Need help in modifying the redirect_uri

shammira.pasha1 · 2020-03-02T14:40:57+00:00

How to check on the LUA whether the user uploaded the file or not, for example, when accessing the main page of the site, if the user accessed only / and unl...

Need help in modifying the redirect_uri

shammira.pasha1

Hi Team,

I am hitting the Nginx URL which has App engine URL as backend member. Nginx will redirect the request to App engine and then app engine respond back to Nginx. In the response from App engine there are few params which I would like to make changes.

Is there any way I can change the http response params. For example, in the below URL the param values are client_id, redirect_uri, response_type. I would like to change the redirect_uri to some other URL. Please let me know.

https://login.microsoftonline.com/5b973f9ILASHDIS77df-4bKASJDea0c70b8482c/oauth2/authorize?client_id=93ewrree-5536-411e-80ff-16ca95c84735&redirect_uri=https%3A%2F%2Finfosec.puzzles.sbp.eyclienthub.com%2Fsignin-oidc&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=637182989648068834.NjRlZTQ5YjQtYjE2MS00MDg1LWI1Y2UtYTFlZWM1Zjg1M2Y0ZmM0OTQyNTYtMjk5MS00MzQwLTg2MjQtMmZmNTE0NzYyNDJj&state=CfDJ8JJBjAye1SNKshpUrfRHEW-Nc878Yl7ELngUfrA4qqN1cSazubSajwzOrDHqOumC3TXDd6smGSPvKplsoVTI5Y3fTJ_nprR9lqH0dbbnYU2DVxKZECLs6eo38fsrUBtgG6gG7KHQJk8-mPtDE0C-thjMgzecosWgUVCck62WEciNnD4_mR7yUnzWTrSbnARyrrL-XPvLEFfyXb5luybXMirVfLzwizVzagtt4wcCYzG3rk4NuzeM6a9pJrHeUKFAWbIIxzTMv0U6cfjnjrIVuSHXiid2z2Nje_lsOb3UgOf_YlqUExsxND24GdtJMRGfX3mb78cNQC6myyJ_lvrTDttLBmSjdrWTyeXWBNbZs7jyAKv_oQgPNGy-hqYlltRo3g&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=5.3.0.0

Thanks,

Regards,

Sameer.

___________________________________
The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by responding to this email and then delete it from your system. EY is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt.

whuizzzzzz

You can modify response header in header_filter_by_lua_*.

header_filter_by_lua_block {
    local newLocation = ngx.header["Location"]

    -- replace redirect_uri param value

    ngx.header["Location"] = newLocation 
}

在 2020年3月2日星期一 UTC+8下午2:41:01，shammira.pasha1写道：

Hi Team,

I am hitting the Nginx URL which has App engine URL as backend member. Nginx will redirect the request to App engine and then app engine respond back to Nginx. In the response from App engine there are few params which I would like to make changes.

Is there any way I can change the http response params. For example, in the below URL the param values are client_id, redirect_uri, response_type. I would like to change the redirect_uri to some other URL. Please let me know.



    https://login.microsoftonline.com/5b973f9ILASHDIS77df-4bKASJDea0c70b8482c/oauth2/authorize?client_id=93ewrree-5536-411e-80ff-16ca95c84735&redirect_uri=https%3A%2F%2Finfosec.puzzles.sbp.eyclienthub.com%2Fsignin-oidc&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=637182989648068834.NjRlZTQ5YjQtYjE2MS00MDg1LWI1Y2UtYTFlZWM1Zjg1M2Y0ZmM0OTQyNTYtMjk5MS00MzQwLTg2MjQtMmZmNTE0NzYyNDJj&state=CfDJ8JJBjAye1SNKshpUrfRHEW-Nc878Yl7ELngUfrA4qqN1cSazubSajwzOrDHqOumC3TXDd6smGSPvKplsoVTI5Y3fTJ_nprR9lqH0dbbnYU2DVxKZECLs6eo38fsrUBtgG6gG7KHQJk8-mPtDE0C-thjMgzecosWgUVCck62WEciNnD4_mR7yUnzWTrSbnARyrrL-XPvLEFfyXb5luybXMirVfLzwizVzagtt4wcCYzG3rk4NuzeM6a9pJrHeUKFAWbIIxzTMv0U6cfjnjrIVuSHXiid2z2Nje_lsOb3UgOf_YlqUExsxND24GdtJMRGfX3mb78cNQC6myyJ_lvrTDttLBmSjdrWTyeXWBNbZs7jyAKv_oQgPNGy-hqYlltRo3g&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=5.3.0.0



