Unable to log in to Umbraco after upgrade

Questions
1

We’re getting this error when trying to log in to an upgraded site. The site works fine on the main URL, but trying to log in at /umbraco/ returns this weird OpenID error about https (the certificate is valid):

error:invalid_request
error_description:This server only accepts HTTPS requests.
error_uri:https://documentation.openiddict.com/errors/ID2083

The site worked fine while being upgraded etc. - only now, when in Production mode it’s acting up.

Someone had a similar problem (but not the same error) where the use of the UmbracoApplicationUrl appsetting helped, but that’s been of no use here, so far.

Does anyone know what this problem is exactly?

EDIT: I can see this is kind of a duplicate of this one now, which I didn’t find initially:

Still don’t understand what’s happening, though…

Thanks :raising_hands:
/Chriztian

4

Hi Chriztian,

I had a similar setup and got it working here’s what my appsettings.json looks like for reference, maybe it helps you spot what’s different on your end:

  • UmbracoApplicationUrl set under WebRouting AND UmbracoBaseUrl under Global both pointing to the correct HTTPS URL

  • UseHttps: true explicitly set

  • BackOfficeHost set under Security if your backoffice runs on a separate subdomain

"Umbraco": {
  "CMS": {
    "WebRouting": {
      "UmbracoApplicationUrl": "https://yourdomain.com/"
    },
    "Global": {
      "UmbracoBaseUrl": "https://yourdomain.com/",
      "UseHttps": true
    },
    "Security": {
      "BackOfficeHost": "https://cms.yourdomain.com/"
    }
  }
}

Worth double-checking:

  • Are both UmbracoApplicationUrl and UmbracoBaseUrl set and pointing to the correct HTTPS URL?

  • Is UseHttps explicitly true?

  • If your backoffice is on a subdomain, is BackOfficeHost configured?

All the best

/Bishal

5

Thank you Bishal :raising_hands:

We got it working by setting UseHttps to false (of all things) - it makes no sense, given the errormessage :rofl:.

/Chriztian

6

ohhhhhhh oh

That actually makes sense in a reverse proxy setup, intresting

happy u got it fixed