401 Unauthorized Error

thephphero

I am having an issue saving just about anything in my forum. Everytime I try to save settings or create discussions and basically any action that gets done through javsacript, I am seeing an endless spinner and no more reaction from the system. When I repeat the action and inspect it with chrome network tab, I am getting this:

Remote Address: 0.0.1.188:80
Request URL: http://forum.yerbamateblog.com/api/users/1/avatar
Request Method: POST
Status Code: 401 Unauthorized

It seems I am not authorized to make this request. I am logged in as an admin user with full rights. This is a clean install and I have changed nothing in the permissions menu. The only change I have made to any of the files was adding a
RewriteBase /
to my .htaccess file, so that it works with the apache server on my shared hosting. Additionally, I am using PHP5.5 and apache2.

The reponse in my network tab returns an empty error json, like this:

{"errors":[]}

Again, navigating the forum works fine. I can go to admin, settings, home, etc. The only thing I cannot do is post request.

Anyone has any idea how to get around this? I would really appreciate it, since I want to test this software. But without being able to enter any information, it will be nearly impossible to try it out.

Thanks

luceos

thephphero when i hit your url it says "not found" seems like your htaccess (rewrites) are not working.

abhishek

luceos I am tryimg api/token on my server and it gives permission denied response?

now what to do?

thephphero

Thanks so much for your prompt reply. Do you mean this url is not working for you: http://forum.yerbamateblog.com/ or just urls under it, like http://forum.yerbamateblog.com/admin or the one I posted before? When I hit the url http://forum.yerbamateblog.com/api/users/1/avatar using the browser, I see this:

{"errors":[{"code":500,"title":"Internal Server Error","detail":"exception \u0027Flarum\Http\RouteNotFoundException\u0027 in \/homepages\/9\/d451443845\/htdocs\/yerbaforum\/flarum\/vendor\/flarum\/core\/src\/Http\/RouterMiddleware.php:60\nStack trace:\n#0 [internal function]: Flarum\Http\RouterMiddleware-\u003E__invoke(Object(Zend\Stratigility\Http\Request), Object(Zend\Stratigility\Http\Response), Object(Zend\Stratigility\Next))\n#1 \/homepages\/9\/d451443845\/htdocs\/yerbaforum\/flarum\/vendor\/zendframework\/zend-stratigility\/src\/Dispatch.php(79): call_user_func(Object(Flarum\Http\RouterMiddleware), Object(Zend\Stratigility\Http\Request), Object(Zend\Stratigility\Http\Response), Object(Zend\Stratigility\Next))\n#2 \/homepages\/9\/d451443845\/htdocs\/yerbaforum\/flarum\/vendor\/zendframework\/zend-stratigility\/src\/Next.php(113): Zend\Stratigility\Dispatch-\u003E__invoke(Object(Zend\Stratigility\Route), NULL, Object(Zend\Stratigility\Http\Request), Object(Zend\Stratigility\Http\Response), Object(Zend\Stratigility\Next))\n#3 \/homepages\/9\/d451443845\/htdocs\/yerbaforum\/flarum\/vendor\/flarum\/core\/src\/Api\/Middleware\/LoginWithHeader.php(66): Zend\Stratigility\Next-\u003E__invoke(Object(Zend\Stratigility\Http\Request), Object(Zend\Stratigility\Http\Response))\n#4 [internal function]: Flarum\Api\Middleware\LoginWithHeader-\u003E__invoke(Object(Zend\Stratigility\Http\Request), Object(Zend\Stratigility\Http\Response), Object(Zend\Stratigility\Next))\n#5 \/homepages\/9\/d451443845\/htdocs\/yerbaforum\/flarum\/vendor\/zendframework\/zend-stratigility\/src\/Dispatch.php(79): call_user_func(Object(Flarum\Api\Middleware\LoginWithHeader), Object(Zend\Stratigility\Http\Request), Object(Zend\Stratigility\Http\Response), Object(Zend\Stratigility\Next))\n#6 \/homepages\/9\/d451443845\/htdocs\/yerbaforum\/flarum\/vendor\/zendframework\/zend-stratigility\/src\/Next.php(113): Zend\Stratigility\Dispatch-\u003E__invoke(Object(Zend\Stratigility\Route), NULL, Object(Zend\Stratigility\Http\Request), Object(Zend\Stratigility\Http\Response), Object(Zend\Stratigility\Next))\n#7 \/homepages\/9\/d451443845\/htdocs\/yerbaforum\/flarum\/vendor\/flarum\/core\/src\/Api\/Middleware\/ReadJsonParameters.php(32): Zend\Stratigility\Next-\u003E__invoke(Object(Zend\Stratigility\Http\Request), Object(Zend\Stratigility\Http\Response))\n#8 [internal function]: Flarum\Api\Middleware\ReadJsonParameters-\u003E__invoke(Object(Zend\Stratigility\Http\Request), Object(Zend\Stratigility\Http\Response), Object(Zend\Stratigility\Next))\n#9 \/homepages\/9\/d451443845\/htdocs\/yerbaforum\/flarum\/vendor\/zendframework\/zend-stratigility\/src\/Dispatch.php(79): call_user_func(Object(Flarum\Api\Middleware\ReadJsonParameters), Object(Zend\Stratigility\Http\Request), Object(Zend\Stratigility\Http\Response), Object(Zend\Stratigility\Next))\n#10 \/homepages\/9\/d451443845\/htdocs\/yerbaforum\/flarum\/vendor\/zendframework\/zend-stratigility\/src\/Next.php(113): Zend\Stratigility\Dispatch-\u003E__invoke(Object(Zend\Stratigility\Route), NULL, Object(Zend\Stratigility\Http\Request), Object(Zend\Stratigility\Http\Response), Object(Zend\Stratigility\Next))\n#11 \/homepages\/9\/d451443845\/htdocs\/yerbaforum\/flarum\/vendor\/zendframework\/zend-stratigility\/src\/MiddlewarePipe.php(75): Zend\Stratigility\Next-\u003E__invoke(Object(Zend\Stratigility\Http\Request), Object(Zend\Stratigility\Http\Response))\n#12 \/homepages\/9\/d451443845\/htdocs\/yerbaforum\/flarum\/vendor\/zendframework\/zend-diactoros\/src\/Server.php(166): Zend\Stratigility\MiddlewarePipe-\u003E__invoke(Object(Zend\Diactoros\ServerRequest), Object(Zend\Diactoros\Response), NULL)\n#13 \/homepages\/9\/d451443845\/htdocs\/yerbaforum\/api.php(42): Zend\Diactoros\Server-\u003Elisten()\n#14 {main}"}]}

luceos

thephphero i can hit your flarum, but the api route is a not found, which indicates a broken htaccess.

thephphero

luceos I ran some more tests tonight ,but nothing seems to get this going. I used a .htaccess checker available here ( http://htaccess.madewithlove.be/ ) in order to check the output of the rewrite. Again, I am testing the url http://forum.yerbamateblog.com/api/users/1/avatar With the current .htaccess shipped with the download, the outcome is:

http://forum.yerbamateblog.com/-

It seems the rewrite with the authorization is just setting everything to - (dash)

When I comment out this line, I get:
http://forum.yerbamateblog.com/api.php

Additionally I get this messenger from the checker saying that test were stopped due to the L flag in the RewriteRule Options. So I removed the L and I still get :
http://forum.yerbamateblog.com/api.php

But unfortunatelly still getting the 401 Error. Does this help raise any other ideas of what might be wrong with the rewrite? I believe my issues is essentially the same as the one reported by nimbleton here:

http://discuss.flarum.org/d/990-it-seems-something-don-t-want-to-be-loaded/14

Thanks for your help

thephphero

Ok. I see. Thanks for the tip. I will search further and post the result here later on

luceos

Why do all those test? Please post your htaccess here. An online htaccess tester will only test whether something works not what is needed for a specific application.

