Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No host causes requests to set JWT #603

Closed
driverpt opened this issue May 30, 2019 · 0 comments · Fixed by #604
Closed

No host causes requests to set JWT #603

driverpt opened this issue May 30, 2019 · 0 comments · Fixed by #604

Comments

@driverpt
Copy link
Contributor

When making HTTP Request without Host, with whitelistedDomains set, it causes JWT Authorization to be set.

If we're using redirect to an S3 Assets Bucket, it causes the Authorization Header to be sent and AWS S3 will reject that, since it doesn't know it.

Prerequisites

Environment

Please provide the following:

@auth0/angular-jwt@2.1.0 on Angular 7

Reproduction

When using ngx-markdown and [src]="/assets/foo/bar.md", the requests are intercepted by the JWT Interceptor but since requestUrl.host is null, cause the JWT Authorization header to be set.
Since we're using AWS ALB to redirect that to another sub-domain (S3 Backed), when Authorization is set, causes the requests to fail (since the Authorization isn't AWS Compatible)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant