How to use Clef logins with firewalls like ModSecurity

Can I use Clef with Web Application Firewalls such as ModSecurity?

Yes. Depending on your firewall configuration, you may need to whitelist the following:

  • outgoing: https://clef.io (i.e., the Clef API domain)
  • incomingUser-Agent: Clef/1.0 (https://getclef.com) (i.e., the Clef API user agent for logout hook HTTP requests)

You can verify that the logout request is passing through the firewall by sending  a test request from the command line.