-
Notifications
You must be signed in to change notification settings - Fork 1
Description
Hello,
we installed plugin via https://market.strapi.io/plugins/strapi-plugin-imgix plugin, but settings are not being apllied and the assets URLs are not being rewritten according to the plugin config docs at https://market.strapi.io/plugins/strapi-plugin-imgix#configuration. When saving on UI, we're receiving "Bad Request" error on settings fetch:
{"data":null,"error":{"status":400,"name":"BadRequestError","message":"Malicious Path"}}And "Method Not Allowed" when saving settings:
Replicating the request save on cURL, here's the payload:
curl 'https://strapi.telnyx.tech//imgix/settings' \
-X 'PUT' \
-H 'accept: application/json' \
-H 'accept-language: en-US,en;q=0.9' \
-H 'authorization: Bearer' \
-H 'content-type: application/json' \
-H 'origin: https://strapi.telnyx.tech' \
-H 'referer: https://strapi.telnyx.tech/admin/settings/imgix' \
--data-raw '{"mediaLibrarySourceUrl":"<redacted>","source":{"type":"webfolder","url":"<redacted>"}}'Here's the response text response:
Method Not AllowedNotice the two slashes on being passed cURL request. I believe the plugin is incorrect on that part
Notice how -H 'authorization: Bearer' doesn't have an API Key. That's what I see in the browser. It seems that no API Key is being used when I submit the request. We tried passing a generated API from our Strapi cloud settings but it didn't work. Imgix API Keys also didn't work.
We're using source: webfolder for this config. Here's our Strapi plugins.ts file content:
'imgix': {
enabled: true,
config: {
mediaLibrarySourceUrl: '<redacted>',
apiKey: '', // no API key needed for library source
source: { // as configured in dashboard.imgix.com
type: 'webfolder',
id: '<redacted>',
url: 'https://<redacted>.imgix.net/',
},
},
},Could you help us figuring out what's happening in this plugin config?
Strapi Version: v5.16.1 Enterprise Edition
Node Version: v20.19.2