I don't know why proxy authentication is not more common in open source applications. It's always either built-in authentication or LDAP (which is sometimes onl

I don't know why proxy authentication is not more common in open source applications. It's always either built-in authentication or LDAP (which is sometimes only available behind a 'premium' paid version), but both of those still involve the user typing their SSO credentials into the app which handles it as plain text. Proxy auth is so easy to implement from the app side, just accept an http header as the user's identity. That's it. I guess there are a couple places you need to coordinate with the auth proxy: which header contains the identity, which path to redirect to trigger an authentication prompt, maybe how to get a listing of other users if the app needs that, etc. But for a first pass this authentication method is by far the easiest to implement from the application's side. Why is it so uncommon?