When using Elastic Load Balancing / Appplication Load Balander, please ensure these settings are set to ensure that requests are being forwarded to Joget properly.

NameValueDescription
routing.http.drop_invalid_header_fields.enableddisabledThis needs to be disabled so that CSRF token would be passed on to Joget for security check.
routing.http.preserve_host_header.enabledenabledThis is an optional field. Try to turn it on if you are not getting X-Forwarded- headers.

Reference:-

https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_LoadBalancerAttribute.html 

  • No labels