Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

wso2 api manger carbon page gives 403 Forbidden

Tags:

api

wso2

I've downloaded a fresh wso2 api manager and trying to open the link http://host_name:9443/carbon. It gives an error of 403 forbidden and the stack trace is :

- JavaLogger potential cross-site request forgery (CSRF) attack thwarted (user:<anonymous>, ip:127.0.0.1, method:POST, uri:/carbon/admin/login_action.jsp, error:required token is missing from the request)

Does anyone have an idea what's wrong or what I'm missing?

like image 805
Tanvi Garg Avatar asked Oct 31 '17 11:10

Tanvi Garg


People also ask

What is a 403 error API?

An HTTP 403 response code means that a client is forbidden from accessing a valid URL. The server understands the request, but it can't fulfill the request because of client-side issues. API Gateway APIs can return 403 responses for any of the following reasons: Issue. Response header.

How do I start WSO2 API Manager in Windows?

Start WSO2 API Manager by navigating to the /bin directory using the command-line and execute the following command wso2server. bat --run (for Windows) or sh wso2server.sh (for Linux.)

How do I fix error 403 in Ubuntu?

If the file or any similar files are not found, and directory index listings are disabled, the web server displays the '403 Forbidden' error message. To fix the issue, add a default directory index. 3. Make sure there is a file in the webroot folder with this name and upload it if it's missing.


2 Answers

This issue happens due a bug in JDK 1.8.0_151, and you can proceed with approaches:

  1. Downgrade from build 1.8.0_151 to 1.8.0_144;
  2. But if you cannot proceed with the downgrade of, so you can disable the compression in Tomcat repository/conf/tomcat/catalina-server.xml, switching compression to "off" instead of the default which is "on".
like image 115
Edgar Tarton Avatar answered Nov 15 '22 09:11

Edgar Tarton


Do not use JDK1.8.0_151 due to a known issue. This issue is fixed in JDK 1.8.0_162-ea which is not released yet. Use JDK 1.8.0_144 until then.

Ref: https://docs.wso2.com/display/AM210/Installation+Prerequisites

like image 34
Bee Avatar answered Nov 15 '22 09:11

Bee