oauth2_proxy | reverse proxy that provides authentication | Authentication library

by bitly Go Version: v2.2 License: MIT

X-Ray Key Features Code Snippets Community Discussions(3)Vulnerabilities Install Support

kandi X-RAY | oauth2_proxy Summary

oauth2_proxy is a Go library typically used in Security, Authentication applications. oauth2_proxy has no bugs, it has a Permissive License and it has medium support. However oauth2_proxy has 1 vulnerabilities. You can download it from GitHub.

A reverse proxy that provides authentication with Google, Github or other provider

Support

Quality

Security

License

Reuse

Support

oauth2_proxy has a medium active ecosystem.

It has 5081 star(s) with 1221 fork(s). There are 150 watchers for this library.

It had no major release in the last 12 months.

There are 146 open issues and 181 have been closed. On average issues are closed in 47 days. There are 97 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of oauth2_proxy is v2.2

Quality

oauth2_proxy has 0 bugs and 0 code smells.

Security

oauth2_proxy has 1 vulnerability issues reported (0 critical, 0 high, 1 medium, 0 low).

oauth2_proxy code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

oauth2_proxy is licensed under the MIT License. This license is Permissive.

Permissive licenses have the least restrictions, and you can use them in most projects.

Reuse

oauth2_proxy releases are available to install and integrate.

Installation instructions are not available. Examples and code snippets are available.

It has 5104 lines of code, 289 functions and 46 files.

It has high code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of oauth2_proxy

Get all kandi verified functions for this library.

oauth2_proxy Key Features

No Key Features are available at this moment for oauth2_proxy.

oauth2_proxy Examples and Code Snippets

No Code Snippets are available at this moment for oauth2_proxy.

Community Discussions

Trending Discussions on oauth2_proxy

Permission Denied: "" is unauthorized: Azure AD

Use one oauth2_proxy instance with many ingress paths?

NGINX Ingress external oauth with Azure Active Directory

QUESTION

Permission Denied: "" is unauthorized: Azure AD

Asked 2020-Aug-19 at 10:25

I am trying to implement oauth2 proxy with Azure Active Directory. It seems the oauth2 proxy is able to communicate with Azure AD App, and even it authenticates most of the users from organization, but for few Users we are not able to authenticate users.

Oauth2_proxy logs say the following: (internally after authentication the requests goes on this endpoint to get the user's details: https://graph.windows.net/me?api-version=1.6, but for few users the response looks like this:

{"odata.error":{"code":"Authorization_RequestDenied","message":{"lang":"en","value":"Insufficient privileges to complete the operation."},"requestId":"{reqID}","date":"2020-08-18T15:18:33"}}

Errors:

Permission Denied: "" is unauthorized
ErrorPage 403 Permission Denied Invalid Account

Any inputs would be helpful!

PS. Tried to select all the permissions in azure active directory app, but didn't work.

...

ANSWER

Answered 2020-Aug-19 at 10:25

You need to log in to the Azure portal as an administrator, then find App registrations> select your application> API permissions, and grant administrator consent to the Graph permissions you added.

By the way, starting on June 30, 2020, Microsoft will officially no longer add any new features to the Azure AD Graph API. It is recommended that you upgrade your application to use Microsoft Graph API instead of Azure AD Graph API to access Azure Active Directory resources.

Source https://stackoverflow.com/questions/63472073

QUESTION

Use one oauth2_proxy instance with many ingress paths?

Asked 2020-Apr-17 at 06:36

I am running an app in a kubernetes service on Azure and have had it set up with an NGINX ingress controller and a public IP address with a FQDN. This was all working fine.
I then wanted to add security through using the oauth2-proxy for third party sign-in. I would like to keep my setup to one ingress-controller and one oauth2_proxy per namespace, with multiple apps running together. As Azure does not support the use of sub-domains for this I have been using paths to route to the correct app. I've seen examples, like this, on how to use one oauth2_proxy for multiple sub-domains but is it possible to get it working with multiple paths instead?

Setup
This is the current working setup with only one app, located on root /. I would like to switch to an app specific path and the ability to run multiple apps on different paths. eg. /my-app, /another-app etc.

oauth2-proxy-config.yaml

...

ANSWER

Answered 2020-Apr-05 at 21:44

Sure, it's doable with multiple ingress paths inside single Ingress resource definition, please check this working example:

Source https://stackoverflow.com/questions/60741615

QUESTION

NGINX Ingress external oauth with Azure Active Directory

Asked 2020-Jan-16 at 16:22

I want to use Azure Active Directory as an external oauth2 provider to protect my services on the ingress level. In the past, I used basic ouath and everything worked like expected. But nginx provides the extern ouath methode which sounds much more confortable!

For that I created an SP:

...

ANSWER

Answered 2020-Jan-16 at 15:48

So you need another ingress for the oAuth deployment as well. here's how my setup looks like:

Source https://stackoverflow.com/questions/59773062

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install oauth2_proxy

You can download it from GitHub.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: