Skip to content

Instantiate TFA#262

Draft
mcmikemn wants to merge 4 commits into
masterfrom
TFA-updates
Draft

Instantiate TFA#262
mcmikemn wants to merge 4 commits into
masterfrom
TFA-updates

Conversation

@mcmikemn

@mcmikemn mcmikemn commented Jul 28, 2024

Copy link
Copy Markdown
Collaborator

Adding instances to TFA, mainly so we can define COOKIE_NAME so it differs between TFA on different servers.

This will fix #261

@mcmikemn

Copy link
Copy Markdown
Collaborator Author

At the moment, @EnigmaCurry, this only works if you leave COOKIE_NAME to the default value of "_forward_auth" (and you have to make sure that TRAEFIK_FORWARD_AUTH_SECRET is the same value as it is for the other TFA instances since they're all using the same cookie name - otherwise apps using one TFA instance will authenticate and others will fail).

If you set COOKIE_NAME to something unique, like "_forward_auth_context_instance", you get infinite redirects between app.mydomain.com and auth.app.mydomain.com.

@mcmikemn mcmikemn self-assigned this Jul 28, 2024
@mcmikemn mcmikemn added the enhancement New feature or request label Jul 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fix multiple TFA instances

1 participant