Authentication and session management using nginx-lua

jalalm · 2013-01-13T15:09:54+00:00

Thanks a lotOn Fri, Jan 11, 2013 at 1:58 AM, agentzh <age...@gmail.com> wrote: Hello! On Wed, Jan 9, 2013 at 8:10 AM, tolisoft wrote: > W...

Authentication and session management using nginx-lua

jalalm

Hi,

I am using nginx as reverse proxy for elasticsearch, is it possible to use the nginx-lua module for authentication and session management to elasticsearch.

I have tried using http basic authentication and it works, but what i want to implement is authentication with secure cookies or secure sessions.

Thanks

agentzh

Hello!

On Sat, Jan 12, 2013 at 11:09 PM,  jalalm wrote:
> I am using nginx as reverse proxy for elasticsearch, is it possible to use
> the nginx-lua module for authentication and session management to
> elasticsearch.
> I have tried using http basic authentication and it works, but what i want
> to implement is authentication with secure cookies or secure sessions.
>

You can use the ngx_encrypted_session module for this:

    http://github.com/agentzh/encrypted-session-nginx-module

Its config directives are also callable in Lua via the
ndk.set_var.DIRECTIVE API provided by ngx_lua:

    http://wiki.nginx.org/HttpLuaModule#ndk.set_var.DIRECTIVE

Best regards,
-agentzh

jalalm

Thanks for the quick reply :) ...I wil try and implement it..

Thanks and regards

Jalal

On Sunday, January 13, 2013 1:12:11 PM UTC+5:30, agentzh wrote:

Hello!

On Sat, Jan 12, 2013 at 11:09 PM, jalalm wrote:
> I am using nginx as reverse proxy for elasticsearch, is it possible to use
> the nginx-lua module for authentication and session management to
> elasticsearch.
> I have tried using http basic authentication and it works, but what i want
> to implement is authentication with secure cookies or secure sessions.
>

You can use the ngx_encrypted_session module for this:

http://github.com/agentzh/encrypted-session-nginx-module

Its config directives are also callable in Lua via the
ndk.set_var.DIRECTIVE API provided by ngx_lua:

http://wiki.nginx.org/HttpLuaModule#ndk.set_var.DIRECTIVE

Best regards,
-agentzh

m

Hi Jalal,

How did the reverse proxy for ElasticSearch in Lua work out for you?

Gawin

On Sunday, January 13, 2013 8:42:11 AM UTC+1, agentzh wrote:

Hello!

On Sat, Jan 12, 2013 at 11:09 PM, jalalm wrote:
> I am using nginx as reverse proxy for elasticsearch, is it possible to use
> the nginx-lua module for authentication and session management to
> elasticsearch.
> I have tried using http basic authentication and it works, but what i want
> to implement is authentication with secure cookies or secure sessions.
>

You can use the ngx_encrypted_session module for this:

http://github.com/agentzh/encrypted-session-nginx-module

Its config directives are also callable in Lua via the
ndk.set_var.DIRECTIVE API provided by ngx_lua:

http://wiki.nginx.org/HttpLuaModule#ndk.set_var.DIRECTIVE

Best regards,
-agentzh