search

kare / ngx_http_auth_crowd_module

Provides Crowd authentication for Nginx
Other
37 stars 16 forks source link

token validation: token validation request contains other cookies #7

Closed robbi5 closed 7 years ago

robbi5 commented 7 years ago

Thanks for the nginx module :)

My nginx error log showed requests like

POST /crowd/rest/usermanagement/latest/session/aPwpacdLc5W0lqB90dEMtg00; othercookie="1234567890abcdef HTTP/1.1

After looking around it looked like that the validate_sso_session_token token argument contains not only our needed crowd session token, but all other cookies in the cookie header too.

I changed it to use ngx_str_t, the ngx_snprintf for building the crowd request url is fine with that.