search

minio / console

Simple UI for MinIO Object Storage :abacus:
https://min.io/docs/minio/linux/index.html
GNU Affero General Public License v3.0
849 stars 278 forks source link

Login bug #3350

Closed japlic closed 5 months ago

japlic commented 5 months ago

NOTE

If this case is urgent, please subscribe to Subnet so that our 24/7 support team may help you faster.

Expected Behavior'

logging in

Current Behavior

Failed to load resource: the server responded with a status of 403 (Forbidden) jsx-runtime.js:4 Refused to connect to 'https://unpkg.com/detect-gpu@5.0.38/dist/benchmarks/d-intel.json' because it violates the following Content Security Policy directive: "default-src 'self' 'unsafe-eval' 'unsafe-inline'". Note that 'connect-src' was not explicitly set, so 'default-src' is used as a fallback.

(anonymous) @ jsx-runtime.js:4 Show 1 more frame Show less jsx-runtime.js:4 Refused to connect to 'https://unpkg.com/detect-gpu@5.0.38/dist/benchmarks/d-intel.json' because it violates the document's Content Security Policy. (anonymous) @ jsx-runtime.js:4 Show 1 more frame Show less api/v1/login:1 

   Failed to load resource: the server responded with a status of 401 (Unauthorized)

Possible Solution

Context

logging in into the webapp

idk

Regression

Your Environment

prakashsvmx commented 5 months ago

could you capture mc admin trace -v -a --funcname "sts.*" <ALIAS>

is there any loadbalancer/proxy setup ?

pjuarezd commented 5 months ago

this is a dependency that is being blocked by the CSP policies, we are going to check it

japlic commented 5 months ago

ummm its not mc

japlic commented 5 months ago

ok

japlic commented 5 months ago

Is there away to fix it

pjuarezd commented 5 months ago

You can fix the Content Security Policy (see Mozilla docs for more info about CSP) by trusting the host https://unpkg.com, this can be done withmc`

mc admin config set ALIAS browser csp_policy="default-src 'self' 'unsafe-eval' 'unsafe-inline'; connect-src 'self' https://unpkg.com"

Don't forget to restart the service after the config change

mc admin service restart ALIAS
pjuarezd commented 5 months ago

could you capture mc admin trace -v -a --funcname "sts.*" <ALIAS>

is there any loadbalancer/proxy setup ?

@japlic please provide this info @prakashsvmx is asking for, the CSP is not the reason you cannot login

cesnietor commented 5 months ago

Closing due to innactivity, please feel free to open a new one if the issue persists providing the requested information.