Using Jira Mobile App with nginx reverse proxy

[Matthias]

Hi,

is there anybody out there who uses jira behind a nginx reverse proxy (for ssl) and uses the Jira Mobile app successfully?

I am not able to get it work.

I found article https://confluence.atlassian.com/jirakb/can-t-check-compatibility-error-in-the-jira-server-mobile-app-954244691.html with hint:

"To resolve this issue, you will need to configure your custom filter on the proxy configuration to allow <jira-base-url>/server-info to pass through without authentication."

But what do I have to do? 

Thanks for your help,
Matthias

[Krzysztof Kiser]

Looks like the issue is gone with the latest iOS app update.

[Matthias]

Thanks for the hint, you're right.

Successfully tested with Jira App Version 1.11.0.1 on iOS and Server 8.10.0.

[Matthias]

OK, has to do with Jira Software 8.9.1:

When installing Jira Software 8.5.5 on a local test system we can user mobile app as expected.

When installing Jira Software 8.9.1 mobile app shows error "Can't check compatibility".

Installation in both cases ist with pure http without proxy, just installing with .bin-Installer und creating build-in db with example project.

Ticket at atlassian is open.

[Krzysztof Kiser]

I get the same error on the latest version of Jira (8.9.1). I had a previous version (I don't remember the version exactly) and I was able to use Jira mobile app with no issues.

I moved Jira from one server to another yesterday, upgraded to 8.9.1 and the app stopped working. I keep getting "Can't check compatibility" error.

We need a way to solve this as using the mobile app is essential for some users.

Can you please keep us updated on the ticket with Atlassian?

[Matthias]

Atlassian just asked for results of

curl -I <base-url>/server-info

With 8.5.5 I got a 404-code (still app is working)

With 8.9.1 I got a 302 redirect to login-page.

I'll keep you updated.

[Matthias]

Response from Atlassian:

After some tests, I have been able to reproduce the issue you are experiencing and it seems the issue is indeed related to this specific version of Jira. I am following up on this case with our dev team to understand the root cause and will get back to you as soon as I have news.

[Krzysztof Kiser]

Thanks for keeping me in the loop. Cheers!

[Matthias]

New Answer from Atlassian:

Hello! It has been found that this problem is related to a security fix (JRASERVER-71175: Information disclosure in Login - CVE-2020-4028 (fixed in Jira Server and Data Center 8.10.0, 8.9.1, 8.11.0)). I have raised the bug report JRASERVER-71217: Jira Server mobile app cannot connect to Jira for this and our team is already working on it. While this is solved, you can apply a temporary workaround which will disable this security fix, by adding a dark feature flag  to Jira

jira.redirect.anonymous.404.errors.disabled

I already tested this, and it allows the app to connect correctly

[Matthias]

Hi all,

the same error occurs even when using jira with http without reverse proxy.

So I have no custom filteres nor a proxy.

What can I Do that jira serves the url  <jira-base-url>/server-info without authentication?

Matthias