lua-resty-oauth-proxy

The Curity OAuth Proxy is a LUA library used when Single Page Applications (SPAs) call APIs.
It can be used with an NGINX based system with the LUA module enabled, such as OpenResty.
Secure cookies are first issued to the SPA by a separate token handler (OAuth Agent).
During API requests the plugin first validates web origins against a whitelist of trusted origins.
It then provides CORS responses headers needed for the SPA to make cross origin requests.
During API requests the OAuth Proxy implements Cross Site Request Forgery protection when needed.
It then decrypts secure cookies to get the access token contained.
The access token is then forwarded to the API using the HTTP Authorization header.
All of this provides strongest browser security without needing any API code changes.