Cadoles
/
ansible-role-sso
10
0
Fork 0
Code Issues 1 Pull Requests 1 Projects Releases Wiki Activity

Injection entête X-Forwarded-Prefix

This commit is contained in:
wpetit 2022-08-16 15:30:26 +02:00
parent 93d8997f6f
commit 636a3a10d7
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
templates/haproxy.cfg.j2
View File

@ -85,6 +85,8 @@ backend hydra_dispatcher
balance roundrobin balance roundrobin
# Suppression du préfixe /auth/dispatcher dans l'URL # Suppression du préfixe /auth/dispatcher dans l'URL
http-request set-path %[path,regsub(^{{ haproxy_hydra_dispatcher_base_path }}/,/)] http-request set-path %[path,regsub(^{{ haproxy_hydra_dispatcher_base_path }}/,/)]
http-request set-header X-Forwarded-Prefix {{ haproxy_hydra_dispatcher_base_path }}
server hydra-login-dispatcher 127.0.0.1:3000 check server hydra-login-dispatcher 127.0.0.1:3000 check
{% if enable_hydra_passwordless %} {% if enable_hydra_passwordless %}
@ -93,6 +95,8 @@ backend hydra_passwordless
balance roundrobin balance roundrobin
# Suppression du préfixe /auth/passwordless dans l'URL # Suppression du préfixe /auth/passwordless dans l'URL
http-request set-path %[path,regsub(^{{ haproxy_hydra_passwordless_base_path }},)] http-request set-path %[path,regsub(^{{ haproxy_hydra_passwordless_base_path }},)]
http-request set-header X-Forwarded-Prefix {{ haproxy_hydra_passwordless_base_path }}
server hydra-login-passwordless 127.0.0.1:3001 check server hydra-login-passwordless 127.0.0.1:3001 check
{%- endif %} {%- endif %}
@ -102,6 +106,8 @@ backend hydra_oidc
balance roundrobin balance roundrobin
# Suppression du préfixe /auth/oidc dans l'URL # Suppression du préfixe /auth/oidc dans l'URL
http-request set-path %[path,regsub(^{{ haproxy_hydra_oidc_base_path }},)] http-request set-path %[path,regsub(^{{ haproxy_hydra_oidc_base_path }},)]
http-request set-header X-Forwarded-Prefix {{ haproxy_hydra_oidc_base_path }}
server hydra-login-oidc 127.0.0.1:3004 check server hydra-login-oidc 127.0.0.1:3004 check
{%- endif %} {%- endif %}
@ -117,5 +123,7 @@ backend oidc_test
balance roundrobin balance roundrobin
# Suppression du préfixe /auth/test dans l'URL # Suppression du préfixe /auth/test dans l'URL
http-request set-path %[path,regsub(^{{ haproxy_oidc_test_base_path }},/)] http-request set-path %[path,regsub(^{{ haproxy_oidc_test_base_path }},/)]
http-request set-header X-Forwarded-Prefix {{ haproxy_oidc_test_base_path }}
server oidc-test 127.0.0.1:8080 check server oidc-test 127.0.0.1:8080 check
{% endif %} {% endif %}