Show HN: Obligator – An OpenID Connect server for self-hosters

• obligator

  7 612 9.0 Go

  Simple and opinionated OpenID Connect server designed for self-hosters

  

Sorry, this is indeed not very clear. Others already answered well, but if you look at the example[0] config you can see how you would use your own instance of obligator as a client to the instance running at lastlogin.io. This is a bit meta, but applies equally to any client application.

[0]: https://github.com/anderspitman/obligator#running-it

• OpenID

  10 947 9.3 C

  OpenID Certified™ OpenID Connect Relying Party implementation for Apache HTTP Server 2.x

  

Personally I went with Keycloak, because it's fairly well documented and also has Docker images available: https://www.keycloak.org/getting-started/getting-started-doc... although the fact that they want you to create an "optimized" image yourself and have a long build/setup process on startup instead is slightly annoying: https://www.keycloak.org/server/containers

Regardless, with something like mod_auth_openidc or another Relying Party implementation, all of the sudden authn/authz becomes easier to manage (you can literally get user information including roles in headers that are passed from your gateway/relying party to apps behind the reverse proxy), regardless of what you have actually running in your APIs: https://github.com/OpenIDC/mod_auth_openidc (there are other options, of course, but I went with that because I already use mod_md).

It's actually cool that there are plentiful options in the space, since OIDC is pretty complex in of itself and attempts at creating something pleasant to actually use are always welcome, I've also heard good things about Authentik: https://goauthentik.io/

• WorkOS

  workos.com sponsored

  The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

  

• authentik

  165 6,762 10.0 Go

  The authentication glue you need.

  

Personally I went with Keycloak, because it's fairly well documented and also has Docker images available: https://www.keycloak.org/getting-started/getting-started-doc... although the fact that they want you to create an "optimized" image yourself and have a long build/setup process on startup instead is slightly annoying: https://www.keycloak.org/server/containers

Regardless, with something like mod_auth_openidc or another Relying Party implementation, all of the sudden authn/authz becomes easier to manage (you can literally get user information including roles in headers that are passed from your gateway/relying party to apps behind the reverse proxy), regardless of what you have actually running in your APIs: https://github.com/OpenIDC/mod_auth_openidc (there are other options, of course, but I went with that because I already use mod_md).

It's actually cool that there are plentiful options in the space, since OIDC is pretty complex in of itself and attempts at creating something pleasant to actually use are always welcome, I've also heard good things about Authentik: https://goauthentik.io/

• dex

  37 9,025 9.4 Go

  OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors

  

• Ory Kratos

  41 10,564 9.6 Go

  Next-gen identity server replacing your Auth0, Okta, Firebase with hardened security and PassKeys, SMS, OIDC, Social Sign In, MFA, FIDO, TOTP and OTP, WebAuthn, passwordless and much more. Golang, headless, API-first. Available as a worry-free SaaS with the fairest pricing on the market! (by ory)

  

I was expecting hydra / kratos to show up as an alternative.. but did not see any. Does any have any experience, good or bad about it?

https://github.com/ory/kratos

• node-oidc-provider

  15 3,019 8.3 JavaScript

  OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js

I could recommend https://github.com/panva/node-oidc-provider supports most of the oidc/oauth 2 rabbit hole specs.

• traefik-forward-auth

  32 2,005 0.0 Go

  Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy

• InfluxDB

  www.influxdata.com sponsored

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• portier-broker

  1 548 8.9 Rust

  Portier Broker reference implementation, written in Rust

  

This looks like it has the same core functionality as Portier? https://github.com/portier/portier-broker

I'm on mobile, so haven't really checked where we differ in details.

• zitadel

  80 7,050 9.8 Go

  ZITADEL - The best of Auth0 and Keycloak combined. Built for the serverless era.

  

• Keycloak

  229 19,857 10.0 Java

  Open Source Identity and Access Management For Modern Applications and Services

  

• podman-networking-docs

  2 18 6.3

  rootless Podman networking documentation with examples

Here are some documentation and demos from me and others if you're interested:

https://github.com/eriksjolund/podman-networking-docs

• podman-nginx-socket-activation

  10 16 7.8 Shell

  Demo of how to run socket-activated nginx with Podman

https://github.com/eriksjolund/podman-nginx-socket-activatio...

• podman-nginx-socket-activatio

  1 - -

https://github.com/eriksjolund/podman-nginx-socket-activatio...

• mariadb-podman-socket-activation

  5 15 2.4

  Demo of a templated systemd user service that runs rootless Podman and starts MariaDB with socket activation

https://github.com/eriksjolund/mariadb-podman-socket-activat...

• mariadb-podman-socket-activat

  2 - -

https://github.com/eriksjolund/mariadb-podman-socket-activat...

• podman-socket-activated-services

  1 2 7.4 Dockerfile

  Various podman container services configured to support running with systemd socket-activation

https://github.com/PhracturedBlue/podman-socket-activated-se...

• podman-socket-activated-se

  1 - -

https://github.com/PhracturedBlue/podman-socket-activated-se...

• SaaSHub

  www.saashub.com sponsored

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

Suggest a related project