You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Andriy Redko (Jira)" <ji...@apache.org> on 2022/03/30 21:55:00 UTC

[jira] [Commented] (CXF-8682) x-forwarded-proto header causes cxf to not match request to java method

    [ https://issues.apache.org/jira/browse/CXF-8682?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17514967#comment-17514967 ] 

Andriy Redko commented on CXF-8682:
-----------------------------------

Hi [~shpelda] , you are surely correct

>  RFC-3986: the scheme and host are case-insensitive and therefore should 
>  be normalized to lowercase. 

Thank you for reporting the issue.

> x-forwarded-proto header causes cxf to not match request to java method
> -----------------------------------------------------------------------
>
>                 Key: CXF-8682
>                 URL: https://issues.apache.org/jira/browse/CXF-8682
>             Project: CXF
>          Issue Type: Bug
>          Components: JAX-RS
>    Affects Versions: 3.4.1
>            Reporter: shpelda
>            Priority: Major
>
> If X-Forwarded-Proto header is set to "HTTP", then serverside CXF  fails to match _Message_ to corresponding java method. This happens because of [HttpUtils#getBaseAddress|https://github.com/apache/cxf/blob/master/rt/frontend/jaxrs/src/main/java/org/apache/cxf/jaxrs/utils/HttpUtils.java#L474] being case-sensitive and fails to detect absolute url, that is somehow internally produced by cxf from this x-forwarded-proto and x-forwarded-host headers.
> —
> This uppercase header was produced by NetScaler Load balancer, if this is interesting to you.
>  



--
This message was sent by Atlassian Jira
(v8.20.1#820001)