From e1e2fdeeac9d9baafc3841f8aca248b0ad58ad35 Mon Sep 17 00:00:00 2001
From: "J. Q" <55899496+jawadqur@users.noreply.github.com>
Date: Tue, 7 Nov 2023 11:47:28 -0600
Subject: [PATCH] Update orthanc-service.conf (#2402)

---
 .../gen3.nginx.conf/orthanc-service.conf      | 31 ++++++++++++-------
 1 file changed, 20 insertions(+), 11 deletions(-)

diff --git a/kube/services/revproxy/gen3.nginx.conf/orthanc-service.conf b/kube/services/revproxy/gen3.nginx.conf/orthanc-service.conf
index 70d2918ea..ed736189c 100644
--- a/kube/services/revproxy/gen3.nginx.conf/orthanc-service.conf
+++ b/kube/services/revproxy/gen3.nginx.conf/orthanc-service.conf
@@ -7,17 +7,6 @@ location /orthanc/ {
     set $authz_method "create";
     set $authz_service "orthanc";
 
-    if ($request_uri ~ "^/orthanc/dicom-web/studies/") {
-        set $authz_method "read";
-        set $authz_resource "/services/orthanc/studies";
-
-        if ($request_method = POST) {
-            return 403;
-            # set $authz_method "create";
-            # set $authz_resource "/services/orthanc/studies";
-        }
-    }
-
     auth_request /gen3-authz;
 
     proxy_set_header Authorization "Basic cHVibGljOmhlbGxv";
@@ -30,3 +19,23 @@ location /orthanc/ {
     # no limit to payload size so we can upload large DICOM files
     client_max_body_size 0;
 }
+
+location /orthanc/dicom-web/studies/ {
+    set $authz_method "read";
+    set $authz_resource "/services/orthanc/studies";
+    set $authz_service "orthanc";
+
+    auth_request /gen3-authz;
+    if ($request_method = POST) {
+        return 403;
+    }
+    proxy_set_header Authorization "Basic cHVibGljOmhlbGxv";
+
+    set $proxy_service  "orthanc";
+    set $upstream http://orthanc-service.$namespace.svc.cluster.local;
+    rewrite ^/orthanc/(.*) /$1 break;
+    proxy_pass $upstream;
+
+    # no limit to payload size so we can upload large DICOM files
+    client_max_body_size 0;
+}