Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update CDN Config to obey auth-token for secured content routes #306

Open
Tylopilus opened this issue Dec 21, 2021 · 1 comment
Open

Update CDN Config to obey auth-token for secured content routes #306

Tylopilus opened this issue Dec 21, 2021 · 1 comment

Comments

@Tylopilus
Copy link

Tylopilus commented Dec 21, 2021

Expected Behaviour

when logged in as asmith I want to be able to click on the 'members only' articles and view them

Actual Behaviour

The articles are not clickable as the page is still served from CDN instead of dispatcher while being logged in. Only way is to force a soft purge with
curl -X PURGE -H "Fastly-Soft-Purge:1" https://wknd.site
or to append an uncached parameter.

If a logged in user renews the cache, then the links to the restricted pages are working as expected. Since the new page with links has been cached, logged out users can also see the links.

Reproduce Scenario (including but not limited to)

  1. go to https://wknd.site/us/en/magazine.html
  2. log in with asmith:asmith
  3. Try to click the links to the restricted articles

Platform and Version

Current live site https://wknd.site

@godanny86
Copy link
Contributor

Thanks for reporting @Tylopilus!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants