Questions tagged [http-authentication]
74 questions
0
votes
1 answer
Restricting access from the internet to a website in beta conflicting with the website's own authentication
I have a java website that runs on Apache Tomcat.
As the website is in Beta, I don't want it to be publicly accessible to anyone on the internet and I want a restricted group of beta testers to access the website thereby restricting access to all…
balteo
- 63
- 2
- 9
0
votes
1 answer
Cannot setting up path based authentication in subversion
I've followed the subversion book countless times to try and set proper path authorization on our subversion server, but I haven't been able to make this work. Here is my access rules file :
[groups]
sales-admin = alexa, miked, chrism
…
codewario
- 548
- 3
- 16
- 36
0
votes
1 answer
Allow Site and Server acces from single computer?
I have a local site that I use to run a web application for my business. Only one or two computers need to be able to access the site.
I want to allow access to only those computers (not by IP) with the application acting like a typical web app…
dgo
- 133
- 10
0
votes
4 answers
Sharing www folder breaks IIS sites
I would like to share my www folder on my local machine with others in my office but when I do this and try navigate back to my localhost sites, I get the error HTTP Error 401.3 - Unauthorized.
Now I have done a search already and found this…
SixfootJames
- 113
- 1
- 4
0
votes
1 answer
Apache2 require authentication for directory
I'm trying to secure my phpmemcachedadmin installation. (It doesn't come with any sort of security, not even a login system)
I've added this to the .htaccess file:
AuthName "For admins only"
AuthType Basic
AuthUserFile…
Jelle De Loecker
- 1,094
- 6
- 17
- 30
0
votes
1 answer
Apache 2.2, changing DocumentRoot depending on the HTTP auth credentials provided by client
Is this even possible?
Say I have a server, devbox.local, which has several HTTP auth users: alan, bill, carl. What I'm trying to do is tell Apache to use a different DocumentRoot depending on who is logged in at the time. So user alan might see a…
TimE
0
votes
0 answers
Securing endpoints on Azure Application Gateway for access by HubSpot
We have a legacy system which presents a REST API that has Basic Authentication / this API has so far only been accessible from within our private network.
We've been asked to make this API available publicly. However, our InfoSec team have a rule…
JohnLBevan
- 1,214
- 7
- 22
- 46
0
votes
1 answer
Azure Function App - Azure Defender compliance
Azure Defender on Azure has two policies for Azure Function authentication that I'm not able to implement from other azure resources that support http calls.
Function apps should have Client Certificates (Incoming client certificates)…
0
votes
1 answer
NginX: how to rewrite response body and headers?
Context
I have a collection of static HTML pages (~10k pages) generated by some application over which I have no control. These pages are served by NginX from a location block.
Pages may contain sensitive data. I would like to be able to block page…
ajlittoz
- 111
- 3
0
votes
0 answers
nginx auth_basic stopped working
I had defined basic auth for nginx like this:
auth_basic "Login to access";
auth_basic_user_file /etc/nginx/httppwd;
It used to work fine until today when it stopped working without any change being made. It simply does not allow https acess…
Milkyway
- 113
- 3
0
votes
1 answer
Website authentication method?
Once, many years ago, I secured my website. I'm struggling to remember exactly what I did. I believe I generated a certificate (or a token???) that I delivered to a select few people I wanted to grant access to. My site somehow checked to see if the…
Todd
- 103
- 2
-1
votes
1 answer
Intercept server port to request a password
There's a Java application running on my server that creates a page on a certain port on the server. Is there any way I can sit in the middle of that page being served by Java and the user to first request a password?
I realise I could do this…
Gausie
- 111
- 5
-1
votes
1 answer
How to make it so you only have to authenticate once for a group of subdomains using a Apache virtual host?
I have a Ubuntu 20.04 LTS Server with a set of virtual host configurations that protect a group of subdomains using basic auth, for example lets say secure.example.com is password protected as well as www.secure.example.com, sub.secure.example.com…
-2
votes
1 answer
How to Specify which URLs have HTTP Authentication with NGINX
In my nginx configuration file I have successfully created HTTP Authentication for the whole website while it's under development.
root /var/www/staging/;
auth_basic "Restricted website - authorised access only";
auth_basic_user_file…
Holly
- 1,027
- 5
- 14
- 25