Login Issue in Geoserver version 2.28.0

GeoServer GeoServer User
1

There is a login issue in Geoserver version 2.28.0 Unable to login but when clicked on Left Panel “About Geoserver“ the page is logging in. Please look into it.

2

Hi,

Could you precise how you deploy GeoServer and which kind of Authentication are you using?

Have you upgraded to a more recent version ?

I use for several customer the 2.28.x serie for several weeks now and we don’t have this issue.

Have you looked to the log file ? If you have error messages in it, please share it if you want more help.

Alexandre

3

Geoserver war file is deployed in Wildfly 25.0.0 and java 21.0.2 2024-01-16 LTS
No I am using v2.28.0 There is no log file related to the same

4

Thanks for the details. I don’t work with Wildfly.

Do you mean you have no log file at all or no log related to the problem?

Alexandre

5

I think itz a confgiuration issue from nginx

6

Have you checked the Upgrade documentation:

and especially:

There was also a recent post discussing this issue, and asking the poster to update the documentation for others to benefit from the community input. Perhaps you could do it?

Peter

7

I have made changes in nginx configuration
location /geoserver/ {
access_log off;
proxy_pass http://127.0.0.1:8080/geoserver/;
proxy_redirect off;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Forwarded-Scheme https;
proxy_set_header X-Forwarded-Host $host;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection “upgrade”;
}
still no change

8

inside geoserver.war

PROXY_BASE_URL https://gis.xxx.in/geoserver

GEOSERVER_CSRF_WHITELIST gis.xxx.in 
<context-param>
   <param-name>GEOSERVER_DATA_DIR</param-name>
    <param-value>/data/geoserver_data</param-value>
</context-param>
9

Sending form data to ‘https://gis.xxx.in/geoserver/j_spring_security_check’ violates the following Content Security Policy directive: “form-action ‘self’”. The request has been blocked.