Skip to content

Commit 092dd18

Browse files
author
Sheng Jiang
committed
Proposal for identity aware proxy authentication mode
Adds a proposal for identity aware proxy authentication mode in Harbor.
1 parent 7cee938 commit 092dd18

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

proposals/new/identity-aware-proxy.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,8 @@
11
Harbor Proposal: Identity Aware proxy authentication mode
22

3-
Author: Sheng Jiang/shengjiang3, Eric Liu/ Date: Oct 3, 2023
3+
Author: Sheng Jiang/shengjiang3, Eric Liu/LiuShuaiyi
4+
5+
Date: Oct 10, 2023
46

57
## Abstract
68

@@ -58,6 +60,10 @@ the following OIDC attributes are needed:
5860
- Certificate authority data: base64 encoded PEM encoded certificate for the
5961
identity proxy.
6062
- Header name: HTTP header to get the ID token.
63+
- `enable_session_cookie` [Optional]: When set to `true`, after successful
64+
identity aware proxy authentication, Harbor will assign the user a cookie. As
65+
a result, the identity aware proxy will only have to provide the header to the
66+
login endpoint. The cookie will be used for authenticating all other routes.
6167

6268
The identity aware proxy should be able to be configured using the portal and/or
6369
the API.

0 commit comments

Comments
 (0)