Application Load Balancer doesn't send user claims in HTTP headers

0

I'm trying to authenticate users using aws alb.

I have Open ID Connect Provider application and it works.

Following https://docs.amazonaws.cn/en_us/elasticloadbalancing/latest/application/listener-authenticate-users.html#authentication-flow , after user authenticated, load balancer should send the user claims in HTTP headers.

My OIDC provider application sends user claims to LB, but I cannot find x-amzn-oidc-* headers from the request.

How do I get x-amzn-oidc-* headers from LB?

質問済み 4年前2034ビュー
2回答
0
承認された回答

Hi,

Once the user is authenticated by the IdP and user claims are sent to the ALB, the ALB should be sending the x-amzn-oidc-* headers to the backends with every request.
Can you confirm if you are checking for headers on the client side or on the server?
Note that the headers are not set on the client side for the responses but are set only on the requests sent to the server. Hence will only be visible on your application side as normal HTTP headers.

If you are still facing issues please provide your ELB name so we can check on our end.

AWS
回答済み 4年前
0

Hi,
I checked the header from client. When I check my server, I could get x-amzn-oidc-* headers.
Thanks.

回答済み 4年前
  • Hi @JangwookKim, I know it has been long but I am facing the same challenge. Would you be able to share how and where did you check the server for these headers? I am running a website (HTTPD backend) on EC2 behind an ALB. The authentication is working fine, but I am unable to see the x-amzn-* headers anywhere.

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