Make sure you test this unexpected behavior with a minimal, reproducible
configuration.
If you succeed, please share it or (even better!) fill a bug report
https://trac.nginx.org/. Otherwise, that meant you probably did something
Wrong.

​You were previously saying proxy_hise_headers did not pass cookies to the
client. Now yo uare saying clients are able to grab their cookie.
I am a bit confused, here...​
---
*B. R.*

On Fri, Mar 25, 2016 at 10:33 PM, john_smith77 <nginx-forum@forum.nginx.org>
wrote:

> So I found a solution and it seems like there is unexpected behavior from
> nginx. proxy_hide_header Set-Cookie does not seem to work when the location
> block is set to /
>
> So:
>
> location / {
> #Lots of other proxy stuff here......
> proxy_hide_header "Set-Cookie"; }
>
> does not allow a cookie to ever be set, but:
>
> location ~home.html {
> #Lots of other proxy stuff here......
> proxy_hide_header "Set-Cookie"; }
>
> will allow cache HITS but won't cache Set-Cookie headers. Clients are still
> able to get the cookies from the back end and will never get another users
> session cookies.
>
> Posted at Nginx Forum:
> https://forum.nginx.org/read.php?2,265629,265658#msg-265658
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://mailman.nginx.org/mailman/listinfo/nginx
>
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx