Welcome! Log In Create A New Profile

Advanced

Re: Internal application - Publish on nginx

Francis Daly
December 03, 2021 09:36AM
On Fri, Dec 03, 2021 at 09:02:29AM -0500, agomes wrote:

Hi there,

> follow the command curl -v.

Thanks for this.

> > GET /app HTTP/1.1

> < HTTP/1.1 302

> < Location: /pwm/public/forgottenpasswordapp?stickyRedirectTest=key
> < Set-Cookie: ID=3fajhL8QWt9TNKBTc8BQVdvqVxf7IZXOkwqt8unh; Path=/pwm/; Secure; HttpOnly; SameSite=Strict

So your upstream redirected to
/pwm/public/forgottenpasswordapp?stickyRedirectTest=key and wanted to
set some cookies with Path=/pwm/. And nginx passed those through to the
client -- so your nginx logs will probably show the "normal" client making
a request for /pwm/public/forgottenpasswordapp?stickyRedirectTest=key,
which will get an error response because you don't have a file
/var/www/pwm/public/forgottenpasswordapp.

proxy_redirect can be used to change the first of those. proxy_cookie_path
can be used to change the second, sort of.

You did set "proxy_redirect default;", but that does not catch the
no-host Location response in this case.

So, I suggest:

* use

proxy_redirect /pwm/public/forgottenpasswordapp /app;

and repeat the "curl"; you should see either "Location: /app?sticky..." or
"Location: https://x.x.x.com/app?sticky...". If you do, then repeat the
"curl" with the "?sticky..." part attached.

I *suspect* that second request will indicate a "missing cookie" failure.

You can then try to access /app in your browser, and see what that does --
if it also indicates the "missing cookie" failure, then you decide how to
"fix" the cookies.

If you are happy for the cookie to potentially be sent to anything on
your x.x.x.com server, then

proxy_cookie_path /pwm/ /;

may work. Maybe "/app" and the end could work too -- it does depend on
what else the upstream app might send. (The upstream app is entirely
below /pwm/; the front-end version is not below /app/ (trailing slash);
so it is not trivial to map between the two.)

Good luck with it,

f
--
Francis Daly francis@daoine.org
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Internal application - Publish on nginx

agomes December 03, 2021 07:37AM

Re: Internal application - Publish on nginx

Francis Daly December 03, 2021 08:36AM

Re: Internal application - Publish on nginx

agomes December 03, 2021 09:02AM

Re: Internal application - Publish on nginx

Francis Daly December 03, 2021 09:36AM

Re: Internal application - Publish on nginx

agomes December 03, 2021 10:05AM

Re: Internal application - Publish on nginx

Francis Daly December 03, 2021 11:02AM

Re: Internal application - Publish on nginx

agomes December 03, 2021 11:34AM

Re: Internal application - Publish on nginx

agomes December 03, 2021 12:57PM

Re: Internal application - Publish on nginx

Francis Daly December 04, 2021 03:58AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 114
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready