Download
Mostly copied from mod_auth_basic of apache-2.2.
The basic-auth handshake was replaced by some code which gets the userid out of a customable variable. The variable could be anything ap_expr could read in authentication hook, e.g.: a header field, a httpd environment variable or an SSL environment variable. The syntax is the same known from RewriteCond of mod_rewrite: e.g.: %{HTTP:variable}, %{ENV:variable} or %{SSL:variable}
No password is written into internal httpd variables. So the authentication has to be validated by mod_authn_anon.
For authorisation any of the authz standard modules could be used.
Features
- accept authentification of a an other server (e.g. reverse proxy)
- accept authentification by trusting HTTP Header variable
- accept authentification by trusting Environment variable
- accept authentification by trusting SSL variable (e.g. SSL_CLIENT_M_SERIAL)
Categories
HTTP ServersLicense
Apache License V2.0Follow mod_auth_trustheader
Other Useful Business Software
AI-generated apps that pass security review
Retool lets you generate dashboards, admin panels, and workflows directly on your data. Type something like “Build me a revenue dashboard on my Stripe data” and get a working app with security, permissions, and compliance built in from day one. Whether on our cloud or self-hosted, create the internal software your team needs without compromising enterprise standards or control.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of mod_auth_trustheader!
