id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc	uname	nginx_version
1128	HTTP/2 with ngx_http_auth_request_module causes some JSON payloads to become malformed.	kcannon.gaikai.com@…		"We have an internal tool that requires all requests to be ran through auth_request. When we upgraded from 1.10.1 to 1.10.2, we noticed an increase in 400 bad request. When we would look at our nodeJS backend, we saw that the JSON body was corrupt. The request size does not matter and happens intermittently. We were able to fix the issue by rolling back to 1.10.1.

Example request body with malformed JSON in the beginning of the request:


14/Nov/2016:23:10:28 +0000 - POST /v2/heartbeat HTTP/2.0 --- h\x83}o\xBBm\x00\x00h\x83}o\xBBm\x00\x00`n[1\xA0\x08\x00\x00`n[1\xA0\x08\x00\x00st\x22:{\x22url\x22:\x22

14/Nov/2016:23:15:12 +0000 - POST /v2/heartbeat HTTP/2.0 --- {\x22events\x22:[{\x22code\x22:\x22727.1998\x22,\x22data\x22:
"	defect	closed	major		other	1.10.x	worksforme			Linux REDACTED 4.7.10-hardened-r2-base-7 #1 SMP Fri Nov 4 19:53:58 UTC 2016 x86_64 Intel Xeon E312xx (Sandy Bridge) GenuineIntel GNU/Linux	"nginx version: nginx/1.10.2
built with OpenSSL 1.0.2j  26 Sep 2016
TLS SNI support enabled
configure arguments: --prefix=/usr --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error_log --pid-path=/run/nginx.pid --lock-path=/run/lock/nginx.lock --with-cc-opt=-I/usr/include --with-ld-opt=-L/usr/lib64 --http-log-path=/var/log/nginx/access_log --http-client-body-temp-path=/var/lib/nginx/tmp/client --http-proxy-temp-path=/var/lib/nginx/tmp/proxy --http-fastcgi-temp-path=/var/lib/nginx/tmp/fastcgi --http-scgi-temp-path=/var/lib/nginx/tmp/scgi --http-uwsgi-temp-path=/var/lib/nginx/tmp/uwsgi --with-http_v2_module --with-ipv6 --with-pcre --with-threads --with-http_auth_request_module --with-http_realip_module --add-module=external_module/headers-more-nginx-module-0.31 --add-module=external_module/ngx_devel_kit-0.3.0 --add-module=external_module/lua-nginx-module-0.10.6 --with-http_ssl_module --without-stream_upstream_hash_module --without-stream_upstream_least_conn_module --without-stream_upstream_zone_module --without-stream_upstream_hash_module --without-stream_upstream_least_conn_module --without-stream_upstream_zone_module --without-stream_upstream_hash_module --without-stream_upstream_least_conn_module --without-stream_upstream_zone_module --without-mail_imap_module --without-mail_pop3_module --without-mail_smtp_module --user=nginx --group=nginx"