张立冰 <zhang.libing@...> writes:

Hi zhang, really interesting to see your modules, the idea is exactly what im trying to do these 2 weeks. What I see after checking your code is that : 1. If the token is invalid : return 403, otherwise 404. 2. When the request is valid (the token is exist), it returns 404, and then internal redirect to the 'real' place => If someone knows the url of real place, he can access without any authentication.

I had develop a module similar like that ( in fact I see that we have 80% same code ), but the process is a little different. Can you take a look at these threads and we can work on it together :)

http://thread.gmane.org/gmane.comp.web.nginx.english/10008 http://thread.gmane.org/gmane.comp.web.nginx.english/10379