Hi, On Thu, Nov 17, 2022 at 12:58:31PM -0500, blason wrote: > Nothing interesting as such however below is the curl output from nginx > server > > curl -I https://xxx.xxxx.xxx:8081/neutrino-sso-web > HTTP/1.1 302 Found > Date: Thu, 17 Nov 2022 17:57:10 GMT > Server: JBoss-EAP/7 > Strict-Transport-Security: max-age=63072000; includeSubDomains; preload > X-Powered-By: Undertow/1 > X-Powered-By: JSP/2.3 > X-Frame-Options: DENY > Location: https://xxxx.xxxx.xxxx:8081/neutrino-sso-web/login > Strict-Transport-Security: max-age=15768000 ; includeSubDomains > X-Content-Type-Options: nosniff > Content-Type: text/html; charset=UTF-8 > Set-Cookie: > JSESSIONID="nhsQqmnRHPaYQMdNjhkMIQ7HL6vo-fWCrPTfC8Zd.master:aeon"; > Version=1; Path=/neutrino-sso-web; Secure; > HttpOnly;HttpOnly;Secure;SameSite=strict > Access-Control-Allow-Origin: *
So, the request and response both look good, 302 is the valid response code from the upstream I believe, and that redirects to a login page. No issue. -- Sergey A. Osokin _______________________________________________ nginx mailing list -- nginx@nginx.org To unsubscribe send an email to nginx-le...@nginx.org