Forum Discussion

Erich_Rockman_1's avatar
Erich_Rockman_1
Icon for Cirrus rankCirrus
Dec 10, 2015

Check Authorization / WWW-Authenticate headers

Hi. I am trying to make sure that the user what is trying to/has authenticated to a site w/ Basic Auth matches a user in a list. However, I cannot force the server to prompt if the user/pass is not a...
APM
application delivery
iRules
Stanislas_Piro2's avatar
Stanislas_Piro2
Icon for Cumulonimbus rankCumulonimbus
Dec 11, 2015

Erich,

Do you want to block if the user provide a wrong password and is prompted again by the server?

when HTTP_REQUEST {
    if {[catch {set username [HTTP::username] }]} { set username ""}
    if { $username ne ""} { 
        set user_provided 1
    } else {
        set user_provided 0
    }

}

when HTTP_RESPONSE {
  if { ([HTTP::status] eq "401") && ($user_provided) } { HTTP::respond 403 content "Access is Denied!" }
}