Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-43776

Confluence mobile version serves up login screen even when the anonymous access is enabled

    • Icon: Bug Bug
    • Resolution: Won't Fix
    • Icon: Medium Medium
    • None
    • 5.7.1, 5.7.4, 5.9.10, 5.8.13, 5.7.6, 5.9.9, 5.10.4, 5.10.6, 5.10.7, 1000.322.0, 6.11.0, 6.14.1
    • Mobile

      NOTE: This bug report is for Confluence Server. Using Confluence Cloud? See the corresponding bug report.

      Summary

      When accessing Confluence from a mobile device on iOS 10 and Safari, the application serves up a login screen that is invalid. This is true for all pages, even with anonymous access enabled.

      Steps to Reproduce

      1. Install Confluence 5.10.4 (this can also be replicated in previous versions of Confluence such as 5.9.10)
      2. Enable anonymous access
      3. Make sure the system add-on called the 'Confluence Mobile Plugin' is enabled
      4. Access the Confluence instance using iOS 10 and the vanilla Safari browser that comes included
      5. Notice you will get an invalid login prompt asking you to login to Confluence

      Expected Results

      Confluence mobile should open up Confluence without asking you to log in.

      Actual Results

      A prompt comes up in Confluence asking all users to log in every few seconds.

      Notes

      This prompt only happens in Safari that comes bundled with iOS 10.
      Switching to Desktop version does not correct the situation in Cloud, and is not a workaround. Nor is disabling Confluence Mobile.
      Tested in iOS 9 and it is not a problem there.

      Workaround

      • Install the Confluence Server iOS app and use that instead - requires Confluence 6.8 or later
      • Or install Google Chrome or Firefox instead on the device and use that.
      • Or disable Confluence Mobile by disabling the system add-on called the 'Confluence Mobile Plugin' . Please note CONF-40782 - "Disabling the Confluence Mobile Plugin also disables the Workbox - Host Plugin in Confluence 5.9.X" when performing this workaround.

        1. IMG_5923.PNG
          IMG_5923.PNG
          110 kB
        2. Login Prompt.png
          Login Prompt.png
          42 kB

            [CONFSERVER-43776] Confluence mobile version serves up login screen even when the anonymous access is enabled

            Quan Pham added a comment - - edited

            Thanks for your interest in this issue.
            We did an investigation and found that:

            • Whenever there is any REST request to Confluence (Mobile plugin, Team Calendar, Tasks, etc.) with response code "401 Unauthorized", according to this spec: https://tools.ietf.org/html/rfc7235#section-3.1, the response header "WWW-Authenticate" must be set to some value.
            • When iOS Safari 11.X receives the header "WWW-Authenticate" with the value: "Basic Realm" it will pop up the login dialog while other browsers won't. From iOS Safari 12.2+ we don't see this problem occur with Safari anymore.
            • We tried to reset the value header for response code 401 with new value "WWW-Authenticate=WebForm", it works but may cause other problems.

            We decided to close this ticket and advise our customers to upgrade to the latest versions iOS and Safari. We will continue to keep an eye on this. Please raise a support ticket if you still encounter problems with iOS Safari 12.2 or newer.

            Quan Pham added a comment - - edited Thanks for your interest in this issue. We did an investigation and found that: Whenever there is any REST request to Confluence (Mobile plugin, Team Calendar, Tasks, etc.) with response code "401 Unauthorized", according to this spec: https://tools.ietf.org/html/rfc7235#section-3.1, the response header "WWW-Authenticate" must be set to some value. When iOS Safari 11.X receives the header "WWW-Authenticate" with the value: "Basic Realm" it will pop up the login dialog while other browsers won't. From iOS Safari 12.2+ we don't see this problem occur with Safari anymore. We tried to reset the value header for response code 401 with new value "WWW-Authenticate=WebForm", it works but may cause other problems. We decided to close this ticket and advise our customers to upgrade to the latest versions iOS and Safari. We will continue to keep an eye on this. Please raise a support ticket if you still encounter problems with iOS Safari 12.2 or newer.

            I can confirm that this is no longer an issue. Running confluence 6.15.7 and safari iOS 13.3.1.

            Paul Edwards added a comment - I can confirm that this is no longer an issue. Running confluence 6.15.7 and safari iOS 13.3.1.

            Just a note that this was fixed for us as it turned out to be a safari issue. Newer versions of the mobile safari don't have this problem.

            Alexander Yolov added a comment - Just a note that this was fixed for us as it turned out to be a safari issue. Newer versions of the mobile safari don't have this problem.

            I have been following this issue since 2017 and after upgrading the Atlassian Team Calendars today to version 6.0.27 the issue doesn’t happen anymore - hurray! - so I thought I would share the news. I am running confluence 6.11.2 and iOS 12.2 safari.

            Paul Edwards added a comment - I have been following this issue since 2017 and after upgrading the Atlassian Team Calendars today to version 6.0.27 the issue doesn’t happen anymore - hurray! - so I thought I would share the news. I am running confluence 6.11.2 and iOS 12.2 safari.

            Sorry - we're still on 5.8 I guessed since this issue has been open for so long that it's always the same location that causes the problem.

            However, you can open the Confluence login page in Chrome with DevTools enabled and see the 401 in the Console.

            Felix Rotthowe added a comment - Sorry - we're still on 5.8 I guessed since this issue has been open for so long that it's always the same location that causes the problem. However, you can open the Confluence login page in Chrome with DevTools enabled and see the 401 in the Console.

            IT Support added a comment -

            @Felix Rotthowe

            which version of confluence do you use? With 6.10.2 this workaround doesn't work. The location you mentioned isn't requested from our mobile devices.

            IT Support added a comment - @Felix Rotthowe which version of confluence do you use? With 6.10.2 this workaround doesn't work. The location you mentioned isn't requested from our mobile devices.

            For us, making Profiles publicly accessible fixed the issue.

            William Yeack added a comment - For us, making Profiles publicly accessible fixed the issue.

            Felix Rotthowe added a comment - - edited

            Adding the following snippet to our nginx.conf (nginx handles SSL termination in our setup) before the proxy configuration solved the problem:

                        #workaround for https://jira.atlassian.com/browse/CONFSERVER-43776
                        location /rest/menu/latest/isAppSuggestionAvailable {
                            return 200 '{}';
                            add_header Content-Type text/plain;
                        }
            

            Felix Rotthowe added a comment - - edited Adding the following snippet to our nginx.conf (nginx handles SSL termination in our setup) before the proxy configuration solved the problem: #workaround for https: //jira.atlassian.com/browse/CONFSERVER-43776 location / rest /menu/latest/isAppSuggestionAvailable { return 200 '{}' ; add_header Content-Type text/plain; }

            Disabling the confluence mobile plugin is not a workaround - we've got it disabled on ours (https://support.member.buzz) and the same problem happens.

            William Yeack added a comment - Disabling the confluence mobile plugin is not a workaround - we've got it disabled on ours ( https://support.member.buzz)  and the same problem happens.

            Still the same issue on 6.12.2

            Stefan Immel added a comment - Still the same issue on 6.12.2

              qpham@atlassian.com Quan Pham
              ajean Andy J.
              Affected customers:
              28 This affects my team
              Watchers:
              54 Start watching this issue

                Created:
                Updated:
                Resolved: