User name not put into headers about vouch-proxy HOT 8 CLOSED

  location / {

  auth_request_set $auth_resp_jwt $upstream_http_x_lasso_jwt;
  auth_request_set $auth_resp_err $upstream_http_x_lasso_err;
  auth_request_set $auth_resp_failcount $upstream_http_x_lasso_failcount;
  auth_request_set $auth_resp_x_lasso_user $upstream_http_x_lasso_user;

         proxy_pass http://ds;
        proxy_set_header X-User $auth_resp_x_lasso_user;
        proxy_set_header X-test mytest;
  }

  auth_request_set $auth_resp_jwt $upstream_http_x_lasso_jwt;
  auth_request_set $auth_resp_err $upstream_http_x_lasso_err;
  auth_request_set $auth_resp_failcount $upstream_http_x_lasso_failcount;
  auth_request_set $auth_resp_x_lasso_user $upstream_http_x_lasso_user;

oauth:
  # configure only one of the following


  # Generic OpenID Connect
  provider: oidc
  client_id: XXX
  client_secret: YYYY
  auth_url: https://1111.oktapreview.com/oauth2/default/v1/authorize
  token_url: https://1111.oktapreview.com/oauth2/default/v1/token
  user_info_url: https://1111.oktapreview.com/oauth2/default/v1/userinfo
  scopes:
    - openid
    - email
    - profile
  callback_url: https://myhost:9090/auth

auth_request_set $auth_user $upstream_http_x_lasso_user;

upstream ds {
	server 10.80.9.11:9999;
}
server {
    listen 9090 ssl;
    server_name myserver;
        ssl_certificate /data/keys/myserver.crt;
    ssl_certificate_key /data/keys/myserver.key;
    location / {
       proxy_set_header Host myserver;
       proxy_pass http://127.0.0.1:9091;
    }
}

server {
    listen 443 ssl;
    server_name myserver;
    ssl_certificate /data/keys/myserver.crt;
    ssl_certificate_key /data/keys/myserver.key;
    add_header Strict-Transport-Security max-age=2592000;

# Any request to this server will first be sent to this URL
auth_request /validate;

location = /validate {

  # This address is where Lasso will be listening on
  proxy_pass https://myserver:9090;
  proxy_pass_request_body off; # no need to send the POST body

  proxy_set_header Content-Length "";
  proxy_set_header X-Real-IP $remote_addr;
  proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  proxy_set_header X-Forwarded-Proto $scheme;

  # these return values are passed to the @error401 call
  auth_request_set $auth_resp_jwt $upstream_http_x_lasso_jwt;
  auth_request_set $auth_resp_err $upstream_http_x_lasso_err;
  auth_request_set $auth_resp_failcount $upstream_http_x_lasso_failcount;
auth_request_set $auth_resp_x_lasso_user $upstream_http_x_lasso_user;
}

error_page 401 = @error401;

# If the user is not logged in, redirect them to Lasso's login URL
location @error401 {
  return 302 https://myserver:9090/login?url=https://$http_host$request_uri&lasso-failcount=$auth_resp_failcount&X-Lasso-Token=$auth_resp_jwt&error=$auth_resp_err;
}



  location / {

	 proxy_pass http://ds;
       proxy_set_header X-Lasso-User $auth_resp_x_lasso_user;
      proxy_set_header X-test mytest;
  }
}