How to disable http basic auth in nginx for a specific ip range?

Question

I'm developing an application with facebook login. So far it's not public and is protected by http basic auth in nginx. Is it possible to disable http auth for facebook's ip range so that we can have our tester test the facebook capabilities as well? Please, include an example configuration snippet, if possible.

Solution

Use satisfy directive to allow access. 32934 is facebook autonomous system, look facebook ip.

satisfy  any;
allow 66.220.144.0/20;
allow 66.220.152.0/21;
allow ...
deny   all;

auth_basic            "closed site";
auth_basic_user_file  conf/htpasswd;

Comments

[Kit Sunde]

There's an up to date list of IP ranges here: developers.facebook.com/docs/ApplicationSecurity/…

[radtek]

You may also need to set the real ip if you are behind a proxy, at the server direct i.e. set_real_ip_from 0.0.0.0/0; real_ip_header X-Forwarded-For;