OIDC Loginproxy
a project by toe
Updated 6 months ago. 1 hackers ♥️. 1 follower.

Description

Reverse proxies can be a useful option to separate authentication logic from application logic. SUSE and openSUSE use "loginproxies" as an authentication layer in front of several services.

Currently, loginproxies exist which support LDAP authentication or SAML authentication.

Goals

The goal of this Hack Week project is, to create another loginproxy which supports OpenID Connect authentication which can then act as a drop-in replacement for the existing LDAP or SAML loginproxies.

Testing is intended to focus on the integration with OIDC IDPs from Okta, KanIDM and Authentik.

Resources

Join this project

Looking for hackers with the skills:

authentication security loginproxy kanidm authentik okta oidc openid iam idp

This project is part of:

Hack Week 24

Activity

  • 6 months ago: toe removed keyword openidconnect from this project.
  • 6 months ago: toe added keyword "iam" to this project.
  • 6 months ago: toe added keyword "idp" to this project.
  • 6 months ago: hennevogel liked this project.
  • 6 months ago: toe started this project.
  • 6 months ago: toe added keyword "oidc" to this project.
  • 6 months ago: toe added keyword "openid" to this project.
  • 6 months ago: toe added keyword "authentication" to this project.
  • 6 months ago: toe added keyword "security" to this project.
  • 6 months ago: toe added keyword "loginproxy" to this project.
  • 6 months ago: toe added keyword "kanidm" to this project.
  • 6 months ago: toe added keyword "authentik" to this project.
  • 6 months ago: toe added keyword "okta" to this project.
  • 6 months ago: toe added keyword "openidconnect" to this project.
  • 6 months ago: toe originated this project.


    • Comments

    • hellcp
      6 months ago by hellcp | Reply

      A related issue: https://progress.opensuse.org/issues/122254

    • crameleon
      6 months ago by crameleon | Reply

      The current LDAP login proxy uses modauthmemcookie. This would be a drop-in replacement: https://www.mod-auth-openidc.org/.

      • toe
        5 months ago by toe | Reply

        Thank you. Yes, mod_auth-openidc was one of the options I ended up looking into. The other was oauth2-proxy.

    Similar Projects

    This project is one of its kind!