Protect open backends with Openid/oauth with louketo-openid-proxy

open-id-proxy.md

Protect open backends with Openid/oauth with louketo-openid-proxy

louketo-openid-proxy - https://github.com/louketo/louketo-proxy

Looks like client-id in the token aud is mandatory.

To add Keycloakadmin -> Client -> Mappers -> Create -> mapper type audience -> select client id

docker run --name louketo-openid-proxy -it -d \
  -p 8440:8440 quay.io/louketo/louketo-proxy \
  --listen :8440 \
  --upstream-url https://un-protected-backend:8443 \
  --discovery-url https://sso.keycloak.com/auth/realms/<realm name> \
  --client-id oauth-test-client \
  --client-secret ********

curl --location --request GET 'http://localhost:8440/routes' \
--header 'Authorization: Bearer ${token}'