CODEWITHSUNDEEP
regexauthentication.htaccess
Brandon Hansen
Brandon Hansen

Reputation: 826

HTTP Basic Auth Exclude Single File

Part of my .htaccess file looks like this-

AuthUserFile /path/to/.htpasswd
AuthName "Authorization Required"
AuthType Basic
require valid-user

Doing that requires the Basic HTTP authentication for the entire directory and the directories below it as well. However, I have a single file within that root directory, thubservice.php, that should not require the HTTP authentication.

From what I have seen, I need to use <FilesMatch />, but I cannot figure out the pattern to match all but that given file.

Upvotes: 28

Views: 17239

Answers (2)

wrwrwr
wrwrwr

Reputation: 1066

With Apache 2.4 you may want to use Require instead:

<Files "thubservice.php">
    Require all granted
</Files>

In 2.2, access control based on client hostname, IP address, and other characteristics of client requests was done using the directives Order, Allow, Deny, and Satisfy.

In 2.4, such access control is done in the same way as other authorization checks, using the new module mod_authz_host. The old access control idioms should be replaced by the new authentication mechanisms, although for compatibility with old configurations, the new module mod_access_compat is provided.

Upvotes: 2

talyric
talyric

Reputation: 993

AuthUserFile /path/to/.htpasswd
AuthName "Authorization Required"
AuthType Basic
require valid-user
<Files "thubservice.php">
    Satisfy Any
    Allow from all
</Files>

Upvotes: 48

Related Questions