From fe44b89f574a3c8174b18a3cf458217e3b281544 Mon Sep 17 00:00:00 2001 From: Ashish Kulkarni Date: Wed, 16 Nov 2016 13:25:07 +0530 Subject: [PATCH] update documentation for Nginx auth_request mode --- README.md | 23 +++++++++++++++++++---- 1 file changed, 19 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index fd4ee71..9333a66 100644 --- a/README.md +++ b/README.md @@ -359,10 +359,25 @@ server { } location /oauth2/ { - proxy_pass http://127.0.0.1:4180; - proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Scheme $scheme; + proxy_pass http://127.0.0.1:4180; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Scheme $scheme; + proxy_set_header X-Auth-Request-Redirect $request_uri; + } + + location /upstream/ { + auth_request /oauth2/auth; + error_page 401 = /oauth2/sign_in; + + # pass information via X-User and X-Email headers to backend, + # requires running with --set-xauthrequest flag + auth_request_set $user $upstream_http_x_auth_request_user; + auth_request_set $email $upstream_http_x_auth_request_email; + proxy_set_header X-User $user; + proxy_set_header X-Email $email; + + proxy_pass http://backend/; } location / {