Failed to start an async CheckFileInfo request > Invalid URI or access denied to

[tony-engineering]

Describe the Bug

When I'm trying to open a docx document I get "Unauthorized WOPI host. Please try again later and report to your administrator if the issue persists." message in nextcloud, and this in collabora logs.

wsd-00001-00035 2025-03-07 13:04:52.331556 +0000 [ websrv_poll ] ERR  #30: Failed to start an async CheckFileInfo request| wsd/wopi/CheckFileInfo.cpp:159
wsd-00001-00035 2025-03-07 13:04:52.331850 +0000 [ websrv_poll ] ERR  #30: WOPI::CheckFileInfo failed for URI [https://cloud2.rougeot-ant.one/index.php/apps/richdocuments/wopi/files/106_ocl53d5n2uqw?access_token=xpHnM7P17P7XYijg9NUOl0kjn0IJAHg4&access_token_ttl=0]: 0 (Unknown) . Headers: 	Body: []| wsd/wopi/CheckFileInfo.cpp:102
wsd-00001-00035 2025-03-07 13:04:52.331869 +0000 [ websrv_poll ] ERR  #30: Invalid URI or access denied to [https://cloud2.rougeot-ant.one/index.php/apps/richdocuments/wopi/files/106_ocl53d5n2uqw?access_token=xpHnM7P17P7XYijg9NUOl0kjn0IJAHg4&access_token_ttl=0]| wsd/wopi/CheckFileInfo.cpp:120
wsd-00001-00035 2025-03-07 13:04:52.692811 +0000 [ websrv_poll ] ERR  #28: CheckFileInfo failed for [https%3A%2F%2Fcloud2.rougeot-ant.one%3A443%2Findex.php%2Fapps%2Frichdocuments%2Fwopi%2Ffiles%2F106_ocl53d5n2uqw], State::Fail| wsd/RequestVettingStation.cpp:353

I tried to tweak aliasgroups but didn't help.

Steps to Reproduce

Setup nextcloud, ingress-nginx and collabora using helm charts. Here are the values:
collabora:

replicaCount: 1

ingress:
  enabled: true
  className: "nginx"
  annotations:
    nginx.ingress.kubernetes.io/proxy-body-size: "0"
    nginx.ingress.kubernetes.io/proxy-read-timeout: "600"
    nginx.ingress.kubernetes.io/proxy-send-timeout: "600"
    nginx.ingress.kubernetes.io/upstream-hash-by: "$arg_WOPISrc"
    # block admin urls from outside
    nginx.ingress.kubernetes.io/server-snippet: |
     location /cool/getMetrics { deny all; return 403; }
     location /cool/adminws/ { deny all; return 403; }
     location /browser/dist/admin/admin.html { deny all; return 403; }

    kubernetes.digitalocean.com/certificate-id: "d454*****ba"
    nginx.ingress.kubernetes.io/ssl-redirect: "true"
  hosts:
    - host: collabora.cloud2.rougeot-ant.one
      paths:
      - path: /
        pathType: ImplementationSpecific

autoscaling:
  enabled: false

collabora:
  aliasgroups:
    - host: "collabora.cloud2.rougeot-ant.one,cloud2.rougeot-ant.one,https://cloud2.rougeot-ant.one"
  extra_params: --o:ssl.enable=false --o:ssl.termination=true
  # for production enviroment we recommend appending `extra_params` with `--o:num_prespawn_children=4`. It defines number of child processes to keep started in advance and waiting for new clients

resources:
  limits:
    cpu: "1000m"
    memory: "1000Mi"
  requests:
    cpu: "1000m"
    memory: "1000Mi"

Expected Behavior

I can open documents

Actual Behavior

I can't open document

Screenshots

Desktop

• Collabora version: Collabora Online Development Edition 24.04.12.2
• OS and version: Running in Digital Ocean Kubernetes Cluster
• Browser and version: Firefox

Smartphone

(Please complete the following information)

• Device: [e.g. iPhone 14]
• OS: [e.g. iOS 16.5]
• Browser and version: [e.g. Safari 16.4]

Additional Context