OAuth2Proxy

A reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others)

About : https://oauth2-proxy.github.io/oauth2-proxy

Applicable models: x.64 series
Applicable TOS6: 6.0.420 or later versions

App WebUI for additional settings can be accesses at:
TOS5 & TOS6 : click on Support & Help from app description inside the App Center

After installation, you must configre one of the OAuth providers

Valid providers are :

• ADFS
• Bitbucket
• DigitalOcean
• Facebook
• Gitea
• GitHub
• GitLab
• Google default
• Keycloak (Deprecated)
• Keycloak OIDC
• LinkedIn
• login.gov
• Microsoft Azure (Deprecated)
• Microsoft Entra ID
• Nextcloud
• OpenID Connect

OAuth2-Proxy is a flexible, open-source tool that can act as either a standalone reverse proxy or a middleware component integrated into existing reverse proxy or load balancer setups. It provides a simple and secure way to protect your web applications with OAuth2 / OIDC authentication. As a reverse proxy, it intercepts requests to your application and redirects users to an OAuth2 provider for authentication. As a middleware, it can be seamlessly integrated into your existing infrastructure to handle authentication for multiple applications.

OAuth2-Proxy supports a lot of OAuth2 as well as OIDC providers. Either through a generic OIDC client or a specific implementation for Google, Microsoft Entra ID, GitHub, login.gov and others. Through specialised provider implementations oauth2-proxy can extract more details about the user like preferred usernames and groups. Those details can then be forwarded as HTTP headers to your upstream applications.