热门标签 | HotTags
当前位置:  开发笔记 > 编程语言 > 正文

在Nginx后面通过HTTPS访问DjangoAdmin-AccessingDjangoAdminoverHTTPSbehindNginx

Ivegotdjangorunninginuwsgibehindnginx.WhenItrytoaccesshttps:siteadminIgettheex

I've got django running in uwsgi behind nginx. When I try to access https://site/admin/ I get the expected login screen. Logging in via the form seems to succeed, however, I simply end up back at the login screen. Firebug shows a redirect to the plain http://site/admin/ url which is then redirectec by nginx to the https url.

我在dginx后面的uwsgi中运行django。当我尝试访问https:// site / admin /时,我得到了预期的登录屏幕。通过表单登录似乎成功,但是,我只是回到登录屏幕。 Firebug显示重定向到普通的http:// site / admin / url,然后通过nginx将redirectec重定向到https网址。

Help! I'm confused as to how to force the admin app to use only https urls.

帮帮我!我很困惑如何强制管理应用程序只使用https网址。

Note this seems to be a related, unanswered question: https://example.com/admin redirects to https://admin in Django Nginx and gunicorn

请注意,这似乎是一个相关的,未回答的问题:https://example.com/admin重定向到https://管理员在Django Nginx和gunicorn

3 个解决方案

#1


9  

Adding the following to nginx.conf fixed the issue for me.

将以下内容添加到nginx.conf中为我解决了这个问题。

location / {
    ...
    include                 uwsgi_params;
    uwsgi_param             HTTP_X_FORWARDED_PROTOCOL https;
    uwsgi_param             UWSGI_SCHEME   $scheme;
}

Along with adding the following to settings.py:

除了将以下内容添加到settings.py:

SESSION_COOKIE_SECURE = True
SECURE_PROXY_SSL_HEADER = ('HTTP_X_FORWARDED_PROTOCOL', 'https')
CSRF_COOKIE_SECURE = True

#2


2  

the following should be all you need to have all traffic to the admin app redirected to https

以下应该是将管理员应用程序的所有流量重定向到https所需的全部内容

location /site/admin/ {
  rewrite ^ https://$host/$request_uri permanent;
}

If that doesn't work, can you post your actual nginx config bits? Can't really suggest more then that without your actual config to look at.

如果这不起作用,你可以发布你的实际nginx配置位吗?如果没有你的实际配置,那么真的不能建议更多。

#3


0  

Update for Django 1.8 settings.py:

更新Django 1.8 settings.py:

SESSION_COOKIE_SECURE = True
CSRF_COOKIE_SECURE = True
SECURE_SSL_REDIRECT = True
SECURE_REDIRECT_EXEMPT = [r'^(?!admin/).*']

And for your developement rig you may want to overwrite SECURE_SSL_REDIRECT = False in your local settings.

对于您的开发工具,您可能希望在本地设置中覆盖SECURE_SSL_REDIRECT = False。


推荐阅读
author-avatar
BOSS
这个家伙很懒,什么也没留下!
PHP1.CN | 中国最专业的PHP中文社区 | DevBox开发工具箱 | json解析格式化 |PHP资讯 | PHP教程 | 数据库技术 | 服务器技术 | 前端开发技术 | PHP框架 | 开发工具 | 在线工具
Copyright © 1998 - 2020 PHP1.CN. All Rights Reserved | 京公网安备 11010802041100号 | 京ICP备19059560号-4 | PHP1.CN 第一PHP社区 版权所有