OAuth 2 proxy redirects POST request which have // in path

[pawanrawal]

I have OAuth 2 proxy which has Grafana as an upstream.

Grafana web makes a POST call to a url like this localhost:4180/api/datasources/proxy/2//_msearch?search_type=count . Since the path has a // before _msearch, oauth2_proxy immediately returns a 301 and sends a GET request to the same url which fails my request. Any reason why this might be happening ?

[jehiah]

@pawanrawal hmm... This certainly sounds like path normalization, but i'm not sure where that would be happening. Can you share some logs that might show this happening?

[sjoerdmulder]

I'm also experiencing this issue. Somehow double slashes causes redirects instead of just proxying to upstream

BTW found this that might be related https://groups.google.com/forum/#!topic/golang-nuts/zWPOOJjCgNQ

[tekmaven]

This is a problem. The proxy should not "normalize" urls.

The POST request gets 301 redirected and then a GET request is issued with no payload. This breaks Grafana and potentially other apps where there is "improper" urls generated with double slashes.

[tekmaven]

The good news is, Grafana has fixed this problem for the next release.

grafana/grafana#5536

[pmbauer]

The source of this is deep in golang's ServeMux

https://github.com/golang/go/blame/6a982c390138fb2af49f85c4aeea2bce3222eb20/src/net/http/server.go#L1985
https://github.com/golang/go/blame/6a982c390138fb2af49f85c4aeea2bce3222eb20/src/net/http/server.go#L1941
https://github.com/golang/go/blob/4054769a31f66039f5fd74ca3164e9233f724da8/src/path/path.go#L69

[kholloway]

This affects anyone using Oauth2_proxy in front of Mesos/Marathon also.. :(

d2iq-archive/marathon#3966

[troxor]

RabbitMQ Management plugin is also affected :( :(