Home / server / Questions / 797957
Accepted
Nicolas Melay
Asked: 2016-08-20 09:21:13 +0800 CST

Rewrite user and password in proxied requests

  • 772

I need to rewrite the client authentication scheme in requests going through an Apache 2.4 reverse proxy. Specifically, I want to ignore the provided username and password, and force the same username + password for all requests. Is that doable ?

authentication mod-proxy mod-rewrite apache-2.4

1 Answers

  1. Best Answer

    If you're using basic authentication: yes, as that depends on a request header included in every request. https://httpd.apache.org/docs/current/mod/mod_proxy.html#x-headers

    Note: If you need to specify custom request headers to be added to the forwarded request, use the RequestHeader directive.

    RequestHeader This directive can replace, merge, change or remove HTTP request headers. The header is modified just before the content handler is run, allowing incoming headers to be modified. ...

    And then in your httpd.conf:

    RequestHeader set Authorization "Basic <base64-encoded login+password>"
    • 1