You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently the path prefix is derived from the X-Forwarded-Prefix HTTP header of the first request only and then applied to every subsequent request (see here).
The header may be specified by a reverse-proxy that exposes the web app under a different path.
However, applying the prefix of the first request to all requests is a problem because:
when reconfiguring the reverse-proxy with a different prefix the change is not applied, unless the web app is restarted.
it does not allow using the web app with multiple path prefixes simultaneously (e.g. when letting a reverse-proxy expose it with a path prefix while still letting another client (such as a healthcheck) access the web app directly, bypassing the reverse-proxy).
Thus, I suggest to derive the path prefix on a per-request basis and to not store the result as global application state.
The text was updated successfully, but these errors were encountered:
mgoltzsche
changed the title
Don't store the path prefix globally but evaluate it on a per-request basis
Don't store the path prefix as global app state but derive it on a per-request basis
Dec 27, 2024
Currently the path prefix is derived from the
X-Forwarded-Prefix
HTTP header of the first request only and then applied to every subsequent request (see here).The header may be specified by a reverse-proxy that exposes the web app under a different path.
However, applying the prefix of the first request to all requests is a problem because:
Thus, I suggest to derive the path prefix on a per-request basis and to not store the result as global application state.
Relates to:
The text was updated successfully, but these errors were encountered: