Caddy Authorize: Authorizing HTTP Requests
2022
49 min
Paul Greenberg
en
YouTube
Caddy Security Plugins Mini-Learning Series Project: https://github.com/greenpau/caddy-security
Chapters
- 0:00 Intro
- 0:15 Why Authorize?
- 1:08 Agenda
- 9:42 Passing an Authorization Token in HTTP Request
- 12:50 Authorization Token Structure
- 16:35 Token Payload
- 17:45 Key with default ID. Signed with Shared Secret
- 20:33 Key with ID Custom Token Name, Signed with Shared Secret
- 22:41 Things to know about file-based keys (RSA/ECDSA)
- 23:46 Signed with RSA/ECDSA in a directory
- 25:46 ACL Syntax
- 26:09 ACL Fields
- 28:26 Time-Based Match Conditions
- 30:30 Actions
- 33:05 ACL Shortcuts
- 33:42 Path-Based ACL
- 34:25 Location Header Redirect
- 37:34 Javascript Redirect
- 38:39 Disable Redirect
- 39:18 IP Address Filtering
- 40:59 HTTP Header Injection
- 42:10 Strip JWT Token from HTTP Request
- 42:25 Caddy Identity Context
- 43:36 API Key and Basic Authentication
- 45:33 Authentication Portal
- 46:33 Authorization Policy
- 47:42 Application Config
- Channel
- Paul Greenberg
- Views
- 225
