From 67aa977e5b5ae782e4bb638a23b06a77d79b3368 Mon Sep 17 00:00:00 2001 From: zino Date: Tue, 5 Dec 2023 19:11:34 +0100 Subject: [PATCH] m --- .../validate.vouch.armos.zinomedia.de.conf | 22 +++++++++---------- volumes/snippets/enable-vouch.conf | 15 ------------- 2 files changed, 11 insertions(+), 26 deletions(-) diff --git a/volumes/conf.d/validate.vouch.armos.zinomedia.de.conf b/volumes/conf.d/validate.vouch.armos.zinomedia.de.conf index 654afaf..de70f58 100644 --- a/volumes/conf.d/validate.vouch.armos.zinomedia.de.conf +++ b/volumes/conf.d/validate.vouch.armos.zinomedia.de.conf @@ -17,20 +17,20 @@ server { add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; location = /validate { - # # be sure to pass the original host header - # proxy_set_header Host $http_host; + # be sure to pass the original host header + proxy_set_header Host $http_host; - # # Vouch Proxy only acts on the request headers - # proxy_pass_request_body off; - # proxy_set_header Content-Length ""; + # Vouch Proxy only acts on the request headers + proxy_pass_request_body off; + proxy_set_header Content-Length ""; - # # optionally add X-Vouch-User as returned by Vouch Proxy along with the request - # auth_request_set $auth_resp_x_vouch_user $upstream_http_x_vouch_user; + # optionally add X-Vouch-User as returned by Vouch Proxy along with the request + auth_request_set $auth_resp_x_vouch_user $upstream_http_x_vouch_user; - # # these return values are used by the @error401 call - # auth_request_set $auth_resp_jwt $upstream_http_x_vouch_jwt; - # auth_request_set $auth_resp_err $upstream_http_x_vouch_err; - # auth_request_set $auth_resp_failcount $upstream_http_x_vouch_failcount; + # these return values are used by the @error401 call + auth_request_set $auth_resp_jwt $upstream_http_x_vouch_jwt; + auth_request_set $auth_resp_err $upstream_http_x_vouch_err; + auth_request_set $auth_resp_failcount $upstream_http_x_vouch_failcount; # forward the /validate request to Vouch Proxy resolver 127.0.0.11; diff --git a/volumes/snippets/enable-vouch.conf b/volumes/snippets/enable-vouch.conf index 61fd74f..f5c15d9 100644 --- a/volumes/snippets/enable-vouch.conf +++ b/volumes/snippets/enable-vouch.conf @@ -3,21 +3,6 @@ auth_request /validate; location = /validate { proxy_pass https://validate.vouch.armos.zinomedia.de; - - # be sure to pass the original host header - proxy_set_header Host $http_host; - - # Vouch Proxy only acts on the request headers - proxy_pass_request_body off; - proxy_set_header Content-Length ""; - - # optionally add X-Vouch-User as returned by Vouch Proxy along with the request - auth_request_set $auth_resp_x_vouch_user $upstream_http_x_vouch_user; - - # these return values are used by the @error401 call - auth_request_set $auth_resp_jwt $upstream_http_x_vouch_jwt; - auth_request_set $auth_resp_err $upstream_http_x_vouch_err; - auth_request_set $auth_resp_failcount $upstream_http_x_vouch_failcount; } # if validate returns `401 not authorized` then forward the request to the error401block