This message was deleted.

Hey Dean, have a look at this conversation: https://archive.ory.sh/t/2690885/edit-solved-anyone-got-experience-with-traefik-forward-auth-

I've seen mentions of Oathkeeper but I thought I can use Ory's authentication without having to selfhost it myself?

Hm maybe I misunderstood, apologies. You are using https://github.com/thomseddon/traefik-forward-auth and would like to use Ory as UI for it, did I get that right?

No I've looked at that repo but I thought using https://doc.traefik.io/traefik/middlewares/http/forwardauth/ would be sufficient. I thought I could simply use the URL in my Ory console for the managed account experience, but I'm not sure how to set this up.

Hey Dean, apologies for not following up here. I think I get what you want to do now. Traefik should “forward” the auth to Ory so you can use Traefik as the “identity aware proxy” for your applications, and provide authN through Ory. I will have a look if I can figure it out from the Traefik docs.

Okay thank you I was able to manage to forward it using the label but it just gets into an infinite redirect loop if i use ?return_to for my Ory endpoint

Do you have a custom domain configured? The redirect should go to your CNAME.

Yeah I have for the ?return_to my own domain I want it to redirect to after logging in

Hey @rich-jackal-21089, sorry for not following up here. I think it should work the same with Traefik / NGINX / other solution as it would with Oathkeeper. I wanted to build a quick example, but have not gotten around to it. Will put this up as a reminder to self to work on it.

Any luck on this @magnificent-energy-493?

Hey Dean, not yet… I do want to create a guide around this, so I will follow up here soon 🙏

Do you know if anyone else had tried this yet?

Hm I am not sure, I know many how use Traefik + Oathkeeper. I also never posted the guide I think 🤦 https://www.ory.sh/docs/oathkeeper/guides/traefik-proxy-integration I have not tried it out without Oathkeeper yet, but IMO its very lightweight and an elegant solution. Let me investigate a bit how it would work without. If it is important for you use case with Ory Network also feel free to reach out to your account manager.

I think we mkight want something similar? https://github.com/ory/oathkeeper/discussions/1075