Not being able to login

[PouriaMzn]

I'm trying to install Budibase using docker, here is my simple compose file:

version: "3.8"

services:
  budibase:
    restart: unless-stopped
    image: budibase/budibase:latest
    container_name: budibase
    ports:
      - 172.17.0.1:8999:80
    environment:
      JWT_SECRET: ${JWT_SECRET}
      MINIO_ACCESS_KEY: ${MINIO_ACCESS_KEY}
      MINIO_SECRET_KEY: ${MINIO_SECRET_KEY}
      REDIS_PASSWORD: ${REDIS_PASSWORD}
      COUCHDB_USER: ${COUCHDB_USER}
      COUCHDB_PASSWORD: ${COUCHDB_PASSWORD}
      INTERNAL_API_KEY: ${INTERNAL_API_KEY}
    volumes:
      - budibase_data:/data

volumes:
  budibase_data:
    name: budibase_data
    driver: local
    driver_opts:
      type: none
      device: /var/www/html/Budibase/budibase_data
      o: bind

after docker compose up -d I'm able to get to the Create an admin user page and create the admin user, but after that when i try to login, i see the green login successfully message at the bottom of the page, but I'm still stuck in the login page, here is the docker compose log:

[notice] 2024-02-22T15:09:47.773753Z couchdb@127.0.0.1 <0.2650.0> c14b259b5a 127.0.0.1:5984 127.0.0.1 budibase GET /global-db/_design/database/_view/by_email2?key=%22p.mazandarani%40gmail.com%22&include_docs=true 200 ok 6
[notice] 2024-02-22T15:09:47.785335Z couchdb@127.0.0.1 <0.2651.0> 125ce7b650 127.0.0.1:5984 127.0.0.1 budibase GET /global-db/_design/database/_view/by_email2?key=%22p.mazandarani%40gmail.com%22&include_docs=true 200 ok 7
172.31.0.1 - - [22/Feb/2024:15:09:47 +0000] "POST /api/global/auth/default/login HTTP/1.1" 200 2 "https://budibase.teleport.example.com/builder/auth/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "40.40.10.1"
172.31.0.1 - - [22/Feb/2024:15:09:48 +0000] "GET /api/global/self HTTP/1.1" 403 81 "https://budibase.teleport.example.com/builder/auth/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "40.40.10.1"
172.31.0.1 - - [22/Feb/2024:15:09:48 +0000] "GET /api/global/configs/checklist?tenantId=default HTTP/1.1" 200 224 "https://budibase.teleport.example.com/builder/auth" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "40.40.10.1"
172.31.0.1 - - [22/Feb/2024:15:09:48 +0000] "GET /api/system/environment HTTP/1.1" 200 152 "https://budibase.teleport.example.com/builder/auth" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "40.40.10.1"
[notice] 2024-02-22T15:09:48.443512Z couchdb@127.0.0.1 <0.2657.0> 5ea4081bce 127.0.0.1:5984 127.0.0.1 budibase GET /global-db/config_settings 200 ok 2
[notice] 2024-02-22T15:09:48.449454Z couchdb@127.0.0.1 <0.2658.0> 99641d07c8 127.0.0.1:5984 127.0.0.1 budibase GET /global-db/config_google 404 ok 2
[notice] 2024-02-22T15:09:48.456085Z couchdb@127.0.0.1 <0.2659.0> 3918407b54 127.0.0.1:5984 127.0.0.1 budibase GET /global-db/config_google 404 ok 3
[notice] 2024-02-22T15:09:48.462311Z couchdb@127.0.0.1 <0.2660.0> 1d8bd5154d 127.0.0.1:5984 127.0.0.1 budibase GET /global-db/config_settings 200 ok 4
[notice] 2024-02-22T15:09:48.468602Z couchdb@127.0.0.1 <0.2661.0> b6cedaa0fc 127.0.0.1:5984 127.0.0.1 budibase GET /global-db/config_oidc 404 ok 2
[notice] 2024-02-22T15:09:48.478087Z couchdb@127.0.0.1 <0.2662.0> c8ef4654f6 127.0.0.1:5984 127.0.0.1 budibase GET /global-db/config_settings 200 ok 2
172.31.0.1 - - [22/Feb/2024:15:09:48 +0000] "GET /api/global/configs/public?tenantId=default HTTP/1.1" 200 316 "https://budibase.teleport.example.com/builder/auth/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "40.40.10.1"

