=== Reverse Proxy Auth Plugin ===
Contributors: Datawiza
Tags: proxy,auth,SSO,OIDC,SAML,Oauth,Single Sign-On
Requires at least: 3.0.1
Tested up to: 5.5.6
Requires PHP: 5.6
Stable tag: 1.1.0
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html

The Reverse Proxy Auth plugin helps developers/DevOps/admins easily implement authentication and authorization for WordPress by using the HTTP header fields provided by a reverse proxy.

== Description ==

The Reverse Proxy Auth plugin helps developers/DevOps/admins easily implement authentication and authorization for WordPress by using the HTTP header fields provided by a reverse proxy.

This could be employed to achieve SSO (OAUTH/OIDC and SAML) to a Cloud Identity Provider (e.g., Azure Active Directory, Okta, Auth0) by using an Identity-Aware Proxy, e.g., [Datawiza Access Broker](https://www.datawiza.com/access-broker) and [Google IAP](https://cloud.google.com/iap).

Note that the plugin requires a reverse proxy sitting in front of the WordPress site. The reverse proxy performs authentication, and passes the user name and role to the plugin via HTTP headers.

**How it works**

* The plugin retrieves the user id (email) from the HTTP header and then checks if such a user exists. If not, the plugin creates a new user by using this email and signs him/her in.
* The plugin retrieves the user role from the HTTP header and sets it as the user\'s role in WordPress.

**!!! NOTES !!!**

* **MAKE SURE that clients cannot bypass the reverse proxy. This is to prevent people from sending forged malicious requests with arbitrary headers directly to WordPress.**
* **MAKE SURE that your reverse proxy which sits in front of the WordPress site erases the header that you use to pass the authenticated user name. This prevents malicious clients from sending forged malicious requests by setting the header name with arbitrary value, which would compromise the security.**

== Installation ==
1. Activate the plugin through the \"Plugins\" menu in WordPress.

== Frequently Asked Questions ==

== Screenshots ==

== Changelog ==
= 1.1.0 =
* Initial release.

== Upgrade Notice ==