DioError 403 with correct URL, username, password about paperless_app HOT 10 CLOSED

Can you confirm that

curl --user <username> https://paper.host.tld/paperless/api/documents

works? It should return a large list of documents.

Don't forget trailing slashes. I think they are required.

from paperless_app.

Thanks for posting the solution! This should probably be changed in the documentation(s).

Edit: I see you're already one step ahead here 😄

from paperless_app.

Hey Robert,

do you use a reverse proxy in front of paperless?

from paperless_app.

I'm using Apache and mod_wsgi like described here: https://paperless.readthedocs.io/en/latest/setup.html#making-things-a-little-more-permanent
But I changed Alias to /paperless/static and WSGIScriptAlias to /paperless.

from paperless_app.

Can you confirm that

curl --user <username> https://paper.host.tld/paperless/api/documents/

works? It should return a long list of documents.

_{^{Edit: This originally did not include the slash at the end.}}

from paperless_app.

Using curl I get a redirect to location: /paperless/api/documents/ and then the same error:

< HTTP/2 403
{"detail":"Authentication credentials were not provided."}

With correct, incorrect and no password it's the same response.

When I open this URL logged in the browser it works:

GET /paperless/api/documents/

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "count": 44,
    "next": "https://paper.host.tld/paperless/api/documents/?page=2",
    "previous": null,
    "results": [
        {
            "id": 28,
            "correspondent": null,
            "title": "0120",
...

from paperless_app.

Thanks for confirming. This looks like a server issue then. The browser uses a different authentication mechanism with cookies which is why it works fine there.

It's not quite clear to me why this doesn't work but then again I don't work much with Apache.

from paperless_app.

try

curl --user <username> --basic https://paper.host.tld/paperless/api/documents/

which should ask you for your password and verify that authentication works.

from paperless_app.

Thanks, yes with and also without --basic the password prompt appears:

Enter host password for user 'myuser':

The response is the same as above.

from paperless_app.

I got it!
Thanks for nudging me in the right direction. I didn't know that the API uses basic auth.

In order to have basic auth working with wsgi this is needed in the apache conf: WSGIPassAuthorization On.

https://www.django-rest-framework.org/api-guide/authentication/#setting-the-authentication-scheme

Created a PR to the documentation. Now on to try the app :)

from paperless_app.