[GH-ISSUE #2924] oauth2-proxy enabled to connect to cloudbeaver isn't working with reverse proxy header authentication #1025

New issue

Closed

opened 2026-03-07 20:58:19 +03:00 by kerem · 0 comments

kerem commented

2026-03-07 20:58:19 +03:00

Owner

Originally created by @JayasreeReddy20 on GitHub (Sep 18, 2024).
Original GitHub issue: https://github.com/dbeaver/cloudbeaver/issues/2924

Originally assigned to: @DenisSinelnikov on GitHub.

The configuration looks like below for enabling the reverse-proxy-
I have only provided the info needed for reverse-proxy here. Rest of the configurations are made already.

cloudbeaver.conf

defaultAuthProvider: "reverseProxy",
enableReverseProxyAuth: true,
enabledAuthProviders: [
"reverseProxy",
"local"

authConfigurations: [
{
"id": "reverseProxy",
"provider": "reverseProxy",
"displayName": "Reverse Proxy",
"disabled": false,
"iconURL": "",
"description": "",
"parameters": {
"logout-url": "",
"user-header": "X-Auth-Request-User",
"team-header": " X-Auth-Request-Groups",
"full-name-header": "X-Auth-Request-Email",
"team-delimiter": ",",
"first-name-header": "X-First-name",
"last-name-header": "X-Last-name"
}
}
]

authentication: {
baseAuthProvider: "reverseProxy",
primaryAuthProvider: "reverseProxy"
},

This configuration to authentication with github team user and access the cloudbeaver populates only X-Auth-Request-User,
X-Auth-Request-Email and X-Auth-Request-User.

Questions:

what parameters to be used to fetch the first name and last name?
Though the above three headers are fetched and used still the reverse-proxy always asks to connect with local authentication and doesn't take reverse-proxy.
How to achieve reverse-proxy auth?
If local-auth is disabled, it pops up to configure the auth settings and doesn't work until this is enabled.

Originally created by @JayasreeReddy20 on GitHub (Sep 18, 2024). Original GitHub issue: https://github.com/dbeaver/cloudbeaver/issues/2924 Originally assigned to: @DenisSinelnikov on GitHub. The configuration looks like below for enabling the reverse-proxy- I have only provided the info needed for reverse-proxy here. Rest of the configurations are made already. **cloudbeaver.conf** defaultAuthProvider: "reverseProxy", enableReverseProxyAuth: true, enabledAuthProviders: [ "reverseProxy", "local" authConfigurations: [ { "id": "reverseProxy", "provider": "reverseProxy", "displayName": "Reverse Proxy", "disabled": false, "iconURL": "", "description": "", "parameters": { "logout-url": "", "user-header": "X-Auth-Request-User", "team-header": " X-Auth-Request-Groups", "full-name-header": "X-Auth-Request-Email", "team-delimiter": ",", "first-name-header": "X-First-name", "last-name-header": "X-Last-name" } } ] authentication: { baseAuthProvider: "reverseProxy", primaryAuthProvider: "reverseProxy" }, This configuration to authentication with github team user and access the cloudbeaver populates only X-Auth-Request-User, X-Auth-Request-Email and X-Auth-Request-User. **Questions:** 1. **what parameters to be used to fetch the first name and last name?** 2. Though the above three headers are fetched and used still the reverse-proxy always asks to connect with local authentication and doesn't take reverse-proxy. **How to achieve reverse-proxy auth?** 3. If local-auth is disabled, it pops up to configure the auth settings and doesn't work until this is enabled.