{"id":13437502,"url":"https://github.com/cesanta/docker_auth","last_synced_at":"2025-04-09T11:03:04.884Z","repository":{"id":32876735,"uuid":"36470954","full_name":"cesanta/docker_auth","owner":"cesanta","description":"Authentication server for Docker Registry 2","archived":false,"fork":false,"pushed_at":"2024-07-25T22:16:02.000Z","size":23085,"stargazers_count":1276,"open_issues_count":59,"forks_count":306,"subscribers_count":43,"default_branch":"main","last_synced_at":"2024-10-29T15:04:41.222Z","etag":null,"topics":["authentication","docker","hacktoberfest"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cesanta.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2015-05-28T23:05:40.000Z","updated_at":"2024-10-17T08:35:56.000Z","dependencies_parsed_at":"2024-01-02T20:31:02.025Z","dependency_job_id":"4c87dfc5-b3bb-48ee-a017-e4ea43e86c13","html_url":"https://github.com/cesanta/docker_auth","commit_stats":{"total_commits":204,"total_committers":67,"mean_commits":3.044776119402985,"dds":0.6813725490196079,"last_synced_commit":"39d6404f878d8c9dc19049a19901e29a805dfd4a"},"previous_names":[],"tags_count":16,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cesanta%2Fdocker_auth","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cesanta%2Fdocker_auth/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cesanta%2Fdocker_auth/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cesanta%2Fdocker_auth/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cesanta","download_url":"https://codeload.github.com/cesanta/docker_auth/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":248027400,"owners_count":21035594,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["authentication","docker","hacktoberfest"],"created_at":"2024-07-31T03:00:57.757Z","updated_at":"2025-04-09T11:03:04.861Z","avatar_url":"https://github.com/cesanta.png","language":"Go","funding_links":[],"categories":["HarmonyOS","Go","Tools","工具"],"sub_categories":["Windows Manager","Others","其他工具"],"readme":"Docker Registry 2 authentication server\n=========================================\n\nThe original Docker Registry server (v1) did not provide any support for authentication or authorization.\nAccess control had to be performed externally, typically by deploying Nginx in the reverse proxy mode with Basic or other type of authentication.\nWhile performing simple user authentication is pretty straightforward, performing more fine-grained access control was cumbersome.\n\nDocker Registry 2.0 introduced a new, token-based authentication and authorization protocol, but the server to generate them was not released.\nThus, most guides found on the internet still describe a set up with a reverse proxy performing access control.\n\nThis server fills the gap and implements the protocol described [here](https://github.com/docker/distribution/blob/main/docs/spec/auth/token.md).\n\nSupported authentication methods:\n * Static list of users\n * Google Sign-In (incl. Google for Work / GApps for domain) (documented [here](https://github.com/cesanta/docker_auth/blob/main/examples/reference.yml))\n * [Github Sign-In](docs/auth-methods.md#github)\n * Gitlab Sign-In\n * LDAP bind ([demo](https://github.com/kwk/docker-registry-setup))\n * MongoDB user collection\n * MySQL/MariaDB, PostgreSQL, SQLite database table\n * [External program](https://github.com/cesanta/docker_auth/blob/main/examples/ext_auth.sh)\n\nSupported authorization methods:\n * Static ACL\n * MongoDB-backed ACL\n * MySQL/MariaDB, PostgreSQL, SQLite backed ACL\n * External program\n\n## Installation and Examples\n\n### Using Helm/Kubernetes\n\nA helm chart is available in the folder [chart/docker-auth](chart/docker-auth).\n\n### Docker\n\nA public Docker image is available on Docker Hub: [cesanta/docker_auth](https://hub.docker.com/r/cesanta/docker_auth/).\n\nTags available:\n - `:edge` - bleeding edge, usually works but breaking config changes are possible. You probably do not want to use this in production.\n - `:latest` - latest tagged release, will line up with `:1` tag\n - `:1` - the `1.x` version, will have fixes, no breaking config changes. Previously known as `:stable`.\n - `:1.x` - specific release, see [here](https://github.com/cesanta/docker_auth/releases) for the list of current releases.\n\nThe binary takes a single argument - path to the config file.\nIf no arguments are given, the Dockerfile defaults to `/config/auth_config.yml`.\n\nExample command line:\n\n```{r, engine='bash', count_lines}\n$ docker run \\\n    --rm -it --name docker_auth -p 5001:5001 \\\n    -v /path/to/config_dir:/config:ro \\\n    -v /var/log/docker_auth:/logs \\\n    cesanta/docker_auth:1 /config/auth_config.yml\n```\n\nSee the [example config files](https://github.com/cesanta/docker_auth/tree/main/examples/) to get an idea of what is possible.\n\n## Troubleshooting\n\nRun with increased verbosity:\n```{r, engine='bash', count_lines}\ndocker run ... cesanta/docker_auth:1 --v=2 --alsologtostderr /config/auth_config.yml\n```\n\n## Contributing\n\nBug reports, feature requests and pull requests (for small fixes) are welcome.\nIf you require larger changes, please file an issue.\nWe cannot guarantee response but will do our best to address them.\n\n## Licensing\n\n   Copyright 2015 [Cesanta Software Ltd](http://www.cesanta.com).\n\n   Licensed under the Apache License, Version 2.0 (the \"License\");\n   you may not use this software except in compliance with the License.\n   You may obtain a copy of the License at\n\n       https://www.apache.org/licenses/LICENSE-2.0\n\n   Unless required by applicable law or agreed to in writing, software\n   distributed under the License is distributed on an \"AS IS\" BASIS,\n   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n   See the License for the specific language governing permissions and\n   limitations under the License.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcesanta%2Fdocker_auth","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcesanta%2Fdocker_auth","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcesanta%2Fdocker_auth/lists"}