 00:00:00 +0000 UTC michael.bland@gsa.gov  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"http: named cookie not present","level":"error","msg":"error authenticating user","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"lifetime has expired; restarting authentication","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121","user":"michael.bland@gsa.gov"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"not authorized","level":"error","msg":"","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121","user":"michael.bland@gsa.gov"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55134}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55134  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55136}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55136  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"http: named cookie not present","level":"error","msg":"error authenticating user","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"starting OAuth flow","service":"sso","sign_in_url":{"Scheme":"http","Opaque":"","User":null,"Host":"127.0.0.1:55136","Path":"/oauth/authorize","RawPath":"","ForceQuery":false,"RawQuery":"","Fragment":""},"time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55138}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55138  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://bar.sso.dev http://127.0.0.1:55139}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {bar.sso.dev http://127.0.0.1:55139  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"http: named cookie not present","level":"error","msg":"error authenticating user","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"starting OAuth flow","service":"sso","sign_in_url":{"Scheme":"http","Opaque":"","User":null,"Host":"127.0.0.1:55138","Path":"/oauth/authorize","RawPath":"","ForceQuery":false,"RawQuery":"","Fragment":""},"time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55141}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55141  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.474682 -0800 PST 2119-01-12 01:49:46.474682 -0800 PST 2119-01-12 01:49:46.474682 -0800 PST 0001-01-01 00:00:00 +0000 UTC michael.bland@gsa.gov  []}","remote_address":"192.0.2.1:1234","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"192.0.2.1:1234","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55144}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55144  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.481227 -0800 PST 2119-01-12 01:49:46.481227 -0800 PST 2119-01-12 01:49:46.481227 -0800 PST 0001-01-01 00:00:00 +0000 UTC michael.bland@gsa.gov  []}","remote_address":"192.0.2.1:1234","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"192.0.2.1:1234","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":false,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55147}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55147  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.487338 -0800 PST 2119-01-12 01:49:46.487338 -0800 PST 2119-01-12 01:49:46.487338 -0800 PST 0001-01-01 00:00:00 +0000 UTC foo@example.com foo [fooGroup]}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: [fooGroup]","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.487338 -0800 PST 2119-01-12 01:49:46.487338 -0800 PST 2119-01-12 01:49:46.487338 -0800 PST 0001-01-01 00:00:00 +0000 UTC foo@example.com foo [fooGroup]}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: [fooGroup]","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"lifetime has expired; restarting authentication","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121","user":"email1@example.com"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"siv: authentication failed","level":"error","msg":"unable to unmarshal session","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"invalid session","level":"error","msg":"error authenticating user","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2019-01-12 02:49:46.498177 -0800 PST 2019-01-13 01:49:46.498177 -0800 PST 2019-01-12 01:50:46.498177 -0800 PST 0001-01-01 00:00:00 +0000 UTC email1@example.com  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"lifetime has expired; restarting authentication","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121","user":"email1@example.com"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"refresh failed","level":"error","msg":"refreshing session failed","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121","user":"email1@example.com"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"not authorized after refreshing session","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121","user":"email1@example.com"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"session saved: \u0026{my_access_token  2019-01-12 00:49:46.498179 -0800 PST 2019-01-13 01:49:46.498179 -0800 PST 2019-01-12 01:50:46.498179 -0800 PST 0001-01-01 00:00:00 +0000 UTC email1@example.com  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2019-01-12 00:49:46.498179 -0800 PST 2019-01-13 01:49:46.498179 -0800 PST 2019-01-12 01:50:46.498179 -0800 PST 0001-01-01 00:00:00 +0000 UTC email1@example.com  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":null,"level":"error","msg":"no longer authorized after validation period","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121","user":"email1@example.com"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"session saved: \u0026{my_access_token  2019-01-12 02:49:46.49818 -0800 PST 2019-01-13 01:49:46.49818 -0800 PST 2019-01-12 01:48:46.49818 -0800 PST 0001-01-01 00:00:00 +0000 UTC email1@example.com  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2019-01-12 02:49:46.49818 -0800 PST 2019-01-13 01:49:46.49818 -0800 PST 2019-01-12 01:48:46.49818 -0800 PST 0001-01-01 00:00:00 +0000 UTC email1@example.com  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55149}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55149  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"lifetime has expired; restarting authentication","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121","user":""}
