Caddy2 X-Forwarded-User

cHolzberger · April 6, 2020, 1:10pm

1. My Caddy version 2.0.0-rc1

2. How I run Caddy:

xxx.url

basicauth /* {
xxx
}

route /* {
reverse_proxy 127.0.0.1:8080 {
header_up X-Forwarded-User {http.handlers.authentication.user}
}
}

a. System environment:

caddy on linux

b. Command:

caddy run

3. The problem I’m having:

how can i pass the user that autenticated to basicauth to my backend server?
is it possible to sign this request somehow?

francislavoie · April 6, 2020, 5:11pm

I just dug through the code, I think you can use this replacer:

{http.auth.user.id}

In other words:

header_up X-Forwarded-User {http.auth.user.id}

github.com

caddyserver/caddy/blob/master/modules/caddyhttp/caddyauth/caddyauth.go#L80

    
      
          
          
func (a Authentication) ServeHTTP(w http.ResponseWriter, r *http.Request, next caddyhttp.Handler) error {
          	var user User
          	var authed bool
          	var err error
          	for provName, prov := range a.Providers {
          		user, authed, err = prov.Authenticate(w, r)
          		if err != nil {
          			a.logger.Error("auth provider returned error",
          				zap.String("provider", provName),
          				zap.Error(err))
          			continue
          		}
          		if authed {
          			break
          		}
          	}
          	if !authed {
          		return caddyhttp.Error(http.StatusUnauthorized, fmt.Errorf("not authenticated"))
          	}

system · May 6, 2020, 5:11pm

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.