News for hackers. Stuff that matters.

A comment on Authelia is an open-source authentication/authorization server with 2FA/SSO.

Re:Authelia is an open-source authentication/authorization s... by 411111111111111 on Wednesday March 10, 2021 @06:51AM (#26410287)
The only sso provider I've really used is keycloak, so I am looking forward to having more lightweight alternative in this domain! though it doesn't seem to be a oidc server yet.

What confused me a little is that it aims to put the authentication into the proxy layer, which sounds awesome... But I haven't been able to figure out from the docs how I'd be able to identify the user in my application now?

/Edit: it's set as a header and can be verified it seems

https://www.authelia.com/docs/deployment/supported-proxies/#...

[ Parent | on HN ]
Re:Authelia is an open-source authentication/authorization s... by rad_gruchalski on Wednesday March 10, 2021 @08:02AM (#26410780)
With the ory platform one could use their oathkeeper but also Traefik with forward auth plugin would work. The latter gives more options. Food for thought, I’m sure Traefik forward auth would work here too.
[ Parent | on HN ]
Re:Authelia is an open-source authentication/authorization s... by James-E on Wednesday March 10, 2021 @05:24PM (#26417236)
One of the Authelia devs here. This is correct. Also we're looking to implement OIDC/OAuth2.0 provider functionality. It has been somewhat delayed by COVID19, specifically additional personal burdens that arose because of it.
[ Parent | on HN ]