The upstream issues got closed. It is referenced in:

• persistence/sql/migratest/migration_test.go#L142

Expected Behavior

If cookie-expire is setted to long period (1 week) and cookie-refresh to 1 hour (because Google's JWT is valid 1 hour), oauth2-proxy should refresh session cookie earliest after first hour and if successfully recieve access token (JWT) oauth2-proxy should do next cookie refresh earliest after one hour (a

Is your feature request related to a problem? Please describe.

The public key-based request signing functionality added to sso_proxy in buzzfeed/sso#106 is undocumented. In particular, it's not immediately obvious how to a) generate an appropriate keypair or b) validate a signed request in an upstream service.

Describe the solution you'd like

New documenta

What would you like to be added

step ssh login (without specifying identity by using default setting.)

Why this is needed

I'm using certificates for ssh with command step ssh login <identity> with an oidc provisioner.
In our usecase, each user has the only one unique identity, and each time specifying the same identity takes a little costs.
If possible, I suggest using command