Uploading Media Error/Failure about fxoss

[jgmize]

I was able to trace down the error to the fact that the media uploader uses flash, which does not support basic http auth. When I temporarily disabled the basic auth, I was able to upload a file to the dev server in the test directory without issues.

[bensternthal]

Ah shit!

[bensternthal]

Now that I am done swearing.

What are our options here?

[jgmize]

1. disable basic auth in nginx and only use django authentication for the site.
2. disable the flash uploader and upload the files using another method.

[jgmize]

Removed basic auth config from nginx on dev and prod environments after pushing latest master which includes the login_required homepage.

Performed the following from the python shell on dev:

Page.objects.update(login_required=True)

Prod does not have any Page objects yet.

[mlavin]

I was able to resolve this locally (running Nginx in front runserver) by disabling Basic Auth for only /admin/media-library/. This is part of the admin so it still requires the user is authenticated as a staff member. Here is the relevant part of the server block:

upstream fxoss {
    server 127.0.0.1:8000;
}

server {
...
    auth_basic "Restricted";
    auth_basic_user_file /home/mlavin/Projects/fxoss/users;

    location / {
        proxy_redirect      off;
        proxy_set_header    Host                    $host;
        proxy_set_header    X-Real-IP               $remote_addr;
        proxy_set_header    X-Forwarded-For         $proxy_add_x_forwarded_for;
        proxy_set_header    X-Forwarded-Protocol    $scheme;
        proxy_pass          http://fxoss;

        location ~* /admin/media-library/ {
            auth_basic off;
            proxy_pass http://fxoss;
        }
    }
...
}

[mlavin]

There were some comments that Uploadify works with Basic Auth in Chrome but I couldn't reproduce it with Chromium 32 on Ubuntu 12.04.

[daaray]

This solve will allow for full auth/unauth QA on staging; great job! 🍬

[mlavin]

This has been resolved on dev and prod using a version of this change.