Traefik with Pomerium in Forward Auth and Proxy mode on Kubernetes with Helm/Helmfile
Self-hosted forward-auth sidecar that gates your services by request IP + host — give family and friends per-user access without touching the apps behind your reverse proxy. Not authentication; a roaming-IP heartbeat keeps access current.
Authentication Server for single user with passkey
Protect your services with email verification
OpenID Connect ForwardAuth for containo.us Traefik 🔐
Manage Traefik HTTP provider services, authentication, sessions, and live proxy diagnostics from one focused UI.
OFFA offers easy to use OpenID Federation Authentication and Authorisation for existing services.
Open-source AI WAF for self-hosted apps with Caddy forward_auth, trusted identity headers, deterministic enforcement, and reviewable AI-assisted security workflows.
A forward authentication / authorisation (authN) implementation of Envoy External Authorization (ext_authz), built with Contour, and Pomerium in mind.
Lightweight Auth Server in Go
Simple service that validates jwt tokens and answer 200 or 401
Lightweight API Key management solution.
Jellyfin plugin for trusted header SSO (forward auth) with role-based library access control
Self-hosted edge gateway for homelabs. Reverse proxy + WAF + load balancing + SSO in a single panel. Powered by Caddy, Coraza and CrowdSec.
Trusted Publishing for Docker registries using GitHub Actions OIDC.
Preauth: a simple way to help secure your web services.
Authenticate against traefik using a variety of providers. Such as a htpasswd file, generic OAuth, generic OIDC, Google and Apple
Add a description, image, and links to the forward-auth topic page so that developers can more easily learn about it.
To associate your repository with the forward-auth topic, visit your repo's landing page and select "manage topics."