최근 변경 사항 이후 발생한 Google 로그인 회귀 문제

Monikas · 12월 4, 2024, 8:57오전

[image redacted]

포럼 업데이트 이후 구글이 작동하지 않는 것 같습니다.

pmusaraj · 12월 5, 2024, 8:46오후

이 내용을 @Monikas 님의 새 주제로 이동했습니다. 확인 차 여쭤보는데, 사이트 재빌드 이후에 이 문제를 발견하신 건가요?

justnainai.com/logs 폴더도 한번 확인해 주실 수 있을까요? 이 तरह의 사용자 표시 오류 메시지에는 보통 관련 로그 항목이 함께 남습니다.

Monikas · 12월 6, 2024, 8:41오전

이 오류가 무슨 의미인지 모르겠습니다.

지난 1주일 동안 백업 + app.yml 오버라이드를 사용하여 포럼을 이전했고, 그 후 SMTP를 Microsoft Mail 360에서 Google Mail로 전환했습니다. 또한 OpenResty Web Platform based on NGINX and LuaJIT를 사용하여 빌드한 1Panel 패널을 사용하고 리버스 프록시를 설정했습니다. 리버스 프록시 및 그 설정 파일의 소스 코드는 다음과 같습니다.

error.txt|첨부파일 (614.2 KB)

또한 Cloudflare를 사용했으며 포럼의 구성을 따라 설정을 했습니다.
Search results for ‘cloudflare’ - Discourse Meta
인증서는 Cloudflare의 Origin Server를 사용합니다.

방화벽은 설정되어 있지 않습니다.

웹사이트 구성

server {
    listen 80 ; 
    listen 443 ssl http2 ; 
    server_name www.justnainai.com; 
    index index.php index.html index.htm default.php default.htm default.html; 
    proxy_set_header Host $host; 
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; 
    proxy_set_header X-Forwarded-Host $server_name; 
    proxy_set_header X-Real-IP $remote_addr; 
    proxy_http_version 1.1; 
    proxy_set_header Upgrade $http_upgrade; 
    proxy_set_header Connection $http_connection; 
    access_log /www/sites/www.justnainai.com/log/access.log main; 
    error_log /www/sites/www.justnainai.com/log/error.log; 
    location ^~ /.well-known/acme-challenge {
        allow all; 
        root /usr/share/nginx/html; 
    }
    include /www/sites/www.justnainai.com/proxy/*.conf; 
    if ($scheme = http) {
        return 301 https://$host$request_uri; 
    }
    ssl_certificate /www/sites/www.justnainai.com/ssl/fullchain.pem; 
    ssl_certificate_key /www/sites/www.justnainai.com/ssl/privkey.pem; 
    ssl_protocols TLSv1.3 TLSv1.2; 
    ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:!aNULL:!eNULL:!EXPORT:!DSS:!DES:!RC4:!3DES:!MD5:!PSK:!KRB5:!SRP:!CAMELLIA:!SEED; 
    ssl_prefer_server_ciphers on; 
    ssl_session_cache shared:SSL:10m; 
    ssl_session_timeout 10m; 
    error_page 497 https://$host$request_uri; 
    proxy_set_header X-Forwarded-Proto https; 
    add_header Strict-Transport-Security "max-age=31536000"; 
}

리버스 프록시 원본

location ^~ / {
proxy_pass http://127.0.0.1:50080;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header REMOTE-HOST $remote_addr;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection $http_connection;
proxy_set_header X-Forwarded-Proto $scheme;
proxy_http_version 1.1;
add_header X-Cache $upstream_cache_status;
add_header Cache-Control no-cache;
proxy_ssl_server_name off;
proxy_ssl_name $proxy_host;
add_header Strict-Transport-Security “max-age=31536000”;
}

(google_oauth2) 인증 실패! access_denied: OmniAuth::Strategies::OAuth2::CallbackError, access_denied

