Reverse proxy header authentication

Overview

CloudBeaver offers a feature for authorization and authentication using reverse proxy headers. This method allows to authenticate users via specific HTTP header fields.

Configuration Steps

Step 1: Enabling Reverse proxy authentication

1. As an administrator, navigate to the Settings -> Server configuration.

2. Locate the Reverse proxy option and activate this setting to allow reverse proxy authentication.

   

3. Save changes.

Step 2: Configuring default HTTP header fields

Configure the standard HTTP header fields as follows:

1. Header User Name: Set as X-User.
2. Header Team Name: Use X-Role.
3. Header User First Name: Designate as X-First-name.
4. Header User Last Name: Set as X-Last-name.

Header example

Consider a user named newuser, belonging to both user and admin teams. To access an application with reverse proxy header authentication enabled, the following HTTP headers should be set in the request to the CloudBeaver application:

X-User: newuser
X-Role: user|admin
X-First-name: [Your First Name]
X-Last-name: [Your Last Name]

Tip: CloudBeaver categorizes users into two default teams: user and admin. The delimiter used to separate teams in the header is |.