f4c3566 · typeable/oauth2-proxy

git.iko.soy/typeable/oauth2-proxy

on master help sign in

Merge pull request #382 from ploxiln/auth_request_readme

f4c3566Jehiah Czebotar9 years ago

README.md+7−14

compare with master

unifiedsplit

@@ -350,15 +350,10 @@ The [Nginx `auth_request` directive](http://nginx.org/en/docs/http/ngx_http_auth

350

351```nginx

352server {

353− listen 443 ssl spdy;

353+ listen 443 ssl;

354 server_name ...;

355 include ssl/ssl.conf;

356

357− location = /oauth2/auth {

358− internal;

359− proxy_pass http://127.0.0.1:4180;

360− }

361−

362 location /oauth2/ {

357 location /oauth2/ {

363 proxy_pass http://127.0.0.1:4180;

358 proxy_pass http://127.0.0.1:4180;

364 proxy_set_header Host $host;

359 proxy_set_header Host $host;

@@ -367,7 +362,7 @@ server {

367 proxy_set_header X-Auth-Request-Redirect $request_uri;

362 proxy_set_header X-Auth-Request-Redirect $request_uri;

368 }

363 }

369

364

370− location /upstream/ {

365+ location / {

371 auth_request /oauth2/auth;

366 auth_request /oauth2/auth;

372 error_page 401 = /oauth2/sign_in;

367 error_page 401 = /oauth2/sign_in;

373

368

@@ -378,14 +373,12 @@ server {

378 proxy_set_header X-User $user;

373 proxy_set_header X-User $user;

379 proxy_set_header X-Email $email;

374 proxy_set_header X-Email $email;

380

375

381− proxy_pass http://backend/;

376+ # if you enabled --cookie-refresh, this is needed for it to work with auth_request

382− }

377+ auth_request_set $auth_cookie $upstream_http_set_cookie;

378+ add_header Set-Cookie $auth_cookie;

383

379

384− location / {

380+ proxy_pass http://backend/;

385− auth_request /oauth2/auth;

386− error_page 401 = https://example.com/oauth2/sign_in;

387−

388− root /path/to/the/site;

381+ # or "root /path/to/site;" or "fastcgi_pass ..." etc

389 }

382 }

390}

383}

391```

384```