Infinite Loop with HTTP Auth

  • Resolved brownpl

    (@brownpl)


    1 month, 2 weeks ago

    Hi there – I think I’ve tracked down an issue and I wanted to share. We wanted to use HTTP Auth to restrict access to a development site. It seems there is a conflict with the HTTP Auth you all are using for API requests. Around line 106 of RestAPIAuth.php, there is an error message generated that uses translation. I believe the translation call is also requiring an auth check, which is leading to an infinite loop. My stopgap solution was to just remove the translation call from the error message, but you all likely have a better solution.

    Steps to replicate:
    – setup HTTP Auth or add plugin to do so and enable it
    – attempt to go to any Masteriyo backend page, it will not render and cause issues. I needed to use xdebug to limit the loop otherwise it was challenging to get logs.
    – disable the HTTP Auth or plugin (must be disabled, not just turned off)
    – Masteriyo CMS pages render as expected

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support Amrit Kumar Shrestha

    (@shresthauzwal)

    1 month, 2 weeks ago

    Hi @brownpl,

    Thanks for reporting this issue.

    We have assigned this to our development team for further investigation. They will review the infinite loop behavior with HTTP authentication and take the necessary steps.

    We’ll keep you updated once we have more information.
    Best Regards!

    sauravkhanal

    (@sauravkhanal)

    1 month, 1 week ago

    Hi @brownpl,

    Thanks for reporting this and for your investigation 🙌

    We identified the issue and fixed it by removing a recursive translation call and improving the auth check to ignore unrelated credentials (like HTTP Auth).

    This resolves the infinite loop and restores normal behavior.
    Best Regards!

    Thread Starter brownpl

    (@brownpl)

    1 month, 1 week ago

    Thank you!

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.