comparison xml/en/docs/http/ngx_http_core_module.xml @ 2523:2bb06b3fbcc5

Documented the "auth_delay" directive.
author Yaroslav Zhuravlev <yar@nginx.com>
date Mon, 13 Apr 2020 16:55:23 +0100
parents 9cd5883ac546
children 4f3494d80949
comparison
equal deleted inserted replaced
2522:91d725e52633 2523:2bb06b3fbcc5
8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd"> 8 <!DOCTYPE module SYSTEM "../../../../dtd/module.dtd">
9 9
10 <module name="Module ngx_http_core_module" 10 <module name="Module ngx_http_core_module"
11 link="/en/docs/http/ngx_http_core_module.html" 11 link="/en/docs/http/ngx_http_core_module.html"
12 lang="en" 12 lang="en"
13 rev="89"> 13 rev="90">
14 14
15 <section id="directives" name="Directives"> 15 <section id="directives" name="Directives">
16 16
17 <directive name="absolute_redirect"> 17 <directive name="absolute_redirect">
18 <syntax><literal>on</literal> | <literal>off</literal></syntax> 18 <syntax><literal>on</literal> | <literal>off</literal></syntax>
242 <example> 242 <example>
243 location /images/ { 243 location /images/ {
244 root /data/w3; 244 root /data/w3;
245 } 245 }
246 </example> 246 </example>
247 </para>
248
249 </directive>
250
251
252 <directive name="auth_delay">
253 <syntax><value>time</value></syntax>
254 <default>0s</default>
255 <context>http</context>
256 <context>server</context>
257 <context>location</context>
258 <appeared-in>1.17.10</appeared-in>
259
260 <para>
261 Delays processing of unauthorized requests with 401 response code
262 to prevent timing attacks when access is limited by
263 <link doc="ngx_http_auth_basic_module.xml">password</link>, by the
264 <link doc="ngx_http_auth_request_module.xml">result of subrequest</link>,
265 or by <link doc="ngx_http_auth_jwt_module.xml">JWT</link>.
247 </para> 266 </para>
248 267
249 </directive> 268 </directive>
250 269
251 270