<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10px"><div id="yui_3_16_0_ym19_1_1461353972626_6058">Hi Barry,</div><div id="yui_3_16_0_ym19_1_1461353972626_6059"><br></div><div id="yui_3_16_0_ym19_1_1461353972626_6057">I have been thinking about this lately.</div><div id="yui_3_16_0_ym19_1_1461353972626_6029">You want check not only if ZM_AUTH_TOKEN is in cookie or not,</div><div id="yui_3_16_0_ym19_1_1461353972626_6857"> but also if the ZM_AUTH_TOKEN is valid or not before proxying request to your own web application, right??<br></div><div id="yui_3_16_0_ym19_1_1461353972626_6027"><br><span></span></div><div id="yui_3_16_0_ym19_1_1461353972626_6166"><span id="yui_3_16_0_ym19_1_1461353972626_6191">That is difficult, because Zimbra Nginx itself does not make auth token validation from my understanding.</span></div><div id="yui_3_16_0_ym19_1_1461353972626_6297"><span id="yui_3_16_0_ym19_1_1461353972626_6191"><br></span></div><div id="yui_3_16_0_ym19_1_1461353972626_6900"><span id="yui_3_16_0_ym19_1_1461353972626_6191">How about Zimbra Nginx proxying the request to your own web app which validates the authtoken??</span></div><div id="yui_3_16_0_ym19_1_1461353972626_6901"><span id="yui_3_16_0_ym19_1_1461353972626_6191">Does it work for you??</span></div> <div class="qtdSeparateBR"><br><br></div><div style="display: block;" class="yahoo_quoted"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 10px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"><font face="Arial" size="2"> On Wednesday, April 13, 2016 3:29 AM, Barry De Graaff <barrydg@zetalliance.org> wrote:<br></font></div> <br><br> <div class="y_msg_container">Hello All,<br><br>is there a nginx/zimbra proxy expert here?<br><br>I would like to add additional reverse proxies to zimbra proxy,<br>but only allow authenticated users, see:<br><br><a href="https://bugzilla.zimbra.com/show_bug.cgi?id=101811" target="_blank">https://bugzilla.zimbra.com/show_bug.cgi?id=101811</a><br><br><br>If you know how-to, please let me know.<br><br><br>Barry<br><br><br><br></div> </div> </div> </div></div></body></html>