Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/greenpau/caddy-security

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐
https://github.com/greenpau/caddy-security

Authorize by a token from Azure Entra?

svenakela opened this issue about 2 months ago
Json (examples) instead of Caddyfile

Fabbzz opened this issue 2 months ago
question: Is it possible to use Duo identity from Cisco?

kwuite opened this issue 2 months ago
question: Using Caddy without the authentication portal

MatyasHorvath12 opened this issue 3 months ago
question: Authenticate agains two differentkeycloak realms

theodotos opened this issue 3 months ago
question: Not redirected back to the app from keycloak

theodotos opened this issue 3 months ago
breakfix: samesite strict makes redirect wrong

Gunni opened this issue 3 months ago
question: auto redirect with angular SPA

thebirches opened this issue 3 months ago
question: Using name or email from token as a header_up

thebirches opened this issue 3 months ago
question: How to use Microsoft Authentication?

qxsch opened this issue 4 months ago
question: forgive the simple question

oandgtc opened this issue 4 months ago
question: Lock authentication to specific IP addresses

Gunni opened this issue 4 months ago
OAuth2 TLS handshake timeout

casperdcl opened this issue 5 months ago
v1.1.29 default get guest role (with users and admin)

PaddyPat opened this issue 6 months ago
OAuth transparent authentication in Caddy

ArjonBu opened this issue 6 months ago
How to exclude a subdomain from auth?

JostBrand opened this issue 7 months ago
OAuth successfull login redirects back to /login

alternativc opened this issue 7 months ago
question: How to initiate proxy pass after successful auth?

icsy7867 opened this issue 7 months ago
question: Caddy Security as SSO provider

trueFireblade opened this issue 7 months ago
Status of security vulnerabilities?

mdbraber opened this issue 7 months ago
breakfix: cookie/token is invalidated before it expires

vnxme opened this issue 8 months ago
Injected headers not forwarded to underlying application.

MrChadMWood opened this issue 8 months ago
breakfix: RBAC can't access [realm_access-roles]

bakabaka0613 opened this issue 8 months ago
Kinde Support

andrefmarques opened this issue 8 months ago
NetSuite as a OIDC Provider

Shaun-York opened this issue 8 months ago
breakfix: Unable to authenticate with more than 1 replica

andrefmarques opened this issue 8 months ago
question: form-based login

tribor opened this issue 9 months ago
question: MFA disable?

tribor opened this issue 9 months ago
breakfix: respect password policy from users.json

tribor opened this issue 9 months ago
Settings Page Returns Page Not Found

WalterSchirmacher opened this issue 9 months ago
feature: PKCE challange

Hero9909 opened this issue 10 months ago
Integration with Oauth provider LemonLDAP is not working

radokristof opened this issue 10 months ago
Integrate SSO with Google SAML

pmquang opened this issue 10 months ago
breakfix: ACL path/method rules always seem to result in a miss

alberthdev opened this issue 11 months ago
help needed: Support The Project

greenpau opened this issue 11 months ago
announcement: Profile UI Release

greenpau opened this issue 11 months ago
Bump google.golang.org/protobuf from 1.31.0 to 1.33.0

dependabot[bot] opened this pull request 11 months ago
question: inject headers not presented

MrOzean opened this issue 11 months ago
question: Passkey support

cromelex opened this issue 11 months ago
question: API Key in Authorization: Bearer header

mitja opened this issue 12 months ago
question: Is it possible only to verify KeyCloak access token

bcherkezovtf opened this issue 12 months ago
Incredibly bad question

demuxer86 opened this issue 12 months ago
breakfix: Azure OAuth2 config not working

MrSuttonmann opened this issue 12 months ago
How to set a custom session timeout value?

bfg100k opened this issue 12 months ago
Is caddy-security has cache?

kylehz opened this issue 12 months ago
updates

andrewsonpradeep opened this pull request 12 months ago
Apple Passkeys

SgtErnestBilko opened this issue almost 1 year ago
question: Preflight requests

rowanstrydom opened this issue about 1 year ago
question: refresh_token not working in azure oAuth 2.0

SLAN14 opened this issue about 1 year ago
question: Caddy is oauth proxy for grafana oauth identity forwarding

moritz31 opened this issue about 1 year ago
I'm using the recommended config but endpoints are always authorized

alphajoza opened this issue about 1 year ago
feature: Simplify configuring multiple OAuth clients

matthias-stone opened this issue about 1 year ago
Spelling

jsoref opened this pull request about 1 year ago
question: How do I require authentication for a reverse proxy

toddhow opened this issue about 1 year ago
question: Is there a way to match if a value is in an array?

mattatjff opened this issue about 1 year ago
question: ACL in Caddy

jayadevx opened this issue about 1 year ago
webadmin user unauthorized problem

mahq195 opened this issue about 1 year ago
breakfix: password_recovery_enabled

slowkow opened this issue about 1 year ago
question: Help me configure this: one-off retro week event

IngwiePhoenix opened this issue about 1 year ago
feature: Events

gedw99 opened this issue about 1 year ago
question: No Token Found for Discord auth, confused about config

michael94ellis opened this issue about 1 year ago
Open the 'discussions' tab

sandstrom opened this issue over 1 year ago
Trying to authenticate API calls with LDAP

EdOro126 opened this issue over 1 year ago
Fix: Custom HTML Headers and static assets got lost on caddy adapt

poettig opened this pull request over 1 year ago
Running caddy-security on Caddy Docker

ktruo010 opened this issue over 1 year ago
question: How to set the portal URL?

xtractalpha opened this issue over 1 year ago
question: use authp as upstream oauth server / authorization endpoint?

unusualevent opened this issue over 1 year ago
question: google oauth, send "prompt" query param

highfredo opened this issue over 1 year ago
question: include multiple JavaScript files in template.

xtractalpha opened this issue over 1 year ago
chore: remove refs to deprecated io/ioutil

testwill opened this pull request over 1 year ago
breakfix: Deadlock starting with OIDC provider behind caddy

pinpox opened this issue over 1 year ago
question: How to get refresh_token from Azure SSO

cdebadri opened this issue over 1 year ago
question: Suppressing noisy auth failure logs

mechanarchy opened this issue over 1 year ago
breakfix: Injected headers not present

infogulch opened this issue over 1 year ago
breakfix: `keystore: failed to parse token` with JWT shared secret

michaelsproul opened this issue over 1 year ago
authenticating with azure

larsr opened this issue over 1 year ago
ReadFileBytes panics when a provided path is empty

ahpaleus opened this issue over 1 year ago
No CSRF Mitigation in Caddy Security Admin Panel

ahpaleus opened this issue over 1 year ago
Stored XSS in admin panel triggerable by CSRF

ahpaleus opened this issue over 1 year ago
Lack of User Session Invalidation on Logout

ahpaleus opened this issue over 1 year ago
2FA Bypass by Brute-Forcing Verification Codes

ahpaleus opened this issue over 1 year ago
X-Forwarded-Proto Header Manipulation

ahpaleus opened this issue over 1 year ago
X-Forwarded-Host Header Manipulation

ahpaleus opened this issue over 1 year ago
Open Redirection Vulnerability

ahpaleus opened this issue over 1 year ago