oauth2-proxy (⭐️ 15293)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
October 29, 2026 at 12:14 PM
oauth2-proxy (⭐️ 15293)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
oauth2-proxy (⭐️ 15293)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
October 29, 2026 at 12:14 PM
oauth2-proxy (⭐️ 15293)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
oauth2-proxy (⭐️ 15262)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
October 24, 2026 at 1:53 PM
oauth2-proxy (⭐️ 15262)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
The SSO tax is real. A middle ground when the vendor's tier is out of budget: put the tool behind an identity-aware proxy (oauth2-proxy, or Cloudflare Access's free plan for small teams) so sign-in and offboarding still go through the directory, and keep the tool's own admin login offline.
October 19, 2026 at 11:25 AM
The SSO tax is real. A middle ground when the vendor's tier is out of budget: put the tool behind an identity-aware proxy (oauth2-proxy, or Cloudflare Access's free plan for small teams) so sign-in and offboarding still go through the directory, and keep the tool's own admin login offline.
Migrating from NGINX Ingress to ALB: Handling oauth2-proxy #devops #architecture
Migrating from NGINX Ingress to ALB: Handling oauth2-proxy
Groups
Conversations
All groups and messages
Sign in
Migrating from NGINX Ingress to ALB: Handling oauth2-proxy
0 views
Eyal Estrin
unread,
12:04 PM (15 minutes ago)
to
https://aws.amazon.com/blogs/containers/migrating-from-nginx-ingress-to-alb-handling-oauth2-proxy/
Eyal Estrin
Author | Cloud Architect | AWS • Azure • GCP Insights
Social: @eyalestrin
Connect: https://linktr.ee/eyalestrin Blog: https://security-24-7.com
Reply all
Reply to author
Forward
dlvr.it
October 8, 2026 at 7:19 PM
Migrating from NGINX Ingress to ALB: Handling oauth2-proxy #devops #architecture
A critical vulnerability in OAuth2 Proxy can be exploited by unauthenticated remote attackers to bypass authentication, patched in v7.15.2, affecting deployments with --reverse-proxy enabled
Read more
Read more
October 7, 2026 at 8:24 PM
A critical vulnerability in OAuth2 Proxy can be exploited by unauthenticated remote attackers to bypass authentication, patched in v7.15.2, affecting deployments with --reverse-proxy enabled
Read more
Read more
📢 New #updates · 8 Oct #2.1
· Dex v2.46.0 — Added OAuth2 client credentials flow and connector grants
· fluxer fluxer-app-proxy-self-hosted@2026.1007.213033 — Improved user interface navigation
· Dex v2.46.0 — Added OAuth2 client credentials flow and connector grants
· fluxer fluxer-app-proxy-self-hosted@2026.1007.213033 — Improved user interface navigation
October 8, 2026 at 12:38 AM
📢 New #updates · 8 Oct #2.1
· Dex v2.46.0 — Added OAuth2 client credentials flow and connector grants
· fluxer fluxer-app-proxy-self-hosted@2026.1007.213033 — Improved user interface navigation
· Dex v2.46.0 — Added OAuth2 client credentials flow and connector grants
· fluxer fluxer-app-proxy-self-hosted@2026.1007.213033 — Improved user interface navigation
This article presents two solutions for migrating from NGINX Ingress to ALB while preserving OIDC authentication with oauth2-proxy: reverse proxy mode or ALB native OIDC.
Migrating from NGINX Ingress to ALB: Handling oauth2-proxy
This article presents two solutions for migrating from NGINX Ingress to ALB while preserving OIDC authentication with oauth2-proxy: reverse proxy mode or ALB native OIDC.
aws-news.com
October 6, 2026 at 3:58 PM
This article presents two solutions for migrating from NGINX Ingress to ALB while preserving OIDC authentication with oauth2-proxy: reverse proxy mode or ALB native OIDC.
📰 New article by Ali Sanhaji
Migrating from NGINX Ingress to ALB: Handling oauth2-proxy
#AWS #Containers
Migrating from NGINX Ingress to ALB: Handling oauth2-proxy
#AWS #Containers
Migrating from NGINX Ingress to ALB: Handling oauth2-proxy
The NGINX Ingress Controller is retired. If you run oauth2-proxy with NGINX for OpenID Connect authentication, switching to the AWS Load Balancer Controller can silently break your auth. This post shows two ways to keep OIDC working on an Application Load Balancer: run oauth2-proxy in reverse proxy mode, or use ALB native OIDC.
aws.amazon.com
October 6, 2026 at 3:56 PM
📰 New article by Ali Sanhaji
Migrating from NGINX Ingress to ALB: Handling oauth2-proxy
#AWS #Containers
Migrating from NGINX Ingress to ALB: Handling oauth2-proxy
#AWS #Containers
⚠️ Deprecation warning!
The NGINX Ingress Controller has been deprecated.
#AWS #Containers
Read the full article:
The NGINX Ingress Controller has been deprecated.
#AWS #Containers
Read the full article:
Migrating from NGINX Ingress to ALB: Handling oauth2-proxy
The NGINX Ingress Controller is retired. If you run oauth2-proxy with NGINX for OpenID Connect authentication, switching to the AWS Load Balancer Controller can silently break your auth. This post shows two ways to keep OIDC working on an Application Load Balancer: run oauth2-proxy in reverse proxy mode, or use ALB native OIDC.
aws.amazon.com
October 6, 2026 at 3:56 PM
⚠️ Deprecation warning!
The NGINX Ingress Controller has been deprecated.
#AWS #Containers
Read the full article:
The NGINX Ingress Controller has been deprecated.
#AWS #Containers
Read the full article:
Finally got Pocket ID set up and wow that is a polished piece of software. The checking boxes in a list to enable a user/group etc is a bit weird, but otherwise excellent. Combined it with caddy and oauth2-proxy to keep stuff off the public internet, but accessible to invited users, very cool
October 4, 2026 at 4:58 PM
Finally got Pocket ID set up and wow that is a polished piece of software. The checking boxes in a list to enable a user/group etc is a bit weird, but otherwise excellent. Combined it with caddy and oauth2-proxy to keep stuff off the public internet, but accessible to invited users, very cool
oauth2-proxy (⭐️ 15040)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
October 4, 2026 at 1:11 PM
oauth2-proxy (⭐️ 15040)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
Ouch - some really nasty vulnerabilities in oauth2-proxy.
Expecting exploits for these soon
github.com/oauth2-proxy...
Expecting exploits for these soon
github.com/oauth2-proxy...
Release v7.15.5 · oauth2-proxy/oauth2-proxy
Release Highlights
🔵 Golang version upgrade to v1.26.8
Upgrade of all dependencies to their latest versions
🕵️♀️ Vulnerabilities have been addressed
CVE-2026-56855
CVE-2026-78662
CVE-2026-843...
github.com
October 1, 2026 at 4:11 PM
Ouch - some really nasty vulnerabilities in oauth2-proxy.
Expecting exploits for these soon
github.com/oauth2-proxy...
Expecting exploits for these soon
github.com/oauth2-proxy...
October 1, 2026 at 6:11 PM
[Backport release-26.05] oauth2-proxy: 7.15.4 -> 7.15.5
https://github.com/NixOS/nixpkgs/pull/569108
#security
https://github.com/NixOS/nixpkgs/pull/569108
#security
October 1, 2026 at 7:36 PM
[Backport release-26.05] oauth2-proxy: 7.15.4 -> 7.15.5
https://github.com/NixOS/nixpkgs/pull/569108
#security
https://github.com/NixOS/nixpkgs/pull/569108
#security
「OAuth2 Proxy」に認証回避の脆弱性 - 修正版は未公開
認証プロクシ「OAuth2 Proxy」に認証を回避されるおそれがある深刻な脆弱性が明らかとなった。ソースリポジトリにおいて修正が進められているが、修正版は未提供となっている。
リバースプロクシモードで「trusted_proxy_ip」を設定していない場合、細工した「X-Forwarded-Uri」ヘッダによって認証を回避できる脆弱性「CVE-2026-76835」が確認されたもの。デフォルト構成でも影響を受けるという。
...
「同7.15.2」にて「CVE-2026-40575」として対策を実施したものの、...
認証プロクシ「OAuth2 Proxy」に認証を回避されるおそれがある深刻な脆弱性が明らかとなった。ソースリポジトリにおいて修正が進められているが、修正版は未提供となっている。
リバースプロクシモードで「trusted_proxy_ip」を設定していない場合、細工した「X-Forwarded-Uri」ヘッダによって認証を回避できる脆弱性「CVE-2026-76835」が確認されたもの。デフォルト構成でも影響を受けるという。
...
「同7.15.2」にて「CVE-2026-40575」として対策を実施したものの、...
【セキュリティ ニュース】「OAuth2 Proxy」に認証回避の脆弱性 - 修正版は未公開（1ページ目 / 全2ページ）：Security NEXT
認証プロクシ「OAuth2 Proxy」に認証を回避されるおそれがある深刻な脆弱性が明らかとなった。ソースリポジトリにおいて修正が進められているが、修正版は未提供となっている。
：Security NEXT
www.security-next.com
September 24, 2026 at 10:21 PM
「OAuth2 Proxy」に認証回避の脆弱性 - 修正版は未公開
認証プロクシ「OAuth2 Proxy」に認証を回避されるおそれがある深刻な脆弱性が明らかとなった。ソースリポジトリにおいて修正が進められているが、修正版は未提供となっている。
リバースプロクシモードで「trusted_proxy_ip」を設定していない場合、細工した「X-Forwarded-Uri」ヘッダによって認証を回避できる脆弱性「CVE-2026-76835」が確認されたもの。デフォルト構成でも影響を受けるという。
...
「同7.15.2」にて「CVE-2026-40575」として対策を実施したものの、...
認証プロクシ「OAuth2 Proxy」に認証を回避されるおそれがある深刻な脆弱性が明らかとなった。ソースリポジトリにおいて修正が進められているが、修正版は未提供となっている。
リバースプロクシモードで「trusted_proxy_ip」を設定していない場合、細工した「X-Forwarded-Uri」ヘッダによって認証を回避できる脆弱性「CVE-2026-76835」が確認されたもの。デフォルト構成でも影響を受けるという。
...
「同7.15.2」にて「CVE-2026-40575」として対策を実施したものの、...
Mood: 🔍
Scrutiny is high across the web today. Developers are flagging a serious OAuth2 Proxy vulnerability, while the Fed’s new stablecoin rules have people on edge. Political discourse remains tense over the stalled SAVE Act and Georgia’s rising cost of living.
Scrutiny is high across the web today. Developers are flagging a serious OAuth2 Proxy vulnerability, while the Fed’s new stablecoin rules have people on edge. Political discourse remains tense over the stalled SAVE Act and Georgia’s rising cost of living.
September 24, 2026 at 10:33 PM
Mood: 🔍
Scrutiny is high across the web today. Developers are flagging a serious OAuth2 Proxy vulnerability, while the Fed’s new stablecoin rules have people on edge. Political discourse remains tense over the stalled SAVE Act and Georgia’s rising cost of living.
Scrutiny is high across the web today. Developers are flagging a serious OAuth2 Proxy vulnerability, while the Fed’s new stablecoin rules have people on edge. Political discourse remains tense over the stalled SAVE Act and Georgia’s rising cost of living.
CVE-2026-59822 (CVSS 8.8): LiteLLM MCP proxy lets attackers skip OAuth2 login entirely, no credentials needed. First MCP flaw in CISA KEV. Exploited since Sep 1. Upgrade to v1.84.0+. Federal deadline: today.
diesec.com/2026/09/lite...
diesec.com/de/2026/09/l...
#cybersecurity #diesec #LiteLLM
diesec.com/2026/09/lite...
diesec.com/de/2026/09/l...
#cybersecurity #diesec #LiteLLM
September 18, 2026 at 8:00 AM
CVE-2026-59822 (CVSS 8.8): LiteLLM MCP proxy lets attackers skip OAuth2 login entirely, no credentials needed. First MCP flaw in CISA KEV. Exploited since Sep 1. Upgrade to v1.84.0+. Federal deadline: today.
diesec.com/2026/09/lite...
diesec.com/de/2026/09/l...
#cybersecurity #diesec #LiteLLM
diesec.com/2026/09/lite...
diesec.com/de/2026/09/l...
#cybersecurity #diesec #LiteLLM
i've been practising useplaintext.email as i've switched to using aerc/email-oauth2-proxy, the impetus being owl in thunderbird stopped fetching my o365 mail.
i realise (again) how annoying html emails are, and i am once again mad at microsoft for the safelinks bullshit.
(quit altering my emails!)
i realise (again) how annoying html emails are, and i am once again mad at microsoft for the safelinks bullshit.
