Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-78282

Allowlist for Application Link disable incoming traffic by default causing Confluence fail to parse External Gadget on each Restart

    XMLWordPrintable

Details

    Description

      Issue Summary

      Allowlist for Application Link disable incoming traffic by default causing Confluence fail to parse External Gadget on each Restart

      This is reproducible on Data Center: yes

      Environment

      Tested and confirmed the issue still exist in Confluence 8.5.4 AppLinked with Jira 9.12.1

      Steps to Reproduce

      1. Install Confluence and Jira (latest LTS was used in this test)
        • Confluence 7.13.5
        • Jira 8.20.7
      2. Establish Applicaiton Links between Confluence and Jira
      3. Register External Gadget in Confluence using Jira URL
      4. Restart Confluence and pay attention to the startup log

      Expected Results

      Confluence is able to request for the external gadget inforamtion and parsed it correctly

      Actual Results

      Error messages where Confluence failed to parse external gadgets like below can be found in the startup log:

      2022-04-03 11:35:33,545 WARN [AtlassianEvent::CustomizableThreadFactory-5] [renderer.internal.http.HttpClientFetcher] fetch A request to http://localhost:48203/j8203/rest/gadgets/1.0/g/com.pyxis.greenhopper.jira:greenhopper-gadget-version-report/gadgets/greenhopper-version-report.xml has been denied. To allow requests to this URL add the application URL to your whitelist (http://confluence.atlassian.com/x/KQfCDQ).
      ...
      2022-04-03 11:35:33,546 WARN [AtlassianEvent::CustomizableThreadFactory-5] [plugins.gadgets.metadata.GadgetsMacroMetadataProvider] generateMacroMetadata Unable to parse gadget spec [ http://localhost:48203/j8203/rest/gadgets/1.0/g/com.pyxis.greenhopper.jira:greenhopper-gadget-version-report/gadgets/greenhopper-version-report.xml ]: org.apache.shindig.gadgets.GadgetException: Unable to retrieve gadget xml. HTTP error 403
      

      This also cause an issue with the External Gadgets not showing up in Macro Browser.

      Workaround

      Modify the Allowlist for the Application Link to include incoming traffic:

      Since Confluence will always load the external gadgets from Jira on startup, restarting Confluence after making the change above will load the gadgets in

      Attachments

        1. default config.png
          default config.png
          162 kB
        2. external gadgets.png
          external gadgets.png
          112 kB
        3. workaround config.png
          workaround config.png
          163 kB

        Issue Links

          Activity

            People

              20f00d30f8b9 Franco Skrzypczak
              btan@atlassian.com Damien Tan
              Votes:
              13 Vote for this issue
              Watchers:
              32 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: