kekru / forward-proxy-auth Goto Github PK

There should be an option to invalidate all tokens of a user.
Therefore we need a list, containing the username and the time of the logout.
All tokens, that were created before this time and belong to the given username, will be denied.
The list should be stored in etcd or redis and should have an expiration time.

As a simple brute force protection, there should be an option to enable a timelimit the user has to wait after a failed login attempt.

Rules for paths and methods should be available for each protected service.

These rules should be descriped as url parameters in the ...auth.forward.address label of traefik.

Rules should check for paths (regex, prefix), http methods, users and groups.

Maybe the url params can be like the following:

r1.methods=get,post
r1.path=/settings
r1.groups=admin
r2.path=/view
...

Integrate docker hub's automated repository tests: https://docs.docker.com/docker-hub/builds/automated-testing/

All integrationtests should be run, if possible.

Implement the text file authentication method.
Users and passwords (hashed) should be stored in a file.
Additionally there should be a definition of groups in the textfile. If ldap and textfile is enabled, then the groups should be aggregated, so that a user of the textfile can have textfile groups and ldap groups.