Authentication failed due to missing credentials (401 error)

[Marco Martínez]

I have BBB in my own server and I have a web app for shareholders meeting

I use bbb in a iframe but since July I cannot open it in chrome….in firefox and edge work fine, but in chrome no, because something with cookies and iframes

I attach the message in google Chrome

I attach It Works fine in firefox

Thanks a lot for your help

[Martin Thomas Schrott]

Am 03.09.2020 um 01:34 schrieb Marco Martínez:

I have BBB in my own server and I have a web app for shareholders meeting

I use bbb in a iframe but since July I cannot open it in chrome….in firefox and edge work fine, but in chrome no, because something with cookies and iframes

and yu should be aware of getting this in firefox too some time in future. Iframes are not something you would want to use now adays. That is, why chrome does prevent cases where this is not apropriate.

cheers

Martin

[Pedro Beschorner Marin]

SameSite=None and secure are mandatory policies for iframed cookies. There's a dozen of other folks that already had the same issue you are experiencing and half a dozen of different suggestions like this one https://groups.google.com/g/bigbluebutton-dev/c/bUeHOo4Yu6o/m/EpMaGqKbAQAJ

[egma...@gmail.com]

Amazing, I was looking for this, Mr. Marco, can you guide me to how did you change the design of the webapp?

I have the engine deployed, and I checked the api here: https://docs.bigbluebutton.org/dev/api.html can you just guide me on where to start?

Thank you so much in advance

Best

Elias

[Rajesh Francis]

Hi Pedro,

Can you please guide me to the file and location to where i can set SameSite=None or proxy_cookie_path / "/; secure; HttpOnly; SameSite=none"; Sorry to bother and your help is much appreciated. Tried googling and going through the BBB docs couldn't find the location. Thanks 

[Pedro Beschorner Marin]

You can try the bigbluebutton location over here https://github.com/bigbluebutton/bigbluebutton/blob/3d6951d6d67c437c70bf1de8dffbe91c0a993f77/bigbluebutton-web/bbb-web.nginx#L2

This file will be at /etc/bigbluebutton/nginx

[Rajesh Francis]

Thanks and it really helped :-)

[Emanuele Berinotti]

Hi,

cause i'm facing 401 error in last couple of days, someone could  address me which file have to change and how to activate  proxy_cookie_path setting?

Unfortunatly I can't understand clearly what have to do within current suggestions...

Currently solved trough  allowRequestsWithoutSession = true, but I dont like too much this solution.

Thanks! 

[Pedro Beschorner Marin]

Are you running BBB inside an iframe? If you're not, this thread might not be what you are looking for.

First check if you are running HTTPS everywhere in your setup. This is a must have and can be the cause of many 401 issues.

[Emanuele Berinotti]

Ok, no, I'm running BBB inside a WebChromeClient (WebView component in Xamarin)...anyway i'll review any BBB call.

Thank you!