-
Notifications
You must be signed in to change notification settings - Fork 14
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
401 Unauthorized Error after Login #26
Comments
Can you share a |
|
The good requests all contain |
I've conducted further testing and found that the issue does not seem to be browser-dependent, as the error occurs across different browsers. The main issue is that the UI keeps logging out after a random small amount of time. After examining the Nginx logs, I noticed the following error:
This error suggests that the authentication request is being ignored because the server is in an "evasion period" due to too many failed authentication attempts from the same client. I attempted to address this by adjusting the following Nginx directives:
These adjustments solved the "401 Unauthorized" error, but the issue with the UI logging out persists. Based on my observations, it seems that the nonce (used for authenticating requests) is not functioning correctly. This might be causing the authentication failures that lead to the evasion period and subsequent logouts. I'd appreciate any insights or suggestions on how to resolve the nonce issue or further troubleshoot the evasion period behavior. Thanks in Advance |
Could it be that there is something on your page that is making requests without passing the Authorization header that could cause the plugin to put the IP into evasion mode after a while? |
Authorization headers are indeed being sent, but we're encountering an issue where the nonce occasionally changes without proper authorization. Additionally, the nonce sometimes expires prematurely, even before reaching the maximum number of replays or the set expiration time. We’re using a reverse proxy to access Netdata. |
@erikdubbelboer |
I'm unable to replicate it somehow so I don't think there is much I can do. |
@erikdubbelboer Directory structure docker-compose.yml
Dockerfile
nginx.conf
.htdigest
index.html
|
Description:
I am experiencing a persistent 401 Unauthorized error when attempting to access the UI. This error occurs after a user has been logged in for approximately 20-30 minutes. Additionally, there seems to be a 5-10 minute delay before being able to log in again after the session times out.
Steps to Reproduce:
Expected Behavior:
The user should remain authenticated and be able to access the UI without encountering a 401 error.
Actual Behavior:
After 20-30 minutes, the application returns a 401 Unauthorized error for the requested endpoint.
Additional Information:
I have implemented auth_digest_timeout in the NGINX configuration, but the issue persists.
Used curl for testing authentication, which initially succeeded but eventually returns a 401 error after the timeout.
Environment:
NGINX version: 1.25.4
curl -v --digest -u admin:admin http://192.168.10.148:20001/stream-viewer?stream

The text was updated successfully, but these errors were encountered: