Top Menu

Jump to content
Home
    Modules
      • Projects
      • Activity
      • Work packages
      • Gantt charts
      • Calendars
      • Team planners
      • Boards
      • News
    • Getting started
    • Introduction video
      Welcome to OpenProject Community
      Get a quick overview of project management and team collaboration with OpenProject. You can restart this video from the help menu.
    • Help and support
    • User guides
    • Videos
    • Shortcuts
    • Community forum
    • Enterprise support
    • Additional resources
    • Data privacy and security policy
    • Digital accessibility (DE)
    • OpenProject website
    • Security alerts / Newsletter
    • OpenProject blog
    • Release notes
    • Report a bug
    • Development roadmap
    • Add and edit translations
    • API documentation
  • Sign in
      Forgot your password?

      or sign in with your existing account

      Google

Side Menu

  • Overview
  • Activity
    Activity
  • Roadmap
  • Work packages
    Work packages
  • Gantt charts
    Gantt charts
  • Calendars
    Calendars
  • Team planners
    Team planners
  • Boards
    Boards
  • News
  • Forums
  • Feature tour
    Feature tour

Content

You are here:
  1. Forums
  2. Support Installation & Updates

Error 422: Cross-Site Request Forgery Token

Added by Mathias Waack 3 months ago

Hi all, 

we are using OpenProject via docker. Until last week an nginx worked as https-proxy for the container. For external access we are using an additional dmz-proxy (apache). So the old situation is:

  1. LAN----(https)----nginx---(http)---openproject

  2. Internet----(https)---apache----(https)----nginx---(http)---openproject

This weekend we have switched from nginx to traefik, so we have the following new situation:

  1. LAN----(https)----traefik---(http)---openproject

  2. Internet----(https)---apache----(https)----traefik---(http)---openproject

The apache-config is the same in the old and the new situation. LAN works as expected, so I assume both the config of openproject and traefik are fine. 

But access from the internet via apache now results in error 422. Thus I assume there is a difference between the behavior of traefik and nginx and we have to change the apache-config somehow to get it running with traefik. 

The apache-config is real simple:

	SSLProxyEngine On
	ProxyPass        "/"  "https://project.<domain>/"
	ProxyPassReverse "/"  "https://project.<domain>/"
	SSLEngine on

Adding the line

RequestHeader set X-Forwarded-Proto "https"

to the apache config does not change the behavior. 

Does anyone has any idea to fix this?

Thanks, 
Mathias


Loading...