Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Trusted Header Authentication #534

Closed
rfvgyhn opened this issue Oct 10, 2023 · 2 comments
Closed

Support Trusted Header Authentication #534

rfvgyhn opened this issue Oct 10, 2023 · 2 comments
Assignees
Labels
effort:3 enhancement New feature or request prio b

Comments

@rfvgyhn
Copy link

rfvgyhn commented Oct 10, 2023

I host wakapi behind a reverse proxy that uses Authelia for SSO. It would be great if wakapi supported trusted headers to automatically login.

An example project that supports this is Navidrome. When it sees the header Remote-User and the proxy's IP is whitelisted, the user is auto logged in and if the user doesn't exist, it is automatically created.

https://www.authelia.com/integration/trusted-header-sso/introduction/
https://www.navidrome.org/docs/usage/security/#reverse-proxy-authentication
navidrome/navidrome#1152

@muety
Copy link
Owner

muety commented Oct 10, 2023

Very interesting concept! I'll add support for this type of authentication to Wakapi. But I will refrain from implementing automated user creation, if you don't mind - it would require too many changes for little added value imo.

@muety
Copy link
Owner

muety commented May 16, 2024

Discussion about setting up Wakapi trusted header auth with Authentik and Apache 2 mod_auth_openidc at #644.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
effort:3 enhancement New feature or request prio b
Projects
None yet
Development

No branches or pull requests

2 participants