Handling of SSL and URL when behind a proxy
Handling of SSL and URL when behind a proxy
When FD builds recovery link using HTTP_X_FORWARDED_HOST, it should use HTTP_X_FORWARDED_PROTO as well to know if it should use http or https
(from redmine: issue id 5149, created on 2016-09-14, closed on 2016-09-20)
- Relations:
- copied_to #5087 (closed)
- Changesets:
- Revision dad6901d by Côme Chilliet on 2016-09-14T10:26:29.000Z:
Fixes #5149 Better handling of SSL and URL when behind a proxy- Revision f19acda3 by Côme Chilliet on 2016-09-14T11:23:36.000Z:
Fixes #5149 Using PHP_SELF if PATH_INFO is empty or not set- Revision d31aa2f8 by Côme Chilliet on 2016-09-20T07:26:09.000Z:
Fixes #5149 Better handling of SSL and URL when behind a proxy- Revision 8cf257df by Côme Chilliet on 2016-09-20T07:26:25.000Z:
Fixes #5149 Using PHP_SELF if PATH_INFO is empty or not set- Custom Fields:
- Bug in version: 1.0.15
Activity
Also HTTP_X_FORWARDED_PORT because someone can have reasons to change port too.
Côme Chilliet wrote:
When FD builds recovery link using HTTP_X_FORWARDED_HOST, it should use HTTP_X_FORWARDED_PROTO as well to know if it should use http or https
(from redmine: written on 2016-09-14)
By Prethorian on 2017-09-02T15:33:15 (imported from GitLab)
After your fixes in code and my adding directive in Proxy apache configuration:
RequestHeader add X-Forwarded-Proto https
Everything works fine.
NOTE: when apache is on SSL and proxypass to http, then this directive RequestHeader add X-Forwarded-Proto https MUST be added in order to work your change about checking HTTP_X_FORWARDED_PROTO value. Otherwise HTTP_X_FORWARDED_PROTO will not be shown in header.
Thanks.
Côme Chilliet wrote:
Hello,
SSL detection, redirection, warning link, and password recovery link should now all work fine when behind a proxy.
(from redmine: written on 2016-09-14)
By Prethorian on 2017-09-02T15:33:16 (imported from GitLab)
added Fixed user-manual labels
By bmortier on 2018-09-27T19:27:37 (imported from GitLab)
