2

The problem is not the order of execution - the directives are being executed in the order shown - but an issue with variable scope and cookie setting. The environment variables you set here are not going to be available to the target server, since this is a different scope. The cookie you are "setting" will not be available to your script in the ...


1

If I understood you correctly "endpoint" means the browser client? ("endpoint" usually means a web service endpoint, not the service consumer...) "Classic" HTTPS would not even allow the scenario you wish to happen. The hostname gets translated via DNS into ip:port(443) of the webserver and then TLS happens, which in early days ...


Only top voted, non community-wiki answers of a minimum length are eligible