code-server not accessible without SSL (v4.97.2)

Question

code-server not accessible without SSL (v4.97.2)

Closed this issue a month ago · 9 comments

jatcod3r commented a month ago

Is there an existing issue for this?

I have searched the existing issues

OS/Web Information

Web Browser: Firefox
Local OS: MacOS
Remote OS: Ubuntu 24.04.1 LTS (codercom/enterprise-base:ubuntu)
Remote Architecture: x86_64
code-server --version: v4.97.2

Steps to Reproduce

Install v4.97.2 of code-server
Open code-server
Page returns white screen

Expected

In the previous version (v4.96.4), code-server was accessible without SSL. Opening code-server over the browser shows the editor. Also, "/tmp/code-server.log" shows that a connection is successfully established:

coder@coder-b529651c-eeea-437b-a9b1-c195fe7a211b-7ddb5b85cd-95vqq:~$ cat /tmp/code-server.log 
[2025-02-21T07:40:30.030Z] info  code-server 4.96.4 b7ef8f9bd70cb5b342fa8ec8a0086bad676d8124
[2025-02-21T07:40:30.033Z] info  Using user-data-dir /home/coder/.local/share/code-server
[2025-02-21T07:40:30.053Z] info  Using config file /home/coder/.config/code-server/config.yaml
[2025-02-21T07:40:30.054Z] info  HTTP server listening on http://127.0.0.1:13337/
[2025-02-21T07:40:30.054Z] info    - Authentication is disabled
[2025-02-21T07:40:30.055Z] info    - Not serving HTTPS
[2025-02-21T07:40:30.055Z] info  Using proxy URI in PORTS tab: http://{{port}}--main--lime-catfish-48--admin.coder.****.****
[2025-02-21T07:40:30.056Z] info  Session server listening on /home/coder/.local/share/code-server/code-server-ipc.sock
[07:40:44] 




[07:40:44] Extension host agent started.
File not found: /tmp/code-server/lib/code-server-4.96.4/lib/vscode/node_modules/vsda/rust/web/vsda.js
File not found: /tmp/code-server/lib/code-server-4.96.4/lib/vscode/node_modules/vsda/rust/web/vsda_bg.wasm
[07:40:46] [127.0.0.1][b7e741db][ManagementConnection] New connection established.
[07:40:50] [127.0.0.1][52a2edd4][ExtensionHostConnection] New connection established.
[07:40:50] [127.0.0.1][52a2edd4][ExtensionHostConnection] <217> Launched Extension Host Process.
[07:40:56] [127.0.0.1][b7e741db][ManagementConnection] The client has disconnected gracefully, so the connection will be disposed.
[07:40:56] [127.0.0.1][52a2edd4][ExtensionHostConnection] <217> Extension Host Process exited with code: 0, signal: null.
File not found: /tmp/code-server/lib/code-server-4.96.4/lib/vscode/node_modules/vsda/rust/web/vsda_bg.wasm
File not found: /tmp/code-server/lib/code-server-4.96.4/lib/vscode/node_modules/vsda/rust/web/vsda.js
[07:40:57] [127.0.0.1][5631166c][ManagementConnection] New connection established.
[07:40:59] [127.0.0.1][7e28b3dc][ExtensionHostConnection] New connection established.
[07:40:59] [127.0.0.1][7e28b3dc][ExtensionHostConnection] <272> Launched Extension Host Process.
[07:41:10] [127.0.0.1][5631166c][ManagementConnection] The client has disconnected gracefully, so the connection will be disposed.
[07:41:10] [127.0.0.1][7e28b3dc][ExtensionHostConnection] <272> Extension Host Process exited with code: 0, signal: null

Actual

v4.97.2 doesn't load the page./tmp/code-server.log doesn't show any connection going through even though the connection to the browser seems successful via console inspection on the browser logs:

coder@coder-b529651c-eeea-437b-a9b1-c195fe7a211b-795465c99f-4g5zl:~$ cat /tmp/code-server.log 
[2025-02-21T07:43:44.630Z] info  code-server 4.97.2 34b8d2ed69811c3315a465f01492e9448c9254aa
[2025-02-21T07:43:44.634Z] info  Using user-data-dir /home/coder/.local/share/code-server
[2025-02-21T07:43:44.652Z] info  Using config file /home/coder/.config/code-server/config.yaml
[2025-02-21T07:43:44.653Z] info  HTTP server listening on http://127.0.0.1:13337/
[2025-02-21T07:43:44.653Z] info    - Authentication is disabled
[2025-02-21T07:43:44.653Z] info    - Not serving HTTPS
[2025-02-21T07:43:44.654Z] info  Using proxy URI in PORTS tab: http://{{port}}--main--lime-catfish-48--admin.coder.****.****
[2025-02-21T07:43:44.654Z] info  Session server listening on /home/coder/.local/share/code-server/code-server-ipc.sock

Logs

v4.96.4 logs

coder@coder-b529651c-eeea-437b-a9b1-c195fe7a211b-7ddb5b85cd-95vqq:~$ cat /tmp/code-server.log 
[2025-02-21T07:40:30.030Z] info  code-server 4.96.4 b7ef8f9bd70cb5b342fa8ec8a0086bad676d8124
[2025-02-21T07:40:30.033Z] info  Using user-data-dir /home/coder/.local/share/code-server
[2025-02-21T07:40:30.053Z] info  Using config file /home/coder/.config/code-server/config.yaml
[2025-02-21T07:40:30.054Z] info  HTTP server listening on http://127.0.0.1:13337/
[2025-02-21T07:40:30.054Z] info    - Authentication is disabled
[2025-02-21T07:40:30.055Z] info    - Not serving HTTPS
[2025-02-21T07:40:30.055Z] info  Using proxy URI in PORTS tab: http://{{port}}--main--lime-catfish-48--admin.coder.****.****
[2025-02-21T07:40:30.056Z] info  Session server listening on /home/coder/.local/share/code-server/code-server-ipc.sock
[07:40:44] 




[07:40:44] Extension host agent started.
File not found: /tmp/code-server/lib/code-server-4.96.4/lib/vscode/node_modules/vsda/rust/web/vsda.js
File not found: /tmp/code-server/lib/code-server-4.96.4/lib/vscode/node_modules/vsda/rust/web/vsda_bg.wasm
[07:40:46] [127.0.0.1][b7e741db][ManagementConnection] New connection established.
[07:40:50] [127.0.0.1][52a2edd4][ExtensionHostConnection] New connection established.
[07:40:50] [127.0.0.1][52a2edd4][ExtensionHostConnection] <217> Launched Extension Host Process.
[07:40:56] [127.0.0.1][b7e741db][ManagementConnection] The client has disconnected gracefully, so the connection will be disposed.
[07:40:56] [127.0.0.1][52a2edd4][ExtensionHostConnection] <217> Extension Host Process exited with code: 0, signal: null.
File not found: /tmp/code-server/lib/code-server-4.96.4/lib/vscode/node_modules/vsda/rust/web/vsda_bg.wasm
File not found: /tmp/code-server/lib/code-server-4.96.4/lib/vscode/node_modules/vsda/rust/web/vsda.js
[07:40:57] [127.0.0.1][5631166c][ManagementConnection] New connection established.
[07:40:59] [127.0.0.1][7e28b3dc][ExtensionHostConnection] New connection established.
[07:40:59] [127.0.0.1][7e28b3dc][ExtensionHostConnection] <272> Launched Extension Host Process.
[07:41:10] [127.0.0.1][5631166c][ManagementConnection] The client has disconnected gracefully, so the connection will be disposed.
[07:41:10] [127.0.0.1][7e28b3dc][ExtensionHostConnection] <272> Extension Host Process exited with code: 0, signal: null


v4.97.2 logs

coder@coder-b529651c-eeea-437b-a9b1-c195fe7a211b-795465c99f-4g5zl:~$ cat /tmp/code-server.log 
[2025-02-21T07:43:44.630Z] info  code-server 4.97.2 34b8d2ed69811c3315a465f01492e9448c9254aa
[2025-02-21T07:43:44.634Z] info  Using user-data-dir /home/coder/.local/share/code-server
[2025-02-21T07:43:44.652Z] info  Using config file /home/coder/.config/code-server/config.yaml
[2025-02-21T07:43:44.653Z] info  HTTP server listening on http://127.0.0.1:13337/
[2025-02-21T07:43:44.653Z] info    - Authentication is disabled
[2025-02-21T07:43:44.653Z] info    - Not serving HTTPS
[2025-02-21T07:43:44.654Z] info  Using proxy URI in PORTS tab: http://{{port}}--main--lime-catfish-48--admin.coder.****.****
[2025-02-21T07:43:44.654Z] info  Session server listening on /home/coder/.local/share/code-server/code-server-ipc.sock

Screenshot/Video

No response

Does this bug reproduce in native VS Code?

I did not test native VS Code

Does this bug reproduce in GitHub Codespaces?

I did not test GitHub Codespaces

Are you accessing code-server over a secure context?

I am using a secure context.

Notes

code-server is being accessed securely in the browser through the Coder platform. This isn't a big issue for me, but I'm curious if being able to access it behind HTTP (not HTTPS) is expected? I do have TLS setup already, but was confused if this is expected behavior or not since accessing this in prior versions was fine even though it's suggested to have TLS enabled.

Otherwise, if this isn't expected, do you guys think its a problem with the Coder platform?

Answer 1 · 2025-02-21T13:40:48.000Z

i got same bug too

Answer 2 · 2025-02-21T15:37:31.000Z

Same. Reverting to 4.96.4 fixed it for me.

Answer 3 · 2025-02-22T07:01:35.000Z

For localhost/127.0.0.1 HTTP is sufficient

For anything else you need TLS encryption

– #7217 (comment)

Answer 4 · 2025-02-22T07:02:05.000Z

Service workers (Using Service Workers - Web APIs | MDN) require code-server to be served via HTTPS to work properly.

Cross reference:

#5475 (comment)

Answer 5 · 2025-02-24T03:26:12.000Z

Service workers (Using Service Workers - Web APIs | MDN) require code-server to be served via HTTPS to work properly.

Cross reference:

[Bug]: Problem opening .ipynb files (Jupyter Notebook) #5475 (comment)

But why 4.96.4 doesn't require https? Is the requirement related to VSCode or code-server?

Answer 6 · 2025-02-24T05:34:53.000Z

Cross reference:

#7212 (comment)

Upstream issue:

microsoft/vscode#240334

Answer 7 · 2025-02-24T16:00:54.000Z

I access code-server via an ip address, so it can't be TLS encrypted, any solution to this besides downgrading to 4.96.4 ?

Answer 8 · 2025-02-24T16:03:57.000Z

I access code-server via an ip address, so it can't be TLS encrypted, any solution to this besides downgrading to 4.96.4 ?

@OliverwengFiltered No. Wait for the next release. This has been fixed upstream.

Cross reference:

microsoft/vscode#241690

Answer 9 · 2025-02-25T07:03:44.000Z

@jatcod3r Duplicate of #7212.

Please close.