Development Setup
Confluence User - 13 May, 2021
Hello Joget Community,
Trying to run Joget in Netbeans on Tomcat. The first deployment works and i run through the setup. The setup creates files in the wflow directory and the server starts successfully. The second time i redeploy the war the setup screen reappears with "Sorry, access is forbidden for security reasons.". Now i need to clean the wflow directory, reset the database etc. to make it work once again.
- Is the server compatible with the JDK 11?
- Is there a special development workflow/setup that i am missing here?
- Is my MySQL configuration wrong?
The logs file does display this message: (edit: this seems unrelated)
***************************************************** * Owasp.CsrfGuard Properties * * Logger: org.joget.commons.util.CsrfGuardLogger * NewTokenLandingPage: null * PRNG: SHA1PRNG * SessionKey: OWASP_CSRFTOKEN * TokenLength: 32 * TokenName: OWASP_CSRFTOKEN * Ajax: true * Rotate: false * Javascript cache control: null * Javascript domain strict: false * Javascript inject attributes: false * Javascript inject forms: false * Javascript referer pattern: null * Javascript referer match domain: false * Javascript source file: null * Javascript X requested with: null * Protected methods: Empty HashSet * Protected pages size: 0 * Unprotected methods: HashSet size: 1: [0]: GET * Unprotected pages size: 3 * TokenPerPage: false * Enabled: true * ValidateWhenNoSessionExists: true * Action: org.owasp.csrfguard.action.Log * Parameter: Message = potential cross-site request forgery (CSRF) attack thwarted (user:%user%, ip:%remote_ip%, method:%request_method%, uri:%request_uri%, error:%exception_message%) * Action: org.owasp.csrfguard.action.Error * Parameter: Message = Security Violation. * Parameter: Code = 403 * Action: org.owasp.csrfguard.action.Rotate *****************************************************
Best regards,
Sander Hahn
develop;security