authcrunch / authcrunch.github.io

Documentation for Caddy v2 Auth Portal and Authorize Plugins.
77 stars 32 forks source link

How does authp interact with the acme challenge URLs? #44

Closed abgoyal closed 1 year ago

abgoyal commented 1 year ago

I just started using authp and it is absolutely terrific - easiest way to put a SSO authenticating proxy in front of other services that may not be so secure.

I had one question: I use automatic certificates ("tls " style). I understand that there are .well-known urls that LE will eventually want to ping when caddy tries to renew the certificate.

Would authp block these acme challenge requests? Or does caddy handle them before authp kicks in?

I can't find any thing related to these in the Caddy or Authp docs.

greenpau commented 1 year ago

Would authp block these acme challenge requests? Or does caddy handle them before authp kicks in?

@abgoyal , the latter. It is handled by caddy’s tls plugin which kicks in before authp (caddy-security plugin).

abgoyal commented 1 year ago

thanks @greenpau !