2 messages in ru.sysoev.nginxRe: feature request
FromSent OnAttachments
Bedros HanounikMay 8, 2007 10:46 pm 
Igor SysoevMay 10, 2007 9:50 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:Re: feature requestActions...
From:Igor Sysoev (is-G@public.gmane.org)
Date:May 10, 2007 9:50:39 pm
List:ru.sysoev.nginx

On Tue, May 08, 2007 at 10:47:22PM -0700, Bedros Hanounik wrote:

a while ago I sent an email inquiring about nginx feature equivalent to mod_secdownload of Lighttpd found here (http://trac.lighttpd.net/trac/wiki/Docs%3AModSecDownload)

recently I checked the feature request page of nginx wiki and found a suggestion to use NginxXSendfile feature; however I'm not sure if XSendfile supports the following

the uri expires; timing out,

static file is on a URI on a different machine/location

these two parameters of the mod_secdownload are very valuables, they allow me to give someone a limited access to a static file, then later, if his/her membership expires, they no longer can use the same old uri to access the static file.

I could be wrong, but is what I just described is lacking from XSendfile feature??

When nginx uses X-Accel-Redirect it does not know anything about expires, user validity, etc. It's all up to authentification backend. The request always should go to backend, and the backend decides whether uri is expired or not, and sends When nginx uses or 403.