Question

在8080端口上运行moqui时，直接通过api

访问它

curl -X GET -H "api_key: {apiKey}" http://localhost:8080/rest/s1/example/examples/TEST2

它返回示例TEST2的json结果。

但是当nginx放在mqoui应用程序前面时。代理http://localhost:8080，然后api访问失败，403

{
  "errorCode": 403,
  "errors": "User null is not authorized for View on REST Path /example/examples/{exampleId}\nCurrent artifact info: [name:'/example/examples/{exampleId}', type:'AT_REST_PATH', action:'AUTHZA_VIEW', required: true, granted:false, user:'null', authz:'null', authAction:'null', inheritable:false, runningTime:0]\nCurrent artifact stack:\n[name:'/example/examples', type:'AT_REST_PATH', action:'AUTHZA_VIEW', required: false, granted:null, user:'null', authz:'null', authAction:'null', inheritable:false, runningTime:0]\n[name:'/example', type:'AT_REST_PATH', action:'AUTHZA_VIEW', required: false, granted:null, user:'null', authz:'null', authAction:'null', inheritable:false, runningTime:0]\n[name:'component://webroot/screen/webroot/rest.xml/s1', type:'AT_XML_SCREEN_TRANS', action:'AUTHZA_VIEW', required: false, granted:null, user:'null', authz:'null', authAction:'null', inheritable:false, runningTime:0]\n[name:'component://webroot/screen/webroot/rest.xml', type:'AT_XML_SCREEN', action:'AUTHZA_VIEW', required: false, granted:null, user:'null', authz:'null', authAction:'null', inheritable:false, runningTime:0]\n[name:'component://webroot/screen/webroot.xml', type:'AT_XML_SCREEN', action:'AUTHZA_VIEW', required: false, granted:null, user:'null', authz:'null', authAction:'null', inheritable:false, runningTime:0]"
}

似乎webFacade没有成功初始化api_key的userFacade，因为在错误中用户为空。

Answer 1

默认情况下，Nginx在标题名称中不允许使用下划线_。 Moqui api使用包含下划线的api_key或login_key，因此api_key或login_key标头不会传递给后端moqui应用程序。

在nginx中启用标题名称中的下划线很简单，添加

underscores_in_headers on;

在nginx配置中的http或server指令中。

如果nginx代理moqui应用程序，则在标头中使用api_key的Rest API调用将失败

1 个答案: