[GH-ISSUE #983] Custom locations unprotected #826

New issue

Closed

opened 2026-02-26 06:34:35 +03:00 by kerem · 1 comment

kerem commented

2026-02-26 06:34:35 +03:00

Owner

Originally created by @maxdd on GitHub (Mar 30, 2021).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/983

Describe the bug
If HTTP/2 Support is enabled in the reverse proxy setting, the auth menu is shown but pressing "Cancel" is sufficient to bypass the protection (the content is still loaded independently to this last action)

To Reproduce

Set any reverse proxy
Set a custom location
See that the page is loaded anyway (even if "Cancel" is not pressed)

Expected behavior
The auth menu should be shown and all the content should not be visible until the proper authentication takes place

Operating System

HP Notebook
Ubuntu 20.04
Latest docker image

Originally created by @maxdd on GitHub (Mar 30, 2021). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/983 **Describe the bug** If HTTP/2 Support is enabled in the reverse proxy setting, the auth menu is shown but pressing "Cancel" is sufficient to bypass the protection (the content is still loaded independently to this last action) **To Reproduce** 1. Set any reverse proxy 2. Set a custom location 3. See that the page is loaded anyway (even if "Cancel" is not pressed) **Expected behavior** The auth menu should be shown and all the content should not be visible until the proper authentication takes place **Operating System** - HP Notebook - Ubuntu 20.04 - Latest docker image

kerem

2026-02-26 06:34:35 +03:00

closed this issue
added the
bug
label

kerem commented

2026-02-26 06:34:35 +03:00

Author

Owner

@maxdd commented on GitHub (Apr 1, 2021):

Adding this to the "advance" panel of each sublocation is doing the job

auth_basic            "Authorization required";
auth_basic_user_file  /data/access/<<access list id>>;

still a drop down menu showing all the access lists and a flag to make this automatic would be great

@maxdd commented on GitHub (Apr 1, 2021): Adding this to the "advance" panel of each sublocation is doing the job ``` auth_basic "Authorization required"; auth_basic_user_file /data/access/<<access list id>>; ``` still a drop down menu showing all the access lists and a flag to make this automatic would be great

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/nginx-proxy-manager-NginxProxyManager#826

No description provided.

Rows
Columns