Navigation Menu

Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Apache configuration of 'Header set Referrer-Policy "no-referrer"' causes Matomo login to fail #15083

Open
metfan opened this issue Oct 30, 2019 · 12 comments
Labels
Bug For errors / faults / flaws / inconsistencies etc. c: Usability For issues that let users achieve a defined goal more effectively or efficiently.

Comments

@metfan
Copy link

metfan commented Oct 30, 2019

I can't login anymore after upgrading matomo from 3.9 to 3.12.
I did db upgrade and get stuck outside the app.
Tested with Firefox 70 and Brave 0.70 based on chromium 78

Here error message I get
image

I tried to reset my password following this page https://matomo.org/faq/how-to/faq_191/ but I still get the same error.

I'm using same computer, same browser than yesterday, no proxy....

thanks for your help.

@metfan
Copy link
Author

metfan commented Oct 30, 2019

hum, finally I got it work on Microsoft Edge but I still get the error on Firefox and Brave.

@JugurthaK
Copy link

Hello,

Do you have any Adblocker ? It could be a reason.

Regards,

@metfan
Copy link
Author

metfan commented Nov 4, 2019

Hello @JugurthaK ,
I don't have adblocker on Brave, I disable brave shield but I still have the problem.
I tried on Firefox after I disable uBlock Origin and built in Firefox shield and still have the problem.

Strange it work on Microsoft Edge.

Thanks for your help.

@xshadow
Copy link

xshadow commented Nov 10, 2019

Same issue here. My Firefox 70.0.1 (64-bit), sends Origin: nullto Matomo, which results in this error. That also happens to me on a plain FF installation.

There are no problems with Safari or TorBrowser, they send Origin: https://analytics.foobar.org properly.

@tsteur
Copy link
Member

tsteur commented Nov 10, 2019

AFAIK some users had issues updating to 3.10 or so. Maybe clearing all cookies helps? Does it work in incognito mode?

I wonder why not more users are experiencing this issue on Firefox or so. Any thoughts? @Findus23 @mattab ?

@xshadow
Copy link

xshadow commented Nov 10, 2019

Yeah it seems to be like an odd behavior. I would also suspect plugins. I also had this issue before upgrading to 3.12, so it does not has to be introduced in the current release.

Deleting all cookies did not help.
Incognito mode with plugins enabled does not work.
Starting Firefox without Plugins does not help.

@xshadow
Copy link

xshadow commented Nov 10, 2019

I can reproduce the problem. If you set in your Apache configuration the following header Header set Referrer-Policy "no-referrer"then you are not able to login with a cache cleared FF (all plugins enabled),

@tsteur
Copy link
Member

tsteur commented Nov 11, 2019

@xshadow would apache always overwrite that header? Or would apache keep a header that we set in Matomo (cause I think we do set a referrer-policy AFAIK)

@xshadow
Copy link

xshadow commented Nov 11, 2019

As far as I understand the docs "your" header will be overwritten:

set
The response header is set, replacing any previous header with this name.

@mattab mattab changed the title Can't login after upgrade matomo 3.12.0 Apache configuration of 'Header set Referrer-Policy "no-referrer"' causes Matomo login to fail Jan 21, 2020
@mattab mattab added the Bug For errors / faults / flaws / inconsistencies etc. label Jan 21, 2020
@mattab
Copy link
Member

mattab commented Jan 21, 2020

Is there anything we could do about this, maybe detect this problem and mention it in the red error message like We detected your web server returned a HTTP header "Referrer-Policy" with the value "no-referrer", which is not compatible with Matomo. Please change your webserver configuration to not set this header "Referrer-Policy"

@mattab mattab added the c: Usability For issues that let users achieve a defined goal more effectively or efficiently. label Jan 21, 2020
@rahaalizade
Copy link

hello,
I have the same problem with nginx
I also tried to set the mentioned header and even remove it
but it didn't work and still gave me this error:
If you previously connected using HTTPS, please ensure you are connecting over a secure (SSL/TLS) connection and try again.

@srinivasmummareddy
Copy link

@FatemeAlizade Have you found any solution for this issue?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug For errors / faults / flaws / inconsistencies etc. c: Usability For issues that let users achieve a defined goal more effectively or efficiently.
Projects
None yet
Development

No branches or pull requests

8 participants