Shared Secret Access Control
Component type
Categories
Maintenance status
Development status
Component created
Component changed
This is a really simple module that allows you to lockdown access to your site by only responding to requests that contain a valid secret inside a custom HTTP header.
The primary purpose of this is to lockdown access to Drupal for use with Web Application Firewalls (WAF). Since a WAF is to protect your site, it can only do so if traffic does not bypass it and so this module's design is to deny unauthorised requests.
This module does require some setup with the WAF to forward the shared secret header.
