Luzifer / nginx-sso

SSO authentication provider for the auth_request nginx module
Apache License 2.0
282 stars 41 forks source link

Support HAProxy SPOE #43

Closed mxey closed 5 years ago

mxey commented 5 years ago

HAProxy does not support external-auth like NGINX, but has its own extension mechanism SPOE. It is a different protocol and not based on HTTP. I would like to standardize my authentication on nginx-sso, so it would be really cool if nginx-sso could be used with HAProxy. Do you consider this out of scope or would you accept a pull request for this? There is a Go library implementing the protocol.

Luzifer commented 5 years ago

Thanks for this suggestion. I'm a big friend of the Unix design approach "One tool to do one task". Therefore I'd suggest to implement a proxy for this which on the one side communicates with HAProxy through SPOE and on the other side utilizes nginx-sso if somehow possible.

As this tool is specifically designed to be used by nginx as an SSO implementation I'd rather not add this functionality to nginx-sso itself.

mxey commented 5 years ago

Yes, that should be possible. It increases complexity on my side, of course, but I understand your reasoning :)

danielfaulknor commented 4 years ago

@mxey did you end up implementing this?

mxey commented 4 years ago

@danielfaulknor no.

mjbnz commented 4 years ago

.... So, I did. and I wrote a howto: https://github.com/Luzifer/nginx-sso/wiki/Using-nginx-sso-with-haproxy-and-SPOE

Luzifer commented 4 years ago

Thank you very much for your work and the documentation! :heart: