openidauth

KO | EN

gitlite — search

#python #hacktoberfest #ai #go #golang #android #machine-learning #awesome #cli #vue #security #mcp #ios #openai

(★ 8)

An OpenID Connect authorization middleware for Caddy

openidauth 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

## Open ID Authentication

**Authorization Middleware for Caddy**

This middleware implements an authorization layer for 
[Caddy](https://caddyserver.com) based one
[OpenID Connect](http://openid.net/connect/).  You can learn more about using
JWT in your application at [jwt.io](https://jwt.io). It validates tokens
against an external identity provider like Auth0, Google Identify Platform or
Azure Identity. Note that this middleware is limited to verify that the
provided token is valid and does not provide any features beyond that.

This middleware uses the [Go
Openid](https://github.com/emanoelxavier/openid2go/tree/master/openid)
middleware that was written for the Go http server.

### Caddyfile Syntax
To set up the middleware you need to declare a `openidauth` block and provide
information about the token issuer, client ids and which paths to protect:

```
openidauth {
   issuer [issuer]
   clientid [clientid1]
   clientid [clientid2]
   path [path1]
   path [path2]
}
```
Issuer and at least one path and at least one client id is mandatory.

Here is a full example configuration:

```
openidauth {
   issuer https://accounts.google.com
   clientid 407408718192.apps.googleusercontent.com
   path /protected/ 
}
```

### Ways of passing a token for validation

There are two ways to pass the token for validation: (1) in the
`Authorization` header and (2) as a URL query parameter.  The middleware will
look in those places in the order listed and return `401` if it can't find
any token.

| Method               | Format                           |
| -------------------- | -------------------------------  |
| Authorization Header | `Authorization: Bearer <token>`  |
| URL Query Parameter  | `/protected?access_token=<token>`|

If no token is provided and the resource is protected the middleware
will insert a header: WWW-Authenticate: Bearer

### Enabling the middleware in Caddy ###
To enable this plugin run go get github.com/vizrt/openidauth and import it
run [run.go](https://github.com/mholt/caddy/blob/master/caddy/caddymain/run.go)

```
import _ "github.com/vizrt/openidauth"
```

You also need to insert a directive into [plugin.go](https://github.com/mholt/caddy/blob/master/caddyhttp/httpserver/plugin.go), eg before "jwt":

```
...
	"mime",
	"openidauth", // github.com/vizrt/openidauth
	"jwt",        // github.com/BTBurke/caddy-jwt
...
```

openidauth

openidauth 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

openidauth

openidauth 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README