[TriLUG] nginx 2fa gateway ?

[Bryan Pearson via TriLUG]

There's this: https://github.com/bitly/oauth2_proxy

Which you can configure to auth against multiple services.

Google default
Azure
Facebook
GitHub
GitLab
LinkedIn
MyUSA

On top of that, you could likely use 2fa on one of those services.

I have experience with, so I can offer some assistance.




Bryan

On Tue, May 30, 2017 at 7:57 AM, Igor Partola via TriLUG <trilug at trilug.org>
wrote:

> If you want to use something like TOTP and Google Authenticator, I don't
> believe there is a ready made thing for that. Technically it is very
> possible to do this without writing a bunch of C because nginx has a built
> in Lua interpreter that you can use to create a custom set of views which
> will facilitate setting this all up. Practically this sounds like way more
> work than it would be worth.
>
> This is a case where I would turn to something like PHP or Django to
> handle authentication. You can then have nginx just verify that the user
> session is valid and serve all your content directly. It would require a
> bit of configuration wrangling but is probably the least effort solution
> that is also the most user friendly.
>
> Igor
> --
> This message was sent to: bwp.pearson at gmail.com <bwp.pearson at gmail.com>
> To unsubscribe, send a blank message to trilug-leave at trilug.org from that
> address.
> TriLUG mailing list : https://www.trilug.org/mailman/listinfo/trilug
> Unsubscribe or edit options on the web  : https://www.trilug.org/
> mailman/options/trilug/bwp.pearson%40gmail.com
> Welcome to TriLUG: http://trilug.org/welcome
>