-
Notifications
You must be signed in to change notification settings - Fork 189
Open
Description
Describe the bug
When making a request to the internal auth URL for the /redeem endpoint, the Host header for the request is being set to be the external URL. This is causing issues with routing tools like Istio, where the Host header will be used for routing decisions and should represent the intended destination (in this case the internal auth hostname).
sso/internal/proxy/providers/sso.go
Line 92 in 12dc0fd
| req.Host = p.ProviderData.ProviderURL.Host |
Expected behavior
Host header should should be either not overwritten or represent the internal auth endpoint.
version: 1.2.0
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels