new release from soitu.es: counting users

Evan Miller emmiller at gmail.com
Thu Jul 17 08:13:30 MSD 2008


Raul Rivero wrote:
> Hi all,
> 
> Today, we [soitu.es] released our patches to sign cookies, httponly 
> property and add user name to the ngx_http_userid_filter_module's cookies.
> 
> The summary:
> 
>   * Two new options:
> 
>         userid_secretforsign  "0ur-S3CRet.HerE!";
>         userid_httponly       on;
> 
>   * So, the new syntax of "unauthenticated" (1) cookie is:
> 
>         <NGINX_cookie>#<MD5Sign>
> 
>   * The "authenticated cookie" (2) is:
> 
>         <NGINX_cookie>#<MD5Sign>#<more_data>
> 
>     With a syntax for <more_data> like:
> 
>         <userName>[#<extraData>]
> 
>   * Then, when the sign of (1) or (2) is verified, two new enviroment 
> variables could be sent to backend:
> 
>         IDUSR ---> the <NGINX_cookie>
>         NAMEUSR -> the <userName>
> 
>     So, the backend knows nothing about authetication and all work is 
> done by Nginx.
> 
> You have a complete description and the patch in:
> 
>     http://www.soitu.es/soitu/2008/07/13/met/1215974436_160647.html
> 
> This is our second release of new modules or patches to Nginx. The first 
> one was a new module to clean HTML, delete special comments and add a 
> block of HTML after the <body> tag (more info in 
> http://www.soitu.es/soitu/2008/04/28/met/1209378259_661127.html).
> 
> Cheers,
> 

Hi Raul,

I think it would be helpful if you packaged these as standalone modules 
rather than patches. Then people could use them against any Nginx 
version with:

    ./configure --add-module=/path/to/soitu-userid

Some tips on packaging standalone modules can be found here:

http://emiller.info/nginx-modules-guide.html#compiling

Evan






More information about the nginx mailing list