adf-viewer causes 401 after deploy

cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Customer

adf-viewer causes 401 after deploy

When I deploy my app to my webserver (Tomcat v7.0.59) when I try to preview any document (with adf-viewer), the document viewer doesn't show it and the console log shows a 401 error like this:

GET https://o-alfresco.vmm.be/alfresco/api/-default-/public/alfresco/versions/1/nodes/5c62ee00-6a32-4406... 401 (Unauthorized)

The link works if i copy it and open it in a new browser window. In development mode (npm run start) all the previews work fine. I only get a 401 on previews. CORS is configured and working fine, I get no CORS errors either.
The problem started after i updated my app from ADF v2.4.0 to v2.5.0
If i make a new ADF 2.5.0 app, and deploy it without code changes, i get the same problem.
Does anyone else have this experience or have an idea what could cause this?

17 Replies
Highlighted
Alfresco Employee

Re: adf-viewer causes 401 after deploy

Can you please provide any extra details, i.e. what are the browser error details in the Network tab. The stack traces if there's a JS error during that call, etc.

Highlighted
Customer

Re: adf-viewer causes 401 after deploy

Details

Network tab capture

Request URL: https://o-alfresco.vmm.be/alfresco/api/-default-/public/alfresco/versions/1/nodes/1370f78d-0eb0-4ddf...
Request Method: GET
Status Code: 401 Unauthorized
Remote Address: 192.168.130.117:443
Referrer Policy: no-referrer-when-downgrade
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://o-dms.vmm.be
Content-Length: 360
Content-Type: text/html;charset=UTF-8
Date: Mon, 17 Sep 2018 13:24:27 GMT
Server: webserver
Set-Cookie: JSESSIONID=B35178E11C94A8CE9C8E75181863F001; Path=/alfresco/; HttpOnly
Vary: Origin
WWW-Authenticate: Negotiate
Accept: */*
Accept-Encoding: gzip, deflate, br
Accept-Language: nl-NL,nl;q=0.9,en-US;q=0.8,en;q=0.7
Connection: keep-alive
Host: o-alfresco.vmm.be
Origin: https://o-dms.vmm.be
Referer: https://o-dms.vmm.be/dms/vergadersite/vgd-test-vergadersite/vergadering/be6c3e3d-58d1-4629-b838-6601...
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36
attachment: false
alf_ticket: TICKET_994a22cb59b72a8a5849bb88b051256b12d21643

Fiddler log:

OPTIONS https://o-alfresco.vmm.be/alfresco/api/-default-/public/alfresco/versions/1/nodes/1370f78d-0eb0-4ddf... HTTP/1.1
Host: o-alfresco.vmm.be
Connection: keep-alive
Access-Control-Request-Method: GET
Origin: https://o-dms.vmm.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36
Access-Control-Request-Headers: authorization,content-type
Accept: */*
Accept-Encoding: gzip, deflate, br
Accept-Language: nl-NL,nl;q=0.9,en-US;q=0.8,en;q=0.7


HTTP/1.1 200 OK
Server: webserver
Access-Control-Allow-Origin: https://o-dms.vmm.be
Access-Control-Allow-Credentials: true
Vary: Origin
Access-Control-Max-Age: 3600
Access-Control-Allow-Methods: HEAD, DELETE, POST, GET, OPTIONS, PUT
Access-Control-Allow-Headers: Origin, Authorization, X-File-Type, Accept, X-File-Name, X-File-Size, Content-Type
Content-Length: 0
Date: Mon, 17 Sep 2018 13:35:45 GMT

------------------------------------------------------------------

GET https://o-alfresco.vmm.be/alfresco/api/-default-/public/alfresco/versions/1/nodes/1370f78d-0eb0-4ddf... HTTP/1.1
Host: o-alfresco.vmm.be
Connection: keep-alive
Accept: application/json
Origin: https://o-dms.vmm.be
Authorization: Basic Uk9MRV9USUNLRVQ6VElDS0VUXzk5NGEyMmNiNTliNzJhOGE1ODQ5YmI4OGIwNTEyNTZiMTJkMjE2NDM=
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36
Content-Type: application/json
Referer: https://o-dms.vmm.be/dms/vergadersite/vgd-test-vergadersite/vergadering/be6c3e3d-58d1-4629-b838-6601...
Accept-Encoding: gzip, deflate, br
Accept-Language: nl-NL,nl;q=0.9,en-US;q=0.8,en;q=0.7


