Skip to content

403 errors after using AAD authentication #420

Open

Description

@He11oW-10

Hello,
I have created an azure web app for container with phpmyadmin:latest. There were "access denied" errors once AAD authentication was enabled for the web app.
image

  1. I checked HAR traces. The AAD authentication was completed successfully. 403 errors were from https://<web_app_name>.azurewebsites.net/index.php?route=/ though correct credentials in payload.

  2. configured PMA_USER and PMA_PASSWORD. I could see the databases, but 403 errors persist.

error

Could you please suggest how to mitigate? Is there any debug logging we can use?
Thanks.

Activity

  1. changed the title [-]Ac after using authentication[/-] [+]403 errors after using AAD authentication[/+] on Jul 25, 2023
  2. williamdes commented on Jul 26, 2023

    @williamdes
    Member

    Hi!
    Can you try to disable authentication to see what really causes the 403 error?

  3. He11oW-10 commented on Jul 27, 2023

    @He11oW-10
    Author

    Hi @williamdes , thanks for your help!
    The app could work correctly if I disable authentication.

    image

    test2

  4. williamdes commented on Jul 27, 2023

    @williamdes
    Member

    The app could work correctly if I disable authentication.

    The Microsoft one, right ?
    So there is something in their ruleset that does not work correctly ?

  5. abij commented on Mar 11, 2024

    @abij

    Hi @He11oW-10, it bit us al well, it's directly related to phpmyadmin/phpmyadmin#17240.

  6. williamdes commented on Mar 18, 2024

    @williamdes
    Member

    The 5.2 snapshot should be updated now, and the Docker version too.
    See: (phpMyAdmin 5.2+snapshot) also available as a non official docker image.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions