Nginx proxy_pass block client header and force nginx to use custom header

Question

I have a nginx config where I take the cookie to use with this config;

        proxy_set_header Authorization $token;

But if the client put in custom header Authorization this overwrites as I see it the config one. Is it possible to block the client header while using proxy and use my customised header based on variable?

Tarun Lalwani · Accepted Answer · 2017-10-19 15:56:00Z

1

Yes you can do that. You can use

proxy_hide_header "Authorization";
proxy_set_header Authorization $token;

Or if you want no headers coming from client then you can do below

proxy_pass_request_headers off;

answered Oct 19, 2017 at 15:56

Tarun Lalwani

147k11 gold badges217 silver badges278 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Daniel Roast Over a year ago

Thanks, I will try this out.

dubek Over a year ago

According to the proxy_hide_header documentation, this directive is used to block response headers from being sent back to the client, which is not the case the OP asked about.

Tarun Lalwani Over a year ago

@dubek, thanks for pointing that out, seems I mis-judged the usage. And since I never got feedback from OP there was no chance to improve the answer. Did the other approach proxy_pass_request_headers off; work for you?

Collectives™ on Stack Overflow

Nginx proxy_pass block client header and force nginx to use custom header

1 Answer 1

3 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Related