RockteMQ-AI commented on issue #377: URL: https://github.com/apache/rocketmq-dashboard/issues/377#issuecomment-5383922076
**Issue Evaluation** Category: `question` | Status: **Needs Info** This appears to be a deployment/configuration issue with Dashboard 2.1.0. The 403 error on `/login` suggests a security or authentication configuration problem. To help diagnose this, please provide: - [ ] How was the dashboard deployed? (Docker / Kubernetes / standalone JAR) - [ ] What is the content of your `application.properties` or environment variables related to authentication? - [ ] Are you using the default credentials (`admin/admin`)? - [ ] Check the dashboard logs for any `403` or `SecurityException` stack traces — share the relevant lines. - [ ] Which version of RocketMQ broker is the dashboard connected to? **Common causes for 403 on login in 2.1.0:** 1. The `rocketmq.dashboard.login.username` / `password` properties are not set or mismatched. 2. A reverse proxy (nginx/ingress) is blocking POST requests to `/login`. 3. CSRF protection is enabled but the request is missing the CSRF token. 4. The session cookie is not being persisted (check browser DevTools → Application → Cookies). --- *Automated evaluation by github-manager* -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
