goauthentik / goauthentik/authentik
Authorization header for proxied applications can clash with proxied application
Open
enhancement
enhancement/confirmed
- Dominant language
- Python
- Stars
- 25.6k
- Forks
- 2k
- Avg merge
- 1d 1h
- Merged PRs (30d)
- 644
Description
I'm trying to access the apps behind authentik with an API key. This seems to work if I add an header called Authorization: Basic APIKEYHERE
The issue with this is that this breaks all authorization for apps behind it. Is it possible to use another header for example ApikeyAccess: APIKEYHERE
For example API management from Azure calls it a subscription key and it's passed in another header than the Authorization header so programs don't break
Contributor guide
Assessment
This issue has not been assessed yet.