Forward authentication

Delegate authentication to an external service, like Authelia or oauth2-proxy.

Type	forwardAuth
Category	Access

Fields

Field	Type	Required	Default	Description
authUrl	text	yes	—	Service that authorizes each request (2xx = allow).
authSignIn	text	no	—	Where to redirect unauthenticated users.
forwardHostHeaders	true/false	no	—	Forward host headers.
insecureSkipVerify	true/false	no	—	Don't verify the auth service's TLS certificate.
authRequestHeaders	list of text	no	—	Request headers copied onto the call to the auth service. Empty sends the default set. Example: Authorization.
authResponseHeaders	key/value pairs	no	—	Headers the auth service returns, forwarded to your app. Leave the second column blank to keep the same name.
authResponseHeadersAsParams	key/value pairs	no	—	Same idea, but the value arrives as a query parameter instead of a header.
addAuthCookiesToResponse	list of text	no	—	Cookies set by the auth service that should reach the browser. Empty returns all of them. Example: session_id.