thephphero

This is the .htaccess

<IfModule mod_rewrite.c>
  RewriteEngine on
  RewriteBase /

  RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

  RewriteRule ^api(.*)$ api.php [QSA,L]
  RewriteRule ^admin(.*)$ admin.php [QSA,L]

  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
  RewriteRule ^(.*)$ index.php [QSA,L]
  
  # MultiViews can mess up our rewriting scheme
  Options -MultiViews
</IfModule>

luceos

This can be related to installing into a subdomain. Is the actual folder on the server a subfolder of your main domain?

thephphero

luceos It is installed in a subdomain as you can see, but the folder is not a subfolder of the main domain. The folder in placed in the root of the hosting alongside with the main domain folder. Thanks!

thephphero

I found this post.

http://discuss.flarum.org/d/586-unable-to-make-any-changes-or-create-posts/9

Adding $SERVER['HTTP_AUTHORIZATION'] = $SERVER['REDIRECT_HTTP_AUTHORIZATION']; to the top of config.php file also worked for me. I'm not sure if this is the most elegant solution though

hidden-refuge

I get the same error as above but it actually says "401 OK" in the popup window when trying to edit the default general tag. And also happening when I try to restrict tag usage. I'm using Nginx 1.9.6 as my web server with PHP 5.6.14 and MariaDB 10.0. Forum URL is https://diysrv.eu.org/ and I also getting a 500 internal server error message when I access my api.php file.

thephphero
When I add this I get a 500 error from Chrome on all my forum pages. Didn't work for me.

HavocK

Usiging a freshly installed Beta 3,
I'm having a similar problem, on adding permissions to a tag.

In the admin section this is the debug :

{
  "errors": [
    []
  ]
}

URL called was : .....api/tags/2

Franz

hidden-refuge The root API URL doesn't do anything. Fetching discussions seems to work, though: https://diysrv.eu.org/api/discussions

hidden-refuge

Franz

Hello,

What does it mean? I just installed my first copy of Flarum ever. Almost everything seems to work. I only cannot edit the default "General" tag and restricting tags is also failing with the same error as HavocK's.

401 OK
POST https://diysrv.eu.org/api/tags/5

{
  "errors": [
    []
  ]
}

Do you need any code from my configuration of the web server or so?

thephphero

hidden-refuge and crazedsanity Did you guy manage to get this working with beta 3? I have tried just about every suggestion I've found in forums regarding this sort of problem with HTTP_AUTHENTICATION and nothing seems to work. It seems that somehow the authentication header does not get passed by the server. I am also using Apache on a shared hosting.

crazedsanity

I'm having the same problem. My server runs both Nginx and Apache (if necessary, I use Nginx to proxy requests to Apache), with the site running under Nginx. Whenever I try to do anything with tags, I get the same error as previously mentioned.

I have root access to the server. I've looked at the logs, but nothing seems to shed any extra light on the problem. I'd imagine it's an issue with authorization, as discussed in a previously-linked-to thread Unable to make or create any posts.

thephphero

Hey guys,

I originally posted this because of the 401 error when attempting to save anything on the forum. A few days after I got this solved by adding

$SERVER['HTTP_AUTHORIZATION'] = $SERVER['REDIRECT_HTTP_AUTHORIZATION'];

To my config file (see my previous comments). Now I have upgrated to beta3 and the problem is back. Adding the line above doesn't seem to help anymore. Anyone ever got around finding a permanent solution to this problem?

Thanks.

crazedbuzz

thephphero (NOTE: I'm @crazedsanity; authenticating via GitHub doesn't work, so this is my functional account) Yes, I got it to work. All I did, as far as I can recall, is simply upgrade to beta 3.

thephphero

crazedbuzz $SERVER['HTTP_AUTHORIZATION'] = $SERVER['REDIRECT_HTTP_AUTHORIZATION'];

This still doesn't work for me. Beta 3 has the same 401 Authorization problem as always. Anyway thanks. I guess for use on whatever configuration is active on my hosting , flarum is not ready yet.