search

ticketz-oss / ticketz

Chat based ticket system
GNU Affero General Public License v3.0
145 stars 113 forks source link

Incompatibility with dynamic dns hostnames (no-ip.org and ddns) #67

Closed hugomza2003 closed 5 months ago

hugomza2003 commented 6 months ago

good day, install (curl -sSL get.ticke.tz | sudo bash -s backend.example.com frontend.example.com name@example.com) and I get a refresh token error, does anyone have the same problem. The 2 subdomains are from noip.com pointing to my server with dns record A. thank you

Expected behavior A clear and concise description of what you expected to happen.

Screenshots refresh_token 401 (Unauthorized)

Desktop (please complete the following information):

hugomza2003 commented 5 months ago

The error occurs only with Google Chrome, with Firefox it works ok.

allgood commented 5 months ago

Looks like you are having a CORS issue. I wasn't able to simulate this fail here.

allgood commented 5 months ago

Google chrome has a built-in list with some services, including cloudfront.net, no-ip.org and many domains managed by dynamic dns services.

This is a security related behaviour, this avoids cross-site cookies between sites using the same service.

The list of the sites that causes this problem is available at https://publicsuffix.org/

allgood commented 5 months ago

This may be fixed when #91 gets fixed.

allgood commented 5 months ago

Reopening, it can be fixed using "sameSite: 'none'; secure: true" on cookie setting.