Whitelisting UI resources (Help needed)

AnthonyDeroche / mod_authnz_jwt

An authentication module for Apache httpd using JSON Web Tokens

Other

79 stars 47 forks source link

Whitelisting UI resources (Help needed) #29

Closed msarun18 closed 5 years ago

msarun18 commented 6 years ago

We are hosting a web application on Apache 2, which contains both secured resources and login handler under the same document root. The JWT token is generated by the login handler and will be passed to all subsequent UI request. Is there any configuration to whitelist few resources to by pass validation of JWT token as Login handler related UI resources won't be getting JWT token.

AnthonyDeroche commented 5 years ago

Yes it is possible. Have a look on RequireAll and RequireAny directives. You can either require the user to be valid (default), or require the URL to be one of a whiltelist.