FusionAuth
    • Home
    • Categories
    • Recent
    • Popular
    • Pricing
    • Contact us
    • Docs
    • Login

    FusionAuth as oidc provider for apache2

    Scheduled Pinned Locked Moved Solved
    Q&A
    2
    3
    332
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Z
      zero-enna
      last edited by

      Hi all,

      I have tried to use FusionAuth as an OIDC provider for apache2 but it didnt wokred well at the moment.

      I have set update the default installation for FusionAuth like describte here https://fusionauth.io/docs/v1/tech/installation-guide/fusionauth-app/ with an mysql database. My first trial with gitea run very good. I could set up it in a few minutes and it works well.

      Now I would like to secure an third-party software without an login and would like to use the apache as an reverse proxy with the mod_auth_openidc module. The Application runs wihin its own sub-domain.

      I have tried a lot of configurations for apache2 and fusionAuth but it didnt work well. Did you have any working example configuration for apache with FusionAuth?

      Zero

      1 Reply Last reply Reply Quote 0
      • Z
        zero-enna
        last edited by

        I found the solution by my self.

        After several debugging, trial-and-error session and minimal setup's I could solve the issue.
        I found the final hint here:
        https://fusionauth.io/docs/v1/tech/oauth/endpoints/#json-web-key-set-jwks

        FusionAuth did not create asymetric key's in default, so I have to create a new asymmetric key that can be validated at the JWK endpoint by apache2.

        Zero

        joshuaJ 1 Reply Last reply Reply Quote 1
        • Z zero-enna has marked this topic as solved on
        • joshuaJ
          joshua @zero-enna
          last edited by

          @zero-enna

          Glad that you got this figured out!

          Thanks,
          Josh

          1 Reply Last reply Reply Quote 0
          • First post
            Last post