File not found during /api

adrenator

You said "Also, you should ensure all files have the appropriate permissions/ownership so Apache can read/execute them."

When/how can I check proper permissions?

KevinTheJedi

adrenator

That depends on the server. You will need to google something like “how to check file permissions and ownership on server_type_here”. On Linux you can do something like ls -al /path/to/osTicket/. Obviously, repeat for all subdirectories.

Cheers.

adrenator

KevinTheJedi Yes, that's clear for me but where can I find informations about correct permissions? I mean when I check on the os to where should I compare results?

BR,
Jan

adrenator

KevinTheJedi

I double check .httaccess and it works. I think problem may be connected to permissions (?)

When I access https://xxxxx/api/auth/oauth2

KevinTheJedi

adrenator

Let me ask you this, do you access your help desk with the root domain or is there an addition path added? Meaning do you access your site directly with <my_url>.pl/ or with something like <my_url>.pl/upload/ or <my_url>/support/?

Cheers.

adrenator

KevinTheJedi

Hi,

I use subdomain ticketsystem.domain.pl without any additional path.

Tanks and Regards,
Jan

KevinTheJedi

adrenator

Then yea it definitely appears you are having deeper issues at the server level. I would suggest setting up your own server with no restrictions (ie. no hosting provider) and retest. I have v1.18.1 running with Apache (plus the rewrite module installed and enabled for my site), PHP 8.2, MySQL 8.0, the latest build of the OAuth2 Plugin, and have zero issues with the API.

Cheers.

KevinTheJedi

adrenator

A hacky workaround would be to use the non-rewrite URL of https://<my_url>.pl/api/http.php/auth/oauth2. This way your system doesn't need rewrite. But this is ugly so the best option would be to address the server level issues.

Cheers.

KevinTheJedi

Sly20 adrenator

Here was a similar thread from 2022:

https://forum.osticket.com/d/101316-error-on-redirect-url-when-using-oauth2-no-input-file-specified/22

Start from the comment I linked above and continue down and try all of those recommendations.

Cheers.

Sly20

Hello,
I do have the exact same problem with a very similar configuration (Osticket in a subdomain hosted by OVH and trying to log in via MS account).

The result is the same for me "File not found":

I tried to change .htaccess in api folder and was able to redirect to a fake page home.php with R flag

Result :

If I change it back to /http.php/ I'm redirected to my homepage of osticket but not logged in

(FYI : This is the same behaviour as if I manually change the url adding /http.php/ after the error "File not found.")

I don't know if this helps but I am adding my own experiments 😉
Thank You !

KevinTheJedi

Sly20

Okay so now we know this is specific to OVH and their/your setup. If you can prove URL rewrite is enabled and working for the site then there is something deeper. You should reach out to OVH and see if they have anything like ModSecurity or something that is altering or blocking the requests. You should never get the file not found error if you are running an appropriate supported version of PHP, you have the PHP PHAR extension installed/enabled, you have a supported web server functioning properly with url rewrite module installed, your site has url rewriting enabled and allowed, you are running the latest version of osTicket, you are using the latest build of the OAuth2 plugin, and you have an OAuth2 plugin instance that’s configured and enabled.

Also, the plugin itself is responsible for registering the API routes specific for OAuth2 so it could be something with the plugin or server/setup. Like maybe you aren’t using the latest build of the plugin or something on the server level is blocking the PHAR content. You should check all possible error logs and security logs on the server to see if anything is standing out.

Cheers.

Lulucmy

KevinTheJedi Thanks! I'm using osTicket hosted on OVH and I had the same "File not found" issue.
Editing RewriteRule ^(.*)$ %1/http.php/$1 [L] to RewriteRule ^(.*)$ %1/http.php/$1 [R,L] in this file solved the problem 🙂 .

Cheers

adrenator

@Sly20

Line with added R is working for me:
RewriteRule ^.*$ %1/http.php/$1 [R,L]

Is it okey from @KevinTheJedi developer side?

KevinTheJedi

adrenator

So you are able to authenticate using the R added to the .htaccess? If so then that’s fine.

Cheers.

Sly20

For the record, I was not logged in because of an user account issue (user not created as user but only as agent).
So the adding of R solved my issue.