Hi,

We're trying to use the HTTP endpoint in Xrootd and while browsing works, accessing files does not. We pass the url-encoded ALICE access token with ?authz= but then the redirector sets the Location header to the decoded string, that is multi-line. This interferes with the HTTP headers and of course the data server only receives the first line and cannot decode the token.

So my request is to correctly url-encode the passed arguments when redirecting.

Cheers,

.costin

One line example (storage runs 4.10.0):

curl -i -L -s http://alicegrid2.recas.ba.infn.it:1094//14/51881/fbba0702-8e03-11e9-ad41-674bfbba2083?authz=-----BEGIN%20SEALED%20CIPHER-----%0AQHtUw%2B0ItSWSrX7D4gcgCmoeZ13eBfMS7lbdSr%2Bjnl7aKJmKFFYF4j3N6kQ9GhRPDuVDvTfsZ9i4%0A9WLLY4ESe2W6jecpilDkv-DXchCaI%2BPSsbwOBhdfu3JfD45XrkWfkqr451KgNnoHXRFTreJsQJST%0AcS77bOHic33kC9NcLSw%3D%0A-----END%20SEALED%20CIPHER-----%0A-----BEGIN%20SEALED%20ENVELOPE-----%0AAAAAgF4feqA18MIy%2BQBJ2qnPcTL%2BFa9--gxwfktjilnT4rQ2z5oDJ3Z7JYLOALQg9ToilwmjxMDX%0AvyGWTAcfhVJ9HLqvi29v6PmadR-03qQIODG4o-bs5T0v6-WrWH-ufa%2BtP1iH5aZcQ7bPHsw5MBM8%0APi9sM3RF%2BtoZ7626XqPptYJB%2BkUqOEvusOa2ECZgMAoWbfkBdeLGsffwyBOKyTqgdVyo7JXcqli4%0Ag3UPzb4iUyq3WOksJIdMSXF3xKwyjH7XnKDRziZS6s-kpGhpTy7Hw5eOb-XUpMmT7DtWmrREYxCq%0ALMopPPcuiA8DL4iucVfney5SBs%2BXNiENTyuwkQOIRPdUksy%2BsocydvjfkIWctugMtRcJVVNi5fBJ%0AXkSUsipSZJWlQMDULQVZnytedktdIIRyUF2EsL%2BQj-kx6hxV46-nynDEgZOWYscfY20yOR-F%2BB3z%0ABSs1zhv2K1zGOiV09725yPdvoctCleHSfLNRert-wXaXi3Wbvy%2Bg1Yt9rBSaZZoSBMTHtdEE10Fp%0A-0q%2Bz49XRukv1ejqTPI84nRUZBoEy8UXaQS4vRBdLDoJpFVnu4-xlOLmQYNsgHiSWza2legbLB5j%0ADQI3eu57zFXwp%2B6HCb9V5fNZiAi2M5Pt3YSs8CxQpVOUK-LU3T34RsBCUQIMrvOUutK7eazkCQij%0AxuFtuyUL6IKbBtV%2B5-Xlw7ILiYxaZvRUR00nJMANgfma1-m-hic9-Aho3DIxfqeK-C3I4MFfsh2V%0ApiLmH8nmPXLJrecCPZjhjnU3cxqFkF7PRaEohP6KKjSusjRNfI31wgv1LgRgXcsZAdS8MsG56f6z%0ASdtEBBMMESI62FIp7hnAe9J519%2Bnu%2BKNCX8cerFezCvQ0gIs9dEdyGV23xdKMy2%2BdJ0FyMlqnAzZ%0AQd9HHIV1h5HFYVg6lUCmmPz1WK7pA2-aypcW5K%2BbHVwH1ZzFl1eChNVwS9fgzQuZg%2BeNaeII41j9%0AyhbdSIszl4RH06nHQ1pcabhZTlNnDzitecQbrt7cjXdPLeemEZcIAgtbm0XNBUc%3D%0A-----END%20SEALED%20ENVELOPE-----


HTTP/1.1 302 Redirect
Connection: Keep-Alive
Content-Length: 0
Location: http://alice-xrootd-it-01.recas.ba.infn.it:1094/14/51881/fbba0702-8e03-11e9-ad41-674bfbba2083?authz=-----BEGIN%20SEALED%20CIPHER-----
QHtUw+0ItSWSrX7D4gcgCmoeZ13eBfMS7lbdSr+jnl7aKJmKFFYF4j3N6kQ9GhRPDuVDvTfsZ9i4
9WLLY4ESe2W6jecpilDkv-DXchCaI+PSsbwOBhdfu3JfD45XrkWfkqr451KgNnoHXRFTreJsQJST
...

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

[ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/xrootd/xrootd/issues/1060?email_source=notifications\u0026email_token=AA7NRDX443Q25C6TXNK6EVTQLYO3JA5CNFSM4I3HS6F2YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4HOFY6QQ", "url": "https://github.com/xrootd/xrootd/issues/1060?email_source=notifications\u0026email_token=AA7NRDX443Q25C6TXNK6EVTQLYO3JA5CNFSM4I3HS6F2YY3PNVWWK3TUL52HS4DFUVEXG43VMWVGG33NNVSW45C7NFSM4HOFY6QQ", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1