OFFA - Openid Federation Forward Auth

OFFA offers easy to use OpenID Federation Authentication and Authorisation for existing services. OFFA can be deployed along existing services and handle all OpenID Federation communication for your services.

OFFA implements Forward Authentication usable with Traefik, NGINX, Caddy, and maybe other reverse proxies.

OFFA also implements Auth MemCookie usable with Apache.

See Proxies on how to deploy offa with your favorite reverse proxy.