proxy_cookie_path在nginx中不起作用

Question

我的后端服务器发出什么样的cookie响应。我想更改cookie请求中的路径值。

从nginx开始后，我被要求使用proxy_cookie_path指令

所以我一直在尝试在我的nginx配置中使用proxy_cookie_path指令字段。

这里是nginx返回给客户端的响应。正在尝试将路径值从/更改为/abc/xyz/120

HTTP/1.1 201 CREATED
Server: nginx
Date: Thu, 31 Aug 2017 12:16:10 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Cookie
X-Frame-Options: SAMEORIGIN
Allow: POST, OPTIONS
Set-Cookie: expires=Thu, 30-Aug-2018 12:19:09 GMT; Max-Age=31449600; Path=/
Strict-Transport-Security: max-age=15768000

这是nginx规则

 # proxy needed for auth to work
   location /tron/api/v1/ {

   proxy_ssl_session_reuse off;
  # End of extra settings
   proxy_set_header        X-Real-IP $remote_addr;
   proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;

   proxy_set_header        X-Forwarded-Host $host;
   proxy_set_header        X-Forwarded-Server $host;

  # End of extra settings
    proxy_set_header        X-Scheme $scheme;

   location ~ ^/tron/api/v1/(.*) {

  if ($cookie_VD_TYPE = "XYZ") {

  proxy_pass              https://10.132.250.$cookie_XYZ/tron/api/v1/$1$is_args$args;
  proxy_cookie_path off;
  proxy_cookie_path      / /abc/xyz/120;

 }

  proxy_pass            https://10.132.250.$cookie_ABC/tron/api/v1/$1$is_args$args;
 }
}

所以问题是当我添加

proxy_cookie_path；proxy_cookie_path/ /abc/xyz/120；

使用此指令会给我错误

 "proxy_cookie_path" directive is not allowed here in /etc/nginx/sites-enabled/default

我已经检查了我的nginx-V，以了解它是否已安装。所以我的问题是：-

>

这是正确的方法，即proxy_cookie_path是解决方案？

若proxy_cookie_path是解决方案，那个么我并没有将其放置在正确的位置。如果我错了，请纠正我。

nginx/1.10.1使用OpenSSL 1 . 0 . 1 f 2014年1月6日启用TLS SNI支持配置参数:-with-cc-opt = '-g-O2-f stack-protector-param = ssp-buffer-size = 4-w format-Werror = format-security-D _ FORTIFY _ SOURCE = 2 '-with-LD-opt = '-Wl，-Bsymbolic-functions -Wl，-z，relro -Wl，-z，now '-prefix =/usr/share/nginx-conf-path = ' -with-http _ gzip _ static _ module-with-http _ image _ filter _ module = dynamic-with-http _ MP4 _ module-with-http _ random _ index _ module-with-http _ secure _ link _ module-with-http _ sub _ module-with-http _ XSLT _ module = dynamic-with-mail _ SSL _ module-with-stream = dynamic-with-stream _ SSL _ module-add-dynamic-module

Answer 1

您需要在if块之外使用< code>proxy_cookie_path。< code>proxy_cookie_path仅允许在< code>http，server，location中使用。所以你可以在if块内部使用它。

编辑-1

如果由于某种原因仍然需要这样做。试试下面的配置

location /tron/api/v1/ {
  error_page 418 = @xyz_cookie;

  recursive_error_pages on;
  proxy_ssl_session_reuse off;
  # End of extra settings
  proxy_set_header X-Real-IP $remote_addr;
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

  proxy_set_header X-Forwarded-Host $host;
  proxy_set_header X-Forwarded-Server $host;

  # End of extra settings
  proxy_set_header X-Scheme $scheme;

  if ($cookie_VD_TYPE = "XYZ") {
    return 418;
  }

  proxy_pass https://10.132.250.$cookie_ABC/tron/api/v1/$1$is_args$args;
}

location @xyz_cookie {
  proxy_ssl_session_reuse off;
  # End of extra settings
  proxy_set_header X-Real-IP $remote_addr;
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

  proxy_set_header X-Forwarded-Host $host;
  proxy_set_header X-Forwarded-Server $host;

  # End of extra settings
  proxy_set_header X-Scheme $scheme;

  proxy_pass   https://10.132.250.$cookie_XYZ/tron/api/v1/$1$is_args$args;
  proxy_cookie_path      / /abc/xyz/120;
}

阅读如果是邪恶的，了解更多关于IF的问题