News for hackers. Stuff that matters.

A comment on Vaultwarden commit introduces SSO using OpenID Connect. Parent comment

Re:Vaultwarden commit introduces SSO using OpenID Connect by samgnesin on Friday August 15, 2025 @03:37PM (#44916560)
Pocket ID[1] is what I use, and I cannot recommend it enough. It's an incredible project.

[1] https://pocket-id.org

[ Parent | on HN ]
Re:Vaultwarden commit introduces SSO using OpenID Connect by udev4096 on Saturday August 16, 2025 @02:00AM (#44920618)
Love pocket-id. Do you use oauth2-proxy with it? How did you set up oauth2-proxy to work with multiple apps?
[ Parent | on HN ]
Re:Vaultwarden commit introduces SSO using OpenID Connect by carlhjerpe on Saturday August 16, 2025 @08:05AM (#44922520)
I've dabbled in oauth2-proxy but I'm not running it currently. I recall my goto was launching one instance per remote i want to target.
[ Parent | on HN ]
Re:Vaultwarden commit introduces SSO using OpenID Connect by udev4096 on Saturday August 16, 2025 @08:19AM (#44922617)
Yeah that's hard to scale when you have lots of services. For now, I am running multiple instances of oauth2-proxy instances and assigning user groups in pocket-id. How do you deal with apps not having native OIDC support?
[ Parent | on HN ]
Re:Vaultwarden commit introduces SSO using OpenID Connect by gh02t on Saturday August 16, 2025 @11:01AM (#44924057)
I used to use oauth2-proxy with PocketID, but migrated to caddy-security for stuff that doesn't directly support OIDC as part of a general move to Caddy. It's nice not needing the sidecar container, though the docs for caddy-security are a bit confusing and I still find Caddy's whole approach to plugins a bit... odd. It does give you quite a lot of flexibility once you figure it out, and I think it was worthwhile after the initial learning period.
[ Parent | on HN ]