Ticket #285: satisfy_any_unauth_forbidden.patch

src/http/ngx_http_core_module.c

@@ -1141 +1141 @@
         }
 
         if (rc == NGX_HTTP_FORBIDDEN || rc == NGX_HTTP_UNAUTHORIZED) {
-            r->access_code = rc;
+            
+            /* do not overwrite unauth with forbidden when satisfy any is set */
+            if (clcf->satisfy == NGX_HTTP_SATISFY_ALL || r->access_code != NGX_HTTP_UNAUTHORIZED) {
+                r->access_code = rc;
+            }                                                   
 
             r->phase_handler++;
             return NGX_AGAIN;