Questions tagged [cookies]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
-1
votes
0answers
40 views

cookie is lost on refresh using nginx as proxy_reverse. I like the cookie and would like to keep it set in the browser

I'm new to Nginx and Ubuntu - have been with windows server for over a decade and this is my first try to use ubuntu and Nginx so feel free to correct any wrong assumption I write here :) My setup: I ...
0
votes
0answers
27 views

Magento 2 Varnish caching session from another user - add to cart

When I add an item to cart it will also show a second item, I have previously added from a different device. If I bypass varnish cache, cart seems to work ok. Guess I am missing a setting about ...
0
votes
0answers
70 views

How can I remove all cookies except session cookies from nginx responses?

I'm serving several WordPress sites via nginx & PHP-FPM. Sometimes plugins randomly set cookies that are unwanted, and that do not have consent. For those, and for privacy in general, I want to ...
0
votes
0answers
19 views

asp.net Secure Cookies behind load balancer

This is a hybrid MVC/webforms asp.net application using framework 4.8, forms authentication and Membership. I need to implement secure cookies. The web site is behind a Coyote load balancer which I ...
0
votes
0answers
11 views

How to get nginx to strip cookies except for an allow list?

I'm trying to host sites that use things like WordPress, using nginx as a reverse proxy for PHP-FPM. Often these systems will set all kinds of annoying cookies that are unnecessary and/or the site ...
0
votes
0answers
50 views

Change path of cookie using Squid

I am using squid reverse proxy on Windows. I already tried using it for http and https and it is working fine. However, this time, I want to try changing the path of cookie so that same JSESSIONID ...
0
votes
0answers
18 views

How to Effectively delete cookies on Edge Legacy

I have an issue with cookie management in Edge Legacy vs Edge Chromium. If i log in to -say - my outlook account, then Ctrl shift delete and choose to delete my cookies: On Chromium Edge, after a ...
0
votes
1answer
21 views

Nginx fastcgi_cache and kokos-analytics wordpress plugin

I have setup nginx to cache page requests as described in this tutorial. There for looged in users the caching is disabled in this tutorial by an if request as: # Don't use the cache for cookied ...
1
vote
1answer
56 views

Where does Chrome fetch my identity from after having deleted cookies?

I'm trying to figure out where does Google CHrome fetch my identity from when authenticating to an Identity Provider (SAML with certificate authentication) What I have tried : Delete all cookies, ...
1
vote
1answer
38 views

Enable cross site functionality for a subset of my application

A part of the web application I'm working on is integrated with another web application that I do not have control over. This integration has stopped working with the recent enforcement of the ...
0
votes
1answer
385 views

NGINX load balancing hash: use cookie value if present, ip_hash if not

I'm trying to figure out how to do some if-else logic in NGINX's upstream load-balancing directive. Basically, I'd like to use the method: hash $cookie_my_cookie_name consistent; ... if the cookie (...
0
votes
0answers
45 views

Cookie not being passed to HTTP_COOKIE environment variable

A cookie that is clearly set in the browser, is not being passed to the back end by Apache in the HTTP_COOKIE environment variable. I can see other cookies that are being passed. I have logged ...
0
votes
1answer
53 views

HAProxy 1.5 - Show Server Name or IP Address in response while behind DNS

Basically exactly what the title is. I have haproxy fronting a server, and infront of that a DNS to provide a human readable name. I would like to setup haproxy to include either the responding ...
0
votes
0answers
17 views

Https createServer, load cookie and load clients index.html

I am trying to setup a login system on a website. In order to do that, I have to load http only cookies. In order to load them, I have to send them back to the client via the response object in the ...
0
votes
0answers
526 views

nginx reverse proxy to Oracle ORDS/APEX - how are cookies set?

Using nginx to reverse proxy to Oracle's "Always Free Tier" in Autonomous Database which provides ORDS which connects to APEX in the database. Mainly because Oracle doesn't support vanity ...
1
vote
1answer
107 views

Removing one cookie in proxy_pass of nginx

I'm trying to proxy_pass the whole request coming to my nginx to certain base URL to another upstream server removing server cookie. All other cookies, HTTP headers, the URL itself should be kept as ...
0
votes
1answer
86 views

nginx http_push_preload and forwarding headers/cookies

I'm experimenting with pushing redirects using nginxs http2_push_preload on; directive. In my application I detect redirects and add a Link: <location>; as=document; rel=preload header that ...
0
votes
1answer
48 views

503 service unavailable while trying to login through wordpress

I have no access to my site on Wordpress from any laptop browser I have. But it's possible to log in from other computers and I can access it from my phone. In the laptop browser, I type aomy.nl/wp-...
0
votes
0answers
141 views

Intercept location response to extract a cookie

I'm working on a project using nginx as reverse proxy and I'm trying to intercept a response from a specific location in order to extract a cookie and save it in a database. I'm able to listen a ...
2
votes
1answer
2k views

Nginx preventing cookie from being sent from front to back end

I'm running a Golang back end on port 12345 and an Angular front end on port 8080. They communicate via websockets on a page called /consultation. When I open the firewall for both ports and have them ...
4
votes
1answer
25k views

Nginx proxy cookies not set

Here's my situation, I have a Rails 4 app that can be accessed by multiple domains, depending on the domain, the content changes. Say the main domain is domain1 and all the other domains just use ...
7
votes
2answers
158 views

How cookies work with non persistance load balencers

We have a Drupal application that uses sso to log users in. We are using AWS classic load balancers (ELB), AWS is telling us that there is no session persistence on the ELB. What I am trying to ...
0
votes
1answer
234 views

Cookies present in the Chrome inspector are missing on the server

I have a setup comprised by 2 nginx instances connected one after the other. The first one is on one server (A) and the second one is on a second server (B): user <-> nginx (A) <-> nginx (...
1
vote
0answers
2k views

Cookie Does Not Contain The secure and HTTPOnly Attribute

While running a Qualys Vulnerability Scan on a website which is being developed I got the following vulnerability: Cookie Does Not Contain The "HTTPOnly" Attribute Cookie Does Not Contain The "...
3
votes
1answer
4k views

Configuring multiple ProxyPassReverseCookiePath in Apache HTTP

I have a server with an Apache reverse proxy in front. The server machine contains 2 web applications running under: localhost:8000/app and exposed as my.url.com/app1 localhost:8001/app and exposed ...
0
votes
0answers
283 views

Blocking Google Feud

I'm trying to block Google Feud on a Firewall/Proxy (Transparent Mode), but it seems a difficult task to accomplish.. I have some configurations for this task: ACL rules, blocking the access to the ...
0
votes
0answers
799 views

How to preserve cookie in HAProxy?

We currently have a the following setup: [Client] -> [haproxy] -> [Nginx] -> [App Servers] Nginx currently sets the cookie affinity to the app servers by setting a cookie i.e: public-client....
1
vote
1answer
3k views

extract query string param value in RewriteRule

I'm writing an apache 2.4 Rewrite rule in order to remove a query string param and create a cookie from its value. eg: http://example.com/?param1=value1&my_param=my_value&param2=value2 to ...
0
votes
1answer
302 views

Transform Apache Cookie logs to json with rsyslogd

I am logging cookie headers, some cookies may have due date, some others not, the same is tru for other cookie parameters, I need to implement a centrilaized logging, so before sending those to ...
2
votes
0answers
1k views

Cookies aren't being set/overwritten through nginx reverse proxy

For some reason, when I'm proxying my API request through an nginx reverse proxy, my cookies aren't being overwritten with the new values. I've tried adding the following to my nginx config, but I'm ...
0
votes
0answers
246 views

Website access control via HTTP_REFER and COOKIE

I've made a webform on my own domain, outside the domain of my company. The form is made for employees of the company. When an employee wants to get to the form he has to login to the company website ...
3
votes
1answer
11k views

What is the difference between http_cookie and cookie_name in Nginx?

I want to add remote ip as a Cookie in Nginx, so that it can be passed on to AWS Load Balancer for Load balancer stickiness. location / { proxy_set_header Cookie "$http_cookie; ip=$remote_addr"; ...
0
votes
0answers
991 views

Apache on Windows, Cookie w/ PHP Sessions Bug

At work we use a Win7 box to run our site. I know not really an appropriate server OS, but it was working just fine until we upgraded to PHP 7.1 and Apache 2.4 from PHP 5.2 and Apache 2.2. Now ...
1
vote
1answer
3k views

Information about securing cookies with path attribute with respect to ASP.NET and IIS

