{"repo":"curityio/nginx_oauth_proxy_module","free":true,"listed":false,"github":"https://github.com/curityio/nginx_oauth_proxy_module","clone":"git clone https://github.com/curityio/nginx_oauth_proxy_module.git","description":"NGINX module that decrypts secure cookies from Single Page Apps and forwards JWT access tokens to APIs","language":"Perl","stars":18,"topics":["nginx","oauth2","api-gateway","token-handler","oauth-proxy","spa"],"license":"Apache-2.0","category":"auth-billing-email","readme_excerpt":"OAuth Proxy NGINX Module An NGINX module that decrypts secure cookies in API calls from Single Page Applications.\\ This is the OAuth Proxy component of the Token Handler Pattern. High Level Usage The OAuth proxy is a forwarder placed in front of your business APIs, to deal with cookie authorization.\\ A typical flow for an SPA calling an API would work like this: - The SPA sends an AES256 encrypted HTTP Only cookie containing an opaque access token - The OAuth Proxy module decrypts the cookie to get the opaque access token - The opaque access token is then forwarded in the HTTP Authorization Header - The Phantom Token Module then swaps the opaque token for a JWT access token - The incoming HTTP Authorization Header is then updated with the JWT access token - The API must then verify the JWT in a zero trust manner, on every request Required Configuration Directives All of the directives are required for locations where the module is enabled.\\ NGINX will fail to load if the configuration for any locations fail validation: oauth proxy Syntax : oauth proxy on off Context : location The module is disabled by default but can be enabled for paths you choose. oauth proxy cookie name prefix Syntax : oauth proxy cookie name prefix string Context : location The prefix used in the SPA's cookie name, typically representing a company or product name.\\ The value supplied must not be empty, and example would lead to full cookie names such as example-at . oauth proxy encryption key Syntax : oa","default_branch":null,"files":null,"tree":[],"storefront":"/r/curityio","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/curityio/nginx_oauth_proxy_module/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}