Use squidex API endpoint with local network name inside docker

Support
5

It happens only when i connect to squidex_squidex (which is container name).

If i connect to bash inside my app container (not the one which runs squidex but, the one which runs application consuming squidex API).

And when i call:
curl -X POST -d 'grant_type=client_credentials&client_id=xxx&client_secret=xxx&scope=squidex-api' http://squidex_squidex/identity-server/connect/token

I got:

<!DOCTYPE html>
<html>
<head>
    <base href="/">

    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">

    <title>Error - Squidex Headless CMS</title>

    <link rel="stylesheet" href="/styles.css" />



</head>
<body class="profile">
    <div class="profile-container">
        <img class="profile-logo" alt="Squidex Headless CMS" title="Squidex Headless CMS" src="/images/logo.svg" />

        <div class="profile-card card">
            <div class="profile-card-body card-body">


<img class="splash-image" src="/squid.svg?title=OH%20DAMN&amp;text=I%20am%20sorry%2C%20that%20something%20went%20wrong" />

<h1 class="splash-h1">Operation failed</h1>

<p class="splash-text">
        <span>We are really sorry that something went wrong.</span>
</p>
            </div>
        </div>

        <div class="profile-footer text-center mt-4 mb-2">
            <small class="text-muted">
                Proudly made by<br />Sebastian Stehle and Contributors, 2016-2021
            </small>
        </div>
    </div>
</body>

If i make the same call but instead of container name use actual domain which is used to host squidex.

curl -X POST -d 'grant_type=client_credentials&client_id=xxx&client_secret=xxx&scope=squidex-api' https://squidex.xxx.ltd/identity-server/connect/token

I got valid token.

{
  "access_token": "exxxx",
  "token_type": "Bearer",
  "expires_in": 2591999,
  "scope": "squidex-api"
6

It is related to this issue: https://github.com/openiddict/openiddict-core/issues/1379

I had to use absolute URLs to get it working.

7

Perfect basically it means that there have to be use endpoint with same domain name as set via URLS__BASEURL if I understand conservation of the issue correctly.

8

Yes, but let me try something.

1 Like
9

I have pushed a potential fix. Lets see if the build goes through.

10

Can you try dev-6793 ?

11

It seems working at least from quick test with curl against fresh new squidex container.

1 Like
12

I will make a final fix and introduce an option for that, because with this change the issuer url would change and all tokens would become invalid.

1 Like
13

Okay, it is pushed. You have to set IDENTITY__MULTIPLEDOMAINS=true

14

Should I test the identity-server/connect/token or have I before upgrading save some token or do anything else?

15

Yes, just test if this endpoint works for you.

16

With dev-6794 it looks like it does not work (i test it as upgrading previously created container and use curl from another container)

17

Have you set the environment variable?

18

oh, sorry i forgot about it, my bad. It works well. Do you plan to publish this as “stable” docker image?

19

Yes, but I don’t know when. Perhaps this friday.

1 Like
20

That would be great thank you for fast response as always :slight_smile:

1 Like
21

I want to kindly remind you of this request and sorry for bothering you before the weekend.

22

You are right, it was already night yesterday.

23

Done, new version has been released.

24

Thanks for the upgrade during the weekend.

1 Like