403 errors after using AAD authentication

[He11oW-10]

Hello,
I have created an azure web app for container with phpmyadmin:latest. There were "access denied" errors once AAD authentication was enabled for the web app.

1. I checked HAR traces. The AAD authentication was completed successfully. 403 errors were from https://<web_app_name>.azurewebsites.net/index.php?route=/ though correct credentials in payload.

2. configured PMA_USER and PMA_PASSWORD. I could see the databases, but 403 errors persist.

Could you please suggest how to mitigate? Is there any debug logging we can use?
Thanks.

[williamdes]

Hi!
Can you try to disable authentication to see what really causes the 403 error?

[He11oW-10]

Hi @williamdes , thanks for your help!
The app could work correctly if I disable authentication.

[williamdes]

The app could work correctly if I disable authentication.

The Microsoft one, right ?
So there is something in their ruleset that does not work correctly ?

[abij]

Hi @He11oW-10, it bit us al well, it's directly related to phpmyadmin/phpmyadmin#17240.

[williamdes]

The 5.2 snapshot should be updated now, and the Docker version too.
See: (phpMyAdmin 5.2+snapshot) also available as a non official docker image.