terraform-provider-keycloak
lua-resty-openidc
| terraform-provider-keycloak | lua-resty-openidc | |
|---|---|---|
| 1 | 3 | |
| 577 | 930 | |
| - | 1.1% | |
| 6.4 | 2.5 | |
| 25 days ago | 2 months ago | |
| Go | Lua | |
| MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
terraform-provider-keycloak
-
Keycloak – Open-Source Identity and Access Management Interview
The Terraform provider[1] unfortunately is 3rd party and as such doesn't bring and guarantees of correctness other than that of the maintainer. It would be nice to see Keycloak provide an official solution for configuration management other than the K8s operator which is missing a lot of features.
[1] https://github.com/mrparkers/terraform-provider-keycloak
lua-resty-openidc
-
Keycloak – Open-Source Identity and Access Management Interview
There's an nginx Lua build that can do it on nginx through a Lua module: https://github.com/zmartzone/lua-resty-openidc
Apache is a lot easier to configure, though.
-
What Are Your Most Used Self Hosted Applications?
Yes, I believe the way to do it with the free version is to use this: https://github.com/zmartzone/lua-resty-openidc
You'd have to be careful with custom code like this, though, because it's very easy to try to get the server to send a redirect but end up sending actual content that just has its HTTP status code changed to 301. The example seems to fail with 500 instead of redirecting, that's one way to do it.
- How do you handle the apps (e.g., open source tools) that do not have built-in SSO support?
What are some alternatives?
typescript - Typescript packages and application to showcase the ZITADEL resource API
oauth2-proxy - A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
private_server - This is the configuration for my private server, with the intention of never having to use manual SSH.
Nginx-Lua-OAuth
keycloak-config-cli - Import YAML/JSON-formatted configuration files into Keycloak - Configuration as Code for Keycloak.
lua-resty-auto-ssl - On the fly (and free) SSL registration and renewal inside OpenResty/nginx with Let's Encrypt.
nginx-openid-connect - Reference implementation of OpenID Connect integration for NGINX Plus
Kong - 🦍 The Cloud-Native API Gateway and AI Gateway.
casdoor - An open-source UI-first Identity and Access Management (IAM) / Single-Sign-On (SSO) platform with web UI supporting OAuth 2.0, OIDC, SAML, CAS, LDAP, SCIM, WebAuthn, TOTP, MFA and RADIUS [Moved to: https://github.com/casdoor/casdoor]
apisix - The Cloud-Native API Gateway
keycloak-clojure - A Clojure library helping the integration of Keycloak with a Clojure Application + a sample SPA Client and API Server demonstrating the Keycloak integration
nginx-lua-prometheus - Prometheus metric library for Nginx written in Lua