Switch to http_auth_request_module for QA Wayback

[anjackson]

There are problems with the QA Wayback proxy in W3ACT - it struggles already, but will definately struggle with POST requests that PyWB can now support. We can check user cookies at the NGINX level via a cached sub-request.

See:

• https://developer.okta.com/blog/2018/08/28/nginx-auth-request
• https://serverfault.com/questions/897625/caching-nginx-auth-request

[anjackson]

This works on DEV, though note that this needs a new release of W3ACT as a specific authorisation API needed to be added to it so this could work.

[anjackson]

Note that W3ACT also has a basic proxy for talking to the pdf2html service:

https://github.com/ukwa/w3act/blob/2297b8b152fa5f703cdd9ced6bb2ed212011f5f7/app/controllers/WSProxy.java#L32

This could be done via NGINX instead. Similarly, having got this working, other services can easily be added in and secured in the same way.

[anjackson]

Recent release of W3ACT stack includes this method authentication.