forwardauth

Zero-Trust access management with true WireGuard® 2FA/MFA

Simple and minimalist forward auth service intended for use with reverse proxies (Traefik, Caddy, nginx, etc)

🔑 A simple, cookie based Traefik middleware plugin for HTTP Basic / Ceritificate Based Single Sign-on

Cloud native OIDC Identity Provider

Traefik ForwardAuth middleware powered by Casdoor: https://doc.traefik.io/traefik/middlewares/http/forwardauth

Traefik forward auth implementation for JWT tokens

🚀 Lightweight ForwardAuth gateway for Traefik & Nginx: add login, sessions and 2FA (TOTP / SMS & email OTP) to any service without touching its code. Cross-domain SSO, bcrypt, Prometheus metrics, env-only config, Docker-ready. / 面向 Traefik 和 Nginx 的轻量 ForwardAuth 鉴权网关：零改代码为任意服务加上登录、会话与二次验证。

OpenID Connect ForwardAuth for containo.us Traefik 🔐

Traefik Middleware for Auth in Azure Active Directory

Stop sharing one password. Lightweight user allowlist API (email & phone) for Stargate and other auth gateways: sync from JSON files or remote APIs with 7 merge strategies, Redis-locked refresh, API-key/HMAC auth, OpenAPI + Go SDK. / 告别共享密码：为鉴权网关提供可登录用户白名单，支持本地与远程数据源合并同步。

Simple service that validates jwt tokens and answer 200 or 401

Simple implementation of a Traefik ForwardAuth middleware supporting Authorization Code with PKCE flow

Portable Helm chart: Traefik v3.7.6 + Keycloak-protected dashboard (oauth2-proxy/ForwardAuth) for OpenShift, RKE2, k3s, kubeadm & Tanzu. Feature-flag driven — MetalLB/NSX ALB/kube-vip/Cilium LB, External Secrets+Vault, optional NetworkPolicies, air-gap. Fail-fast validation. AI-generated, not yet tested on a live cluster.

Testing envoy's forward auth feature in golang (http + grpc)

Small WebAuthn/Passkey forward-auth service for nginx auth_request.

simple project that shows how to use traefik's ForwardAuth middleware

The following is a ForwardAuth service for Traefik 2.x and Traefik 3.x working with Cloudflare Access, caching the certifcates from Cloudflare, validating JWT headers and also validating the Audience ID (AUD), its serves as a PoC in Rust

A containerized, opinionated Nginx reverse proxy with declarative YAML configuration.

Sample SPA application for ForwardAuth