Is there a web auth thing I can set up very easily that:
- is like htpasswd-based http basic auth but with a web form and a cookie instead of a browser-invoked dialog box
- is not a huge enterprisey SSO thing, tinier and simpler is better, if it includes the words "oauth" or "saml" it is too enterprisey
- ideally doesn't require changes to the things being authenticated to, would rather it behave like a reverse proxy
- the things being authenticated do not need to know who the user is, only "if a request makes it through to this endpoint, assume there is a valid user"
The problem I am trying to solve here is that I have some personal web-based tools, currently protected by http basic auth, of which I am the only user. But the UX for filling those auth dialogs in with my password manager is trash. I am not willing to switch browsers or password managers to fix it, so this is the only other variable I can play with.
edit: this gets much easier if you don't need it to be a literal reverse proxy; https://nginx.org/en/docs/http/ngx_http_auth_request_module.html is the bit I was looking for but did not know about.
@emily Not the solution you asked for, but Tailscale might be handy here. You'd hide your app from the public internet, set up tailscale serve for it, and you could access it from any of your devices from anywhere, without ever needing to authenticate.