vouch/vouch-proxy

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

3280 stars · 339 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Vouch Proxy is an SSO and OAuth/OIDC authentication proxy for Nginx that uses the auth_request module to protect upstream sites. It supports many identity providers including Google, GitHub, Okta, Azure AD, and Keycloak, issuing JWTs after login.

Use cases

• add single sign-on to nginx-hosted sites
• protect internal apps behind nginx with oauth2 login
• authenticate nginx reverse proxy with oidc provider
• enforce sso across multiple websites
• use auth_request to gate access to self-hosted services
• integrate keycloak or azure ad login with nginx

When to choose

• you run Nginx as a reverse proxy and want centralized SSO
• you need broad OIDC/OAuth provider compatibility
• you want a lightweight Go proxy with sub-millisecond validation

When to avoid

• you use Caddy or Traefik with built-in forward auth instead of Nginx
• you need a full identity provider rather than a proxy
• you want a GUI-managed auth solution

Facets

service · maturity active

auth http-server middleware security security web-development self-hosted backend self-hosted go cross-platform sso oauth2 oidc nginx auth-request jwt reverse-proxy single-sign-on linux docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="vouch/vouch-proxy")