Editing Login-Only Repository (section)

== EPrints 3.4 and above ==
Set the following configurations settings in a configuration file under your archive's <code>cfg/cfg.d/</code> directory (e.g. <code>zz_login_required.pl</code>).
 $c->{login_required_for_cgi}->{enable} = 1;
 $c->{login_required_for_eprints}->{enable} = 1;
 $c->{login_required_for_views}->{enable} = 1; 
 $c->{login_required_for_cgi}->{exceptions} = [ "users/login", "handle_404" ];
 $c->{login_required_url} = "/cgi/users/login";
This configuration will block all access to publication abstract/summary pages and their documents, browse view pages and any CGI script pages, such as search, export, etc.  It will still allow users to access a login page, so if they do have an account they can login.  In the configuration above, it is assumed that users will be authenticated locally.  If institutions single sign-on (e.g. [[Shibboleth]] is being used then <code>"users/login"</code> can be removed from the exceptions and <code>login_required_url</code> should be updated appropriately.  The <code>"handle_404"</code> exception is not essential but it saves a user having to login to find a page does not actually exist, which may be preferable or may be a security concern if they can see a page does not exist without logging in.  You may want to add additional CGI scripts to exceptions such as <code>"reset_password"</code> and <code>"confirm"</code> to support password resets or <code>"register"</code> to allow visitors to register for user accounts.

The above configuration does not prevent access to static pages like the home, about, policies, etc.  If these need authentication as well, then similar configuration as describe fore EPrints 3.3 and older described below will need to be added to the HTTPS and also possibly HTTP Apache virtualhost configuration.  

From '''EPrints 3.4.7+''' there will be additional configuration options for static pages.  The following two lines of configuration will allow all but the homepage (and its resources, based on a vanilla installation) to be restricted behind a login:
 $c->{login_required_for_static}->{enable} = 1;
 $c->{login_required_for_static}->{exceptions} = [ "/", "/favicon.ico", "/images/.*", "/style/images/.*" ];