ruby on rails - Cookies set, but not sent to Cloudfront -


i'm attempting use signed cookies access private content on aws cloudfront.

  • rails 4.2.1 app running in development on puma server - http://localhost:3000
  • using latest chrome (and can reproduce same in firefox , safari)

my app sets correct cookies required cloudfront, , each cookie has correct value. reference, 3 cookies need set are:

  • cloudfront-policy
  • cloudfront-signature
  • cloudfront-key-pair-id

i know values correct if grab cookies , perform curl request using them, successful (values replaced ... sake of brevity):

curl -v -b "cloudfront-signature=...; cloudfront-policy==...; cloudfront-key-pair-id==...;" http://mydistribution.cloudfront.net/myfile.jpg

the fault

when use browser, whilst can see cookies have been set in original request server http://localhost:3000/, requests cloudfront urls (for example, in image tags) not pass on of these cookies. results in 

<error><code>missingkey</code><message>missing key-pair-id query parameter or cookie value</message></error>

any ideas why cookies not being sent cloudfront? advice , support appreciated :)

this normal: each cookie has associated domain , each request browser send cookies match url request being made for.

furthermore cannot set cookies arbitrary domains - if application on example.com can set cookies example.com , subdomains, not other domains (eg other-domain.com)

therefore if app being accessed browser localhost can't set cookies sent foo.cloudfront.net. signed cookies function in cloudfront pretty new i'm not sure recommended approach here, can configure cloudfront pass paths through app (check cloudfront documentation on behaviour , origins) @ point browser thinks talking cloudfront let set cookies sent in subsequent requests cloudfront distribution.

your app need reachable cloudfront work though, don't think work in development.

alternatively use cname cloudfront distribution , app served same domain. mean can't use default cloudfront ssl certificate, , unless sni acceptable, you'll need pay use own certificate.


Comments

Post a Comment

Popular posts from this blog

jquery - How do you format the date used in the popover widget title of FullCalendar? -

Image
in fullcalendar, how format date used in popover widget title when clicking '+n more'? code: <div class="fc-popover fc-more-popover"> <div class="fc-header fc-widget-header"> <span class="fc-close fc-icon fc-icon-x"></span> <span class="fc-title">tuesday, april 7</span> ... </div> ... </div> you use daypopoverformat that. determines date format of title of popover created eventlimitclick option. must date formatting string. default value "dddd, mmmm d" english , "ll" other languages.
Read more

asp.net mvc - SSO between MVCForum and Umbraco7 -

i need integrate sso between mvcforum (forum of company) , umbraco7 (manages cms company). however struggling shared authentication work. tried several ways suggested on other threads still not running expected. here did: 1. in mvcforum (forum.mywebsite.com) 1.1. machine key in web.xml: <machinekey validationkey="the same key umbraco7" decryptionkey="the same key umbraco7" validation="sha1" decryption="aes" /> 1.2. authenticate forms in web.xml <forms name="my-sso-auth" protection="all" path="/" timeout="43200" domain="forum.mywebsite.com" loginurl="/members/logon" enablecrossappredirects="true" /> 2. in umbraco7 (news.mywebsite.com) 2.1. machine key in web.xml: <machinekey validationkey="the same key mvcforum" decryptionkey="the same key mvcforum" validation="sha1" decryption="aes" /> 2.2. a...
Read more

Python Tkinter keyboard using bind -

i have problem using bind option can click button in keyboard, , call function once key pressed. tried taking other codes have similar purpose , saw i'm doing pretty same, though still have problem must've missed. thankful if me this. here's code: # -*- coding: utf-8 -*- #imports tkinter import * pil import imagetk, image import time import tkmessagebox #===========================================================================================================================================# #tkinter class class app(frame): def __init__(self, master=none): frame.__init__(self, master) self.pack() #===========================================================================================================================================# #game pieces classes class board: def __init__(self, rows = 7, columns = 6, picture_height = none, picture_width = none): self.rows = rows self.columns = columns self.picture ...
Read more