NGINX auth_request: Lacking native credential expiration handling
Goal We need to enforce least‑privilege authentication while ensuring credentials expire automatically. Current Constraints NGINX’s auth_basic validates against static credentials and auth_request delegates to an external service, but neither interprets token expiry or revocation. Uncertainty There is no documented NGINX directive that enforces expiration. T
nginx