Forward authenticator for Nginx auth_request or Caddy forward_auth that whitelists remote IP address if a key is presented in URL.
-
Updated
Sep 8, 2026 - JavaScript
#
forward-auth
Here are 41 public repositories matching this topic...
Traefik with Pomerium in Forward Auth and Proxy mode on Kubernetes with Helm/Helmfile
kubernetes helm traefik auth-proxy proxy-mode access-proxy helmfile pomerium forward-auth pomerium-proxy
-
Updated
Aug 31, 2020 - Shell
Self-hosted forward-auth sidecar that gates your services by request IP + host — give family and friends per-user access without touching the apps behind your reverse proxy. Not authentication; a roaming-IP heartbeat keeps access current.
go nginx golang security selfhosted self-hosted reverse-proxy authorization caddy traefik access-control homelab sidecar zero-trust forward-auth
-
Updated
Sep 7, 2026 - TypeScript
Authentication Server for single user with passkey
-
Updated
Oct 23, 2024 - Go
Protect your services with email verification
-
Updated
Dec 19, 2021 - Python
OpenID Connect ForwardAuth for containo.us Traefik 🔐
-
Updated
Nov 25, 2021 - Go
OFFA offers easy to use OpenID Federation Authentication and Authorisation for existing services.
-
Updated
Sep 7, 2026 - Go
Manage Traefik HTTP provider services, authentication, sessions, and live proxy diagnostics from one focused UI.
docker typescript proxy docker-image postgresql self-hosted reverse-proxy traefik sso-authentication forward-auth
-
Updated
Aug 3, 2026 - TypeScript
Open-source AI WAF for self-hosted apps with Caddy forward_auth, trusted identity headers, deterministic enforcement, and reviewable AI-assisted security workflows.
rust sqlite postgresql waf self-hosted reverse-proxy openai caddy application-security oidc access-control homelab web-application-firewall caddy-server zero-trust ai-security security-gateway forward-auth auth-gateway ai-waf
-
Updated
May 8, 2026 - TypeScript
A forward authentication / authorisation (authN) implementation of Envoy External Authorization (ext_authz), built with Contour, and Pomerium in mind.
kubernetes oauth2 authentication proxy ingress authorization cloud-native oidc envoy contour pomerium forward-auth ext-authz
-
Updated
Dec 19, 2020 - Go
Lightweight Auth Server in Go
-
Updated
Jun 17, 2026 - Go
Modern, lightweight identity provider in a single Go binary: OIDC provider, forward auth, LDAP + local users + upstream OIDC federation, TOTP & passkeys, a self-service portal and a polished admin UI — SQLite by default, ~26 MB RAM. A featherweight Authentik alternative.
golang ldap oauth2 authentication sqlite self-hosted totp sso openid-connect oidc identity-provider mfa homelab 2fa single-sign-on webauthn forward-auth passkeys
-
Updated
Sep 4, 2026 - Go
Simple service that validates jwt tokens and answer 200 or 401
-
Updated
Dec 21, 2021 - Go
Lightweight API Key management solution.
-
Updated
Jun 12, 2026 - Rust
oauth oauth2 reverse-proxy openid openid-connect traefik openidconnect-client authentication-middleware traefik-ingress traefik-v2 forward-auth traefik-docker
-
Updated
Mar 19, 2021 - JavaScript
Jellyfin plugin for trusted header SSO (forward auth) with role-based library access control
-
Updated
Aug 24, 2026 - C#
Trusted Publishing for Docker registries using GitHub Actions OIDC.
-
Updated
Sep 2, 2026 - TypeScript
Self-hosted edge gateway for homelabs. Reverse proxy + WAF + load balancing + SSO in a single panel. Powered by Caddy, Coraza and CrowdSec.
react go sqlite waf self-hosted reverse-proxy caddy oidc homelab bsl edge-gateway forward-auth crowdsec coraza
-
Updated
May 3, 2026 - Go
Preauth: a simple way to help secure your web services.
-
Updated
Aug 31, 2026 - PHP
Add this topic to your repo
To associate your repository with the forward-auth topic, visit your repo's landing page and select "manage topics."