On Oct 15, 9:41 pm, ReneMarxis <rene.mar...@yahoo.de> wrote:
> Hello
>
> i'm faceing the following problem: i have some application for
> creating image galleries (upload/change...).
> Till now the images are served by an nginx webserver (and are
> therefore open to everyone). The django app is running in apache with
> wsgi.
>
> My problem is i need to restrict the image delivery only to persons
> that are authorized to watch the images. Best would be to include
> djangos authentication with nginx.
>
> Is there any way to accomplish this or any other hints?
If you are using nginx as a front end proxy to Django application
running in Apache/mod_wsgi, then have Django return X-Accel-Redirect
header with location of static file as hosted by nginx. Then setup
nginx with private URL namespace mapping to files. The X-Accel-
Redirect will be allowed to access those private files but not direct
requests to nginx.
In other words, Django authenticates user and if allowed to access
file, sends back that header to have nginx serve it up.
Because Django is serving up the files direct, this will actually be
quite efficient.
Graham
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to
django-users+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---
