"Malformed Authorization header" with nginx Basic-Auth about zoonavigator HOT 6 CLOSED

Sure - just let me know in case you need any details. In the meantime, I'll try to provide meaningful info best-efford-wise:

This is my docker-compose.yml:

---
version: '2'
services:
  zoonavigator:
    image: elkozmon/zoonavigator:latest
    hostname: zoonavigator
    container_name: zoonavigator
    restart: unless-stopped
    ports:
      - 9000
    environment:
      HTTP_PORT: 9000
      VIRTUAL_HOST: deb11zk03.zen-net.de
      VIRTUAL_PORT: 9000
      CONNECTION_DEFAULT_CONN: 172.28.128.40:2181,172.28.128.42:2181,172.28.128.41:2181
      CONNECTION_DEFAULT_NAME: Zen-Net DEV

  nginx:
    image: nginxproxy/nginx-proxy
    container_name: nginx
    restart: unless-stopped
    ports:
      - 80:80
      - 443:443
    volumes:
      - /var/run/docker.sock:/tmp/docker.sock:ro
      - /etc/nginx/virtual_host_htpasswds:/etc/nginx/htpasswd:ro
    environment:
      ENABLE_IPV6: 'true'
      DEFAULT_HOST: deb11zk03.zen-net.de

The nginxproxy/nginx-proxy-Image picks up files from /etc/nginx/htpasswd, which are named like the ${VIRTUAL_HOST}-Variable of the to-be-proxied - hosts, which is deb11zk03.zen-net.de in this case. So I added a htaccess - file at /etc/nginx/virtual_host_htpasswds/deb11zk03.zen-net.de on the Docker host, which ends up as /etc/nginx/htpasswd/deb11zk03.zen-net.de in the container.

With that, Basic auth works, but leads to the shown error in Zoonavigator.

from zoonavigator.

Hi. I just want to let you know that I have successfully tested your scenario with nginx proxy and basic auth. The fix is being released in version 1.1.1.

from zoonavigator.

from zoonavigator.

Is anything missing or may I help by providing additional details? In our Infrastructure, this is what blocks us from using the tool, currently.

from zoonavigator.

Sorry for the late reply and thank you for all the info provided.

From what I gathered, the use of basic auth proxy is currently broken. In this setup both nginx and zoonavigator use the Authorization header overwriting each other, hence the error. Quick fix seems to be to use custom authorization header for zoonavigator (unless there's other way to configure this on nginx's end which I'm not aware of). Sorry for not catching that earlier.

I understand the importance of this issue for you and would love to fix it asap. Sadly, it may take me a two to four weeks to be able to properly get on with this and test it thoroughly since this is just my free-time project and still have lot to catch up in my "real" job (I don't want to roll out a quick fix that can break a lot of other things for current users). I will update this thread with any news I have.

from zoonavigator.

Hi @elkozmon ,

just wanted to confirm that this is fixed! Works like a charm; thanks for your efforts!

from zoonavigator.