Request failed with status code 403: Unauthorized.

[haris-pixleedge]

Log viewer working fine on localhost but get Unauthorized error on production although route is working but can't see the log file due to error.

I've also added the Log viewer Auth to restrict the access in AppServiceProvider:

LogViewer::auth(function ($request) { return $request->user() && in_array($request->user()->email, [ 'haris.zahid@example.com', ]); });

Here is my config/log-viewer file:

`<?php

return [

/*
|--------------------------------------------------------------------------
| Log Viewer
|--------------------------------------------------------------------------
| Log Viewer can be disabled, so it's no longer accessible via browser.
|
*/

'enabled' => env('LOG_VIEWER_ENABLED', true),

'require_auth_in_production' => true,

/*
|--------------------------------------------------------------------------
| Log Viewer Domain
|--------------------------------------------------------------------------
| You may change the domain where Log Viewer should be active.
| If the domain is empty, all domains will be valid.
|
*/

'route_domain' => null,

/*
|--------------------------------------------------------------------------
| Log Viewer Route
|--------------------------------------------------------------------------
| Log Viewer will be available under this URL.
|
*/

'route_path' => 'log-viewer',

/*
|--------------------------------------------------------------------------
| Back to system URL
|--------------------------------------------------------------------------
| When set, displays a link to easily get back to this URL.
| Set to `null` to hide this link.
|
| Optional label to display for the above URL.
|
*/

'back_to_system_url' => config('app.url', null),

'back_to_system_label' => null, // Displayed by default: "Back to {{ app.name }}"

/*
|--------------------------------------------------------------------------
| Log Viewer time zone.
|--------------------------------------------------------------------------
| The time zone in which to display the times in the UI. Defaults to
| the application's timezone defined in config/app.php.
|
*/

'timezone' => null,

/*
|--------------------------------------------------------------------------
| Log Viewer route middleware.
|--------------------------------------------------------------------------
| Optional middleware to use when loading the initial Log Viewer page.
|
*/

'middleware' => [
    'web',
    \Opcodes\LogViewer\Http\Middleware\AuthorizeLogViewer::class,
],

/*
|--------------------------------------------------------------------------
| Log Viewer API middleware.
|--------------------------------------------------------------------------
| Optional middleware to use on every API request. The same API is also
| used from within the Log Viewer user interface.
|
*/

'api_middleware' => [
    \Opcodes\LogViewer\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
    \Opcodes\LogViewer\Http\Middleware\AuthorizeLogViewer::class,
],

/*
|--------------------------------------------------------------------------
| Log Viewer Remote hosts.
|--------------------------------------------------------------------------
| Log Viewer supports viewing Laravel logs from remote hosts. They must
| be running Log Viewer as well. Below you can define the hosts you
| would like to show in this Log Viewer instance.
|
*/

'hosts' => [
    'local' => [
        'name' => ucfirst(env('APP_ENV', 'local')),
    ],

    // 'staging' => [
    //     'name' => 'Staging',
    //     'host' => 'https://staging.example.com/log-viewer',
    //     'auth' => [      // Example of HTTP Basic auth
    //         'username' => 'username',
    //         'password' => 'password',
    //     ],
    // ],
    //
    // 'production' => [
    //     'name' => 'Production',
    //     'host' => 'https://example.com/log-viewer',
    //     'auth' => [      // Example of Bearer token auth
    //         'token' => env('LOG_VIEWER_PRODUCTION_TOKEN'),
    //     ],
    //     'headers' => [
    //         'X-Foo' => 'Bar',
    //     ],
    // ],
],

/*
|--------------------------------------------------------------------------
| Include file patterns
|--------------------------------------------------------------------------
|
*/

'include_files' => [
    '*.log',
    '**/*.log',

    // You can include paths to other log types as well, such as apache, nginx, and more.
    '/var/log/httpd/*',
    '/var/log/nginx/*',

    // MacOS Apple Silicon logs
    '/opt/homebrew/var/log/nginx/*',
    '/opt/homebrew/var/log/httpd/*',
    '/opt/homebrew/var/log/php-fpm.log',
    '/opt/homebrew/var/log/postgres*log',
    '/opt/homebrew/var/log/redis*log',
    '/opt/homebrew/var/log/supervisor*log',

    // '/absolute/paths/supported',
],

/*
|--------------------------------------------------------------------------
| Exclude file patterns.
|--------------------------------------------------------------------------
| This will take precedence over included files.
|
*/

'exclude_files' => [
    // 'my_secret.log'
],

/*
|--------------------------------------------------------------------------
| Hide unknown files.
|--------------------------------------------------------------------------
| The include/exclude options above might catch files which are not
| logs supported by Log Viewer. In that case, you can hide them
| from the UI and API calls by setting this to true.
|
*/

