News for hackers. Stuff that matters.

A comment on Authelia is an open-source authentication/authorization server with 2FA/SSO. Parent comment

Re:Authelia is an open-source authentication/authorization s... by hardwaresofton on Wednesday March 10, 2021 @09:19AM (#26411457)
I actually did exclude those on purpose, because I think they're somewhat out of scope -- arguably the point of running something like Authelia/Keratin/Dex/Keycloak/etc is to not write a single line of auth code, even if it's just wiring up a module/component.

That said, here are some more in the space that I personally have earmarked:

- (all-in-one) jsso2[0]

- (all-in-one, embeddable) a12n-server[1]

- (embeddable) node-oidc-provider[2]

- (embeddable) node-oauth2-server[3]

- (all-in-one, embeddable) authboss[4]

- (proxy) vouch-proxy for NGINX[5]

- (proxy) Grant with support for over 200 provider (!!)[6]

[0]: https://github.com/jrockway/jsso2

[1]: https://github.com/curveball/a12n-server

[2]: https://github.com/panva/node-oidc-provider

[3]: https://github.com/oauthjs/node-oauth2-server

[4]: https://github.com/volatiletech/authboss

[5]: https://github.com/vouch/vouch-proxy

[6]: https://github.com/simov/grant

[ Parent | on HN ]
Re:Authelia is an open-source authentication/authorization s... by core-questions on Wednesday March 10, 2021 @05:56PM (#26417590)
I am using vouch-proxy as it is a very simple addon that lets me use my existing OpenID Connect compatible IDP for authentication on anything fronted by Nginx. This works really well for services not really designed to have their own auth.

The only downside is that it seems to require a second DNS entry for the vouch portion of the process. Awkward configuration in some ways. But, the price is right, and the Nginx config is reasonably clean once you understand what it's doing.

[ Parent | on HN ]