Authentication and Authorization

Access to the frontend is controlled by a sidecar running OAuth2 Proxy. You can use any other OIDC client as long as:

  • JWT ID Token is set in Authorization header
  • JWT token contains role claims

ID Token issued by the following providers are supported by the backend server:

  • Azure

See Developer Guide for adding OIDC provider support.