Owner

pomerium

11 indexed repositories · View on GitHub

pomerium
Pomerium is an identity and context-aware access proxy.

Go · 5010 stars
ingress-controller
Pomerium Kubernetes Ingress Controller

Go · 36 stars
desktop-client
Cross Platform Desktop Application for establishing TCP connections through Pomerium

TypeScript · 22 stars
mcp-app-typescript-template
An MCP app template using Pomerium, the Model Context Protocol (MCP) TypeScript SDK, with a Node.js server and React widgets served by Vite.

TypeScript · 21 stars
cli
Pomerium CLI

Go · 13 stars
documentation
Documentation for Pomerium

MDX · 13 stars
sdk-go

Go · 5 stars
datasource
external data source contrib

Go · 4 stars
js-sdk

JavaScript · 0 stars
install

HCL · 0 stars
enterprise-client

Shell · 0 stars

Beginner friendly Everything

Open All

mcp: 401 from upstream becomes an unconditional 502 when auto-discovery fails (no upstream_oauth2 configured) Open

Difficulty 3/5 1-2 days Newbie friendliness 82/100

pomerium/pomerium#6785 · Opened Sep 18, 2026
feat!: migrate backend to Effect.ts Open

pomerium/mcp-app-typescript-template#142 · 1 assignee · Opened Sep 17, 2026
Explore module-mocking App instead of AppLike prop injection for Echo/widgets Open

Difficulty 5/5 Over a week Newbie friendliness 42/100

pomerium/mcp-app-typescript-template#136 · Opened Sep 16, 2026
k8s exec-credential never detects an invalid cached token: /healthz is a Pomerium-internal path Open

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

pomerium/cli#741 · 1 reaction · Opened Sep 16, 2026
MCP route returns 502 permanently after an outbound-connection reload (ext_proc: error getting upstream token) Open

pomerium/pomerium#6730 · 1 comment · 1 assignee · Opened Sep 4, 2026
Azure token exchange hides the real error by retrying an already-consumed authorization code Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

pomerium/ingress-controller#1513 · Opened Sep 1, 2026
crashing pods result in disconnects of long-running connections Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

pomerium/ingress-controller#1508 · Opened Sep 1, 2026
MCP upstream OAuth: upstream URL is built from the downstream `:scheme`, breaking PRM validation behind a TLS-terminating proxy Open

Difficulty 4/5 3-5 days Newbie friendliness 72/100

pomerium/pomerium#6698 · 1 comment · Opened Aug 27, 2026
MCP CIMD clients using `private_key_jwt` fail at `/authorize` with "unsupported token endpoint auth method" Open

mcp

Difficulty 5/5 Over a week Newbie friendliness 35/100

pomerium/pomerium#6692 · 7 comments · Opened Aug 25, 2026
Support alternative header for Cloud Run serverless auth Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

pomerium/pomerium#6677 · 1 comment · 1 reaction · Opened Aug 18, 2026
mcp: no way to disable CIMD advertisement, so DCR-preferring configuration is unreachable Open

Difficulty 3/5 1-2 days Newbie friendliness 76/100

pomerium/pomerium#6675 · 5 comments · Opened Aug 18, 2026
Update publish process Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

pomerium/js-sdk#120 · Opened Jul 29, 2026
Feature Request: Chocolatey / WinGet Installation Open

deployment feature

pomerium/desktop-client#553 · 1 comment · 1 assignee · Opened Jul 28, 2026
Opt-in OAuth 2.1 resource-server behavior for plain API routes (decoupled from `mcp.server`) Open

Difficulty 5/5 Over a week Newbie friendliness 45/100

pomerium/pomerium#6600 · Opened Jul 24, 2026
MCP `getOrRecreateSession` replays a stale upstream refresh token when the IdP rotates refresh tokens Open

pomerium/pomerium#6530 · 1 assignee · Opened Jul 15, 2026
`idp_access_token` bearer auth fails under `use_proxy_protocol: true` (all-in-one): internal `verify-access-token` loopback is reset Open

pomerium/pomerium#6503 · 1 comment · 1 assignee · Opened Jul 9, 2026
Add interactive reverse SSH tunneling guide to reverse tunnelling docks Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

pomerium/documentation#2264 · Opened Jun 10, 2026
MCP authorization code can fail with `invalid_grant` when it contains a `+` (StdEncoding vs form-urlencoded body) Open

