Minimal forward authentication service that provides Google/OpenID oauth based login and authentication for the traefik reverse proxy (by thomseddon)


Basic traefik-forward-auth repo stats
3 months ago

thomseddon/traefik-forward-auth is an open source project licensed under MIT License which is an OSI approved license.

Traefik-forward-auth Alternatives

Similar projects and alternatives to traefik-forward-auth

  • GitHub repo authelia

    The Single Sign-On Multi-Factor portal for web apps

  • GitHub repo oauth2-proxy

    A reverse proxy that provides authentication with Google, Github or other providers.

  • GitHub repo vouch-proxy

    an SSO and OAuth / OIDC login solution for Nginx using the auth_request module

  • GitHub repo louketo-proxy

    A OpenID / Proxy service

  • GitHub repo Traefik-with-Pomerium-Forward-Auth-and-Proxy-on-Kubernetes-with-Helm

    Traefik with Pomerium in Forward Auth and Proxy mode on Kubernetes with Helm/Helmfile

  • GitHub repo boreale

    :evergreen_tree: A very lightweight authentication service for Traefik

  • GitHub repo Synology-Docker-Mediaserver

    Working Docker media server containers running on Synology, served by Traefik with oAuth (and oAuth bypass for NZB360 etc.)

  • GitHub repo mistborn

NOTE: The number of mentions on this list indicates mentions on common posts. Hence, a higher number means a better traefik-forward-auth alternative or higher similarity.


Posts where traefik-forward-auth has been mentioned. We have used some of these posts to build our list of alternatives and similar projects - the last one was on 2021-05-04.
  • I create an end-to-end example and guide on how to use Traefik with Pomerium identity-aware access proxy in Forward Auth and Proxy mode on Kubernets with Helm/Helmfile
    I know from past discussion here some recommended solutions where thomseddon/traefik-forward-auth, vouch-proxy, oauth2-proxy or louketo-proxy aka Keycloak Gatekeeper. I personally think Pomerium is the most versatile and powerful solution out there, especially if you are on Kubernetes or even Docker. Pomerium doesn't yet have the mature documentation, hence this guide.
  • Sign-In For Outside Users
    You can use which allows you to use Google as an authentication provider. But it also means you have to use traefik. Also the access control is pretty basic, and very manual.
  • Traefik as auth layer? Is there anything like basicAuth but on steroids? | 2021-03-13
    I'm using Authelia/Oauth via Google for exactly this purpose. has good tutorials for both of them. | 2021-03-13
    It was resolved by implementing auth-host operations mode | 2021-03-13
    Maybe something like I've got this sitting in front of my home network traefik and external requests require a login with Google.
  • Authentication at the proxy level: good idea or useless?
    There are also some Docker containers that can do all the heavy lifting involved for you, I'm thinking of Traefik with Traefik-Forward-Auth, or SWAG.
  • How to easily implement authentication into my software?
    I just set up today after nearly a year of using Traefik's builtin basic auth middleware.