.htaccess - htaccess - using password OR ip whitelist

Question

So I want to restrict access to a url. Now if they are coming from a given IP address then they shouldn't be prompted for a password. If they are not coming from a givin IP address then they should be prompted for a password.

so a either or of:

AuthUserFile /some/path/.htpasswd
AuthName "Please Log In"
AuthType Basic
require valid-user

and:

order deny,allow

deny from all
allow from x.x.x.x

question from:https://stackoverflow.com/questions/7667004/htaccess-using-password-or-ip-whitelist

Answer 1

You can use the Apache "Satisfy" directive.

Here is an example of using it :

AuthType Basic
AuthName "Please Log In"
AuthUserFile /some/path/.htpasswd
Require valid-user
Order deny,allow
Deny from all
Allow from 127.0.0.1
Satisfy any

Access without password is only allowed from 127.0.0.1.

Hope this helps.