36

I'm developing an application with facebook login. So far it's not public and is protected by http basic auth in nginx. Is it possible to disable http auth for facebook's ip range so that we can have our tester test the facebook capabilities as well? Please, include an example configuration snippet, if possible.

Improve this question

1 Answer 1

Reset to default
72

Use satisfy directive to allow access. 32934 is facebook autonomous system, look facebook ip.

satisfy  any;
allow 66.220.144.0/20;
allow 66.220.152.0/21;
allow ...
deny   all;

auth_basic            "closed site";
auth_basic_user_file  conf/htpasswd;
Improve this answer
2
  • 1
    There's an up to date list of IP ranges here: developers.facebook.com/docs/ApplicationSecurity/…
    – Kit Sunde
    Commented Jan 12, 2014 at 22:32
  • 3
    You may also need to set the real ip if you are behind a proxy, at the server direct i.e. set_real_ip_from 0.0.0.0/0; real_ip_header X-Forwarded-For;
    – radtek
    Commented May 9, 2019 at 15:13

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .