HTTP Auth Omit List

Question

Is there a way to use HTTP auth by using "/" and blocking everything, and only omitting few files.

I have a analytics scrips that i want the whole site to be blocked except the few .js files that external websites use.

I read the documentation and it does not hint towards such a scenario.

Answer 1

Yes, it's possible!

Block the whole site, and then add custom location blocks using the custom Nginx files to allow especific files or folders.

Comments

# Location block for specific files
location = /path/to/your/analytics/script.js {
    # Turn off HTTP auth for this file
    auth_basic off;
    # Serve the file
    try_files $uri $uri/ =404;
}

using a custom config file would work i assume for such scenario. Thank you for the answer.