[网络协议]Nginx http跳转到https接口POST请求变成GET问题解决

引起这个问题的原因是“永久重定向和临时重定向”

301 Moved Permanently
被请求的资源已永久移动到新位置，并且将来任何对此资源的引用都应该使用本响应返回的若干个 URI 之一

307 Temporary Redirect
请求的资源现在临时从不同的URI 响应请求。由于这样的重定向是临时的，客户端应当继续向原有地址发送以后的请求

两种配置方式，如果是网站http永久跳转到https访问，使用如下方式配置；例如访问

http://www.xxx.com? ====> https://www.xxx.com,后续访问其他该网站页面都是https协议，此时按此方式配置

# www.xxx.com

server {
    listen 80;
    server_name www.xxx.com;
    rewrite ^(.*) https://www.xxx.com$1 permanent;
}

server {
    listen 443 ssl;
    server_name www.xxx.com;
    ssl_certificate   cert/xxxxxxxx.pem;
    ssl_certificate_key  cert/xxxxxxxxxxx.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    access_log /var/log/nginx/www.xxx.com_access.log;
    error_log /var/log/nginx/www.xxx.com_error.log;

    location / {
        proxy_redirect off;
        proxy_set_header host $host;
        proxy_set_header x-real-ip $remote_addr;
        proxy_set_header x-forwarded-for $proxy_add_x_forwarded_for;
        proxy_pass http://192.168.x.x:8080;
    }
}

如果是API的域名，不涉及到后续永久重定向问题，每次请求http是临时重定向到https访问

例如：http://www.xxx.com/api/order/list? ===> https://www.xxx.com/api/order/list

配置方式如下：

# www.xxx.com.conf
server {
    listen 80;
    server_name www.xxx.com;
    return 307 https://$server_name$request_uri;
}

server {
    listen 443 ssl;
    server_name www.xxx.com;
    ssl_certificate   cert/xxxxxxxxx.pem;
    ssl_certificate_key  cert/xxxxxxxxxxxx.key;
    ssl_session_timeout 5m;
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_prefer_server_ciphers on;
    access_log /var/log/nginx/www.xxx.com_access.log;
    error_log /var/log/nginx/www.xxx.com_error.log;

    location / {
        #跨域处理
        add_header 'Access-Control-Allow-Origin' '*';
        add_header 'Access-Control-Allow-Credentials' 'true';
        if ($request_method = OPTIONS){
            add_header 'Access-Control-Allow-Origin' '*';
            add_header 'Access-Control-Allow-Credentials' 'true';
            add_header 'Access-Control-Max-Age' 1728000;
            add_header 'Access-Control-Allow-Credentials' 'true';
            add_header 'Access-Control-Allow-Methods' 'GET, PUT, POST, DELETE, HEAD, OPTIONS';
            add_header 'Access-Control-Allow-Headers' 'Origin, x-requested-with, Content-Type, Accept,X-Cookie';
            proxy_pass http://192.168.x.x:8080;
            return 200;
        }
        proxy_redirect off;
        proxy_set_header host $host;
        proxy_set_header x-real-ip $remote_addr;
        proxy_set_header x-forwarded-for $proxy_add_x_forwarded_for;
        proxy_pass http://192.168.x.x:8080;
    }
}

创作打卡挑战赛

赢取流量/现金/CSDN周边激励大奖