Global basic auth for multiple servers

Maxim Dounin mdounin at mdounin.ru
Sun Apr 12 14:55:59 UTC 2020


Hello!

On Sat, Apr 11, 2020 at 11:21:19PM +0000, Stefan Christ wrote:

> today I tried to install and setup nginx and it worked great so 
> far. I was able to add some servers (server sections) for each 
> of my subdomains and forward them to the specific web interface 
> in my network (reverse proxy).
> 
> I wanted to add some extra security so I used basic auth in the 
> http section and turned it off for one single subdomain. Now I 
> get asked to auth for each subdomain. Is it possible to 
> configure nginx so that I only have to auth on one subdomain and 
> have access to all others subdomains without being forced to 
> auth again?

No.  Unfortunately, Basic HTTP authentication only provides 
implicit authentication scope, and automatic reuse of credentials 
is not possible across different [sub]domains.  Further details 
can be found in RFC 7617, "2.2. Reusing Credentials", here:

https://tools.ietf.org/html/rfc7617#section-2.2

-- 
Maxim Dounin
http://mdounin.ru/


More information about the nginx mailing list