00-redcap.conf

# Turns on shibboleth for the webroot
<Location ~ "^/[^/]+">
 AuthType shibboleth
 ShibRequireSession On
 ShibUseHeaders On
 <RequireAny>
   require valid-user
   require ip 127.0.0.1
 </RequireAny>
</Location>

<Location ~ "^/[^/]+/(api|api/|api/index.php)">
AuthType shibboleth
ShibRequireSession Off
ShibUseHeaders Off
require shibboleth
</Location>


<Location ~ "^/[^/]+/api/help(|/|/index.php)">
AuthType shibboleth
ShibRequireSession Off
ShibUseHeaders Off
require shibboleth
</Location>

# Allow global access to surveys
<Location ~ "^/[^/]+/surveys/">
  Require all granted
</Location>

# Allow access to java script and images
<Location ~ "^/[^/]+/redcap_v[\.\d]*/Resources/">
  Require all granted
</Location>

# Allow access to SendIt
<Location ~ "^/[^/]+/redcap_v[\.\d]*/SendIt/download\.php.*">
  Require all granted
</Location>

# Allow access to SendIt via the controller
<LocationMatch "^/[^/]+/redcap_v[\.\d]*/index\.php">
  <If "%{QUERY_STRING} =~ /.*route=SendItController:download.*/" >
    Require all granted
  </If>
</LocationMatch>

# Disallow web access to directories that don't need it
<Location ~ "/(temp|edocs|webtools2)/.*">
  Require all denied
</Location>

# Allow access to JavaScript and CSS in modules
<Location ~ "^/[^/]+/modules/.*_v.*/.*\.(css|js)(.[0-9]+|)$">
  Require all granted
</Location>