SSO with traefik forward auth with Google Oauth2 - Cookbook

January 2023

belroth

funkypenguin:

Prepare environment

Create /var/data/config/traefik-forward-auth/traefik-forward-auth.env as per the following example:

PROVIDERS_GOOGLE_CLIENT_ID=<your client id>
PROVIDERS_GOOGLE_CLIENT_SECRET=<your client secret>
SECRET=<a random string, make it up>
# comment out AUTH_HOST if you'd rather use individual redirect_uris (slightly less complicated but more work)
AUTH_HOST=auth.example.com
COOKIE_DOMAINS=example.com
[email protected], [email protected]

When utilizing “WHITELIST” the comma separated value list cannot have spaces. Took me awhile to figure out why “[email protected]” wouldn’t authorize and realized I had " [email protected]" (notice the leading space).