oauth2-proxy/oauth2-proxy

Health v2 · maintenance only

Adoption not part of the score

14877 stars · 2182 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

OAuth2 Proxy is a reverse proxy and middleware that adds OAuth2/OIDC authentication in front of web applications, supporting providers like Google, Microsoft Entra ID, GitHub, and any generic OIDC issuer. It validates users by email, domain, or group and forwards identity details as HTTP headers to upstream apps.

Use cases

• add login to an internal app behind nginx
• protect kubernetes ingress with google sso
• require github authentication for a self-hosted dashboard
• put oidc auth in front of services without code changes
• forward user groups as headers to upstream apps
• gate internal tools by email domain

When to choose

• you need to add SSO to apps that lack native auth support
• you use common identity providers like Google, GitHub, or Entra ID
• you want a battle-tested CNCF sandbox project with broad provider coverage

When to avoid

• your application can implement OAuth2 natively
• you need a full identity provider or user management system rather than an auth proxy
• you need fine-grained per-route authorization beyond email/domain/group rules

Facets

service · maturity stable

auth proxy middleware http-server security security web-development self-hosted cloud-computing windows self-hosted go cross-platform oauth2 oidc sso reverse-proxy authentication identity-provider sso-gateway cnfc-sandbox devops linux macos docker kubernetes

Member repositories

For agents

markdown · JSON · MCP: product_card(name="oauth2-proxy/oauth2-proxy")