Support reverse proxy authorization about portr HOT 5 OPEN

I started work on this as a feature over here -> https://github.com/imnotjames/portr/tree/feat/proxy-auth

But I decided it'd be a good idea to open up the issue to get feedback before I add tests, configuration, etc.

from portr.

I could implement a trusted IP mechanism but after digging into this further it really increases the scope of the work by a lot.

Perhaps we first enable the header if it's set and to be honest that's all I really need as far as a feature. The trusted proxy IP aspect was a nice to have in my mind.

from portr.

I do have something working over in my branch. I've built it in a new docker file and have deployed it as my local instance of portr. Works great behind traefik.

I'll clean it up a bit.

from portr.

I would have to read up more about forwardAuth and security-related stuff. But this looks like adding support for a different kind of auth, which I think is something portr should support.

from portr.

Sure thing.

I think in an ideal world portr would integrate with OIDC providers and handle authentication that way. With that, you could hook up to everything from Keycloak to Authelia to Google. It'd accomplish the same goals as forward auth but in a more secure manner.

It's how things like minio & portainer handle these kinds of authentication problems.

Unfortunately, that's quite a bit more involved than forward-auth seems to be. Probably would require bringing in external packages & is not a "hmm I can get this done in like an hour!" Kind of project. :)

from portr.