栏目分类:
子分类:
返回
名师互学网用户登录
快速导航关闭
当前搜索
当前分类
子分类
实用工具
热门搜索
名师互学网 > IT > 系统运维 > 运维 > Linux

Nginx http跳转到https,接口POST请求变成GET问题解决

Linux 更新时间: 发布时间: IT归档 最新发布 模块sitemap 名妆网 法律咨询 聚返吧 英语巴士网 伯小乐 网商动力

Nginx http跳转到https,接口POST请求变成GET问题解决

引起这个问题的原因是“永久重定向和临时重定向”

301 Moved Permanently
被请求的资源已永久移动到新位置,并且将来任何对此资源的引用都应该使用本响应返回的若干个 URI 之一

307 Temporary Redirect
请求的资源现在临时从不同的URI 响应请求。由于这样的重定向是临时的,客户端应当继续向原有地址发送以后的请求

两种配置方式,如果是网站http永久跳转到https访问,使用如下方式配置;例如访问

http://www.xxx.com  ====> https://www.xxx.com,后续访问其他该网站页面都是https协议,此时按此方式配置

# www.xxx.com

server {
    listen 80;
    server_name www.xxx.com;
    rewrite ^(.*) https://www.xxx.com$1 permanent;
}

server {
    listen 443 ssl;
    server_name www.xxx.com;
    ssl_certificate   cert/xxxxxxxx.pem;
    ssl_certificate_key  cert/xxxxxxxxxxx.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    access_log /var/log/nginx/www.xxx.com_access.log;
    error_log /var/log/nginx/www.xxx.com_error.log;

    location / {
        proxy_redirect off;
        proxy_set_header host $host;
        proxy_set_header x-real-ip $remote_addr;
        proxy_set_header x-forwarded-for $proxy_add_x_forwarded_for;
        proxy_pass http://192.168.x.x:8080;
    }
}

如果是API的域名,不涉及到后续永久重定向问题,每次请求http是临时重定向到https访问

例如:http://www.xxx.com/api/order/list  ===> https://www.xxx.com/api/order/list

配置方式如下:

# www.xxx.com.conf
server {
    listen 80;
    server_name www.xxx.com;
    return 307 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name www.xxx.com;
    ssl_certificate   cert/xxxxxxxxx.pem;
    ssl_certificate_key  cert/xxxxxxxxxxxx.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    access_log /var/log/nginx/www.xxx.com_access.log;
    error_log /var/log/nginx/www.xxx.com_error.log;

    location / {
        #跨域处理
        add_header 'Access-Control-Allow-Origin' '*';
        add_header 'Access-Control-Allow-Credentials' 'true';
        if ($request_method = OPTIONS){
            add_header 'Access-Control-Allow-Origin' '*';
            add_header 'Access-Control-Allow-Credentials' 'true';
            add_header 'Access-Control-Max-Age' 1728000;
            add_header 'Access-Control-Allow-Credentials' 'true';
            add_header 'Access-Control-Allow-Methods' 'GET, PUT, POST, DELETE, HEAD, OPTIONS';
            add_header 'Access-Control-Allow-Headers' 'Origin, x-requested-with, Content-Type, Accept,X-Cookie';
            proxy_pass http://192.168.x.x:8080;
            return 200;
        }
        proxy_redirect off;
        proxy_set_header host $host;
        proxy_set_header x-real-ip $remote_addr;
        proxy_set_header x-forwarded-for $proxy_add_x_forwarded_for;
        proxy_pass http://192.168.x.x:8080;
    }
}

转载请注明:文章转载自 www.mshxw.com
本文地址:https://www.mshxw.com/it/865793.html
我们一直用心在做
关于我们 文章归档 网站地图 联系我们

版权所有 (c)2021-2022 MSHXW.COM

ICP备案号:晋ICP备2021003244-6号