Use frpc got error ​`Error: Forbidden resource` when used cloud service about affine

[EYHN]

affine desktop client currently does not support selfhost.

Do you mean web?

[aliuq]

@EYHN Hello, it's not desktop, it's a self-host. I deployed Affine on Synology, and then penetrated to the external network through the Frp internal network. When accessing the external network to query cloud and other services through /graphql, an error was thrown Forbidden resource

Forbidden resurce is from

AFFiNE/packages/frontend/workspace-impl/src/cloud/list.ts

Lines 29 to 50 in 931c29f

	async function getCloudWorkspaceList() {
	const session = await getSession();
	if (!session) {
	return [];
	}
	try {
	const { workspaces } = await fetcher({
	query: getWorkspacesQuery,
	});
	const ids = workspaces.map(({ id }) => id);
	return ids.map(id => ({
	id,
	flavour: WorkspaceFlavour.AFFINE_CLOUD,
	}));
	} catch (err) {
	if (err instanceof Array && err[0]?.message === 'Forbidden resource') {
	// user not logged in
	return [];
	}
	throw err;
	}
	}

[EYHN]

@aliuq Will it work fine without frp?

[aliuq]

@EYHN yeah, if running on localhost, its work

[EYHN]

According to the error message, it seems that you are not logged in.

Please check whether the cookie can be correctly passed to the backend server.

[aliuq]

@EYHN Frp just forwards the request. I don’t know if ngrok and cloudflare tunnel will produce the same error.

[vitekburda]

For me it does the same with nginx - but only if I add auth_basic
(if I run it without auth_basic, all works fine)

I assume it relates to NestJS Guards?

[vitekburda]

btw the solution for nginx is as follows:

proxy_set_header Authorization "";

🤦

[aliuq]

This issue seems to be resolved in the latest version, closed