CSRF Token missing running in docker

Поиск
Список
Период
Сортировка
От Barrington-Hughes, Alan
Тема CSRF Token missing running in docker
Дата
Msg-id BY5PR11MB4195F55B8B943AE56E8DC16CC76A0@BY5PR11MB4195.namprd11.prod.outlook.com
обсуждение исходный текст
Список pgadmin-support
Hi,


I am trying to setup an instance of pgagmin4 in our docker cluster. The container documentation was very helpful and got me up and running, however, I am consistently receiving an error whenever a dialog appears (add new server  / view user roles for example) the Alert.js window tells me the CRSF token is missing and I get this from the logs:

::ffff:10.255.21.200 - - [16/Oct/2019:19:45:36 +0000] "GET /settings/get_tree_state/ HTTP/1.1" 200 0 "https://dockeree.mycompany.com:52129/browser/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
::ffff:10.255.21.200 - - [16/Oct/2019:19:45:36 +0000] "GET /misc/bgprocess/?_=1571255135056 HTTP/1.1" 200 2 "https://dockeree.mycompany.com:52129/browser/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
::ffff:10.255.21.200 - - [16/Oct/2019:19:45:37 +0000] "GET /browser/server_group/children/5 HTTP/1.1" 200 61 "https://dockeree.mycompany.com:52129/browser/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
::ffff:10.255.21.200 - - [16/Oct/2019:19:45:37 +0000] "GET /browser/master_password HTTP/1.1" 200 63 "https://dockeree.mycompany.com:52129/browser/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
::ffff:10.255.21.200 - - [16/Oct/2019:19:45:37 +0000] "GET /dashboard/ HTTP/1.1" 200 2359 "https://dockeree.mycompany.com:52129/browser/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
::ffff:10.255.21.200 - - [16/Oct/2019:19:45:39 +0000] "GET /browser/server/static/img/server.svg?ver=41300 HTTP/1.1" 200 1634 "https://dockeree.mycompany.com:52129/browser/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
::ffff:10.255.21.200 - - [16/Oct/2019:19:45:39 +0000] "GET /browser/server_group/nodes/ HTTP/1.1" 200 385 "https://dockeree.mycompany.com:52129/browser/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
::ffff:10.255.52.89 - - [16/Oct/2019:19:46:01 +0000] "POST /browser/server/obj/5/ HTTP/1.1" 302 223 "https://dockeree.mycompany.com:52129/browser/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
::ffff:10.255.52.89 - - [16/Oct/2019:19:46:01 +0000] "GET /browser/ HTTP/1.1" 401 119 "https://dockeree.mycompany.com:52129/browser/""Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
2019-10-16 19:46:06,186: ERROR flask.app: 400 Bad Request: The CSRF session token is missing.
Traceback (most recent call last):
  File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 249, in protect
    validate_csrf(self._get_csrf_token())
  File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 87, in validate_csrf
    raise ValidationError('The CSRF session token is missing.')
wtforms.validators.ValidationError: The CSRF session token is missing.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/local/lib/python3.7/site-packages/flask/app.py", line 1811, in full_dispatch_request
    rv = self.preprocess_request()
  File "/usr/local/lib/python3.7/site-packages/flask/app.py", line 2087, in preprocess_request
    rv = func()
  File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 221, in csrf_protect
    self.protect()
  File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 252, in protect
    self._error_response(e.args[0])
  File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 295, in _error_response
    raise CSRFError(reason)
flask_wtf.csrf.CSRFError: 400 Bad Request: The CSRF session token is missing.
::ffff:10.255.52.89 - - [16/Oct/2019:19:46:06 +0000] "POST /settings/save_tree_state/ HTTP/1.1" 400 150 "https://dockeree.mycompany.com:52129/browser/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.2 Safari/605.1.15"
2019-10-16 19:46:13,214: ERROR flask.app: 400 Bad Request: The CSRF session token is missing.
Traceback (most recent call last):
  File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 249, in protect
    validate_csrf(self._get_csrf_token())
  File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 87, in validate_csrf
    raise ValidationError('The CSRF session token is missing.')
wtforms.validators.ValidationError: The CSRF session token is missing.

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/local/lib/python3.7/site-packages/flask/app.py", line 1811, in full_dispatch_request
    rv = self.preprocess_request()
  File "/usr/local/lib/python3.7/site-packages/flask/app.py", line 2087, in preprocess_request
    rv = func()
  File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 221, in csrf_protect
    self.protect()
  File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 252, in protect
    self._error_response(e.args[0])
  File "/usr/local/lib/python3.7/site-packages/flask_wtf/csrf.py", line 295, in _error_response
    raise CSRFError(reason)
flask_wtf.csrf.CSRFError: 400 Bad Request: The CSRF session token is missing.


I am uncertain as to what configuration I should be setting to make this error go away.

I am running:
Version
4.13
Python Version
3.7.4 (default, Aug 21 2019, 00:19:59) [GCC 8.3.0]
Flask Version
1.0.2
Application Mode
Server

running with env:
                "PGADMIN_DEFAULT_EMAIL=alan_barrington-hughes@premierinc.com",
                "PGADMIN_DEFAULT_PASSWORD=SuperSecret",
                "PGADMIN_ENABLE_TLS=YES",

volume for /var/lib/pgadmin and secrets for the tls certs are also attached.

Many thanks in advance, Alan

В списке pgadmin-support по дате отправления:

Предыдущее
От: Pradip pariyar
Дата:
Сообщение: Suuport for installation
Следующее
От: Arni Kromić
Дата:
Сообщение: Re: Session timeout