webui randomly stops working because API requests return 403

[d10r]

In my http://localhost:5001/webui, sometimes the Ajax API requests stop working, returning 403 Forbidden.

When trying the cURL (copied from browser dev console) in terminal, it also returned 403.
Interesting find: when removing the "Referer" header from the request, the 403 went away.
Related IRC snippet:
<rand_me> deltab: does that explain it for you?
no, but it indicates where to look
https://github.com/ipfs/go-ipfs/blob/d4938c9b0cd57c52c71ec83998a8288c3247826c/commands/http/handler.go#L350

If I restart the ipfs daemon, the issue sometimes persists and sometimes goes away. No pattern found so far.

Info about how to enable debug log in ipfs config is welcome. Maybe that would help.

[ghost]

That's CORS rejecting the request, try setting API.HTTPHeaders.

[mappum]

Info about how to enable debug log in ipfs config is welcome. Maybe that would help.

You can get the daemon to output debug info to console with ipfs daemon --debug.

[d10r]

That's CORS rejecting the request

Yes, sounds like CORS. However I wonder:

• how comes it sometimes works (always using same URLs)?
• shouldn't the dev tools console tell if it's CORS? It didn't

try setting API.HTTPHeaders.

Can you please tell me how exactly to do this? I'm new to ipfs.

[jbenet]

Not sure, but this may be part of a bug we're about to ship a fix for.

[chpio]

same problem here with the docker :release and :master tags.

[whyrusleeping]

This is generally a CORS problem, see ipfs daemon --help for more info there.