{"action":"created","issue":{"url":"https://api.github.com/repos/meteor/meteor/issues/7570","repository_url":"https://api.github.com/repos/meteor/meteor","labels_url":"https://api.github.com/repos/meteor/meteor/issues/7570/labels{/name}","comments_url":"https://api.github.com/repos/meteor/meteor/issues/7570/comments","events_url":"https://api.github.com/repos/meteor/meteor/issues/7570/events","html_url":"https://github.com/meteor/meteor/issues/7570","id":169215904,"number":7570,"title":"[sockjs] Obtain REMOTE_USER from connection object","user":{"login":"srbdev","id":2583156,"avatar_url":"https://avatars.githubusercontent.com/u/2583156?v=3","gravatar_id":"","url":"https://api.github.com/users/srbdev","html_url":"https://github.com/srbdev","followers_url":"https://api.github.com/users/srbdev/followers","following_url":"https://api.github.com/users/srbdev/following{/other_user}","gists_url":"https://api.github.com/users/srbdev/gists{/gist_id}","starred_url":"https://api.github.com/users/srbdev/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/srbdev/subscriptions","organizations_url":"https://api.github.com/users/srbdev/orgs","repos_url":"https://api.github.com/users/srbdev/repos","events_url":"https://api.github.com/users/srbdev/events{/privacy}","received_events_url":"https://api.github.com/users/srbdev/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-08-03T19:43:15Z","updated_at":"2016-08-04T07:49:01Z","closed_at":null,"body":"I am using Meteor 1.3.5.1 and have the following setup: Apache acts as a proxy and authenticates a user. Once the user is authenticated, the connection is forwarded to the Meteor app with the REMOTE_USER HTTP header. I have the following piece of code in my `server/main.js` file:\r\n\r\n```javascript\r\nMeteor.onConnection((connection) => {\r\n  console.log(connection);\r\n});\r\n```\r\n\r\nI see some information but I cannot see the REMOTE_USER value. I read in the documentation that the HTTP headers are whitelisted but it doesn't specify how one would go about editing the whitelist."},"comment":{"url":"https://api.github.com/repos/meteor/meteor/issues/comments/237478792","html_url":"https://github.com/meteor/meteor/issues/7570#issuecomment-237478792","issue_url":"https://api.github.com/repos/meteor/meteor/issues/7570","id":237478792,"user":{"login":"mitar","id":585279,"avatar_url":"https://avatars.githubusercontent.com/u/585279?v=3","gravatar_id":"","url":"https://api.github.com/users/mitar","html_url":"https://github.com/mitar","followers_url":"https://api.github.com/users/mitar/followers","following_url":"https://api.github.com/users/mitar/following{/other_user}","gists_url":"https://api.github.com/users/mitar/gists{/gist_id}","starred_url":"https://api.github.com/users/mitar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mitar/subscriptions","organizations_url":"https://api.github.com/users/mitar/orgs","repos_url":"https://api.github.com/users/mitar/repos","events_url":"https://api.github.com/users/mitar/events{/privacy}","received_events_url":"https://api.github.com/users/mitar/received_events","type":"User","site_admin":false},"created_at":"2016-08-04T07:49:01Z","updated_at":"2016-08-04T07:49:01Z","body":"Yes, you make an Ajax request to the Meteor endpoint on the server and then expose this to the rest of the code. This is also safe and secure from the perspective of the cross-origin requests. [This packages does exactly this](https://github.com/sandstorm-io/meteor-accounts-sandstorm). It might be interesting to extract this logic into a 3rd party package which then you and others could just use."}}
{"actor":{"display_login":"mitar"}}