# לא מצליח להתחבר, לאפס סיסמה או ליצור חשבון חדש בגלל שגיאת 403 Forbidden
**URL:** https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322
**Category:** Self-hosting
**Created:** [7 בינואר, 2017, 12:02pm UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322 "2017-01-07T12:02:03Z")
**Posts on this page:** 12
**Page:** 1
### Author:  [@poka](https://meta.discourse.org/u/poka)
#### Post date: [7 בינואר, 2017, 12:02pm UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322/1 "2017-01-07T12:02:03Z")
Hi everyone!
I got a big problem on my discourse. Since a few days, nobody can login anymore, neither in authentication by email nor by social login (Facebook, Google, Twitter …)
That’s very strange cause everything was working since 1 year with no problems. Everything broked overnight for no reason.
This is what happend for differents case (sorry it’s french …):
- For the email connection:
Just the message " Unknown error"
- For the social login auth:
The message says: “Sorry, there was an error authorizing your account. Perhaps you did not approve authorization?”
- When I try to reset the password:
“403 Forbidden”
- And when I want to create a new account:
“We can not detect if your account has been created, please verify that you have enabled cookies.”
Of course, the cookies are enabled.
Any ideas ?
---
### Author:  [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [7 בינואר, 2017, 6:18pm UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322/2 "2017-01-07T18:18:40Z")
Please provide some info:
- Forum URL
- Are you using HTTPS?
- Do you use a reverse proxy outside docker?
---
### Author:  [@poka](https://meta.discourse.org/u/poka)
#### Post date: [7 בינואר, 2017, 10:24pm UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322/3 "2017-01-07T22:24:26Z")
The URL is [https://colibris41.citiz-network.org](https://colibris41.citiz-network.org) and use https.
I use a nginx in reverse proxy in an independant LXC container, cause it’s a virtualization server. The forum is in a KVM and I use another KVM and LXC for another forum and website.
---
### Author:  [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [8 בינואר, 2017, 1:30am UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322/4 "2017-01-08T01:30:49Z")
Paste the location config of the reverse proxy with the header your are setting.
---
### Author:  [@poka](https://meta.discourse.org/u/poka)
#### Post date: [8 בינואר, 2017, 10:30am UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322/5 "2017-01-08T10:30:36Z")
This is the config enabled for my nginx…
```
server {
listen 80;
server_name colibris41.citiz-network.org;
listen 443 ssl;
listen [::]:443 ssl;
ssl_certificate /etc/letsencrypt/live/colibris41.citiz-network.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/colibris41.citiz-network.org/privkey.pem;
ssl_session_timeout 5m;
ssl_session_cache shared:SSL:50m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES12$
ssl_prefer_server_ciphers on;
add_header Strict-Transport-Security max-age=15768000;
ssl_stapling on;
ssl_stapling_verify on;
ssl_trusted_certificate /etc/letsencrypt/live/colibris41.citiz-network.org/chain.pem;
resolver 8.8.8.8 8.8.4.4 valid=86400;
resolver_timeout 10;
client_max_body_size 10M;
location / {
proxy_pass http://10.0.2.110/;
#proxy_pass http://10.0.2.114/; #Redirection maintenance
}
}
```
But I don’t why the problem could be there. That works fine for one year…
---
### Author:  [@Falco](https://meta.discourse.org/u/Falco)
#### Post date: [8 בינואר, 2017, 4:42pm UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322/6 "2017-01-08T16:42:29Z")
You have a broken reverse proxy config:
> [@Twitter, Github and normal username and password logins not working after upgrade](https://meta.discourse.org/t/twitter-github-and-normal-username-and-password-logins-not-working-after-upgrade/51854/30):
>
> I’m not seeing proxy\_set\_header X-Forwarded-For $proxy\_add\_x\_forwarded\_for; proxy\_set\_header X-Forwarded-Proto https; in that How To can you try it?
Adding a reverse proxy increase the maintenance burden, so should be done only when necessary, and will occasionally break.
A simpler approach, with less maintenance, is using [Caddy](https://meta.discourse.org/t/running-discourse-with-caddy-server/54716) as a reverse proxy server.
> [@poka](#):
>
> But I don’t why the problem could be there. That works fine for one year…
Discourse is using secure cookies now, and they are more sensitive to a broken proxy.
---
### Author:  [@poka](https://meta.discourse.org/u/poka)
#### Post date: [8 בינואר, 2017, 11:43pm UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322/7 "2017-01-08T23:43:16Z")
Ok I just added this in my proxy.conf:
```
proxy_set_header X-Forwarded-Proto https;
```
Everything seems to work great now! I never thought the problem would come from there. Thank’s a lot!
---
### Author:  [@Francois\_Bacconnet](https://meta.discourse.org/u/Francois_Bacconnet)
#### Post date: [11 במרץ, 2019, 8:54am UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322/8 "2019-03-11T08:54:23Z")
Bonjour,
I just installed Discourse version Bitnami v2.2.2 with auto-install on GCP (Google Cloud Platform).
After setting up https, I encounter the 403 issue.
I tried your solution, aka adding a line (proxy\_set\_header X-Forwarded-Proto https;) in proxy.conf
1/ I had a very hard time to find the file
2/ Found proxy-html.conf in /opt/bitnami/apache2/conf/extra
3/ added the line there, restarted apache and it did not work
I’m not sure it’s the right file
I’m not sure it is used
I’m not sure if that line is enough
Please, help!
---
### Author:  [@zogstrip](https://meta.discourse.org/u/zogstrip)
#### Post date: [11 במרץ, 2019, 9:02am UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322/9 "2019-03-11T09:02:12Z")
Hello François,
I’m sorry, but we do not support Bitnami installations. You will need to contact their support.
---
### Author:  [@Francois\_Bacconnet](https://meta.discourse.org/u/Francois_Bacconnet)
#### Post date: [13 במרץ, 2019, 9:29am UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322/10 "2019-03-13T09:29:23Z")
Salut @zogstrip
I get you. I did as requested a post to Bitnami support =\> [https://community.bitnami.com/t/403-forbidden-on-logins/65453](https://community.bitnami.com/t/403-forbidden-on-logins/65453)
I was given instructions very similar to those in this thread, but the same way, they both don’t work. I am stuck for tow days.
I am more and more willing to reset everything down. I chose the Bitnami solution on GCP because I never used VMs and I wanted to cut some hassle as I set this forum alone and am more of a front-end specialist.
So, do you think it is worth I start over with a non-Bitnami version you would support?
And if so, is it compatible with GCP? Are there step by step instructions to set it up?
I’m not very familiar with the CL but I can deal with it as I do for 30 years 🙂
I would really like to use Discourse to replace [LUDGEF](https://plus.google.com/communities/104017529391532719405), my 75K members G+ community, but I am not paid for that and would really appreciate some help.
Have a nice day.
---
### Author:  [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [13 במרץ, 2019, 9:37am UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322/11 "2019-03-13T09:37:04Z")
We definitely recommend following our [official install](https://meta.discourse.org/t/142537?silent=true) guide.
---
### Author:  [@JammyDodger](https://meta.discourse.org/u/JammyDodger)
#### Post date: [8 ביוני, 2024, 12:37pm UTC](https://meta.discourse.org/t/cant-login-reset-password-or-create-new-account-due-to-403-forbidden-error/55322/12 "2024-06-08T12:37:09Z")
This topic was automatically closed after 2709 days. New replies are no longer allowed.