Skip to content

[Bug]: When accessing the FusionAuth Admin UI via HTTP (not HTTPS), autocompletion fails #3333

@wied03

Description

@wied03

What happened?

Steps to reproduce

  1. Setup FusionAuth on a remote host and login to the Admin UI via HTTP (not HTTPS).
  2. Add an entity type to FusionAuth under Entity Management -> Entity Types.
  3. Under Entity Management -> Entities, add 2 entities of that type (use 5 letters).
  4. Click 'Manage' on the first entity.
  5. Under 'Entity Grants', click 'Add'.
  6. In the entity text box that appears, type the first 3 letters of the 2nd entity you added in step 2.

Expected result

Auto completion is suggested

Actual result

No auto completion is suggested. The browser has the following Javascript console error.

Tracking Prevention blocked access to storage for <URL>.
Tracking Prevention blocked access to storage for <URL>.
Tracking Prevention blocked access to storage for <URL>.
Tracking Prevention blocked access to storage for <URL>.
Tracking Prevention blocked access to storage for <URL>.
Tracking Prevention blocked access to storage for <URL>.
AutoComplete.js?version=1.62.1:86  Uncaught TypeError: window.crypto.randomUUID is not a function
    at FusionAuth.UI.AutoComplete._handleCallbackCallback (AutoComplete.js?version=1.62.1:86:42)
    at FusionAuth.Admin.AJAXSearchWidget._handleSearchSuccess (AJAXSearchWidget.js?version=1.62.1:188:5)
    at FusionAuth.Admin.AJAXSearchWidget.<anonymous> (AJAXSearchWidget.js?version=1.62.1:128:16)
    at n.<anonymous> (PrimeRequest.js:480:18)
    at Prime.Widgets.InProgress.close (AdminInProgress.js?version=1.62.1:40:9)
    at n.value (PrimeRequest.js:478:25)

Version

1.62.1

Affects Versions

>= 1.62.0

Alternatives / Workarounds

Use HTTPS.

This is caused because FusionAuth 1.62.0 uses a JS function called crypto.randomUUID that is only available when targeting localhost or remote HTTPS hosts.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions