Infrastructure/ansible
1
0
Fork 0
Code Issues Pull requests 6 Projects Releases Packages Wiki Activity Actions

proxies / ipa / ui: try and edit the referrer for new ipa

Browse source 
New ipa checks the referrer to avoid CSRF issues.
We need to have the proxy edit requests for the right internal hostname
for it to be able to work.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
This commit is contained in:
Kevin Fenzi 2024-01-24 15:19:14 -08:00
parent 5c50f89d73
commit 3996374ea0
1 changed files with 1 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

1
roles/httpd/reverseproxy/templates/reversepassproxy.00-ipa.conf
View file

@ -1,4 +1,5 @@
ProxyPassReverseCookieDomain ipa01{{env_suffix}}.iad2.fedoraproject.org id{{env_suffix}}.fedoraproject.org
RequestHeader edit Referer ^https://id\.fedoraproject\.org/ https://ipa01{{env_suffix}}.iad2.fedoraproject.org
ProxyPass {{ localpath }} {{ proxyurl }}{{remotepath}}
ProxyPassReverse {{ localpath }} {{ proxyurl }}{{remotepath}}