search

vouch / vouch-proxy

an SSO and OAuth / OIDC login solution for Nginx using the auth_request module
MIT License
2.88k stars 326 forks source link

Recommendations for using several OIDC endpoints #524

Closed Insighter2k closed 1 year ago

Insighter2k commented 1 year ago

Hi everyone,

I am just thinking about a good setup to secure my one subdomain. I want to host several different applications under sub.domain.org, for example /app1, /app2 /app3/api/test Currently, I have vouch configured with AAD (with subpath) and its working without any issues. I would like to add different app registrations to ensure each context is served and authenticated as it should. Vouch itself doesn't support more than one endpoint and tell my reverse proxy (nginx), please use endpoint a,b or c. My approach would be to have several instances of vouch proxy and bundle it up under my reverse proxy. From your point of view, is this approach recommended? Any suggestions?

Kind regards

bnfinet commented 1 year ago

@Insighter2k yes that's right

VP is pretty cheap memory wise. Whenever we've evaluated multi-tenancy / multi-provider / multi-permissions / multi OAuth it's come around to "just setup another one" as best practice.