Traefik with Pomerium in Forward Auth and Proxy mode on Kubernetes with Helm/Helmfile
Self-hosted forward-auth sidecar that gates your services by request IP + host — give family and friends per-user access without touching the apps behind your reverse proxy. Not authentication; a roaming-IP heartbeat keeps access current.
Authentication Server for single user with passkey
Protect your services with email verification
OpenID Connect ForwardAuth for containo.us Traefik 🔐
OFFA offers easy to use OpenID Federation Authentication and Authorisation for existing services.
Open-source AI WAF for self-hosted apps with Caddy forward_auth, trusted identity headers, deterministic enforcement, and reviewable AI-assisted security workflows.
Manage Traefik HTTP provider services, authentication, sessions, and live proxy diagnostics from one focused UI.
A forward authentication / authorisation (authN) implementation of Envoy External Authorization (ext_authz), built with Contour, and Pomerium in mind.
Lightweight Auth Server in Go
Lightweight API Key management solution.
Simple service that validates jwt tokens and answer 200 or 401
Self-hosted edge gateway for homelabs. Reverse proxy + WAF + load balancing + SSO in a single panel. Powered by Caddy, Coraza and CrowdSec.
Trusted Publishing for Docker registries using GitHub Actions OIDC.
Preauth: a simple way to help secure your web services.
Authenticate against traefik using a variety of providers. Such as a htpasswd file, generic OAuth, generic OIDC, Google and Apple
APISix for forward auth server and all upstream configured use that.
Add a description, image, and links to the forward-auth topic page so that developers can more easily learn about it.
To associate your repository with the forward-auth topic, visit your repo's landing page and select "manage topics."