I need help with securing cookies for my web application. It's deployed in IIS and is built in ASP.NET MVC. These are the things that I need to get more information about Is the Sites folder in IIS ...
3
votes
1answer
2k views

Nginx reverse proxy - remove “Secure” from cookies

For the sake of development I need to make NGINX drop "Secure" flag from cookie headers. Set-Cookie:XSRF-TOKEN=zzzzzzzz-zzzz-zzzz-zzzz-zzzzzzz; Path=/; Secure should become Set-Cookie:XSRF-TOKEN=...
8
votes
2answers
32k views

Add samesite to cookies using Nginx as reverse proxy

With Nginx as reverse proxy, how do you add samesite=strict or samesite=lax to cookies?
1
vote
0answers
2k views

NGINX stripping domain in Set-Cookie header

Problem: domains are stripped from the set-cookie header. httpoonly, expires, and path are all correct. My location block: location ~* ^/path { proxy_pass http://nodeserver; # this is an upstream ...
0
votes
0answers
408 views

Delete cookies from specific domain

I've been asked if it's possible to delete cookies in IE from specific domains via GPO? I've googled around and I'm sure this is possible but haven't been able to find anything about deleting cookies ...
1
vote
1answer
2k views

Failed to using powershell to get cookies

I am writing a powershell script to mimic a login process,and then catch data from web pages. I failed at the very begainning, I can't get into the login pages at all after I set up cookies. Here is ...
1
vote
0answers
1k views

400 bad request on nginx proxy to tomcat but not on static content

We have been running into an issue when our cookies reach a certain size (over 7k) where nginx is returning 400 Bad Request with an empty response when proxying to our tomcat. This doesn't happen when ...
0
votes
2answers
7k views

Varnish cache responese with “Set-Cookie” header

I have a page which sends a "Set-Cookie" header for something like the language depending on the URL. The thing is this page will get a fairly high hit rate but it's not an option right now to strip ...
1
vote
1answer
1k views

stickysession not work fine in apache and two Glassfish Instances

I have two application that run in two Glassfish Instances, i configure my apache to use sticky session like so : ProxyPass / balancer://Appcluster/ stickysession=JSESSIONID But this not work 100% ...
1
vote
1answer
2k views

How does the zScaler cookie authentication work?

I'm implementing a web filter for my organization and I'm considering zScaler. I do not want to use proxy PAC file. I just got off the phone with zScaler's sales and they claim that they can ...
1
vote
0answers
1k views

pass cookie from http response via nginx reverse proxy

I have a problem with passing my cookie when I'm running an nginx as a proxy (in a docker container). Here is my configuration of my nginx proxy: location /test { proxy_pass http://...
0
votes
1answer
923 views

Modsecurity cookie match [closed]

I run a small webhosting service (CPanel + ModSecurity) and I personnaly host few laravel projects on it. I noticed that when I (or anyone) visit multiple pages quickly (one after the other), at some ...
1
vote
0answers
34 views

Server can't parse cookie

I noticed the following messages in my TJWS log. [Mon Oct 03 21:28:28 EDT 2016] TJWS: An exception in parsing cookies: id=die(pi());; user=assert java.lang.IllegalArgumentException: Cookie name "; ...
0
votes
0answers
445 views

Resolving duplicate cookie error log messages in Apache 2.4

Running Apache 2.4.7, our error logs are cluttered with messages like: [core:error] ... AH00011: ap_cookie: client submitted cookie 'PHPSESSID' more than once: ... We haven't been able to determine ...
1
vote
1answer
16k views

Set “Secure Flag” on Cookies for Only One (of many) Virtual Host on Apache

I'm hosting a number of sites on a single VPS (Debian Jessie, Apache 2.4). One of these sites forces HTTPS. On this and only this site, I would like to set the "Secure Flag" for cookies. I've found ...
2
votes
0answers
789 views

Cookie Secure Flag not persistent

I'm trying to implement a Secure flag for all cookies. I'm doing this via Headers. Here's how I did it: Header edit Set-Cookie (?i)^(.*)(;\s*secure)??((\s*;)?(.*)) "$1; Secure$3$4" It ...
0
votes
0answers
1k views

Adding CSRF token in to Cookies of Post request in Haproxy

My post request to UAA is missing CSRF value i.e. X-Uaa-Csrf=2QytIy. This is required for login in to cloud foundry UAA. This is problem is because of internet domain name /private domain name mapping ...