OAuth2-Proxy Version

7.14.2

Provider

oidc

Expected Behaviour

The alpha config injectRequestHeaders.secretSource.value gets base64 decoded.

Current Behaviour

The alpha config injectRequestHeaders.secretSource.value gets injected as is and thus is base64 encoded. Furthermore the docs still state that the HeaderValue expects the squashed values and the How to inject custom headers example is invalid yaml (misses values: two times).

Steps To Reproduce

Write a configuration which injects request headers with secret source values and dump the request (for example with netcat) to inspect the header.

Possible Solutions

Either decode the base64 value (probably best) or adapt the docs to state that the string must not be base64 decoded (and also the comment in the code).

Configuration details or additional information

No response