• State Not Answered
  • +1 person also asked this people also asked this
  • Replies 5 replies
  • Subscribers 95 subscribers
  • Views 955 views
  • Users 0 members are here
Options
Related

Not able to log into Angular Development Environment after CU2

ivo burkatzki
10 months ago

Greetings,

After the update to CU2 on 9.0 LTS, In my Angular Development Environment i'm not able to login anymore. 

While fetching the projectconfig  

Request URL: localhost:8182/.../projectconfig
Request Method: GET
Status Code: 500 Internal Server Error
Remote Address: [::1]:8182
Referrer Policy: strict-origin-when-cross-origin

The following response is provided

[{"Message":"Your session has expired. Please reload this page and login again.","Number":57002006}]

and displayed as errormessage.

  • 0 10 months ago

    As additional information, there seems to be a problem with the cookies.

    When the System is trying to set Cookies there is a message:

    "This Set-Cookie has been blocked because it has the secure attribute but was not received over a secure connection"

  • 0 10 months ago

    We also have this message with version 9.1.1 after trying to reproduce the steps from Herwig Abele's YouTube series.

    What we have configured so far
    - Config parameter QBM\ApiServer\Defaults\SameSiteCookie -> from "lax" to "none"

    - imxweb\projects\qer-app-pwdportal\src\environments\environment.ts
     -> Change URL from localhost to API server URL

    The response is the same as mentioned above

    [
{
"Message": "Your session has expired. Please reload this page and login again.",
"Number": 57002006
}
]

    We have also experimented with the setting "ServerLevelConfig/XsrfProtectionDisabled" in the admin portal - but so far we have not been able to observe any effect.

  • 0 10 months ago in reply to ivo burkatzki

    The secure cookie error message is because you probably have in the web.config the line:

    <httpCookies httpOnlyCookies="true" requireSSL="true" />

    The requireSSL is true will fail if you access the site without using https. 

  • 0 10 months ago in reply to rodney rosenda_67072

    It's a local Angular Development-Environment. The API-Server ist startet from the tool folder via imx-client.exe . Which web.config is used in this case and is it used at all?

  • 0 10 months ago

    I found a workaround for this. When i enter the API Server on the IIS instead of the locally (via imx-client) started one in the relevant environment file, It works again, since the connection to the API Server is now https. Of course the CSRF Cookies need to be deactivated to make this work.

    I would still be interested if there is a way to make this work with a locally started API Server