BeryJu / hass-auth-header

Home Assistant custom component, which allows you to delegate authentication to a reverse proxy.
GNU General Public License v3.0
252 stars 19 forks source link

Block auth headers from some trusted proxies #319

Open slevin22 opened 3 months ago

slevin22 commented 3 months ago

Hi, I'm currently setting up SSO for myself and would like to add my family's home assistant instance. Issue is, they already have it exposed via their own reverse proxy. I can add mine to the trusted proxies and configure SSO, but that would leave them vulnerable through their other reverse proxy.

I'd really like a way block auth headers from specific trusted proxies / IPs if possible.

Thank you!