Uploaded image for project: 'Apache NiFi'
  1. Apache NiFi
  2. NIFI-7870

Fix anonymous access control for advanced UI resources

    XMLWordPrintableJSON

Details

    Description

      The X-Content-Type header was added in NiFi 1.12.0, which blocks resources in the browser if they do not have the content type added. It appears that some 'advanced UI' resources do not have the content type applied to their resources and are blocked from loading.

      On further inspection, it appears that explicitly disallowing anonymous access has resulted in some static resources in the NiFi advanced UI's WAR checking whether the anonymous user should be able to access them. The anonymous access was intended to be used on the NiFi API endpoints, and not static resources.

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. NIFI-8510 CSRF filter blocking requests that contain unrelated cookies

          • Major - Major loss of function.
          • Resolved
          fixes

          Bug - A problem which impairs or prevents the functions of the product. NIFI-7849 UpdateAttribute Advanced Configuration fails to render with authentication

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. NIFI-8675 Update attribute advanced not working

          • Major - Major loss of function.
          • Resolved
          is caused by

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-7170 Restrict anonymous authentication to require explicit override in nifi.properties

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. NIFI-7849 UpdateAttribute Advanced Configuration fails to render with authentication

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. NIFI-10871 Intermittent CSRF HTTP 403 in Clustered Deployments

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. NIFI-8931 Remove One-time Password Authentication

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link GitHub Pull Request #4659

          Web Link GitHub Pull Request #4988

          Activity

            People

              thenatog Nathan Gough
              thenatog Nathan Gough
              Votes:
              4 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Time Tracking

                  Estimated:
                  Original Estimate - Not Specified
                  Not Specified
                  Remaining:
                  Remaining Estimate - 0h
                  0h
                  Logged:
                  Time Spent - 5.5h
                  5.5h