[FEATURE] Support authenticating multiple domains

[adyanth]

Is your feature request related to a problem? Please describe.

I have two domains, one resolvable only locally, one from the internet. Most services have both domain URLs accessible.

Describe the solution you'd like
TinyAuth should support accepting a list of domains to set cookies on and protect, not just its parent domain.

Describe alternatives you've considered
thomseddon/traefik-forward-auth#302

Additional context
N/A

[steveiliop56]

Hello,

I would definitely like to add this too. I actually started writing some of the code but later I scrapped it because I wasn't happy with the implementation I had. I will rework it in the next release though and hopefully this time it will be better.

[danktankk]

+1 for this feature

[danktankk]

I guess this didnt make it to the v3.3 release?

[steveiliop56]

Unfortunately no. I had an idea on how to implement it but I ended up not liking it and toasted it. The issue is that if you make a request to myservice.sub.domain.com and have the app URL as tnyauth.sub.domain.com you will be able to login but if you have another service on myservice1.sub1.domain.com unless tinyauth is on tinyauth.sub1.domain.com there is no way to set the cookie. I cannot think of a good idea on how to implement this because you will need to have tinyauth exposed on multiple domains which is not really practical. I think the best way going forward is to have a tinyauth instance per domain. I will leave this open but remove the pinned label in case someone has an idea.

[danktankk]

This was an issue for James over at authelia as well. He did manage to get it sorted out, but it did take a while. No worries. I am currently running one per domain already. I just like to consolidate where possible. FWIW, personally, I dont use sub.sub.domain.com anyway as it seems to be somewhat problematic for services anyway. All good. Thank you for your work and efforts.