File tree 1 file changed +7
-14
lines changed
1 file changed +7
-14
lines changed Original file line number Diff line number Diff line change @@ -350,15 +350,10 @@ The [Nginx `auth_request` directive](http://nginx.org/en/docs/http/ngx_http_auth
350
350
351
351
``` nginx
352
352
server {
353
- listen 443 ssl spdy ;
353
+ listen 443 ssl;
354
354
server_name ...;
355
355
include ssl/ssl.conf;
356
356
357
- location = /oauth2/auth {
358
- internal;
359
- proxy_pass http://127.0.0.1:4180;
360
- }
361
-
362
357
location /oauth2/ {
363
358
proxy_pass http://127.0.0.1:4180;
364
359
proxy_set_header Host $host;
@@ -367,7 +362,7 @@ server {
367
362
proxy_set_header X-Auth-Request-Redirect $request_uri;
368
363
}
369
364
370
- location /upstream/ {
365
+ location / {
371
366
auth_request /oauth2/auth;
372
367
error_page 401 = /oauth2/sign_in;
373
368
@@ -378,14 +373,12 @@ server {
378
373
proxy_set_header X-User $user;
379
374
proxy_set_header X-Email $email;
380
375
381
- proxy_pass http://backend/;
382
- }
376
+ # if you enabled --cookie-refresh, this is needed for it to work with auth_request
377
+ auth_request_set $auth_cookie $upstream_http_set_cookie;
378
+ add_header Set-Cookie $auth_cookie;
383
379
384
- location / {
385
- auth_request /oauth2/auth;
386
- error_page 401 = https://example.com/oauth2/sign_in;
387
-
388
- root /path/to/the/site;
380
+ proxy_pass http://backend/;
381
+ # or "root /path/to/site;" or "fastcgi_pass ..." etc
389
382
}
390
383
}
391
384
```
You can’t perform that action at this time.
0 commit comments