403 Forbidden on Jupyter notebooks after updating from 13.0.0 to 13.0.3

crunis

Hello,

I'm using a custom installed dataiku, on debian 11, free license (with advanced features trial).

I'm getting "403 Forbbiden" when opening jupyter notebooks after updating from 13.0.0 to 13.0.3.

I've noticed that I don't get them when connecting to the Dataiku instance directly from my home network, only when doing through the home proxy (nginx) that allows external access.

I've noticed that you introduced a new permissions check in 13.0.1 ( https://doc.dataiku.com/dss/latest/security/advisories/dsa-2024-005.html ) that could be the cause for this.

My guess is that i should add something to my nginx configuration to work together with your fix, but I have no clue what it is. This is my current nginx configuration that allows websockets to work seamlessly from outside my home network:

    location / {
	proxy_pass http://192.168.2.24:10000/;
	proxy_http_version 1.1;
    	proxy_set_header Host $host;
    	proxy_set_header X-Real-IP $remote_addr;
    	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    	proxy_set_header X-Forwarded-Proto $scheme;
	# Allows websockets
	proxy_set_header Upgrade $http_upgrade;
	proxy_set_header Connection "Upgrade";
    }

Could you help ? thanks !

Operating system used: Debian 11

Turribeach

There are some sample nginx reverse proxy configuration snippets in the documentation:

https://doc.dataiku.com/dss/latest/installation/custom/reverse-proxy.html

crunis

https://community.dataiku.com/discussion/comment/44179#Comment_44179

Thanks for pointing that out, I've just tried the suggested configuration and still didn't work.

crunis

Still happens in 13.1.3 , I've noticed it only happens with reversed HTTPS connections, HTTP works fine.
Tried both Nginx and Apache2