proxy "apache like feature" RequestHeader unset authorization

[Igor Sysoev]

On Thu, Dec 02, 2010 at 09:27:00AM +0100, Arjan Filius wrote:

> Hello,
> 
> trying to setup Basic Authantication on a ningx reverse ssl  to http 
> proxy, where the backend doesn't accept authentication.
> 
> now, nginx send the Authentication header to the upstream, and fails.
> 
> is there something like the apache feature "RequestHeader unset 
> authorization" ??
> 
> Tried
> proxy_hide_header  Authorization ;
> but it still sends that Authorization header to backend.
> 
> Any idea how to do that?
> 
> location /someplace {
>            auth_basic            "Restricted";
>            auth_basic_user_file  /etc/apache2/Mypasswd ;
> 
>            proxy_set_header X-Real-IP $remote_addr;
>            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
>            proxy_set_header Host $http_host;
>            proxy_set_header X-FORWARDED_PROTO https;
>            proxy_redirect off;
>  	  proxy_hide_header  Authorization ;

-  	  proxy_hide_header  Authorization ;
+  	  proxy_set_header   Authorization "";

>  	  proxy_pass http://someplace;
> }


-- 
Igor Sysoev
http://sysoev.ru/en/