Hi,

I'm facing an issue using the "satisfy any" directive. What I'm trying to achieve is quite simple:
- have an auth_request directive protecting the entire website (hence set at the server level in the config file)
- have no such authentication for the local network

I've put the following lines in my nginx config file, under the 'server' directive:

----------------------------
server {

satisfy any;
allow 192.168.0.0/24;
deny all;

auth_request /path/to/authRequestScript.php;
[...]
}
----------------------------

Although that works well for the local network (ie: no authentication required anymore), I get a "403 Forbidden" message when I'm connecting from the outside network where I would expect the usual authentication mecanism to be triggered.

All the exemples I found rely on the "location /" directive, but I'd like it to be at the server level.

What am I doing wrong ?

Thanks for any help,
Arno