Cannot log in using the default credentials

Trying to run on Ubuntu 18.04 LTS. After cloning c31dd82c31f38f0398b2699d3303b4d676201106 and modifying the docker-compose.dev.yml file to contain the following lines instead of the originals:

version: "3"
[...]
    ports:
      - 8999:3000

I am running sudo docker-compose -f docker-compose.mydev.yml up and after a while I can browse to localhost:8999

When I click “SIGN IN” button I get the sign in dialog. When I then enter the credentials admin/password I get the error that they are incorrect and I cannot log in.

[johann-petrak]

I tried this using CORS_ORIGIN_ALLOW_ALL and I was now able to log into doccano after running it with docker-compose.

However, I still do not understand how to create more users: within doccano existing users are needed, but the url http://localhost:8999/admin is not found (I used this in the docker version to create new users). It shows a screen with the message “Whoops, 404” and this screen also shows the “SIGN IN” button on the upper right even though I already was logged in in that browser session in a different tab!

I also noticed that interacting with doccano after that 404 screen was shown started to become very slow and unresponsive, not sure if this is related.

[Hironsan]

When I click “SIGN IN” button I get the sign in dialog. When I then enter the credentials admin/password I get the error that they are incorrect and I cannot log in.

This is caused by the CORS policy. When we use docker-compose.dev.yml, it mainly run two servers: frontend and backend API. When we submit username and password in the frontend, it is processed in the backend API. In other words, the two servers are communicating. At that time, the backend API restricts cross-origin HTTP requests for security reasons. In the initial settings, the backend allows only port 3000. That’s why you could not login.

If you want to use ports other than 3000, you need to add 127.0.0.1:8999 to CORS_ORIGIN_WHITELIST:

https://github.com/doccano/doccano/blob/c31dd82c31f38f0398b2699d3303b4d676201106/app/app/settings.py#L314-L318

Or, you can use CORS_ORIGIN_ALLOW_ALL=True to allow any access.

• django-cors-headers