added nginx apikey

nginx/apikey_auth/apikeys.conf

@@ -0,0 +1,6 @@
+    map $http_apikey $api_client_name {
+      default       "";
+      "KrtKNkLNGcwKQ56la4jcHwxF"  "client_one";
+      "sqj3Ye0vFW/CM/o7LTSMEMM+"  "client_two";
+      "diXnbzglAWMMIvyEEV3rq7Kt"  "client_ten";
+    }

nginx/apikey_auth/docker-compose.yml

@@ -0,0 +1,17 @@
+version: '3'
+services:
+  backend:
+    image: ealen/echo-server:latest
+    restart: always
+    environment:
+      - ENABLE__ENVIRONMENT=false
+    ports:
+      - 8000:80
+
+  nginx:
+    image: nginx
+    volumes:
+      - ./nginx.conf:/etc/nginx/nginx.conf
+      - ./apikeys.conf:/etc/nginx/apikeys.conf
+    ports:
+      - 9999:9999

nginx/apikey_auth/hint.sh

@@ -0,0 +1,4 @@
+
+# https://swagger.io/docs/specification/authentication/api-keys/
+
+curl -I 'http://localhost:9999/' --header 'apikey: diXnbzglAWMMIvyEEV3rq7Kt'

nginx/apikey_auth/nginx.conf

@@ -0,0 +1,29 @@
+http{
+
+    include apikeys.conf;
+    # will provide $api_client_name
+
+    server{
+        listen 9999;
+        location / {
+            auth_request /_validate_apikey;
+            proxy_pass http://backend/;
+        }
+
+        location = /_validate_apikey {
+          internal;
+
+          if ($http_apikey = "") {
+            return 401; # Unauthorized
+          }
+
+          if ($api_client_name = "") {
+            return 403; # Forbidden
+          }
+
+          return 204; # OK (no content)
+        }
+    }
+}
+
+events {}