Geek asks and answers

OAuth proxy requests between consumer and provider

we have a problem with the oAuth 1.0a proxy with an intermediate proxy between the consumer (client) and the provider (oAuth server).

It basically looks something like this:

------------
| Consumer |
------------
      |
      V
------------
|  Proxy   |
------------
      |
      V
----------------
| oAuth Server |
----------------

The possible problem that we are thinking about is that when resending the HTTP request to our oAuth server, the Apache proxy server will set some request headers to different values ​​and when the request is signed on the oAuth server, the signatures will not match.

Do you know if the proxy can resend the request without any changes, so the signing will be valid in case of oAuth?

, , oAuth , , , , . , PHP - , . $_SERVER?

+3
1

, HTTP-, , HTTP HOST. OAuth, oAuth OAuth.

, , -, HOST, .

: , () HTTP- - , :

http://proxy.com/oauth/request

, proxy.com .

POST /oauth/request HTTP/1.1
Host: proxy.com

, , oAuth :

http://oursite.com/oauth/request

- , proxy.com HTTP-, , HOST, oursite.com

+1

More articles:


All Articles