nginx is at: 26% Apache is at 20%
It doesn't sound like nginx is even close to having this wrapped up; which is a really good thing because I've tried nginx and the config and design sucks. Apache does so many things well.
From the wiki.
Personally I use apache as I have very few users (internal facing stuff), it has a nice simple mod_auth_openidc config which remains the same from one year to the next
I do have to recompile ws_tunnel though as I proxy a broken product I proxy which doesn't accept the correct standard for camel-capped "WebSocket" -- my "fix" script runs
sed -i 's/WebSocket/websocket/g' ./modules/proxy/mod_proxy_wstunnel.c
and recompiles