Skip to content

Conversation

thomseddon
Copy link
Owner

Prior to this change, the request URI was only ever read from the X-Forwarded-Uri header which was only set when the container was accessed via the forwardauth middleware. As such, it was necessary to apply the treafik-forward-auth middleware to the treafik-forward-auth container when running auth host mode.

This is a quirk, unnecessary complexity and is a frequent source of configuration issues.

@subdavis
Copy link

This is an excellent change. I was intending to submit a PR to improve the docs with an explanation of this quirk because it tripped me up for about 30 minutes until I found this:

#158 (comment)

However, removing this requirement is awesome. Thank you!

@thomseddon
Copy link
Owner Author

Will be testing this in our clusters shortly

@thomseddon
Copy link
Owner Author

Tested in live environment, all good 👍

@thomseddon
Copy link
Owner Author

Docs+examples need to be updated as part of this change

Prior to this change, the request URI was only ever read from the
X-Forwarded-Uri header which was only set when the container was
accessed via the forwardauth middleware. As such, it was necessary
to apply the treafik-forward-auth middleware to the treafik-forward-auth
container when running auth host mode.
This is a quirk, unecessary complexity and is a frequent source of
configuration issues.
@thomseddon thomseddon force-pushed the fix/dont-require-self-middleware branch from 8c57d17 to acca1b8 Compare June 24, 2021 20:42
@thomseddon
Copy link
Owner Author

Docs and examples updated

@thomseddon thomseddon merged commit c4317b7 into master Jun 24, 2021
@thomseddon thomseddon deleted the fix/dont-require-self-middleware branch June 24, 2021 20:45
@trickv
Copy link

trickv commented Jan 21, 2023

👍 this made my head spin today as I was learning to use this app with an auth host - this patch or applying the middleware on the auth host sorted it out for me. Thanks!

mkska pushed a commit to mkska/traefik-forward-auth that referenced this pull request Aug 22, 2023
…ncy (thomseddon#217)

Prior to this change, the request URI was only ever read from the
X-Forwarded-Uri header which was only set when the container was
accessed via the forwardauth middleware. As such, it was necessary
to apply the treafik-forward-auth middleware to the treafik-forward-auth
container when running auth host mode.
This is a quirk, unnecessary complexity and is a frequent source of
configuration issues.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants