# nforwardauth

> nforwardauth is a self-hosted, open-source forward auth service for Traefik, Caddy, and nginx that protects apps behind a single login using username/password credentials

- **Category:** Authentication
- **Licence:** MIT
- **Latest version:** v1.5.1
- **Open source:** oss
- **Languages:** JavaScript, Rust
- **Platforms:** Docker, Docker Compose
- **Tags:** Proxy, Caddy, Nginx, SSO, Reverse Proxy, Authentication, Traefik, Kubernetes, Docker, Rust, Docker Compose, Self Hosted, Forwardauth, Forward auth

## Description

nforwardauth is a minimalist forward authentication service written in Rust that sits between a reverse proxy and protected applications. It authenticates users via a passwd file with SHA-512 hashed credentials and issues signed tokens stored in cookies. Once authenticated, users can access all protected services without re-entering credentials. It supports Traefik, Caddy, and nginx as reverse proxies, includes a built-in rate limiter for login attempts, and can pass the authenticated username to downstream services via the X-Forwarded-User header. The service is configured entirely through environment variables and requires only a passwd file volume mount. It has no external database dependencies.

## Links

- [Homepage](https://github.com/nosduco/nforwardauth)
- [Docker](nosduco/nforwardauth)
- [GitHub Repository](https://github.com/nosduco/nforwardauth)
- [Docker Hub](https://hub.docker.com/r/nosduco/nforwardauth)

---
Source: https://selfhost.directory/project/nforwardauth