Add forward-auth security integration tests #38

New issue

Open

opened 2026-07-24 10:51:45 +00:00 by frank · 0 comments

frank commented

2026-07-24 10:51:45 +00:00

Owner

Goal

Add automated tests verifying that the example deployment enforces its security assumptions.

Requirements

Test at least:

unauthenticated access
authorized access
unauthorized access
missing identity headers
forged identity headers
direct Ghost access bypassing Caddy
removal of external access

Acceptance criteria

Authorized users can reach Ghost Admin.
Unauthenticated users are rejected.
Unauthorized users are rejected.
Forged headers do not grant access.
Ghost cannot be reached directly.
Tests run against the same Docker Compose setup used in the documentation.
Tests can run from a clean checkout.

## Goal Add automated tests verifying that the example deployment enforces its security assumptions. ## Requirements Test at least: * unauthenticated access * authorized access * unauthorized access * missing identity headers * forged identity headers * direct Ghost access bypassing Caddy * removal of external access ## Acceptance criteria * [ ] Authorized users can reach Ghost Admin. * [ ] Unauthenticated users are rejected. * [ ] Unauthorized users are rejected. * [ ] Forged headers do not grant access. * [ ] Ghost cannot be reached directly. * [ ] Tests run against the same Docker Compose setup used in the documentation. * [ ] Tests can run from a clean checkout.

frank referenced this issue

2026-07-24 10:52:12 +00:00

Exemplary setup via Authelia + Caddy #35

frank added a new dependency

2026-07-24 10:52:23 +00:00

#35 Exemplary setup via Authelia + Caddy

frank added this to the Forward Auth mode milestone

2026-07-24 10:53:01 +00:00

frank added the

type/test

area/integration

security