More information from Chrome developer tools:
{"timestamp":"2021-12-22T21:13:29.565+00:00","status":403,"error":"Forbidden","message":"Access
is denied. Invalid CSRF token.","path":"/server/api/eperson/registrations"}
On Tuesday, December 21, 2021 at 11:55:28 AM UTC-6 Glenn G wrote:
> So I finally got this DSpace 7.1 sorta working, but it won't let me log in
> through the user interface. If I enter my email address and password, a
> pink balloon appears with the message: "Invalid email or password." Chrome
> developer tools says, "zone-evergreen.js:2845 POST
> https://d7test.ourschool.edu/server/api/authn/login 403".
>
> If I try to register as a new user, a pink error balloon pops up for
> several seconds. It says, "Error when trying to register email
> An error occured when registering the following email address: ..."
>
> The same thing happens if I choose "Have you forgotten your password?"
>
> For these actions, Chrome developer tools says, "zone-evergreen.js:2845
> POST https://d7test.ourschool.edu/server/api/eperson/registrations 403"
>
> Depending on the action, the Tomcat log says, "'POST
> /server/api/authn/login HTTP/1.1' 403" or 'POST
> /server/api/eperson/registrations HTTP/1.1' 403".
>
> DSpace is configured to use only password authentication. These are some
> of the possibly relevant settings I'm using in [dspace]/config/local.cfg:
>
> dspace.server.url = https://d7test.ourschool.edu/server
> dspace.ui.url = https://d7test.ourschool.edu
> authentication-password.domain.valid = ourschool.edu
> rest.cors.allowed-origins = ${dspace.ui.url}, http://127.0.0.1
> proxies.trusted.ipranges = 127.0.0.1,172.31.
> plugin.sequence.org.dspace.authenticate.AuthenticationMethod =
> org.dspace.authenticate.PasswordAuthentication
> rest.cors.allowed-origins = ${dspace.ui.url}, http://127.0.0.1,
> http://localhost:4000, http://172.31.57.198:4000, https://127.0.0.1,
> https://localhost:4000, https://172.31.57.198:4000
>
> My OS is Ubuntu 20.04 LTS. All my DSpace backend files are owned by
> tomcat:tomcat. The Angular files are owned by dspace:dspace. This is a
> single-server setup.
>
> What should I look at next?
>
> Thanks,
> Glenn
>
--
All messages to this mailing list should adhere to the Code of Conduct:
https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx
---
You received this message because you are subscribed to the Google Groups
"DSpace Technical Support" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to dspace-tech+unsubscr...@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/dspace-tech/943efa94-beea-4004-bc72-d901412795acn%40googlegroups.com.
