{"data":{"slug":"oauth2-proxy","name":"OAuth2 Proxy","tagline":"MIT CNCF Sandbox reverse-proxy auth gate vs external IdPs","category":"devops","categoryName":"DevOps","url":"https://oauth2-proxy.github.io/oauth2-proxy/","github":"https://github.com/oauth2-proxy/oauth2-proxy","pricing":"open-source","hook":"oauth2-proxy is the reverse-proxy auth gate in front of your apps when Authelia/Tinyauth/authentik are portals or IdPs and Dex is a federated IdP — not an app-fronting proxy.","whatsGood":"MIT. CNCF Sandbox. oauth2-proxy/oauth2-proxy. Standalone reverse proxy or middleware that authenticates against *external* OAuth2/OIDC providers (Google, GitHub, Azure AD, Keycloak, …) then forwards authorized requests. Email/domain/group allowlists. Docs at oauth2-proxy.github.io/oauth2-proxy; images on quay.io/oauth2-proxy.","theCatch":"NOT an IdP and NOT a user store — it only gates apps against an upstream provider you already run or rent. Vs Authelia/Tinyauth (proxy SSO / portal), authentik (full IdP), and Dex (federated OIDC IdP that still is not an app-fronting proxy): oauth2-proxy sits in front of apps, talks out to an IdP, and never owns accounts. You still configure the upstream client, cookies/headers, and the protected upstreams.","verdict":"MIT CNCF reverse-proxy auth gate. Free forever; bring an external IdP — this is not one.","addedAt":"2026-09-10","featured":false,"domain":"Auth","subSpecialty":"Auth","subcategory":"Auth","tags":["self-host","permissive","sandbox","auth","active"],"capabilities":["oauth","proxy","oidc"],"surfaces":["Self-host"],"ecosystem":["Go","Multi-platform"],"licenseModel":"OSS/MIT","githubStars":15212,"starsPerWeek":32,"access":"free","archived":false,"repo":{"createdAt":"2017-09-29","pushedAt":"2026-10-18","license":"MIT","archived":false,"checkedAt":"2026-10-19"}},"related":[{"slug":"github-actions","name":"GitHub Actions","tagline":"CI/CD that lives where your code does"},{"slug":"docker","name":"Docker","tagline":"Container runtime that changed deployment"},{"slug":"kubernetes","name":"Kubernetes","tagline":"Container orchestration at scale"},{"slug":"pulumi","name":"Pulumi","tagline":"Infrastructure as code in real languages"},{"slug":"fly-io","name":"Fly.io","tagline":"Deploy apps to VMs close to your users"}],"links":{"self":"/api/gems/oauth2-proxy","html":"/gems/oauth2-proxy","markdown":"/gems/oauth2-proxy.md","category":"/api/gems?category=devops","categoryPage":"/stacks/devops"}}