bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

agent(openclaw): isolate oauth cookie state

Browse Source
This commit is contained in:
jenkins 2026-05-21 01:54:24 -03:00
parent f3a1037dcd
commit b67120ef79
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
services/openclaw/oauth2-proxy-agent.yaml
View File

@ -97,8 +97,11 @@ spec:
- --set-xauthrequest=true - --set-xauthrequest=true
- --pass-access-token=true - --pass-access-token=true
- --set-authorization-header=true - --set-authorization-header=true
- --reverse-proxy=true
- --cookie-name=_oauth2_proxy_agent
- --cookie-secure=true - --cookie-secure=true
- --cookie-samesite=lax - --cookie-samesite=lax
- --cookie-csrf-per-request=true
- --cookie-refresh=20m - --cookie-refresh=20m
- --cookie-expire=168h - --cookie-expire=168h
- --insecure-oidc-allow-unverified-email=true - --insecure-oidc-allow-unverified-email=true