Search code examples
regexapachehttp-authentication

How to protect some URLs with HTTP authentication using a regex?

I have a public website with an admin area. So I want to protect this admin area using HTTP authentication.

The admin area has this URL: http://mypublicwebsite.com/myadminarea/

myadminareais not a physical directory on my server, there's a routing system based on the requested URL.

Is there an easy way to define that every URL that matches http://mypublicwebsite.com/myadminarea/* must use http authentication?

I've found this answer, but it seems too complicated to me.

Thanks.

Solution

  • I've just found a solution using the LocationMatch apache directive, to be added in my virtualhost definition:

    <VirtualHost *:8080>
    ...

    <LocationMatch "/myadminarea/.*">
        AuthType basic
        AuthName "Login Required"
        AuthUserFile /full/path/to/passwords
        Require valid-user
        Order allow,deny
        Allow from all
    </LocationMatch>
</VirtualHost>