{"id":13491960,"url":"https://github.com/istio-ecosystem/authservice","last_synced_at":"2026-01-14T23:03:11.851Z","repository":{"id":42168220,"uuid":"185888050","full_name":"istio-ecosystem/authservice","owner":"istio-ecosystem","description":"Move OIDC token acquisition out of your app code and into the Istio mesh","archived":false,"fork":false,"pushed_at":"2025-12-17T18:37:24.000Z","size":1772,"stargazers_count":238,"open_issues_count":30,"forks_count":67,"subscribers_count":24,"default_branch":"main","last_synced_at":"2025-12-21T21:36:14.320Z","etag":null,"topics":["auth","authz","istio","oidc","security"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/istio-ecosystem.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2019-05-09T23:59:25.000Z","updated_at":"2025-12-12T09:22:08.000Z","dependencies_parsed_at":"2025-12-19T04:03:26.722Z","dependency_job_id":null,"html_url":"https://github.com/istio-ecosystem/authservice","commit_stats":null,"previous_names":[],"tags_count":25,"template":false,"template_full_name":null,"purl":"pkg:github/istio-ecosystem/authservice","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio-ecosystem%2Fauthservice","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio-ecosystem%2Fauthservice/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio-ecosystem%2Fauthservice/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio-ecosystem%2Fauthservice/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/istio-ecosystem","download_url":"https://codeload.github.com/istio-ecosystem/authservice/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/istio-ecosystem%2Fauthservice/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28437918,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-14T22:37:52.437Z","status":"ssl_error","status_checked_at":"2026-01-14T22:37:31.496Z","response_time":107,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["auth","authz","istio","oidc","security"],"created_at":"2024-07-31T19:01:01.938Z","updated_at":"2026-01-14T23:03:11.518Z","avatar_url":"https://github.com/istio-ecosystem.png","language":"Go","funding_links":[],"categories":["Go"],"sub_categories":[],"readme":"# authservice\n\n[![CI](https://github.com/istio-ecosystem/authservice/actions/workflows/ci.yaml/badge.svg)](https://github.com/istio-ecosystem/authservice/actions/workflows/ci.yaml)\n\nAn implementation of [Envoy](https://envoyproxy.io) [External Authorization](https://www.envoyproxy.io/docs/envoy/latest/configuration/http/http_filters/ext_authz_filter),\nfocused on delivering authN/Z solutions for [Istio](https://istio.io) and [Kubernetes](https://kubernetes.io).\n\n## Introduction\n\n`authservice` helps delegate the [OIDC Authorization Code Grant Flow](https://openid.net/specs/openid-connect-core-1_0.html#CodeFlowAuth)\nto the Istio mesh. `authservice` is compatible with any standard OIDC Provider as well as other Istio End-user Auth features,\nincluding [Authentication Policy](https://istio.io/docs/tasks/security/authn-policy/) and [RBAC](https://istio.io/docs/tasks/security/rbac-groups/).\nTogether, they allow developers to protect their APIs and web apps without any application code required.\n\nSome of the features it provides:\n* Transparent login and logout\n  * Retrieves OAuth2 Access tokens, ID tokens, and refresh tokens\n* Fine-grained control over which url paths are protected\n* Session management\n  * Configuration of session lifetime and idle timeouts\n  * Refreshes expired tokens automatically\n* Compatible with any standard OIDC Provider\n* Supports multiple OIDC Providers for same application\n* Trusts custom CA certs when talking to OIDC Providers\n* Works either at the sidecar or gateway level\n\n\n## How does authservice work?\n\n[This flowchart](https://miro.com/app/board/o9J_kvus6b4=/) explains how `authservice`\nmakes decisions at different points in the login lifecycle.\n\n## Contributing\n\nContributions are very welcome! Please read the [Contributing guidelines](CONTRIBUTING.md)\nto get started.\n\nDetailed development instructions can be found in the [Development guide](DEVELOPMENT.md).\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fistio-ecosystem%2Fauthservice","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fistio-ecosystem%2Fauthservice","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fistio-ecosystem%2Fauthservice/lists"}