HTTP ERROR 401 on production only

[leoplct]

Hello,
/jobs works fine on development, but I received a 401 error on production without being asked for the HTTP basic auth.
ActiveJob/Solidqueue works perfectly because I can use the alternative Solid Queue Dashboard .

I don't have other messages to debug. I use Cloudflare.

[onerinas]

Is the username password added in the credentials? Did you use this command?

bin/rails mission_control:jobs:authentication:configure

[leoplct]

Yes, it works correctly in development. In production, it doesn’t prompt for HTTP Basic Auth.

[onerinas]

Let’s see… What other possible things could be causing this? Do you have any suspects?

Do you have different credentials for production? Anything else might be interfering with this? Admin controller or anything else that might be interfering with this?

Can you try in incognito just in case previous username/password was incorrect.

Also, anything in the logs that might be helpful?

[leoplct]

If I go to /jobs using Incognito I got redirected to the login page. I don't how to debug because I don't any errors or message in console.

Production server logs

-> Filter chain halted as :authenticate_by_http_basic rendered or redirected

[error.log](https://app.cloud66.com/stacks/XXXX/live_logs#) — App 3147327 output: [35455016-a3e2-45f3-854f-ddd4a62fc4bb] Started GET "/jobs" for 78.210.14.141 at 2025-06-29 08:16:07 +0100
[error.log](https://app.cloud66.com/stacks/XXXX/live_logs#) — App 3147327 output: [35455016-a3e2-45f3-854f-ddd4a62fc4bb] Processing by MissionControl::Jobs::QueuesController#index as HTML
[error.log](https://app.cloud66.com/stacks/XXXX/live_logs#) — App 3147327 output: [35455016-a3e2-45f3-854f-ddd4a62fc4bb] Filter chain halted as :authenticate_by_http_basic rendered or redirected
[error.log](https://app.cloud66.com/stacks/XXXX/live_logs#) — App 3147327 output: [35455016-a3e2-45f3-854f-ddd4a62fc4bb] Completed 401 Unauthorized in 5ms (ActiveRecord: 1.3ms (2 queries, 0 cached) | GC: 1.3ms)
[access_json.log](https://app.cloud66.com/stacks/XXXX/live_logs#) — {"source": "nginx", "time": 1751181367.784, "resp_body_size": 0, "host": "example.com", "address": "172.71.114.81", "request_length": 3400, "method": "GET", "uri": "/jobs", "status": 401, "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36", "resp_time": 0.011, "upstream_addr": "unix:/tmp/passenger.qSAVlLN/agents.s/core", "user": "", "referer": "", "protocol": "HTTP/2.0"}

therefore it seems the problem is here, for some reason is not enabled http basic auth on prod server.

controllers/concerns/mission_control/jobs/basic_authentication.rb

def authenticate_by_http_basic
      if http_basic_authentication_enabled?
        if http_basic_authentication_configured?
          http_basic_authenticate_or_request_with(**http_basic_authentication_credentials)
        else
          head :unauthorized
        end
      end
    end

From rails console on production

(prod)> MissionControl::Jobs.http_basic_auth_enabled
=> true

Credentials are present

% RAILS_ENV=production bin/rails mission_control:jobs:authentication:configure
HTTP Basic Authentication is already configured for production. You can edit it using credentials:edit``

% VISUAL="pico --wait" RAILS_ENV=production rails credentials:edit

secret_key_base: XXXX

mission_control:
  http_basic_auth_user: dev
  http_basic_auth_password: xxxxxxx

routes.rb

mount_avo
  mount MissionControl::Jobs::Engine, at: "/jobs"
  mount SolidQueueDashboard::Engine, at: "/solid-queue"

application_controller.rb

class ApplicationController < ActionController::Base
  include Authentication

[onerinas]

A fellow cloud66 user. Nice!

If I go to /jobs using Incognito I got redirected to the login page

That's a good progress isn't it? So you are seeing the login page on incognito? When you say login page, is it the browser prompt to enter username/password (http basic auth) or your application login page?

Also, if you are seeing the login page, what happens next? Do you enter the username/password and then fails?

[leoplct]

/jobs on incognito mode redirects to my application login page. If I log in I get the same problem for which the http basic auth is not prompted.

I have run this from development

bin/rails mission_control:jobs:authentication:configure

Do I have to run something else to make it work for production?

[oclef]

add config.mission_control.jobs.http_basic_auth_enabled = false to config/environments/production.rb works for me

[tolaseadegbite]

add config.mission_control.jobs.http_basic_auth_enabled = false to config/environments/production.rb works for me

It works, thanks.

[dewey]

I ran into the same issue yesterday, just in case it helps anyone else: I first added the config.mission_control.jobs.http_basic_auth_enabled=false config option through an initializer, which didn't work. As soon as I put it in application.rb or the config/environments/production.rb it worked. I guess probably due to the order of initialization.