{"action":"created","issue":{"url":"https://api.github.com/repos/Esri/resource-proxy/issues/202","labels_url":"https://api.github.com/repos/Esri/resource-proxy/issues/202/labels{/name}","comments_url":"https://api.github.com/repos/Esri/resource-proxy/issues/202/comments","events_url":"https://api.github.com/repos/Esri/resource-proxy/issues/202/events","html_url":"https://github.com/Esri/resource-proxy/issues/202","id":57270966,"number":202,"title":"Proxy is logging users out of Esri Geoportal Server","user":{"login":"slead","id":133596,"avatar_url":"https://avatars.githubusercontent.com/u/133596?v=3","gravatar_id":"","url":"https://api.github.com/users/slead","html_url":"https://github.com/slead","followers_url":"https://api.github.com/users/slead/followers","following_url":"https://api.github.com/users/slead/following{/other_user}","gists_url":"https://api.github.com/users/slead/gists{/gist_id}","starred_url":"https://api.github.com/users/slead/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/slead/subscriptions","organizations_url":"https://api.github.com/users/slead/orgs","repos_url":"https://api.github.com/users/slead/repos","events_url":"https://api.github.com/users/slead/events{/privacy}","received_events_url":"https://api.github.com/users/slead/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":12,"created_at":"2015-02-11T03:03:30Z","updated_at":"2015-02-11T22:40:46Z","closed_at":null,"body":"I'm seeing a problem whereby passing a query to the Esri Geoportal Server's REST API, via the Esri Resource Proxy, is causing users to be logged out of the Geoportal.\r\n\r\nI can reproduce the problem like this:\r\n\r\n- install the Esri Geoportal Server on Windows using IIS\r\n- install the Esri Resource Proxy on the same machine\r\n- log in to the Geoportal (eg http://localhost:8080/geoportal/catalog/identity/login.page)\r\n- in a new tab in the same browser, send a query to the Geoportal REST API via the Esri proxy (eg http://localhost/PHP/proxy.php?http://localhost:8080/geoportal/rest/find/document?f=pjson)\r\n- switch back to the Geoportal tab, refresh the page, and note that the user is now logged out\r\n\r\nThis error does not occur for me using the sandbox Geoportal at http://gptogc.esri.com/geoportal/catalog/main/home.page (you can test it at http://stephenlead.com/esri-proxy/PHP/proxy.php?http://gptogc.esri.com/geoportal/rest/find/document?&max=10&rid=local&f=pjson)\r\n\r\nDo you know why this is occurring? Is the problem occurring because the proxy is on the same machine as the Geoportal Server? Are there any known workarounds?\r\n\r\nThanks,\r\nSteve\r\n\r\n(ping @mhogeweg) \r\n"},"comment":{"url":"https://api.github.com/repos/Esri/resource-proxy/issues/comments/73980784","html_url":"https://github.com/Esri/resource-proxy/issues/202#issuecomment-73980784","issue_url":"https://api.github.com/repos/Esri/resource-proxy/issues/202","id":73980784,"user":{"login":"phpmaps","id":2159502,"avatar_url":"https://avatars.githubusercontent.com/u/2159502?v=3","gravatar_id":"","url":"https://api.github.com/users/phpmaps","html_url":"https://github.com/phpmaps","followers_url":"https://api.github.com/users/phpmaps/followers","following_url":"https://api.github.com/users/phpmaps/following{/other_user}","gists_url":"https://api.github.com/users/phpmaps/gists{/gist_id}","starred_url":"https://api.github.com/users/phpmaps/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/phpmaps/subscriptions","organizations_url":"https://api.github.com/users/phpmaps/orgs","repos_url":"https://api.github.com/users/phpmaps/repos","events_url":"https://api.github.com/users/phpmaps/events{/privacy}","received_events_url":"https://api.github.com/users/phpmaps/received_events","type":"User","site_admin":false},"created_at":"2015-02-11T22:40:46Z","updated_at":"2015-02-11T22:40:46Z","body":"@slead  looks like you typing as I was typing and noted that ````http://gptogc.esri.com```` proxy case sends this ````Cookie:JSESSIONID=F17CB139CEB630B7462F3A9378B6DC12;````.\r\n\r\nI guess the only way to test your theory is to try using a resource-proxy from a different server. \r\n\r\nHere is an older version of the PHP proxy - but is should be close enough to test your theory... \r\n\r\nhttp://54.82.255.206/ogc/proxy.php \r\n\r\n"}}