Skip to content
This repository was archived by the owner on May 27, 2024. It is now read-only.

Plugin does not respect header case #52

@andymelichar

Description

@andymelichar

Problem description

The SSO plugin isn't respecting the case of the headers - all headers appear to be pulled into the plugin as lowercase. If nginx is sending Remote-User, the plugin interprets it as remote-user which can be very confusing for people trying to get the plugin to work properly.

Steps to reproduce the problem

  1. Set up Graylog behind nginx as a reverse proxy
  2. Set up nginx to return the header "Remote-User" to Graylog
    proxy_set_header Remote-User $email;
  3. Install SSO plugin into Graylog
  4. Set up SSO and configure it to use "Remote-User" as the username header (matching case of the nginx header)
  5. SSO plugin will not see the "Remote-User" header and SSO will not properly function
  6. Change SSO to look for "remote-user" (does not match the case of the nginx header) and it will work successfully

Plugin should either lowercase all configured headers before attempting to match them, or should not lowercase the headers being passed into it in the first place.

Environment

  • Graylog Version: 3.1.3
  • Plugin Version: 3.1.0
  • Elasticsearch Version: 6.8.5
  • MongoDB Version: 4.0.13
  • Operating System: CentOS Linux release 7.6.1810 (Core)
  • Browser version: Firefox 70.0.1
  • nginx version: 1.16.1

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions