apollo portal注销后自动跳转到其他端口地址

[Fabriceli]

• 我已经检查过discussions
• 我已经搜索过issues
• 我已经仔细检查过FAQ

描述bug

简洁明了地描述一下bug

复现

通过如下步骤可以复现：

1. 注销用户

期望

简介明了地描述你希望正常情况下应该发生什么

登录或者注销后，自动跳转到另外一个端口号的地址

额外的细节和日志

通过helm-chart安装部署的

• 版本：2.3.0
• 错误日志
• 配置：
• 平台和操作系统

[dosubot]

Hello @Fabriceli! I'm here to help you with any bugs, questions, or contributions you have regarding Apollo. I'm an expert in solving technical issues and providing support while you wait for a human maintainer. Let me know how I can assist you!

I found some relevant information regarding redirection issues in Apollo Portal. The default behavior of Apollo Portal after logout is to redirect the user to the root URL ("/") ^[1]. However, when using a reverse proxy like nginx, incorrect redirection can occur if the proxy settings are not configured properly. It's important to ensure that the proxy_set_header host is set to $http_host and that the Apollo Portal is configured to parse header information from the reverse proxy by adding server.forward-headers-strategy=framework in the application-github.properties file or setting the environment variable SERVER_FORWARD_HEADERS_STRATEGY=framework ^[2][3].

Additionally, when deploying via Helm charts, the default port configuration for Apollo Portal is set to 8070. Ensure that your Helm chart configurations align with your network setup to avoid unexpected port redirections ^[4][5].

If you are experiencing redirection to an unexpected port (like 9182), it might be due to misconfigurations in your reverse proxy or Helm chart settings. Double-check these configurations to ensure they match your intended setup.

To continue talking to Dosu, mention @dosu.

---

^{Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Other}

[nobodyiam]

没太看明白问题是啥？

[Fabriceli]

没太看明白问题是啥？

部署后，logout或者登录会自动跳转到带端口的地址

[nobodyiam]

ingress 是用的 nginx 吗？看着像是 @dosubot 提到的这个问题

However, when using a reverse proxy like nginx, incorrect redirection can occur if the proxy settings are not configured properly. It's important to ensure that the proxy_set_header host is set to $http_host and that the Apollo Portal is configured to parse header information from the reverse proxy by adding server.forward-headers-strategy=framework in the application-github.properties file or setting the environment variable SERVER_FORWARD_HEADERS_STRATEGY=framework [2][3].

[dosubot]

要解决使用 nginx 作为 ingress 时 Apollo Portal 在注销或登录后自动跳转到带端口地址的问题，请确保您的 nginx 配置正确处理了头信息和重定向。具体来说，在 proxy_set_header 指令中使用 $http_host 而不是 $host 以防止错误的端口重定向：

server {
    listen 80 default_server;

    location / {
        # Redirect all requests on port 80 to https
        return 301 https://$http_host$request_uri;
    }
}
server {
    listen 443 ssl http2;
    server_name xxx;

    ssl_certificate /etc/nginx/ssl/xxx.crt;
    ssl_certificate_key /etc/nginx/ssl/xxx.key;
    # ... other ssl configurations

    location / {
        proxy_pass http://apollo-portal-dev:8070;
        proxy_set_header x-real-ip $remote_addr;
        proxy_set_header x-forwarded-for $proxy_add_x_forwarded_for;
        # Use $http_host to ensure correct port handling
        proxy_set_header host $http_host;
        proxy_set_header x-forwarded-proto $scheme;
        proxy_http_version 1.1;
    }
}

此外，确保您的 application-oidc.yml 包含以下配置，以正确解析反向代理头信息：

server:
  forward-headers-strategy: framework

这些配置应有助于解决重定向问题，确保在头信息中使用正确的主机和端口^[1].

To continue talking to Dosu, mention @dosu.

---

^{Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Bug Report | Other}

[Fabriceli]

ingress 是用的 nginx 吗？看着像是 @dosubot 提到的这个问题

However, when using a reverse proxy like nginx, incorrect redirection can occur if the proxy settings are not configured properly. It's important to ensure that the proxy_set_header host is set to $http_host and that the Apollo Portal is configured to parse header information from the reverse proxy by adding server.forward-headers-strategy=framework in the application-github.properties file or setting the environment variable SERVER_FORWARD_HEADERS_STRATEGY=framework [2][3].

ingress 用了apache apisix

[dosubot]

Hey @Fabriceli! It looks like you're diving into some specifics about using Apache APISIX with Apollo. I'm here to help with bugs, technical questions, and engineering knowledge, but this one's a bit outside my wheelhouse. If you think I should be able to tackle this, feel free to reach out to the Dosu Team. They'll know what to do!

To continue talking to Dosu, mention @dosu.

---

^{Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Bug Report | Other}

[Fabriceli]

portal 里面加上了这个环境变量，在容器内业看到这个变量，貌似没有生效

# environment variables passed to the container, e.g. JAVA_OPTS
env:
  SERVER_FORWARD_HEADERS_STRATEGY: framework

[Fabriceli]

这个有什么指导性的方向可以修复这个问题吗？

[nobodyiam]

可以分别在 apisix 以及 apollo portal 实例上开启 tcpdump 看下是哪里改写了 url

[stale]

This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in 7 days unless it is tagged "help wanted" or other activity occurs. Thank you for your contributions.

[stale]

This issue has been automatically closed because it has not had activity in the last 7 days. If this issue is still valid, please ping a maintainer and ask them to label it as "help wanted". Thank you for your contributions.