Automic VaultAutomic Vault

brew

oauth2_proxy mit Homebrew, apk, MacPorts, Nix installieren

Prüfe Installationswege, Executables, Metadaten und Sicherheitshinweise für oauth2_proxy in AI-Agent-Workflows.

Installation

Weitere Installationsbefehle

macOS

Homebrewverifiziert · 100%
brew install oauth2_proxy

local Homebrew formula metadata

MacPortsverifiziert · 94%
sudo port install oauth2-proxy

MacPorts ports tree · security/oauth2-proxy/Portfile · Quelle: api.github.com

Linux

Alpine Linux apkverifiziert · 92%
sudo apk add oauth2-proxy

Alpine Linux edge package indexes · oauth2-proxy · Quelle: dl-cdn.alpinelinux.org

Nixverifiziert · 92%
nix profile install nixpkgs#oauth2-proxy

nixpkgs package indexes · pkgs/by-name/oa/oauth2-proxy/package.nix · Quelle: api.github.com

Überblick

Paketzusammenfassung

Reverse proxy for authenticating users via OAuth 2 providers

Befehle und Aliase

  • oauth2-proxy

Verlauf

Projektgeschichte und Nutzung

OAuth2 Proxy is an authenticating reverse proxy and middleware component that protects web applications with OAuth2 and OpenID Connect login flows. It sits in front of applications that do not implement identity themselves and validates users by provider, email, domain, group, and related identity attributes.

Projektgeschichte

The project descends from Bitly's oauth2_proxy. The maintained repository was forked from bitly/OAuth2_Proxy on November 27, 2018, with v3.0.0 and later coming from the fork. On March 29, 2020, the project moved from pusher/oauth2_proxy to oauth2-proxy/oauth2-proxy, and the binary naming and container image paths followed that rename.

Adoptionsgeschichte

OAuth2 Proxy became a common cloud-native building block because it lets teams add SSO in front of dashboards, admin apps, APIs, and legacy services without modifying the upstream application. CNCF lists OAuth2 Proxy as a Sandbox project accepted on October 2, 2025, which reflects its role as shared identity infrastructure rather than a single-vendor utility.

Wie es verwendet wird

Operators deploy oauth2-proxy as a standalone reverse proxy or as an auth middleware integrated with Nginx auth_request, Kubernetes ingress-nginx, Traefik ForwardAuth, Envoy, and similar reverse-proxy stacks. It redirects unauthenticated users to providers such as Google, GitHub, Microsoft Entra ID, login.gov, or a generic OIDC provider, then forwards identity and token information to upstream services through headers when configured.

The project ships compiled binaries, container images, nightly images, and package-manager formulas. Configuration normally combines provider credentials, cookie/session settings, upstream routes, and reverse-proxy headers; larger OIDC sessions can use Redis-backed session storage.

Warum Paket-Nerds sich dafür interessieren

OAuth2 Proxy is significant because it packages identity as a proxy executable: one binary can retrofit OAuth2/OIDC authentication onto applications, Kubernetes ingresses, and internal tools. Its history also mirrors open-source operations reality: a vendor-originated project, a community fork, an organizational rename, and eventual CNCF Sandbox governance.

Zeitleiste

  • 2017-09-29: oauth2-proxy/oauth2-proxy repository record was created on GitHub.
  • 2018-11-27: The maintained repository forked from bitly/OAuth2_Proxy.
  • 2020-03-29: The project was renamed from pusher/oauth2_proxy to oauth2-proxy/oauth2-proxy.
  • 2025-10-02: CNCF accepted OAuth2 Proxy at Sandbox maturity.
  • 2026-06-09: GitHub release v7.15.3 was published.

Related projects

  • OAuth2 Proxy is commonly paired with Nginx, ingress-nginx, Traefik, Envoy-style reverse proxies, Kubernetes, Redis session storage, and external identity providers. Related identity-layer projects include Dex, Pomerium, Authelia, Ory Oathkeeper, and cloud-provider access proxies.

Sicherheitslage

Risikostufe: orange

formula declares a Homebrew service.

Risikoklassifikator

orange Risiko · mittel Konfidenz · infrastructure

Warum

  • formula declares a Homebrew service

Signale

  • metadata:service

Installationsverhalten

  • In den Formelmetadaten ist kein Homebrew-Post-install-Hook erfasst.
  • Formelmetadaten deklarieren einen Service- oder Daemon-Block.
  • Homebrew-Bottle-Metadaten sind für 6 Plattformziele verfügbar.
  • Build-Metadaten listen 1 Build-Abhängigkeiten.

Empfohlene Prüfung

Prüfe vor unbeaufsichtigter Agent-Nutzung, ob das Tool Klartext-Credentials liest, Remote-Zustand schreibt, Artefakte veröffentlicht oder Plugins ausführt.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix
/etc/oauth2-proxy.cfg

Executables

Installierte Executables

BefehlArtSichtbarkeitHinweis
oauth2-proxycliglobales Executable

Aktualität

Version und Aktualität

Diese Signale trennen das Alter der Seitengenerierung, Aktivität des Paketmanagers und Upstream-Release-Vergleich. Versionsrückstand wird nur gemeldet, wenn eine Evidenz-URL und vergleichbare Versionen vorhanden sind.

Seite generiert2026-07-25
Manager-Version7.15.3
Manager aktualisiert2026-07-04
lokale DatenOK
Upstreamaktuell
neueste erkannte Versionv7.15.3

https://github.com/oauth2-proxy/oauth2-proxy

  • OKEs wurden keine Aktualitätswarnungen generiert.

Installationsmetadaten

Paketmetadaten

Paketschlüsselbrew:oauth2_proxy
Version7.15.3
PaketmanagerHomebrew
Paketmanager-Seitehttps://formulae.brew.sh/formula/oauth2_proxy
Homepagehttps://oauth2-proxy.github.io/oauth2-proxy/
Repositoryhttps://github.com/oauth2-proxy/oauth2-proxy
Upstream-Dokumentationhttps://oauth2-proxy.github.io/oauth2-proxy
LizenzMIT
Quellarchivhttps://github.com/oauth2-proxy/oauth2-proxy/archive/refs/tags/v7.15.3.tar.gz
Zuletzt aktualisiert2026-07-04T09:21:03Z
Pulseupdated
Build-Abhängigkeitengo
Bottleverfügbar (auf arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
Homebrew post-installnicht definiert
Dienstdeclared
Einschränkungen$HOMEBREW_PREFIX/etc/oauth2-proxy/oauth2-proxy.cfg must be filled in.

Registry-Fakten

Details aus der Quelldatenbank

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Nameoauth2_proxy
Version Scheme0
Revision0
Head VersionHEAD
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • head
  • stable

Source-Datenbank-Treffer

Andere Paketmanager-Einträge

Treffer stammen aus externen Paketmanager-Indizes und bleiben von lokalen Automic-Vault-Paketlinks getrennt.

Nix95%

oauth2-proxy

nix profile install nixpkgs#oauth2-proxy
  • normalized package name match
  • Abgeglichen nach: Oauth2 Proxy
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/oa/oauth2-proxy/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

oauth2-proxy 7.15.2-r1

Reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers

https://oauth2-proxy.github.io/oauth2-proxy

sudo apk add oauth2-proxy
  • License: MIT
  • Architecture: x86_64
  • Source Package: oauth2-proxy
  • 1 Abhängigkeiten
  • 1 stellt bereit
  • normalized package name match
  • Abgeglichen nach: Oauth2 Proxy
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: oauth2-proxy from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

oauth2-proxy-openrc 7.15.2-r1

Reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers (OpenRC init scripts)

https://oauth2-proxy.github.io/oauth2-proxy

sudo apk add oauth2-proxy-openrc
  • License: MIT
  • Architecture: x86_64
  • Source Package: oauth2-proxy
  • normalized package name match
  • Abgeglichen nach: Oauth2 Proxy
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: oauth2-proxy-openrc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
MacPorts95%

oauth2-proxy

sudo port install oauth2-proxy
  • normalized package name match
  • Abgeglichen nach: Oauth2 Proxy
MacPorts ports tree · api.github.com · MacPorts ports tree: security/oauth2-proxy/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

Quellspur

Aus Repository-Daten generiert

Diese Seite wird von av-web aus dem privaten Paket-SQLite-Artefakt bereitgestellt, das scripts/generate-pkg-sqlite.py erstellt.

Verwendete Quellen

  • Geiger risk classifier
  • Nucleus package database
  • av.db category and tag curation
  • cross-ecosystem install command graph
  • curated configuration and credential file locations
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment