set cookies for cross origin requests

fuchiao — Sat, 02 Nov 2019 02:06:35 +0000

When http://portal sent a request to http://auth, http://auth failed to set user's cookie.

Set credential flag for request and modified the following response headers to fix it [1], [2]:

Access-Control-Allow-Origin (request.Header.Origin, no wildcard allowed)
Vary (Origin)
Access-Control-Allow-Credentials (true)

And we can followe w3schoool article to test cross domain request by browser console.

var xhttp = new XMLHttpRequest();
xhttp.onreadystatechange = function() {
    console.log(this);
};
xhttp.open("GET", "http://auth", true);
xhttp.send();

http redirect for golang http client

fuchiao — Sat, 26 Oct 2019 16:14:53 +0000

I had a problem today.

I wrote a program to send an http request to my server, and the debugger told me that the http server returned 302. However, my client program always got 400.

today i learned

Finally, I found that golang http client ignoreed 301 and 302. The client redirected to the new location and returned the new response only.

Thanks, wireshark.

And we can prevent redirects by the following configuration:

  client := &http.Client{
    CheckRedirect: func(req *http.Request, via []*http.Request) error {
      return http.ErrUseLastResponse
  } }

  resp, err := client.Get("http://www.jonathanmh.com")

reference

[1] https://jonathanmh.com/tracing-preventing-http-redirects-golang/

DEV Community: fuchiao

set cookies for cross origin requests

http redirect for golang http client

today i learned

reference