Skip to content

Commit

Permalink
Also add example for excluding a specific path from Mellon auth.
Browse files Browse the repository at this point in the history
Closes: #142
  • Loading branch information
thijskh committed Jun 4, 2024
1 parent b0afed1 commit 0777e26
Showing 1 changed file with 22 additions and 2 deletions.
24 changes: 22 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -872,11 +872,11 @@ requests that trigger authentication should now be stored while the
user logs in.


## Example to support both SAML and Basic Auth
## Example to support both SAML and different auth methods

The below snippet will allow for preemptive basic auth (such as from a REST client)
for the "/auth" path, but if accessed interactively will trigger SAML auth with
mod_auth_mellon.
mod_auth_mellon.

```ApacheConf
<Location />
Expand All @@ -903,6 +903,26 @@ mod_auth_mellon.
</Location>
```

In a similar vain you can exclude a subpath from Mellon authentication by adding
a Location block that exempts the path after:

```ApacheConf
<VirtualHost *:443>
<Location />
AuthType "Mellon"
Require valid-user
MellonEnable "auth"
...
Require all granted
</Location>
<Location /noSSO>
MellonEnable "off"
Require all granted
</Location>
</VirtualHost>
```

## Mellon & User Agent Caching behavior

Expand Down

0 comments on commit 0777e26

Please sign in to comment.