gavincarr / mod_auth_tkt

Lightweight single-signon authentication module for Apache
Other
37 stars 22 forks source link

set protocol https or http in case of using ProxyPass #20

Open unnilennium opened 8 years ago

unnilennium commented 8 years ago

this would be to complete the patch Charlie Brady did submit to you years ago for X-Forward-Host.

please find attached a patch that allow to add X-Forward-Proto directive in order to rewrite correctly the URL when a 307 redirection occurs.

without this, in case of a proxy using https, this will prevent recent browser to refresh the destination if inside an iframe.

In term of documentation , the proxying isntance of httpd should add where necessary :

RequestHeader set X-Forwarded-Proto "https"

please feel free to rewrite it with better syntax !

mod_auth_tkt-2.3.99b1-betterredirection.patch.txt