Questions tagged [cookies]
The cookies tag has no usage guidance.
133
questions
0
votes
1
answer
23
views
Nginx - Black list cookies
Is there a way to black list cookies purely through Nginx?
I tried this: https://stackoverflow.com/questions/67548886/remove-specific-cookie-in-nginx-reverse-proxy
But it doesn't seem to cover cases ...
0
votes
0
answers
16
views
Why HAProxy session cookie is changing?
I run two containers of an app behind an Haproxy and use sticky sessions. I configured it with a cookie as follow :
cookie SERVER insert indirect nocache
server app1 app-1:443 check ssl verify none ...
- 1
0
votes
0
answers
121
views
AWS Sticky session cookie not working
I'm using an application load balancer with the target group of two instances. In the target group, I have enabled application based cookie. However whenever I test the load balancer, it keeps ...
- 1
1
vote
0
answers
336
views
Re-writing cookie headers with NGINX not working
I have a working NGINX config as a reverse proxy. I'm trying to modify the upstream server's Cookie headers to add samesite=non and secure. According the to docs here:
proxy_cookie_flags
it should be ...
- 37
1
vote
2
answers
1k
views
Check HTTP cookie value with nginx using map directive
I need to perform a redirect depending on the client's IP and the value that has been set in the cookie by WPML Wordpress plugin.
I prefer to use the map directive for this purpose.
Excerpt of nginx....
- 70
0
votes
0
answers
1k
views
Nginx Ingress Controller - configure cookie stickiness and upstream hash by request
I am running nginx as an ingress controller for my Kubernetes cluster and I have a use case where I am using cookie affinity to persist the client to a specific pod for session purpose.
I am using the ...
- 537
0
votes
1
answer
126
views
Update request cookie for Varnish ESI-include requests from initial `beresp`
I have an application that is fronted by a Varnish server. Parts of the page is rendered using ESI includes.
My problem is that the upstream response includes an encrypted session cookie, which among ...
- 103
1
vote
1
answer
1k
views
Is there any difference between using a cookie and using a normal header in the case of HTTP communication?
I have a system consisting of a custom software and an HTTP server. The software will send some requests with some headers and the HTTP server will send response back.
Now I have some custom ...
- 195
0
votes
0
answers
290
views
Apache cookie based site access
I store a single cookie in a file and want to retrict access to users who have that specific cookie set (with a specified name) and redirect others (from any page in the site) to my site's root. Since,...
- 1
1
vote
0
answers
165
views
Apache Reverse Proxy SSL don't carrying cookies
We have an Apache 2.4 reverse proxy setup on a Windows server. The server should redirect users to other server via reverse proxy and store the cookies.
We set it up, it works fine except that no ...
0
votes
1
answer
45
views
Redirecting Users to Specific Files With Cookies
Might be a dumb question, but I hope someone can explain it to me in a simple way for a beginner to understand.
Say I had a file only logged in users to my WordPress site are allowed to access. If I ...
- 11
0
votes
1
answer
2k
views
Setting SameSite=None on nginx reverse proxy
i got a problem using my nginx pod (on docker) as a reverse proxy when i set cookie rules in my configuration file.
Here is my nginx.conf file :
events {
worker_connections 1024;
}
http {
...
- 1
0
votes
1
answer
1k
views
asp.net Secure Cookies behind load balancer
This is a hybrid MVC/webforms asp.net application using framework 4.8, forms authentication and Membership. I need to implement secure cookies. The web site is behind a Coyote load balancer which I ...
- 133
0
votes
0
answers
258
views
How to get nginx to strip cookies except for an allow list?
I'm trying to host sites that use things like WordPress, using nginx as a reverse proxy for PHP-FPM. Often these systems will set all kinds of annoying cookies that are unnecessary and/or the site ...
- 3,128
0
votes
1
answer
47
views
Nginx fastcgi_cache and kokos-analytics wordpress plugin
I have setup nginx to cache page requests as described in this tutorial.
There for looged in users the caching is disabled in this tutorial by an if request as:
# Don't use the cache for cookied ...
- 3
1
vote
1
answer
537
views
Where does Chrome fetch my identity from after having deleted cookies?
I'm trying to figure out where does Google CHrome fetch my identity from when authenticating to an Identity Provider (SAML with certificate authentication)
What I have tried :
Delete all cookies, ...
- 282
1
vote
1
answer
499
views
Enable cross site functionality for a subset of my application
A part of the web application I'm working on is integrated with another web application that I do not have control over.
This integration has stopped working with the recent enforcement of the ...
0
votes
1
answer
3k
views
NGINX load balancing hash: use cookie value if present, ip_hash if not
I'm trying to figure out how to do some if-else logic in NGINX's upstream load-balancing directive. Basically, I'd like to use the method:
hash $cookie_my_cookie_name consistent;
... if the cookie (...
- 125
0
votes
1
answer
336
views
HAProxy 1.5 - Show Server Name or IP Address in response while behind DNS
Basically exactly what the title is. I have haproxy fronting a server, and infront of that a DNS to provide a human readable name. I would like to setup haproxy to include either the responding ...
- 77
0
votes
0
answers
2k
views
nginx reverse proxy to Oracle ORDS/APEX - how are cookies set?
Using nginx to reverse proxy to Oracle's "Always Free Tier" in Autonomous Database which provides ORDS which connects to APEX in the database. Mainly because Oracle doesn't support vanity ...
- 195
1
vote
1
answer
3k
views
Removing one cookie in proxy_pass of nginx
I'm trying to proxy_pass the whole request coming to my nginx to certain base URL to another upstream server removing server cookie. All other cookies, HTTP headers, the URL itself should be kept as ...
- 49
1
vote
1
answer
233
views
nginx http_push_preload and forwarding headers/cookies
I'm experimenting with pushing redirects using nginxs http2_push_preload on; directive.
In my application I detect redirects and add a Link: <location>; as=document; rel=preload header that ...
- 121
0
votes
1
answer
125
views
503 service unavailable while trying to login through wordpress
I have no access to my site on Wordpress from any laptop browser I have.
But it's possible to log in from other computers and I can access it from my phone.
In the laptop browser, I type aomy.nl/wp-...
0
votes
0
answers
211
views
Intercept location response to extract a cookie
I'm working on a project using nginx as reverse proxy and I'm trying to intercept a response from a specific location in order to extract a cookie and save it in a database.
I'm able to listen a ...
- 51
2
votes
1
answer
6k
views
Nginx preventing cookie from being sent from front to back end
I'm running a Golang back end on port 12345 and an Angular front end on port 8080. They communicate via websockets on a page called /consultation. When I open the firewall for both ports and have them ...
- 141
4
votes
1
answer
39k
views
Nginx proxy cookies not set
Here's my situation, I have a Rails 4 app that can be accessed by multiple domains, depending on the domain, the content changes.
Say the main domain is domain1 and all the other domains just use ...
- 232
7
votes
2
answers
694
views
How cookies work with non persistance load balencers
We have a Drupal application that uses sso to log users in.
We are using AWS classic load balancers (ELB), AWS is telling us that there is no session persistence on the ELB.
What I am trying to ...
- 414
0
votes
1
answer
751
views
Cookies present in the Chrome inspector are missing on the server
I have a setup comprised by 2 nginx instances connected one after the other. The first one is on one server (A) and the second one is on a second server (B):
user <-> nginx (A) <-> nginx (...
- 145
1
vote
0
answers
3k
views
Cookie Does Not Contain The secure and HTTPOnly Attribute
While running a Qualys Vulnerability Scan on a website which is being developed I got the following vulnerability:
Cookie Does Not Contain The "HTTPOnly" Attribute
Cookie Does Not Contain The "...
5
votes
1
answer
6k
views
Configuring multiple ProxyPassReverseCookiePath in Apache HTTP
I have a server with an Apache reverse proxy in front. The server machine contains 2 web applications running under:
localhost:8000/app and exposed as my.url.com/app1
localhost:8001/app and exposed ...
- 211
0
votes
0
answers
458
views
Blocking Google Feud
I'm trying to block Google Feud on a Firewall/Proxy (Transparent Mode), but it seems a difficult task to accomplish..
I have some configurations for this task:
ACL rules, blocking the access to the ...
- 1,623
0
votes
0
answers
1k
views
How to preserve cookie in HAProxy?
We currently have a the following setup:
[Client] -> [haproxy] -> [Nginx] -> [App Servers]
Nginx currently sets the cookie affinity to the app servers by setting a cookie i.e: public-client....
- 343
1
vote
1
answer
4k
views
extract query string param value in RewriteRule
I'm writing an apache 2.4 Rewrite rule in order to remove a query string param and create a cookie from its value.
eg:
http://example.com/?param1=value1&my_param=my_value¶m2=value2
to
...
- 121
0
votes
1
answer
400
views
Transform Apache Cookie logs to json with rsyslogd
I am logging cookie headers, some cookies may have due date, some others not, the same is tru for other cookie parameters, I need to implement a centrilaized logging, so before sending those to ...
- 115
2
votes
0
answers
1k
views
Cookies aren't being set/overwritten through nginx reverse proxy
For some reason, when I'm proxying my API request through an nginx reverse proxy, my cookies aren't being overwritten with the new values. I've tried adding the following to my nginx config, but I'm ...
- 121
0
votes
0
answers
305
views
Website access control via HTTP_REFER and COOKIE
I've made a webform on my own domain, outside the domain of my company. The form is made for employees of the company. When an employee wants to get to the form he has to login to the company website ...
- 101
3
votes
1
answer
16k
views
What is the difference between http_cookie and cookie_name in Nginx?
I want to add remote ip as a Cookie in Nginx, so that it can be passed on to AWS Load Balancer for Load balancer stickiness.
location / {
proxy_set_header Cookie "$http_cookie; ip=$remote_addr";
...
0
votes
0
answers
1k
views
Apache on Windows, Cookie w/ PHP Sessions Bug
At work we use a Win7 box to run our site. I know not really an appropriate server OS, but it was working just fine until we upgraded to PHP 7.1 and Apache 2.4 from PHP 5.2 and Apache 2.2.
Now ...
- 101
1
vote
1
answer
4k
views
Information about securing cookies with path attribute with respect to ASP.NET and IIS
I need help with securing cookies for my web application. It's deployed in IIS and is built in ASP.NET MVC.
These are the things that I need to get more information about
Is the Sites folder in IIS ...
- 113
3
votes
2
answers
3k
views
Nginx reverse proxy - remove "Secure" from cookies
For the sake of development I need to make NGINX drop "Secure" flag from cookie headers.
Set-Cookie:XSRF-TOKEN=zzzzzzzz-zzzz-zzzz-zzzz-zzzzzzz; Path=/; Secure
should become
Set-Cookie:XSRF-TOKEN=...
- 140
11
votes
3
answers
57k
views
Add samesite to cookies using Nginx as reverse proxy
With Nginx as reverse proxy, how do you add samesite=strict or samesite=lax to cookies?
- 213
1
vote
0
answers
2k
views
NGINX stripping domain in Set-Cookie header
Problem: domains are stripped from the set-cookie header.
httpoonly, expires, and path are all correct.
My location block:
location ~* ^/path {
proxy_pass http://nodeserver; # this is an upstream ...
- 143
0
votes
0
answers
516
views
Delete cookies from specific domain
I've been asked if it's possible to delete cookies in IE from specific domains via GPO? I've googled around and I'm sure this is possible but haven't been able to find anything about deleting cookies ...
- 605
1
vote
1
answer
3k
views
Failed to using powershell to get cookies
I am writing a powershell script to mimic a login process,and then catch data from web pages. I failed at the very begainning, I can't get into the login pages at all after I set up cookies.
Here is ...
- 269
1
vote
0
answers
2k
views
400 bad request on nginx proxy to tomcat but not on static content
We have been running into an issue when our cookies reach a certain size (over 7k) where nginx is returning 400 Bad Request with an empty response when proxying to our tomcat. This doesn't happen when ...
- 11
0
votes
2
answers
9k
views
Varnish cache responese with "Set-Cookie" header
I have a page which sends a "Set-Cookie" header for something like the language depending on the URL. The thing is this page will get a fairly high hit rate but it's not an option right now to strip ...
- 218
1
vote
1
answer
2k
views
stickysession not work fine in apache and two Glassfish Instances
I have two application that run in two Glassfish Instances, i configure my apache to use sticky session like so :
ProxyPass / balancer://Appcluster/ stickysession=JSESSIONID
But this not work 100% ...
- 111
1
vote
1
answer
3k
views
How does the zScaler cookie authentication work?
I'm implementing a web filter for my organization and I'm considering zScaler. I do not want to use proxy PAC file. I just got off the phone with zScaler's sales and they claim that they can ...
- 13
1
vote
0
answers
1k
views
pass cookie from http response via nginx reverse proxy
I have a problem with passing my cookie when I'm running an nginx as a proxy (in a docker container). Here is my configuration of my nginx proxy:
location /test {
proxy_pass http://...
- 203
0
votes
1
answer
1k
views
Modsecurity cookie match [closed]
I run a small webhosting service (CPanel + ModSecurity) and I personnaly host few laravel projects on it. I noticed that when I (or anyone) visit multiple pages quickly (one after the other), at some ...
- 141