Skip to content

Method Not Allowed when saving config in Strapi Cloud #14

@dotcom-squad

Description

@dotcom-squad

Hello,

we installed plugin via https://market.strapi.io/plugins/strapi-plugin-imgix plugin, but settings are not being apllied and the assets URLs are not being rewritten according to the plugin config docs at https://market.strapi.io/plugins/strapi-plugin-imgix#configuration. When saving on UI, we're receiving "Bad Request" error on settings fetch:

Image
{"data":null,"error":{"status":400,"name":"BadRequestError","message":"Malicious Path"}}

And "Method Not Allowed" when saving settings:

Image

Replicating the request save on cURL, here's the payload:

curl 'https://strapi.telnyx.tech//imgix/settings' \
  -X 'PUT' \
  -H 'accept: application/json' \
  -H 'accept-language: en-US,en;q=0.9' \
  -H 'authorization: Bearer' \
  -H 'content-type: application/json' \
  -H 'origin: https://strapi.telnyx.tech' \
  -H 'referer: https://strapi.telnyx.tech/admin/settings/imgix' \
  --data-raw '{"mediaLibrarySourceUrl":"<redacted>","source":{"type":"webfolder","url":"<redacted>"}}'

Here's the response text response:

Method Not Allowed

Notice the two slashes on being passed cURL request. I believe the plugin is incorrect on that part

Notice how -H 'authorization: Bearer' doesn't have an API Key. That's what I see in the browser. It seems that no API Key is being used when I submit the request. We tried passing a generated API from our Strapi cloud settings but it didn't work. Imgix API Keys also didn't work.

We're using source: webfolder for this config. Here's our Strapi plugins.ts file content:

  'imgix': {
    enabled: true,
    config: {
        mediaLibrarySourceUrl: '<redacted>',
        apiKey: '', // no API key needed for library source
        source: { // as configured in dashboard.imgix.com
            type: 'webfolder',
            id: '<redacted>',
            url: 'https://<redacted>.imgix.net/',
        },
    },
  },

Could you help us figuring out what's happening in this plugin config?

Strapi Version: v5.16.1 Enterprise Edition
Node Version: v20.19.2

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions