Demain c’est #Halloween : pas d’horreur en PROD un vendredi soir 👻Donc, on vient de voir à #CloudNord, en 20 min comment sécuriser vos prototypes sans toucher au code, avec #OAuth2Proxy et #Anubis. Live demo incluse😉 #CloudNord2026
October 30, 2026 at 4:21 PM
Demain c’est #Halloween : pas d’horreur en PROD un vendredi soir 👻Donc, on vient de voir à #CloudNord, en 20 min comment sécuriser vos prototypes sans toucher au code, avec #OAuth2Proxy et #Anubis. Live demo incluse😉 #CloudNord2026
この辺の領域詳しくないから間違ってたらごめんなんだけど、たぶんそんな感じ🥺
WEBサイトとかWEBアプリならOauth2proxy使えばアクセス時のGoogle認証を強制できそうだけど、これ自体の脆弱性が見つかる可能性も考えると微妙かも🥺
AWS cognito→ALB（認証付き）ならフルマネージドだから何か脆弱性が見つかってもAmazonが勝手にアップデートとかしてくれるはず🥺
tech.enigmo.co.jp/entry/2024/0...
zenn.dev/lclco/articl...
WEBサイトとかWEBアプリならOauth2proxy使えばアクセス時のGoogle認証を強制できそうだけど、これ自体の脆弱性が見つかる可能性も考えると微妙かも🥺
AWS cognito→ALB（認証付き）ならフルマネージドだから何か脆弱性が見つかってもAmazonが勝手にアップデートとかしてくれるはず🥺
tech.enigmo.co.jp/entry/2024/0...
zenn.dev/lclco/articl...
OAuth2Proxyは便利だよって話 - エニグモ開発者ブログ
こんにちは、インフラグループ Kubernetesチームの福田です。 突然ですが、Webアプリケーションでユーザの認証にOIDCを使うことはよくあると思います。 弊社でも様々な箇所でOIDCが利用されてます。 自社で開発しているWebアプリケーションや最近のログイン機能を持つOSSの多くは、OIDC Providerさえ用意すればOIDCを利用することができます。 しかし、現実的にはログイン機能を...
tech.enigmo.co.jp
October 25, 2026 at 3:01 PM
この辺の領域詳しくないから間違ってたらごめんなんだけど、たぶんそんな感じ🥺
WEBサイトとかWEBアプリならOauth2proxy使えばアクセス時のGoogle認証を強制できそうだけど、これ自体の脆弱性が見つかる可能性も考えると微妙かも🥺
AWS cognito→ALB（認証付き）ならフルマネージドだから何か脆弱性が見つかってもAmazonが勝手にアップデートとかしてくれるはず🥺
tech.enigmo.co.jp/entry/2024/0...
zenn.dev/lclco/articl...
WEBサイトとかWEBアプリならOauth2proxy使えばアクセス時のGoogle認証を強制できそうだけど、これ自体の脆弱性が見つかる可能性も考えると微妙かも🥺
AWS cognito→ALB（認証付き）ならフルマネージドだから何か脆弱性が見つかってもAmazonが勝手にアップデートとかしてくれるはず🥺
tech.enigmo.co.jp/entry/2024/0...
zenn.dev/lclco/articl...
CVE-2026-40575 - oauth2-proxy
OAuth2 Proxy can let attackers bypass authentication checks if the software is configured to skip authentication for certain routes and a malicious client sends a fake…
Too many irrelevant or confusing CVEs? Use stackflag.com
#oauth2proxy #Golang #CVE #infosec
OAuth2 Proxy can let attackers bypass authentication checks if the software is configured to skip authentication for certain routes and a malicious client sends a fake…
Too many irrelevant or confusing CVEs? Use stackflag.com
#oauth2proxy #Golang #CVE #infosec
CVE-2026-40575: OAuth2 Proxy: Unauthenticated Access via Spoofed Header
OAuth2 Proxy can let attackers bypass authentication checks if the software is configured to skip authentication for certain routes and a malicious client.