Thanks,

Regards,

Sameer.

___________________________________
The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by responding to this email and then delete it from your system. EY is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt.

shammira.pasha1

Hi,

Thanks for the quick response. I am sorry I did not understand how the above code will replace the redirect_uri. Could you please help me with this.

Regards,
Sameer.

Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: openresty-en@googlegroups.com <openresty-en@googlegroups.com> on behalf of hui wang <whui...@gmail.com>
Sent: Monday, March 2, 2020 2:52:13 PM
To: openresty-en <openresty-en@googlegroups.com>
Subject: [openresty-en] Re: Need help in modifying the redirect_uri

You can modify  response header in  header_filter_by_lua_*.

header_filter_by_lua_block {
    local newLocation = ngx.header["Location"]

    -- replace redirect_uri param value

    ngx.header["Location"] = newLocation
}

在 2020年3月2日星期一 UTC+8下午2:41:01，shammira.pasha1写道：

Hi Team,





 I am hitting the Nginx URL which has App engine URL as backend member. Nginx will redirect the request to App engine and then app engine respond back to Nginx. In the response from App engine there are few params which I would like to make changes.



Is there any way I can change the http response params. For example, in the below URL the param values are client_id, redirect_uri, response_type. I would like to change the redirect_uri to some other URL. Please let me know.



    https://login.microsoftonline.com/5b973f9ILASHDIS77df-4bKASJDea0c70b8482c/oauth2/authorize?client_id=93ewrree-5536-411e-80ff-16ca95c84735&redirect_uri=https%3A%2F%2Finfosec.puzzles.sbp.eyclienthub.com%2Fsignin-oidc&response_type=id_token&scope=openid%20profile&response_mode=form_post&nonce=637182989648068834.NjRlZTQ5YjQtYjE2MS00MDg1LWI1Y2UtYTFlZWM1Zjg1M2Y0ZmM0OTQyNTYtMjk5MS00MzQwLTg2MjQtMmZmNTE0NzYyNDJj&state=CfDJ8JJBjAye1SNKshpUrfRHEW-Nc878Yl7ELngUfrA4qqN1cSazubSajwzOrDHqOumC3TXDd6smGSPvKplsoVTI5Y3fTJ_nprR9lqH0dbbnYU2DVxKZECLs6eo38fsrUBtgG6gG7KHQJk8-mPtDE0C-thjMgzecosWgUVCck62WEciNnD4_mR7yUnzWTrSbnARyrrL-XPvLEFfyXb5luybXMirVfLzwizVzagtt4wcCYzG3rk4NuzeM6a9pJrHeUKFAWbIIxzTMv0U6cfjnjrIVuSHXiid2z2Nje_lsOb3UgOf_YlqUExsxND24GdtJMRGfX3mb78cNQC6myyJ_lvrTDttLBmSjdrWTyeXWBNbZs7jyAKv_oQgPNGy-hqYlltRo3g&x-client-SKU=ID_NETSTANDARD2_0&x-client-ver=5.3.0.0



Thanks,



Regards,

Sameer.



___________________________________
The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by responding to this email and then delete it from your system. EY is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt. >.

___________________________________
The information contained in this communication is intended solely for the use of the individual or entity to whom it is addressed and others authorized to receive it. It may contain confidential or legally privileged information. If you are not the intended recipient you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by responding to this email and then delete it from your system. EY is neither liable for the proper and complete transmission of the information contained in this communication nor for any delay in its receipt.