내 auth_request가 완전히 무시되는 이유는 무엇입니까?
nginx.conf
server {
listen 80;
error_page 403 = @error;
location = /auth {
return 403;
}
location /api {
auth_request /auth;
return 201;
}
location /test {
return 200;
}
location @error {
return 500;
}
}
다른 버전인 1.8, 1.15.12, 1.16.0을 시도했지만 운이 없었습니다. 이것은 단지 디버깅과 http_auth_request일 뿐입니다.
nginx -V
nginx version: nginx/1.16.0
built by gcc 4.4.7 20120313 (Red Hat 4.4.7-23) (GCC)
built with OpenSSL 1.0.1e-fips 11 Feb 2013
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-pcre=../pcre-8.42 --with-zlib=../zlib-1.2.11 --with-http_ssl_module --with-debug --with-http_auth_request_module
디버그 파일:
2019/05/01 20:50:14 [debug] 16471#0: *1 http request line: "GET /api HTTP/1.1"
2019/05/01 20:50:14 [debug] 16471#0: *1 http uri: "/api"
2019/05/01 20:50:14 [debug] 16471#0: *1 http args: ""
2019/05/01 20:50:14 [debug] 16471#0: *1 http exten: ""
2019/05/01 20:50:14 [debug] 16471#0: *1 posix_memalign: 0000000001157370:4096 @16
2019/05/01 20:50:14 [debug] 16471#0: *1 http process request header line
2019/05/01 20:50:14 [debug] 16471#0: *1 http header: "User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.27.1 zlib/1.2.3 libidn/1.18 libssh2/1.4.2"
2019/05/01 20:50:14 [debug] 16471#0: *1 http header: "Host: 127.0.0.1"
2019/05/01 20:50:14 [debug] 16471#0: *1 http header: "Accept: */*"
2019/05/01 20:50:14 [debug] 16471#0: *1 http header done
2019/05/01 20:50:14 [debug] 16471#0: *1 event timer del: 3: 45085285
2019/05/01 20:50:14 [debug] 16471#0: *1 generic phase: 0
2019/05/01 20:50:14 [debug] 16471#0: *1 rewrite phase: 1
2019/05/01 20:50:14 [debug] 16471#0: *1 test location: "/auth"
2019/05/01 20:50:14 [debug] 16471#0: *1 test location: "/api"
2019/05/01 20:50:14 [debug] 16471#0: *1 using configuration "/api"
2019/05/01 20:50:14 [debug] 16471#0: *1 http cl:-1 max:1048576
2019/05/01 20:50:14 [debug] 16471#0: *1 rewrite phase: 3
2019/05/01 20:50:14 [debug] 16471#0: *1 http set discard body
2019/05/01 20:50:14 [debug] 16471#0: *1 HTTP/1.1 201 Created
Server: nginx/1.15.12
Date: Thu, 02 May 2019 00:50:14 GMT
Content-Type: application/octet-stream
Content-Length: 0
Connection: keep-alive
컬 -vhttp://127.0.0.1:80/인증 이것은 403->500으로 올바르게 실패합니다.
2019/05/01 20:53:43 [debug] 16471#0: *3 http request line: "GET /auth HTTP/1.1"
2019/05/01 20:53:43 [debug] 16471#0: *3 http uri: "/auth"
2019/05/01 20:53:43 [debug] 16471#0: *3 http args: ""
2019/05/01 20:53:43 [debug] 16471#0: *3 http exten: ""
2019/05/01 20:53:43 [debug] 16471#0: *3 posix_memalign: 0000000001157370:4096 @16
2019/05/01 20:53:43 [debug] 16471#0: *3 http process request header line
2019/05/01 20:53:43 [debug] 16471#0: *3 http header: "User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.27.1 zlib/1.2.3 libidn/1.18 libssh2/1.4.2"
2019/05/01 20:53:43 [debug] 16471#0: *3 http header: "Host: 127.0.0.1"
2019/05/01 20:53:43 [debug] 16471#0: *3 http header: "Accept: */*"
2019/05/01 20:53:43 [debug] 16471#0: *3 http header done
2019/05/01 20:53:43 [debug] 16471#0: *3 event timer del: 3: 45294398
2019/05/01 20:53:43 [debug] 16471#0: *3 generic phase: 0
2019/05/01 20:53:43 [debug] 16471#0: *3 rewrite phase: 1
2019/05/01 20:53:43 [debug] 16471#0: *3 test location: "/auth"
2019/05/01 20:53:43 [debug] 16471#0: *3 using configuration "=/auth"
2019/05/01 20:53:43 [debug] 16471#0: *3 http cl:-1 max:1048576
2019/05/01 20:53:43 [debug] 16471#0: *3 rewrite phase: 3
2019/05/01 20:53:43 [debug] 16471#0: *3 http finalize request: 403, "/auth?" a:1, c:1
2019/05/01 20:53:43 [debug] 16471#0: *3 http special response: 403, "/auth?"
2019/05/01 20:53:43 [debug] 16471#0: *3 test location: "@error"
2019/05/01 20:53:43 [debug] 16471#0: *3 using location: @error "/auth?"
2019/05/01 20:53:43 [debug] 16471#0: *3 rewrite phase: 3
2019/05/01 20:53:43 [debug] 16471#0: *3 http finalize request: 500, "/auth?" a:1, c:2
2019/05/01 20:53:43 [debug] 16471#0: *3 http special response: 500, "/auth?"
2019/05/01 20:53:43 [debug] 16471#0: *3 http set discard body
2019/05/01 20:53:43 [debug] 16471#0: *3 HTTP/1.1 500 Internal Server Error
Server: nginx/1.15.12
Date: Thu, 02 May 2019 00:53:43 GMT
Content-Type: text/html
Content-Length: 178
Connection: close
컬 -vhttp://127.0.0.1:80/테스트 예상대로 작동합니다.
2019/05/01 20:44:52 [debug] 15699#0: *7 http request line: "GET /test HTTP/1.1"
2019/05/01 20:44:52 [debug] 15699#0: *7 http uri: "/test"
2019/05/01 20:44:52 [debug] 15699#0: *7 http args: ""
2019/05/01 20:44:52 [debug] 15699#0: *7 http exten: ""
2019/05/01 20:44:52 [debug] 15699#0: *7 posix_memalign: 0000000002179370:4096 @16
2019/05/01 20:44:52 [debug] 15699#0: *7 http process request header line
2019/05/01 20:44:52 [debug] 15699#0: *7 http header: "User-Agent: curl/7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.27.1 zlib/1.2.3 libidn/1.18 libssh2/1.4.2"
2019/05/01 20:44:52 [debug] 15699#0: *7 http header: "Host: 127.0.0.1"
2019/05/01 20:44:52 [debug] 15699#0: *7 http header: "Accept: */*"
2019/05/01 20:44:52 [debug] 15699#0: *7 http header done
2019/05/01 20:44:52 [debug] 15699#0: *7 event timer del: 3: 44763130
2019/05/01 20:44:52 [debug] 15699#0: *7 generic phase: 0
2019/05/01 20:44:52 [debug] 15699#0: *7 rewrite phase: 1
2019/05/01 20:44:52 [debug] 15699#0: *7 test location: "/auth"
2019/05/01 20:44:52 [debug] 15699#0: *7 test location: "/test"
2019/05/01 20:44:52 [debug] 15699#0: *7 using configuration "/test"
2019/05/01 20:44:52 [debug] 15699#0: *7 http cl:-1 max:1048576
2019/05/01 20:44:52 [debug] 15699#0: *7 rewrite phase: 3
2019/05/01 20:44:52 [debug] 15699#0: *7 http set discard body
2019/05/01 20:44:52 [debug] 15699#0: *7 HTTP/1.1 200 OK
Server: nginx/1.15.12
Date: Thu, 02 May 2019 00:44:52 GMT
Content-Type: application/octet-stream
Content-Length: 0
Connection: keep-alive
중요한지는 확실하지 않지만 커널 2.6.32-754.10.1.el6.x86_64가 있는 rhl 6.1에서 실행 중입니다.