nginx-luaUsing authentication with Lua

server {
  location / {
    content_by_lua_block {
      local user = nil

      if ngx.var.http_authorization then
        local auth = ngx.decode_base64(string.sub(ngx.var.http_authorization, 7))
        
        _, _, login, pwd = string.find(auth, "(%w+):(%w+)")
        if (login == 'u') and (pwd == 'pwd') then
          user = login
          ngx.say('success loging in')
        end
      end
        
      if user == nil then
        ngx.header["WWW-Authenticate"] = 'Basic realm="Restricted"'
        ngx.exit(ngx.HTTP_UNAUTHORIZED)
      end
    }
  }
}ctrl + cgithub

`content_by_lua_block` nginx-lua module directive to specify block of Lua code	`ngx.var.http_authorization` this head is set when user enters login/password in browser
`ngx.decode_base64` decode given value from base64	`login, pwd = string.find(auth, "(%w+):(%w+)")` extract login and password from auth header
`(login == 'u') and (pwd == 'pwd')` check login (should be `u`) and password (should be `pwd`)	`user = login` set `user` variable if authed successfully
`if user == nil then` if not authed or wrong credentials	`WWW-Authenticate` send HTTP basic auth header to request login & password from user

Usage example

local user = nil

if ngx.var.http_authorization then
  local auth = ngx.decode_base64(string.sub(ngx.var.http_authorization, 7))

  _, _, login, pwd = string.find(auth, "(%w+):(%w+)")
  if (login == 'u') and (pwd == 'pwd') then
    user = login
    ngx.say('success loging in')
  end
end

if user == nil then
  ngx.header["WWW-Authenticate"] = 'Basic realm="Restricted"'
  ngx.exit(ngx.HTTP_UNAUTHORIZED)
end

output

false

More of Nginx Lua

See more codes...