Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Configuration] Modsecurity / Authelia #13

Open
Maypul opened this issue Oct 22, 2022 · 1 comment
Open

[Configuration] Modsecurity / Authelia #13

Maypul opened this issue Oct 22, 2022 · 1 comment

Comments

@Maypul
Copy link

Maypul commented Oct 22, 2022

Hello there,
I am not sure if this or main plugin is correct place to ask about it but as Authelia is more of docker/traefik thing I will ask here.

I am having an issue with running this plugin, traefik, modsecurity and authelia together. They all seem to work fine but once modsecurity is added to the mix it seems to be blocking Authelia login page. The page loads but will always show incorrect username/password for the user as modsecurity is denying the request with method not allowed error:

- - [11/Oct/2022:11:28:43 +0000] "POST /api/firstfactor HTTP/1.1" 405 150 "https://auth.example.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0" "-"

From what I see the defauly ModSecurity config allows the POSt method. Does anyone use this combo of applications or might be able to help me what setting would I need to allow for Authelia to work? Once logged in and modsecurity enabled then there seem be no issue, just the login page.

@acouvreur
Copy link
Owner

acouvreur commented Oct 22, 2022

Please share your modaecurity config so we can troubleshoot how modsecurity is supposes to handle these POST requests

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants