nginx - 检查cookie是否不包含指定的内容NGINX

Question

关于检查cookie是否存在并包含我的内容(在本例中为foobar)，有无数的教程。

假设mycookie是我要设置的cookie，我将如何执行以下操作。

if ($cookie_mycookie does not equal "foobar") {
  return 401;
}

我已经尝试了以下方法，但无济于事。

if (!$http_mycookie ~* "foorbar" ) {
  return 401;
}

谢谢!

Answer 1

在Nginx中，每个cookie在嵌入式变量$cookie_CookieName中都可用。如果要检查名称为mycookie的cookie，可以使用以下配置代码片段来进行检查:

if ($cookie_mycookie != "foobar") {
  return 401;
}

从nginx manual中获取 if命令:

A condition maybe (among others):

• Comparison of a variable with a string using the = and != operators;

• Matching of a variable against a regular expression using the ~ (for case-sensitive matching) and ~* (for case-insensitive matching) operators.

• Regular expressions can contain captures that are made available for later reuse in the $1..$9 variables.

• Negative operators !~ and !~* are also available. If a regular expression includes the } or ; characters, the whole expressions should be enclosed in single or double quotes.