go/oauth2-proxy
1
0
Fork 0
mirror of https://github.com/oauth2-proxy/oauth2-proxy.git synced 2024-11-24 08:52:25 +02:00
Code Issues Releases Activity
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
2 Commits 27 Branches 34 Tags 79 MiB
Go 98.2%
Makefile 0.7%
HTML 0.5%
Shell 0.3%
Dockerfile 0.3%
fb636396a3
Go to file
Jehiah Czebotar fb636396a3 initial code import
2012-12-10 20:59:23 -05:00
.gitignore initial code import 2012-12-10 20:59:23 -05:00
cookies.go initial code import 2012-12-10 20:59:23 -05:00
htpasswd.go initial code import 2012-12-10 20:59:23 -05:00
main.go initial code import 2012-12-10 20:59:23 -05:00
oauthproxy.go initial code import 2012-12-10 20:59:23 -05:00
README.md initial code import 2012-12-10 20:59:23 -05:00
string_array.go initial code import 2012-12-10 20:59:23 -05:00
templates.go initial code import 2012-12-10 20:59:23 -05:00
validator.go initial code import 2012-12-10 20:59:23 -05:00

README.md

google_auth_proxy

A reverse proxy that acts as an authentication layer using Google Oauth2 to validate individual accounts, or a whole google apps domain.

Structure

    _______       ___________________       __________
    |Nginx| ----> |google_auth_proxy| ----> |upstream| 
    -------       -------------------       ----------
                          ||
                          \/
                  [google oauth2 api]

Configuration

  1. visit to Google Api Console https://code.google.com/apis/console/
  2. under "API Access", choose "Create an OAuth 2.0 Client ID"
  3. Edit the application settings, and list the Redirect URI(s) where you will run your application. For example: https://internalapp.yourcompany.com/oauth2/callback

Usage

Usage of ./google_auth_proxy:
  -authenticated-emails-file="": authenticate against emails via file (one per line)
  -client-id="": the Google OAuth Client ID: ie: "123456.apps.googleusercontent.com"
  -client-secret="": the OAuth Client Secret
  -cookie-domain="": an optional cookie domain to force cookies to
  -cookie-secret="": the seed string for secure cookies
  -google-apps-domain="": authenticate against the given google apps domain
  -htpasswd-file="": additionally authenticate against a htpasswd file. Entries must be created with "htpasswd -s" for SHA encryption
  -http-address="0.0.0.0:4180": <addr>:<port> to listen on for HTTP clients
  -pass-basic-auth=true: pass HTTP Basic Auth information to upstream
  -redirect-url="": the OAuth Redirect URL. ie: "https://internalapp.yourcompany.com/oauth2/callback"
  -upstream=[]: the http url(s) of the upstream endpoint. If multiple, routing is based on path
  -version=false: print version string

Unauthenticated requests will be redirected to /oauth2/sign_in to start the sign-in process.