Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Auth proxy (authenticate user by incoming HTTP header) #534

Closed
yegle opened this issue Dec 22, 2019 · 2 comments · Fixed by #570
Closed

Auth proxy (authenticate user by incoming HTTP header) #534

yegle opened this issue Dec 22, 2019 · 2 comments · Fixed by #570

Comments

@yegle
Copy link

yegle commented Dec 22, 2019

This is a feature request to implement something like https://grafana.com/docs/grafana/latest/auth/auth-proxy/

This is convenient if you are using something like pomerium.io as the reverse proxy to miniflux.

@pborzenkov
Copy link
Contributor

I'd like to work on this issue, as this is something I need as well.

fguillot pushed a commit that referenced this issue Feb 25, 2020
Auth Proxy allows to authenticate a user using an HTTP header provided
by an external authentication service. This provides a way to
authenticate users in miniflux using authentication schemes not
supported by miniflux itself (LDAP, non-Google OAuth2 providers, etc.)
and to implement SSO for multiple applications behind single
authentication service.

Auth Proxy header is checked for the '/' endpoint only, as the rest are
protected by the miniflux user/app sessions.

Closes #534

Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>
@yegle
Copy link
Author

yegle commented Feb 25, 2020

This is awesome! Thank you for fixing this issue.

Can't wait to test this out.

1pav pushed a commit to 1pav/miniflux that referenced this issue Jan 31, 2021
Auth Proxy allows to authenticate a user using an HTTP header provided
by an external authentication service. This provides a way to
authenticate users in miniflux using authentication schemes not
supported by miniflux itself (LDAP, non-Google OAuth2 providers, etc.)
and to implement SSO for multiple applications behind single
authentication service.

Auth Proxy header is checked for the '/' endpoint only, as the rest are
protected by the miniflux user/app sessions.

Closes miniflux#534

Signed-off-by: Pavel Borzenkov <pavel.borzenkov@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging a pull request may close this issue.

2 participants