New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

FIX avoid redirection loop after auth behind reverse proxy #2116

Open

xiretsa wants to merge 1 commit into Piwigo:master from xiretsa:feature_remote_addr_session_hash_behind_reverse_proxy

+9 −3

xiretsa commented Feb 18, 2024

Hi,

When my Piwigo is behind a reverse proxy in k8s, after authentication, I have a loop between index and identification.

The issue comes from the use of REMOTE_ADDR to compute remote addr session hash.

So, if a header 'HTTP_X_FORWARDED_FOR' is set by a reverse proxy, we use the first element in this header instead of REMOTE_ADDR to compute the hash.

Bye.


          fix(session): avoid redirection loop after auth behind reverse proxy

aab4ae6

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment