OAuth2 Proxy

OAuth2 Proxy is a flexible reverse proxy and middleware component that adds OAuth2/OIDC authentication in front of web applications. It integrates with many identity providers and forwards verified identity information to your upstream services.

Key Features

• Works as a standalone reverse proxy or as an authentication middleware in front of existing proxies/load balancers
• Supports OAuth2 and OpenID Connect, including a generic OIDC provider and dedicated implementations for common providers
• Validates users by email, domain, and (for supported providers) groups
• Forwards authenticated identity details to upstream apps via HTTP headers (for example username and group information)
• Can also serve static files when used as a standalone reverse proxy

Use Cases

• Add single sign-on in front of internal tools without modifying the applications
• Protect multiple services behind a central reverse proxy using a shared authentication layer
• Gate access to dashboards and admin panels with provider-backed identity and group-based access

Limitations and Considerations

• Requires correct reverse-proxy/header configuration to avoid trusting spoofed identity headers from untrusted networks
• Provider feature support varies; group/role extraction depends on the chosen provider implementation

OAuth2 Proxy is commonly used to standardize authentication for self-hosted and internal web apps with minimal application changes. It is well-suited for environments that already rely on OAuth2/OIDC identity providers and need a lightweight authentication gateway.