代理身份验证＃

(认证)提供者＝“代理”(服务器)地址＝“https://example.com/apps/英格兰vs伊朗让球rstudio-connect”(ProxyAuth)LoginURL＝“https://example.com/auth/login”LogoutURL＝“https://example.com/auth/logout”；此配置只需要代理发送；默认标题“X-Auth-Username”和有效的；用于身份验证的用户名。更多的头；可以通过代理发送，以补充用户配置文件。；根据需要取消以下注释:; UniqueIdHeader =“X-Auth-ID”; UsernameHeader =“X-Auth-Custom-Username”; FirstNameHeader =“X-Auth-First-Name”; LastNameHeader =“X-Auth-Last-Name”; EmailHeader =“X-Auth-Email”; RoleHeader =“X-Auth-RSC-Role”; GroupsHeader =“X-Auth-Groups”；如果使用组，启用此功能可获得更好的用户体验，；除非需要管理大量的组:; GroupsAutoProvision = true；当试图排除与代理身份验证相关的问题时，；您可以通过启用以下行来启用更详细的日志记录;日志= true

；/etc/英格兰vs伊朗让球rstudio-connect / rstudio-connect.gcfg(认证)提供者＝“代理”

；/etc/英格兰vs伊朗让球rstudio-connect / rstudio-connect.gcfg(服务器)地址＝“https://myproxy.company.com/”

；/etc/英格兰vs伊朗让球rstudio-connect / rstudio-connect.gcfg(ProxyAuth)UsernameHeader＝“X-Auth-Username”

；/etc/英格兰vs伊朗让球rstudio-connect / rstudio-connect.gcfg(ProxyAuth)UsernameHeader＝“X-Auth-Username”FirstNameHeader＝“X-Auth-First-Name”LastNameHeader＝“X-Auth-Last-Name”EmailHeader＝“X-Auth-Email”

；/etc/英格兰vs伊朗让球rstudio-connect / rstudio-connect.gcfg(ProxyAuth)LoginURL＝“https://proxy/login”

；/etc/英格兰vs伊朗让球rstudio-connect / rstudio-connect.gcfg(ProxyAuth)LogoutURL＝“https://proxy/logout”

；/etc/英格兰vs伊朗让球rstudio-connect / rstudio-connect.gcfg(ProxyAuth)RegisterOnFirstLogin＝假

；/etc/英格兰vs伊朗让球rstudio-connect / rstudio-connect.gcfg(授权)UserRoleGroupMapping＝真正的PublisherRoleMapping＝“开发人员”AdministratorRoleMapping＝“Dev-Leaders”AdministratorRoleMapping＝“it管理员”

；/etc/英格兰vs伊朗让球rstudio-connect / rstudio-connect.gcfg(授权)UserRoleMapping＝真正的ViewerRoleMapping＝“人力资源”ViewerRoleMapping＝“市场营销”PublisherRoleMapping＝“工程”AdministratorRoleMapping＝“它”

；/etc/英格兰vs伊朗让球rstudio-connect / rstudio-connect.gcfg(ProxyAuth)GroupsHeader＝“X-Auth-Groups”

X-Auth-Groups: Engineering X-Auth-Groups: manager…

；/etc/英格兰vs伊朗让球rstudio-connect / rstudio-connect.gcfg(ProxyAuth)GroupsHeader＝“X-Auth-Groups”GroupsHeaderSeparator＝“|”

X-Auth-Groups:工程经理| |…

；/etc/英格兰vs伊朗让球rstudio-connect / rstudio-connect.gcfg(ProxyAuth)日志记录＝真正的

映射$http_upgrade $connection_upgrade{默认升级;”“关闭;}映射$http_cookie $auth_username{默认";“~ * verified-user =(? <用户名>[^;]+)”“美元的用户名”;} map "$http_x_auth_token" $has_token {default ";”~。”+“令牌”;} map "$http_authorization" $has_key {default ";“~关键。+”“关键”; } map "$auth_username:$has_token:$has_key" $requires_auth { default 0; "::" 1; } server { listen 80 default_server; location /rsconnect/ { # redirect directly to authentication if the username is not present # needed if there is no login endpoint in the proxy if ($requires_auth = 1) { return 307 $scheme://$host:$server_port/auth/login?url=$request_uri; } rewrite ^/rsconnect/(.*)$ /$1 break; proxy_pass http://rstudio-connect-host:3939; proxy_redirect / /rsconnect/; proxy_pass_request_headers on; proxy_connect_timeout 5; proxy_http_version 1.1; proxy_buffering off; # Required for XHR-streaming proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_set_header X-RSC-Request $scheme://$host:$server_port$request_uri; proxy_set_header X-Auth-Username $auth_username; } }

RewriteEngine on  SetEnvIf Cookie " authenticated -user=([^;]+)"AuthUsername=$1 #如果用户名不存在#需要如果代理中没有登录端点< if "%{REQUEST_URI} !~ m#^/auth# && -z env('AuthUsername') && -z %{HTTP:X-Auth-Token} && %{HTTP:Authorization} !~ /Key .+/"> redirect 307 "%{REQUEST_SCHEME}://%{HTTP_HOST}/auth/login?url=%{REQUEST_URI}"  #存储带有虚拟重写规则RewriteRule的变量值。- [E=req_scheme:%{REQUEST_SCHEME}]重写规则。- [E=http_host:%{http_host}]重写规则。- [E=req_uri:%{REQUEST_URI}] # set header with variables RequestHeader set X-RSC-Request "%{req_scheme} E://%{http_host} E %{req_uri} E " RewriteCond %{HTTP:Upgrade} websocket [NC] RewriteCond %{HTTP:Connection} Upgrade [NC] RewriteRule ^/(.*)“ws: /英格兰vs伊朗让球 / rstudio-connect-host: 3939 / $ 1”(P、L) <如果”- n env (AuthUsername)”> RequestHeader set X-Auth-Username "%{AuthUsername}e"   RequestHeader unset X-Auth-Username   ProxyPass http://英格兰vs伊朗让球rstudio-connect-host:3939/ connectiontimeout=5  

映射$http_upgrade $connection_upgrade{默认升级;”“关闭;}映射$http_cookie $auth_username{默认";“~ * verified-user =(? <用户名>[^;]+)”“美元的用户名”;}映射$http_cookie $auth_firstname{默认"";”~ * proxyauth-as-first =(? <第一次>[^;]+)”“美元第一”;}映射$http_cookie $auth_lastname{默认"";“~ * proxyauth-as-last =(? <上>[^;]+)” "$last"; } map $http_cookie $auth_email { default ""; "~*proxyauth-as-email=(?[^;]+)" "$email"; } map "$http_x_auth_token" $has_token { default ""; "~.+" "token"; } map "$http_authorization" $has_key { default ""; "~Key .+" "key"; } map "$auth_username:$has_token:$has_key" $requires_auth { default 0; "::" 1; } server { listen 80 default_server; location /rsconnect/ { # redirect directly to authentication if the username is not present # needed if there is no login endpoint in the proxy if ($requires_auth = 1) { return 307 $scheme://$host:$server_port/auth/login?url=$request_uri; } rewrite ^/rsconnect/(.*)$ /$1 break; proxy_pass http://rstudio-connect-host:3939; proxy_redirect / /rsconnect/; proxy_pass_request_headers on; proxy_connect_timeout 5; proxy_http_version 1.1; proxy_buffering off; # Required for XHR-streaming proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_set_header X-RSC-Request $scheme://$host:$server_port$request_uri; proxy_set_header X-Auth-Username $auth_username; proxy_set_header X-Auth-Firstname $auth_firstname; proxy_set_header X-Auth-Lastname $auth_lastname; proxy_set_header X-Auth-Email $auth_email; } }

RewriteEngine on  SetEnvIf Cookie " authenticated -user=([^;]+)"AuthUsername=$1 SetEnvIf Cookie "proxyauth-as-first=([^;]+)"SetEnvIf Cookie "proxyauth-as-last=([^;]+)"SetEnvIf Cookie "proxyauth-as-email=([^;]+)"aumail =$1 #如果用户名不存在则直接重定向到认证#如果代理中没有登录端点则需要< if "%{REQUEST_URI} !~ m#^/auth# && -z env('AuthUsername') && -z %{HTTP:X-Auth-Token} && %{HTTP:Authorization} !url = % {REQUEST_URI} " < /如果> <如果“- n env(“AuthUsername”)"> RequestHeader set X-Auth-Username "%{AuthUsername}e"   RequestHeader unset X-Auth-Username   RequestHeader set X-Auth-Firstname "%{AuthFirstName}e"   RequestHeader unset X-Auth-Firstname   RequestHeader set X-Auth-Lastname "%{AuthLastName}e"   RequestHeader unset X-Auth-Lastname   RequestHeader set X-Auth-Email "%{aumail}e"   RequestHeader unset X-Auth-Email  #用虚拟重写规则RewriteRule存储变量值。- [E=req_scheme:%{REQUEST_SCHEME}]重写规则。- [E=http_host:%{http_host}]重写规则。 - [E=req_uri:%{REQUEST_URI}] # set header with variables RequestHeader set X-RSC-Request "%{req_scheme}e://%{http_host}e%{req_uri}e" RewriteCond %{HTTP:Upgrade} websocket [NC] RewriteCond %{HTTP:Connection} upgrade [NC] RewriteRule /rsconnect/(.*) "ws://rstudio-connect-host:3939/$1" [P,L] RewriteRule ^/rsconnect$ /rsconnect/ [R]  ProxyPass http://rstudio-connect-host:3939/ connectiontimeout=5 ProxyPassReverse /rsconnect/ ProxyPassReverse /  

