Wss calls are not forwarding to ForwardAuth authentication

Traefik Traefik v2 (latest)
1

Hi,
I am trying to setup ForwardAuth for wss incoming calls, but it's forwarding/bypassing to actual server without authentication, same thing works fine for usual https calls. Is there any known issue int his area?

My forward_auth.yaml:
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
name: test-auth
namespace: sample-ns
spec:
forwardAuth:
address: https://:8080/auth
tls:
insecureSkipVerify: true

And IngresRouter:
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
annotations:
kubernetes.io/ingress.class: traefik
name: traefik-2
namespace: sample-ns
spec:
entryPoints:

  • websecure
    routes:
  • kind: Rule
    match: PathPrefix(/ws/xyz)
    middlewares:
    • name: test-auth
      namespace: sample-ns
      services:
    • kind: Service
      name: sample-cluster-bea-engine-tier-clust
      port: 8001
1 Like
2

Any comments/helps would be greatly appreciated on this topic.

Here wss means, any websocket calls.