AW: Global basic auth for multiple servers

proxy.trash at gmail.com proxy.trash at gmail.com
Sun Apr 12 15:23:27 UTC 2020


Hi Maxim,

thank you for the information!

-----Ursprüngliche Nachricht-----
Von: nginx <nginx-bounces at nginx.org> Im Auftrag von Maxim Dounin
Gesendet: Sonntag, 12. April 2020 16:56
An: nginx at nginx.org
Betreff: Re: Global basic auth for multiple servers

Hello!

On Sat, Apr 11, 2020 at 11:21:19PM +0000, Stefan Christ wrote:

> today I tried to install and setup nginx and it worked great so far. I 
> was able to add some servers (server sections) for each of my 
> subdomains and forward them to the specific web interface in my 
> network (reverse proxy).
> 
> I wanted to add some extra security so I used basic auth in the http 
> section and turned it off for one single subdomain. Now I get asked to 
> auth for each subdomain. Is it possible to configure nginx so that I 
> only have to auth on one subdomain and have access to all others 
> subdomains without being forced to auth again?

No.  Unfortunately, Basic HTTP authentication only provides implicit
authentication scope, and automatic reuse of credentials is not possible
across different [sub]domains.  Further details can be found in RFC 7617,
"2.2. Reusing Credentials", here:

https://tools.ietf.org/html/rfc7617#section-2.2

--
Maxim Dounin
http://mdounin.ru/
_______________________________________________
nginx mailing list
nginx at nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx



More information about the nginx mailing list