3 ms·

Authentik is also worth checking out: https://goauthentik.io/ https://goauthentik.io/ The biggest benefit is that Authentik supports Forward Auth out of box. T

by whazor 4y ago

Authentik is also worth checking out: https://goauthentik.io/ https://goauthentik.io/ The biggest benefit is that Authentik supports Forward Auth out of box. This means that you might not need oauth2proxy.

gabereiser 4y ago
I’ve been a keycloak advocate since my jboss days (really the only good thing that came out of jboss). I have never heard of authentik and I’m so glad you mentioned it, it looks amazing! I had been contemplating doing a similar project but this would satisfy that need. Thank you.
- dugite-code 4y ago
  Just be careful with Athentik, it is an extremely young, rapidly developing project. So expect the odd pitfall
  - gabereiser 4y ago
    Yeah, needs battle hardening, but I like what they are doing and the features it offers so bookmarked and starred!
p_l 4y ago
Arguably best is to not have proxied oauth at all and instead implement oauth in your software.
CGamesPlay 4y ago
This looks awesome! I dropped Keycloak because it's 2 GiB of RAM was too much for me to commit to SSO on my tiny VPS, so I just switched to static htpasswd management. But this looks like it might be a great replacement. It seems to support groups/selective access to services through group membership, which is great. Does it support username authentication or does it require that an LDAP server or other OIDP is used as a source of truth?
- kirbyfan64sos 4y ago
  Do note that Authentik, being a Python project, still uses a decent amount of RAM IMO. I think Keycloak 18 should use less memory? Might be worth a try.
hamandcheese 4y ago
I was interested in Authentik, but I was perusing the docs and was extremely put off by the way in which Authentik manages itself as well as additional “outposts”. > The docker integration will automatically deploy and manage outpost containers using the Docker HTTP API. > This integration has the advantage over manual deployments of automatic updates (whenever authentik is updated, it updates the outposts) NO. I do not want software I use to update itself automatically in prod. And I especially do not want to give a docker socket to it so that it can automatically add new components. https://goauthentik.io/docs/outposts/integrations/docker https://goauthentik.io/docs/outposts/integrations/docker
eclipsenet 4y ago
Looks like it got the internet hug-o-death or something b/c it looks like it's down.
deadbunny 4y ago
Getting cert errors for me when visiting that link. Using a self signed cert by the looks of it? Edit: Ok now. Looks like they use Let's Encrypt which will default to a self signed cert if it can't get a LE one for whatever reason IIRC.

by whazor 4y ago

gabereiser 4y ago

I’ve been a keycloak advocate since my jboss days (really the only good thing that came out of jboss). I have never heard of authentik and I’m so glad you mentioned it, it looks amazing! I had been contemplating doing a similar project but this would satisfy that need. Thank you.

dugite-code 4y ago
Just be careful with Athentik, it is an extremely young, rapidly developing project. So expect the odd pitfall
- gabereiser 4y ago
  Yeah, needs battle hardening, but I like what they are doing and the features it offers so bookmarked and starred!

p_l 4y ago

Arguably best is to not have proxied oauth at all and instead implement oauth in your software.

CGamesPlay 4y ago

This looks awesome! I dropped Keycloak because it's 2 GiB of RAM was too much for me to commit to SSO on my tiny VPS, so I just switched to static htpasswd management. But this looks like it might be a great replacement. It seems to support groups/selective access to services through group membership, which is great. Does it support username authentication or does it require that an LDAP server or other OIDP is used as a source of truth?

kirbyfan64sos 4y ago
Do note that Authentik, being a Python project, still uses a decent amount of RAM IMO. I think Keycloak 18 should use less memory? Might be worth a try.

hamandcheese 4y ago

I was interested in Authentik, but I was perusing the docs and was extremely put off by the way in which Authentik manages itself as well as additional “outposts”. > The docker integration will automatically deploy and manage outpost containers using the Docker HTTP API. > This integration has the advantage over manual deployments of automatic updates (whenever authentik is updated, it updates the outposts) NO. I do not want software I use to update itself automatically in prod. And I especially do not want to give a docker socket to it so that it can automatically add new components. https://goauthentik.io/docs/outposts/integrations/docker https://goauthentik.io/docs/outposts/integrations/docker

eclipsenet 4y ago

Looks like it got the internet hug-o-death or something b/c it looks like it's down.

deadbunny 4y ago

Getting cert errors for me when visiting that link. Using a self signed cert by the looks of it? Edit: Ok now. Looks like they use Let's Encrypt which will default to a self signed cert if it can't get a LE one for whatever reason IIRC.