Welcome! Log In Create A New Profile

Advanced

Re: OAuth/OpenID

Sergey A. Osokin
February 15, 2022 10:12AM
Hi Michael,

hope you're doing well.

On Tue, Feb 15, 2022 at 08:41:08AM -0500, Michael Powell wrote:
> Hello,
>
> Setting up some web sites, etc, looking into alternatives to Amazon
> Cognito, for instance, for user and/or 'identity' management, integration
> with 3P OAuth providers, i.e. Google, Facebook, etc. As I understand it,
> nginx provides these features, and more?

Yes, it's possible to setup OIDC flow with NGINX products. Please note
an Identity Provider (IdP) needs to be configured as well, and that one
is a separate product.

Here's the reference implementation of OpenID Connection integration
for NGINX Plus, [1]. It uitilizes some NGINX Plus features, such as
auth_jwt directive, [2] from the ngx_http_auth_jwt_module, [3], keyval [4]
and keyval_zone [5] directives from ngx_http_keyval_module [6] module,
and NGINX JavaScript module, [7].

References:
[1] https://github.com/nginxinc/nginx-openid-connect
[2] https://nginx.org/en/docs/http/ngx_http_auth_jwt_module.html#auth_jwt
[3] https://nginx.org/en/docs/http/ngx_http_auth_jwt_module.html
[4] https://nginx.org/en/docs/http/ngx_http_keyval_module.html#keyval
[5] https://nginx.org/en/docs/http/ngx_http_keyval_module.html#keyval_zone
[6] https://nginx.org/en/docs/http/ngx_http_keyval_module.html
[7] http://nginx.org/en/docs/njs/

--
Sergey Osokin
_______________________________________________
nginx mailing list -- nginx@nginx.org
To unsubscribe send an email to nginx-leave@nginx.org
Subject Author Posted

Re: OAuth/OpenID

Michael Powell February 15, 2022 08:46AM

Re: OAuth/OpenID

Sergey A. Osokin February 15, 2022 10:12AM

Re: OAuth/OpenID

Michael Powell February 15, 2022 03:24PM

Re: OAuth/OpenID

Paul February 15, 2022 06:08PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 167
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready