[GitHub] [incubator-superset] schoel-bis commented on issue #7364: Firefox Error while fetching Database list

[GitBox <gi...@apache.org>]

schoel-bis commented on issue #7364: Firefox Error while fetching Database list
URL: https://github.com/apache/incubator-superset/issues/7364#issuecomment-508200972
 
 
   Same here. Console says: 
   
   > Error initializing SupersetClient DOMException: "The operation is insecure."
   
   with a stack apparently pointing to a call to `SupersetClientClass::init()`. This is an excerpt from the location in the minified file the stack points to:
   
   ```javascript
   a.a.configure({protocol:window.location&&window.location.protocol||"",host:window.location&&window.location.host||"",csrfToken:O}).init().catch(function(e){console.warn("Error initializing SupersetClient",e)})
   ```
   
   The request for the CSRF token never gets sent. The site is on http (no TLS), but in chrome requests do actually get sent to http anyway, so I cannot see how it could be mixed content problem. I cannot really spot what's going wrong there; a hand-crafted copy of the request that should be used there executes just fine within the context of the page:
   
   ```javascript
   fetch(`http://myserver/superset/csrf_token/`, {
       method: 'GET',
       mode: 'same-origin',
       headers: { 'X-CSRFToken': '0' },
       credentials: 'same-origin',
       cache:'default',
       redirect: 'follow',
       body: undefined,
       signal: undefined,
     })
       .then(res => console.log(res))
       .catch(e => console.error('ERROR',e));
   ```
   
   Am I missing anything there?

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org