Swagger using http instead of https through our NGINX reverse proxy

[dbayer]

Hello,

I’m using version 4.6 with our NGINX Reverse Proxy.

I’m testing API access through the Swagger interface. It connects properly through HTTPS to see it’s User Interface, but when do a “Try it out”, the Proposed URL is using HTTP, and therefore doesn’t work.

If I modify the URL to use HTTPS with curl on the CLI I get a valid response.

Also, I can only select the HTTP Scheme, there is no HTTPS choice.

One more thing, The title on the Swagger User Interface is “None API”.

Thanks

[roberto.rosario]

Hi,

Version 4.6 uses Django 4.2 which changes how HTTPS is handled.

Try using some of the new CSRF settings added. Specially MAYAN_CSRF_TRUSTED_ORIGINS.

Csrf verification failed with cloudflare zero trust

Django 4.2 changes how HTTPS operates from behind a reverse proxy. That’s why we exposed more HTTPS related settings. https://docs.mayan-edms.com/releases/4.6.html#settings Without access to your installation it is impossible to know how to address it. This is the most common settings to fix HTTPS issues now. Try adding this to your .env file. Add your exposed domain as an item in a list for MAYAN_CSRF_TRUSTED_ORIGINS Example: MAYAN_CSRF_TRUSTED_ORIGINS=['https://staging.mayan.cloud'] Repla…

One more thing, The title on the Swagger User Interface is “None API”.

Can you post a cropped screenshot of this to examine it?

[dbayer]

Hi Roberto,

Thanks for the help. I already had that Variable set

MAYAN_CSRF_TRUSTED_ORIGINS=['https://docs-test.mywebsite.com']

[Cedric]

Hello @dbayer ,

I had the same issue, I also added the “MAYAN_CSRF_TRUSTED_ORIGINS” variable (like you) but it didn’t work totally.
And I finally fixed it by adding the key “MAYAN_ORGANIZATIONS_INSTALLATION_URL” set with my https URL.
In your case :

MAYAN_ORGANIZATIONS_INSTALLATION_URL=https://docs-test.******

Hope it helps.

[dbayer]

Thanks for the tip!

I’ll give it a try, and report my results here.

[roberto.rosario]

The MAYAN_CSRF_TRUSTED_ORIGINS variable is only relevant to HTTPS when using a reverse proxy. Mostly to solve CSRF safety issues.

The variable MAYAN_ORGANIZATIONS_INSTALLATION_URL is required to prefix all links with your domain name. Such as document file or export download links.

Use MAYAN_COMMON_PROJECT_TITLE to change the title in some areas. This variable is being changed/phased out in intervals.

[dbayer]

@Cedric

MAYAN_ORGANIZATIONS_INSTALLATION_URL=https://docs-test

This worked to get a proper CURL statement. Which is what matters. Thank you.

But it still says None API in the title.

@roberto.rosario

Use MAYAN_COMMON_PROJECT_TITLE to change the title in some areas. This variable is being changed/phased out in intervals.

@roberto.rosario Would that Variable solve the None API issue?

[roberto.rosario]

We are working on version 4.5.9 which should be released in a few hours. It finishes the normalization of the MAYAN_COMMON_PROJECT_TITLE changes introduced in version 4.5. From our tests, this fully fixes the REST API title issue.

[roberto.rosario]

This issue is now fully resolved in version 4.5.9. Work on version 4.6.1 has started which will include this fix.

Version 4.5.9

Version 4.5.9 Released: February 5, 2024 Status: Stable Changes This version includes the changes from version 4.4.12 plus the following: Appearance Don't raise an error if a form view has no form defined. This can be the case for dynamic forms based on ACL where the current user has no access for any of the fields. Dependencies Updated dependency versions: django-test-migrations from 1.1.0 to 1.3.0. pypdf from 3.14.0 to 3.17.4 due to CVE-2023-46250. safety from 3.0.1 to 2.3.5. Docker Upd…