密码保护在 Nginx 和 Phusion Passenger 上运行的 Rails 站点

发布于 2024-10-02 09:44:49 字数 556 浏览 3 评论 0原文

我想使用基本的 http 身份验证来保护我新部署的 Rails 3 应用程序。它在最新的 Nginx/Passenger 上运行，我使用以下 Nginx 指令来保护 Web 根目录：

location = / {
  auth_basic "Restricted";
  auth_basic_user_file htpasswd;
}

htpasswd 文件是使用 Apache htpasswd 实用程序生成的。但是，输入正确的用户名和密码后，我会转到 403 Forbidden 错误页面。分析 Nginx 错误日志揭示了这一点：

directory index of "/var/www/mysite/public/" is forbidden, client: 108.14.212.10, server: mysite.com, request: "GET / HTTP/1.1", host: "mysite.com"

显然，我不想列出 mysite/public 目录的内容。如何正确配置，以便 Rails 应用程序在我输入登录信息后启动？

原文

I want to protect my newly deployed Rails 3 app with the basic http authentication. It's running on the latest Nginx/Passenger and I'm using the following Nginx directive to protect the web root directory:

location = / {
  auth_basic "Restricted";
  auth_basic_user_file htpasswd;
}

htpasswd file was generated using Apache htpasswd utililty. However, after entering correct username and password I'm getting transferred to the 403 Forbidden error page. Analyzing Nginx error log revealed this:

directory index of "/var/www/mysite/public/" is forbidden, client: 108.14.212.10, server: mysite.com, request: "GET / HTTP/1.1", host: "mysite.com"

Obviously, I don't want to list the contents of the mysite/public directory. How can I configure this properly so the Rails app starts after I enter my login info?

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

无远思近则忧 2024-10-09 09:44:49

您需要在位置块中重新指定passenger_enabled。

回复收藏 0 原文

你对谁都笑 2024-10-09 09:44:49

您可以让Rails处理身份验证，

# application_controller.rb
before_filter :authenticate

protected

def authenticate
  authenticate_or_request_with_http_basic do |username, password|
    username == "foo" && password == "bar"
  end
end

您还应该设置config.serve_static_assets = true 在您的 environment.rb（或 Rails 3 中的 applicaion.rb）中，以便 public 中的静态资源通过相同的过滤器。

You can let Rails handle the authentication

# application_controller.rb
before_filter :authenticate

protected

def authenticate
  authenticate_or_request_with_http_basic do |username, password|
    username == "foo" && password == "bar"
  end
end

also you should set config.serve_static_assets = true in your environment.rb (or applicaion.rb in Rails 3) so that the static assets in public go through the same filter.

回复收藏 0 原文