diff options
| author | Jan Pazdziora <jpazdziora@redhat.com> | 2014-01-17 14:41:19 +0800 |
|---|---|---|
| committer | Jan Pazdziora <jpazdziora@redhat.com> | 2016-01-20 09:03:10 +0100 |
| commit | 5a869128a4371445471bcd86392680c096240d2c (patch) | |
| tree | 56a8d2f7eaa16478070880e0ccb5d22b3e145b01 /README | |
| parent | cdaaa88a4c9b516080555aa8b9f9df65ad0b5b90 (diff) | |
| download | CGI-sessions-proxy-setup.tar.gz CGI-sessions-proxy-setup.tar.xz CGI-sessions-proxy-setup.zip | |
Process incoming HTTP headers in application on backend.proxy-setup
Caution: make sure the application is only accessible via a proxy
which will properly clear and set these headers, so that the end user
cannot gain extra privileges.
Diffstat (limited to 'README')
| -rw-r--r-- | README | 12 |
1 files changed, 9 insertions, 3 deletions
@@ -4,11 +4,17 @@ with login form and logout page. It is intentionally written in simple perl with the CGI.pm module only used to parse POST values and HTTP cookie values, to make it easy to tweak and explore. -If the script is placed to /var/www/app/app.cgi, the following Apache -httpd directive will enable it on http://server-name/application +If the script is placed to /var/www/backend/app.cgi, the following Apache +httpd directive will enable it on backend http://server-name/bapplication location: - ScriptAlias /application /var/www/app/app.cgi + ScriptAlias /bapplication /var/www/backend/app.cgi + +Then on the frontend server + + ProxyPass /application http://server-name/bapplication + +will ensure redirection to the backend server. The script uses HTTP cookie the-test-cookie to either have value ok:login to mean user login is logged in, or value xx to mean the user |