Does Apache allow to authorize an HTTP request based on a result of a subrequest?
- by Jan Wrobel
I'm looking for an equivalent of nginx http auth request module but for Apache.
For each incoming HTTP requests, the module sends a subrequests to authentication/authorization back-end. Th auth request carries a path and all headers of the original request. Based on the result of the auth request, the original requests is allowed (HTTP code 200), denied (HTTP code 403) or login is requested (HTTP code 401). Such a generic mechanism allows to build really flexible authentication and authorization schemes.
Is something like this possible in Apache (likely with a help of some third party module)?