A really simple auth server to use with Project Contour.

Project support various authorisation method

• OIDC: project was made for this at first 😉
• htpasswd
• IP allow / deny list

This project is made to add JSON Web Token (JWT) validation in K8S.

It provide:

• only the bare minimum features !

Is is focus on:

• speed
• stability

It does not provide:

• full OIDC implem

See more details on auth server at: https://projectcontour.io/guides/external-authorization/

See wiki for details example.

App will add following headers on success (each may be empty):

• Auth-Jwt-Sub: JWT specific: user subject
• Auth-Jwt-Aud: JWT specific: user audience
• Auth-Jwt-Iss: JWT specific: user issuer
• Auth-Email: User email
• Auth-Name: User name
• Auth-Unique-Name: User unique name
• Auth-Roles: User roles

Otherwise it will return 401 error status code and do not forward requests to protected backend.

Feel free to create PR. Any help, improvment ideas are welcome 😄 !

To run:

source .envrc
cargo r bearer

To test:

cargo t