ruby on rails - Cookies set, but not sent to Cloudfront -


i'm attempting use signed cookies access private content on aws cloudfront.

  • rails 4.2.1 app running in development on puma server - http://localhost:3000
  • using latest chrome (and can reproduce same in firefox , safari)

my app sets correct cookies required cloudfront, , each cookie has correct value. reference, 3 cookies need set are:

  • cloudfront-policy
  • cloudfront-signature
  • cloudfront-key-pair-id

i know values correct if grab cookies , perform curl request using them, successful (values replaced ... sake of brevity):

curl -v -b "cloudfront-signature=...; cloudfront-policy==...; cloudfront-key-pair-id==...;" http://mydistribution.cloudfront.net/myfile.jpg

the fault

when use browser, whilst can see cookies have been set in original request server http://localhost:3000/, requests cloudfront urls (for example, in image tags) not pass on of these cookies. results in 

<error><code>missingkey</code><message>missing key-pair-id query parameter or cookie value</message></error>

any ideas why cookies not being sent cloudfront? advice , support appreciated :)

this normal: each cookie has associated domain , each request browser send cookies match url request being made for.

furthermore cannot set cookies arbitrary domains - if application on example.com can set cookies example.com , subdomains, not other domains (eg other-domain.com)

therefore if app being accessed browser localhost can't set cookies sent foo.cloudfront.net. signed cookies function in cloudfront pretty new i'm not sure recommended approach here, can configure cloudfront pass paths through app (check cloudfront documentation on behaviour , origins) @ point browser thinks talking cloudfront let set cookies sent in subsequent requests cloudfront distribution.

your app need reachable cloudfront work though, don't think work in development.

alternatively use cname cloudfront distribution , app served same domain. mean can't use default cloudfront ssl certificate, , unless sni acceptable, you'll need pay use own certificate.


Comments

Post a Comment

Popular posts from this blog

asp.net mvc - SSO between MVCForum and Umbraco7 -

i need integrate sso between mvcforum (forum of company) , umbraco7 (manages cms company). however struggling shared authentication work. tried several ways suggested on other threads still not running expected. here did: 1. in mvcforum (forum.mywebsite.com) 1.1. machine key in web.xml: <machinekey validationkey="the same key umbraco7" decryptionkey="the same key umbraco7" validation="sha1" decryption="aes" /> 1.2. authenticate forms in web.xml <forms name="my-sso-auth" protection="all" path="/" timeout="43200" domain="forum.mywebsite.com" loginurl="/members/logon" enablecrossappredirects="true" /> 2. in umbraco7 (news.mywebsite.com) 2.1. machine key in web.xml: <machinekey validationkey="the same key mvcforum" decryptionkey="the same key mvcforum" validation="sha1" decryption="aes" /> 2.2. a
Read more

Python Tkinter keyboard using bind -

i have problem using bind option can click button in keyboard, , call function once key pressed. tried taking other codes have similar purpose , saw i'm doing pretty same, though still have problem must've missed. thankful if me this. here's code: # -*- coding: utf-8 -*- #imports tkinter import * pil import imagetk, image import time import tkmessagebox #===========================================================================================================================================# #tkinter class class app(frame): def __init__(self, master=none): frame.__init__(self, master) self.pack() #===========================================================================================================================================# #game pieces classes class board: def __init__(self, rows = 7, columns = 6, picture_height = none, picture_width = none): self.rows = rows self.columns = columns self.picture
Read more

ubuntu - Selenium Node Not Connecting to Hub, Not Opening Port -

i'm trying set demo selenium grid. have digital ocean ubuntu 14.02 droplet. (i have 2 , tried set using 2 different machines got nowhere.) i'm trying run hub , node both locally. here input both hub, node, , nmap results. https://gist.github.com/mekhami/d5bbecca5ff0de9d2dc9 so, node starting tcp connection reset , port it's supposed operate on closed. i have had no luck in number of different options , configurations work. but... of course, worked randomly once. don't know why, don't know did, know 1 brief moment, node connected , saw on grid console. tried run test , went down again , i've never seen come up. please let me know more information can provide. update: randomly came online again. don't know happened, might related timeout or time_wait or going on. this because vm/server not have enough entropy available. to resolve problem, install haveged (or other similar things). the instructions of how install haveged on ubu
Read more