HTTP/1.1 200 OK
Server: webserver
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://o-dms.vmm.be
Vary: Origin
Set-Cookie: JSESSIONID=882EE0CA5B20AAC443B6F98F173A1AC1; Path=/alfresco/; HttpOnly
Cache-Control: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Content-Type: application/json;charset=UTF-8
Content-Length: 1275
Date: Mon, 17 Sep 2018 13:35:45 GMT

{"entry":{"isFile":true,"createdByUser":{"id":"d.moeyersons","displayName":"David Moeyersons"},"modifiedAt":"2018-09-13T13:31:47.444+0000","nodeType":"vgbh:Verslag","content":{"mimeType":"application/vnd.openxmlformats-officedocument.wordprocessingml.document","mimeTypeName":"Microsoft Word 2007","sizeInBytes":41882,"encoding":"UTF-8"},"parentId":"be6c3e3d-58d1-4629-b838-6601754959d4","aspectNames":["rn:renditioned","cm:versionable","vgbh:statusDocumentAspect","vgbh:siteInfoAspect","cm:auditable","vgbh:vergaderingInfoAspect","vgbh:statusAspect","cm:author","cm:thumbnailModification"],"createdAt":"2018-09-13T12:38:55.113+0000","isFolder":false,"modifiedByUser":{"id":"d.moeyersons","displayName":"David Moeyersons"},"name":"Verslag_2018-09-30 Test Vergadersite.docx","id":"1370f78d-0eb0-4ddf-bfdf-69be0803eb67","properties":{"vmm:raadplegingsregime":"Openbaar","cm:versionType":"MINOR","cm:versionLabel":"26.1","vgbh:vergaderDatum":"2018-09-29T22:00:00.000+0000","vgbh:vergaderType":"Afdelingsvergadering","vgbh:vergaderSite":"vgd-test-vergadersite","vmmSmiley Tongueersoonsgegevens":"Nee","vmm:typeName":"Verslag","cm:lastThumbnailModification":["pdf:1536845508287","doclib:1536845509100"],"vgbh:status":"Ontwerp"},"allowableOperations":["delete","update","updatePermissions"]}}

------------------------------------------------------------------

OPTIONS https://o-alfresco.vmm.be/alfresco/api/-default-/public/alfresco/versions/1/nodes/1370f78d-0eb0-4ddf... HTTP/1.1
Host: o-alfresco.vmm.be
Connection: keep-alive
Access-Control-Request-Method: GET
Origin: https://o-dms.vmm.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36
Access-Control-Request-Headers: authorization,content-type
Accept: */*
Accept-Encoding: gzip, deflate, br
Accept-Language: nl-NL,nl;q=0.9,en-US;q=0.8,en;q=0.7


HTTP/1.1 200 OK
Server: webserver
Access-Control-Allow-Origin: https://o-dms.vmm.be
Access-Control-Allow-Credentials: true
Vary: Origin
Access-Control-Max-Age: 3600
Access-Control-Allow-Methods: HEAD, DELETE, POST, GET, OPTIONS, PUT
Access-Control-Allow-Headers: Origin, Authorization, X-File-Type, Accept, X-File-Name, X-File-Size, Content-Type
Content-Length: 0
Date: Mon, 17 Sep 2018 13:35:45 GMT

------------------------------------------------------------------

GET https://o-alfresco.vmm.be/alfresco/api/-default-/public/alfresco/versions/1/nodes/1370f78d-0eb0-4ddf... HTTP/1.1
Host: o-alfresco.vmm.be
Connection: keep-alive
Accept: application/json
Origin: https://o-dms.vmm.be
Authorization: Basic Uk9MRV9USUNLRVQ6VElDS0VUXzk5NGEyMmNiNTliNzJhOGE1ODQ5YmI4OGIwNTEyNTZiMTJkMjE2NDM=
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36
Content-Type: application/json
Referer: https://o-dms.vmm.be/dms/vergadersite/vgd-test-vergadersite/vergadering/be6c3e3d-58d1-4629-b838-6601...
Accept-Encoding: gzip, deflate, br
Accept-Language: nl-NL,nl;q=0.9,en-US;q=0.8,en;q=0.7


HTTP/1.1 200 OK
Server: webserver
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://o-dms.vmm.be
Vary: Origin
Set-Cookie: JSESSIONID=3684BC50A03B235705083329BACB3427; Path=/alfresco/; HttpOnly
Cache-Control: no-cache
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Pragma: no-cache
Content-Type: application/json;charset=UTF-8
Content-Length: 869
Date: Mon, 17 Sep 2018 13:35:45 GMT

{"list":{"pagination":{"count":6,"hasMoreItems":false,"totalItems":6,"skipCount":0,"maxItems":100},"entries":[{"entry":{"id":"avatar","content":{"mimeType":"image/png","mimeTypeName":"PNG Image"},"status":"NOT_CREATED"}},{"entry":{"id":"avatar32","content":{"mimeType":"image/png","mimeTypeName":"PNG Image"},"status":"NOT_CREATED"}},{"entry":{"id":"doclib","content":{"mimeType":"image/png","mimeTypeName":"PNG Image","sizeInBytes":5665,"encoding":"UTF-8"},"status":"CREATED"}},{"entry":{"id":"imgpreview","content":{"mimeType":"image/jpeg","mimeTypeName":"JPEG Image"},"status":"NOT_CREATED"}},{"entry":{"id":"medium","content":{"mimeType":"image/jpeg","mimeTypeName":"JPEG Image"},"status":"NOT_CREATED"}},{"entry":{"id":"pdf","content":{"mimeType":"application/pdf","mimeTypeName":"Adobe PDF Document","sizeInBytes":87449,"encoding":"UTF-8"},"status":"CREATED"}}]}}

------------------------------------------------------------------

CONNECT o-dms.vmm.be:443 HTTP/1.1
Host: o-dms.vmm.be:443
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36

A SSLv3-compatible ClientHello handshake was found. Fiddler extracted the parameters below.

Version: 3.3 (TLS/1.2)
Random: 95 85 2F A7 86 51 B3 3E C3 79 13 44 F6 EA B2 1E 7A 22 C2 E4 05 03 D4 01 1A 3A 23 23 16 47 40 B4
"Time": 19/11/2058 6:31:01
SessionID: FD E1 AA 6D 6A 73 0E 9E FB C3 FC 44 0D D8 B4 46 14 D9 8D D8 37 46 1A 2B 3A D7 25 05 EB F8 46 6E
Extensions:
0xfafa empty
renegotiation_info 00
server_name o-dms.vmm.be
extended_master_secret empty
SessionTicket empty
signature_algs sha256_ecdsa, Unknown[0x8]_Unknown[0x4], sha256_rsa, sha384_ecdsa, Unknown[0x8]_Unknown[0x5], sha384_rsa, Unknown[0x8]_Unknown[0x6], sha512_rsa, sha1_rsa
status_request OCSP - Implicit Responder
SignedCertTimestamp (RFC6962) empty
ALPN http/1.1
channel_id(GoogleDraft) empty
ec_point_formats uncompressed [0x0]
0x0033 00 29 BA BA 00 01 00 00 1D 00 20 36 65 54 21 AB 45 C7 69 CD CF 5A 74 AB 28 65 DE FD 73 A6 1A 7A 88 09 3C C5 AF 72 E3 B6 2D 9F 3F
0x002d 01 01
0x002b 0A 2A 2A 7F 17 03 03 03 02 03 01
elliptic_curves unknown [0xBABA), unknown [0x1D), secp256r1 [0x17], secp384r1 [0x18]
0x8a8a 00
padding 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Ciphers:
[EAEA] Unrecognized cipher - See http://www.iana.org/assignments/tls-parameters/
[1301] Unrecognized cipher - See http://www.iana.org/assignments/tls-parameters/
[1302] Unrecognized cipher - See http://www.iana.org/assignments/tls-parameters/
[1303] Unrecognized cipher - See http://www.iana.org/assignments/tls-parameters/
[C02B] TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
[C02F] TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
[C02C] TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
[C030] TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
[CCA9] TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
[CCA8] TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
[C013] TLS1_CK_ECDHE_RSA_WITH_AES_128_CBC_SHA
[C014] TLS1_CK_ECDHE_RSA_WITH_AES_256_CBC_SHA
[009C] TLS_RSA_WITH_AES_128_GCM_SHA256
[009D] TLS_RSA_WITH_AES_256_GCM_SHA384
[002F] TLS_RSA_AES_128_SHA
[0035] TLS_RSA_AES_256_SHA
[000A] SSL_RSA_WITH_3DES_EDE_SHA

Compression:
[00] NO_COMPRESSION

HTTP/1.1 200 Connection Established
FiddlerGateway: Direct
StartTime: 15:35:45.756
Connection: close

Encrypted HTTPS traffic flows through this CONNECT tunnel. HTTPS Decryption is enabled in Fiddler, so decrypted sessions running in this tunnel will be shown in the Web Sessions list.

Secure Protocol: Tls12
Cipher: Aes256 256bits
Hash Algorithm: Sha1 160bits
Key Exchange: RsaKeyX 2048bits

== Server Certificate ==========
[Subject]
CN=*.vmm.be, OU=Domain Control Validated

[Issuer]
CN=GlobalSign Domain Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

[Serial Number]
11218F64C62C5AD713418076E1C7A5CE5107

[Not Before]
13/08/2014 13:56:56

[Not After]
13/08/2019 13:56:56

[Thumbprint]
A082E36D38C605F4A3AD695B4A3BC7BFBAE2B30C

[SubjectAltNames]
*.vmm.be, vmm.be


------------------------------------------------------------------

GET https://o-alfresco.vmm.be/alfresco/api/-default-/public/alfresco/versions/1/nodes/1370f78d-0eb0-4ddf... HTTP/1.1
Host: o-alfresco.vmm.be
Connection: keep-alive
Origin: https://o-dms.vmm.be
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36
Accept: */*
Referer: https://o-dms.vmm.be/dms/vergadersite/vgd-test-vergadersite/vergadering/be6c3e3d-58d1-4629-b838-6601...
Accept-Encoding: gzip, deflate, br
Accept-Language: nl-NL,nl;q=0.9,en-US;q=0.8,en;q=0.7


HTTP/1.1 401 Unauthorized
Server: webserver
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://o-dms.vmm.be
Vary: Origin
Set-Cookie: JSESSIONID=8332123AB07E044E4D4CEEE3702F00F2; Path=/alfresco/; HttpOnly
WWW-Authenticate: Negotiate
Content-Type: text/html;charset=UTF-8
Content-Length: 360
Date: Mon, 17 Sep 2018 13:35:45 GMT
Proxy-Support: Session-Based-Authentication

<html><head>
<meta http-equiv="Refresh" content="0; url=/alfresco/api/-default-/public/alfresco/versions/1/nodes/1370f78d-0eb0-4ddf-bfdf-69be0803eb67/renditions/pdf/content">
</head><body><p>Please <a href="/alfresco/api/-default-/public/alfresco/versions/1/nodes/1370f78d-0eb0-4ddf-bfdf-69be0803eb67/renditions/pdf/content">log in</a>.</p>
</body></html>


------------------------------------------------------------------

GET https://o-dms.vmm.be/dms/pdf.worker.js.map HTTP/1.1
Host: o-dms.vmm.be
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/68.0.3440.106 Safari/537.36
Accept-Encoding: gzip, deflate, br
Accept-Language: nl-NL,nl;q=0.9,en-US;q=0.8,en;q=0.7
Cookie: test-cookie; _ga=GA1.2.624819704.1537186634; _gid=GA1.2.734503379.1537186634; NSC_JOkg113dblfpyy1dagw1i0c22kqeodQ=ffffffffc3a0b83545525d5f4f58455e445a4a4229a0; _alfTest=_alfTest; ALFRESCO_REMEMBER_ME=1


HTTP/1.1 404 Not Found
Server: webserver
Content-Type: text/html
ntCoent-Length: 3003
Date: Mon, 17 Sep 2018 13:35:45 GMT
Set-Cookie: NSC_JOkg113dblfpyy1dagw1i0c22kqeodQ=ffffffffc3a0b83545525d5f4f58455e445a4a4229a0;expires=Tue, 18-Sep-2018 00:01:23 GMT;path=/;secure;httponly
Cache-Control: private
Content-Encoding: gzip
Content-Length: 1090

‹   V[oë6 ~?¿Bó0`;«¯±Ëâìœa/ Ö§ {gm*V+ˆ¥¤ †óßGÙqì\º¶ƒ dQäGò %jý]QçæÐ +M%7ŸÖv` Ô6sP9›OŒ­K„ÂþÐo… X^B«ÑdÎÎpwÑéÐ’ Fâæ÷û¿Ø  +ý- *ì^H»
Àh²l ñ¸ö{åÞð H©l‘gŽ_TÚ  ;_
*Ìœ½Àç¦nÃòZ TäûY ¦Ì
Ü‹ ÝnrÇ„ F€tu  ³p ’B=± eæ 2w˜M—þ+Ø¢O çèœ aÕʳ¢©e¿Z Óè•ïs
@{ÛºÞJ„Fh/¯+?×úW •‡ì~'…Ó{Óæ Q—ˆæ£x6Ž   l)«Ÿÿ ¡þ t /y¡¼‡º6Ú´Ð؉E? üØ ¼ÀF?ʼJ–¾é¨÷Ô‰z¯ŒùŸ êâp×U ûç(d¬D±-ÍŠ…AðÃ/Gé·Ï~À˜'k(°uín‚PØNL ¡  ‡ ã _ [ÖÍÜB´˜ Q«  ‚ÜUj\?zì ž¤ ÅV¹Â`¥É„
ÛÑäq§à‡.
ZºTøv ­…™ Jôº£×f «]éJr5›.\ êF¨óä'˜g¦ïÇ4øbF¼ç’‚&?ãŠ©ú™6x„´ªnÇÐ57M­é,Y¢© Àˆ=^{ÌE›ï$Lã EÇêhW ª\ iF¥‰¤% · ô tV%ÓT_÷M u œ[Œ 5`ÊI4TÐõ º hº±Z[Sá]  #ÚD¡æœî´ »Z]±ïKãtöu\˜diMYè%š!]c®Pn½3§Tïl™Ö-Ko/_ b™Ê¡±äíTq•ß—'<ð–nD=°;æj 2¥ÝmAi^·Õ° ?ÎÒ ÀíO£×o' ý8Áïò á.°ß$ö-j Œ%oB/–ïÀvgÉ-ô+Vþ/| Å×ø7xë÷{ôh ¸»M  V‘FEt“–ø5“ Hæ8¿e’¦¯š,æñð [Øà–¯¹â æSfÎÓ^û§F0é°“~qìF½Ä›Ï >OÂ<YpŒ \† iÜõ™ÍÚ   kÛKX.Aë́‚» ?m»³@—4 ;4;zE¸-u¬¡ ­ ±g¢ÈœË¾B † íja0= Ÿ« /æ‰ ©éývP n¾3 R±r‰ƒ–½(€—ÌI   ýØfND  ’èRµBg(¸þIã$'AEwD+  ™  –©ÞÁYX>Å5IƧlþ37ÛÅÎ » ϶…KÞ:ÙæOš µeö‘÷µi<Ï»t7N&kºck·¢1Çw˜…ö a ½”’oóÌiwʈ
= p–b †Ë¸ÈÓ p𠻪éõ7ïAkjy°„k/ –É’ s Ïg Ñ·€äãxýD{œ/fQ´à<š%q0 1øÇÑ*ªH¯Hè¬Åq ! ƒt <Àø Š iŁžè~ÿTÿ µ-$»

------------------------------------------------------------------

There are no js errors.

Highlighted
Alfresco Employee

Re: adf-viewer causes 401 after deploy

Have you tried same request with Postman? to check if your Tomcat is correctly configured and URL indeed works?

Highlighted
Customer

Re: adf-viewer causes 401 after deploy

Hi Denys,

I tried it now. The request works fine with Postman. I get a pdf with the content of the document.

Highlighted
Alfresco Employee

Re: adf-viewer causes 401 after deploy

it looks like your configuration issue in tomcat could you maybe try to follow this guide :

Enabling CORS in Apache 

Highlighted
Customer

Re: adf-viewer causes 401 after deploy

Hi Eugenio,

I have tried this implementation that you mention before, both globally as wel as in the webapp, I have never gotten it working with Alfresco.

I currently use the CORS implementation that is commented out in the alfresco.war\WEB-INF\web.xml . It works fine. And there is no reason that it shouldn't work with the document viewer.
Also if there are CORS error: the console messages should mention it, it doesn't. And CORS is disabled in my Internet Explorer and MS Edge, and it also fails there, this is no CORS problem.

David.

Highlighted
Customer

Re: adf-viewer causes 401 after deploy

I also tried it in Apache HTTP server, I got exactly the same error.

There is a difference between the call that causes 401 and the other calls.
CORS is active, the headers are returned (as you can see in the logs), so that is not the problem & CORS doesn't trigger 401.
But there is no Authorization header, instead a alf_ticket is added. Why is that?

David.

Highlighted
Alfresco Employee

Re: adf-viewer causes 401 after deploy

Sorry but I am not able to replicate this problem it could be maybe simple if you provide something to try

Highlighted
Customer

Re: adf-viewer causes 401 after deploy

Hi Eugenio,

I did some more tests today, I only get the error because my Alfresco server and ADF app are on different servers.

(ADF runs on the same server as the share environment - We have one server for the database Postgres, one server for the Alfresco platform environment, one server for the Share and ADF environment)

When I upload the ADF app to the Alfresco platform (back-end) server, I get no errors.

I also checked the Alfresco logs for csrf errors when the 401 error shows up, i get no such errors.

Have you tried both the Alfresco platform server and the ADF client on one server, or have you tried it on different servers?
My current ADF app is created for a customized Alfresco server, it has several Java extensions especially made for our organisation, it won't work well on a standard Alfresco setup. But I get the same errors with the ADF demo application: alfresco-ng2-components/demo-shell at master · Alfresco/alfresco-ng2-components · GitHub 

Let me know if that is enough or you need more information.

Thanks!

David.