From 3655b9269d924d13155b277a0affa5ce439a1802 Mon Sep 17 00:00:00 2001
From: hofq <54744977+hofq@users.noreply.github.com>
Date: Sat, 27 Dec 2025 14:33:25 +0100
Subject: [PATCH] fix: additional proxy headers for complete support of
 oauth2-proxy (#21434)

https://oauth2-proxy.github.io/oauth2-proxy/configuration/overview#header-options
---
 .../rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf    | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf b/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf
index 54c05ab3b..c945810be 100644
--- a/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf
+++ b/docker/main/rootfs/usr/local/nginx/conf/proxy_trusted_headers.conf
@@ -18,6 +18,10 @@ proxy_set_header X-Forwarded-User $http_x_forwarded_user;
 proxy_set_header X-Forwarded-Groups $http_x_forwarded_groups;
 proxy_set_header X-Forwarded-Email $http_x_forwarded_email;
 proxy_set_header X-Forwarded-Preferred-Username $http_x_forwarded_preferred_username;
+proxy_set_header X-Auth-Request-User $http_x_auth_request_user;
+proxy_set_header X-Auth-Request-Groups $http_x_auth_request_groups;
+proxy_set_header X-Auth-Request-Email $http_x_auth_request_email;
+proxy_set_header X-Auth-Request-Preferred-Username $http_x_auth_request_preferred_username;
 proxy_set_header X-authentik-username $http_x_authentik_username;
 proxy_set_header X-authentik-groups $http_x_authentik_groups;
 proxy_set_header X-authentik-email $http_x_authentik_email;