'hide_unknown_files' => true,

/*
|--------------------------------------------------------------------------
|  Shorter stack trace filters.
|--------------------------------------------------------------------------
| Lines containing any of these strings will be excluded from the full log.
| This setting is only active when the function is enabled via the user interface.
|
*/

'shorter_stack_trace_excludes' => [
    '/vendor/symfony/',
    '/vendor/laravel/framework/',
    '/vendor/barryvdh/laravel-debugbar/',
],

/*
|--------------------------------------------------------------------------
| Cache driver
|--------------------------------------------------------------------------
| Cache driver to use for storing the log indices. Indices are used to speed up
| log navigation. Defaults to your application's default cache driver.
|
*/

'cache_driver' => env('LOG_VIEWER_CACHE_DRIVER', null),

/*
|--------------------------------------------------------------------------
| Chunk size when scanning log files lazily
|--------------------------------------------------------------------------
| The size in MB of files to scan before updating the progress bar when searching across all files.
|
*/

'lazy_scan_chunk_size_in_mb' => 50,

'strip_extracted_context' => true,

];
`

[haris-pixleedge]

[arukompas]

Hey @haris-pixleedge

From my experience this is most likely to do with "stateful domains". By default, it will only allow access from the domain (or subdomain) defined in the APP_URL environment variable. Keep in mind that www.example.com and example.com are considered different.

Here's what you should do:

1. Update Log Viewer to v3.7.0 (or later)
2. Add a new environment variable which contains comma-separated list of domains or subdomains where your app is accessible from, e.g.:

LOG_VIEWER_API_STATEFUL_DOMAINS=example.com,www.example.com

OR, just update your APP_URL to the correct domain that you're accessing the app from.

Let me know how it goes!

[artem-dev2]

I sorted that out, the problem came from middlawares those two in config:

        //Opcodes\LogViewer\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
        //Opcodes\LogViewer\Http\Middleware\AuthorizeLogViewer::class,

not sure for what are they, but just commended out and now it works fine.

[arukompas]

@artem-dev2 Right, but now your Log Viewer is probably not protected and accessible by anyone.

Make sure you define an auth callback in production. Locally it should be fine, of course.

[haris-pixleedge]

@arukompas How to update Log Viewer to v3.7.0?

[arukompas]

@haris-pixleedge just this command:

composer update opcodes/log-viewer

[mhd-fettah]

updating "APP_URL" was the issue . for me .
thanks lots.

[jjpergui]

Hey @arukompas

I had a similar problem with Laravel 10 / PHP 8.2. I kept getting error 500 while loading the index page:

I had to disable \Opcodes\LogViewer\Http\Middleware\EnsureFrontendRequestsAreStateful::class, in the log-viewer.php file to get it to work.

These are the traces of the 500 error:

After deactivating that middleware, everything worked fine.

Thanks for your great job. Next step is makint it multi-language!

Jordi

[dhaliscak]

I had a same problem, I was able to open /log-viewer, but giving me 403. I fixed it partially.

I have updated my log-viewer package, but my config/log-viewer.php contained just a few atributes: route_path, middleware, include_files. Nothing else. So I copied config from vendor/opcodesio/log-viewer/config/, and updated atributes above to match my website.

I had to remove AuthorizeLogViewer, if it is there, I am still getting 403. So I replaced it with auth, role:Admin. Now I am able to access the page, but in that logs list on left it is still 403. So it is failing now on API.

'middleware' => [
            'web',
            'auth',
            'role:Admin',
            // \Opcodes\LogViewer\Http\Middleware\AuthorizeLogViewer::class,
    ],

If I comment out AuthorizeLogViewer also there, it is working fine, but if I open API url in incognito, I can see JSON data:

'api_middleware' => [
        \Opcodes\LogViewer\Http\Middleware\EnsureFrontendRequestsAreStateful::class,
        // \Opcodes\LogViewer\Http\Middleware\AuthorizeLogViewer::class,
    ],

My .env:

APP_URL=https://example.com
LOG_VIEWER_API_STATEFUL_DOMAINS=example.com,www.example.com

Logs are accesible from https://example.com/log-viewer, nothing crazy, no subdomains.

I understand that logs are not protected now, but I cannot figure out how to make it work. 😵

Installed Version: v3.12.0

[martinpl]

For me issue was that $request->user() wasn't available in API route,
Adding those middlewares to api_middleware fixed that:

\Illuminate\Cookie\Middleware\EncryptCookies::class,
\Illuminate\Session\Middleware\StartSession::class,