OIDC auth server for project contour

A really simple auth server to use with Project Contour.

Project support various authorisation method

• OIDC: project was made for this at first 😉
• htpasswd
• IP allow / deny list

Few more details

This project is made to add JSON Web Token (JWT) validation in K8S.

It provide:

• only the bare minimum features !

Is is focus on:

• speed
• stability

It does not provide:

• full OIDC implem

See more details on auth server at: https://projectcontour.io/guides/external-authorization/

K8S example

See wiki for details example.

HTTP headers informations

App will add following headers on success (each may be empty):

• Auth-Jwt-Sub: JWT specific: user subject
• Auth-Jwt-Aud: JWT specific: user audience
• Auth-Jwt-Iss: JWT specific: user issuer
• Auth-Email: User email
• Auth-Name: User name
• Auth-Unique-Name: User unique name
• Auth-Roles: User roles

Otherwise it will return 401 error status code and do not forward requests to protected backend.

Contribute guidelines

Feel free to create PR.
Any help, improvment ideas are welcome 😄 !

To run:

source .envrc
cargo r bearer

To test:

cargo t