That's strange. So, if that diagnostic message is correct, then the browser didn't send a Referer header in the request.
Can you re-enable debug and HTTPS, open the browser's developer tools -> Network tab, and then attempt a full login attempt using these steps: 1. Navigate to https://reviews.melroy.org 2. Click the Login link. 3. Attempt the login again. See if you get the same error this time, and if so, show me what's in the Network tab's Request Headers for that POST operation. Christian On Sat, Feb 12, 2022 at 3:37 PM [email protected] <[email protected]> wrote: > Ps. The only way back was to go to my MySQL database. > Selecting the "siteconfig_siteconfiguration" table -> first record (ID: > 1). And change the "site_domain_method" setting from "https" back to > "http". > Restarting Reviewboard manually. > > Op zondag 13 februari 2022 om 00:32:57 UTC+1 schreef [email protected]: > >> See attachment for the full size images! >> >> Op zondag 13 februari 2022 om 00:31:56 UTC+1 schreef [email protected]: >> >>> I'm running my own instance over here: https://reviews.melroy.org >>> >>> I use Nginx as my reverse proxy together with the *beanbag/reviewboard:4.0 >>> *docker image. I use Let's Encrypt to create a TLS certificate for this >>> sub-domain. So far so good. However, I noticed I could not set HTTPS via >>> environment variable (only setting host name, without protocol). >>> >>> I *need* to change the setting to *HTTPS*, since otherwise I could not >>> publish a review by pressing the button. Causing mixed content issues: >>> >>> [image: mixed_content.png] >>> >>> So I changed my server URL in the* admin panel* from >>> http://reviews.melroy.org towards http*s*://reviews.melroy.org (so with >>> TLS). >>> >>> However, now I can't login anymore, I will get a CSRF issue :(. I think >>> I configured everything correctly.. See error: >>> >>> [image: forbidden_csrf_failed.png] >>> (I enabled Debug so you get the help message as well) >>> >>> I'm using my local Nginx server (with the same configuration as here: >>> https://github.com/reviewboard/reviewboard/blob/master/contrib/docker/examples/nginx_templates/reviewboard.conf.template#L11). >>> Of-course some changes to the port, location where required. But I did >>> *not* change the Nginx "location" sections. >>> >>> Regards, Melroy >>> >>> >>> -- > Supercharge your Review Board with Power Pack: > https://www.reviewboard.org/powerpack/ > Want us to host Review Board for you? Check out RBCommons: > https://rbcommons.com/ > Happy user? Let us know! https://www.reviewboard.org/users/ > --- > You received this message because you are subscribed to the Google Groups > "Review Board Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit > https://groups.google.com/d/msgid/reviewboard/24f31104-1d84-4489-a094-989ea80d3c12n%40googlegroups.com > <https://groups.google.com/d/msgid/reviewboard/24f31104-1d84-4489-a094-989ea80d3c12n%40googlegroups.com?utm_medium=email&utm_source=footer> > . > -- Christian Hammond President/CEO of Beanbag <https://www.beanbaginc.com/> Makers of Review Board <https://www.reviewboard.org/> -- Supercharge your Review Board with Power Pack: https://www.reviewboard.org/powerpack/ Want us to host Review Board for you? Check out RBCommons: https://rbcommons.com/ Happy user? Let us know! https://www.reviewboard.org/users/ --- You received this message because you are subscribed to the Google Groups "Review Board Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/reviewboard/CAE7VndkEFg_WXXTiTrcoDuttkbF9_WrAfFZzB%2BUY%3DQaT54czfA%40mail.gmail.com.
