Traefik with Pomerium in Forward Auth and Proxy mode on Kubernetes with Helm/Helmfile
Authentication Server for single user with passkey
Self-hosted forward-auth sidecar that gates your services by request IP + host — give family and friends per-user access without touching the apps behind your reverse proxy. Not authentication; a roaming-IP heartbeat keeps access current.
Protect your services with email verification
OpenID Connect ForwardAuth for containo.us Traefik 🔐
OFFA offers easy to use OpenID Federation Authentication and Authorisation for existing services.
Manage Traefik HTTP provider services, authentication, sessions, and live proxy diagnostics from one focused UI.
Open-source AI WAF for self-hosted apps with Caddy forward_auth, trusted identity headers, deterministic enforcement, and reviewable AI-assisted security workflows.
Lightweight Auth Server in Go
A forward authentication / authorisation (authN) implementation of Envoy External Authorization (ext_authz), built with Contour, and Pomerium in mind.
Simple service that validates jwt tokens and answer 200 or 401
Lightweight API Key management solution.
Trusted Publishing for Docker registries using GitHub Actions OIDC.
Preauth: a simple way to help secure your web services.
Authenticate against traefik using a variety of providers. Such as a htpasswd file, generic OAuth, generic OIDC, Google and Apple
Transparent proxy as auth forward with oidc on bun
APISix for forward auth server and all upstream configured use that.
Add a description, image, and links to the forward-auth topic page so that developers can more easily learn about it.
To associate your repository with the forward-auth topic, visit your repo's landing page and select "manage topics."