Difficulty 3/5 1-2 days Newbie friendliness 74/100

pomerium/pomerium#6430 · 6 comments · Opened Jun 8, 2026
Chore: migrate to @eslint-react/eslint-plugin Open

pomerium/pomerium#6414 · 1 assignee · Opened Jun 3, 2026
FR: Custom Error handler Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

pomerium/pomerium#6343 · Opened May 13, 2026
Drop CJS build in favor of ESM-only output Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

pomerium/js-sdk#108 · Opened May 1, 2026
Better handling for allow_websockets and HTTP/2 health check Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

pomerium/pomerium#6278 · Opened Apr 17, 2026
Consider building docker images from distroless:base-nossl variants Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

pomerium/pomerium#6256 · 2 reactions · Opened Apr 9, 2026
Reserved routes -- need a way to limit their accessibility Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

pomerium/pomerium#6254 · Opened Apr 9, 2026
Add a skill and rubric for evaluating and creating guides Open

pomerium/documentation#2131 · 1 assignee · Opened Mar 25, 2026
500 Internal Server Error after reboot Open

NeedsDiscussion

Difficulty 4/5 3-5 days Newbie friendliness 45/100

pomerium/pomerium#6188 · 8 comments · Opened Mar 13, 2026
ingress-controller: enable SSH ports Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

pomerium/install#47 · Opened Mar 9, 2026
[Gateway API] Add BackendTLSPolicy support for HTTPS backend connections Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

pomerium/ingress-controller#1329 · 1 reaction · Opened Feb 20, 2026
Feature Request: Mobile (iOS / Android) Client Support for Pomerium TCP/UDP Access Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

pomerium/desktop-client#484 · 3 comments · Opened Jan 27, 2026
Add ability to have separate 'address' for UDP (HTTP3/QUIC) Open

docs/public

pomerium/pomerium#5989 · 1 assignee · Opened Dec 12, 2025
Support for cross namespace `PolicyFilter`s Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

pomerium/pomerium#5946 · Opened Nov 23, 2025
Updates to Ingress resources are not propagated without restart of pomerium pods Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

pomerium/ingress-controller#1267 · Opened Nov 10, 2025
chore: modernize eslint/prettier setup Open

Chore

pomerium/desktop-client#472 · 1 assignee · Opened Nov 4, 2025
chore: fix lint script Open

Chore frontend

pomerium/desktop-client#466 · 1 comment · 1 assignee · Opened Nov 3, 2025
gRPC message size exceeded during Ingress reconciliation Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

pomerium/ingress-controller#1266 · 2 reactions · Opened Nov 3, 2025
Add an example of a TS based MCP server Open

pomerium/js-sdk#85 · 1 comment · 1 reaction · 2 assignees · Opened Oct 12, 2025
Mutations of `HTTPRoute`s belonging to other controllers Open

pomerium/ingress-controller#1244 · 1 comment · 1 assignee · Opened Oct 3, 2025
chore: Move from yarn to npm Open

Chore

Difficulty 2/5 1-3 hours Newbie friendliness 38/100

pomerium/documentation#1981 · Opened Aug 26, 2025
oidc: support providers without userinfo_endpoint or refresh id_token Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

pomerium/pomerium#5791 · 1 reaction · Opened Aug 19, 2025
update Runtime Flags reference page to document Ingress Controller support Open

Fix Content

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

pomerium/documentation#1963 · Opened Aug 12, 2025
Add reference page for native SSH proxy settings Open

Fix Content

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

pomerium/documentation#1950 · Opened Jul 29, 2025
Allow configuring `jwt_issuer_format` Open

Difficulty 5/5 Over a week Newbie friendliness 30/100

pomerium/ingress-controller#1169 · Opened Jun 10, 2025
Mixed protocol is not supported Open

NeedsInvestigation

Difficulty 4/5 3-5 days Newbie friendliness 38/100

pomerium/ingress-controller#1142 · 2 comments · 3 reactions · Opened Apr 2, 2025
[bug] Pomerium Route Portal: TCP/UDP Route names wrong, when using Pomerium on non-443 Port Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

pomerium/pomerium#5555 · 1 reaction · Opened Mar 31, 2025
Pomerium Ingress Controller with pomerium-cli in proxy mode for TCP connections produces "route_not_found" error Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

pomerium/ingress-controller#1122 · Opened Mar 18, 2025
Postgres secret with custom keys Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

pomerium/ingress-controller#1118 · 1 reaction · Opened Mar 11, 2025
redirection problem Open

Support

pomerium/pomerium#5497 · 3 comments · 1 assignee · Opened Feb 25, 2025
Update Architecture Diagram with Latest Logo Open

Fix Content

pomerium/documentation#1760 · 1 assignee · Opened Jan 24, 2025
config: cookie secret not used for cookies Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

pomerium/pomerium#5355 · 1 comment · Opened Nov 5, 2024
Refactor autocert test setup to be clearer Open

Difficulty 3/5 1-2 days Newbie friendliness 48/100

pomerium/pomerium#5100 · Opened May 2, 2024

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

pomerium

Showing the newest 100

Get new issues in your inbox