Hi,

On Thu, Nov 17, 2022 at 12:58:31PM -0500, blason wrote:
> Nothing interesting as such however below is the curl output from nginx
> server
>
> curl -I https://xxx.xxxx.xxx:8081/neutrino-sso-web
> HTTP/1.1 302 Found
> Date: Thu, 17 Nov 2022 17:57:10 GMT
> Server: JBoss-EAP/7
> Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
> X-Powered-By: Undertow/1
> X-Powered-By: JSP/2.3
> X-Frame-Options: DENY
> Location: https://xxxx.xxxx.xxxx:8081/neutrino-sso-web/login
> Strict-Transport-Security: max-age=15768000 ; includeSubDomains
> X-Content-Type-Options: nosniff
> Content-Type: text/html; charset=UTF-8
> Set-Cookie:
> JSESSIONID="nhsQqmnRHPaYQMdNjhkMIQ7HL6vo-fWCrPTfC8Zd.master:aeon";
> Version=1; Path=/neutrino-sso-web; Secure;
> HttpOnly;HttpOnly;Secure;SameSite=strict
> Access-Control-Allow-Origin: *

So, the request and response both look good, 302 is the valid
response code from the upstream I believe, and that redirects
to a login page. No issue.

--
Sergey A. Osokin
_______________________________________________
nginx mailing list -- nginx@nginx.org
To unsubscribe send an email to nginx-leave@nginx.org