forwardauth

Zero-Trust access management with true WireGuard® 2FA/MFA

Simple and minimalist forward auth service intended for use with reverse proxies (Traefik, Caddy, nginx, etc)

Cloud native OIDC Identity Provider

🔑 A simple, cookie based Traefik middleware plugin for HTTP Basic / Ceritificate Based Single Sign-on

Forward auth service for Traefik, Caddy and Nginx, powered by Casdoor

Traefik forward auth implementation for JWT tokens

Lightweight ForwardAuth gateway for Traefik and Nginx, adding login, sessions, cross-domain SSO, and optional TOTP or SMS/email OTP through Warden and Herald.

OpenID Connect ForwardAuth for containo.us Traefik 🔐

Traefik Middleware for Auth in Azure Active Directory

User allowlist API for auth gateways: sync email and phone data from JSON files and remote APIs, with seven merge strategies, Redis-locked refresh, API-key/HMAC auth, OpenAPI, and a Go SDK.

Simple service that validates jwt tokens and answer 200 or 401

Simple implementation of a Traefik ForwardAuth middleware supporting Authorization Code with PKCE flow

Small WebAuthn/Passkey forward-auth service for nginx auth_request.

Portable Helm chart: Traefik v3.7.6 + Keycloak-protected dashboard (oauth2-proxy/ForwardAuth) for OpenShift, RKE2, k3s, kubeadm & Tanzu. Feature-flag driven — MetalLB/NSX ALB/kube-vip/Cilium LB, External Secrets+Vault, optional NetworkPolicies, air-gap. Fail-fast validation. AI-generated, not yet tested on a live cluster.

Testing envoy's forward auth feature in golang (http + grpc)

Compose-based integration test suite for Stargate, Warden, and Herald, with a CLI and web UI to generate, validate, and diagnose authentication stacks.

simple project that shows how to use traefik's ForwardAuth middleware

Keep self-hosted services internal-only and open them temporarily: guest codes or time-limited public access via Traefik forwardAuth

The following is a ForwardAuth service for Traefik 2.x and Traefik 3.x working with Cloudflare Access, caching the certifcates from Cloudflare, validating JWT headers and also validating the Audience ID (AUD), its serves as a PoC in Rust