http-auth-internal #
ngx_http_auth_internal_module validates an internal authentication fingerprint header.
Source: upstream source
Directives
auth_internal #
syntax: auth_internal on | off; · default: auth_internal off; · context: http, server
Enables or disables internal fingerprint validation.
auth_internal_empty_deny #
syntax: auth_internal_empty_deny on | off; · default: auth_internal_empty_deny off; · context: http, server
When enabled, requests without the fingerprint header are rejected.
auth_internal_failure_deny #
syntax: auth_internal_failure_deny on | off; · default: auth_internal_failure_deny on; · context: http, server
When enabled, invalid or expired fingerprints are rejected.
auth_internal_header #
syntax: auth_internal_header header; · default: auth_internal_header X-Fingerprint; · context: http, server
Sets the request header used for fingerprint validation.
auth_internal_secret #
syntax: auth_internal_secret secret; · default: - · context: http, server
Configures a secret used to validate the fingerprint header. This directive can be specified multiple times to support secret rotation.
auth_internal_timeout #
syntax: auth_internal_timeout time; · default: auth_internal_timeout 300s; · context: http, server
Sets the maximum allowed fingerprint age.
Example
http {
auth_internal on;
auth_internal_secret secret1;
auth_internal_secret secret2;
auth_internal_timeout 600;
auth_internal_header X-Fingerprint;
auth_internal_empty_deny off;
auth_internal_failure_deny on;
}