Re: [naviserver-devel] Functionality similar to nginx' auth_request

2025-05-08 Thread Gustaf Neumann (sslmail)
> At which moment is the authProc called? before or after the preauth filter? As the name indicates, the authProc is called after “preauth” and before “postauth”. ___ naviserver-devel mailing list naviserver-devel@lists.sourceforge.net https://lists.s

Re: [naviserver-devel] Functionality similar to nginx' auth_request

2025-05-08 Thread Georg Lehner
Hello, On 5/7/25 11:28, Gustaf Neumann (sslmail) wrote: On 07.05.2025, at 09:45, Georg Lehner wrote: Hello, Reflecting on this topic I realize, that a more generic framework would be beneficial, where authorization (ns_register_filter preauth ...) can be combined with modular authentication

Re: [naviserver-devel] Functionality similar to nginx' auth_request

2025-05-07 Thread Gustaf Neumann (sslmail)
> On 07.05.2025, at 09:45, Georg Lehner wrote: > > Hello, > > Reflecting on this topic I realize, that a more generic framework would be > beneficial, where authorization (ns_register_filter preauth ...) can be > combined with modular authentication. Well, there is always more, we can do!

Re: [naviserver-devel] Functionality similar to nginx' auth_request

2025-05-07 Thread Georg Lehner
Hello, Reflecting on this topic I realize, that a more generic framework would be beneficial, where authorization (ns_register_filter preauth ...) can be combined with modular authentication. Nginx has modules:  access (IP based),  auth_basic (http basic authentication),  auth_jwt (JWT authe

Re: [naviserver-devel] Functionality similar to nginx' auth_request

2025-05-05 Thread Wolfgang Winkler via naviserver-devel
Hello! We have interfaces for facebook (OAuth2), apple, microsoft and google (OpenID). The OpenID interfaces are quite similar, as they all are based on JWTs. The only thing we could no do directly in naviserver was the verification of the signature with PEM and JWK. We are using a python s

[naviserver-devel] Functionality similar to nginx' auth_request

2025-05-05 Thread Georg Lehner
Hello, Nginx has an "auth_request"[1] module, which allows to offload authentication to an HTTP backend. This is used e.g. with oauth2-proxy[2] to provide OAuth2/OpenID Connect authentication to (reverse proxied) applications which do not implement authentication by themself. See configurati