Hello BR,Thank you for your answer and for the hints. I'll investigate further
in that direction.Have a nice week
Le Mercredi 8 mars 2017 14h03, B.R. via nginx <nginx@nginx.org> a écrit :
This clearly looks like an application problem and not a nginx-related one.
nginx does not remove cookies nor, as the configuration snippet you shared
suggest, handles authentication.
If you use DNS, make sure all requests are served by the instance of nginx you
quote, including redirects which might happen on login (have a look at access
logs).
You can also investigate the content of cookies received either from downstream
or upstream if you think it is related to your problem.
If you got a question on the nginx configuration this ML is here to help.
Otherwise, you'll need to rereoute your question where appropriate.
---
B. R.
On Mon, Mar 6, 2017 at 10:35 PM, Mik J via nginx <nginx@nginx.org> wrote:
Hello,
I have run an application behind a nginx reverse proxy and I can't make it to
work
a) if I access this application using https://1.1.1.1:443 it works (certificate
warning)b) if I access this application using https://myapp.mydomain.org, I get
access to the login page location ^~ / {
proxy_pass https://1.1.1.1:443;
proxy_redirect off;
proxy_set_header Host $http_host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_hide_header X-Frame-Options; proxy_hide_header
X-Content-Security-Policy;
proxy_hide_header X-Content-Type-Options;
proxy_hide_header X-WebKit-CSP;
proxy_hide_header content-security-policy;
proxy_hide_header x-xss-protection;
proxy_set_header X-NginX-Proxy true;
proxy_ssl_session_reuse off;
}
c) I log in in the page and after some time (2/3 seconds) the application logs
me out
When I log in directly case a) I notice that I have (firebug)
CookieSaveStateCookie=root; APPSESSIONID= 070ABC6AE433D2CAEDCFFB1E430744 16;
testcookieenabled
Whereas when I log in in case c) I haveAPPSESSIONID=
070ABC6AE433D2CAEDCFFB1E430744 16; testcookieenabled
So I feel there's a problem with the session or something like that.PS: There
is only one backend server and I can't run plain http (disable https)
Does anyone has an idea ?
______________________________ _________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/ mailman/listinfo/nginx
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
