Technology · Ebook

OAuth2 Proxy: Authentication for Everything Behind It

by Shriira Press

OAuth2 Proxy is a reverse proxy and static file server that adds OAuth2 and OpenID Connect authentication to applications that have none of their own. Place it in front of a dashboard, internal API, or metrics endpoint and it runs the authorization-code flow against a provider like Google, Microsoft Entra ID, GitHub, or any OIDC issuer, forwarding only vetted requests. This book follows the machine from the outside in: the authentication gap it fills, the OAuth2 flow it performs, the cookies and Redis sessions that remember users, providers and authorization rules, the auth_request pattern that guards an entire NGINX or Traefik ingress, the identity headers it hands upstream, and how to run it safely in production.

Contents

1. 1Preface
2. 2Chapter 1 — The Authentication Gap and What OAuth2 Proxy Is
3. 3Chapter 2 — The OAuth2 Flow the Proxy Performs
4. 4Chapter 3 — Sessions, Cookies, and State
5. 5Chapter 4 — Providers and Authorization
6. 6Chapter 5 — The auth_request Pattern and Ingress
7. 7Chapter 6 — Identity Headers and the Upstream Contract
8. 8Chapter 7 — OAuth2 Proxy in Practice