Error when loading the audit log in crowd
プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Fisheye および Crucible は除く
問題
Viewing the audit log fails with the message:
"Error when loading the audit log. See error logs for details.".
The following appears in the crowd-atlassian.log
2018-11-22 16:14:21,669 http-nio-8095-exec-6 WARN [common.security.jersey.XsrfResourceFilter] Additional XSRF checks failed for request: http://example.com/crowd/rest/admin/latest/auditlog/query , origin: https://example.com , referrer: https://example.com/crowd/console/secure/auditlog/browse.action , credentials in request: true , allowed via CORS: false
原因
The logs are reporting an XSRF (Cross Site Request Forgery) warning, which is generally logged when the request's origin does not match its target.
More information available from this documentation:
ソリューション
- Make sure you access Crowd using the exact base URL of the Crowd instance.
- If you have a reverse proxy in front of Crowd, please ensure your server.xml file contains the correct proxyName, proxyPort, and scheme parameters in your connector.