greenpau / caddy-security

🔐 Authentication, Authorization, and Accounting (AAA) App and Plugin for Caddy v2. 💎 Implements Form-Based, Basic, Local, LDAP, OpenID Connect, OAuth 2.0 (Github, Google, Facebook, Okta, etc.), SAML Authentication. MFA/2FA with App Authenticators and Yubico. 💎 Authorization with JWT/PASETO tokens. 🔐
https://authcrunch.com/
Apache License 2.0
1.42k stars 70 forks source link

question: Is it possible only to verify KeyCloak access token #320

Open bcherkezovtf opened 7 months ago

bcherkezovtf commented 7 months ago

A clear and concise description of what you want to accomplish.

I have a KeyCloak instance which is used to authenticate users for a couple of services. It uses OIDC. There a couple entry points through which you can authenticate and some others services which only depends on a valid token. For one of this services I wrote a custom python based proxy script which verifies an access token send as Bearer, read an custom attribute from it which then append to the requests send to the service.

My question is is it possible this to be done with caddy-security?