==> /root/.pm2/logs/worker-out.log <==
{"level":"WARN","timestamp":"2024-02-22T15:09:47.867Z","service":"@budibase/worker","pid":299,"tenantId":"default","correlationId":"9ebd6b9b-c6e7-4f13-a7be-a6bb168e1583","msg":"bb-warn: Invalidating sessions for us_423fec39d4d5412ca839b787e38d0bc7 (reason: creation) - us_423fec39d4d5412ca839b787e38d0bc7/59a27255866c4b2c822764e7d63d34e2"}
{"level":"INFO","timestamp":"2024-02-22T15:09:47.890Z","service":"@budibase/worker","req":{"method":"POST","url":"/api/global/auth/default/login","correlationId":"9ebd6b9b-c6e7-4f13-a7be-a6bb168e1583"},"res":{"status":200},"responseTime":135,"msg":"request completed"}
{"level":"WARN","timestamp":"2024-02-22T15:09:48.019Z","service":"@budibase/worker","err":{"type":"ForbiddenError","message":"Unauthorized","stack":"ForbiddenError: Unauthorized\n    at Object.throw (/node_modules/koa/lib/context.js:97:11)\n    at /worker/dist/index.js:148958:14\n    at /node_modules/dd-trace/packages/datadog-instrumentations/src/koa.js:88:57\n    at /node_modules/dd-trace/packages/datadog-shimmer/src/shimmer.js:26:21\n    at dispatch (/node_modules/koa-compose/index.js:42:32)\n    at /node_modules/@koa/router/lib/router.js:368:16\n    at dispatch (/node_modules/koa-compose/index.js:42:32)\n    at /worker/dist/index.js:143984:16\n    at /node_modules/dd-trace/packages/datadog-instrumentations/src/koa.js:88:57\n    at /node_modules/dd-trace/packages/datadog-shimmer/src/shimmer.js:26:21\n    at dispatch (/node_modules/koa-compose/index.js:42:32)\n    at /node_modules/@koa/router/lib/router.js:368:16\n    at dispatch (/node_modules/koa-compose/index.js:42:32)\n    at /worker/dist/index.js:132276:14\n    at /node_modules/dd-trace/packages/datadog-instrumentations/src/koa.js:88:57\n    at /node_modules/dd-trace/packages/datadog-shimmer/src/shimmer.js:26:21","status":403,"statusCode":403,"expose":true},"pid":299,"tenantId":"default","correlationId":"61d2f739-5c93-4bf8-849f-fc117933456c","msg":""}
{"level":"INFO","timestamp":"2024-02-22T15:09:48.022Z","service":"@budibase/worker","req":{"method":"GET","url":"/api/global/self","correlationId":"61d2f739-5c93-4bf8-849f-fc117933456c"},"res":{"status":403},"responseTime":4,"msg":"request completed"}
{"level":"INFO","timestamp":"2024-02-22T15:09:48.185Z","service":"@budibase/worker","req":{"method":"GET","url":"/api/global/configs/checklist?tenantId=default","correlationId":"940d82d0-f245-49c9-9896-b59a8d565c46"},"res":{"status":200},"responseTime":3,"msg":"request completed"}
{"level":"INFO","timestamp":"2024-02-22T15:09:48.308Z","service":"@budibase/worker","req":{"method":"GET","url":"/api/system/environment","correlationId":"0f890941-0ed3-4d09-a965-9ab4838054d5"},"res":{"status":200},"responseTime":2,"msg":"request completed"}
{"level":"INFO","timestamp":"2024-02-22T15:09:48.481Z","service":"@budibase/worker","req":{"method":"GET","url":"/api/global/configs/public?tenantId=default","correlationId":"89bdf1f4-97cc-4ad9-9a0f-a69201af0d3f"},"res":{"status":200},"responseTime":44,"msg":"request completed"}
127.0.0.1 - - [22/Feb/2024:15:09:51 +0000] "GET / HTTP/1.1" 301 47 "-" "curl/7.88.1" "-"
127.0.0.1 - - [22/Feb/2024:15:09:51 +0000] "GET /builder HTTP/1.1" 200 683 "-" "curl/7.88.1" "-"
[notice] 2024-02-22T15:09:51.211109Z couchdb@127.0.0.1 <0.2734.0> 47e625a346 localhost:5984 127.0.0.1 undefined GET /_up 200 ok 1

