dennis_de Comments - Answer Overflow

dennis_de

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

We have now built a WAF rule that turns "X-Livewire: " into "X-Livewire: true". According to Livewire's code (which we have examined), it only checks whether a header exists, not what the value is.

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

Super nasty edge case and a great learning experience.

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

In other words, an empty header in the case of Livewire "X-Livewire: " is not transmitted.

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

Okay, so the problem is that the RFC allows an empty header but not the WAF and therefore the header "X-Livewire" was not passed through. That was the problem, we are now enforcing this and now it works.

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

The setup is: WAF -> Load Balancer -> Webserver -> PHP-FPM We were able to narrow down that it is definitely the WAF...

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

We were able to narrow down that it works without a WAF & load balancer, i.e. directly to the nginx. We are now working with the IT service provider to find out what has been modified in the request to cause the error to occur.

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

Okay, if I start "php artisan serve" on the server, it works.

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

It occurs in every resource, as already mentioned, but also in Password Broker etc.

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

\App\Http\Middleware\TrustProxies::class,
        \Illuminate\Http\Middleware\HandleCors::class,
        \App\Http\Middleware\PreventRequestsDuringMaintenance::class,
        \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
        \App\Http\Middleware\TrimStrings::class,
        \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,

\App\Http\Middleware\TrustProxies::class,
        \Illuminate\Http\Middleware\HandleCors::class,
        \App\Http\Middleware\PreventRequestsDuringMaintenance::class,
        \Illuminate\Foundation\Http\Middleware\ValidatePostSize::class,
        \App\Http\Middleware\TrimStrings::class,
        \Illuminate\Foundation\Http\Middleware\ConvertEmptyStringsToNull::class,

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

$middleware:

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

\App\Http\Middleware\EncryptCookies::class,
            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
            \Illuminate\Session\Middleware\StartSession::class,
            \Illuminate\View\Middleware\ShareErrorsFromSession::class,
            \App\Http\Middleware\VerifyCsrfToken::class,
            \Illuminate\Routing\Middleware\SubstituteBindings::class,

\App\Http\Middleware\EncryptCookies::class,
            \Illuminate\Cookie\Middleware\AddQueuedCookiesToResponse::class,
            \Illuminate\Session\Middleware\StartSession::class,
            \Illuminate\View\Middleware\ShareErrorsFromSession::class,
            \App\Http\Middleware\VerifyCsrfToken::class,
            \Illuminate\Routing\Middleware\SubstituteBindings::class,

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

web group:

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

And in the Kernel.php:

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

I've never heard that one before.

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

setSessionDomain? 😮

69 replies

FFilament

•Created by dennis_de on 12/11/2023 in #❓┊help

Notifications are only displayed by Refresh

->middleware([
                EncryptCookies::class,
                AddQueuedCookiesToResponse::class,
                StartSession::class,
                AuthenticateSession::class,
                ShareErrorsFromSession::class,
                VerifyCsrfToken::class,
                SubstituteBindings::class,
                DisableBladeIconComponents::class,
                DispatchServingFilamentEvent::class,
                CheckImpersonate::class,
            ])

->middleware([
                EncryptCookies::class,
                AddQueuedCookiesToResponse::class,
                StartSession::class,
                AuthenticateSession::class,
                ShareErrorsFromSession::class,
                VerifyCsrfToken::class,
                SubstituteBindings::class,
                DisableBladeIconComponents::class,
                DispatchServingFilamentEvent::class,
                CheckImpersonate::class,
            ])