{"level":"info","msg":"starting OAuth flow","service":"sso","sign_in_url":{"Scheme":"https","Opaque":"","User":null,"Host":"auth.sso.dev","Path":"/sign_in","RawPath":"","ForceQuery":false,"RawQuery":"client_id=client+ID\u0026redirect_uri=https%3A%2F%2Ffoo.sso.dev%2Foauth2%2Fcallback\u0026response_type=code\u0026scope=\u0026sig=LyITBc9qSsE09_EwD0Mq1ZkPK0vFB0Cn1J8XcunR8yE%3D\u0026state=NwzYqj6UoC6LGjQ8Nd-9D9P13-ZU9iyotaUgdkYd4ELUWDqe-H_cR498hSfkmzdrIXT0oj3sQgP0fi2Iy8WWhe6F2JfDGrWFPCksxra57fzsaDxG0BrQbccgZqQG5LQXlT1Fg5XJ6HVzCP_Z3JvR9snTaB-01geuYiQzKt-GPb1QEeJWN-L39N3GJW7xeq1Oou0koFKqac7pa4RrZg\u0026ts=1547286586","Fragment":""},"time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55149}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55149  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55149}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55149  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"lifetime has expired; restarting authentication","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121","user":""}
{"error":"aborting start of oauth flow on XHR","level":"error","msg":"","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":null,"http_status":401,"level":"error","msg":"error serving XHR","remote_address":"","request_uri":"https://foo.sso.dev/","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55149}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55149  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"lifetime has expired; restarting authentication","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121","user":""}
{"error":"aborting start of oauth flow on XHR","level":"error","msg":"","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":null,"http_status":401,"level":"error","msg":"error serving XHR","remote_address":"","request_uri":"https://foo.sso.dev/","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55149}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55149  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{  2019-01-12 02:49:46.542651 -0800 PST 2019-01-12 02:49:46.542651 -0800 PST 2019-01-12 02:49:46.542651 -0800 PST 0001-01-01 00:00:00 +0000 UTC   []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"starting OAuth flow","service":"sso","sign_in_url":{"Scheme":"https","Opaque":"","User":null,"Host":"auth.sso.dev","Path":"/sign_in","RawPath":"","ForceQuery":false,"RawQuery":"client_id=client+ID\u0026redirect_uri=https%3A%2F%2F127.0.0.1%3A55152%2Foauth2%2Fcallback\u0026response_type=code\u0026scope=\u0026sig=A3kMfkkVI0evZpVhkGdlHX8GktRokfej9yd1MEiuY1M%3D\u0026state=ypboP4aT_Ubwyw6SQo4-J8Lcqdcy2yqE2lZYoNN_WOmQmYg8e-Sk9Wminx-lL1UtbQEyaRIwzbD7kA3YsrnhMvxJfcdLa5uil6RPMmbudwgYzaFSPP0zwfs3O9g9cCkoWXhyQD6gW9yvbEqxNJX13GqNBiotsTfRetdq-WYOYp2LcEvW-C35CnVbVPQXww\u0026ts=1547286586","Fragment":""},"time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55154}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55154  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":false,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55155}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55155  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.588948 -0800 PST 2119-01-12 01:49:46.588948 -0800 PST 2119-01-12 01:49:46.588948 -0800 PST 0001-01-01 00:00:00 +0000 UTC michael.bland@gsa.gov  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"http: named cookie not present","level":"error","msg":"error authenticating user","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"starting OAuth flow","service":"sso","sign_in_url":{"Scheme":"http","Opaque":"","User":null,"Host":"sso-auth.example.com","Path":"/oauth/authorize","RawPath":"","ForceQuery":false,"RawQuery":"","Fragment":""},"time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.588948 -0800 PST 2119-01-12 01:49:46.588948 -0800 PST 2119-01-12 01:49:46.588948 -0800 PST 0001-01-01 00:00:00 +0000 UTC michael.bland@gsa.gov  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.588948 -0800 PST 2119-01-12 01:49:46.588948 -0800 PST 2119-01-12 01:49:46.588948 -0800 PST 0001-01-01 00:00:00 +0000 UTC michael.bland@gsa.gov  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":false,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://bar.sso.dev http://bar-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {bar.sso.dev bar-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"http: named cookie not present","level":"error","msg":"error authenticating user","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"starting OAuth flow","service":"sso","sign_in_url":{"Scheme":"http","Opaque":"","User":null,"Host":"sso-auth.example.com","Path":"/oauth/authorize","RawPath":"","ForceQuery":false,"RawQuery":"","Fragment":""},"time":"2019-01-12 01:49:46.1121"}
{"error":"http: named cookie not present","level":"error","msg":"error authenticating user","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"starting OAuth flow","service":"sso","sign_in_url":{"Scheme":"http","Opaque":"","User":null,"Host":"sso-auth.example.com","Path":"/oauth/authorize","RawPath":"","ForceQuery":false,"RawQuery":"","Fragment":""},"time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":false,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://foo-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev foo-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://bar.sso.dev http://bar-internal.sso.dev}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {bar.sso.dev bar-internal.sso.dev  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"http: named cookie not present","level":"error","msg":"error authenticating user","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"starting OAuth flow","service":"sso","sign_in_url":{"Scheme":"http","Opaque":"","User":null,"Host":"sso-auth.example.com","Path":"/oauth/authorize","RawPath":"","ForceQuery":false,"RawQuery":"","Fragment":""},"time":"2019-01-12 01:49:46.1121"}
