StackOverflow2013

Note that there are some explanatory texts on larger screens.

plurals

POhow can I get the POST body when using apache mod_auth_form
text
Body
copied!<p>I'm trying to use mod_auth_form using the mode described in the documentation as "Inline Login with Body Preservation". In the documentation they mention using mod_include or a CGI as the ErrorDocument in order to generate the login form, e.g.:</p> <p>ErrorDocument 401 /cgi-bin/login.cgi</p> <p>The scenario is if a user wants to POST from either a non-authenticated page, or from an authenticated page with a timed-out session.</p> <p>The POST hits the target url, is intercepted by mod_auth_form, which invokes the ErrorDocument 401, the user enters credentials. On the login form page, a "special" hidden form variable httpd_body can be added (and httpd_method) which will be processed by the authentication handler to create a POST body to the original target. </p> <p>The problem is the the login.cgi doesn't get the POST data since (apparently) apache doesn't pass the POST data to an ErrorDocument. The alternative to ErrorDocument is to use the directive AuthFormLoginRequiredLocation however this does a plain 302 redirect and of course the POST data is lost.</p> <p>It seems the feature for httpd_body is impossible to use, as it is impossible to capture the original POST data. Even in the case of a GET, one would have to parse the referrer to get the GET variables.</p> <p>Is there a way in Apache to read the POST data and store it somewhere before the authentication hook is run? Or some other solution I've missed?</p>

Querying!

Guidance

An individual column

Larger individual text columns get their own page to allow for proper reading.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload