frank/ghost-oauth
frank/ghost-oauth
Watch
1
0
Fork
You've already forked ghost-oauth
 0
Code Issues 14 Pull requests Projects Releases Packages Wiki Activity Actions

Configuration of for the forward auth mode #33

New issue
Closed
opened 2026-07-24 10:23:01 +00:00 by frank · 0 comments
frank commented 2026-07-24 10:23:01 +00:00
Owner
Copy link

Goal

Define the configuration for forward-auth mode in a way that can later support additional authentication modes without breaking the shared configuration structure.

Requirements

  • Add an explicit authentication mode.
  • Define forward-auth-specific configuration separately from shared configuration.
  • Support configurable email, username and groups headers.
  • Support optional required group membership.
  • Validate required values when the adapter starts.
  • Reject unknown or incompatible configuration values.

Acceptance criteria

  • Forward-auth mode can be selected explicitly.
  • Header names are configurable.
  • Invalid forward-auth configuration fails during startup.
  • Mode-specific settings do not leak into the shared configuration.
  • JWT and OIDC configuration can later be added without changing the forward-auth contract.
## Goal Define the configuration for forward-auth mode in a way that can later support additional authentication modes without breaking the shared configuration structure. ## Requirements * Add an explicit authentication mode. * Define forward-auth-specific configuration separately from shared configuration. * Support configurable email, username and groups headers. * Support optional required group membership. * Validate required values when the adapter starts. * Reject unknown or incompatible configuration values. ## Acceptance criteria * [x] Forward-auth mode can be selected explicitly. * [x] Header names are configurable. * [x] Invalid forward-auth configuration fails during startup. * [x] Mode-specific settings do not leak into the shared configuration. * [x] JWT and OIDC configuration can later be added without changing the forward-auth contract.
frank added this to the Forward Auth mode milestone 2026-07-24 10:23:01 +00:00
frank added reference feat/forward-auth-adapter 2026-07-24 15:39:51 +00:00
frank closed this issue 2026-07-24 22:57:10 +00:00
Sign in to join this conversation.
feat/forward-auth-adapter
Branches Tags
Clear current reference
dev
feat/forward-auth-adapter
docs/clean-up-ai-docs
main
Clear current reference
No results found.
Labels
Clear labels   
area/core
Core adapter and configuration implementation

  
area/integration
Proxy, identity-provider, and deployment integrations

  
area/release
Packaging and publication

  
security
Trust boundaries, access control, or security-sensitive behavior

  
type/bug
Defect or incorrect behavior

  
type/docs
Documentation work

  
type/epic
Parent issue coordinating related deliverables

  
type/feature
New feature or capability

  
type/infrastructure
Build, packaging, CI/CD, or release infrastructure

  
type/test
Automated test coverage

No labels
area/core
area/integration
area/release
security
type/bug
type/docs
type/epic
type/feature
type/infrastructure
type/test
Milestone
Clear milestone
No items
No milestone
Forward Auth mode
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
frank/ghost-oauth#33
No description provided.