Open guilhem opened 7 months ago
When using proxy auth like oauth2-proxy, backend can trust some headers for account creation. Like X-Auth-Request-Email. It can be useful to have a auth-trusted-cidr to restrict which service can be trusted.
X-Auth-Request-Email
auth-trusted-cidr
An example of a Go program that supports Forward/Proxy Auth: https://github.com/miniflux/v2
Code search: https://github.com/search?q=repo%3Aminiflux%2Fv2%20AuthProxyHeader&type=code
When using proxy auth like oauth2-proxy, backend can trust some headers for account creation. Like
X-Auth-Request-Email
. It can be useful to have aauth-trusted-cidr
to restrict which service can be trusted.