flowing API policy misconfiguration?

mouse-reeve / mastodon

GNU Social cross-functional microblogging: an oulipo fork

https://oulipo.social

GNU Affero General Public License v3.0

11 stars 10 forks source link

flowing API policy misconfiguration? #37

Open moonmilk opened 7 years ago

moonmilk commented 7 years ago

Refused to connect to 'wss://oulipo.social//api/v1/streaming/?access_token=[]&stream=public:local' because it violates the following Content Security Policy directive: "connect-src wss://example.com 'self'".

Possibly example.com ought to say oulipo.social at that spot?

[x] I searched or browsed the repo’s other issues to ensure this is not a duplicate.

moonmilk commented 7 years ago

(found by @starlit: https://oulipo.social/@starlit/32376)

starlit-void commented 7 years ago

this listing may show a ray of light: https://github.com/mouse-reeve/mastodon/blob/master/spec/fabricators/application_fabricator.rb

etjossem commented 7 years ago

I saw this too.

Cmd-R is thusly a must to pull new toots.

ecmendenhall commented 7 years ago

I'm looking at Rails for this, but I think this is down to a bash var in prod such as this, or an Nginx config such as this, which should say "oulipo.social".

mouse-reeve commented 7 years ago

fixing my apache2 config did fix that JS log but now it's 500ing. chuggin' along

starlit-void commented 7 years ago

now browsing output has: application-eb0878a….js:1894 WebSocket connection to 'wss://oulipo.social//api/v1/streaming/?access_token=<TOKEN>&stream=user' failed: Error during WebSocket handshake: Unexpected response code: 500 non-stop

mouse-reeve commented 7 years ago

yup, hoping to work out why and fix that soon