Skip to content

Commit 5a8028a

Browse files
committed
Adds FAQ entry for acl plus login
1 parent adc5a20 commit 5a8028a

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

docs/faq/README.md

+3
Original file line numberDiff line numberDiff line change
@@ -21,3 +21,6 @@ Your best bet is to ask the [Reddit community for support](https://www.reddit.co
2121

2222
Gitter is best left for anyone contributing to the project to ask for help about internals, code reviews etc.
2323

24+
## When adding username and password access control to a proxy host, I can no longer login into the app.
25+
26+
Having an Access Control List (ACL) with username and password requires the browser to always send this username and password in the `Authorization` header on each request. If your proxied app also requires authentication (like Nginx Proxy Manager itself), most likely the app will also use the `Authorization` header to transmit this information, as this is the standardized header meant for this kind of information. However having multiples of the same headers is not allowed in the [internet standard](https://www.rfc-editor.org/rfc/rfc7230#section-3.2.2) and almost all apps do not support multiple values in the `Authorization` header. Hence one of the two logins will be broken. This can only be fixed by either removing one of the logins or by changing the app to use other non-standard headers for authorization.

0 commit comments

Comments
 (0)