Yak Shaving: Adding OAuth Support to Nginx via Lua

seatgeek.com

18 pointsjosegonzalez5 comments

I would use openresty rather than building your own nginx Lua bundle. It has test frameworks and releases and so on. And you could ship an oauth2 module with it.

I simply enabled the nginx-lua - which comes with the debian source - in our custom package. Adding the other stuff would have been nice, but also unnecessary bloat.

I did do some investigation into openresty, but decided against it because it would not confer benefits.

The other thing is that we custom compile other modules into nginx - tracelytics[1] being one of them - and it was simpler to decipher the debian packaging than it was to do the same for openresty.

[1] http://www.tracelytics.com/

Are there existing open source projects that accomplish this?

Yeah I was going to ask the same thing. It seems very likely there was some OS option you could have used here.

There is an OAuth1 module[1] that is available, but not only is that not the version of OAuth we built in our provider, but liboauth conflicts with certain packages our servers need installed.

If there were an OS option, I would have used it :)

[1] https://github.com/yaoweibin/nginx_http_oauth_module

Reply on news.ycombinator.com