Extended oauth2-proxy integration examples #41

New issue

Open

opened 2026-07-24 11:06:46 +00:00 by frank · 0 comments

frank commented

2026-07-24 11:06:46 +00:00

Owner

Goal

Extend the exemplary forward-auth setup with:

oauth2-proxy and Kanidm
oauth2-proxy and Authentik

These setups should demonstrate that NiceOAuthForwardAuth works with different identity providers behind oauth2-proxy.

Sub-tasks

#42 Create the Kanidm setup.
#43 Create the Authentik setup.
#44 Add shared integration tests and documentation.

Acceptance criteria

Both setups start reproducibly with Docker Compose.
Both use oauth2-proxy to forward identity headers.
Authorized users can access existing Ghost staff accounts.
Unauthorized, unknown and forged identities are rejected.
Both setups pass the shared integration test suite.
The existing Caddy + Authelia example remains the baseline use case.

## Goal Extend the exemplary forward-auth setup with: * oauth2-proxy and Kanidm * oauth2-proxy and Authentik These setups should demonstrate that `NiceOAuthForwardAuth` works with different identity providers behind oauth2-proxy. ## Sub-tasks * [ ] #42 Create the Kanidm setup. * [ ] #43 Create the Authentik setup. * [ ] #44 Add shared integration tests and documentation. ## Acceptance criteria * [ ] Both setups start reproducibly with Docker Compose. * [ ] Both use oauth2-proxy to forward identity headers. * [ ] Authorized users can access existing Ghost staff accounts. * [ ] Unauthorized, unknown and forged identities are rejected. * [ ] Both setups pass the shared integration test suite. * [ ] The existing Caddy + Authelia example remains the baseline use case.

frank added this to the Forward Auth mode milestone

2026-07-24 11:06:46 +00:00

frank added a new dependency

2026-07-24 11:17:32 +00:00

#42 oauth2-proxy + Kanidm

frank added a new dependency

2026-07-24 11:17:37 +00:00

#43 Create oauth2-proxy + Authentik

frank added a new dependency

2026-07-24 11:17:43 +00:00

#44 Test and document oauth2-proxy integrations

frank added the