Add support for reverse proxy header authentication with email alone #9056

Closed
opened 2025-11-02 08:27:27 -06:00 by GiteaMirror · 0 comments
Owner

Originally created by @mhlakhani on GitHub (Jun 12, 2022).

Feature Description

Hi!

I saw it's possible to authenticate using a reverse proxy by sending an X-Webauth-User header. Optionally (if enabled in settings), if the X-Webauth-Email header is provided a user is also auto-registered.

For my internal setup at home, my reverse proxy does not have access to gitea usernames, but the sign in system has access to emails. Would it be possible to extend the code to allow authenticating just via the contents of X-Webauth-Email?

I'm happy to try and put up a PR myself if there are no objections to this feature.

Screenshots

No response

Originally created by @mhlakhani on GitHub (Jun 12, 2022). ### Feature Description Hi! I saw it's possible to authenticate using a reverse proxy by sending an `X-Webauth-User` header. Optionally (if enabled in settings), if the `X-Webauth-Email` header is provided a user is also auto-registered. For my internal setup at home, my reverse proxy does not have access to gitea usernames, but the sign in system has access to emails. Would it be possible to extend the code to allow authenticating just via the contents of `X-Webauth-Email`? I'm happy to try and put up a PR myself if there are no objections to this feature. ### Screenshots _No response_
GiteaMirror added the type/proposaltype/feature labels 2025-11-02 08:27:27 -06:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gitea#9056