|
|
Dion Wooning created an issue |
|
Issue Type: |
|
|---|---|
|
Affects Versions: |
2.9-beta, 2.8.3 |
|
Assignee: |
Unassigned |
|
Components: |
Configuration, REST |
|
Created: |
31/Mar/16 11:45 AM |
|
Labels: |
security reverse-proxy |
|
Priority: |
|
|
Reporter: |
|
I would like to propose an additional global setting which allows one to specify a separate Proxy Base-URL which is to be used in response documents from the REST interface. This would allow one to expose the OGC interface of GeoServer through a publicly accessible reverse proxy corresponding to the current ‘Proxy Base URL’ setting whilst limiting access to the web and REST interfaces through an intranet-only reverse proxy to which the ‘REST Proxy Base URL’ setting would correspond, creating an additional layer of security. Currently, the REST interface generates (xml) responses using the Proxy Base URL, which in the above scenario causes REST clients to start using the public reverse proxy URL based on the URLs reported by GeoServer’s REST responses. |
|
|
|
This message was sent by Atlassian JIRA (v7.2.0-OD-04-029#72002-sha1:f50e4de) |
|
|