From 2abb6a461faec6003a2f73b11c1bfaa6addb62ec Mon Sep 17 00:00:00 2001 From: Eric Leijonmarck Date: Mon, 13 Jun 2022 11:13:29 +0200 Subject: [PATCH] Docs: updated CSRF additional headers (#50589) * Docs: updated CSRF additional headers * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml.md Co-authored-by: heoelri * update to include referer * Update docs/sources/setup-grafana/configure-security/configure-authentication/saml.md Co-authored-by: Emil Tullstedt Co-authored-by: Emil Tullstedt Co-authored-by: heoelri --- .../configure-security/configure-authentication/saml.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/sources/setup-grafana/configure-security/configure-authentication/saml.md b/docs/sources/setup-grafana/configure-security/configure-authentication/saml.md index 85f33f00d74..98fdd86bfd5 100644 --- a/docs/sources/setup-grafana/configure-security/configure-authentication/saml.md +++ b/docs/sources/setup-grafana/configure-security/configure-authentication/saml.md @@ -412,7 +412,7 @@ The keys you provide should look like: When the user logs in using SAML and gets presented with "origin not allowed", the user might be issuing the login from an IdP (identity provider) service or the user is behind a reverse proxy. This potentially happens as Grafana's CSRF checks deem the requests to be invalid. For more information [CSRF](https://owasp.org/www-community/attacks/csrf). -To solve this issue, you can configure either the [`csrf_trusted_origins`]({{< relref "../../configure-grafana/enterprise-configuration/#csrf-trusted-origins" >}}) or [`csrf_origin_headers`]({{< relref "../../configure-grafana/enterprise-configuration/#csrf-origin-headers" >}}) option in the SAML configuration. +To solve this issue, you can configure either the [`csrf_trusted_origins`]({{< relref "../../configure-grafana/#csrf-trusted-origins" >}}) or [`csrf_additional_headers`]({{< relref "../../configure-grafana/#csrf_additional_headers" >}}) option in the SAML configuration. Example of a configuration file: @@ -421,6 +421,6 @@ Example of a configuration file: ... [security] csrf_trusted_origins = https://grafana.example.com -csrf_origin_headers = X-Forwarded-Proto X-Forwarded-Host X-Forwarded-Port +csrf_additional_headers = X-Forwarded-Host ... ```