You don’t have permission to access this page [HTTP Remote-User=]

YunoHost-Apps / freshrss_ynh

FreshRSS package for YunoHost

https://freshrss.org

GNU Affero General Public License v3.0

28 stars 20 forks source link

You don’t have permission to access this page [HTTP Remote-User=] #140

Open mhfowler opened 2 years ago

mhfowler commented 2 years ago

After installing FreshRss,

on navigating to domain.tld,

I see the error message:

Error 403 - Forbidden
You don’t have permission to access this page [HTTP Remote-User=]

Context

Hardware: Running on Digital Ocean VPS
YunoHost version: 4.3.6.3
I have access to my server: through SSH

Steps to reproduce

install freshrss
navigate to example.tld (in my case, rss.commoninternet.net)
it redirects to https://rss.commoninternet.net/i/ and displays the error message. if I click, login, it also shows this page again

kannthus commented 2 years ago

Heya,

I had the same issue and eventually noticed when you install the app, you need to ensure that "Should this app be exposed to anonymous visitors?" is set to No.

Otherwise, you will get this 403 issue, this does not cause any issues with the API, so don't fret.

pepeciseaux commented 1 year ago

Same issue here, it seems.

Steps:

I made a fresh install of the app (pure "vanilla" install from Yunohost admin panel)
I carefully checked the box noticed by @kannthus to expose the app to anonymous users
I went to the app domain in the browser in order to log in
I got the same message as reported by @mhfowler (as my server is in French, the message reads: "Error 403 - Forbidden / Vous n’avez pas le droit d’accéder à cette page ! [HTTP Remote-User=]").

Context:

FreshRSS-ynh: 1.20.1~ynh1
YunoHost: 4.4.2.14 (stable)

pepeciseaux commented 1 year ago

Workaround⁽*⁾:

set auth mode to 'none' in FreshRSS config file (that was /var/www/freshrss/data/config.php for me)
go to the web page of the app, you are logged in
in the app go to Authentication and set to "Use a form" or something like that
log in through the app home page

⁽*⁾ At least that worked for me. Based on this tip.

It might be useful to note that in this Authentication menu the option "HTTP" was shaded (grey text). Indeed HTTP auth mode was the one activated initially, leading to the 403 error.

Now I can log in with the chosen password.

Edit 2024-05-07:

Between points 2 and 3 I initially wrote a step saying "in the app go to Profile and set a password". It seems unrelevant because I just used the workaround without doing that step and it worked.