Bug Fix: iDempiere 13 WebSocket ServerPush Fails Behind Reverse Proxy
The Problem If you deploy iDempiere 13 behind any reverse proxy (Nginx, Traefik, Apache, HAProxy, Kubernetes Ingress, cloud load balancers, etc.), the login page breaks silently : after entering username and password, the Role, Client, Organization, and Warehouse fields remain permanently disabled. The spinner never resolves. This affects any production deployment with a reverse proxy — which is essentially every production environment. Background: What Changed in Release 13 In iDempiere 12, the WebSocket endpoint ( ServerPushEndPoint ) was simple: it only handled ping/pong keepalive and echo notifications. All ZK AU (Asynchronous Update) requests went through normal HTTP. IDEMPIERE-3840 in release 13 introduced a major architectural change: the WebSocket now proxies ZK AU requests . When a message starts with zkau; , the endpoint parses the JSON payload and makes an internal HTTP POST to localhost targeting /zkau , then returns the servlet response over the Web...
Comentarios