A small web app for demonstrating Tinyauth.
Try out the Tinyauth demo at https://app-demo.tinyauth.app.
It sits behind Tinyauth via Traefik forward auth and does zero authentication of its own. It serves two pages:
/- public. Tinyauth is told to skip authentication for this exact path (through ACLs), so anyone can open it. It explains what will happen when you click through to the protected page./protected- behind Tinyauth. Opening it without a session bounces you to the Tinyauth login page. Once signed in it shows a "You're authenticated!" hero, theRemote-User/Remote-Name/Remote-Email/Remote-Groupsheaders the proxy injected, and a "Log out" button pointing at Tinyauth's logout endpoint.
Both pages include a collapsible table of every request header, so you can compare exactly what the proxy forwarded in each case.
-
Copy the
.env.examplefile to.envand edit it to your liking. -
Start everything:
docker compose up -d --build
-
Open the demo app. You get the public landing page, no login, no identity headers.
-
Click Open protected page. Traefik asks Tinyauth whether you're logged in, Tinyauth redirects you to its login page, and after signing in (
user/password) you land on/protectedshowing your identity.
| Variable | Default | Description |
|---|---|---|
TINYAUTH_URL |
`` | The Tinyauth server URL, used for the logout button. |
DEMO_URL |
`` | The demo app URL, used for the logout button. |
The server always listens on :3000 and serves / (public) and /protected.
- Thanks to Luca Bravo for the background image
This project is licensed under the MIT License. TL;DR — You can use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the software. Just make sure to include the original license in any substantial portions of the code. There’s no warranty — use at your own risk. See the LICENSE file for full details.