Can't submit with anonymous, 401 Unauthorized

[ichenhe]

I think it might be related to CORS.

I use docker-compose to start the backend, here's my configuration:

version: "2"

services:
  remark:
    build: .
    image: umputun/remark42:latest
    container_name: "remark42"
    hostname: "remark42"
    restart: always
    ports:
      - "3002:8080"

    environment:
      - REMARK_URL=http://remark42.chenhe.me
      - SITE=chenhe_blog
      - SECRET=xxxxxxx
      - STORE_BOLT_PATH=/srv/var/db
      - BACKUP_PATH=/srv/var/backup
      - DEBUG=true
      - AUTH_ANON=true
      - AUTH_GITHUB_CID=xxxxx
      - AUTH_GITHUB_CSEC=xxxx
    volumes:
      - ./var:/srv/var

As you can see, it maps host's 3002 port. I have a Nginx as a reverse proxy to 3002. There is no extra CORS configuration.

User -> Nginx(:80) -> host(3002) -> docker-remark(8080)

My main website is chenhe.me, (remark server is remark42.chenhe.me), here's my site configuration:

var remark_config = {
        host: "http://remark42.chenhe.me", 
        site_id: 'chenhe_blog',
        components: ['embed'],
};

---

The sign in of anonymous is successful, and I get the cookie. But I can't send the comment and it says 'Not authorized'.

From the dev tools, it seems that no cookie have been submitted to the server.

[umputun]

I don't think it is CORS issue, or at least CORS is not the only issue here. The direct access to http://remark42.chenhe.me/web/ testing page having the same issue

[ichenhe]

@umputun I have changed the SITE to remark ( the same as default value).

Now, test page works fine, but it still returns 401 in the other domain. The log confirmed my guess:

remark42  | 2021/08/14 10:30:37.319 [DEBUG] {middleware/auth.go:71 middleware.(*Authenticator).auth.func1} auth failed, 
can't get token: token cookie was not presented: http: named cookie not present

Maybe we should open an issue?

[ichenhe]

Also, I don't think 500 is the correct response for the not-found site.

I agree, 500 is not appropriate since this error is predictable. May be 404 or 400.

[umputun]

Now, test page works fine, but it still returns 401 in the other domain.

what exactly the place it doesn't work? chenhe.me returns 500 to me

One thing I noticed - you seem to have https on chenhe.me but http on remark subdomain. The may cause all kinds of "mixed access" problems

[umputun]

Maybe we should open an issue?

I don't think there is an issue here but rather some misconfiguration. Similar setups work on many sites just fine

[ichenhe]

@umputun I haven't deployed the chenhe.me yet, now it runs on my own computer. I will pulish it soon and correct https configuration.

I'll give you more feedback later. Thank you for your reply.

[ichenhe]

It's my fault, I apologize. After being deployed to the server, it is successful. But there's one last question.

It does not work on the local web server (hugo embedded). It means the url of main site is http://localhost:1313/***. In this environment, both site's config and remark42 backend's config are http, not https, so there's no problem with the schema.

The result is 401, the same as the screenshot at the beginning. Is this a expected behavior? @umputun

[umputun]

It does not work on the local web server (hugo embedded). It means the url of main site is http://localhost:1313/***. In this environment, both site's config and remark42 backend's config are http, not https, so there's no problem with the schema.

I'm not sure how this affected by your local setup. As far as I understood your are trying the server on the localhost:port and remark42 on the real remark42.chenhe.me:80. This is an unusual setup and I don't know if you want to spend time debugging such an exotic configuration. @akellbl4 can you think of some frontend-related restriction in such a setup, like iframes don't like localhost or smth like this?

@ichenhe - one more thing - the next time pls provide more accurate description of the issue/question. Not sure about others, but all this time I was under impression we are trying to troubleshoot an issue between chenhe.me site and remark42 on http://remark42.chenhe.me, apparently this wasn't the case.

[ichenhe]

As far as I understood your are trying the server on the localhost:port and remark42 on the real remark42.chenhe.me:80.

Yes, exactly. I'd be happy to help with the debugging, but I need a hint. I am not very familiar with web and can't figure out the difference of browser's behavior between a real domain and localhost -- I think it should be the same.

one more thing....

Of course. I'm sorry to have wasted your time. @umputun