Skip to content

Instantly share code, notes, and snippets.

@steinarb

steinarb/Initial auth check

Created January 25, 2019 18:22
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save steinarb/7bb695f350592c63111bac9d30782d89 to your computer and use it in GitHub Desktop.
Save steinarb/7bb695f350592c63111bac9d30782d89 to your computer and use it in GitHub Desktop.
Download ZIP
Network captures of nginx with auth calls to shiro webapp running in karaf
Raw
Initial auth check
GET /authservice/check HTTP/1.0
Host: localhost:8181
Connection: close
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: nb-NO,nb;q=0.9,no;q=0.8,nn;q=0.7,en-US;q=0.6,en;q=0.5
Cookie: NSREDIRECT=http://lorenzo.hjemme.lan/
HTTP/1.1 401 Unauthorized
Content-Type: text/plain
Content-Length: 19
Server: Jetty(9.3.21.v20170918)
Not authenticated!
Raw
Open login page
GET /authservice/login?originalUri=http://lorenzo.hjemme.lan/ HTTP/1.0
Host: localhost:8181
Connection: close
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: nb-NO,nb;q=0.9,no;q=0.8,nn;q=0.7,en-US;q=0.6,en;q=0.5
Cookie: NSREDIRECT=http://lorenzo.hjemme.lan/authservice/logout; NSREDIRECT=http://lorenzo.hjemme.lan/
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 397
Server: Jetty(9.3.21.v20170918)
<html>
<head>
<title>Authentication service login</title>
</head>
<body>
<h1>Authentication service login</h1>
<form action="login" method="post">
Username: <input type="text" name="username"><br>
Password: <input type="password" name="password"><br>
<input type="submit" value="Submit">
</form>
</body>
</html>
Raw
Opening the top level authservice path
GET /authservice/ HTTP/1.0
Host: localhost:8181
Connection: close
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: nb-NO,nb;q=0.9,no;q=0.8,nn;q=0.7,en-US;q=0.6,en;q=0.5
Cookie: NSREDIRECT=http://lorenzo.hjemme.lan/authservice/logout; NSREDIRECT=http://lorenzo.hjemme.lan/; JSESSIONID=e2dd4f93-9e9e-4e29-9277-d7d19d038fea; rememberMe=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
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 206
Server: Jetty(9.3.21.v20170918)
<html>
<head>
<title>Authentication service home</title>
</head>
<body>
<h1>Authentication service home</h1>
<p>You have successfully logged in!</p>
</body>
</html>
Raw
Successful auth check from nginx
GET /authservice/check HTTP/1.0
Host: localhost:8181
Connection: close
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Referer: http://lorenzo.hjemme.lan/authservice/login?originalUri=http://lorenzo.hjemme.lan/
Accept-Encoding: gzip, deflate
Accept-Language: nb-NO,nb;q=0.9,no;q=0.8,nn;q=0.7,en-US;q=0.6,en;q=0.5
Cookie: NSREDIRECT=http://lorenzo.hjemme.lan/; JSESSIONID=e2dd4f93-9e9e-4e29-9277-d7d19d038fea; rememberMe=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
HTTP/1.1 200 OK
Content-Type: text/plain
Content-Length: 28
Server: Jetty(9.3.21.v20170918)
Successfully authenticated!
Raw
Successful login POST
POST /authservice/login HTTP/1.0
Host: localhost:8181
Connection: close
Content-Length: 29
Cache-Control: max-age=0
Origin: http://lorenzo.hjemme.lan
Upgrade-Insecure-Requests: 1
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/71.0.3578.98 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8
Referer: http://lorenzo.hjemme.lan/authservice/login?originalUri=http://lorenzo.hjemme.lan/
Accept-Encoding: gzip, deflate
Accept-Language: nb-NO,nb;q=0.9,no;q=0.8,nn;q=0.7,en-US;q=0.6,en;q=0.5
Cookie: NSREDIRECT=http://lorenzo.hjemme.lan/authservice/logout; NSREDIRECT=http://lorenzo.hjemme.lan/
username=admin&password=adminHTTP/1.1 302 Found
Set-Cookie: JSESSIONID=e2dd4f93-9e9e-4e29-9277-d7d19d038fea; Path=/authservice; HttpOnly
Set-Cookie: rememberMe=deleteMe; Path=/authservice; Max-Age=0; Expires=Thu, 24-Jan-2019 18:07:10 GMT
Set-Cookie: rememberMe=05rxFk59t/oxNbzz+8JBI7GZ0l+PgM/E7t0H19oFeQrJUpiQwescS+zo7jM3Wv4a1rthg1Tl/t7slYlAeNiv2PHvGJuABoaCFy0U8ypK3IIYygMsNo0qA+OhgHnVhctygHoUgQLyxth5j/vbpIYxSxeH0OLD4izhNIEDajTCu/drhxiIRTGu28DgEy1DDBR8wKJAN9EdnGesJbo+UuKdzA0hkXXV7FcuefuPIdN2f1lo68mwbJKvq8Gk2QcFMuf6sTFgYDjAqVXQyQ5eOMKp0R8GsjFGWfJxO6+GA6nev6ZUeGKB9wD2GdF4jOputbE7nvYqaCpL5l3pe8yjVSHoOmjGZKUWlx2NzzgcIDoWJRLoqIpnSJjKzweESKZd2SZnQoWUEc2XOcps/1AjntFsIyyIL5qzOM1O88pbITzNuVcU6VyyJVNzgZbarMJpsY5xIer4Km2/OziPD8nHVizLiTmZT9PRpt4k2I/JtmdG6Azrs8ymvOlehUlZOkj9O2DV0o/FQ42PZarFm3Pcy6UpXK4SZVFgchMCGdqQj1cBCH24MYrLq9LaSqHICRN8EUIg; Path=/authservice; Max-Age=31536000; Expires=Sat, 25-Jan-2020 18:07:10 GMT; HttpOnly
Location: http://lorenzo.hjemme.lan/
Content-Type: text/html
Content-Length: 17
Server: Jetty(9.3.21.v20170918)
Login successful!
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment