http basic authentication with different rights

Question

http basic authentication with different rights

I am in middle of a development, and havent so far created user authentication in my node.js application,however I have an admin back-end where I do not want the users provided with the username and password.

I am looking for a way to implement basic http authentication but depending on the credentials provided, they can or can not go to different areas of site, in short: I want different credentials for admin page.

Any help will be appreciated.

Thanks and regards, Babar

node.js
nginx
basic-authentication

Answer 1

As I understand it you want two different types of testers. One to test frontend, but not affect backend and one that also affects backend.

I would actually run two instances of Node and point the testers to two different urls.

And in your routes you check the environment, giving fake responses to "testers1" and actual backend respones to "testers2".

Like:

NODE_ENV=simulated node server

function (req, res) {
   if (process.env.NODE_ENV === 'simulated') {
     // Give fake response
   } else {
     // Get from backend
   }
}

Answer 2

Use multiple location blocks and separate access files or something like this:

location /test/ {
    auth_basic            "Test";
    auth_basic_user_file  /access.txt;
    root '/webroot/$remote_user';
}