Welcome! Log In Create A New Profile

Advanced

Feature extension to auth_request module: FastCGI authorizer

April 22, 2013 12:35AM
I've written an additional feature into the Auth Request module (from http://mdounin.ru/hg/ngx_http_auth_request_module/) that allows a user to control the behaviour of the auth_request in such a way that it can act as a FastCGI authorizer. This patch that I have written allows the user to specify the flag "authorizer=on" against a call to "auth_request" (eg "auth_request /my-auth authorizer=on;") and the auth request module will behave as per the authorizer specification (http://www.fastcgi.com/drupal/node/22#S6.3).

There is one (potentially significant) caveat for now is that request/response bodies are not passed to the authorizer or back to the client respectively - assistance on this would be greatly appreciated. However, as it stands at present, the authorizer mode is able to correctly handle situations where only the headers are utilised -- eg the Shibboleth SSO FastCGI authorizer which relies on redirection and cookies and never a response/request body. This satisfies at least what I need it for at present and authentication works successfully.

I'd like to see about whether this can be included within the main module itself at http://mdounin.ru/hg/ngx_http_auth_request_module, as I know this will be useful to more than just me. For example, see the various posts and questions surrounding this: https://www.google.com/search?q=fastcgi+authorizer+nginx .

The latest version of my module lives at:
https://bitbucket.org/davidjb/ngx_http_auth_request_module

and the one main diff is located at:
https://bitbucket.org/davidjb/ngx_http_auth_request_module/commits/3d865a718d3e34e4e353962ccc71c588a806db31/raw/

Comments are more than welcome.

Thanks,
David
SubjectAuthorPosted

Feature extension to auth_request module: FastCGI authorizer

davidjbApril 22, 2013 12:35AM

Re: Feature extension to auth_request module: FastCGI authorizer

Maxim DouninApril 22, 2013 12:40PM

Re: Feature extension to auth_request module: FastCGI authorizer

davidjbApril 23, 2013 07:23PM

Re: Feature extension to auth_request module: FastCGI authorizer

Maxim DouninApril 24, 2013 06:38AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 87
Record Number of Users: 7 on March 06, 2014
Record Number of Guests: 184 on July 08, 2014
Powered by nginx    Powered by FreeBSD    PHP Powered    Powered by Percona     ipv6 ready