Having problem using through reverse proxy

[danjb]

I have been looking for a good self-hosted book logger that can keep reviews and ratings of books I've read, plus allow imports and metadata population. Basically a better private GoodReads. Jelu looks like it can fill the bill.

I am installing under Docker, and can get Jelu to work fine directly in my private network. However, I use a Nginx reverse proxy to access my services via subdomain and wrap requests in https. When I do this with Jelu, it does not appear to maintain my login session. It will present the Jelo auth page, then appear to successfully login showing the Jelu dashboard. However, if I do anything from there, including just refreshing the page with F5, it acts as if I haven't logged in and presents the auth page again.

I've checked headers the reverse proxy is passing, and there is a SESSION cookie after the login (I assume a Java session ID). The x-real-ip, x-forwarded-for, x-forwarded-protocol, x-forwarded-proto, x-forwarded-host, x-forwarded-port, forwarded headers are all set to the external https subdomain based internet address. The host header and of course the internal GET url reference the http intranet Docker host / port Jelu is running on.

Any idea why this would confuse the Jelu login session? I do see this warning appear in the Jelu logs:

[io-11111-exec-1] o.s.web.servlet.PageNotFound : No mapping for GET /books

I tried configuring the application.yml file to specify the default example settings given for configuring proxy authentication, even though I am NOT using proxy authentication with Jelu. No different result occurred.

[bayang]

Well Jelu is just a basic web app with nothing fancy, any basic reverse configuration should work out of the box. Jelu can use cookie and localstorage of your browser.
I am myself using caddy and I just have this in my config

jelu.mydomain {
  encode zstd gzip
  reverse_proxy jelu:11111 {
  }
  log {
    output file /data/jelu.log
  }
}

Are you sure you don't have an extension or sth that is preventing session data to be persisted ?

[mlessard-appcom]

I have a similar setup and I have the same problem. Docker with nginx-reverse-proxy. The reverse proxy works because I can login and navigate. Requests to jelu seem to include the cookie in the header (Cookie: SESSION=Zm...) but the server returns 403. I see the cookie in local storage. If I reload with F5 instead of just clicking to navigate, I have to login again.

[bayang]

Can you see something in the browser console ?
What is your reverse proxy configuration ?

[richlawson]

For what it's worth, I was experiencing the same issue that @mlessard-appcom described just after spinning Jelu up via docker compose with Nginx Proxy Manager in front of it.

I noticed 403 errors in my browser console and also some in the docker container logs. When I started troubleshooting, I noticed everything worked correctly in a different browser than the one I used to set it up in (Firefox). I tried incognito mode in Firerfox, and Jelu worked correctly. After clearing cookies/session data from the last few hours, it also worked correctly in non-incognito FIrefox.

Something must have been cached that was throwing everything off for me.