search

jallphin / spitfire

Red Team Server (RTS)
16 stars 7 forks source link

Reconmap busted #2

Open jallphin opened 2 years ago

jallphin commented 2 years ago

Title says it all -

Docker status for Reconmap looks good, but login won't work. Probably a CORS problem again. Still using old docker image so I really need to take a look at this project and evaluate if it is still viable.

jallphin commented 2 years ago 
login:1 
 Access to fetch at 'http://rts.lan:5510/users/login' from origin 'http://reconmap.rts.lan' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource. If an opaque response serves your needs, set the request's mode to 'no-cors' to fetch the resource with CORS disabled.
VM9:1 

 POST http://rts.lan:5510/users/login net::ERR_FAILED

CORS....sigh

Will troubleshoot in addition to investigating getting this docker image upgraded.

jallphin commented 2 years ago

Project is migrating to keycloak and as such disabled the Allowed Origins header in the webapp, without actually completing the keycloak integration which has effectively prevented anyone from signing into the webapp DESPITE adding the CORS AllowedOrigins configuration in the config.json

Until the developer has fixed this, this project is disabled until further notice. I will leave the link RTS homepage, and leave the code intact in rts-setup.sh and docker-compose.yml but will comment it out until the project is either fixed or abandoned at which point I will remove it from the above scripts.