Skip to content

feat: add proxy_auth_header for reverse proxy authentication#789

Open
gmbuell wants to merge 2 commits into
charmbracelet:mainfrom
gmbuell:feat/proxy-auth-header
Open

feat: add proxy_auth_header for reverse proxy authentication#789
gmbuell wants to merge 2 commits into
charmbracelet:mainfrom
gmbuell:feat/proxy-auth-header

Conversation

@gmbuell

@gmbuell gmbuell commented Mar 4, 2026

Copy link
Copy Markdown

Summary

  • Adds proxy_auth_header config option to HTTPConfig
  • When set, the server trusts the named header from a reverse proxy for user identification
  • Enables SSO integration via API gateways like oathkeeper

Test plan

  • Set proxy_auth_header: "X-User" in config
  • Verify requests with the header authenticate as the named user
  • Verify requests without the header fall back to Authorization header

@gmbuell
gmbuell requested a review from aymanbagabas as a code owner March 4, 2026 23:03
gmbuell added 2 commits May 20, 2026 17:01
Allow soft-serve to trust a header from a reverse proxy (e.g. oathkeeper)
for user identification, enabling SSO integration.
@gmbuell
gmbuell force-pushed the feat/proxy-auth-header branch from d1cb316 to 4b9d889 Compare May 21, 2026 00:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant