Support for proxy auth via env vars or use basic auth #3845

Closed
opened 2026-02-05 07:39:17 +03:00 by OVERLORD · 2 comments
Owner

Originally created by @buzzzo on GitHub (Jun 11, 2023).

Describe the feature you'd like

Would be useful to let user authenticate via env vars like REMOTE_AUTH (set by a reverse proxy).
This permits some sso products to be used with bookstack.

Also enable basic auth and not only via forms would be useful.

Thx

Describe the benefits this would bring to existing BookStack users

Permit the usage of external auth setup by a sso manager like authelia or lemonldapng

Can the goal of this request already be achieved via other means?

Not afaik

Have you searched for an existing open/closed issue?

  • I have searched for existing issues and none cover my fundemental request

How long have you been using BookStack?

Not using yet, just scoping

Additional context

No response

Originally created by @buzzzo on GitHub (Jun 11, 2023). ### Describe the feature you'd like Would be useful to let user authenticate via env vars like REMOTE_AUTH (set by a reverse proxy). This permits some sso products to be used with bookstack. Also enable basic auth and not only via forms would be useful. Thx ### Describe the benefits this would bring to existing BookStack users Permit the usage of external auth setup by a sso manager like authelia or lemonldapng ### Can the goal of this request already be achieved via other means? Not afaik ### Have you searched for an existing open/closed issue? - [X] I have searched for existing issues and none cover my fundemental request ### How long have you been using BookStack? Not using yet, just scoping ### Additional context _No response_
OVERLORD added the 🔨 Feature Request label 2026-02-05 07:39:17 +03:00
Author
Owner

@ssddanbrown commented on GitHub (Jun 11, 2023):

I likely wouldn't look to add additional auth mechanisms at this point, as we already support a wide variety and auth systems have a relatively high cost.

If you need just plain basic auth, you can often add this at the webserver/proxy level.

Otherwise, you might be able to achieve other options using our logical theme system.
I have an example of authenticating by HTTP header here:
https://github.com/BookStackApp/BookStack/pull/2289#issuecomment-857164663
That may be tweakable to your requirements.

@ssddanbrown commented on GitHub (Jun 11, 2023): I likely wouldn't look to add additional auth mechanisms at this point, as we already support a wide variety and auth systems have a relatively high cost. If you need just plain basic auth, you can often add this at the webserver/proxy level. Otherwise, you might be able to achieve other options using our [logical theme system](https://github.com/BookStackApp/BookStack/blob/development/dev/docs/logical-theme-system.md). I have an example of authenticating by HTTP header here: https://github.com/BookStackApp/BookStack/pull/2289#issuecomment-857164663 That may be tweakable to your requirements.
Author
Owner

@ssddanbrown commented on GitHub (Jun 20, 2023):

Since I wouldn't look to specifically support the requested auth method, and since some alternatives have been posted above, with no further follow up, I'll go ahead and close this off.

@ssddanbrown commented on GitHub (Jun 20, 2023): Since I wouldn't look to specifically support the requested auth method, and since some alternatives have been posted above, with no further follow up, I'll go ahead and close this off.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/BookStack#3845