caddy-security
Security App with Authentication and Authorization Plugins for Caddy v2.
It includes:
- Authentication Plugin for implementing Form-Based, Basic, Local, LDAP, OpenID
- Authorization Plugin for HTTP request authorization based on JWT/PASETO tokens
- Credentials Plugin for managing credentials for various integrations
Please consider sponsoring this project via Github Sponsors!
Please ask questions either here or via LinkedIn. I am happy to help you! @greenpau
Documentation for this project was previously hosted at https://docs.authcrunch.com. As AI agents become part of the development workflow, this repository is moving to skill-based documentation that helps both humans and AI agents work with the codebase.
See Runtime ownership and reload behavior for request draining, failed replacement cleanup, and the restriction on overlapping runtimes that use the same local identity file.
Tests and Reports
Run make dep to download module dependencies and resolve the pinned tested
tool, then make test for race-enabled Go tests and coverage. Open
.coverage/index.html for the report dashboard. make run-reports rebuilds
reports from recorded evidence without rerunning tests.
make ci-check runs version checks, automation fixtures, the full Go suite,
and the Caddy binary build. GitHub Actions uploads the complete report bundle
with a versioned name, including failure evidence, and retains it for 14 days.
Release publication requires the same CI gate.
See Testing and CI for focused runs and report files, and Release and Versioning for artifact names and release procedures.