stackflag.com
August 25, 2026 at 5:50 AM
CVE-2026-40575 - oauth2-proxy
OAuth2 Proxy can let attackers bypass authentication checks if the software is configured to skip authentication for certain routes and a malicious client sends a fake…
Too many irrelevant or confusing CVEs? Use stackflag.com
#oauth2proxy #Golang #CVE #infosec
OAuth2 Proxy can let attackers bypass authentication checks if the software is configured to skip authentication for certain routes and a malicious client sends a fake…
Too many irrelevant or confusing CVEs? Use stackflag.com
#oauth2proxy #Golang #CVE #infosec
CVE-2026-76835 - oauth2-proxy
The OAuth2 Proxy software treats any client as a trusted proxy by default, so it trusts the X-Forwarded-Uri header sent by the requester. An attacker can send a fake header that…
Too many irrelevant or confusing CVEs? Use stackflag.com
#oauth2proxy #CVE #infosec
The OAuth2 Proxy software treats any client as a trusted proxy by default, so it trusts the X-Forwarded-Uri header sent by the requester. An attacker can send a fake header that…
Too many irrelevant or confusing CVEs? Use stackflag.com
#oauth2proxy #CVE #infosec
CVE-2026-76835: OAuth2 Proxy may let unauthenticated users bypass login
The OAuth2 Proxy software treats any client as a trusted proxy by default, so it trusts the X-Forwarded-Uri header sent by the requester.
stackflag.com
August 24, 2026 at 7:30 PM
CVE-2026-76835 - oauth2-proxy
The OAuth2 Proxy software treats any client as a trusted proxy by default, so it trusts the X-Forwarded-Uri header sent by the requester. An attacker can send a fake header that…
Too many irrelevant or confusing CVEs? Use stackflag.com
#oauth2proxy #CVE #infosec
The OAuth2 Proxy software treats any client as a trusted proxy by default, so it trusts the X-Forwarded-Uri header sent by the requester. An attacker can send a fake header that…
Too many irrelevant or confusing CVEs? Use stackflag.com
#oauth2proxy #CVE #infosec
All I wanted was for an abstraction where users of my template could pick a hostname and not only would it create the ingress but also add a valid redirect uri to keycloak for my reverse proxy. The depths I had to delve to in order for getting something that doesn't hide details in the platform...
June 5, 2025 at 7:48 PM
All I wanted was for an abstraction where users of my template could pick a hostname and not only would it create the ingress but also add a valid redirect uri to keycloak for my reverse proxy. The depths I had to delve to in order for getting something that doesn't hide details in the platform...
Finally 🙌 finished the fully e2e tested example of #NGINX OAuth2 authorization w/ #OAuth2Proxy and #Keycloak at github.com/agebhar1/sni...
December 11, 2024 at 6:36 PM
Finally 🙌 finished the fully e2e tested example of #NGINX OAuth2 authorization w/ #OAuth2Proxy and #Keycloak at github.com/agebhar1/sni...
"Critical #OAuth2Proxy vulnerability (CVE-2025-54576) allows authentication bypass via query parameter manipulation. Upgrade to v7.11.0 and review configurations to secure your systems. #CyberSecurity #InfoSec" Link: thedailytechfeed.com/critical-aut...
July 31, 2025 at 3:13 PM
"Critical #OAuth2Proxy vulnerability (CVE-2025-54576) allows authentication bypass via query parameter manipulation. Upgrade to v7.11.0 and review configurations to secure your systems. #CyberSecurity #InfoSec" Link: thedailytechfeed.com/critical-aut...
A few months ago, we launched a "Keycloak as a Service" offering with a partner: @clever.cloud
The product evolves with each iteration: IP filtering, metrics, HA, autoscaling, OAuth2proxy for all runtimes...
Here's a quick overview of everything we've done.
blog.please-open.it/posts/keyclo...
