Busbar

Plugin Store · Auth

OIDC

Docs GitHub
v1.0.1
macOSApple SiliconmacOSIntelLinuxx86_64LinuxARM64Windowsx86_64

Log in with your IdP.

The OIDC auth plugin trusts requests based on tokens from your identity provider (Okta, Auth0, Entra ID, Keycloak, or any OIDC-compliant issuer) instead of a static allowlist Busbar holds. Every bearer token is verified against the IdP’s live JWKS — the plugin never trusts an unsigned claim.

That means gateway access follows the identity you already manage: revoke someone in your IdP and they lose Busbar access with them, no separate token rotation. The configured role claim (e.g. groups) maps onto the resulting principal’s roles, so identity drives policy.

Install it

Download the signed tarball for your platform (button above), drop it in plugins/, and set:

auth:
  chain:
    - oidc:
        settings:
          issuer: "https://login.microsoftonline.com/<tenant-id>/v2.0"
          audience: "<client-id>"
          role_claim: groups

Independently versioned from busbar itself — pin both explicitly in production. Requires busbar 1.5.0+.

← Back to the Plugin Store