Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

what am i missing. getting no valid crumb included #1

Closed
jasonlang80 opened this issue Aug 30, 2018 · 6 comments
Closed

what am i missing. getting no valid crumb included #1

jasonlang80 opened this issue Aug 30, 2018 · 6 comments

Comments

@jasonlang80
Copy link

<title>Error 403 No valid crumb was included in the request</title>

HTTP ERROR 403

Problem accessing /. Reason:

    No valid crumb was included in the request


Powered by Jetty:// 9.4.z-SNAPSHOT
@janjoerke
Copy link
Owner

Hi Jason,

did you configure the following configuration settings?

  • jenkins.pipeline.linter.connector.url
  • jenkins.pipeline.linter.connector.user (only, if your jenkins server requires authentication)
  • jenkins.pipeline.linter.connector.pass (only, if your jenkins server requires authentication)

The extension uses the credentials for a basic authentication (https://de.wikipedia.org/wiki/HTTP-Authentifizierung) with the jenkins server. I am no expert on jenkins security, but if i were to guess, i could think that maybe your server may not allow basic auth and thererfore reject the request.

@jasonlang80
Copy link
Author

Yes, I have all 3 of those set. However, my server has CSRF Protection enabled. I think your plugin may not function correctly with it.

@janjoerke
Copy link
Owner

I´ve released a new version (1.1.0) with support for Jenkins Server with CRSF protection. To use it you have to specify the crumb issuing url of Jenkins:

"jenkins.pipeline.linter.connector.crumbUrl": "http://<your_jenkins_server:port>/crumbIssuer/api/xml?xpath=concat(//crumbRequestField,%22:%22,//crumb))"

My jenkins installation with activated CRSF did not reject me before, so i am not 100% sure that this will work on first try. We´ll have to see.

@jasonlang80
Copy link
Author

That Worked Great for me!
Thank you for your quick turn around on this.

@janjoerke
Copy link
Owner

janjoerke commented Oct 10, 2018 via email

janjoerke pushed a commit that referenced this issue Mar 7, 2019
Corrected the descriptions of the settings.
@IgorOhrimenko
Copy link

I am using localhost:8080 and Crumb always return 403.
Resolved this problem disable CSRF.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants