Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have configure Nginx with the upload_module.

I can upload & resume files but anybody can post to the /upload location.

is there a way of making the location /upload internal and use X-Accel-Redirect so that only authenticated users could post files?

Or any idea of how to secure the server so that only certain users could post files, having the authentication logic on the application side?.

share|improve this question
    
Does nginx knows when a user is authenticated? How do you auth users? – adrian7 Aug 13 '15 at 7:37

You could use nginx's auth_basic, auth_request, or any other authentication method to wrap the /upload location.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.