goauthentik / goauthentik/authentik

Authorization header for proxied applications can clash with proxied application

Open
#9,540 1 comment 2 reactions 0 assignees View on GitHub
enhancement enhancement/confirmed
Dominant language
Python
Stars
25.6k
Forks
2k
Avg merge
1d 1h
Merged PRs (30d)
644

Description

I'm trying to access the apps behind authentik with an API key. This seems to work if I add an header called Authorization: Basic APIKEYHERE

The issue with this is that this breaks all authorization for apps behind it. Is it possible to use another header for example ApikeyAccess: APIKEYHERE

For example API management from Azure calls it a subscription key and it's passed in another header than the Authorization header so programs don't break

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.