Re: auth_request off; ignored when combined with auth_basic;

2017-10-13 Thread Francis Daly
On Fri, Oct 13, 2017 at 11:39:50AM -0500, Stian Øvrevåge wrote: Hi there, > Quick follow-up. I tried negating the 401 redirect at the /api/ > endpoint but got an error: > > named location "@error401" can be on the server level only > > Any suggestion on how I can enforce a side-wide redir

Re: auth_request off; ignored when combined with auth_basic;

2017-10-13 Thread Stian Øvrevåge
Quick follow-up. I tried negating the 401 redirect at the /api/ endpoint but got an error: named location "@error401" can be on the server level only Any suggestion on how I can enforce a side-wide redirect to /security/ except the 2-3 endpoints that have basic auth? Br, Stian On 13 Octob

Re: auth_request off; ignored when combined with auth_basic;

2017-10-13 Thread Stian Øvrevåge
Thanks a bunch. When still being redirected now I found the culprit: location @error401 { return 302 /security/; } Which of course will redirect before auth basic will work. Thanks again and pardon my ignorance :o Br, Stian On 13 October 2017 at 04:14, Maxim Dounin wr

Re: auth_request off; ignored when combined with auth_basic;

2017-10-13 Thread Maxim Dounin
Hello! On Fri, Oct 13, 2017 at 12:47:11AM -0500, Stian Øvrevåge wrote: > Hi list, > > I have a server {} block that is protected with auth_request; on the top > level. > > auth_request is used for a interactive login process. > > I have some endpoints that will receive data from other softwar

auth_request off; ignored when combined with auth_basic;

2017-10-12 Thread Stian Øvrevåge
Hi list, I have a server {} block that is protected with auth_request; on the top level. auth_request is used for a interactive login process. I have some endpoints that will receive data from other software, and must instead be protected by auth_basic. However, "auth_request off;" is ignored in