Nginx:Authenticate

lastmod 2026-11-10created 2021-04-163 edits

The Nginx:Authenticate page summarizes how Nginx handles authentication of requests in front of upstream applications. Besides the built-in auth_basic, the auth_request module can send a subrequest to a separate authentication service and allow or deny access based on its response code. The commercial NGINX Plus has an auth_jwt module that validates JWT tokens directly, and the open-source version achieves something similar with OpenResty or external modules.

See also

• Nginx
• Authenticate

Favorite site

• NGINX Docs | Setting up JWT Authentication
• NGINX Docs | Authentication Based on Subrequest Result