Nginx - API Gateway is not forwarding the request to Auth Service
zaidahmd
nginx-forum at forum.nginx.org
Thu Apr 13 05:00:20 UTC 2017
Hi Francis,
> I've read your description, and I confess I'm not sure what benefit
> auth_request within nginx gives you. It looks like your application is
> doing its own auth check on every request anyway, so having nginx do
> the same thing seems redundant. I'm probably missing something.
can u please tell me the concept and usage of auth_request module. What I
understood from the documentation is stated
below."http://nginx.org/en/docs/http/ngx_http_auth_request_module.html"
Auth_Request Understanding:
If the auth requirement of an application is to use something other
than BASIC or jwt THEN use auth_request. auth_request can be used to send
each request to a custom authentication application and get the requests
authenticated from that application. NGINX will send a subrequest to
auth_request application for each incoming client request. (This is the same
logic which MAXIM told me in the previous replies.
"https://forum.nginx.org/read.php?2,273515,273516#msg-273516")
************************** MAXIM's Reply Below
****************************************
> You misunderstood what auth_request does. Instead, it issues a
> subrequest for every incoming request, and allows further
> processing of the request if and only if the subrequest returns
> 200. No attempts are made to look into the response returned for
> the original request, that is, "protected application"
************************** END MAXIM's
Reply****************************************
Posted at Nginx Forum: https://forum.nginx.org/read.php?2,273515,273586#msg-273586
More information about the nginx
mailing list