chrisvel / tududi

A Minimalist, Open-Source Task and Project Management Tool
http://tududi.com/
Other
318 stars 14 forks source link

Allow other http_origin (to use behind reverse proxy) #43

Open caimandepamer opened 4 days ago

caimandepamer commented 4 days ago

Problem: When using the APP behind a reverse proxy, the "http_origin" is different than the original, ex: Directly: http://tududi:9292 RProxied: https://tududi So the "Rack::Protection" statement prevents the login.

Example: log from the docker: WARN -- : session dropped by Rack::Protection::HttpOrigin

Work Arround:

step 1: Script created "patchApp.sh" with content:

#!/bin/bash
sed -i s/Protection/'Protection, except: [:http_origin]'/g /usr/src/app/app.rb

step 2: Add the "command" statement in the compose file:

      `command: /bin/sh -c "/custom-cont-init.d/patchApp.sh  && rake db:migrate && puma -C app/config/puma.rb" `

Other problems: This allows to login but still prevents to create tasks, projects, etc... with the log: WARN -- : session dropped by Rack::Protection::HttpOrigin
and I can not find there is the other "Protection" statement.

Thank you for this beautiful app!!!!