ATS标准插件( 1 )　AuthProxy

清疚 2022-05-21 04:17 157阅读 0赞

原文链接：[https://www.9mblog.com/121.html][https_www.9mblog.com_121.html]

这个插件可以将请求授权交给其他http服务。

说实话，我对于http授权这事还不是很明白，仅仅了解到没有授权会返回401。所以这个插件的用途也还没弄清楚。先放在这里，以后用到再做适当补充。

引用官方原文：

## **Plugin Options** ##

<table> 
 <tbody> 
 <tr> 
 <td colspan="2" style="background:rgb(243,246,246);">--auth-transform=TYPE</td> 
 </tr> 
 <tr> 
 <td>&nbsp;</td> 
 <td>This&nbsp;option&nbsp;specifies&nbsp;how&nbsp;to&nbsp;route&nbsp;the&nbsp;incoming&nbsp;request&nbsp;to&nbsp;the&nbsp;authorization&nbsp;service.&nbsp;The&nbsp;transform&nbsp;type&nbsp;may&nbsp;be&nbsp;head&nbsp;or&nbsp;redirect.这个选项可以设置两个值，head或redirect。If&nbsp;the&nbsp;transform&nbsp;type&nbsp;is&nbsp;head,&nbsp;then&nbsp;the&nbsp;incoming&nbsp;request&nbsp;is&nbsp;transformed&nbsp;to&nbsp;a&nbsp;HEAD&nbsp;request&nbsp;and&nbsp;is&nbsp;sent&nbsp;to&nbsp;the&nbsp;same&nbsp;destination.&nbsp;If&nbsp;the&nbsp;response&nbsp;is&nbsp;200&nbsp;OK,&nbsp;the&nbsp;incoming&nbsp;request&nbsp;is&nbsp;allowed&nbsp;to&nbsp;proceed.当使用head时，会把请求转成HEAD请求（只请求头信息），如果返回的是200&nbsp;OK，再进行后续请求。If&nbsp;the&nbsp;transform&nbsp;type&nbsp;is&nbsp;range,&nbsp;then&nbsp;the&nbsp;incoming&nbsp;request&nbsp;is&nbsp;transformed&nbsp;to&nbsp;a&nbsp;Range&nbsp;request&nbsp;asking&nbsp;for&nbsp;0&nbsp;bytes.&nbsp;Other&nbsp;than&nbsp;that,&nbsp;the&nbsp;behavior&nbsp;is&nbsp;identical&nbsp;to&nbsp;the&nbsp;head&nbsp;option&nbsp;above.&nbsp;This&nbsp;type&nbsp;of&nbsp;Range&nbsp;request&nbsp;is&nbsp;useful&nbsp;when&nbsp;the&nbsp;upstream&nbsp;destination&nbsp;is&nbsp;a&nbsp;cache,&nbsp;and&nbsp;it’s&nbsp;not&nbsp;able&nbsp;to&nbsp;cache&nbsp;HEAD&nbsp;requests.当使用range时，将请求转换成“0-”这样的范围值。除此之外，其他的和head的效果完全一样。Range在目的是缓存是非常有用，它可以不缓存HEAD请求。If&nbsp;the&nbsp;transform&nbsp;type&nbsp;is&nbsp;redirect&nbsp;then&nbsp;the&nbsp;incoming&nbsp;request&nbsp;is&nbsp;sent&nbsp;to&nbsp;the&nbsp;authorization&nbsp;service&nbsp;designated&nbsp;by&nbsp;the&nbsp;–auth-host&nbsp;and&nbsp;–auth-portparameters.&nbsp;If&nbsp;the&nbsp;response&nbsp;is&nbsp;200&nbsp;OK,&nbsp;the&nbsp;incoming&nbsp;request&nbsp;is&nbsp;allowed&nbsp;to&nbsp;proceed.当使用redirect时当，会将请求重定向到由&nbsp;–auth-host和–auth-portparameters指向的授权服务器。如果返回200&nbsp;OK，再进行后续请求。When&nbsp;the&nbsp;authorization&nbsp;service&nbsp;responds&nbsp;with&nbsp;a&nbsp;status&nbsp;other&nbsp;than&nbsp;200&nbsp;OK,&nbsp;that&nbsp;response&nbsp;is&nbsp;returned&nbsp;to&nbsp;the&nbsp;client&nbsp;as&nbsp;the&nbsp;response&nbsp;to&nbsp;the&nbsp;incoming&nbsp;request.&nbsp;This&nbsp;allows&nbsp;mechanisms&nbsp;such&nbsp;as&nbsp;HTTP&nbsp;basic&nbsp;authentication&nbsp;to&nbsp;work&nbsp;correctly.&nbsp;Note&nbsp;that&nbsp;the&nbsp;body&nbsp;of&nbsp;the&nbsp;authorization&nbsp;service&nbsp;response&nbsp;is&nbsp;not&nbsp;returned&nbsp;to&nbsp;the&nbsp;client.当返回结果不是200&nbsp;OK时，不影响正常HTTP认证机制。要注意，认证服务的应答包不会发送给客户端。</td> 
 </tr> 
 <tr> 
 <td colspan="2" style="background:rgb(243,246,246);">--auth-host=HOST</td> 
 </tr> 
 <tr> 
 <td>&nbsp;</td> 
 <td>The&nbsp;name&nbsp;or&nbsp;address&nbsp;of&nbsp;the&nbsp;authorization&nbsp;host.&nbsp;This&nbsp;is&nbsp;only&nbsp;used&nbsp;by&nbsp;the&nbsp;redirecttransform.使用redirect时指定的目的主机。</td> 
 </tr> 
 <tr> 
 <td colspan="2" style="background:rgb(243,246,246);">--auth-port=PORT</td> 
 </tr> 
 <tr> 
 <td>&nbsp;</td> 
 <td>The&nbsp;TCP&nbsp;port&nbsp;of&nbsp;the&nbsp;authorization&nbsp;host.&nbsp;This&nbsp;is&nbsp;only&nbsp;used&nbsp;by&nbsp;the&nbsp;redirecttransform.使用redirect时指定的目的端口</td> 
 </tr> 
 <tr> 
 <td colspan="2" style="background:rgb(243,246,246);">--force-cacheability</td> 
 </tr> 
 <tr> 
 <td>&nbsp;</td> 
 <td>If&nbsp;this&nbsp;options&nbsp;is&nbsp;set,&nbsp;the&nbsp;plugin&nbsp;will&nbsp;allow&nbsp;Traffic&nbsp;Server&nbsp;to&nbsp;cache&nbsp;the&nbsp;result&nbsp;of&nbsp;authorized&nbsp;requests.&nbsp;In&nbsp;the&nbsp;normal&nbsp;case,&nbsp;requests&nbsp;with&nbsp;authorization&nbsp;headers&nbsp;are&nbsp;nor&nbsp;cacheable,&nbsp;but&nbsp;this&nbsp;flag&nbsp;allows&nbsp;that&nbsp;by&nbsp;setting&nbsp;the&nbsp;<a title="records.config" rel="nofollow">proxy.config.http.cache.ignore_authentication</a>&nbsp;option&nbsp;on&nbsp;the&nbsp;request.这个选项可以让traffic&nbsp;server缓存授权请求。正常情况下正常不会缓存授权请求头，但是可以通过设置<a title="records.config" rel="nofollow">proxy.config.http.cache.ignore_authentication</a>设置为允许。</td> 
 </tr> 
 </tbody> 
</table>

## **Examples** ##

http请求转换成HEAD请求的例子:

map http:**//**cache**.**example**.**com http:**//**origin**.**internal**.**com**/** \\

@plugin**=**authproxy**.**so @pparam**=--**auth**-**transform**=**head

map http:**//**origin**.**internal**.**com http:**//**origin**.**internal**.**com**/**

使用redirect的例子:

map http:**//**cache**.**example**.**com http:**//**origin**.**internal**.**com**/** \\

@plugin**=**authproxy**.**so @pparam**=--**auth**-**transform**=**redirect @pparam**=--**auth**-**host**=**127.0**.**0.1 @pparam**=--**auth**-**port**=**9000

map http:**//**origin**.**internal**.**com**/** http:**//**origin**.**internal**.**com**/** \\

@plugin**=**authproxy**.**so @pparam**=--**auth**-**transform**=**redirect @pparam**=--**auth**-**host**=**127.0**.**0.1 @pparam**=--**auth**-**port**=**9000

[https_www.9mblog.com_121.html]: https://www.9mblog.com/121.html