readme.md

WebAccess

Access Management Reverse Proxy based on JWT.

Documentation

• Getting Started
  • Requirements
  • Instalation
  • Proccess Manager
  • Downstream Configuration
• Configuration Steps
  1. Environment Configuration
  2. Main App Configuration
  3. Database Connection Configuration
  4. Server Configuration
     • Middlewares
       • Http Parsers
         • Cookie Parser
         • Http Console Logger
       • Access
         • Access Control
           • Allow Contexts (e.g.,RBAC)
           • Allow Ips (firewall)
           • Allow Http Methods
           • Allow Origins
         • CSRF Protection
         • Set Device (mobile-detect)
         • Localization (MaxMind GeoIp)
         • Fingerprint
         • Authenticate (using JWT)
         • Spam Protection
           • Rate Limit
           • Slow Down (DDOS protection)
         • Body Parsers
           • Data Adapter
           • Method Overwrite
           • Parse Form
           • Parse Form Data (upload files using Multer)
           • Parse Json
           • Parse Text
         • Access Logs
       • Dev Tools
         • Console Logger
         • Performance Timer
       • Http Error Logs
     • Routes
       • Refresh
       • Logout
     • Proxy
       • Available Plugins
         • Strapi

Note: the server has built-in urlRewrite, direct db access, JWT support, dynamically added app and route settings and RegExp based route selector.

Important: Some modules are built-in or work only in a certain environment. For the rest of them there is one rule:

• if is not configured it doesn't run!

Examples and Presets

A growing list of reusable settings and examples can be found in config/servers/includes.

Todo next (in order of priority):

• Add upstream support
• Add local authentication
• Add web admin interface

Disclaimer

Please do not ask for support, since I'm a lone wolf I don't have time for this. I will try to improve the project within the time available.

License

MIT