iOS/Android App HTTP Forbidden

Installation Issues
6

Hey Eric.

With JWT auth enabled you should be able to hit the two endpoints
GET /auth/jwt/rsa.json
POST /auth/jwt/login.json

rsa.jsonexample response:

{
  "header": {
    "id": "c4a59349-fade-4e4d-ab0e-c56e7d217186",
    "status": "success",
    "servertime": 1755584001,
    "action": "2a80ca92-0e47-5780-b338-3568f3cff69e",
    "message": "The operation was successful.",
    "url": "/auth/jwt/rsa.json",
    "code": 200
  },
  "body": {
    "keydata": "-----BEGIN PUBLIC KEY<snip>\n"
  }
}

The plugin is enabled by default (unless you disabled it):

PASSBOLT_PLUGINS_JWT_AUTHENTICATION_ENABLED=true

Fix the permissions:

[HELP] sudo chown -Rf root:www-data /etc/passbolt/jwt/
[HELP] sudo chmod 750 /etc/passbolt/jwt/
[HELP] sudo chmod 640 /etc/passbolt/jwt/jwt.key
[HELP] sudo chmod 640 /etc/passbolt/jwt/jwt.pem

Let me know how you go.

Cheers

Gareth