Hacker GitHub

← All repos

OpenIDC/mod_auth_openidc

View on GitHub ↗ ★ 1,096 C

OpenID Certified™ OpenID Connect and FAPI 2 Relying Party module for Apache HTTPd

15 mentions on Hacker News by 5 people: 1 story, 14 comments · first 2021-11-12 · latest 2026-02-21

Mentions per year 15 mentions · busiest year 2024 (6)
20082026
AllStoriesComments NewestTopOldest
  1. …has a Relying Party Implementation, but I have used this plugin for Apache2 and OIDC in the past: https://github.com/OpenIDC/mod_auth_openidc This page might have something, but I can’t read it myself on mobile cause it shows up broken:…
    comment by KronisLV · 2026-02-21 · in What Is OAuth?
  2. ▲ 2
    OpenID Certified OIDC Relying Party Implementation for Apache HTTP Server 2.x
    story by stefankuehnel · 2024-12-04 · 0 comments
  3. …want Apache to act as an OpenID connect relying party, for example, I can just use mod_auth_openidc https://github.com/OpenIDC/mod_auth_openidc installing which is pretty much trivial and requires little work on my part: sudo apt install…
    comment by KronisLV · 2024-08-15 · in Confusion Attacks: Exploiting Hidden Semantic Ambiguity in Apache HTTP Server
  4. …OpenID Connect library for your tech stack, or a Relying Party implementation altogether, like: https://github.com/OpenIDC/mod_auth_openidc They'll get you most of the way there, without making you write a bunch of security related code…
    comment by KronisLV · 2024-08-07 · in Ask HN: How to build site with payment, subscriptions, user login, registration
  5. …services can be kept a bit simpler (e.g. just reading the headers provided by the module): https://github.com/OpenIDC/mod_auth_openidc Now, whether that's a good idea, that's debatable, but there are also plenty of other implementations of…
    comment by KronisLV · 2024-07-19 · in Never Update Anything
  6. …that should be separate from any given app or back end API, so in my case I use mod_auth_openidc: https://github.com/OpenIDC/mod_auth_openidc with Keycloak: https://www.keycloak.org/ My back end/app just gets a few headers that say who an…
    comment by KronisLV · 2024-05-21 · in Why I love Laravel (2022)
  7. …though picked Apache with mod_auth_openidc, which is a certified Relying Party implementation: https://github.com/OpenIDC/mod_auth_openidc In other words, I can protect arbitrary applications through my reverse proxy and require either…
    comment by KronisLV · 2024-02-11 · in Keycloak SSO with Docker Compose and Nginx
  8. …attributes. It's on par with what you'd expect and should serve you nicely. mod_auth_openidc: https://github.com/OpenIDC/mod_auth_openidc This one's a certified OpenID Connect Relying Party implementation for... Apache2/httpd. Some might…
    comment by KronisLV · 2023-12-22 · in What Is OIDC?
  9. …etc.) for me, and lets me work with just a few headers that are passed to the protected resources: https://github.com/OpenIDC/mod_auth_openidc It works, but I'm still not happy - I realize that there are many types of attacks that have…
    comment by KronisLV · 2023-12-02 · in Easy to use OpenID Connect client and server library written for Go
  10. …so much easier. For my self hosted stuff, I've out a simple OIDC requirement in my Apache config ( https://github.com/OpenIDC/mod_auth_openidc ) and have set up a plain Keycloak server (should've gone with something simpler but oh well).…
    comment by jeroenhd · 2023-10-26 · in Oh-Auth – Abusing OAuth to take over millions of accounts
  11. …party to apps behind the reverse proxy), regardless of what you have actually running your APIs: https://github.com/OpenIDC/mod_auth_openidc (there are other options, of course, but I went with that because I already use mod_md). It's…
    comment by KronisLV · 2023-10-11 · in Show HN: Obligator – An OpenID Connect server for self-hosters
  12. …module (it's certified and everything), which you can enable to have it work as a relying party: https://github.com/zmartzone/mod_auth_openidc Basically, the actual UI will be handled by another system that you might be using, for example,…
    comment by KronisLV · 2023-02-19 · in Password protect a static HTML page
  13. …different tech stacks running, you'd need 5 bits of separate configuration and libraries for that): https://github.com/zmartzone/mod_auth_openidc > Metrics aggregation, such as request throughput and response time, Distributed tracing This…
    comment by KronisLV · 2022-10-29 · in What Is a Service Mesh?
  14. …to sum up the current best practices. Depending on your use case I have good experience with https://github.com/zmartzone/mod_auth_openidc and https://github.com/panva/node-oidc-provider . https://github.com/OpenIDC/pyoidc also might be a…
    comment by gumarn_y · 2022-05-05 · in Keycloak: Open-Source Identity and Access Management
  15. …by default, but I use a persistent server cache on disk (the session tokens are stored encrypted) https://github.com/zmartzone/mod_auth_openidc/wiki/Session-m...
    comment by iso1210 · 2021-11-12 · in Using OAuth to add authentication to a React app