Confluence and Nginx are separated servers, Companion App is not working.

[Kohei Nishikawa]

No.1 : Confluence Server 6.13.0

No.2 : Confluence Server 6.14.1

I attempted to edit an attached file, but the application does not start with "Companion App". It is the environment No.2 in the above image.

After checking the "Companion app log" and comparing the log of No.1, it turned out that the processing beginning with [{"namespace": "adc: file - manager"] was not executed.

No.1 
Companion App log : I changed domain for questions.

{"namespace":"adc:websocket","date":"2019-03-06T09:23:53.553Z","message":["new client connection"]},
{"namespace":"adc:websocket","date":"2019-03-06T09:23:53.562Z","message":["received message:","{\"type\":\"authentication\",\"payload\":{\"provider\":\"server\",\"payload\":{\"siteTitle\":\"研究Wiki\"}},\"requestID\":1}"]},
{"namespace":"adc:serverauth","date":"2019-03-06T09:23:53.566Z","message":["Found trusted domain in database:","wiki.example.test"]},
{"namespace":"adc:websocket","date":"2019-03-06T09:23:53.582Z","message":["received message:","{\"type\":\"new-transaction\",\"payload\":{\"transactionType\":\"file\"},\"requestID\":2}"]},
{"namespace":"adc:websocket","date":"2019-03-06T09:23:53.590Z","message":["received message:","{\"transactionID\":\"c026e126-3596-4380-b4dc-28b6c8bc9230\",\"type\":\"list-apps\",\"payload\":{\"extension\":\"docx\"},\"requestID\":3}"]},
{"namespace":"adc:websocket","date":"2019-03-06T09:23:53.596Z","message":["received transaction message for:","c026e126-3596-4380-b4dc-28b6c8bc9230"]},
{"namespace":"adc:transaction:c026e126-3596-4380-b4dc-28b6c8bc9230","date":"2019-03-06T09:23:53.602Z","message":["handling apps list request",{"extension":"docx"}]},
{"namespace":"adc:websocket","date":"2019-03-06T09:23:54.573Z","message":["received message:","{\"transactionID\":\"c026e126-3596-4380-b4dc-28b6c8bc9230\",\"type\":\"launch-file-in-app\",\"payload\":{\"fileURL\":\"https://wiki.example.test/confluence/download/attachments/4554777/praivacy-policy-sample.docx?version=2&modificationDate=1551859710733&api=v2&download=true&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJqd3Quc3ViamVjdC5jb25mbHVlbmNlLXByZXZpZXdzLnRlbXBsaW5rc3Jlc291cmNlIiwicXNoIjoiYWJkYTM2NzcxODZjZDVjOTQ4OWY2MTBlYjVhOTg4MGUwYTJmNGE4YWJmNGZiNjc5N2FiN2M1OGMwNmY4MWVhOCIsImlzcyI6ImNvbS5hdGxhc3NpYW4uY29uZmx1ZW5jZS5wbHVnaW5zLnByZXZpZXdzIiwiZXhwIjoxNTUxODY0Mjk2LCJpYXQiOjE1NTE4NjQyMzYsInVzZXJLZXkiOiIyYzlhODU4ODY3NzlmOTMzMDE2Nzc5ZmNkZWJmMDAwMiJ9.8F6hNO9iZbKPEJVgkaxxT9r6M-CzuJvy0NGRWfAA1TM\",\"applicationID\":\"1e8deda4dfa51a85684f43b79e2f89a9\",\"fileName\":\"praivacy-policy-sample.docx\",\"submitChangesURL\":\"\",\"autoUpload\":false},\"requestID\":4}"]},
