fix traefik auth plugin base config

consul/discovery.go

@@ -151,10 +151,13 @@ func (s *Service) getTags() []string {
 		"traefik.http.routers." + s.Name + ".entryPoints=https",
 		"traefik.http.routers." + s.Name + ".tls=true",
 		"traefik.http.routers." + s.Name + ".service=" + s.Name,
-		"traefik.http.routers." + s.Name + ".middlewares=requestid,stripprefix_" + s.Name,
+		"traefik.http.routers." + s.Name + ".middlewares=auth,requestid,stripprefix_" + s.Name,
 		"traefik.http.services." + s.Name + ".loadbalancer.server.scheme=http",
 		"traefik.http.services." + s.Name + ".loadbalancer.server.port=" + strconv.Itoa(s.port),
 		"traefik.http.services." + s.Name + ".loadbalancer.passhostheader=false",
+		"traefik.http.middlewares.auth.forwardauth.address=http://identity-svc/api/v1/traefik",
+		"traefik.http.middlewares.auth.forwardauth.authResponseHeaders=Set-Cookie",
+		"traefik.http.middlewares.auth.forwardauth.trustForwardHeader=true",
 		"traefik.http.middlewares.requestid.plugin.requestid.headerName=X-Request-ID",
 		"traefik.http.middlewares.stripprefix_" + s.Name + ".stripprefix.prefixes=" + s.pathPrefix,
 		"traefik.tls.certificates.certfile=/certs/client.cert",