Vouch Proxy
MIT SSO for Nginx via auth_request and OAuth/OIDC
DevOps / Infrastructure · OSS/MIT · 3.3k
Reviewed 2026-10-18 · last push 2026-09-27 · repo checked 2026-10-19
What's Good
MIT (vouch/vouch-proxy), developed since 2017 in Go. One Vouch instance can protect all your sites at once, and the README says validation responses take under 1 ms when it runs next to Nginx. Supports Google, GitHub, Azure AD, Okta, Slack, ADFS, AWS Cognito, Gitea, Nextcloud, Pocket ID and most OIDC providers. ★~3.3k.
The Catch
Nginx only (via auth_request); for Traefik or Caddy, other forward-auth tools fit better. It authenticates but offers only basic authorization by domain, user or team. Tagged releases are infrequent, so follow main or the Docker images.
Verdict
The simplest way to put SSO in front of internal Nginx sites.
Embed
Maintainer? Add the badge to your README. It is free, links to this review, and there is no paid version.
Markdown
[](https://stackgems.com/gems/vouch-proxy)
HTML
<a href="https://stackgems.com/gems/vouch-proxy"><img src="https://stackgems.com/badge/vouch-proxy.svg" alt="Vouch Proxy reviewed on Stack Gems" height="20"></a>