Skip to content

Conversation

@shaun-nx
Copy link
Contributor

@shaun-nx shaun-nx commented Jan 6, 2026

Proposed changes

This change adds a new document to the NGF traffic security section, which details on to configure Basic Authentication for NGF using the AuthenticationFilter CR

Closes nginx/nginx-gateway-fabric#4345

Checklist

Before sharing this pull request, I completed the following checklist:

Footnotes

  1. Potentially sensitive information includes personally identify information (PII), authentication credentials, and live URLs. Refer to the style guide for guidance about placeholder content.

@shaun-nx shaun-nx requested a review from a team as a code owner January 6, 2026 16:06
@github-actions github-actions bot added documentation Improvements or additions to documentation product/ngf Issues related to NGINX Gateway Fabric labels Jan 6, 2026
@github-actions
Copy link

github-actions bot commented Jan 6, 2026

Deploy Preview will be available once build job completes!

Name Link
😎 Deploy Preview https://frontdoor-test-docs.nginx.com/previews/docs/1634/

@shaun-nx shaun-nx changed the title auth Add document to configure Basic Auth Jan 6, 2026
Copy link
Member

@ADubhlaoich ADubhlaoich left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Initial bit of metadata feedback - more feedback coming.

There's a lot of stuff to be changed.

@shaun-nx shaun-nx requested a review from a team January 7, 2026 17:09
Copy link
Contributor

@salonichf5 salonichf5 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good to me overall, just a couple of comments

@shaun-nx shaun-nx requested a review from salonichf5 January 8, 2026 10:17
@shaun-nx
Copy link
Contributor Author

shaun-nx commented Jan 8, 2026

Initial bit of metadata feedback - more feedback coming.

There's a lot of stuff to be changed.

Thanks Alan! Appreciate you taking the time to look over it all 😄

Copy link
Contributor

@salonichf5 salonichf5 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

To make this easier for users, let’s ensure every curl command is copy/paste ready and works exactly as written. I recommended some edits but it would be better if you cross check again on your end.

Copy link
Contributor

@salonichf5 salonichf5 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

looks good to me

@shaun-nx shaun-nx requested a review from JTorreG January 12, 2026 13:22
Copy link
Contributor

@sjberman sjberman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One small update. Once other comments are addressed, lgtm!

@shaun-nx shaun-nx requested a review from ADubhlaoich January 12, 2026 17:53
Copy link
Member

@ADubhlaoich ADubhlaoich left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Generally LGTM. Added a lot of edit suggestions for consistent language and tone.

My apologies for the delay in review.

Comment on lines +23 to +26
## Setup

In this part of the document, we will set up several resources in your cluster to demonstrate usage of the AuthenticationFilter CRD.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
## Setup
In this part of the document, we will set up several resources in your cluster to demonstrate usage of the AuthenticationFilter CRD.

The rest of the document only deals with one level of heading/section nesting, so this is unnecessary. Adding additional edit suggestions to "pop" the remainder one level up.

curl --resolve cafe.example.com:$GW_PORT:$GW_IP http://cafe.example.com:$GW_PORT/coffee -u user1:wrong
```

Response:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Response:
The response should look similar to the following:

</html>
```

Accessing `/tea`
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Accessing `/tea`
Access`/tea` with no credentials using `curl`:

curl --resolve cafe.example.com:$GW_PORT:$GW_IP http://cafe.example.com:$GW_PORT/tea
```

Response:
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Response:
The response should look similar to the following:

URI: /tea
Request ID: c7eb0509303de1c160cb7e7d2ac1d99f
```

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change

Events: <none>
```

## Verify Basic Authentication
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
## Verify Basic Authentication
## Test the AuthenticationFilter responses

@shaun-nx shaun-nx merged commit 824f2ec into ngf-release-2.4 Jan 13, 2026
6 checks passed
@shaun-nx shaun-nx deleted the ngf/authentication-filter-basic-auth branch January 13, 2026 15:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation product/ngf Issues related to NGINX Gateway Fabric

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants