Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

'CRJZS0035E The OAuth signature is not valid' as error when using a reverse proxy

Questions
Tags
Users
Badges
SEC Servizi
(971●2●38●60) edited
Apr 23 '15, 4:14 a.m.
We are on RTC v4.07 and running on the default Apache Tomcat and we got this error: 
CRJZS0035E The OAuth signature is not valid. An application might be configured incorrectly or the consumer secret might be mismatched.
when using a reverse proxy to forward network traffic from clients to CLM application servers.
Our topology is similar to that is discussed in the article https://jazz.net/wiki/bin/view/Deployment/UnderstandingReverseProxy:
topology_RTC_proxy.png
Our reverse proxy listens on port 80 (HTTP) and 443 (HTTPS) and forwards the incoming traffic both to the application server port 9080 (HTTP).
We found the OAuth signature error above due to an incorrect URI construction by Jazz: 
https://clm.example.org/jts/proxy?uri=http://clm.example.org/jts/discovery?type=http%253A%252F%252Fjazz.net%252Fns%252Fui%2523HomeMenu%26scope=includeExternal
It seems the proxy URI param does not preserve the initial protocol used by client (i.e., HTTPS instead of HTTP).
Do we have to maintain the protocol matching when forwarding from reverse proxy to application sever?
Thanks in advance.

0 votes

1 answer
6,104 views
0 votes

One answer

Permanent link
Donald Nong
(14.5k●6●14) Apr 10 '15, 3:33 a.m.
It's not a good idea to open both port 80 and 443 on the reverse proxy, as users can access CLM via the URL http://clm.example.org which is _not_ the public URI.

1 vote

Comments
SEC Servizi
Apr 10 '15, 5:23 a.m.

You're right, we fixed that.

Anyway, in this scenario it seems the initial protocol used by client is not preserve on some URI request.

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Ask a question
Guidelines
FAQ
Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details
× 35

Question asked: Apr 09 '15, 6:04 a.m.

Question was seen: 6,104 times

Last updated: Apr 23 '15, 4:14 a.m.

Confirmation Cancel Confirm