Error when download url is in a s3 bucket

KylianBrun · 18 January 2023 16:11

Hello !

I’m looking for a solution like OnlyOffice for a client.
So I’m actually trying OnlyOffice, that’s my favorite but I have an annoying error.

I’m running with Document Server in docker.
And the web application is made with React/NextJS, when I want to open a file, I have the following error : Download failed.

When I go on the server logs, I have :
nodeJS - error downloadFile:url=https://***/test.docx;attempt=3;code:undefined;connect:undefined Error: Error response: statusCode:400; headers:{“x-amz-request-id”:"",“x-amz-id-2”:"",“content-type”:“application/xml”,“transfer-encoding”:“chunked”,“date”:“Wed, 18 Jan 2023 16:06:21 GMT”,“server”:“AmazonS3”,“connection”:“close”};

The file is open access with my s3 bucket, the CORS config is * and I tried to download the file with curl within the docker container and its working.

I really don’t understand why I get this error, can someone help me ?

Thanks.

Alexandre · 20 January 2023 07:20

Hello @KylianBrun
Do I understand it right that there’s no any authentication on the storage (s3) side? It’s important thing so Document server could be able to take a file. You can run a simple test, copy\paste url to the file to your browser tab. If you are able to download the file, most likely Document server can do it too.
Also please check mutual availability between servers with wget\telnet commands. If it doesn’t help, please reproduce the issue and provide us with whole Document server logs folder (by the way, please let us know your Document server version).

KylianBrun · 20 January 2023 14:41

Hello @Alexandre !

Thanks for you reply !

Yes, the authentication is disabled for this bucket/item.
I tried to wget the file with the same link inside the VM and it’s working.
I also tried to wget the file inside the docker container and it’s working too.

This is the full error, I have this error each time I try to open the editor

This is on version : 7.2.2.56

Alexandre · 23 January 2023 08:23

I’ve taken url to the file from your log and pasted it to browser. File is available. Are there any error entries in out.log file of docservice folder?
Also please reproduce the issue with open browser console (F12 in Google Chrome). Please check ‘Console’ and ‘Network’ tabs > make screenshots of any error entries.

isaza00 · 13 February 2023 15:47

I’m having the exactly same issue with version 7.3, did you finally know how to solve this issue?

Alexandre · 15 February 2023 07:37

Hello @isaza00
Unfortunately, topic starter didn’t come back with new information, so investigation was stopped.
As for your situation, please provide us with details:

Document server version, guide which you used for installation process.
Do you integrate Document server with your own self-written storage or ready-to-go one (such as Nextcloud, ownCloud, Seafile, etc.)?
Please reproduce the situation and provide us with exact issue scenario (if it’s possible, please make screenshots)
When the issue is reproduced, please provide us with Document server logs folder.

Also please run a test. Please try to disable JWT on the Document Server’s side or try to change the header.

Open /etc/onlyoffice/documentserver/local.json

Find the following section:

 "inbox": {
   "header": "Authorization",
   "inBody": false
 },
 "outbox": {
   "header": "Authorization",
   "inBody": false
 }

},

Change the header values, so the section looks like this:

 "inbox": {
   "header": "AuthorizationJwt",
   "inBody": false
 },
 "outbox": {
   "header": "AuthorizationJwt",
   "inBody": false
 }

},

Close and save the config, restart all Document Server services with supervisorctl restart all;
Try once again to open the file.

KylianBrun · 23 February 2023 14:57

Hello @Alexandre !

Sorry, I wasn’t available for this project recently.

I think you’re right and this is a JWT problem. I made network logging and the Document Server send JWT/Auth headers to AWS that AWS refuse.

How can I disable JWT ? The document server is in a docker container on my machine and I can’t access to /etc/onlyoffice/documentserver/local.json file.

Thanks for you help !

Alexandre · 24 February 2023 10:30

You can go inside the container with docker exec -it ID_of_container bash command > nano /etc/onlyoffice/documentserver/local.json
You can check ID of container with docker ps command.

KylianBrun · 24 February 2023 10:45

I just solve my problem this morning.

For @isaza00 and maybe others, when you use the docker container of OnlyOffice, by default JWT token is enabled for incoming and outcoming requests.
You cannot disable only for outcoming requests but you can’t have an Authorization header when requesting AWS S3 file because it will be rejected.

So I needed to clone the Docker-DocumentServer of OnlyOffice and modify the run-document-server.sh file (and build the docker image)

There is my changes :

Thanks you for your help @Alexandre !

Alexandre · 27 February 2023 07:11

Hello @KylianBrun
We’re glad that you managed the situation.
By the way, I believe there’s the simplest way to disable JWT on Document server side. The necessary settings are located inside the container here: /etc/onlyoffice/documentserver/local.json
If you change anything in local.json file, you have to run supervisorctl restart all command to accept changes.