DependencyTrack / DependencyTrack/frontend
Bad login URL (Chrome)
- Dominant language
- Vue
- Stars
- 171
- Forks
- 250
- Avg merge
- 11h 12m
- Merged PRs (30d)
- 82
Description
After install and connecting to `localhost:8080` on Chrome for the first time, URL is automatically changed to `localhost:8080/auth/login?redirect=%2Fdashboard`, resulting in a _HTTP 405 "Not Allowed"_ when the user signs in with the admin account.
On Firefox, URL is not changed and submitting credentials works.
Changing URL to localhost:8080/login on Chrome works too.
### Environment:
- Dependency-Track Version: 4.4.2
- Client Browser: Chrome v100.0.4896.75 (Officiel build) (64 bits)
- Client O/S: Linux linuxmint 5.4.0-107-generic x86_64
### HTTP traces
**Firefox**
```
Request headers
---
POST /api/v1/user/login HTTP/1.1
Host: localhost:8081
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:98.0) Gecko/20100101 Firefox/98.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 31
Origin: http://localhost:8080
Connection: keep-alive
Referer: http://localhost:8080/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Response headers
---
HTTP/1.1 200 OK
Date: Mon, 04 Apr 2022 21:02:19 GMT
Content-Type: text/plain
X-Powered-By: Dependency-Track v4.4.2
Cache-Control: private, max-age=0, must-revalidate, no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS
Access-Control-Allow-Headers: Origin, Content-Type, Authorization, X-Requested-With, Content-Length, Accept, Origin, X-Api-Key, X-Total-Count, *
Access-Control-Expose-Headers: Origin, Content-Type, Authorization, X-Requested-With, Content-Length, Accept, Origin, X-Api-Key, X-Total-Count
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 3600
Content-Length: 727
```
**Chrome**
```
Request headers
---
POST /auth/api/v1/user/login HTTP/1.1
Accept: application/json, text/plain, */*
Accept-Encoding: gzip, deflate, br
Accept-Language: fr-FR,fr;q=0.9,zh-TW;q=0.8,zh;q=0.7,en-US;q=0.6,en;q=0.5
Connection: keep-alive
Content-Length: 31
Content-Type: application/x-www-form-urlencoded
Cookie: connect.sid=s%3AbgZ4v-xlCDPDky5Mf2cNJTyHKqKK9ija.zgqIaruKegFgCLPJwGwXzedtNOltxoWdRU%2F%2FdCdZ3Tg
Host: localhost:8080
Origin: http://localhost:8080
Referer: http://localhost:8080/auth/login?redirect=%2Fdashboard
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/100.0.4896.75 Safari/537.36
sec-ch-ua: " Not A;Brand";v="99", "Chromium";v="100", "Google Chrome";v="100"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
Response headers
---
HTTP/1.1 405 Not Allowed
Server: nginx/1.20.2
Date: Mon, 04 Apr 2022 20:59:03 GMT
Content-Type: text/html
Content-Length: 559
Connection: keep-alive
```
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.