After Jupyter Update: Access Denied

[MarcRohrer]

Hi,

Rise worked beautifully in the past and it is highly useful!
But yesterday I upgraded jupyterhub (everything current) now, jupyter_rise
does not work anymode. I only get a "blank page" with access denied.
I reinstalled jupyterlab_rise, but this did not help at all.

What could be the cause of this? How can I resolve this issue or at least analyze further?

Thank you!

Marc

[JaGeo]

Same here.

[krassowski]

Do you use JupyterHub (or have someone else manage your Jupyter)? If so, which version?

[MarcRohrer]

As I already stated to use jupyterhub, you asked JaGeo, right?

[joernahlers]

Same here.

[krassowski]

Thanks both, which version though? JupyterHub 4.1.0 changed some auth behaviour to be stricter to address security vulnerabilities. Patch releases fixed a few bugs so the exact point version you are using may make a difference between this working or not. The latest is 4.1.5.

[joernahlers]

Hi, we use JupyterHub version 4.1.4.

[joernahlers]

With version 4.1.5 i got the same error.

[JaGeo]

My issue got resolved when setting everything up from scratch. Probably a version conflict in my case.

[joernahlers]

Hello, I have found a temporary workaround. I have changed my helm configuration file by adding the following content:

singleuser:
[...]
extraFiles:
server-config:
mountPath: /etc/jupyter/jupyter_server_config.json
data: {
ServerApp: {
tornado_settings: {'headers': {'Content-Security-Policy': "frame-ancestors self;"}}
}
}

[MarcRohrer]

what is the helmet configuration?
Do I own a helmet?

[joernahlers]

what is the helmet configuration? Do I own a helmet?

Sorry, i mean helm configuration.

[MarcRohrer]

sorry, haven't heard of that either.
Is this a component used?
Where is the configuration?
There's so many directories in JupyterHub, very hard to understand, how it all goes together :-(

[joernahlers]

sorry, haven't heard of that either. Is this a component used? Where is the configuration? There's so many directories in JupyterHub, very hard to understand, how it all goes together :-(

Helm is a package manager for kubernetes. I use jupyterhub on a kubernetes cluster.

[MarcRohrer]

not me. straight Ubuntu on VM.
So no workaround for me, unfortunately...

[hinz1]

On a new install of TLJH: Same here.

Refused to frame 'http://example.com/' because an ancestor violates the following Content Security Policy directive: "frame-ancestors 'none'".

[hinz1]

This solved it for me:
https://discourse.jupyter.org/t/content-security-policy-iframe-embeding-not-working-in-new-version/20194/5

Add this in your config file:

c.JupyterHub.tornado_settings = {
    "headers": {
#            "Content-Security-Policy": "frame-ancestors http://temporary1.cos.uni-heidelberg.de 'self' "
            'Content-Security-Policy': "frame-ancestors *;"
        }
}
c.Spawner.args = ['--NotebookApp.tornado_settings={"headers":{"Content-Security-Policy": "frame-ancestors *;"}}']