OpenIDC/mod_auth_openidc

Health v2 · maintenance only

Adoption not part of the score

1093 stars · 332 forks observed · 2026-09-01

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

An OpenID Certified™ Apache HTTPd module implementing OpenID Connect 1.x and FAPI 2.x Relying Party functionality. It lets an Apache web server relay user authentication to an OpenID Connect Provider, establish sessions, and pass identity claims to protected applications or reverse-proxied backends.

Use cases

• add OpenID Connect SSO login to apps behind Apache
• protect legacy applications with OIDC via reverse proxy without code changes
• enforce claim-based authorization rules with Apache Require directives
• pass id_token and userinfo claims to backend apps via headers
• migrate legacy authentication systems to standards-based OIDC
• secure SPAs and APIs fronted by Apache with single sign-on

When to choose

• you run Apache HTTPd and need OIDC/OAuth2 authentication in front of applications
• you want OpenID Certified FAPI 2 compliance for high-security scenarios like banking
• you need to add SSO to existing services without modifying them
• you want fine-grained authorization based on OIDC claims

When to avoid

• your stack uses nginx, Caddy, or another non-Apache web server
• you need a full identity provider rather than a relying party
• you prefer application-level OIDC libraries instead of web-server modules

Facets

plugin · maturity stable

auth authorization middleware security web-development backend apis windows cpp apache-httpd openid-connect oidc sso relying-party fapi c reverse-proxy authentication-module linux macos web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="OpenIDC/mod_auth_openidc")