(quit altering my emails!)
Use plain text email
useplaintext.email
September 17, 2026 at 8:57 AM
i've been practising useplaintext.email as i've switched to using aerc/email-oauth2-proxy, the impetus being owl in thunderbird stopped fetching my o365 mail.
i realise (again) how annoying html emails are, and i am once again mad at microsoft for the safelinks bullshit.
(quit altering my emails!)
i realise (again) how annoying html emails are, and i am once again mad at microsoft for the safelinks bullshit.
(quit altering my emails!)
TraefikがGateway APIを用いた認証フローの実装手順を公開
エンジニアへの影響：Ingress-nginx依存から脱却し標準規格での認証連携が可能に
https://dev.to/alikhil/protect-kubernetes-services-with-oauth2-proxy-gateway-api-traefik-and-pocket-id-35mo
エンジニアへの影響：Ingress-nginx依存から脱却し標準規格での認証連携が可能に
https://dev.to/alikhil/protect-kubernetes-services-with-oauth2-proxy-gateway-api-traefik-and-pocket-id-35mo
Protect Kubernetes Services with OAuth2 Proxy, Gateway API, Traefik, and Pocket ID
My previous guide used ingress-nginx annotations to put internal Kubernetes services behind OAuth2...
dev.to
September 15, 2026 at 10:00 PM
TraefikがGateway APIを用いた認証フローの実装手順を公開
エンジニアへの影響：Ingress-nginx依存から脱却し標準規格での認証連携が可能に
https://dev.to/alikhil/protect-kubernetes-services-with-oauth2-proxy-gateway-api-traefik-and-pocket-id-35mo
エンジニアへの影響：Ingress-nginx依存から脱却し標準規格での認証連携が可能に
https://dev.to/alikhil/protect-kubernetes-services-with-oauth2-proxy-gateway-api-traefik-and-pocket-id-35mo
oauth2-proxy (⭐️ 14932)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
September 9, 2026 at 11:04 PM
oauth2-proxy (⭐️ 14932)
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.
#go
CVE-2026-59822 isn't just a LiteLLM bug — it's a pattern.
OAuth2 fallback logic in AI middleware means a malformed token doesn't fail closed. It fails open.
Your proxy IS your perimeter. Auth bypass there = every model endpoint exposed, no lateral movement needed.
OAuth2 fallback logic in AI middleware means a malformed token doesn't fail closed. It fails open.
Your proxy IS your perimeter. Auth bypass there = every model endpoint exposed, no lateral movement needed.
September 8, 2026 at 12:37 PM
CVE-2026-59822 isn't just a LiteLLM bug — it's a pattern.
OAuth2 fallback logic in AI middleware means a malformed token doesn't fail closed. It fails open.
Your proxy IS your perimeter. Auth bypass there = every model endpoint exposed, no lateral movement needed.
OAuth2 fallback logic in AI middleware means a malformed token doesn't fail closed. It fails open.
Your proxy IS your perimeter. Auth bypass there = every model endpoint exposed, no lateral movement needed.
[Backport release-26.05] oauth2-proxy: 7.15.3 -> 7.15.4
https://github.com/NixOS/nixpkgs/pull/559044
#security
https://github.com/NixOS/nixpkgs/pull/559044
#security
September 2, 2026 at 4:09 PM
[Backport release-26.05] oauth2-proxy: 7.15.3 -> 7.15.4
https://github.com/NixOS/nixpkgs/pull/559044
#security
https://github.com/NixOS/nixpkgs/pull/559044
#security
n8n 2.37.1 fixt einen wichtigen Bug: OAuth2-Token-Requests laufen jetzt korrekt über Umgebungs-Proxies in allen Prozessen. Ein Stabilitätsupdate für alle, die n8n hinter einem Proxy betreiben. #n8n
Mehr von mir: linkedin.com/in/maurice-putinas
Mehr von mir: linkedin.com/in/maurice-putinas
August 26, 2026 at 12:00 PM
n8n 2.37.1 fixt einen wichtigen Bug: OAuth2-Token-Requests laufen jetzt korrekt über Umgebungs-Proxies in allen Prozessen. Ein Stabilitätsupdate für alle, die n8n hinter einem Proxy betreiben. #n8n
Mehr von mir: linkedin.com/in/maurice-putinas
Mehr von mir: linkedin.com/in/maurice-putinas
