{"id":28956780,"url":"https://github.com/developmentseed/stac-auth-proxy","last_synced_at":"2025-12-12T06:04:56.971Z","repository":{"id":265292553,"uuid":"895676120","full_name":"developmentseed/stac-auth-proxy","owner":"developmentseed","description":"Reverse proxy to mediate communication between a client and an internally accessible STAC API in order to provide a flexible authentication mechanism.","archived":false,"fork":false,"pushed_at":"2025-08-15T19:39:12.000Z","size":2106,"stargazers_count":25,"open_issues_count":20,"forks_count":2,"subscribers_count":5,"default_branch":"main","last_synced_at":"2025-08-15T21:47:04.880Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"http://developmentseed.org/stac-auth-proxy/","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/developmentseed.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2024-11-28T16:55:02.000Z","updated_at":"2025-08-09T06:21:29.000Z","dependencies_parsed_at":"2024-11-28T19:28:09.163Z","dependency_job_id":"dfe8a23b-7fbc-4c66-b9ca-3f4c14314cd4","html_url":"https://github.com/developmentseed/stac-auth-proxy","commit_stats":null,"previous_names":["developmentseed/stac-auth-proxy"],"tags_count":12,"template":false,"template_full_name":null,"purl":"pkg:github/developmentseed/stac-auth-proxy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/developmentseed%2Fstac-auth-proxy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/developmentseed%2Fstac-auth-proxy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/developmentseed%2Fstac-auth-proxy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/developmentseed%2Fstac-auth-proxy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/developmentseed","download_url":"https://codeload.github.com/developmentseed/stac-auth-proxy/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/developmentseed%2Fstac-auth-proxy/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":272885821,"owners_count":25009708,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-30T02:00:09.474Z","response_time":77,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-06-23T21:40:49.390Z","updated_at":"2025-12-12T06:04:56.964Z","avatar_url":"https://github.com/developmentseed.png","language":"Python","readme":"\u003cdiv align=\"center\"\u003e\n  \u003ch1 style=\"font-family: monospace\"\u003estac auth proxy\u003c/h1\u003e\n  \u003cp align=\"center\"\u003eReverse proxy to apply auth*n to your STAC API.\u003c/p\u003e\n\u003c/div\u003e\n\n---\n\n[![PyPI - Version][pypi-version-badge]][pypi-link]\n[![GHCR - Version][ghcr-version-badge]][ghcr-link]\n[![GHCR - Size][ghcr-size-badge]][ghcr-link]\n[![codecov][codecov-badge]][codecov-link]\n[![Tests][tests-badge]][tests-link]\n\nSTAC Auth Proxy is a proxy API that mediates between the client and your internally accessible STAC API to provide flexible authentication, authorization, and content-filtering mechanisms.\n\n\u003e [!IMPORTANT]\n\u003e\n\u003e **We would :heart: to hear from you!**\n\u003e Please [join the discussion](https://github.com/developmentseed/eoAPI/discussions/209) and let us know how you're using eoAPI! This helps us improve the project for you and others.\n\u003e If you prefer to remain anonymous, you can email us at eoapi@developmentseed.org, and we'll be happy to post a summary on your behalf.\n\n## ✨Features✨\n\n- **🔐 Authentication:** Apply [OpenID Connect (OIDC)](https://openid.net/developers/how-connect-works/) token validation and optional scope checks to specified endpoints and methods\n- **🛂 Content Filtering:** Use CQL2 filters via the [Filter Extension](https://github.com/stac-api-extensions/filter?tab=readme-ov-file) to tailor API responses based on request context (e.g. user role)\n- **🤝 External Policy Integration:** Integrate with external systems (e.g. [Open Policy Agent (OPA)](https://www.openpolicyagent.org/)) to generate CQL2 filters dynamically from policy decisions\n- **🧩 Authentication Extension:** Add the [Authentication Extension](https://github.com/stac-extensions/authentication) to API responses to expose auth-related metadata\n- **📘 OpenAPI Augmentation:** Enhance the [OpenAPI spec](https://swagger.io/specification/) with security details to keep auto-generated docs and UIs (e.g., [Swagger UI](https://swagger.io/tools/swagger-ui/)) accurate\n- **🗜️ Response Compression:** Optimize response sizes using [`starlette-cramjam`](https://github.com/developmentseed/starlette-cramjam/)\n\n## Documentation\n\n[Full documentation is available on the website](https://developmentseed.org/stac-auth-proxy).\n\nHead to [Getting Started](https://developmentseed.org/stac-auth-proxy/user-guide/getting-started/) to dig in.\n\n[pypi-version-badge]: https://badge.fury.io/py/stac-auth-proxy.svg\n[pypi-link]: https://pypi.org/project/stac-auth-proxy/\n[ghcr-version-badge]: https://ghcr-badge.egpl.dev/developmentseed/stac-auth-proxy/latest_tag?color=%2344cc11\u0026ignore=latest\u0026label=image+version\u0026trim=\n[ghcr-size-badge]: https://ghcr-badge.egpl.dev/developmentseed/stac-auth-proxy/size?color=%2344cc11\u0026tag=latest\u0026label=image+size\u0026trim=\n[ghcr-link]: https://github.com/developmentseed/stac-auth-proxy/pkgs/container/stac-auth-proxy\n[codecov-badge]: https://codecov.io/gh/developmentseed/stac-auth-proxy/branch/main/graph/badge.svg\n[codecov-link]: https://codecov.io/gh/developmentseed/stac-auth-proxy\n[tests-badge]: https://github.com/developmentseed/stac-auth-proxy/actions/workflows/cicd.yaml/badge.svg\n[tests-link]: https://github.com/developmentseed/stac-auth-proxy/actions/workflows/cicd.yaml\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdevelopmentseed%2Fstac-auth-proxy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fdevelopmentseed%2Fstac-auth-proxy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fdevelopmentseed%2Fstac-auth-proxy/lists"}