Keycloak – Open-Source Identity and Access Management Interview

Re:Keycloak – Open-Source Identity and Access Management Int... by SahAssar on Monday June 19, 2023 @05:25AM (#36389021)

> With both Apache and Nginx you can let the web server do all the OpenID Connect work for you for paths you specify.

Seems like at least the official nginx solution for this requires their paid subscription: https://github.com/nginxinc/nginx-openid-connect

Got any tips for how to do it with their open-source solution?

[ Parent | on HN ]

Re:Keycloak – Open-Source Identity and Access Management Int... by jeroenhd on Monday June 19, 2023 @10:39AM (#36391561)

There's an nginx Lua build that can do it on nginx through a Lua module: https://github.com/zmartzone/lua-resty-openidc

Apache is a lot easier to configure, though.

[ Parent | on HN ]

Re:Keycloak – Open-Source Identity and Access Management Int... by SahAssar on Monday June 19, 2023 @12:13PM (#36392744)

Gotcha, I tend to think of openresty as more of an nginx-based-application-platform than just as nginx.

[ Parent | on HN ]