What are the correct url and api redirects to use in apache2 and nginx?

narongarj

Trying to install Oauth2 plugin but after consent with admin azure account the redirect not works, same error "URL not supported"
I tried several tips that I read here in this forum but are too many informations and none works properly.

KevinTheJedi

narongarj

Please search the older threads on this. You don’t have URL rewriting enabled on your web server.

Cheers.

narongarj

KevinTheJedi I had URL rewrite in my nginx, works to redirect 80 to 443 also. I wanna know what is correct redirect to put in my files to Oauth2 works

KevinTheJedi

narongarj

It depends on if you have your site running in a sub-folder or not.

Cheers.

narongarj

KevinTheJedi No, my nginx point directly to folder /var/www/upload where osticket was unziped.

KevinTheJedi

narongarj

Then you should be able to go to the NGINX website and look for the standard osTicket recipe. That should work in addition to having URL Rewrite enabled properly. We are going to post a full working NGINX config on our docs soon but we are working out the final caveats before doing so.

Cheers.

vomnycliff

KevinTheJedi - Any updates on this?

This week, I upgraded to 1.17 so I could get email fetching to work again via Oauth2 however, after following the guide for configuring everything and then enabling URL rewriting in Apache 2.4 I stil get error 404 displaying "Not Found The requested URL was not found on this server."

I do a reverse proxy setup with NGINX hence I found this thread and am following up as it's been about 2 weeks. Thanks for any updates!

KevinTheJedi

vomnycliff

Then your NGINX config for the osTicket site doesn't fully cover the API urls. You will need to adjust the NGINX rules to allow the API urls to be rewritten successfully. We do not have an official NGINX config available to the public at this time but we will publish one soon on our Documentation.

Cheers.

vomnycliff

KevinTheJedi

I've found a few threads showing NGINX configs but my attempts to get it working have failed. My original NGINX configuration file that still works (just not for Oauth2 authentication) is:

server {
        listen 443 ssl http2;

        server_name helpdesk.MYSITE.COM;
        access_log /var/log/nginx/helpdesk.access.log;
        error_log /var/log/nginx/helpdesk.error.log;

        include snippets/MYSITE.COM.cert.conf;
        include snippets/ssl-params.conf;

        location / {
                proxy_pass http://XXX.XXX.XXX.XXX/helpdesk/;
                proxy_buffering off;
                proxy_http_version 1.1;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection $http_connection;
                access_log off;
        }

        #This opens the  OSTicket Homepge
        location /helpdesk/ {
        proxy_pass http://XXX.XXX.XXX.XXX/helpdesk/;
                proxy_buffering off;
                proxy_http_version 1.1;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header Upgrade $http_upgrade;
                proxy_set_header Connection $http_connection;
                access_log off;
        }
 }

As for the API urls, is there any info on how they should be formed? When I attempt to configure the email account I am using our osTicket domain that hits our NGINX reverse proxy pointing to the osTicket server that uses apache 2.4. Here is a screenshot:

Anyway, when I go to authenticate, I get sent to the Microsoft logon page, accept the prompts and then when it redirects, an example of the URL I get sent to is:
https://helpdesk.MYSITE.COM/helpdesk/api/auth/oauth2?code=0.ARcAs1oc66o7U1SAemEXltbNTXrqzOBL3O5HlqLH43D4MlkXAAA.AgABAAIAAAD--DLA3VO7QrddgJg7WevrAgDs_wQA9P-bJswsvG-QaqVHReLmMMAVu6JTYd1n75aufjNhDLdM50tZ8hpuHIj8zEQ4hV2u__hmAQhG7Gw-irjmIbuRw_PtOYGy4456XZeu8kCCM6AsFQTDIW7atNz-r2jiMlBD_X3PO6AcKCNVOOy4LvkI71mqcwdzMrLp_0gr_1aSBqWhzLrG1oGyV_Syt7ylJvhdtP0yKCfU0_BThjWzHfQzlCxSSPx2ak_NUcXxrLmSloXx1jXalWUpHkonKjhnCwPsPt3P-sChx-_D7z36mCXwvNTvE_AA1wVYaAMZ6JK-ZtwWGSAmolUuAhoCeQhJpH8fYpOgH9JacRGQc3yKMI5LH0OBSP2cZnLgHLSIToLIJ2VRQhr6EpUgn4n00GLFEVElX42x3ROuJdqn8sq3b0MJCyRwkzSj2OD7UcKv31LX6XRDoDDJ7Xx2tqnfv2DsUXF_3Lw-hO0ShZJYokd1zJGphi9EPfmg0knaTwO2zKHwnjiDK6r_X-IdI9BN1AXNOuBu2E3nE8nSJFtfYkwOWY0CxRF_Qh6tp1gv2uAMR8mxsHT3XwXKs_EldZCahVgeOklxdfyuVhTqa0owgXfsWfXHcuRvoqGDNkGFDwcvKvxVXX0iYaFAKI7003GkJnHkSKOFYZZ0AY0&state=9735c6650532ccc20f55089eaa251158&session_state=b4ad6913-6c17-4bf6-8874-3737024ab21e#

Here is where I am at a loss. I am digging through the article Creating NGINX Rewrite Rules and my issue is I am not sure what a 'correct' URL looks like for the authentication redirect.

Is there any info you might have that could point me in the right direction? Also, how long until you will have a public NGINX config available?

KevinTheJedi

vomnycliff

I don’t have the config on hand so I’m not sure but should be the exact same as previous API rewrite rules.

We hope to release it soon, no set time.

Cheers.

k2p2006k2p

hello all,

is there anything new here yet? i have also implemented a lot of forum posts but the error with the rewrite api for oauth2 can not be solved. does anyone have a working nginx php? Thanks to the whole team

meine nginx config datei:

`server {
listen 80;
server_name xxx.xxxxxxx.xxx; ## change server_name as per your domain>
root /var/www/osticket/upload;

access_log /var/log/nginx/access.log;
error_log /var/log/nginx/error.log;
index index.php index.html index.htm;

Enable gzip

gzip on;
gzip_min_length 1000;
gzip_types text/plain application/x-javascript text/xml text/css application/xm>

set $path_info „“;

location ~ /include {
deny all;
return 403;
}

if ($request_uri ~ „^/api(/[^\?]+)“) {
set $path_info $1;
}

location ~ ^/api/(?:tickets|tasks).*$ {
try_files $uri $uri/ /api/http.php?$query_string;
}

if ($request_uri ~ „^/scp/.*.php(/[^\?]+)“) {
set $path_info $1;
}

location ~ ^/scp/ajax.php/.*$ {
try_files $uri $uri/ /scp/ajax.php?$query_string;
}

location / {
try_files $uri $uri/ index.php;
}

location ~ .php$ {
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/run/php/php8.0-fpm.sock;
}
}

Vielleicht fällt jemandem etwas auf, was das Problem vieler lösen kann. Danke

KevinTheJedi

k2p2006k2p

Someone posted on github:

https://github.com/osTicket/osTicket/issues/6293#issuecomment-1315838614

Cheers.