Skip to content

feat: add proxy_auth_header for reverse proxy authentication#789

Open
gmbuell wants to merge 2 commits intocharmbracelet:mainfrom
gmbuell:feat/proxy-auth-header
Open

feat: add proxy_auth_header for reverse proxy authentication#789
gmbuell wants to merge 2 commits intocharmbracelet:mainfrom
gmbuell:feat/proxy-auth-header

Conversation

@gmbuell
Copy link
Copy Markdown

@gmbuell gmbuell commented Mar 4, 2026

Summary

  • Adds proxy_auth_header config option to HTTPConfig
  • When set, the server trusts the named header from a reverse proxy for user identification
  • Enables SSO integration via API gateways like oathkeeper

Test plan

  • Set proxy_auth_header: "X-User" in config
  • Verify requests with the header authenticate as the named user
  • Verify requests without the header fall back to Authorization header

Allow soft-serve to trust a header from a reverse proxy (e.g. oathkeeper)
for user identification, enabling SSO integration.
@gmbuell gmbuell requested a review from aymanbagabas as a code owner March 4, 2026 23:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant