我有一个nginx http服务器,它对用户进行身份验证,并通过wsgi将经过身份验证的请求传递给Flask应用程序。当我从烧瓶应用程序打印整个标题时,没有可用的用户信息。
是否可以让nginx在请求标头中包含用户名?
这是带有身份验证配置的服务器块...
server {
listen 80;
server_name notes.example.org;
return 301 https://$server_name$request_uri;
}
server {
# SSL configuration
listen 443;
listen [::]:443;
include snippets/ssl-example.org.conf;
include snippets/ssl-params.conf;
server_name notes.example.org;
location / {
auth_basic "Restricted Content";
auth_basic_user_file /path/to/passwd/file;
include uwsgi_params;
uwsgi_pass unix:/path/to/wsgi/socket;
}
}
在 wsgi 下运行的应用看到的请求标头...
Authorization: Basic **************==
Content-Length: 0
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36
Dnt: 1
Host: notes.example.org
Upgrade-Insecure-Requests: 1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.8
Content-Type:
Accept-Encoding: gzip, deflate, sdch, br
这里你使用的是http基本认证选项,在nginx服务器给出的成功反馈后,浏览器发送一个base64的username:password
。只需使用 Python base64 模块即可获取用户名和密码,
>>> from base64 import b64decode
>>> authorization_header = "dXNlcm5hbWU6cGFzc3dvcmQ=" # value from flask request header
>>> details = b64decode("dXNlcm5hbWU6cGFzc3dvcmQ=")
>>> username, password = details.split(':')
>>> username
'username'
>>> password
'password'
>>>