m
This commit is contained in:
@@ -1,4 +1,4 @@
|
|||||||
log_format custom2 'code | request_uri: $request_uri | ';
|
log_format custom2 'code | request_uri: $request_uri | http_host: $http_host | auth_resp_x_vouch_user: $auth_resp_x_vouch_user | upstream_http_x_vouch_user: $upstream_http_x_vouch_user | auth_resp_jwt: $auth_resp_jwt | upstream_http_x_vouch_jwt: $upstream_http_x_vouch_jwt | auth_resp_err: $auth_resp_err | upstream_http_x_vouch_err: $upstream_http_x_vouch_err | auth_resp_failcount: $auth_resp_failcount | upstream_http_x_vouch_failcount: $upstream_http_x_vouch_failcount';
|
||||||
|
|
||||||
server {
|
server {
|
||||||
listen 443 ssl;
|
listen 443 ssl;
|
||||||
@@ -28,7 +28,22 @@ server {
|
|||||||
|
|
||||||
location = /auth {
|
location = /auth {
|
||||||
internal;
|
internal;
|
||||||
proxy_pass https://validate.vouch.armos.zinomedia.de$request_uri;
|
proxy_pass https://validate.vouch.armos.zinomedia.de;
|
||||||
|
|
||||||
|
# be sure to pass the original host header
|
||||||
|
proxy_set_header Host $http_host;
|
||||||
|
|
||||||
|
# Vouch Proxy only acts on the request headers
|
||||||
|
proxy_pass_request_body off;
|
||||||
|
proxy_set_header Content-Length "";
|
||||||
|
|
||||||
|
# optionally add X-Vouch-User as returned by Vouch Proxy along with the request
|
||||||
|
auth_request_set $auth_resp_x_vouch_user $upstream_http_x_vouch_user;
|
||||||
|
|
||||||
|
# these return values are used by the @error401 call
|
||||||
|
auth_request_set $auth_resp_jwt $upstream_http_x_vouch_jwt;
|
||||||
|
auth_request_set $auth_resp_err $upstream_http_x_vouch_err;
|
||||||
|
auth_request_set $auth_resp_failcount $upstream_http_x_vouch_failcount;
|
||||||
}
|
}
|
||||||
|
|
||||||
# location = /validate {
|
# location = /validate {
|
||||||
|
|||||||
Reference in New Issue
Block a user