There is 1 comment.
 
 
XWiki Platform / cid:jira-generated-image-avatar-1d3f3b58-7029-4a42-b8b0-f9dac4b6e7e7 XWIKI-23194 Open

PDF export using the headless Chrome Docker container fails when view access is restricted

 
View issue   ยท   Add comment
 

1 comment

 
cid:jira-generated-image-avatar-e99f79ee-a862-4237-b4f0-e0469489997a Marius Dumitru Florea on 12/May/25 11:22
 

Note that this issue doesn't affect you:

  • if you use the user's browser to generate the PDF (instead of the headless Chrome Docker container)
  • if the URL used to access XWiki is the same for the user's browser and the headless Chrome, i.e. if the "XWiki URI" PDF export configuration has been modified, and its value matches the URL that the user's browser is using. The reason is that the session cookie we pass to Chrome is bound to the URL that was used to create that session cookie. If the URL changes, the session cookie is not valid anymore, so authentication has to be restored from the other authentication cookies (username and password) which are IP-bound. The session cookie doesn't seem to be IP-bound from my tests
  • guest users have read access, BUT, even if the PDF export doesn't fail in this case, the generated PDF might not be complete, because the user is not authenticated when the PDF is generated