Can Apache be integrated with 3rd party cookie session authentication/authorization?

I’d like to configure Apache to serve files directly from the file system but authenticate/authorize users. How can Apache be configured so it calls my auth middleware?

Basically:

1) Redirect to login if user is not authenticated. Check session cookie against database otherwise.

2) Allow access to certain files based on who the user is (authorization).

Answer

Try a Google search for “apache single signon” or “apache sso”. In particular, look at:

All of these implement almost exactly the mechanism you’ve described.

Attribution
Source : Link , Question Author : pq01 , Answer Author : larsks

Leave a Comment