search

ymkjp / opensocial-php-client

Automatically exported from code.google.com/p/opensocial-php-client
Apache License 2.0
0 stars 0 forks source link

callbackUrl problem when running behind a reverse proxy #47

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1.install on foo.tld behind a reverse proxy of foo.com
2.go to examples
3.use 3 legged example

What is the expected output? What do you see instead?
expected: callbackUrl is foo.com
instead : callbackUrl is foo.tld

What version of the product are you using? On what operating system?
1.0.0 on GNU/Linux

Please provide any additional information below.
Use the X-Forwarded-For information to build $callbackUrl at
opensocial-php-client/osapi/auth/osapiOAuth3Legged.php 

In order to avoid security problems the X-Forwarded-For field should be
intepreted only if the request comes from a pre-defined list of known
reverse proxy.

Original issue reported on code.google.com by loic-goo...@dachary.org on 3 Jul 2009 at 7:13