fix csp problem

Author: terion-labs

ansible/roles/oauth2_proxy/templates/oauth2-proxy.cfg.j2

@@ -20,7 +20,7 @@ trusted_proxy_ips = [ "127.0.0.1/32", "::1/128" ]
 code_challenge_method = "S256"
 skip_provider_button = true
 set_xauthrequest = true
-pass_authorization_header = true
+pass_authorization_header = false
 pass_user_headers = true
 pass_access_token = false
 skip_jwt_bearer_tokens = false

tests/oauth2-proxy-template.test.ts

@@ -19,6 +19,8 @@ describe("management oauth2-proxy template", () => {
     expect(template).toContain('whitelist_domains = [ "{{ terrarium_manage_domain }}", "{{ terrarium_proxy_domain }}" ]');
     expect(template).toContain('trusted_proxy_ips = [ "127.0.0.1/32", "::1/128" ]');
     expect(template).toContain("skip_jwt_bearer_tokens = false");
+    expect(template).toContain("pass_authorization_header = false");
+    expect(template).not.toContain("pass_authorization_header = true");
     expect(template).not.toContain("cookie_domains");
     expect(template).not.toContain("terrarium_oauth2_proxy_cookie_domain");
   });