#1113892 ITP: authelia -- authentication and authorization server

Package:
wnpp
Source:
wnpp
Submitter:
Philipp Kern
Date:
2025-11-29 16:58:54 UTC
Severity:
normal
#1113892#5
Date:
2025-09-03 19:45:19 UTC
From:
To:
* Package name    : authelia
  Version         : 4.39.8-1
  Upstream Author : Authelia
* URL             : https://github.com/authelia/authelia
* License         : Apache-2.0
  Programming Lang: Go
  Description     : authentication and authorization server

 Authelia is an open-source authentication and authorization server
 providing two-factor authentication and single sign-on (SSO) for your
 applications via a web portal. It acts as a companion for reverse
 proxies by allowing, denying, or redirecting requests.
 .
 It supports OpenID Connect 1.0 to integrate with other applications.
 Two-factor mechanisms that are supported include FIDO security keys
 and time-based one-time passwords (TOTP). Passwordless authentication
 via WebAuthn (Passkeys) is supported as well.
 .
 It also supports fine-grained access control when used as a forward
 auth provider for web proxies like Nginx, Caddy, or HAProxy.
#1113892#10
Date:
2025-11-02 22:55:01 UTC
From:
To:
Hi Philipp,

I'm very interested in authelia packaging! Is there any place, like
Salsa, where I can peek at your progress?

Let me know, bye :)
#1113892#15
Date:
2025-11-03 20:18:58 UTC
From:
To:
Hi,

The problem right now is not Authelia packaging, it's packaging all the
dependencies.

Currently the direct list is this:

(I hope that the Authelia providers can be done inline, but I'll cross
that bridge once we come to it.)

Unfortunately some, like fasthttp, need more one-off packages by the
same author. fasthttp/session specifically needs Redis disabled, I
think, because
https://tracker.debian.org/pkg/golang-github-go-redis-redis is severely
outdated.

I also suspect we can probably skip over
github.com/duosecurity/duo_api_golang. So if you want to pick any
package from the dependency tree to package, be my guest, go forth and
go-make-golang. That outputs the ITP, maybe Cc me on that so that I'm
definitely aware.

Kind regards and thanks
Philipp Kern
#1113892#20
Date:
2025-11-03 21:05:01 UTC
From:
To:
Hi,

Of course :)

I'm currently over 100% of my energy budget, and cannot work on Debian
stuff. Sorry. But in a couple of weeks I'll probably take a look, as I'd
like to introduce Authelia to simplify authentication in the local
hacker space.

Bye!