{"error":"http: named cookie not present","level":"error","msg":"error authenticating user","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"starting OAuth flow","service":"sso","sign_in_url":{"Scheme":"http","Opaque":"","User":null,"Host":"sso-auth.example.com","Path":"/oauth/authorize","RawPath":"","ForceQuery":false,"RawQuery":"","Fragment":""},"time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":false,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55157}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55157  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.636114 -0800 PST 2119-01-12 01:49:46.636114 -0800 PST 2119-01-12 01:49:46.636114 -0800 PST 0001-01-01 00:00:00 +0000 UTC michael.bland@gsa.gov  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":false,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55157}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55157  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"http: named cookie not present","level":"error","msg":"error authenticating user","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"starting OAuth flow","service":"sso","sign_in_url":{"Scheme":"http","Opaque":"","User":null,"Host":"sso-auth.example.com","Path":"/oauth/authorize","RawPath":"","ForceQuery":false,"RawQuery":"","Fragment":""},"time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":false,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55157}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55157  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.636114 -0800 PST 2119-01-12 01:49:46.636114 -0800 PST 2119-01-12 01:49:46.636114 -0800 PST 0001-01-01 00:00:00 +0000 UTC michael.bland@gsa.gov  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":false,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55157}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55157  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"http: named cookie not present","level":"error","msg":"error authenticating user","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"starting OAuth flow","service":"sso","sign_in_url":{"Scheme":"http","Opaque":"","User":null,"Host":"sso-auth.example.com","Path":"/oauth/authorize","RawPath":"","ForceQuery":false,"RawQuery":"","Fragment":""},"time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55157}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55157  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55157}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55157  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55157}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55157  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.636114 -0800 PST 2119-01-12 01:49:46.636114 -0800 PST 2119-01-12 01:49:46.636114 -0800 PST 0001-01-01 00:00:00 +0000 UTC michael.bland@gsa.gov  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55157}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55157  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.636114 -0800 PST 2119-01-12 01:49:46.636114 -0800 PST 2119-01-12 01:49:46.636114 -0800 PST 0001-01-01 00:00:00 +0000 UTC michael.bland@gsa.gov  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55157}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55157  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55157}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55157  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{my_access_token  2119-01-12 01:49:46.636114 -0800 PST 2119-01-12 01:49:46.636114 -0800 PST 2119-01-12 01:49:46.636114 -0800 PST 0001-01-01 00:00:00 +0000 UTC michael.bland@gsa.gov  []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55157}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55157  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"bazquux","level":"info","msg":"OAuthProxy configured","provider":"Test Provider","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":604800000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{http://foo.sso.dev http://127.0.0.1:55157}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {foo.sso.dev http://127.0.0.1:55157  \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"unknown host","level":"error","msg":"","request_host":"bar.sso.dev","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{(.*) http:127.0.0.1:55171}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {(.*) 127.0.0.1:55171 rewrite \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{  2019-01-12 02:49:46.829192 -0800 PST 2019-01-12 02:49:46.829191 -0800 PST 2019-01-12 02:49:46.829192 -0800 PST 0001-01-01 00:00:00 +0000 UTC   []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{bar http:127.0.0.1:55171}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {bar 127.0.0.1:55171 rewrite \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"error":"unknown host","level":"error","msg":"","request_host":"foo.sso.dev","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"client_id":"client ID","level":"info","msg":"OAuthProxy configured","provider":"SSO","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"cookie_domain":"\u003cdefault\u003e","cookie_expire":259200000000000,"cookie_http_only":true,"cookie_name":"_sso_proxy","cookie_secure":true,"level":"info","msg":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.Route: \u0026{somedomain--(.*) http:127.0.0.1:$1}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig: {somedomain--(.*) 127.0.0.1:$1 rewrite \u003cnil\u003e}","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"upstreamConfig.RouteConfig.Options: \u003cnil\u003e","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied full session: \u0026{  2019-01-12 02:49:46.829204 -0800 PST 2019-01-12 02:49:46.829203 -0800 PST 2019-01-12 02:49:46.829204 -0800 PST 0001-01-01 00:00:00 +0000 UTC   []}","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxied groups: []","remote_address":"","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: [dev]","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
{"level":"info","msg":"proxy.AllowedGroups: []","service":"sso","time":"2019-01-12 01:49:46.1121"}
FAIL
coverage: 66.3% of statements
FAIL    github.com/buzzfeed/sso/internal/proxy  30.772s
?       github.com/buzzfeed/sso/internal/proxy/collector    [no test files]
ok      github.com/buzzfeed/sso/internal/proxy/providers    (cached)    coverage: 58.7% of statements
make: *** [test] Error 1
loganmeetsworld commented 5 years ago

@sporkmonger thanks for filing this bug! This is definitely something useful to look into. Are you planning on exploring fixing this? If not, we will look to assign this internally.

sporkmonger commented 5 years ago

I probably won't attempt to fix this, no.