Skip to content
This repository has been archived by the owner on May 27, 2024. It is now read-only.

Plugin does not respect header case #52

Open
andymelichar opened this issue Dec 3, 2019 · 0 comments
Open

Plugin does not respect header case #52

andymelichar opened this issue Dec 3, 2019 · 0 comments

Comments

@andymelichar
Copy link

Problem description

The SSO plugin isn't respecting the case of the headers - all headers appear to be pulled into the plugin as lowercase. If nginx is sending Remote-User, the plugin interprets it as remote-user which can be very confusing for people trying to get the plugin to work properly.

Steps to reproduce the problem

  1. Set up Graylog behind nginx as a reverse proxy
  2. Set up nginx to return the header "Remote-User" to Graylog
    proxy_set_header Remote-User $email;
  3. Install SSO plugin into Graylog
  4. Set up SSO and configure it to use "Remote-User" as the username header (matching case of the nginx header)
  5. SSO plugin will not see the "Remote-User" header and SSO will not properly function
  6. Change SSO to look for "remote-user" (does not match the case of the nginx header) and it will work successfully

Plugin should either lowercase all configured headers before attempting to match them, or should not lowercase the headers being passed into it in the first place.

Environment

  • Graylog Version: 3.1.3
  • Plugin Version: 3.1.0
  • Elasticsearch Version: 6.8.5
  • MongoDB Version: 4.0.13
  • Operating System: CentOS Linux release 7.6.1810 (Core)
  • Browser version: Firefox 70.0.1
  • nginx version: 1.16.1
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants