Skip to content

janivihervas/authproxy

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

36 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

JWT authentication proxy

UNDER CONSTRUCTION, NOT READY TO BE USED YET

CircleCI codecov

Go Report Card GoDoc Sponsored

Use cases:

  • As a standalone application (reverse proxy) for authenticating requests to your application
  • As a Go middleware for authenticating requests to your server

Features:

  • Validating JWT access tokens
  • Refreshing JWT access tokens with refresh tokens

Works the same way as bitly/oauth2_proxy but with a few additions:

  • Refreshes access tokens.
  • Haves an option of not redirecting every request to OIDC/OAuth2 provider's login page. E.g. redirecting API calls with expired authentication from frontend login page doesn't work. Requests not redirected to the login page will receive a response with 401 or 403 as status code and a JSON with redirectUrl field so the frontend can redirect the browser itself.
  • Redirects back to original url once authentication is renewed

See flow diagram for details.

About

Reverse proxy for JWT authentication

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published