Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Resend Verification email loop #103

Closed
0x3639 opened this issue Nov 18, 2023 · 7 comments
Closed

Resend Verification email loop #103

0x3639 opened this issue Nov 18, 2023 · 7 comments

Comments

@0x3639
Copy link

0x3639 commented Nov 18, 2023

I inserted new smtp credentials and tried to impersonate a user who was not receiving the email verification.

I was presented with this message when I tried to impersonate the user. I could not login as that user and when I clicked logout

Screenshot 2023-11-18 at 3 58 10 PM

I was presented with this page. Not sure why this is showing as insecure. I'm using caddy and https was working correctly before I tried to impersonate someone with an account that was not email verified.

Screenshot 2023-11-18 at 3 58 16 PM

I then try to manually insert https:// before the URL https://my.znn.link/logout and get this error

https://flareapp.io/share/V7jW4qo5

Is there a way to log back in as admin given the state I'm in?

@lastsamurai26
Copy link
Member

Do you using 443 between docker and caddy ?

@0x3639
Copy link
Author

0x3639 commented Nov 19, 2023

Here is my docker compose file. When using caddy and I reverse_proxy to http://localIP:8188 the site loads. When I change the reverse_proxy to https://localIP:8190 I get a 502 error.

version: "3.8"

services:

  linkstack:
    hostname: 'linkstack'
    image: 'linkstackorg/linkstack:latest'
    environment:
      TZ: 'America/Chicago'
      SERVER_ADMIN: 'remove@email.com'
      HTTP_SERVER_NAME: 'my.znn.link'
      HTTPS_SERVER_NAME: 'my.znn.link'
      LOG_LEVEL: 'info'
      PHP_MEMORY_LIMIT: '256M'
      UPLOAD_MAX_FILESIZE: '8M'
    volumes:
      - 'linkstack_data:/htdocs'
    ports:
      - '8188:80'
      - '8190:443'
    restart: unless-stopped

volumes:
  linkstack_data:

@0x3639
Copy link
Author

0x3639 commented Nov 23, 2023

I'm using Caddy on a different server. I don't think that should cause an issue.

@0x3639
Copy link
Author

0x3639 commented Nov 23, 2023

I solved the problem with this Caddyfile change below. Need to accept self signed certificates. This fixed the Submit Secure error. However, i'm still stuck impersonating another user. When I login as admin, I'm asked to authenticate my account (as the impersonated user) and when I select logout it logs me out as admin, not the person I'm trying to impersonate.

I log back in as admin and I'm still impersonating the user who is trying to authenticate their email.

How can I manually get out of impersonating another user?

yourdomain.com {
    reverse_proxy https://localhost:port {
        transport http {
            tls_insecure_skip_verify
        }
    }
}

@lastsamurai26
Copy link
Member

image
use the "X" on the right top corner (:

@0x3639
Copy link
Author

0x3639 commented Nov 23, 2023

Unfortunately I cannot login to see that page. I'm "stuck" impersonating someone who needs to verify their email address and cannot return to my admin profile. I can only see the Verify Email page or log out. I log out, then log back in and am presented with the verify email page of the person I'm impersonating.

I had to remove the volume and start over. But this could be a bug you should look into.

@lastsamurai26
Copy link
Member

can you show me your /httpdocs/.env file ?

and check the sqlite file
in the table users you can find a colum named "auth_as" check this or set it to 0

@lastsamurai26 lastsamurai26 closed this as not planned Won't fix, can't repro, duplicate, stale Jan 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants