Re: Injecting Set-Cookie in Reverse Proxy?

2016-11-19 Thread Yongtao You via nginx
I was able to do this with the "headers more" module. Thanks!Yongtao On Saturday, November 19, 2016 4:22 PM, Yongtao You via nginx wrote: Hi, I'm setting up a reverse proxy to my backend service as follows: server {    location / {         auth_request /auth;        error_page 401 =302

Injecting Set-Cookie in Reverse Proxy?

2016-11-19 Thread Yongtao You via nginx
Hi, I'm setting up a reverse proxy to my backend service as follows: server {    location / {         auth_request /auth;        error_page 401 =302 /login;         proxy_pass http://backend/;        add_header Set-Cookie "my=xyz"; # Can I add this in the response from backend?    }} I would like

Help with securing "route" cookie

2016-11-19 Thread Gerard Mattison
Hello all, I am using nginx with nginx-sticky-module-ng for distributing the load among servers per specific user session for my java application. One of the issue I having is that when I ran a vulnerability assessment, the "route" cookie is coming up as not secure. Attached image shows the issu