Hi, I use traefik as reverse proxy and want to use Zitadel for authorization stuff. I have some third party services I want to protect with Zitadel, which dont have OICD capabilities. For the web based services I could make it work with oauth2proxy.
One of the clients, I use, sends a bearer token to the api endpoint of a service and I hoped to be able to use service users with PATs for this. I was trying to also use oauth2proxy for this. But I always get unauthorized.
In Zitadel, I set up a API app with basic authentication and created a service user with PAT.
Calling the introspect endpoint of the API app does validate the token as active. Oauth2proxy does probably not call the introspect point correctly.
Continue the conversation
Join the Discord to ask follow-up questions and connect with the community
Z
ZITADEL
ZITADEL - Identity infrastructure, simplified for you.