Possibility to pass api auth but block other access

[Eysenor]

I hope I can be clear with this, I'm using authelia at the moment and there it is possible to have the api for a service to not require auth but any other access is blocked.
Like I have radar.example.com that would be accessible by apps that call the api but not on a browser.

Is this possible with voidauth?

[notquitenothing]

This is not built into VoidAuth, but you should be able to do this in your reverse proxy. Just set up routes (like an /api route on your service, whatever you need) and don't include the VoidAuth ProxyAuth configuration for that route.

For Caddy, you would omit the forward_auth directive inside the block you make for the unprotected route, for NGINX you would omit the proxy-auth.conf snippet for that sub-route.

Let me know if that helps 😊

[Eysenor]

Thanks for the answer, I will try when I get the time to properly deploy and test VoidAuth!

[grodius]

came here for the same question. it worked just fine. my example (calibre web server) is very simple so I shall share what I did.

/opds is an API for my kindle to access, and the rest continues to be protected by voidauth:
(npm btw)

include /config/nginx/snippets/auth-location.conf;

# OPDS path — no auth, plain proxy only
location /opds {
  include /config/nginx/snippets/proxy.conf;
  proxy_pass $forward_scheme://$server:$port;
}

# All other paths — proxied with auth and websocket support
location / {
  include /config/nginx/snippets/proxy.conf;
  include /config/nginx/snippets/websockets.conf;
  include /config/nginx/snippets/proxy-auth.conf;
  proxy_pass $forward_scheme://$server:$port;
}

by the way, I just installed voidauth this morning... an elegantly designed project
props to the dev(s)

best