[toad87]

Hi,

I'm currently using nginx as a router to my microservices. I need to filter out and deny certain requests.

The filter will be for any requests where:
a). The username is "guest"
. The HTTP method is POST

Is this possible using NGINX? I am using a single sign on Java Spring Security for my microservices.

Thanks!

Toad

[no2pencil]

For the method, absolutely. However for the user name, I would expect that :

a.) nginx isn't the right tool, it should only be serving the data, not managing it at the value of fields
b.) if the data is encrypted via https, then this data shouldn't be visible at this level

Just my opinions.

[toad87]

no2pencil, on 16 February 2017 - 11:53 AM, said:

For the method, absolutely. However for the user name, I would expect that :

a.) nginx isn't the right tool, it should only be serving the data, not managing it at the value of fields
b.) if the data is encrypted via https, then this data shouldn't be visible at this level

Just my opinions.

Ah yes, that is what I expected. A filter servlet is what I think I need. Thanks!