The product evolves with each iteration: IP filtering, metrics, HA, autoscaling, OAuth2proxy for all runtimes...
Here's a quick overview of everything we've done.
blog.please-open.it/posts/keyclo...
Keycloak as a Service
Please-open.it has partnered with Clever-Cloud to offer a complete and accessible Keycloak as a Service.
blog.please-open.it
June 4, 2026 at 7:20 AM
A few months ago, we launched a "Keycloak as a Service" offering with a partner: @clever.cloud
The product evolves with each iteration: IP filtering, metrics, HA, autoscaling, OAuth2proxy for all runtimes...
Here's a quick overview of everything we've done.
blog.please-open.it/posts/keyclo...
The product evolves with each iteration: IP filtering, metrics, HA, autoscaling, OAuth2proxy for all runtimes...
Here's a quick overview of everything we've done.
blog.please-open.it/posts/keyclo...
oauth2proxy configuration generator for Keycloak
blog.please-open.it/posts/oauth2...
blog.please-open.it/posts/oauth2...
Keycloak OAuth2-Proxy Configuration Generator: Simplify Your Reverse Proxy Authentication Setup
Discover our new Keycloak SPI extension that automatically generates OAuth2-Proxy configurations. Export ready-to-use environment variables or complete configuration files directly from your Keycloak ...
blog.please-open.it
January 22, 2026 at 3:04 PM
oauth2proxy configuration generator for Keycloak
blog.please-open.it/posts/oauth2...
blog.please-open.it/posts/oauth2...
oauth2proxyでEntraをやらせようとおもったけどAPI で通信する場合は対応できないからapimで受けてJWTやらなんやらで処理…？
ほなどうやってBearerトークン用意するんじゃい？？
ほなどうやってBearerトークン用意するんじゃい？？
May 18, 2026 at 1:00 PM
oauth2proxyでEntraをやらせようとおもったけどAPI で通信する場合は対応できないからapimで受けてJWTやらなんやらで処理…？
ほなどうやってBearerトークン用意するんじゃい？？
ほなどうやってBearerトークン用意するんじゃい？？
3 vérités sur vos applis internes :
1️⃣ Elles n'ont pas d'auth native
2️⃣ Les devs n'ont pas le temps d'en ajouter
3️⃣ Les bots IA les scrapent déjà
À @devoxx.fr, on fix les 3 en 30 minutes, avec #OAuth2-Proxy et #Anubis
🗓 Demain, 17h 📍 Salle Paris 241
#Cybersécurité #OAuth2Proxy #Anubis #DevSecOps
1️⃣ Elles n'ont pas d'auth native
2️⃣ Les devs n'ont pas le temps d'en ajouter
3️⃣ Les bots IA les scrapent déjà
À @devoxx.fr, on fix les 3 en 30 minutes, avec #OAuth2-Proxy et #Anubis
🗓 Demain, 17h 📍 Salle Paris 241
#Cybersécurité #OAuth2Proxy #Anubis #DevSecOps
April 22, 2026 at 1:50 PM
3 vérités sur vos applis internes :
1️⃣ Elles n'ont pas d'auth native
2️⃣ Les devs n'ont pas le temps d'en ajouter
3️⃣ Les bots IA les scrapent déjà
À @devoxx.fr, on fix les 3 en 30 minutes, avec #OAuth2-Proxy et #Anubis
🗓 Demain, 17h 📍 Salle Paris 241
#Cybersécurité #OAuth2Proxy #Anubis #DevSecOps
1️⃣ Elles n'ont pas d'auth native
2️⃣ Les devs n'ont pas le temps d'en ajouter
3️⃣ Les bots IA les scrapent déjà
À @devoxx.fr, on fix les 3 en 30 minutes, avec #OAuth2-Proxy et #Anubis
🗓 Demain, 17h 📍 Salle Paris 241
#Cybersécurité #OAuth2Proxy #Anubis #DevSecOps