버그

activesupport-7.2.2/lib/active_support/broadcast_logger.rb:134:in `block in error' 
activesupport-7.2.2/lib/active_support/broadcast_logger.rb:231:in `block in dispatch' 
activesupport-7.2.2/lib/active_support/broadcast_logger.rb:231:in `each' 
activesupport-7.2.2/lib/active_support/broadcast_logger.rb:231:in `dispatch' 
activesupport-7.2.2/lib/active_support/broadcast_logger.rb:134:in `error' 
omniauth-1.9.2/lib/omniauth/strategy.rb:163:in `log' 
omniauth-1.9.2/lib/omniauth/strategy.rb:486:in `fail!' 
omniauth-oauth2-1.7.3/lib/omniauth/strategies/oauth2.rb:89:in `callback_phase' 
omniauth-1.9.2/lib/omniauth/strategy.rb:238:in `callback_call' 
omniauth-1.9.2/lib/omniauth/strategy.rb:189:in `call!' 
omniauth-1.9.2/lib/omniauth/strategy.rb:169:in `call' 
omniauth-1.9.2/lib/omniauth/builder.rb:45:in `call' 
/var/www/discourse/lib/middleware/omniauth_bypass_middleware.rb:43:in `call' 
rack-2.2.10/lib/rack/tempfile_reaper.rb:15:in `call' 
rack-2.2.10/lib/rack/conditional_get.rb:27:in `call' 
rack-2.2.10/lib/rack/head.rb:12:in `call' 
actionpack-7.2.2/lib/action_dispatch/http/permissions_policy.rb:38:in `call' 
/var/www/discourse/lib/content_security_policy/middleware.rb:12:in `call' 
/var/www/discourse/lib/middleware/anonymous_cache.rb:397:in `call' 
/var/www/discourse/lib/middleware/csp_script_nonce_injector.rb:12:in `call' 
/var/www/discourse/config/initializers/008-rack-cors.rb:14:in `call' 
rack-2.2.10/lib/rack/session/abstract/id.rb:266:in `context' 
rack-2.2.10/lib/rack/session/abstract/id.rb:260:in `call' 
actionpack-7.2.2/lib/action_dispatch/middleware/cookies.rb:704:in `call' 
actionpack-7.2.2/lib/action_dispatch/middleware/callbacks.rb:31:in `block in call' 
activesupport-7.2.2/lib/active_support/callbacks.rb:101:in `run_callbacks' 
actionpack-7.2.2/lib/action_dispatch/middleware/callbacks.rb:30:in `call' 
actionpack-7.2.2/lib/action_dispatch/middleware/debug_exceptions.rb:31:in `call' 
actionpack-7.2.2/lib/action_dispatch/middleware/show_exceptions.rb:32:in `call' 
logster-2.20.0/lib/logster/middleware/reporter.rb:40:in `call' 
railties-7.2.2/lib/rails/rack/logger.rb:41:in `call_app' 
railties-7.2.2/lib/rails/rack/logger.rb:29:in `call' 
/var/www/discourse/config/initializers/100-quiet_logger.rb:20:in `call' 
/var/www/discourse/config/initializers/100-silence_logger.rb:29:in `call' 
actionpack-7.2.2/lib/action_dispatch/middleware/request_id.rb:33:in `call' 
/var/www/discourse/lib/middleware/enforce_hostname.rb:24:in `call' 
rack-2.2.10/lib/rack/method_override.rb:24:in `call' 
actionpack-7.2.2/lib/action_dispatch/middleware/executor.rb:16:in `call' 
rack-2.2.10/lib/rack/sendfile.rb:110:in `call' 
rack-mini-profiler-3.3.1/lib/mini_profiler.rb:191:in `call' 
/var/www/discourse/lib/middleware/processing_request.rb:12:in `call' 
message_bus-4.3.8/lib/message_bus/rack/middleware.rb:60:in `call' 
/var/www/discourse/lib/middleware/request_tracker.rb:360:in `call' 
actionpack-7.2.2/lib/action_dispatch/middleware/remote_ip.rb:96:in `call' 
railties-7.2.2/lib/rails/engine.rb:535:in `call' 
railties-7.2.2/lib/rails/railtie.rb:226:in `public_send' 
railties-7.2.2/lib/rails/railtie.rb:226:in `method_missing' 
rack-2.2.10/lib/rack/urlmap.rb:74:in `block in call' 
rack-2.2.10/lib/rack/urlmap.rb:58:in `each' 
rack-2.2.10/lib/rack/urlmap.rb:58:in `call' 
unicorn-6.1.0/lib/unicorn/http_server.rb:634:in `process_client'
unicorn-6.1.0/lib/unicorn/http_server.rb:739:in `worker_loop'
unicorn-6.1.0/lib/unicorn/http_server.rb:547:in `spawn_missing_workers'
unicorn-6.1.0/lib/unicorn/http_server.rb:143:in `start'
unicorn-6.1.0/bin/unicorn:128:in `<top (required)>'
/var/www/discourse/vendor/bundle/ruby/3.3.0/bin/unicorn:25:in `load' 
/var/www/discourse/vendor/bundle/ruby/3.3.0/bin/unicorn:25:in `<main>'

(microsoft_office365) 인증 실패! access_denied: OmniAuth::Strategies::OAuth2::CallbackError, access_denied | 사용자가 클라이언트 애플리케이션이 요청한 범위에 대한 액세스를 거부했습니다.

버그2

activesupport-7.2.2/lib/active_support/broadcast_logger.rb:134:in `block in error'

activesupport-7.2.2/lib/active_support/broadcast_logger.rb:231:in `block in dispatch'

activesupport-7.2.2/lib/active_support/broadcast_logger.rb:231:in `each'

activesupport-7.2.2/lib/active_support/broadcast_logger.rb:231:in `dispatch'

activesupport-7.2.2/lib/active_support/broadcast_logger.rb:134:in `error'

omniauth-1.9.2/lib/omniauth/strategy.rb:163:in `log'

omniauth-1.9.2/lib/omniauth/strategy.rb:486:in `fail!'

omniauth-oauth2-1.7.3/lib/omniauth/strategies/oauth2.rb:89:in `callback_phase'

omniauth-1.9.2/lib/omniauth/strategy.rb:238:in `callback_call'

omniauth-1.9.2/lib/omniauth/strategy.rb:189:in `call!'

omniauth-1.9.2/lib/omniauth/strategy.rb:169:in `call'

omniauth-1.9.2/lib/omniauth/strategy.rb:192:in `call!'

omniauth-1.9.2/lib/omniauth/strategy.rb:169:in `call'

omniauth-1.9.2/lib/omniauth/builder.rb:45:in `call'

/var/www/discourse/lib/middleware/omniauth_bypass_middleware.rb:43:in `call'

rack-2.2.10/lib/rack/tempfile_reaper.rb:15:in `call'

rack-2.2.10/lib/rack/conditional_get.rb:27:in `call'

rack-2.2.10/lib/rack/head.rb:12:in `call'

actionpack-7.2.2/lib/action_dispatch/http/permissions_policy.rb:38:in `call'

/var/www/discourse/lib/content_security_policy/middleware.rb:12:in `call'

/var/www/discourse/lib/middleware/anonymous_cache.rb:397:in `call'

/var/www/discourse/lib/middleware/csp_script_nonce_injector.rb:12:in `call'

/var/www/discourse/config/initializers/008-rack-cors.rb:14:in `call'

rack-2.2.10/lib/rack/session/abstract/id.rb:266:in `context'

rack-2.2.10/lib/rack/session/abstract/id.rb:260:in `call'

actionpack-7.2.2/lib/action_dispatch/middleware/cookies.rb:704:in `call'

actionpack-7.2.2/lib/action_dispatch/middleware/callbacks.rb:31:in `block in call'

activesupport-7.2.2/lib/active_support/callbacks.rb:101:in `run_callbacks'

actionpack-7.2.2/lib/action_dispatch/middleware/callbacks.rb:30:in `call'

actionpack-7.2.2/lib/action_dispatch/middleware/debug_exceptions.rb:31:in `call'

actionpack-7.2.2/lib/action_dispatch/middleware/show_exceptions.rb:32:in `call'

logster-2.20.0/lib/logster/middleware/reporter.rb:40:in `call'

railties-7.2.2/lib/rails/rack/logger.rb:41:in `call_app'

railties-7.2.2/lib/rails/rack/logger.rb:29:in `call'

/var/www/discourse/config/initializers/100-quiet_logger.rb:20:in `call'

/var/www/discourse/config/initializers/100-silence_logger.rb:29:in `call'

actionpack-7.2.2/lib/action_dispatch/middleware/request_id.rb:33:in `call'

/var/www/discourse/lib/middleware/enforce_hostname.rb:24:in `call'

rack-2.2.10/lib/rack/method_override.rb:24:in `call'

actionpack-7.2.2/lib/action_dispatch/middleware/executor.rb:16:in `call'

rack-2.2.10/lib/rack/sendfile.rb:110:in `call'

rack-mini-profiler-3.3.1/lib/mini_profiler.rb:191:in `call'

/var/www/discourse/lib/middleware/processing_request.rb:12:in `call'

message_bus-4.3.8/lib/message_bus/rack/middleware.rb:60:in `call'

/var/www/discourse/lib/middleware/request_tracker.rb:360:in `call'

actionpack-7.2.2/lib/action_dispatch/middleware/remote_ip.rb:96:in `call'

railties-7.2.2/lib/rails/engine.rb:535:in `call'

railties-7.2.2/lib/rails/railtie.rb:226:in `public_send'

railties-7.2.2/lib/rails/railtie.rb:226:in `method_missing'

rack-2.2.10/lib/rack/urlmap.rb:74:in `block in call'

rack-2.2.10/lib/rack/urlmap.rb:58:in `each'

rack-2.2.10/lib/rack/urlmap.rb:58:in `call'

unicorn-6.1.0/lib/unicorn/http_server.rb:634:in `process_client'

unicorn-6.1.0/lib/unicorn/http_server.rb:739:in `worker_loop'

unicorn-6.1.0/lib/unicorn/http_server.rb:547:in `spawn_missing_workers'

unicorn-6.1.0/lib/unicorn/http_server.rb:143:in `start'

unicorn-6.1.0/bin/unicorn:128:in `<top (required)>'

/var/www/discourse/vendor/bundle/ruby/3.3.0/bin/unicorn:25:in `load'

/var/www/discourse/vendor/bundle/ruby/3.3.0/bin/unicorn:25:in `<main>'

app.yml

templates:
  - "templates/postgres.template.yml"
  - "templates/redis.template.yml"
  - "templates/web.template.yml"
  - "templates/web.ratelimited.template.yml"
  - "templates/cloudflare.template.yml"


expose:
  - "50080:80"  
  - "50443:443"  

params:
  db_default_text_search_config: "pg_catalog.english"


  #db_shared_buffers: "256MB"


  #db_work_mem: "40MB"


  #version: tests-passed

env:
  LC_ALL: en_US.UTF-8
  LANG: en_US.UTF-8
  LANGUAGE: en_US.UTF-8
  # DISCOURSE_DEFAULT_LOCALE: en


  #UNICORN_WORKERS: 3



  DISCOURSE_HOSTNAME: 'www.justnainai.com'



  DISCOURSE_DEVELOPER_EMAILS: ''
  DISCOURSE_MAX_REQS_PER_IP_PER_10_SECONDS: 400
  DISCOURSE_MAX_ASSET_REQS_PER_IP_PER_10_SECONDS: 800



  DISCOURSE_SMTP_ADDRESS: smtp.gmail.com
  DISCOURSE_SMTP_PORT: 587
  DISCOURSE_SMTP_USER_NAME: ''  
  DISCOURSE_SMTP_PASSWORD: ''   
  DISCOURSE_SMTP_ENABLE_START_TLS: true
  DISCOURSE_SMTP_AUTHENTICATION: login


 

volumes:
  - volume:
      host: /var/discourse/shared/standalone
      guest: /shared
  - volume:
      host: /var/discourse/shared/standalone/log/var-log
      guest: /var/log

OAuth2::ConnectionError (FinalDestination: all resolved IPs were disallowed)

최근 포럼에서 이 오류가 발생하기 시작했고, 4797개의 항목이 로그에 한꺼번에 표시되지 않고 있습니다.

honeymoose · 12월 6, 2024, 3:18오후

로컬 컴퓨터에서 테스트해 보았습니다.

Google 로그인에 문제는 발견되지 않았습니다.

pmusaraj · 12월 6, 2024, 4:37오후

이것은 새로운 호스트에 네트워크 문제가 있음을 나타냅니다. 이전 작업을 시작했을 때 문제가 발생하기 시작한 것으로 추정됩니다. 스택의 일부가 인증 서버로의 요청을 차단하고 있는 것 같습니다… 불행히도 더 이상의 도움을 드릴 수 없지만, 우리가 호스팅하는 사이트에서 테스트해 보니 Google 인증은 정상적으로 작동합니다.

글		댓글	조회수
Google Login Stopped Working after manual update Support	5	1072	3월 8, 2019
Twitter, Github and normal username and password logins not working after upgrade Self-hosting unsupported-install	34	7815	10월 22, 2016
Locked out of my forum after restore Support	19	668	1월 27, 2025
Problem with Google auth due to bundle install Development unsupported-install	9	298	12월 6, 2024
Google login not working due to incorrect server time Support	8	1679	7월 29, 2019

최근 변경 사항 이후 발생한 Google 로그인 회귀 문제

포럼 업데이트 이후 구글이 작동하지 않는 것 같습니다.

Related topics