oauth2-proxy: document lack of request authentication

Signed-off-by: Patrik Oldsberg <poldsberg@gmail.com>
2024-09-10 13:20:26 +02:00
parent 5ff059ee71
commit 740dd0bad1
2 changed files with 15 additions and 0 deletions
@@ -13,6 +13,12 @@ a cluster. In general the `oauth2-proxy` supports all OpenID Connect providers,
 for more details check this
 [list of supported providers](https://oauth2-proxy.github.io/oauth2-proxy/docs/configuration/oauth_provider).

+:::note Note
+
+OAuth2 Proxy does not provide a way to authenticate requests, you must instead ensure that your Backstage instance is only accessible through the OAuth2 Proxy. If you need more strict validation, consider using a different provider.
+
+:::
+
 ## Configuration

 The provider configuration can be added to your `app-config.yaml` under the root