buzzfeed / sso

sso, aka S.S.Octopus, aka octoboi, is a single sign-on solution for securing internal services
MIT License
3.07k stars 187 forks source link

Can the proxy be used for TCP forwarding? #323

Open omerxx opened 2 years ago

omerxx commented 2 years ago

Is your feature request related to a problem? Please describe. I'd like to use the same proxy to forward TCP requests, e.g. forwarding a request to a DB without going through our VPN. Since the nature of the proxy is identifying the cookie that comes along with the request I wonder whether; 1. Is the functionality already there? 2. If not, what does it take to implement it (would love to contribute it)

Describe the solution you'd like I'm thinking of something of something similar to AWS's SSO CLI login / Azure CLI: You can initiate the auth process via:

# AWS
aws sso login
# Azure
azure login

This automatically opens a new browser tab prompting the user to authenticate. Once authentication is complete the console is populated with (temporary) credentials. The proxy will be able to see those and forward the TCP request.

Describe alternatives you've considered The alternative at the moment is a VPN which naturally lets you in through the box with limited access control and I'd like to avoid it.

If I could receive directions I'd be happy to try and implement such a feature, or hear whats is your alternative for such a request?