starred/cloudbeaver

Fork 0

mirror of https://github.com/dbeaver/cloudbeaver.git synced 2026-04-25 13:46:02 +03:00

[GH-ISSUE #612] reverse proxy header authentication #172

New issue

Closed

opened 2026-03-07 20:45:41 +03:00 by kerem · 6 comments

kerem commented

2026-03-07 20:45:41 +03:00

Owner

Originally created by @skaravad on GitHub (Dec 31, 2021).
Original GitHub issue: https://github.com/dbeaver/cloudbeaver/issues/612

Is it possible to allow users and groups based on reverse proxy headers ?

For instance we can use X-Email as login and X-Group as user group for authenticating and authorizing users , this can be a very simple and effective authentication and authorization mechanism without complex integrations via SAML, LDAP etc.

Few systems which use this simple mechanism:
https://plugins.jenkins.io/reverse-proxy-auth-plugin/
https://grafana.com/docs/grafana/latest/auth/auth-proxy/

Originally created by @skaravad on GitHub (Dec 31, 2021). Original GitHub issue: https://github.com/dbeaver/cloudbeaver/issues/612 Is it possible to allow users and groups based on reverse proxy headers ? For instance we can use X-Email as login and X-Group as user group for authenticating and authorizing users , this can be a very simple and effective authentication and authorization mechanism without complex integrations via SAML, LDAP etc. Few systems which use this simple mechanism: https://plugins.jenkins.io/reverse-proxy-auth-plugin/ https://grafana.com/docs/grafana/latest/auth/auth-proxy/

kerem

2026-03-07 20:45:41 +03:00

closed this issue
added the
xf:authentication
label

kerem commented

2026-03-07 20:45:42 +03:00

Author

Owner

@skaravad commented on GitHub (Jan 4, 2022):

please consider this feature for CE vs EE

@skaravad commented on GitHub (Jan 4, 2022): please consider this feature for CE vs EE

kerem commented

2026-03-07 20:45:42 +03:00

Author

Owner

@kseniiaguzeeva commented on GitHub (Jan 12, 2022):

Thank you for the feature request. We are going to investigate and implement it.

@kseniiaguzeeva commented on GitHub (Jan 12, 2022): Thank you for the feature request. We are going to investigate and implement it.

kerem commented

2026-03-07 20:45:42 +03:00

Author

Owner

@kseniiaguzeeva commented on GitHub (Mar 23, 2022):

The feature is available in the latest release.

@kseniiaguzeeva commented on GitHub (Mar 23, 2022): The feature is available in the [latest release](https://github.com/dbeaver/cloudbeaver).

kerem commented

2026-03-07 20:45:42 +03:00

Author

Owner

@skaravad commented on GitHub (Mar 23, 2022):

Hello there,
Thank you for enabling this feature, how to enable the auth method ? is there a command line arg that we can use ?

@skaravad commented on GitHub (Mar 23, 2022): Hello there, Thank you for enabling this feature, how to enable the auth method ? is there a command line arg that we can use ?

kerem commented

2026-03-07 20:45:42 +03:00

Author

Owner

@kseniiaguzeeva commented on GitHub (Mar 23, 2022):

You have to add parameter "enableReverseProxyAuth": true to .cloudbeaver.rutime.conf and add parameters to nginx.conf:

 server {
        listen       80;
        server_name  localhost;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

		  location / {
			proxy_pass       http://localhost:8080;
			proxy_set_header X-Real-IP $remote_addr;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			proxy_set_header Host $http_host;
			proxy_set_header X-User testtest;
			proxy_set_header X-Role admin|user;
		}

Here are related articles: Reverse proxy header authentication and Server configuration.

Feel free to ask any additional questions.

@kseniiaguzeeva commented on GitHub (Mar 23, 2022): You have to add parameter `"enableReverseProxyAuth": true` to .cloudbeaver.rutime.conf and add parameters to nginx.conf: ``` server { listen 80; server_name localhost; #charset koi8-r; #access_log logs/host.access.log main; location / { proxy_pass http://localhost:8080; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header Host $http_host; proxy_set_header X-User testtest; proxy_set_header X-Role admin|user; } ``` Here are related articles: [Reverse proxy header authentication](https://github.com/dbeaver/cloudbeaver/wiki/Reverse-proxy-header-authentication) and [Server configuration](https://github.com/dbeaver/cloudbeaver/wiki/Server-configuration). Feel free to ask any additional questions.

kerem commented

2026-03-07 20:45:42 +03:00

Author

Owner

@skaravad commented on GitHub (Mar 23, 2022):

Thank you for your quick response, enabled it and it is working as expected.

@skaravad commented on GitHub (Mar 23, 2022): Thank you for your quick response, enabled it and it is working as expected.

kerem referenced this issue

2026-03-07 21:04:19 +03:00

[PR #172] [MERGED] feature(core-blocks): CB-209 added custom checkboxes #1503