带有域掩码的Cloud Foundry中的Spring安全登录问题

时间:2014-12-08 14:13:03

标签: spring-security cloudfoundry cloudflare

尝试通过Safari登录Web应用程序时遇到问题。每次尝试都会将我重定向回登录页面。使用Chrome和Firefox登录就可以了。

上述问题仅发生在我通过屏蔽通过自定义域访问网站时。如果我使用实际的域mydomain.cfapps.io`,问题就会消失。

更新

没有域掩码显示的标题

Request URL:https://mydomain.cfapps.io/admin/dashboard
Request Method:GET
Status Code:200 OK
Request Headers
 Origin: https://mydomain.cfapps.io
 Accept-Encoding: gzip, deflate
 Accept-Language: en-US
 User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/534.57.2 (KHTML, like Gecko)  Version/5.1.7 Safari/534.57.2
 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
 Referer: https://mydomain.cfapps.io/login
Response Headers
 Date: Mon, 08 Dec 2014 15:39:28 GMT
 Transfer-Encoding: Identity
 X-Cf-Requestid: 7ea5df14-c3c9-4388-50c0-6b3ace496a91
 Connection: keep-alive
 Server: Apache-Coyote/1.1
 Content-Language: en-US
 Content-Type: text/html;charset=ISO-8859-1

并使用域掩码

Request URL:https://mydomain.cfapps.io/admin/dashboard
Request Method:GET
Status Code:302 Found
Request
 Origin: https://mydomain.cfapps.io
 Accept-Encoding: gzip, deflate
 Accept-Language: en-US
 User-Agent: Mozilla/5.0 (Windows NT 6.1) AppleWebKit/534.57.2 (KHTML, like Gecko)  Version/5.1.7 Safari/534.57.2
 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
 Referer: https://mydomain.cfapps.io/login
Response Headers
 Date: Mon, 08 Dec 2014 15:44:05 GMT
 X-Cf-Requestid: cd11f2b8-6de2-4d15-7080-30ebc46cf84f
 Connection: keep-alive
 Content-Length: 0
 Server: Apache-Coyote/1.1
 Content-Type: text/plain; charset=utf-8
 Location: https://mydomain.cfapps.io/login
 Set-Cookie:   __VCAP_ID__=ff76fe69e56d4e329a638d5e8aa7fd7048f6dfc82bc5474882987e4dae5b66f8; Path=/; HttpOnly, JSESSIONID=D0015361361D1E013C47AF0D0D110E91; Path=/; Secure; HttpOnly

我发现响应标头上的差异很小。这可能是原因吗?知道可能导致这种情况的原因吗?

UPDATE2

我也在使用CloudFlare为我的域启用SSL,因此我有以下CNAME

www is an alias of mydomain.com

我认为此问题是由于Safari对跨域Cookie的限制。但是我不知道如何解决这个问题。

0 个答案:

没有答案