plugins icon indicating copy to clipboard operation
plugins copied to clipboard

Can we include Keycloak as Auth in the Caddy Plugin?

Open UNRA1DUser opened this issue 1 year ago • 5 comments

Important notices Before you add a new report, we ask you kindly to acknowledge the following:

  • [X] I have read the contributing guide lines at https://github.com/opnsense/plugins/blob/master/CONTRIBUTING.md
  • [X] I have searched the existing issues, open and closed, and I'm convinced that mine is new.
  • [X] When the request is meant for an existing plugin, I've added its name to the title.

Is your feature request related to a problem? Please describe. No

Describe the solution you'd like Can we include Keycloak as Auth in the Caddy Plugin?

Describe alternatives you've considered

Additional context

UNRA1DUser avatar Oct 17 '24 19:10 UNRA1DUser

Somebody has to contribute that just like here:

https://github.com/opnsense/plugins/pull/4104

Its probably easier to set up Authelia and use that with caddy.

Monviech avatar Oct 18 '24 04:10 Monviech

Or maybe is it possible to add "oauth2-proxy" to it? So a lot of other Auth. could be configured than.

UNRA1DUser avatar Oct 18 '24 11:10 UNRA1DUser

Do you mean this?

https://github.com/oauth2-proxy/oauth2-proxy/issues/2485#issuecomment-1931230207

Please provide more information I don't wanne google things here. If you want something you have to be a bit more verbose in your request, please.

It doesnt look like there's much documentation or anything. So I rather not add it without having something available like this:

https://caddyserver.com/docs/caddyfile/directives/forward_auth#authelia

Why not use authelia as your intermediate and let it authenticate to your keycloak server?

Monviech avatar Oct 18 '24 11:10 Monviech

Yes, I meant that one. Sorry for not providing so much information.

Oh is that also working with authelia? I didn't know that. So I could use authelia or authentik to authenticate with keycloak?

Sounds interesting. I will google it.

UNRA1DUser avatar Oct 19 '24 13:10 UNRA1DUser

You can probably do something like OIDC but its not my expertise.

Both Keycloak and Authelia should support OIDC, so one could be the client of the other.

Monviech avatar Oct 19 '24 13:10 Monviech