Closed mxey closed 5 years ago
Thanks for this suggestion. I'm a big friend of the Unix design approach "One tool to do one task". Therefore I'd suggest to implement a proxy for this which on the one side communicates with HAProxy through SPOE and on the other side utilizes nginx-sso if somehow possible.
As this tool is specifically designed to be used by nginx as an SSO implementation I'd rather not add this functionality to nginx-sso itself.
Yes, that should be possible. It increases complexity on my side, of course, but I understand your reasoning :)
@mxey did you end up implementing this?
@danielfaulknor no.
.... So, I did. and I wrote a howto: https://github.com/Luzifer/nginx-sso/wiki/Using-nginx-sso-with-haproxy-and-SPOE
Thank you very much for your work and the documentation! :heart:
HAProxy does not support external-auth like NGINX, but has its own extension mechanism SPOE. It is a different protocol and not based on HTTP. I would like to standardize my authentication on nginx-sso, so it would be really cool if nginx-sso could be used with HAProxy. Do you consider this out of scope or would you accept a pull request for this? There is a Go library implementing the protocol.