Home / server / Questions / 483108
In Process
nbari
Asked: 2013-02-28 09:01:41 +0800 CST

allow uploads only to authenticated users (nginx + upload_module)

  • 772

I have configure Nginx with the upload_module.

I can upload & resume files but anybody can post to the /upload location.

is there a way of making the location /upload internal and use X-Accel-Redirect so that only authenticated users could post files?

Or any idea of how to secure the server so that only certain users could post files, having the authentication logic on the application side?.

nginx

2 Answers

  1. You could use nginx's auth_basic, auth_request, or any other authentication method to wrap the /upload location.

    • 1

  2. You need to use ngx_http_auth_basic_module that allows limiting access to resources by validating the user name and password using "HTTP Basic Authentication" protocol.

    server {
    # auth
    auth_basic "Restricted site";
    auth_basic_user_file /opt/nginx/.htpasswd;
}
    • 0