CORS FAiled Warning in Jira

Deepak Mammen

Receiving below Warning in Jira

 

2020-07-02 04:29:28,641 http-nio-8080-exec-10 WARN  /rest/webResources/1.0/resources [c.a.p.r.c.security.jersey.XsrfResourceFilter] Additional XSRF checks failed for request: https://jira.junipercloud.net/it/rest/webResources/1.0/resources , origin: http://jira.junipercloud.net , referrer: http://jira.junipercloud.net/it/secure/Dashboard.jspa , credentials in request: false , allowed via CORS: false

 

Base Url is https://ira.junipercloud.net/it/

 

Why did XSRF checks fail?

What changes needs to be done to fix this?

 

Italo Qualisoni [e-Core]

In the logs you can see that the request is using https but the origin is on http

 

This looks like a miss configuration in your server.xml file.

 

Have you perform some recent upgrade? I'm asking because server.xml file is usually overwritten during the upgrade process.

If you are running behind a proxy, can you check if the Connector attribute under your server.xml contains the below attributes:

proxyName="jira.junipercloud.net" proxyPort="443" scheme="https" secure="true"

 

See below a Confluence KB that describe the same issue:

https://confluence.atlassian.com/confkb/after-upgrading-confluence-you-are-unable-to-create-new-pages-or-spaces-785457379.html