Questions tagged [oauth2-proxy]
64 questions
1
vote
1 answer
How to pass upstream_http_x_auth_request_email value in a url as query parameter through rewrite
I am using oauth2-proxy and nginx for authenticating the request. Below is the nginx configuration:
server {
listen 443 ssl;
server_name ...;
include ssl/ssl.conf;
location /oauth2/ {
proxy_pass http://127.0.0.1:4180;
…
Prince Jaiswal
- 11
- 1
1
vote
0 answers
OAUTH2 Proxy dont check session validity in each request
I am configuring an ouath2 proxy container in docker. I am using the bitnami image:
https://hub.docker.com/r/bitnami/oauth2-proxy
For the oauth2 server I am using fusionauth.
https://fusionauth.io/
The expected behaviour from my side is the proxy…
user15025104
1
vote
0 answers
OAuth2 Proxy Behind Ingress Path
I configured OAuth2 Proxy as a sidecar container to an external facing application that is hosted at https://my-domain.com/subpath.
OAuth2 Proxy's default provider button (see green button below) is redirecting me to https://my-domain.com/oauth2…
Yannic Hamann
- 4,655
- 32
- 50
1
vote
1 answer
Redirect oauth2 proxy to custom page in case of 500 server error
I would like to either be able to customise the existing 500 error page OR in case it is not possible, redirect to my custom page.
I am using Okta oidc and everything is setup on Kubernetes cluster. I could not find where I can configure this 500…
Niket Singh
- 159
- 12
1
vote
0 answers
Enable machine to machine authentication in oauth
I currently run a frontend with a backend api pool in my kubernetes. Both services are secured via an auth2-proxy.
As for the frontend, the auth-workflow is done by users entering their credentials and every frontend - backend communication is…
Bennimi
- 416
- 5
- 14
1
vote
1 answer
get username in opengrok from oauth2-proxy
I am trying to add oauth2-proxy to secure my opengrok instance. I am following the document mentioned here: https://developer.okta.com/blog/2022/07/14/add-auth-to-any-app-with-oauth2-proxy
and my docker-compose.yaml file is as below:…
undefined
- 3,464
- 11
- 48
- 90
1
vote
1 answer
How can username be received by an upstream private service from a OAuth2-proxy?
I set up OAuth2-proxy as a reverse proxy, providing authentication and authorization for users of a custom web application, deployed as an upstream private service. It all works well. Except that I would like to pass the username from the reverse…
David Bridgeland
- 525
- 1
- 9
- 16
1
vote
1 answer
Oauth2-proxy - 404 error when redirecting to upstream url (Django application web page)
I'm trying to protect a Django application with oauth2-proxy
In the oauth2-proxy configuration: (version 7.2.1 or 7.3.0)
When the upstream url is set to something like this: --upstream="http://127.0.0.1:8000"
the redirection works fine. (and it…
Ric
- 65
- 9
1
vote
0 answers
Unauthorized error with oauth2-proxy´s allow-group flag
I am using oauth2 to handle the authentication/authorization via a company´s SSO provider of a web app running in k8.
The authentication works like a charm, however, once enable authorization for a specific group ( here: "ADMIN"), I always get a 403…
Bennimi
- 416
- 5
- 14
1
vote
0 answers
Unable to pass _oauth2_proxy_{0,1,2} cookies in cors calls to istio
I have a service blocked under oauth2_proxy which requires login , however i am unable to to pass theses oauth2_proxy cookies when making cors calls.
I have tried
return $.ajax({
url: url,
...
xhrFields: {
…
sonorous
- 71
- 6
1
vote
1 answer
oauth2-proxy preserve POST data
We have oauth2-proxy setup with the cookie storage option for state, which successfully redirects the user to the IDP and back when their access token expires and needs refreshing.
If the token needs refreshing, but the call made is a POST with form…
Tom Chamberlain
- 2,955
- 20
- 24
1
vote
0 answers
Istio Ingress Gateway API authentication with internal token
I have found this great article that describes the ability to run API authentication with Istio Ingress Gateway and Oauth2-proxy:…
EVG
- 235
- 1
- 3
- 10
1
vote
1 answer
Unable to load kubernetes dashboard after successful oauth2
I have deployment my kubernetes cluster v1.23.1 with kubeadm and configured it with the keycloak identity provider for authentication.
API server configuration for keycloak IDP
...
- --oidc-issuer-url=https://kubemaster:8443/auth/realms/local
…
sb9
- 370
- 3
- 17
1
vote
1 answer
OAuth2 Proxy unable to process value returned from ADFS
I have tried using OAuth2 Proxy to manage my SSO authentication directly to ADFS rather than going through an intermediary like Keycloak. I first tried in an older version (7.1.x) with the OIDC provider, then in the brand new version (7.2.0) with…
JackLThornton
- 375
- 3
- 14
1
vote
1 answer
OAuth2 Proxy pod keeps crashing when used with Keycloak in oidc mode on Kubernetes
I'm trying to run a minimalistic sample of oauth2-proxy with Keycloak. I used oauth2-proxy's k8s example, which uses dex, to build up my keycloak example.
The problem is that I don't seem to get the proxy to work:
# kubectl get pods …
mr-ma
- 199
- 13