What does ForwardAuth do in Traefik?
ForwardAuth asks an external service whether a request may proceed. It is an authorization integration point, not a complete identity provider.
Choose the auth-service address and response headers deliberately. Avoid trusting identity headers supplied directly by clients; test your complete proxy chain.
Source and further reading — checked 2026-10-28.