Basic HTTP Authentication with Nginx - Revision history

Brian: /* Creating the Password File */

2014-05-31T14:07:01Z

‎Creating the Password File

Brian: /* Creating the Password File */

2014-05-31T14:06:26Z

‎Creating the Password File

Brian: /* Configuring Nginx with .htpasswd */

2014-05-31T14:05:28Z

‎Configuring Nginx with .htpasswd

Brian: Created page with "==Basic HTTP Authentication with Nginx== This guide will show you how to implement basic HTTP authentication with Nginx to password-protect directories on your server or even..."

2014-05-31T13:48:12Z

Created page with "==Basic HTTP Authentication with Nginx== This guide will show you how to implement basic HTTP authentication with Nginx to password-protect directories on your server or even..."

New page

==Basic HTTP Authentication with Nginx==

This guide will show you how to implement basic HTTP authentication with Nginx to password-protect directories on your server or even a whole website. This is the Nginx equivalent to basic HTTP authentication on Apache with .htaccess/.htpasswd.

===Creating the Password File===

You will still need the Apaches htpasswd tool.

====Create Password file with htpasswd====

Lets first check and see if its installed on your server, most servers have this function as the default web service was probably apache.

which htpasswd

If you have it on your system you will see something like

$ which htpasswd
/usr/bin/htpasswd

If your system does not have the htpasswd tool, you will want to install it

yum install httpd-tools

or if your on debian/ubuntu

apt-get install apache2-utils

====Create the .htpasswd file====

I want to create the password file /var/www/pwd/.htpasswd now and store the user demo in it (you can give the password file any name you like - it's not necessary to name it .htpasswd; I just named it .htpasswd because that's the way password files are named under Apache):

htpasswd -c /var/www/pwd/.htpasswd demo

**Note the -c says to create the file, so when adding additional user names, do not use the -c

Adding the user demo2 to the same .htpasswd file

htpasswd /var/www/pwd/.htpasswd demo2

Now your /var/www/pwd/.htpasswd file will have two users, demo and demo2

===Configuring Nginx with .htpasswd===

Now that we have our password file in place, we just need to add it to our Nginx vhost configuration

vim /etc/nginx/sites-enabled/vhost_briansnelson.com

Because I want to password-protect the scripts directory in the document root, I use location /scripts {} here (to password-protect the whole website, you'd use location / {}):

server {
listen 80;
server_name www.briansnelson.com briansnelsons.com;
root /var/www/briansnelson.com;
[...]
location /scripts {
auth_basic "Restricted";
auth_basic_user_file /var/www/pwd/.htpasswd;
}
[...]
}

One last step, restarting Nginx

/etc/init.d/nginx reload

Now you can visit http://briansnelson.com/scripts/ and notice that it is password protected.

@@ Line 5: / Line 5: @@
 ===Creating the Password File===
-You will still need the Apaches htpasswd tool or visit a website that can create the password file for you like http://www.htaccesstools.com/htpasswd-generator/
+You will still need the Apaches htpasswd tool or visit a website that can create the password file for you like http://www.htaccesstools.com/htpasswd-generator/ ( but can you really trust an outside source with your username/password)?
 ====Create Password file with htpasswd====

@@ Line 50: / Line 50: @@
   server {
          listen 80;
-         server_name www.briansnelson.com briansnelsons.com;
+         server_name www.briansnelson.com briansnelson.com;
          root /var/www/briansnelson.com;
   [...]