hacklab/T-HUB
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

edge: strip Accept-Encoding on the oCIS signin restyle location

Browse source 
oCIS compresses the idp sign-in HTML, and sub_filter cannot rewrite
compressed bodies. Works on the grey/failover path where the edge serves
files; in tunnel mode files bypasses the edge entirely (tunnel ingress
points straight at oCIS), so the permanent brand fix remains the Hub OIDC
issuer (docs/design/2026-10-13-files-oidc-sso.md).
This commit is contained in:
glass beadian 2026-10-13 17:07:50 +00:00
parent 9d42d61f6b
commit 3463b0a4f4
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
infra/occupymedia/edge/nginx.conf
View file

@ -248,6 +248,8 @@ http {
proxy_pass http://192.168.13.210:9200; proxy_pass http://192.168.13.210:9200;
proxy_http_version 1.1; proxy_http_version 1.1;
proxy_set_header Host $host; proxy_set_header Host $host;
# sub_filter cannot rewrite upstream-gzipped bodies; force plain HTML.
proxy_set_header Accept-Encoding "";
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https; proxy_set_header X-Forwarded-Proto https;
proxy_set_header Upgrade $http_upgrade; proxy_set_header Upgrade $http_upgrade;