What is OAuth2 Proxy used for?

OAuth2 Proxy is a reverse proxy and middleware that protects web apps with OAuth2 and OpenID Connect sign-in from many identity providers. It is a good fit for adding SSO in front of internal web apps and protecting dashboards that lack their own login.

Is OAuth2 Proxy open source?

Yes. OAuth2 Proxy is open source under the MIT licence. Its source code is on GitHub at oauth2-proxy/oauth2-proxy and is written mainly in Go.

Is OAuth2 Proxy free?

Yes. OAuth2 Proxy is open source, so the software itself is free to use.

Can I self-host OAuth2 Proxy?

Yes. OAuth2 Proxy can be self-hosted on your own server or infrastructure; there is no official hosted version.

What is OAuth2 Proxy an alternative to?

OAuth2 Proxy is an open-source alternative to Cloudflare Zero Trust. Other open-source alternatives to Cloudflare Zero Trust include Pomerium, NetBird and OpenZiti.

Is OAuth2 Proxy actively maintained?

Yes. The most recent commit to OAuth2 Proxy was on 1 October 2026, and the latest release is v7.15.5, published on 1 October 2026. The project has 15k stars on GitHub.

OAuth2 Proxy: open-source auth & identity

About OAuth2 Proxy

OAuth2 Proxy is an open-source tool that adds OAuth2 and OIDC authentication to web applications. It can run as a standalone reverse proxy that intercepts requests and redirects users to an identity provider, or as middleware plugged into an existing reverse proxy or load balancer so it handles authentication for several applications.

It works with a generic OIDC client and also has specific implementations for providers such as Google, Microsoft Entra ID, GitHub and login.gov. Provider-specific code lets it extract details such as preferred usernames and groups, which can then be passed to upstream applications as HTTP headers. This avoids building login logic into each internal app.

OAuth2 Proxy is written in Go and released under the MIT license. Compiled binaries are published on GitHub for all major architectures and some less common ones, and container images are based on distroless since version 7.6.0, with Alpine-based images still available. Nightly images are built from the main branch.

Key features

Standalone reverse proxy or middleware mode
OAuth2 and OIDC authentication
Provider support for Google, Entra ID and GitHub
User details forwarded as HTTP headers
Binaries for many architectures
Distroless container images

Good fit for

→Adding SSO in front of internal web apps
→Protecting dashboards that lack their own login

Built with: Go
Tags: oauth2; oidc; authentication; reverse-proxy; sso; golang; security; identity

OAuth2 Proxy: questions and answers

What is OAuth2 Proxy used for?: OAuth2 Proxy is a reverse proxy and middleware that protects web apps with OAuth2 and OpenID Connect sign-in from many identity providers. It is a good fit for adding SSO in front of internal web apps and protecting dashboards that lack their own login.
Is OAuth2 Proxy open source?: Yes. OAuth2 Proxy is open source under the MIT licence. Its source code is on GitHub at oauth2-proxy/oauth2-proxy and is written mainly in Go.
Is OAuth2 Proxy free?: Yes. OAuth2 Proxy is open source, so the software itself is free to use.
Can I self-host OAuth2 Proxy?: Yes. OAuth2 Proxy can be self-hosted on your own server or infrastructure; there is no official hosted version.
What is OAuth2 Proxy an alternative to?: OAuth2 Proxy is an open-source alternative to Cloudflare Zero Trust. Other open-source alternatives to Cloudflare Zero Trust include Pomerium, NetBird and OpenZiti.
Is OAuth2 Proxy actively maintained?: Yes. The most recent commit to OAuth2 Proxy was on 1 October 2026, and the latest release is v7.15.5, published on 1 October 2026. The project has 15k stars on GitHub.