Vouch Proxy is an authentication gateway that integrates single sign-on and OAuth/OIDC login flows with Nginx using the auth_request module.
The tool solves the problem of adding centralized authentication to Nginx-proxied applications without modifying each application's code. It works by intercepting requests at the Nginx level through the auth_request module, validating user credentials against configured OAuth or OIDC providers, and allowing or denying access based on authentication state. Users log in once through the configured identity provider and receive a session token that Vouch Proxy validates on subsequent requests, enabling seamless single sign-on across multiple backend services.
Vouch Proxy suits organizations running Nginx as a reverse proxy that need to add authentication without rewriting their applications. It works well for protecting multiple services behind a single Nginx instance, where a centralized login point reduces friction for users. The tool is particularly valuable when you want to leverage existing OAuth or OIDC providers rather than managing credentials directly. Teams should evaluate whether their Nginx setup supports the auth_request module and whether their identity provider is compatible with the tool's OAuth/OIDC implementation.
The project shows consistent maintenance with regular commits addressing issues and improvements. Pull requests receive timely review and feedback from maintainers. The codebase demonstrates active refinement of core authentication logic and configuration handling. Issue discussions indicate the maintainers engage substantively with user problems and feature requests rather than closing conversations prematurely.