映射$http_upgrade $connection_upgrade{默认升级;”“关闭;}映射$http_cookie $auth_uniqueid{默认";“~ * proxyauth-as-id = (? < uniqueid >[^;] +)”“uniqueid美元”;}映射$http_cookie $auth_username{默认";“~ * verified-user =(? <用户名>[^;]+)”“美元的用户名”;}映射$http_cookie $auth_firstname{默认"";”~ * proxyauth-as-first =(? <第一次>[^;]+)” "$first"; } map $http_cookie $auth_lastname { default ""; "~*proxyauth-as-last=(?[^;]+)" "$last"; } map $http_cookie $auth_email { default ""; "~*proxyauth-as-email=(?[^;]+)" "$email"; } map "$http_x_auth_token" $has_token { default ""; "~.+" "token"; } map "$http_authorization" $has_key { default ""; "~Key .+" "key"; } map "$auth_uniqueid:$has_token:$has_key" $requires_auth { default 0; "::" 1; } server { listen 80 default_server; location /rsconnect/ { # redirect directly to authentication if the username is not present # needed if there is no login endpoint in the proxy if ($requires_auth = 1) { return 307 $scheme://$host:$server_port/auth/login?url=$request_uri; } rewrite ^/rsconnect/(.*)$ /$1 break; proxy_pass http://rstudio-connect-host:3939; proxy_redirect / /rsconnect/; proxy_pass_request_headers on; proxy_connect_timeout 5; proxy_http_version 1.1; proxy_buffering off; # Required for XHR-streaming proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection $connection_upgrade; proxy_set_header X-RSC-Request $scheme://$host:$server_port$request_uri; proxy_set_header X-Auth-Uniqueid $auth_uniqueid; proxy_set_header X-Auth-Username $auth_username; proxy_set_header X-Auth-Firstname $auth_firstname; proxy_set_header X-Auth-Lastname $auth_lastname; proxy_set_header X-Auth-Email $auth_email; } }

RewriteEngine on  SetEnvIf Cookie " authenticated -user=([^;]+)"SetEnvIf Cookie "proxyauth-as-user=([^;]+)"AuthUsername=$1 SetEnvIf Cookie "proxyauth-as-first=([^;]+)"SetEnvIf Cookie "proxyauth-as-last=([^;]+)"SetEnvIf Cookie "proxyauth-as-email=([^;]+)"aumail =$1 #如果用户名不存在#需要如果代理中没有登录端点< if "%{REQUEST_URI} !~ m#^/auth# && -z env('AuthUniqueId') && -z %{HTTP:X-Auth-Token} && %{HTTP:Authorization} !~ /Key .+/">重定向307 "%{REQUEST_SCHEME}://%{HTTP_HOST}/auth/login?url = % {REQUEST_URI} " < /如果> <如果“- n env(“AuthUniqueId”)"> RequestHeader set X-Auth-Uniqueid "%{AuthUniqueId}e"   RequestHeader unset X-Auth-Uniqueid   RequestHeader set X-Auth-Username "%{AuthUsername}e"   RequestHeader unset X-Auth-Username   RequestHeader set X-Auth-Firstname "%{AuthFirstName}e"   RequestHeader unset X-Auth-Firstname   RequestHeader set X-Auth-Lastname "%{AuthLastName}e"   RequestHeader unset X-Auth-Lastname   RequestHeader set X-Auth-Email "%{aumail}e"   RequestHeader unset X-Auth-Email  #用虚拟重写规则RewriteRule存储变量值。 - [E=req_scheme:%{REQUEST_SCHEME}] RewriteRule . - [E=http_host:%{HTTP_HOST}] RewriteRule . - [E=req_uri:%{REQUEST_URI}] # set header with variables RequestHeader set X-RSC-Request "%{req_scheme}e://%{http_host}e%{req_uri}e" RewriteCond %{HTTP:Upgrade} websocket [NC] RewriteCond %{HTTP:Connection} upgrade [NC] RewriteRule /rsconnect/(.*) "ws://rstudio-connect-host:3939/$1" [P,L] RewriteRule ^/rsconnect$ /rsconnect/ [R]  ProxyPass http://rstudio-connect-host:3939/ connectiontimeout=5 ProxyPassReverse /rsconnect/ ProxyPassReverse /