dynamic default index page has bad behavior when access from non localhost

maxandersen commented 2 months ago

Describe the bug

I'm using ngrok to expose my app as github/zulip bots.

the new default landing page then now just shows up with /q/dev-ui/welcome and stuck at "quarkus" logo.

This is due to default cors preventing such access.

Same will happen I assume in web ide dev environments etc.

Expected behavior

that some index page can be shown with a hint of what went wrong - unauthorized access would be useful.

or at least some info.

Actual behavior

No response

How to Reproduce?

No response

Output of `uname -a` or `ver`

No response

Output of `java -version`

No response

Quarkus version or git rev

No response

Build tool (ie. output of `mvnw --version` or `gradlew --version`)

No response

Additional information

No response

quarkus-bot[bot] commented 2 months ago

/cc @cescoffier (devui), @pedroigor (bearer-token), @phillip-kruger (devui,mvnpm), @sberyozkin (bearer-token,jwt,security)

phillip-kruger commented 2 months ago

Can you describe how to recreate this ?

gsmet commented 2 months ago

I think the easiest way to reproduce it is to update your /etc/hosts to point ‘whatever’ to 127.0.0.1 and then go to Dev UI. Haven’t tested it though.

phillip-kruger commented 2 months ago

Thanks. Max showed me how, so I'll fix it soon

cescoffier commented 2 months ago

Just use 0.0.0.0 instead of local host and you will reproduce.

quarkusio / quarkus