Open
Description
Hello,
I don't understand how the configuration could works by using only
proxy_cache auth_cache;
proxy_cache_valid 200 10m;
When using HTTP Basic authorization by setting:
proxy_set_header Authorization $http_authorization;
The configuration lead to anyone having access after one auth called succeeded, which is what I think such configuration is supposed to do. But it does not make any sense.
Changing the cache configuration to include the Authroization header fixes the issue:
proxy_cache auth_cache;
proxy_cache_key "$http_authorization";
proxy_cache_valid 200 10m;
Am I stupid of the documentation is lacking this additional line ?
Best regards, Adam.
Metadata
Metadata
Assignees
Labels
No labels