本文缩写(英文全称与中文含义)
| 缩写 | 英文全称/名称 | 中文含义 |
|---|---|---|
| API | Application Programming Interface | 应用程序编程接口 |
| RBAC | Role-Based Access Control | 基于角色的访问控制 |
| SSO | Single Sign-On | 单点登录 |
| TLS | Transport Layer Security | 传输层安全协议 |
Nginx#
Nginx 常用作 reverse proxy、static file server、TLS termination、path routing 和轻量访问控制入口。
Links#
https://nginx.org/en/docs/
https://nginx.org/en/docs/http/ngx_http_auth_basic_module.html
https://nginx.org/en/docs/http/ngx_http_proxy_module.html1. Important Points#
Basic Auth 只提供用户名/密码校验;必须配合 HTTPS 和入口限制,不能代替完整的应用权限与审计。
use for:
reverse proxy
static file serving
TLS termination
path based routing
basic auth for internal APIs / dashboards
do not use as:
full application authorization system
replacement for SSO / RBAC
public API security by password only2. Pages#
| Page | Use It For |
|---|---|
| Basic Auth | 给接口、内部页面、反代入口加用户名密码认证 |
3. Common Commands#
nginx -t
systemctl reload nginx
systemctl status nginx --no-pager
journalctl -u nginx -n 100 --no-pager
ss -lntp | grep nginx