STAC Auth Proxy

---

STAC Auth Proxy is a proxy API that mediates between the client and your internally accessible STAC API to provide flexible authentication, authorization, and content-filtering mechanisms.

[!IMPORTANT]

We would :heart: to hear from you! Please join the discussion and let us know how you're using eoAPI! This helps us improve the project for you and others. If you prefer to remain anonymous, you can email us at [email protected], and we'll be happy to post a summary on your behalf.

✨Features✨

• 🔐 Authentication: Apply OpenID Connect (OIDC) token validation and optional scope checks to specified endpoints and methods
• 🛂 Content Filtering: Use CQL2 filters via the Filter Extension to tailor API responses based on request context (e.g. user role)
• 🤝 External Policy Integration: Integrate with external systems (e.g. Open Policy Agent (OPA)) to generate CQL2 filters dynamically from policy decisions
• 🧩 Authentication Extension: Add the Authentication Extension to API responses to expose auth-related metadata
• 📘 OpenAPI Augmentation: Enhance the OpenAPI spec with security details to keep auto-generated docs and UIs (e.g., Swagger UI) accurate
• 🗜️ Response Compression: Optimize response sizes using starlette-cramjam

Documentation

Full documentation is available on the website.

Head to Getting Started to dig in.