lua-resty-openidc
Nginx-Lua-OAuth
Our great sponsors
lua-resty-openidc | Nginx-Lua-OAuth | |
---|---|---|
3 | 1 | |
926 | 6 | |
1.0% | - | |
2.5 | 2.8 | |
about 2 months ago | 5 months ago | |
Lua | Lua | |
Apache License 2.0 | - |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
lua-resty-openidc
-
Keycloak – Open-Source Identity and Access Management Interview
There's an nginx Lua build that can do it on nginx through a Lua module: https://github.com/zmartzone/lua-resty-openidc
Apache is a lot easier to configure, though.
-
What Are Your Most Used Self Hosted Applications?
Yes, I believe the way to do it with the free version is to use this: https://github.com/zmartzone/lua-resty-openidc
You'd have to be careful with custom code like this, though, because it's very easy to try to get the server to send a redirect but end up sending actual content that just has its HTTP status code changed to 301. The example seems to fail with 500 instead of redirecting, that's one way to do it.
- How do you handle the apps (e.g., open source tools) that do not have built-in SSO support?
Nginx-Lua-OAuth
-
How do you handle the apps (e.g., open source tools) that do not have built-in SSO support?
For an application hosted on prem, I wrote a lua application that works with nginx to authenticate against GitHub using OAuth: https://github.com/schlueter/Nginx-Lua-OAuth. Setting that up, publicly exposed, and then proxy pass to the application you want to restrict access to on a private network. Works great, and it should be relatively easy to fork and use with any other OAuth or other provider.
What are some alternatives?
oauth2-proxy - A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
lua-resty-auto-ssl - On the fly (and free) SSL registration and renewal inside OpenResty/nginx with Let's Encrypt.
Kong - 🦍 The Cloud-Native API Gateway and AI Gateway.
apisix - The Cloud-Native API Gateway
nginx-lua-prometheus - Prometheus metric library for Nginx written in Lua
nginx-openid-connect - Reference implementation of OpenID Connect integration for NGINX Plus
terraform-provider-keycloak - Terraform provider for Keycloak
zitadel - ZITADEL - The best of Auth0 and Keycloak combined. Built for the serverless era.
typescript - Typescript packages and application to showcase the ZITADEL resource API
Joplin - Joplin - the secure note taking and to-do app with synchronisation capabilities for Windows, macOS, Linux, Android and iOS.
homeserver-traefik-portainer - My homeserver setup. Everything managed securely using Portainer.