# Copyright 2017-2024 Adrien Vergé

%define debug_package %{nil}

Name:           oauth2-proxy
Version:        7.7.1
Release:        1%{?dist}
Summary:        A reverse proxy that provides authentication with Google, Github or other provider
License:        MIT
URL:            https://github.com/oauth2-proxy/oauth2-proxy
Source0:        oauth2-proxy-v7.7.1.linux-amd64.tar.gz
Source1:        oauth2-proxy.cfg.example
Source2:        oauth2-proxy.service.example

BuildRequires: systemd

Requires(pre): shadow-utils
Requires(post): systemd
Requires(preun): systemd

%description
A reverse proxy and static file server that provides authentication using
Providers (Google, GitHub, and others) to validate accounts by email, domain or
group.

%prep
%setup -q -n oauth2-proxy-v%{version}.linux-amd64

%build
echo "For simplicity I use the official pre-built binary from the GitHub repo"

# Avoid the second screen "By continuing, Google will share your name…" every
# time. I found this solution after reading https://stackoverflow.com/a/48771341
# and https://github.com/oauth2-proxy/oauth2-proxy/pull/444
patch %{SOURCE2} <<'PATCH'
@@ -11,7 +11,7 @@ Group=oauth2-proxy
 Restart=on-failure
 RestartSec=30
 WorkingDirectory=/etc/oauth2-proxy
-ExecStart=/usr/bin/oauth2-proxy --config=/etc/oauth2-proxy/oauth2-proxy.cfg
+ExecStart=/usr/bin/oauth2-proxy --config=/etc/oauth2-proxy/oauth2-proxy.cfg --prompt=select_account
 ExecReload=/bin/kill -HUP $MAINPID
 LimitNOFILE=65535
 NoNewPrivileges=true
PATCH

%install
install -D -p -m 755 oauth2-proxy %{buildroot}%{_bindir}/oauth2-proxy
install -D -p -m 644 %{SOURCE1} %{buildroot}%{_sysconfdir}/oauth2-proxy.cfg
install -D -p -m 644 %{SOURCE2} %{buildroot}%{_unitdir}/oauth2-proxy.service

%pre
getent group oauth2-proxy >/dev/null || groupadd -r oauth2-proxy
getent passwd oauth2-proxy >/dev/null || \
  useradd -r -g oauth2-proxy -s /sbin/nologin oauth2-proxy

%post
%systemd_post oauth2-proxy.service

%preun
%systemd_preun oauth2-proxy.service

%postun
%systemd_postun_with_restart oauth2-proxy.service

%files
%defattr(-,root,root,-)
%{_bindir}/oauth2-proxy
%config(noreplace) %{_sysconfdir}/oauth2-proxy.cfg
%{_unitdir}/oauth2-proxy.service

%changelog
* Mon Nov 18 2024 Adrien Vergé - 7.7.1-1
- Update to latest upstream version

* Mon Nov 14 2022 Adrien Vergé - 7.4.0-1
- Update to latest upstream version

* Wed Sep 6 2017 Adrien Vergé - 2.2-1
- Update to latest upstream version

* Mon Feb 6 2017 Adrien Vergé - 2.1-1
- Initial RPM release