==> /root/.pm2/logs/app-out.log <==
{"level":"INFO","timestamp":"2024-02-22T15:09:51.154Z","service":"@budibase/server","req":{"method":"GET","url":"/","correlationId":"218c8754-ce67-4941-826f-e20b694d88bd"},"res":{"status":301},"responseTime":5,"msg":"request completed"}
{"level":"INFO","timestamp":"2024-02-22T15:09:51.160Z","service":"@budibase/server","req":{"method":"GET","url":"/builder","correlationId":"abeea46e-81ad-42d0-9451-a87a26c30d59"},"res":{"status":200},"responseTime":4,"msg":"request completed"}

We use Teleport to authenticate access to all of our internal services and we don't want to expose the Budibase directly on our VPS public ip, so i use docker host ip for this container hence using - 172.17.0.1:8999:80 instead of just - 8999:80. if i remove the docker host ip everything works fine, but not if there's an ip in front of the exposed port. Also tried the same method with the docker compose file provided in the docs, but still have the same issue, the problem seems to be with the worker service, somehow, it's not able to communicate with the proxy service, here is the log i get using the second method:

bbproxy                        | 172.17.0.1 - - [22/Feb/2024:12:54:38 +0000] "POST /api/global/auth/default/login HTTP/1.1" 200 2 "https://budibase.teleport.example.com/builder/auth/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "40.40.10.1" response_time=0.268 proxy_host=worker-service:4003 upstream_addr=40.40.10.21:4003
bbworker                       | {"level":"INFO","timestamp":"2024-02-22T12:54:38.342Z","service":"@budibase/worker","req":{"method":"POST","url":"/api/global/auth/default/login","correlationId":"83b1e7c5-0c68-4ee2-88f4-b59e1f5dfeec"},"res":{"status":200},"responseTime":248,"msg":"request completed"}
bbworker                       | {"level":"WARN","timestamp":"2024-02-22T12:54:38.491Z","service":"@budibase/worker","err":{"type":"ForbiddenError","message":"Unauthorized","stack":"ForbiddenError: Unauthorized\n    at Object.throw (/app/node_modules/koa/lib/context.js:97:11)\n    at /app/dist/index.js:148958:14\n    at /app/node_modules/dd-trace/packages/datadog-instrumentations/src/koa.js:88:57\n    at /app/node_modules/dd-trace/packages/datadog-shimmer/src/shimmer.js:26:21\n    at dispatch (/app/node_modules/koa-compose/index.js:42:32)\n    at /app/node_modules/@koa/router/lib/router.js:368:16\n    at dispatch (/app/node_modules/koa-compose/index.js:42:32)\n    at /app/dist/index.js:143984:16\n    at /app/node_modules/dd-trace/packages/datadog-instrumentations/src/koa.js:88:57\n    at /app/node_modules/dd-trace/packages/datadog-shimmer/src/shimmer.js:26:21\n    at dispatch (/app/node_modules/koa-compose/index.js:42:32)\n    at /app/node_modules/@koa/router/lib/router.js:368:16\n    at dispatch (/app/node_modules/koa-compose/index.js:42:32)\n    at /app/dist/index.js:132276:14\n    at /app/node_modules/dd-trace/packages/datadog-instrumentations/src/koa.js:88:57\n    at /app/node_modules/dd-trace/packages/datadog-shimmer/src/shimmer.js:26:21","status":403,"statusCode":403,"expose":true},"pid":28,"tenantId":"default","correlationId":"6326d228-b6f1-41db-af2b-e425ac0ebfb6","msg":""}
bbproxy                        | 172.17.0.1 - - [22/Feb/2024:12:54:38 +0000] "GET /api/global/self HTTP/1.1" 403 81 "https://budibase.teleport.example.com/builder/auth/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0" "40.40.10.1" response_time=0.011 proxy_host=worker-service:4003 upstream_addr=40.40.10.21:4003
bbworker                       | {"level":"INFO","timestamp":"2024-02-22T12:54:38.493Z","service":"@budibase/worker","req":{"method":"GET","url":"/api/global/self","correlationId":"6326d228-b6f1-41db-af2b-e425ac0ebfb6"},"res":{"status":403},"responseTime":4,"msg":"request completed"}

I would appreciate any suggestion to help with the issue.

[linear[bot]]

BUDI-8040 Not being able to login

[marzzzello]

Did this issue get fixed? Seems related to #12573