Download
Mostly copied from mod_auth_basic of apache-2.2.
The basic-auth handshake was replaced by some code which gets the userid out of a customable variable. The variable could be anything ap_expr could read in authentication hook, e.g.: a header field, a httpd environment variable or an SSL environment variable. The syntax is the same known from RewriteCond of mod_rewrite: e.g.: %{HTTP:variable}, %{ENV:variable} or %{SSL:variable}
No password is written into internal httpd variables. So the authentication has to be validated by mod_authn_anon.
For authorisation any of the authz standard modules could be used.
Features
- accept authentification of a an other server (e.g. reverse proxy)
- accept authentification by trusting HTTP Header variable
- accept authentification by trusting Environment variable
- accept authentification by trusting SSL variable (e.g. SSL_CLIENT_M_SERIAL)
Categories
HTTP ServersLicense
Apache License V2.0Follow mod_auth_trustheader
Other Useful Business Software
MongoDB Atlas runs apps anywhere
MongoDB Atlas gives you the freedom to build and run modern applications anywhere—across AWS, Azure, and Google Cloud. With global availability in over 115 regions, Atlas lets you deploy close to your users, meet compliance needs, and scale with confidence across any geography.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of mod_auth_trustheader!
