如何配置 nginx 以将用户信息传递给 wsgi/flask

Question

我有一个 nginx http 服务器，它对用户进行身份验证并将经过身份验证的请求通过 wsgi 传递给 Flask 应用程序。当我从烧瓶应用程序打印整个 header 时，没有可用的用户信息。

是否可以让 nginx 在请求中包含用户名header？

这是带有身份验证配置的服务器块...

server {
    listen 80;
    server_name  notes.example.org;
    return 301 https://$server_name$request_uri;   
}

server {


    # SSL configuration

    listen 443;
    listen [::]:443; 
    include snippets/ssl-example.org.conf;
    include snippets/ssl-params.conf;
    server_name  notes.example.org;

    location / {
        auth_basic "Restricted Content";
        auth_basic_user_file /path/to/passwd/file;
        include uwsgi_params;
        uwsgi_pass unix:/path/to/wsgi/socket;
    }


}

请求 header 应用运行在 wsgi 下看到...

Authorization: Basic **************==
Content-Length: 0
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36
Dnt: 1
Host: notes.example.org
Upgrade-Insecure-Requests: 1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.8
Content-Type: 
Accept-Encoding: gzip, deflate, sdch, br

Answer 1

这里使用的是http basic authentication选项，在nginx服务器反馈成功后，浏览器发送username:password的base64。只需使用 python base64 模块获取用户名和密码，

>>> from base64 import b64decode
>>> authorization_header = "dXNlcm5hbWU6cGFzc3dvcmQ=" # value from flask request header
>>> details = b64decode("dXNlcm5hbWU6cGFzc3dvcmQ=")
>>> username, password = details.split(':')
>>> username
'username'
>>> password
'password'
>>>

如何配置 nginx 以将用户信息传递给 wsgi/flask

How to configure nginx to pass user info to wsgi/flask

wsgi

nginx