{"action":"created","issue":{"url":"https://api.github.com/repos/nextcloud/twofactor_u2f/issues/90","repository_url":"https://api.github.com/repos/nextcloud/twofactor_u2f","labels_url":"https://api.github.com/repos/nextcloud/twofactor_u2f/issues/90/labels{/name}","comments_url":"https://api.github.com/repos/nextcloud/twofactor_u2f/issues/90/comments","events_url":"https://api.github.com/repos/nextcloud/twofactor_u2f/issues/90/events","html_url":"https://github.com/nextcloud/twofactor_u2f/issues/90","id":290766549,"number":90,"title":"How to make U2F working behind haproxy","user":{"login":"gergap","id":439379,"avatar_url":"https://avatars3.githubusercontent.com/u/439379?v=4","gravatar_id":"","url":"https://api.github.com/users/gergap","html_url":"https://github.com/gergap","followers_url":"https://api.github.com/users/gergap/followers","following_url":"https://api.github.com/users/gergap/following{/other_user}","gists_url":"https://api.github.com/users/gergap/gists{/gist_id}","starred_url":"https://api.github.com/users/gergap/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gergap/subscriptions","organizations_url":"https://api.github.com/users/gergap/orgs","repos_url":"https://api.github.com/users/gergap/repos","events_url":"https://api.github.com/users/gergap/events{/privacy}","received_events_url":"https://api.github.com/users/gergap/received_events","type":"User","site_admin":false},"labels":[{"id":503068685,"url":"https://api.github.com/repos/nextcloud/twofactor_u2f/labels/needs%20info","name":"needs info","color":"fbca04","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-01-23T09:31:33Z","updated_at":"2018-02-01T09:56:55Z","closed_at":"2018-02-01T09:56:55Z","author_association":"NONE","body":"Hi,\r\n\r\nI've nextcloud running behind haproxy, which work in general, but not with U2F.\r\nMaybe this is a \"feature\", that U2F detect the MITM, but in this case it is not an attack,\r\nbut a desired feature, that I can runn nextcloud behind haproxy.\r\n\r\nI don't know the technical details on how U2F sends its challange/response over https (or uses it's separate connection?).\r\nBut actually there is a TLS connection from the browser to the haproxy with one haproxy-certificate.\r\nSo haproxy is the endpoints of this connection and creates a separate one to nextcloud via TLS.\r\nThis also means that haproxy sees the unecrpyted data, but both servers are under my control,\r\nno problem here.\r\n\r\nAny ideas why U2F does not work via haproxy? and how to fix this?"},"comment":{"url":"https://api.github.com/repos/nextcloud/twofactor_u2f/issues/comments/362215935","html_url":"https://github.com/nextcloud/twofactor_u2f/issues/90#issuecomment-362215935","issue_url":"https://api.github.com/repos/nextcloud/twofactor_u2f/issues/90","id":362215935,"user":{"login":"ChristophWurst","id":1374172,"avatar_url":"https://avatars3.githubusercontent.com/u/1374172?v=4","gravatar_id":"","url":"https://api.github.com/users/ChristophWurst","html_url":"https://github.com/ChristophWurst","followers_url":"https://api.github.com/users/ChristophWurst/followers","following_url":"https://api.github.com/users/ChristophWurst/following{/other_user}","gists_url":"https://api.github.com/users/ChristophWurst/gists{/gist_id}","starred_url":"https://api.github.com/users/ChristophWurst/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ChristophWurst/subscriptions","organizations_url":"https://api.github.com/users/ChristophWurst/orgs","repos_url":"https://api.github.com/users/ChristophWurst/repos","events_url":"https://api.github.com/users/ChristophWurst/events{/privacy}","received_events_url":"https://api.github.com/users/ChristophWurst/received_events","type":"User","site_admin":false},"created_at":"2018-02-01T09:56:55Z","updated_at":"2018-02-01T09:56:55Z","author_association":"MEMBER","body":"No feedback provided, so I'm assuming the linked documentation has helped resolving the problem."}}
{"actor":{"display_login":"ChristophWurst"}}