If I define

nginx.conf
...
server {
...
include includes/conf1.inc;
include includes/conf2.inc;
...
}
...

cat includes/conf1.inc;
location ~ ^/sec($|/$) {
deny all;
}

cat includes/conf2.inc;
location = /sec/status {
auth_basic 'Secure Access';
auth_basic_user_file /etc/nginx/sec/users;
stub_status on;
}

@ https://example.com/sec/status

displays, as intended, a HTTP Basic Auth challenge.

But, if I move the auth_basic* into the immediately prior config file,

cat includes/conf1.inc;
location ~ ^/sec($|/$) {
deny all;
}
+ location ~ ^/sec {
+ auth_basic 'Secure Access';
+ auth_basic_user_file /etc/nginx/sec/users;
+ }

cat includes/conf2.inc;
location = /sec/status {
- auth_basic 'Secure Access';
- auth_basic_user_file /etc/nginx/sec/users;
stub_status on;
}

@ https://example.com/sec/status

displays server status immediately, WITHOUT any HTTP Basic Auth challenge.

What's wrong with my 2nd config that's causing it to NOT invoke Basic Auth challenge?
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx