How to make Basic authentication on Open Distro? - elasticsearch-opendistro

I am trying to add an username and password in URL to be able to view an iFrame of an account.
I tested :
<iframe src="http://user:password#localhost:5601" height="600" width="800"></iframe>
But it shows me:
Something went wrong
Try refreshing the page. If that doesn't work, go back to the previous page or clear your session data.
/translations/en.json is an url with embedded credentials.
Version: 6.7.1
Build: 20266
Error: /translations/en.json is an url with embedded credentials.
_callee$#http://user:password#localhost:5601/built_assets/dlls/vendors.bundle.dll.js:217:104853
tryCatch#http://user:password#localhost:5601/built_assets/dlls/vendors.bundle.dll.js:345:246774
Is there no other solution?

Related

Typo3 backend login don't login, no error

I'm trying to login to a fresh Typo3 v11 copy but login don't work.
to reproduce this issue:
Setup a fresh install Typo3 v11, i put my login and password in backend.
after click on login it load for 1sec then stay in same page. nothing happen, just keep showing the login form.
I have re-installed the project and copy the .htaccess file from the install source code but this didn't help.
TYPO3 probably misses your cookies.
either you have redirecting (e.g. http to https or another domain)
or you have restricted the IP ($GLOBALS['TYPO3_CONF_VARS']['BE']['lockIP']) and switch the IP because of proxy or loadbalancer.
I have deleted cookies for this website, now login works. probably the browser still keeps old website cookies.

Placement of Twitter Meta Tag Failing Site Verification

So, I am throwing a hail Mary pass here, to see if anyone can catch it. I checked on Twitter and came up empty.
I added the following meta tag to the head of a website:
<meta property="twitter:account_id" content="3XXXXXXXX" />
I then confirmed that the tag is in the source HTML in between the head tags
Then from inside my account panel on Twitter there is a "Verify website" tool.
When I enter the URL and click "Verify website, I get the following:
Website ownership cannot be verified. Please add the metatag to your site.
Perhaps someone else has grappled with this and solved the issue? Thanks
I had the same issue. I assume your websites is "https" to fix this you need to temporarily set your website not to display "http" in the address. Once you hit verify it should work and you can change it back to "https" when verified.
Solved!
So I tried the following, to no avail:
Remove the middleware to redirect http:// URLs to https:// URLs (such that the site runs on HTTP without redirecting to HTTPS).
Unfortunately, this change did NOT seem to work by itself... so we clicked on the "Help?" button at the upper-right of the ads.twitter.com account dashboard.
After explaining the issue to the Twitter support staff, they were able to change something in their system (likely, invalidate some cached record somewhere) and the validation successfully went through. So don't be afraid to reach out to Twitter for support!
After verification, we were able to re-introduce the HTTP -> HTTPS middleware on our site, while remaining verified with Twitter.

Twitter Oauth callback to www subdomain within same domain

I'm using ASP.NET MVC 3 and TweetSharp. I'm open authorization dialog with window.open(), at the end of auth program in this window tries to access to main window through window.opener.
In my application callback set to http://www.domain.com and when i'm open site from that url everything works fine, but if use just domain.com i get an error something like "Acces is denided because of different domains" when window.opener is accessed.
I have tried to set callbackUrl when app auth dialog opens, but this has no effect. Also changing callback url to http://domain.com give same result.
Only way to solve this is to use UrlRewrite to always redirect on www.domain.com. Or i'm missing something and there is another way?
Thanks.
Log in to your Twitter Dev Account (dev.twitter.com), select the appropriate Twitter Application, go to the tab "#Anywhere domains" and add www.domain.com as authorized...
works for me
i did not work with tweeter but i work with facebook the same problem are there that is why i put the canvas url there with my domain url try to put your call back url as your domain url
or try some thing like this in java script :
var url = window.location;
url = url.toString();
url = url.replace(/www.domain.com/,"domain.dev.domain.com")
window.location = url;

Why my Rails login fails authentication when running from within an iframe?

I am trying to integrate my Rails application within another application using the "iframe" technique.
The hosting application has an iframe like that:
<iframe src="http://10.0.0.106:3000/" width="800" height="500">
</iframe>
This frame retrieves and displays the login page, which is ok. But when I type in username and password to login, it seems that authentication fails and I am prompted again for login. Note that no normal "Wrong username/password" message appears (as it is done when I give wrong username of password). The login form is displayed as if it were the first time I visit it.
Any clue?
If the CSRF token is included on the page the only problem that you should experience with iframes is this IE weirdness :
http://www.sympact.net/2008/07/rails-and-ifram.html
Is the iframe being served from another domain? This is probably a security feature.
You could turn off the security feature (probably a bad idea), or try other methods of authentication.
"Yes. It is served from another domain."
— Comment above.
Reason why you are not getting an error message is because the authentication doesn't fail. The cookie that's being stored is for '10.0.0.106:3000' and not your current application. I wouldn't be using an iframe to handle authentication. (Why are you doing this anyway?)

symfony: sfDoctrineGuardPlugin: doesn't redirect to the referer page

I have just crate a new sf 1.3 project, installed sfDGP and activated the security on my web app so when i write an URL the authentication form appears.
The problem: after logging the web app is not redirected to the referrer
URL but to the root URL.
These are my steps:
I call the URL "http://rs3.localhost/frontend_dev.php/usuario"
The auth form appears.
If i write var_dump($user->getReferer($request->getReferer())); inside
the signin action this is showed:
"http://rs3.localhost/frontend_dev.php/"
Any idea?
Regards
Javi

Resources