On Fri, Dec 03, 2021 at 09:02:29AM -0500, agomes wrote: Hi there,
> follow the command curl -v. Thanks for this. > > GET /app HTTP/1.1 > < HTTP/1.1 302 > < Location: /pwm/public/forgottenpasswordapp?stickyRedirectTest=key > < Set-Cookie: ID=3fajhL8QWt9TNKBTc8BQVdvqVxf7IZXOkwqt8unh; Path=/pwm/; > Secure; HttpOnly; SameSite=Strict So your upstream redirected to /pwm/public/forgottenpasswordapp?stickyRedirectTest=key and wanted to set some cookies with Path=/pwm/. And nginx passed those through to the client -- so your nginx logs will probably show the "normal" client making a request for /pwm/public/forgottenpasswordapp?stickyRedirectTest=key, which will get an error response because you don't have a file /var/www/pwm/public/forgottenpasswordapp. proxy_redirect can be used to change the first of those. proxy_cookie_path can be used to change the second, sort of. You did set "proxy_redirect default;", but that does not catch the no-host Location response in this case. So, I suggest: * use proxy_redirect /pwm/public/forgottenpasswordapp /app; and repeat the "curl"; you should see either "Location: /app?sticky..." or "Location: https://x.x.x.com/app?sticky...". If you do, then repeat the "curl" with the "?sticky..." part attached. I *suspect* that second request will indicate a "missing cookie" failure. You can then try to access /app in your browser, and see what that does -- if it also indicates the "missing cookie" failure, then you decide how to "fix" the cookies. If you are happy for the cookie to potentially be sent to anything on your x.x.x.com server, then proxy_cookie_path /pwm/ /; may work. Maybe "/app" and the end could work too -- it does depend on what else the upstream app might send. (The upstream app is entirely below /pwm/; the front-end version is not below /app/ (trailing slash); so it is not trivial to map between the two.) Good luck with it, f -- Francis Daly fran...@daoine.org _______________________________________________ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx