search

Art-of-WiFi / UniFi-API-browser

Tool to browse data exposed by Ubiquiti's UniFi Controller API
MIT License
1.1k stars 150 forks source link

Possible issue with CORS #96

Closed ithakeith closed 2 years ago

ithakeith commented 2 years ago

Of interest perhaps is the 'strict-origin-when-core-origin' issue tied to the 'fetch_sites' javascript. We only have one controller, and never named a site. It is currently listed as 'Default' in controller settings.

Behavior:

Navigate to /unifi-api-browser/ Enter credentials setup in config/users.php ... I get a browser 500 Internal server error If I hit the "back" button in the browser ... I get the expected Unifi API Browser UI, with user logged in If I then click on 'Controllers' and select mine ... I get 'Error loading sites or no sites available!' If I try with /unifi-api-browser/vendor/autoload.php ... I get a browser 500 Internal server error

Environment:

OS: Windows Server 2019 1809/17763.2366 Server: IIS 10.0.17763.1 PHP: 7.4.25 Controller: 6.5.55 (single controller with site name 'Default') Unifi API: 2.0.23 PHP API: 1.1.76 cURL: 7.70.0 Controller version NOT detected by API

Chrome Developer:

Network > Headers: --General: Request URL: http://*myServer*/unifi-api-browser/ajax/fetch_sites.php Request Method: POST Status Code: 500 Internal Server Error Remote Address: myServer:80 Referrer Policy: strict-origin-when-cross-origin --Response Headers: Content-Length: 1208 Content-Type: text/html Date: Mon, 14 Feb 2022 17:51:14 GMT Persistent-Auth: true Server: Microsoft-IIS/10.0 --Request Headers: Accept: application/json, text/javascript, /; q=0.01 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Connection: keep-alive Content-Length: 0 Cookie: PHPSESSID=uiknb69enkjd7l13usj5r3o7db --Console: POST http://*myServer*/unifi-api-browser/ajax/fetch_sites.php 500 (Internal Server Error) send @ jquery.min.js:2 ajax @ jquery.min.js:2 fetchSites @ custom.js?2.0.23:261 (anonymous) @ custom.js?2.0.23:484

Logs:

No errors reported in PHP_7425_FastCFGI_errors.log

IIS log:

Software: Microsoft Internet Information Services 10.0

Version: 1.0

Date: 2022-02-14 16:55:21

Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken

2022-02-14 16:55:21 10.200.68.31 GET /unifi-api-browser/logout.php - 80 - 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 401 2 5 4 2022-02-14 16:55:21 10.200.68.31 GET /unifi-api-browser/logout.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 302 0 0 15 2022-02-14 16:55:21 10.200.68.31 GET /unifi-api-browser/ - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 34 2022-02-14 16:55:21 10.200.68.31 GET /unifi-api-browser/js/custom.js 2.0.23 80 - 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 401 2 5 3 2022-02-14 16:55:21 10.200.68.31 GET /unifi-api-browser/js/custom.js 2.0.23 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 304 0 0 27 2022-02-14 16:55:21 10.200.68.31 GET /unifi-api-browser/css/custom.css 2.0.23 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 304 0 0 50 2022-02-14 16:55:21 10.200.68.31 POST /unifi-api-browser/ajax/fetch_sites.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 25 2022-02-14 16:55:21 10.200.68.31 POST /unifi-api-browser/ajax/show_api_debug.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 48 2022-02-14 16:55:21 10.200.68.31 GET /unifi-api-browser/ajax/fetch_about_modal_metrics.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 57 2022-02-14 16:55:33 10.200.68.31 POST /unifi-api-browser/login.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 500 0 0 10 2022-02-14 16:55:41 10.200.68.31 GET /unifi-api-browser/ - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 - 200 0 0 44 2022-02-14 16:55:41 10.200.68.31 POST /unifi-api-browser/ajax/fetch_sites.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 19 2022-02-14 16:55:41 10.200.68.31 POST /unifi-api-browser/ajax/show_api_debug.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 56 2022-02-14 16:55:41 10.200.68.31 GET /unifi-api-browser/ajax/fetch_about_modal_metrics.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 39 2022-02-14 16:55:45 10.200.68.31 POST /unifi-api-browser/ajax/update_controller.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 14 2022-02-14 16:55:45 10.200.68.31 GET /unifi-api-browser/ - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 128 2022-02-14 16:55:45 10.200.68.31 POST /unifi-api-browser/ajax/show_api_debug.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 431 2022-02-14 16:55:46 10.200.68.31 POST /unifi-api-browser/ajax/fetch_sites.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 500 0 0 889 2022-02-14 16:55:52 10.200.68.31 POST /unifi-api-browser/ajax/update_controller.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 13 2022-02-14 16:55:52 10.200.68.31 POST /unifi-api-browser/ajax/show_api_debug.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 500 0 0 991 2022-02-14 16:55:54 10.200.68.31 POST /unifi-api-browser/ajax/fetch_sites.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 1956 2022-02-14 16:55:54 10.200.68.31 GET /unifi-api-browser/ajax/fetch_about_modal_metrics.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 36 2022-02-14 16:55:56 10.200.68.31 POST /unifi-api-browser/ajax/update_controller.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 500 0 995 4 2022-02-14 16:56:10 10.200.68.31 GET /unifi-api-browser/ - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 50 2022-02-14 16:56:11 10.200.68.31 POST /unifi-api-browser/ajax/show_api_debug.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 500 0 0 972 2022-02-14 16:56:11 10.200.68.31 POST /unifi-api-browser/ajax/fetch_sites.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 1951 2022-02-14 16:56:12 10.200.68.31 GET /unifi-api-browser/ajax/fetch_about_modal_metrics.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 55 2022-02-14 16:56:15 10.200.68.31 POST /unifi-api-browser/ajax/update_controller.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 12 2022-02-14 16:56:15 10.200.68.31 POST /unifi-api-browser/ajax/fetch_sites.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 500 0 0 431 2022-02-14 16:56:15 10.200.68.31 POST /unifi-api-browser/ajax/show_api_debug.php - 80 TBURGCSD\kslayden 10.68.32.113 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/98.0.4758.82+Safari/537.36 http://atrios.tburg.k12.ny.us/unifi-api-browser/ 200 0 0 445

malle-pietje commented 2 years ago

I’m afraid I’m unable to provide support for non-Linux based setups. If you have a PR to fix this issue I’m certainly willing to test this in our environments and to merge it in if everything looks OK.

malle-pietje commented 2 years ago

BTW, these log line appear to only be related to access and not to errors that are logged by PHP. Maybe it helps if you can get the actual errors that are generated by PHP.

ithakeith commented 2 years ago

I will turn on verbose logging for PHP and see what I can find. Thanks for the quick response. : Keith

On Mon, Feb 14, 2022 at 3:09 PM malle-pietje @.***> wrote:

BTW, these log line appear to only be related to access and not to errors that are logged by PHP. Maybe it helps if you can get the actual errors that are generated by PHP.

— Reply to this email directly, view it on GitHub https://github.com/Art-of-WiFi/UniFi-API-browser/issues/96#issuecomment-1039506385, or unsubscribe https://github.com/notifications/unsubscribe-auth/AXYQ2PKN3T2FMF76O2F5RFTU3FORDANCNFSM5OMJU7NQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

You are receiving this because you authored the thread.Message ID: @.***>

-- : Keith

@.***