Bug 50383 - Proxy all requests to OpenID-Connect app
Proxy all requests to OpenID-Connect app
Status: NEW
Product: UCS
Classification: Unclassified
Component: OpenID Connect
UCS 4.4
Other Linux
: P5 normal (vote)
: ---
Assigned To: UCS maintainers
UCS maintainers
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2019-10-17 12:58 CEST by Florian Best
Modified: 2019-10-17 12:58 CEST (History)
0 users

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Florian Best univentionstaff 2019-10-17 12:58:22 CEST
Currently only some whitelist of pathes are reverse proxied by the UCS apache into the docker container.

We should change this into:

ProxyPassMatch /konnect/(.*)$ http://localhost:8777/konnect/$1 retry=0

ProxyPass /signin/ http://localhost:8777/signin/ retry=0
ProxyPassReverse /signin/ http://localhost:8777/signin/


This is more future and update proof, less changes are required, easier debugging is possible.