Skip to content

Change the value of "x-client-os" header - #844

Closed
Kevin Tong (tongyuze) wants to merge 1 commit into
devfrom
yuto/change-os-header
Closed

Change the value of "x-client-os" header#844
Kevin Tong (tongyuze) wants to merge 1 commit into
devfrom
yuto/change-os-header

Conversation

@tongyuze

@tongyuze Kevin Tong (tongyuze) commented Aug 6, 2025

Copy link
Copy Markdown

eSTS expects we send x-client-os: Windows instead of win32 as there are no OS called win 32. win32 is not a recognized OS string in the current server-side platform detection logic.

@tongyuze
Kevin Tong (tongyuze) requested a review from a team as a code owner August 6, 2025 20:36

@rayluo Ray Luo (rayluo) left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stakeholders discussed offline and are evaluating alternative options. So, I am leaving a Request Changes review here for now, so that my other teammates will not merge this PR as-is.

@rayluo

Copy link
Copy Markdown
Contributor

Summary of the offline discussion.

  • We consider have service-side consume the client-side "win32" value which has existed since day one.
  • Regardless, the user-agent value and x-client-os value, which is what CA relies on for platform detection in this case, is easily spoofable even without a proxy, which is why our public guidance advises against using platform information for Conditional Access controls.

@rayluo
Ray Luo (rayluo) deleted the yuto/change-os-header branch August 14, 2025 18:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants