Skip to content

Reverse proxy to mediate communication between a client and an internally accessible STAC API in order to provide a flexible authentication mechanism.

License

Notifications You must be signed in to change notification settings

developmentseed/stac-auth-proxy

Repository files navigation

stac auth proxy

Reverse proxy to apply auth*n to your STAC API.


STAC Auth Proxy is a proxy API that mediates between the client and your internally accessible STAC API to provide flexible authentication, authorization, and content-filtering mechanisms.

Important

We would ❤️ to hear from you! Please join the discussion and let us know how you're using eoAPI! This helps us improve the project for you and others. If you prefer to remain anonymous, you can email us at [email protected], and we'll be happy to post a summary on your behalf.

✨Features✨

  • 🔐 Authentication: Apply OpenID Connect (OIDC) token validation and optional scope checks to specified endpoints and methods
  • 🛂 Content Filtering: Use CQL2 filters via the Filter Extension to tailor API responses based on request context (e.g. user role)
  • 🤝 External Policy Integration: Integrate with external systems (e.g. Open Policy Agent (OPA)) to generate CQL2 filters dynamically from policy decisions
  • 🧩 Authentication Extension: Add the Authentication Extension to API responses to expose auth-related metadata
  • 📘 OpenAPI Augmentation: Enhance the OpenAPI spec with security details to keep auto-generated docs and UIs (e.g., Swagger UI) accurate
  • 🗜️ Response Compression: Optimize response sizes using starlette-cramjam

About

Reverse proxy to mediate communication between a client and an internally accessible STAC API in order to provide a flexible authentication mechanism.

Resources

License

Stars

Watchers

Forks

Packages

 
 
 

Contributors 6