goauthentik / authentik

The authentication glue you need.
https://goauthentik.io
Other
13.21k stars 883 forks source link

Authenticated Paths for Proxy Provider #5925

Open benedikt-bartscher opened 1 year ago

benedikt-bartscher commented 1 year ago

Is your feature request related to a problem? Please describe. Currently, we can only configure "Unauthenticated Paths" for a Proxy Provider. This setting allow multiple regexes to check the URL against. However, there is no way to only protect specific paths.

Describe the solution you'd like Add "Authenticated Paths" option to Proxy Providers or use another regex library which supports negative lookahead.

Describe alternatives you've considered I tried regex negative lookaheads, but authentik outpost are written in golang, which does not support this.

Additional context

q20 commented 1 year ago

Agreed. I attempted to allow Unauthenticated Paths for all paths excluding /admin/, but it seems there is no way to achieve this. A simple not function would be useful. 👍

Rami-Pastrami commented 7 months ago

I attempted this using a negative look-ahead regex (?!) but that does not seem to work, not sure if this is intentional or a bug. However the method, having a way to have authenticated paths would be useful