RocketChat / RocketChat/Rocket.Chat
Redirect unauthenticated user to login page when trying to access a download URL
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 46.1k
- Forks
- 13.9k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 130
Description
Your Rocket.Chat version: 0.36
Running rocket chat connecting to a mongo db on separate ports as detailed in the docs. We have 7 instances running on an 8 cpu machine. file upload is allowed to a local directory and set to authenticated.
When users send a file across and the other user clicks on it we get -
HTTP 403 error
Microsoft Edge can’t get to this page
Try this
•Log in to the website (if you can)
•Go back to the last page
Users are logged into the Rocket.Chat+ desktop client.
It used to work fine with a single instance machine.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing an authenticated file download in the multi-instance setup described in the issue, then trace the download URL's authentication handling. Done means an unauthenticated request is redirected to the login page rather than returning HTTP 403.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- authentication, backend
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100