Traefik with Pomerium in Forward Auth and Proxy mode on Kubernetes with Helm/Helmfile
Self-hosted forward-auth sidecar that gates your services by request IP + host — give family and friends per-user access without touching the apps behind your reverse proxy. Not authentication; a roaming-IP heartbeat keeps access current.
Authentication Server for single user with passkey
Protect your services with email verification
OpenID Connect ForwardAuth for containo.us Traefik 🔐
Manage Traefik HTTP provider services, authentication, sessions, and live proxy diagnostics from one focused UI.
OFFA offers easy to use OpenID Federation Authentication and Authorisation for existing services.
Open-source AI WAF for self-hosted apps with Caddy forward_auth, trusted identity headers, deterministic enforcement, and reviewable AI-assisted security workflows.
A forward authentication / authorisation (authN) implementation of Envoy External Authorization (ext_authz), built with Contour, and Pomerium in mind.
Lightweight Auth Server in Go
Simple service that validates jwt tokens and answer 200 or 401
Lightweight API Key management solution.
Self-hosted edge gateway for homelabs. Reverse proxy + WAF + load balancing + SSO in a single panel. Powered by Caddy, Coraza and CrowdSec.
Jellyfin plugin for trusted header SSO (forward auth) with role-based library access control
Trusted Publishing for Docker registries using GitHub Actions OIDC.
Preauth: a simple way to help secure your web services.
Modern, lightweight identity provider in a single Go binary: OIDC provider, forward auth, LDAP + local users + upstream OIDC federation, TOTP & passkeys, a self-service portal and a polished admin UI — SQLite by default, ~26 MB RAM. A featherweight Authentik alternative.
Add a description, image, and links to the forward-auth topic page so that developers can more easily learn about it.
To associate your repository with the forward-auth topic, visit your repo's landing page and select "manage topics."