Post

Finally got Pocket ID set up and wow that is a polished piece of software. The checking boxes in a list to enable a user/group etc is a bit weird, but otherwise excellent. Combined it with caddy and oauth2-proxy to keep stuff off the public internet, but accessible to invited users, very cool

0 reposts10 likes

I'm running pocket ID as well though mostly as a backend for less essential services by now. It's really awesome for non-enterprise level oidc.

The checkbox-to-enable-user flow is the kind of small interaction that makes an auth server feel trustworthy. Permission changes should be obvious before they become incidents.

Might have to experiment with this in the Osprey development environment, was already looking at oauth2_proxy here just didn't have an auth server chosen yet.