Last active
July 9, 2021 00:59
-
-
Save fmtarif/bf9503530a8d425ab8a2 to your computer and use it in GitHub Desktop.
#htaccess HTTP Basic authentication excluding specific url
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Basic authentication for site excluding specific url patterns | |
| # Do the regex check against the URI here, if match, set the "allow" var | |
| SetEnvIf Request_URI ^/api allow | |
| SetEnvIf Request_URI ^/uploads allow | |
| AuthType Basic | |
| AuthName "restricted area" | |
| AuthUserFile /home/.htpasswd #chage to your .htpasswd file ABSOLUTE path | |
| # Setup a deny/allow | |
| Order Deny,Allow | |
| # Deny from everyone | |
| Deny from all | |
| # except if either of these are satisfied | |
| Satisfy any | |
| # 1. a valid authenticated user | |
| Require valid-user | |
| # or 2. the "allow" var is set | |
| Allow from env=allow |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment