OAuth2 Proxy

Try it in 3 steps

1. 1

   Pull the pinned container

   Use Docker to fetch the official OAuth2 Proxy v7.15.5 image.

   docker pull quay.io/oauth2-proxy/oauth2-proxy:v7.15.5Copy
2. 2

   Create a configuration with fake credentials

   Create a Google provider example without real secrets and verify that the decoded cookie secret is exactly 32 bytes.

   mkdir oauth2-proxy-demo && cd oauth2-proxy-demo && printf '%s\n' 'provider = "google"' 'client_id = "example-client-id"' 'client_secret = "example-client-secret"' 'redirect_url = "http://127.0.0.1:4180/oauth2/callback"' 'http_address = "0.0.0.0:4180"' 'email_domains = ["example.com"]' 'cookie_secret = "MDEyMzQ1Njc4OWFiY2RlZjAxMjM0NTY3ODlhYmNkZWY="' > oauth2-proxy.cfg && test "$(sed -n 's/^cookie_secret = "\(.*\)"$/\1/p' oauth2-proxy.cfg | base64 -d | wc -c | tr -d ' ')" = 32Copy
3. 3

   Load the configuration and check local health

   Start the container on an allocated local port and check /ping within a bound of about 30 seconds. Cleanup targets only the captured container ID; no real Google login occurs.

   ( cid=''; cleanup() { if test -n "$cid"; then docker rm -f "$cid" >/dev/null 2>&1 || true; fi; }; trap cleanup EXIT INT TERM; cid=$(docker run -d --rm -p 127.0.0.1::4180 -v "$PWD/oauth2-proxy.cfg:/etc/oauth2-proxy.cfg:ro" quay.io/oauth2-proxy/oauth2-proxy:v7.15.5 --config=/etc/oauth2-proxy.cfg) || exit 1; test -n "$cid" || exit 1; port=$(docker port "$cid" 4180/tcp | sed -n 's/.*://p') || exit 1; test -n "$port" || exit 1; ready=0; for attempt in 1 2 3 4 5 6 7 8 9 10; do if curl -fsS --connect-timeout 1 --max-time 2 "http://127.0.0.1:$port/ping" -o ping.txt; then ready=1; break; fi; sleep 1; done; test "$ready" = 1 )Copy

Built with

• Go

Categories and tags

GitHub data

Share a guide or use case for this OSS in Markdown. Articles are published after administrator approval.

Explore next

• Keycloak37,134 Stars

  2 shared tag(s) · 1 shared category(s)

  an IAM server providing authentication and authorization to applications

  Java
• omniauth8,102 Stars

  2 shared tag(s) · 1 shared category(s)

  Add multiple authentication strategies to Rack applications through one flow

  Ruby
• Supabase111,098 Stars

  2 shared tag(s)

  Build on Postgres with integrated Auth, REST/GraphQL APIs, Realtime, Storage, and Functions

  TypeScript
• SPIRE2,571 Stars

  1 shared tag(s) · 1 shared category(s) · Same language

  attest running workloads and issue short-lived SVID credentials bound to SPIFFE identities

  Go
• Better Auth30,165 Stars

  1 shared tag(s) · 1 shared category(s)

  control authentication, authorization, OAuth/OIDC, and plugins inside a TypeScript application

  TypeScript
• Envoy29,037 Stars

  1 shared tag(s) · 1 shared category(s)

  a cloud-native high-performance proxy for edge and service traffic

  C++