forwardauth 开源项目推荐（26 个）

DefGuard /defguard

通过真正的WireGuard® 2FA/MFA进行零信任访问管理

nosduco /nforwardauth

Simple and minimalist forward auth service intended for use with reverse proxies (Traefik, Caddy, nginx, etc)

passmower /passmower

Cloud native OIDC Identity Provider

leonjza /trauth

🔑 A simple, cookie based Traefik middleware plugin for HTTP Basic / Ceritificate Based Single Sign-on

casdoor /casdoor-forward-auth

Forward auth service for Traefik, Caddy and Nginx, powered by Casdoor

SimonSchneider /traefik-jwt-decode

Traefik forward auth implementation for JWT tokens

soulteary /stargate

Lightweight ForwardAuth gateway for Traefik and Nginx, adding login, sessions, cross-domain SSO, and optional TOTP or SMS/email OTP through Warden and Herald.

StiviiK /oidc-forward-auth

OpenID Connect ForwardAuth for containo.us Traefik 🔐

vitaliy-leschenko /traefik-forwardauth-azuread

Traefik Middleware for Auth in Azure Active Directory

soulteary /warden

User allowlist API for auth gateways: sync email and phone data from JSON files and remote APIs, with seven merge strategies, Redis-locked refresh, API-key/HMAC auth, OpenAPI, and a Go SDK.

ZettaAI /auth-server

该项目在 GitHub 上没有填写描述

bennesp /jwt-forward-auth

Simple service that validates jwt tokens and answer 200 or 401

asaintsever /traefik-forwardauth-authcode-pkce

Simple implementation of a Traefik ForwardAuth middleware supporting Authorization Code with PKCE flow

nubenetes /traefik-keycloak-portable

Portable Helm chart: Traefik v3.7.6 + Keycloak-protected dashboard (oauth2-proxy/ForwardAuth) for OpenShift, RKE2, k3s, kubeadm & Tanzu. Feature-flag driven — MetalLB/NSX ALB/kube-vip/Cilium LB, External Secrets+Vault, optional NetworkPolicies, air-gap. Fail-fast validation. AI-generated, not yet tested on a live cluster.

alibo /envoy-forwardauth

Testing envoy's forward auth feature in golang (http + grpc)

QirunGao /passkey-forwardauth

Small WebAuthn/Passkey forward-auth service for nginx auth_request.

soulteary /stargate-suite

该项目在 GitHub 上没有填写描述

julianullrich99 /traefik-guest-pass

Keep self-hosted services internal-only and open them temporarily: guest codes or time-limited public access via Traefik forwardAuth

mcosta74 /remote-auth-demo

simple project that shows how to use traefik's ForwardAuth middleware

Boreas37 /CVE-2026-88009-PoC

CVE-2026-88009 — Traefik forwards a rootless opaque request target that routing/forwardAuth see as '/'. Auth bypass + access-log evasion, verified v3.7.10 / v3.7.13.