-
Notifications
You must be signed in to change notification settings - Fork 161
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Missing User-Agent header in Post request to cognito #264
Comments
Sure thing, wanna send a PR? Just inject a default user agent header option here: cloudfront-authorization-at-edge/src/lambda-edge/shared/shared.ts Lines 498 to 502 in 612fddc
|
Great. |
No worries, but I don't know when I'll have bandwidth for it. |
Hi @ottokruse @ABCJO , I opened a PR for the same #282 |
When using a Congito User Pool with a WAF attached the following scenario occurs:
The post request to exchange the authorization token to Cognito /oauth/token endpoint is blocked by a WAF that contains the AWS managed rule AWSManagedRulesCommonRuleSet.
Specifically, the NoUserAgent_HEADER rule blocks the request.
Is it possible to update the request configurations, so that the User-Agent header is set?
The text was updated successfully, but these errors were encountered: