I have an existing web site that needs to link to a pdf file on our web-server. The problem is, ONLY users who have been authenticated by logging into the site should be able to view the file. I have tried everything I can think of and I just can not figure out how to configure apache to do what I want. Either it allows everyone to access the file, or no one has access.
How do I set up the config such that only requests from foo.bar.com are authorized to get the file from blah.baz.com?
Update In my config file for my site I currently have
<Directory "/usr/local/web/static/foo">
Order allow,deny
Deny from all
Allow from foo.bar.com
</Directory>
When I examine the failing request in the chrome console I can see it contains
Host:blah.baz.com
Referer:http://foo.bar.com/