ngx_http_auth_request_module 第三方认证

Posted 2020-10-25 狂猫

shell > vim /usr/local/nginx-1.10.2/conf/vhost/auth.conf  # 这是第三方认证服务器，认证逻辑使用的 php 代码

server {
    listen       80;
    server_name  auth.server.com;

    location ~ \.php$ {
        fastcgi_pass   127.0.0.1:9000;
        fastcgi_index  index.php;
        fastcgi_param  SCRIPT_FILENAME  /usr/local/nginx-1.10.2/html$fastcgi_script_name;
        include        fastcgi_params;
    }
}

shell > vim /usr/local/nginx-1.10.2/html/HttpBasicAuthenticate.php

<?php

if(isset($_SERVER[‘PHP_AUTH_USER‘], $_SERVER[‘PHP_AUTH_PW‘])){
    $username = $_SERVER[‘PHP_AUTH_USER‘];
    $password = $_SERVER[‘PHP_AUTH_PW‘];

    if ($username == ‘wang‘ && $password == ‘123456‘){
        return true;
    }
}

header(‘WWW-Authenticate: Basic realm="Git Server"‘);
header(‘HTTP/1.0 401 Unauthorized‘);

?>