frank/ghost-oauth
frank/ghost-oauth
Watch
1
0
Fork
You've already forked ghost-oauth
 0
Code Issues 14 Pull requests Projects Releases Packages Wiki Activity Actions

oauth2-proxy + Kanidm #42

New issue
Open
opened 2026-07-24 11:09:45 +00:00 by frank · 0 comments
frank commented 2026-07-24 11:09:45 +00:00
Owner
Copy link

Goal

Create a reproducible Docker Compose setup using Kanidm as the identity provider for oauth2-proxy.

Requirements

  • Configure Kanidm as an OIDC provider.
  • Configure oauth2-proxy to authenticate against Kanidm.
  • Forward the required identity and group headers.
  • Reuse the existing Ghost and Caddy example where possible.

Acceptance criteria

  • The setup starts with Docker Compose.
  • Kanidm users can authenticate through oauth2-proxy.
  • Identity and group headers reach NiceOAuthForwardAuth.
  • Local test users and non-production secrets are included.
## Goal Create a reproducible Docker Compose setup using Kanidm as the identity provider for oauth2-proxy. ## Requirements * Configure Kanidm as an OIDC provider. * Configure oauth2-proxy to authenticate against Kanidm. * Forward the required identity and group headers. * Reuse the existing Ghost and Caddy example where possible. ## Acceptance criteria * [ ] The setup starts with Docker Compose. * [ ] Kanidm users can authenticate through oauth2-proxy. * [ ] Identity and group headers reach `NiceOAuthForwardAuth`. * [ ] Local test users and non-production secrets are included.
frank added this to the Forward Auth mode milestone 2026-07-24 11:09:45 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
dev
feat/forward-auth-adapter
docs/clean-up-ai-docs
main
No results found.
Labels
Clear labels   
area/core
Core adapter and configuration implementation

  
area/integration
Proxy, identity-provider, and deployment integrations

  
area/release
Packaging and publication

  
security
Trust boundaries, access control, or security-sensitive behavior

  
type/bug
Defect or incorrect behavior

  
type/docs
Documentation work

  
type/epic
Parent issue coordinating related deliverables

  
type/feature
New feature or capability

  
type/infrastructure
Build, packaging, CI/CD, or release infrastructure

  
type/test
Automated test coverage

No labels
area/core
area/integration
area/release
security
type/bug
type/docs
type/epic
type/feature
type/infrastructure
type/test
Milestone
Clear milestone
No items
No milestone
Forward Auth mode
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Blocks
#41 Extended oauth2-proxy integration examples
frank/ghost-oauth
Reference
frank/ghost-oauth#42
No description provided.