This commit is contained in:
zino
2023-12-06 00:22:59 +01:00
parent 232a197661
commit f5b1477205
2 changed files with 11 additions and 70 deletions

View File

@@ -1,13 +1,11 @@
# send all requests to the `/validate` endpoint for authorization
auth_request /validate;
location = /validate {
# forward the /validate request to Vouch Proxy
proxy_pass https://validate.vouch.armos.zinomedia.de:443;
# be sure to pass the original host header
proxy_set_header Host $http_host;
location = /validate {
internal;
proxy_pass "https://validate.vouch.armos.zinomedia.de/validate";
# proxy_set_header X-Forwarded-Host $http_host;
# Vouch Proxy only acts on the request headers
proxy_pass_request_body off;
proxy_set_header Content-Length "";
@@ -22,9 +20,9 @@ location = /validate {
}
# if validate returns `401 not authorized` then forward the request to the error401block
# error_page 401 = @error401;
error_page 401 = @error401;
# location @error401 {
# # redirect to Vouch Proxy for login
# return 302 https://vouch.armos.zinomedia.de/login?url=$scheme://$http_host$request_uri&vouch-failcount=$auth_resp_failcount&X-Vouch-Token=$auth_resp_jwt&error=$auth_resp_err;
# }
location @error401 {
# redirect to Vouch Proxy for login
return 302 https://vouch.armos.zinomedia.de/login?url=$scheme://$http_host$request_uri&vouch-failcount=$auth_resp_failcount&X-Vouch-Token=$auth_resp_jwt&error=$auth_resp_err;
}