I am running a set of NGINX proxies using basic browser authentication with the htpasswd file for users.
I have built a small application with Laravel that authenticates the user and presents them a list of links to these nginx proxies.
I am looking to update the nginx authentication to something like JWT tokens, however I am not sure that would be secure enough without an API behind it to validate the actual token itself?
The other option I was thinking was LDAP solution and having both Laravel and the NGINX proxies using the ldap authentication.
The apps that site behind the nginx proxy do not have any authentication and we have 0 intention of adding any to them at this time