A reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by email, domain or group. If you are running a version older than v6.0.0 we strongly recommend you please update to the current version. After returning from the authentication provider, the OAuth tokens are stored in the configured session store (cookie, redis, ...) and a cookie is set. The request is forwarded to the upstream server with added user info and authentication headers (depending on the configuration) oauth2-proxy can be configured via command line options, environment variables or config file (in decreasing order of precedence, i.e. command line options will overwrite environment variables and environment variables will overwrite configuration file settings).
Features
- Generate a Cookie Secret
- very command line argument can be specified in a config file by replacing hyphens with underscores
- Authenticate against emails via file (one per line)
- The password to set when passing the HTTP Basic Auth header
- Template for authentication log lines
- Enable having different CSRF cookies per request