Hey — so nginx calls it external auth, others forward auth. It's like a sub request that goes out to a server that usually response with HTTP 200 ("ok") or something else (e.g. HTTP 403). And that tells the proxy if he request can continue.