Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature]: use username (or any other attribute from the provider) in basic auth header instead of the ID #2627

Open
netchild opened this issue May 3, 2024 · 0 comments

Comments

@netchild
Copy link

netchild commented May 3, 2024

Motivation

The request is to have an option which puts the username from the provider (e.g. keycloak-oidc), or more generic an attribute from the provider, which can be "username", "email" or whatever instead of the ID into the username field of the http auth.

Issue:
I want to protect an application with a simple user auth / access model. It uses http auth. The username inside the http auth is displayed after login. Keycloak provides an UUID instead of a name for the username in the http auth.

I can successfully use oauth2-proxy with this application (with a generic http auth pw), but it displays what keycloak calls "ID" (looks like an UUID), and not the username. Inside the application I can manage access to parts of the application, but I would have to use the ID instead of the username to do that. This means I have to do some cross referencing to know who is who instead of simply getting/knowing the username.

Possible solution

No response

Provider

None

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant