# oauth2-proxy/oauth2-proxy

A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

Repository: https://github.com/oauth2-proxy/oauth2-proxy
Canonical: https://ross.abutalabs.com/products/oauth2-proxy
Homepage: https://oauth2-proxy.github.io/oauth2-proxy
Language: Go
License: MIT
License Family: permissive
Topics: cloud-infrastructure, oauth2-proxy, ssl, sso, hacktoberfest
Last push: 2026-08-26T19:35:52+00:00

## Health v2 (maintenance only)
Score: 99/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 99, release rhythm 98, longevity 100
- inputs: {"age_days": 3260, "days_push": 7, "days_rel": 13, "gap_med": 27.0, "n_releases_24m": 19}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 14877, forks 2182 (observed 2026-08-28T04:11:08.850918+00:00)

## What it is
OAuth2 Proxy is a reverse proxy and middleware that adds OAuth2/OIDC authentication in front of web applications, supporting providers like Google, Microsoft Entra ID, GitHub, and any generic OIDC issuer. It validates users by email, domain, or group and forwards identity details as HTTP headers to upstream apps.

## Use cases
- add login to an internal app behind nginx
- protect kubernetes ingress with google sso
- require github authentication for a self-hosted dashboard
- put oidc auth in front of services without code changes
- forward user groups as headers to upstream apps
- gate internal tools by email domain

## When to choose
- you need to add SSO to apps that lack native auth support
- you use common identity providers like Google, GitHub, or Entra ID
- you want a battle-tested CNCF sandbox project with broad provider coverage

## When to avoid
- your application can implement OAuth2 natively
- you need a full identity provider or user management system rather than an auth proxy
- you need fine-grained per-route authorization beyond email/domain/group rules

## Facets
- artifact type: service
- maturity: stable
- function: auth, proxy, middleware, http-server, security
- domain: security, web-development, self-hosted, cloud-computing
- platform: windows, self-hosted, go, cross-platform
- tags: oauth2, oidc, sso, reverse-proxy, authentication, identity-provider, sso-gateway, cnfc-sandbox, devops, linux, macos, docker, kubernetes

## Member repositories
- oauth2-proxy/oauth2-proxy (main) score 99

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:11:08.850918+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T17:07:00.853323+00:00, confidence not recorded.
  - readme: https://github.com/oauth2-proxy/oauth2-proxy (fetched 2026-08-28T04:11:08.850918+00:00, sha 56dc9c957b0d)
  - homepage: https://oauth2-proxy.github.io/oauth2-proxy (fetched 2026-08-29T08:04:59.655311+00:00, sha 9de80e63c416)
- Data as of 2026-08-30T08:39:29.467469+00:00.