{"namespace":"adc:websocket","date":"2019-03-06T09:23:54.579Z","message":["received transaction message for:","c026e126-3596-4380-b4dc-28b6c8bc9230"]},
{"namespace":"adc:transaction:c026e126-3596-4380-b4dc-28b6c8bc9230","date":"2019-03-06T09:23:54.584Z","message":["handling file launch request",{"fileURL":"https://wiki.example.test/confluence/download/attachments/4554777/praivacy-policy-sample.docx?version=2&modificationDate=1551859710733&api=v2&download=true&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJqd3Quc3ViamVjdC5jb25mbHVlbmNlLXByZXZpZXdzLnRlbXBsaW5rc3Jlc291cmNlIiwicXNoIjoiYWJkYTM2NzcxODZjZDVjOTQ4OWY2MTBlYjVhOTg4MGUwYTJmNGE4YWJmNGZiNjc5N2FiN2M1OGMwNmY4MWVhOCIsImlzcyI6ImNvbS5hdGxhc3NpYW4uY29uZmx1ZW5jZS5wbHVnaW5zLnByZXZpZXdzIiwiZXhwIjoxNTUxODY0Mjk2LCJpYXQiOjE1NTE4NjQyMzYsInVzZXJLZXkiOiIyYzlhODU4ODY3NzlmOTMzMDE2Nzc5ZmNkZWJmMDAwMiJ9.8F6hNO9iZbKPEJVgkaxxT9r6M-CzuJvy0NGRWfAA1TM","applicationID":"1e8deda4dfa51a85684f43b79e2f89a9","fileName":"praivacy-policy-sample.docx","submitChangesURL":"","autoUpload":false}]},
{"namespace":"adc:file-manager","date":"2019-03-06T09:23:54.701Z","message":["download length set at ",13552]},
{"namespace":"adc:analytics","date":"2019-03-06T09:23:54.717Z","message":["event","companion.openWith.request",{"appName":"Word","fileAttributes":{"fileSize":13552}},"b351c82e-4239-4313-a5a9-74aa698bbacd"]},
{"namespace":"adc:file-manager","date":"2019-03-06T09:23:54.736Z","message":["telling the OS to launch file:","C:\\Users\\user1\\.atlassian-companion\\9cdb542c-14c5-4ce0-9541-382c7d780cd6\\praivacy-policy-sample.docx"]},
{"namespace":"adc:file-manager","date":"2019-03-06T09:23:56.476Z","message":["Change reported, checking murmur for file:","9cdb542c-14c5-4ce0-9541-382c7d780cd6","Testing:","21ea71f5cacfb030dfca132ee11ea925"," vs ","21ea71f5cacfb030dfca132ee11ea925"]},
{"namespace":"adc:file-manager","date":"2019-03-06T09:23:56.496Z","message":["Murmur resulted in no-change, checking SHA fallback, Testing:","iPswUDFzHXsL3qAnfFISj9o9nLo=","vs ","iPswUDFzHXsL3qAnfFISj9o9nLo="]},
{"namespace":"adc:file-manager","date":"2019-03-06T09:23:56.502Z","message":["ignoring change"]}

No.2 (Companion app not work)
Companion App log : I changed domain for questions.

{"namespace":"adc:websocket","date":"2019-03-06T07:58:08.329Z","message":["new client connection"]},
{"namespace":"adc:websocket","date":"2019-03-06T07:58:08.346Z","message":["received message:","{\"type\":\"authentication\",\"payload\":{\"provider\":\"server\",\"payload\":{\"siteTitle\":\"Sales Demo Confluence 基本\"}},\"requestID\":1}"]},
{"namespace":"adc:serverauth","date":"2019-03-06T07:58:08.351Z","message":["Found trusted domain in database:","mkt.xxxdev.jp"]},
{"namespace":"adc:websocket","date":"2019-03-06T07:58:08.380Z","message":["received message:","{\"type\":\"new-transaction\",\"payload\":{\"transactionType\":\"file\"},\"requestID\":2}"]},
{"namespace":"adc:websocket","date":"2019-03-06T07:58:08.408Z","message":["received message:","{\"transactionID\":\"10e89ff0-9666-4246-a1da-ee45c494f3c6\",\"type\":\"list-apps\",\"payload\":{\"extension\":\"docx\"},\"requestID\":3}"]},
{"namespace":"adc:websocket","date":"2019-03-06T07:58:08.411Z","message":["received transaction message for:","10e89ff0-9666-4246-a1da-ee45c494f3c6"]},
{"namespace":"adc:transaction:10e89ff0-9666-4246-a1da-ee45c494f3c6","date":"2019-03-06T07:58:08.415Z","message":["handling apps list request",{"extension":"docx"}]},
{"namespace":"adc:websocket","date":"2019-03-06T07:58:09.613Z","message":["received message:","{\"transactionID\":\"10e89ff0-9666-4246-a1da-ee45c494f3c6\",\"type\":\"launch-file-in-app\",\"payload\":{\"fileURL\":\"https://mkt.xxxdev.jp/wiki2/download/attachments/5898291/%E3%82%B5%E3%83%B3%E3%83%95%E3%82%9A%E3%83%AB-WORD.docx?version=3&modificationDate=1511155525463&api=v2&download=true&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJqd3Quc3ViamVjdC5jb25mbHVlbmNlLXByZXZpZXdzLnRlbXBsaW5rc3Jlc291cmNlIiwicXNoIjoiZWE0NGNhOTYzYzliMGZkZTBjZTNiNjMzMmI4NjA4OTVlMWUyYmUwNzJiNzIwNjhjMTRkNGVmYjJjZTQ0N2YyZCIsImlzcyI6ImNvbS5hdGxhc3NpYW4uY29uZmx1ZW5jZS5wbHVnaW5zLnByZXZpZXdzIiwiZXhwIjoxNTUxODU5MTUxLCJpYXQiOjE1NTE4NTkwOTEsInVzZXJLZXkiOiIyYzlmODIyYzYyODRiMGQxMDE2Mjg1NmQ0OWJkMDAwMCJ9.esI-mWYfesntzzxUZYHRm3nnO-PDHsvnePJ5N0CE5Nw\",\"applicationID\":\"1e8deda4dfa51a85684f43b79e2f89a9\",\"fileName\":\"sample-WORD.docx\",\"submitChangesURL\":\"\",\"autoUpload\":false},\"requestID\":4}"]},
{"namespace":"adc:websocket","date":"2019-03-06T07:58:09.617Z","message":["received transaction message for:","10e89ff0-9666-4246-a1da-ee45c494f3c6"]},
{"namespace":"adc:transaction:10e89ff0-9666-4246-a1da-ee45c494f3c6","date":"2019-03-06T07:58:09.619Z","message":["handling file launch request",{"fileURL":"https://mkt.xxxdev.jp/wiki2/download/attachments/5898291/%E3%82%B5%E3%83%B3%E3%83%95%E3%82%9A%E3%83%AB-WORD.docx?version=3&modificationDate=1511155525463&api=v2&download=true&jwt=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJqd3Quc3ViamVjdC5jb25mbHVlbmNlLXByZXZpZXdzLnRlbXBsaW5rc3Jlc291cmNlIiwicXNoIjoiZWE0NGNhOTYzYzliMGZkZTBjZTNiNjMzMmI4NjA4OTVlMWUyYmUwNzJiNzIwNjhjMTRkNGVmYjJjZTQ0N2YyZCIsImlzcyI6ImNvbS5hdGxhc3NpYW4uY29uZmx1ZW5jZS5wbHVnaW5zLnByZXZpZXdzIiwiZXhwIjoxNTUxODU5MTUxLCJpYXQiOjE1NTE4NTkwOTEsInVzZXJLZXkiOiIyYzlmODIyYzYyODRiMGQxMDE2Mjg1NmQ0OWJkMDAwMCJ9.esI-mWYfesntzzxUZYHRm3nnO-PDHsvnePJ5N0CE5Nw","applicationID":"1e8deda4dfa51a85684f43b79e2f89a9","fileName":"sample-WORD.docx","submitChangesURL":"","autoUpload":false}]}

Do you have any ideas ?
Best regards,

[Diego · Accepted solution]

Hello there! Thanks for reaching to the Community.

As I understand, the Companion App does not run when Confluence is behind NGINX with Crowd SSO and a client certificate is that correct?

Since these two environments are quite different, we might need to try and copy the working one and adapt it so it can have the final intended setup.

1. Are you able to replicate your working environment and implement SSO on it?
2. What happens if you try to set your proxy in another server in your working environment?
3. Has this worked at some point in the past?
4. Would it be possible for you to setup a copy of your working environment and perform tests on it?
5. Is the working environment your production one?

The initial idea is as follows:

• Create a copy of your working environment
• Check if everything works in your copy
• Move the NGINX proxy to another server
• Check if everything is still working
• Implement SSO
• Check if everything is working again
• Upgrade Confluence to 6.14.1
• Check if everything is working once more

Also, you may want to take a look into our documentation about this:

Cloud Server 6.14 Administering the Atlassian Companion App - Proxy and SSL considerations

Running Confluence behind NGINX with SSL

Let us know about your results and answers Kohei! Looking forward to your reply.

[Akira Higuchi]

Hi, Diego

My name is Akira Higuchi, I'm working with Kohei. Thank you for your support and helpful information.
For security reason, Our nginx is checking the verification of the client certificate with a ssl_verify_client option. The client certificate is working well with the web browser, but not well with Atlassian Companion App. We had confirmed that office application started after disabling ssl_verify_client option. I will check about the suggestion in JAC. If I can't find it, I will raise an issue since ssl_verify_client is very important for us.