nginx-openid-connect vs terraform-provider-keycloak

With SurveyJS form UI libraries, you can build and style forms in a fully-integrated drag & drop form builder, render them in your JS app, and store form submission data in any backend, inc. PHP, ASP.NET Core, and Node.js.

surveyjs.io

featured

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

nginx-openid-connect		terraform-provider-keycloak
	Project
9	Mentions	1
188	Stars	575
1.1%	Growth	-
2.5	Activity	6.4
17 days ago	Latest Commit	13 days ago
JavaScript	Language	Go
GNU General Public License v3.0 or later	License	MIT License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

nginx-openid-connect

Posts with mentions or reviews of nginx-openid-connect. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-06-18.

OIDC filter
1 project | /r/AZURE | 23 Jul 2023

Could you please suggest an OIDC filter/side-car which is capable of configure it with a custom IDP? Nginx Plus has a OIDC filter https://github.com/nginxinc/nginx-openid-connect and looking for a similar solution. I am planning to use AKS for api and Web compute. Thanks!
Keycloak – Open-Source Identity and Access Management Interview
26 projects | news.ycombinator.com | 18 Jun 2023

> With both Apache and Nginx you can let the web server do all the OpenID Connect work for you for paths you specify.
Seems like at least the official nginx solution for this requires their paid subscription: https://github.com/nginxinc/nginx-openid-connect
Got any tips for how to do it with their open-source solution?
User friendly reverse proxy suitable for production
2 projects | /r/selfhosted | 3 Jun 2023
Cosmos-Server now in version 0.3.0 with 2 Factor Authentication: A User-Friendly, Self-Hosted Alternative to using Cloudflare Tunnel to secure your applications
1 project | /r/selfhosted | 2 May 2023

It's not a matter of better or worst security than Traefik or NGINX, it's that if you do not have entreprise level licence for those software, you don't actually have the security modules that protect your services (ex. https://www.nginx.com/products/nginx/) Cosmos includes a WAF by default without subscription
Microsites/apps (?) with NextJS
1 project | /r/nextjs | 5 Jan 2023
Where and how do you store your access_token and refresh_token in Oauth2.0 authorization flow?
1 project | /r/reactjs | 3 Dec 2022

You can scale up it with side car pattern with K8. One product you can use is https://github.com/nginxinc/nginx-openid-connect and if you Azure they have a built in capability as well. I haven't worked with AWS for a while but probably they will have an equal solution.
Proper way to proxy all calls to an external API through the Next.js server? (Make SSR components work with client auth cookies)
1 project | /r/nextjs | 28 Nov 2022
Is it possible to control some parameters of Nginx programatically
3 projects | /r/nginx | 7 Apr 2022

You could purchase NGINX Plus which allows many things to be configured via API calls.
Azure AD Authentication
2 projects | /r/nginx | 31 Jan 2022

If you have an active Nginx plus subscription the OIDC implementation will help. https://github.com/nginxinc/nginx-openid-connect

terraform-provider-keycloak

Posts with mentions or reviews of terraform-provider-keycloak. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2023-06-18.

Keycloak – Open-Source Identity and Access Management Interview
26 projects | news.ycombinator.com | 18 Jun 2023

The Terraform provider[1] unfortunately is 3rd party and as such doesn't bring and guarantees of correctness other than that of the maintainer. It would be nice to see Keycloak provide an official solution for configuration management other than the K8s operator which is missing a lot of features.
[1] https://github.com/mrparkers/terraform-provider-keycloak

What are some alternatives?

When comparing nginx-openid-connect and terraform-provider-keycloak you can also consider the following projects:

oauth2-proxy - A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

typescript - Typescript packages and application to showcase the ZITADEL resource API

cloudfront-auth - An AWS CloudFront Lambda@Edge function to authenticate requests using Google Apps, Microsoft, Auth0, OKTA, and GitHub login

private_server - This is the configuration for my private server, with the intention of never having to use manual SSH.

crossplane - Quick and reliable way to convert NGINX configurations into JSON and back.

lua-resty-openidc - OpenID Connect Relying Party and OAuth 2.0 Resource Server implementation in Lua for NGINX / OpenResty

keycloak-config-cli - Import YAML/JSON-formatted configuration files into Keycloak - Configuration as Code for Keycloak.

casdoor - An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA and RADIUS [Moved to: https://github.com/casdoor/casdoor]

nginx-wrapper - NGINX Event Process Wrapper

keycloak-clojure - A Clojure library helping the integration of Keycloak with a Clojure Application + a sample SPA Client and API Server demonstrating the Keycloak integration