Questions tagged [oauth2-proxy]

64 questions
1
vote
1 answer

Microsoft !GERMAN! Azure Cloud - getting oauth2-proxy to work

I am trying to setup oauth2-proxy to authenticate against microsofts german azure cloud. It's quite a ride, but I got as far as being able to do the oauth handshake. However, I am getting an error when trying to receive user mail and name via the…
Matthias
  • 2,622
  • 1
  • 18
  • 29
0
votes
2 answers

Using kubernetes-dashboard with outh2-proxy and keycloak (and EKS) - unauthorized

I am trying to use oauth-proxy to provide authentication on the kubernetes dashboard using keycloak in EKS. I have managed to get to a point where oauth-proxy will forward the authorization header to the dashboard, however I am getting…
0
votes
0 answers

Keycloak 12.0.4 with Oauth2-proxy to Authenticate NGINX requests

I am using a reverse proxy to access some of my applications with NGINX. I currently protect my reverse proxies with Oauth2-proxy and authorize accessing users with Azure AD. Instead of using Azure AD directly with Oauth2-proxy, I decided to use…
Can
  • 1
  • 3
0
votes
0 answers

NGINX (auth_request) and OAuth2 Proxy - 404 Not Found Error

I want to do authorization with OAuth2-Proxy on my linux server with NGINX installed. I also run streamlit applications on the server and run them in subdirectories with reverse proxy (you can see my NGINX configuration files). I want to restrict…
Can
  • 1
  • 3
0
votes
1 answer

Nginx controller + oauth2-proxy authentication flow failing

Nginx ingress controller on K8s is not properly triggering authentication flow via oauth2-proxy for / path. How can I make it do this? I have nginx ingress controller (v1.1.3) and oauth2-proxy (latest as of 23/6/2023) in a K8s cluster (1.22) and a…
0
votes
1 answer

issue with Ingress and OAuth2 Proxy error 500

"I'm facing a problem with my Kubernetes Ingress and OAuth2 Proxy. When accessing my application through the Ingress, I expect to be redirected to the Okta authentication page, but I'm getting 500 Internal Server Error.Here is my conf kind:…
elmehdi
  • 11
  • 3
0
votes
0 answers

How to change separator in oauth2-proxy for X-FORWARDED-GROUPS

I am trying to have oauth2-proxy forward the user's groups, using the X-FORWARDED-GROUPS header, to a GeoServer instance. The problem is that if a user belongs to multiple groups, oauth2-proxy sends a header like this: X-FORWARDED-GROUPS:…
pkExec
  • 1,752
  • 1
  • 20
  • 39
0
votes
0 answers

Troubleshooting keycloak access denied error when authenticating for multiple SSO-enabled apps on the same server

I am a newbie sysadmin and have to work on an existing server infrastructure. Therefore, please excuse me in advance if this question is difficult to understand. The setup consists of several servers running Docker containers and managed via…
0
votes
0 answers

Oauth2-proxy static directory configuration not working using upstream

I am trying to create my custom login page for oauth2-proxy and following the documentation here: https://oauth2-proxy.github.io/oauth2-proxy/docs/configuration/overview#upstreams-configuration I created docker environment variable and passed path…
undefined
  • 3,464
  • 11
  • 48
  • 90
0
votes
0 answers

oauth2-proxy: Validate Azure AD JWT Token returns 401

I am trying to validate JWT Token with oauth2-proxy and Azure AD (multi tenant). The setup is working and I can log in via http://localhost:4180. This is how I run the proxy: docker run --net=host quay.io/oauth2-proxy/oauth2-proxy:latest…
0
votes
0 answers

Skip Auth Routes with K8s + Ingress-Nginx +oauth2-proxy

I am using oauth2-proxy with k8s+ingress-nginx. The way nginx redirects to oauth is always through the annotation nginx.ingress.kubernetes.io/auth-url: https://$host/oauth2/auth in the ingresses defined by every service. With this annotation the URL…
0
votes
0 answers

How authenticate to my oauth2-proxy sidecar using bearer token?

I am trying to send a POST request to docat, which is protected by oauth2-proxy sidecar. But I am unable to include my access token in the post request to get it to work. I need help troubleshooting on where to begin looking for my issue. This is my…
Prokie
  • 66
  • 7
0
votes
1 answer

Problem with NGINX Ingress Controller auth-signin and server-snippet with error_page for custom error redirects

I am trying to redirect from default NGINX error pages to custom error pages without customising the default backend as follows: nginx.ingress.kubernetes.io/server-snippet: | error_page 404 "https://example.com/404"; error_page 403…
0
votes
1 answer

Use parameters from regex with Nginx auth-url

I use Ingress Nginx in my kubernetes cluster. I use Keycloak to manage users and groups, and oauth2-proxy. I filter access to some resources like : User must belong to group1 to access my.app.com/resources/group1/page.html I'm able to enforce group…
peppie
  • 35
  • 7
0
votes
1 answer

Guidance required - am I missing app ingress annotation or is my oauth2-proxy config wrong?

I have an old version of oauth2-proxy (v5.1.0) deployed into our AWS EKS v1.21 cluster and this works great for Azure AD authentication. Now, I am testing upgrading to new(er) v7.1.3 as the old oauth2-proxy uses deprecated APIs that the next version…