strapi / strapi

πŸš€ Strapi is the leading open-source headless CMS. It’s 100% JavaScript/TypeScript, fully customizable and developer-first.
https://strapi.io
Other
60.66k stars 7.58k forks source link

Strapi transfer does not work with aws waf standard rules #20183

Closed imfrostii8 closed 3 weeks ago

imfrostii8 commented 3 weeks ago

Bug report

Required System information

Describe the bug

When running strapi transfer from or to a remote hosted on aws with a standard waf it shows: error: [FATAL] Failed to initialize the connection: Authorization Error Transfer process failed.

The waf runs the core rule set based on vulnerabilities published by OWASP.

Steps to reproduce the behavior

  1. Start a new strapi project.
  2. Deploy it to aws with a waf in front of it.
  3. Run the strapi transfer command from or to the remote instance.

Expected behavior

It should transfer data normally to and from the remote instance.

Additional context

Disabling the wof solves the issue

github-actions[bot] commented 3 weeks ago

This is a templated message

Hello @imfrostii8,

I see you are wanting to ask a question that is not really a bug report,

Please see the following contributing guidelines for asking a question here.

Thank you.

derrickmehaffy commented 3 weeks ago

DTS auth is no different than normal user auth since it uses a bearer token in an authorization header.

Closing as a question since this really isn't related to us and is more so about properly configuring the WAF for authorization header usage.