On Tue, Jan 04, 2011 at 11:19:01AM +0000, Oliver Beattie wrote: > Hi there, > > I am sure this question has likely been asked many times before, I'm just > having a bit of a hard time finding answers. > > Basically, I need to be able to authenticate downloads based on a URL > signature if present (passed as a query parameter), instead of via Basic > authentication (I need to support both of these, but bypass the basic auth > if no signature is present). It isn't a requirement that they live at the > same path, so they can be at different virtual hosts/directories if > necessary. > > At first, I thought the best way to do this would be just through a simple > CGI/WSGI/whatever, but the files I am authenticating access to are very > large (many GB) and I fear there may be a performance implication of doing > this (and things like Range requests won't be possible without extra work). > > Has anyone had any experience with this? What is the best way to proceed? > Any help anyone could give would be very much appreciated :) > > âOliver Hello Oliver, do you know mod_auth_token? Christian -- asknet AG * Vincenz-Priessnitz-Str. 3 * D-76131 Karlsruhe fon: +49 721 96458 6445 * fax: +49 721 96458 9445 * web: http://www.asknet.com board of managing directors: Michael Scheib, Dr. Dietmar Waudig, Michael Konrad chairman of the supervisory board: Dr. Joachim Bernecker * HRB 108713 Mannheim --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx