Getting Not Found (auth=none) or Unauthenticated (auth=password)

[mafut]

I'm setting up code-server 4.4.0 with apache on Ubuntu 20 in Azure Virtual Machine and facing always "Not Found" or "Unauthenticated". What I did was the following as setup script. It seems proxy from apache to code-server is working. When look up /var/lib/code-server/logs it also seems normal. What's wrong? Any missing configuration?

# apt-get update/upgrade
apt-get -y --force-yes update
apt-get -y --force-yes upgrade

# Install packages
apt-get -y --force-yes install wget ufw zip unzip
apt-get -y --force-yes install apache2
apt-get -y --force-yes autoremove
a2enmod authz_groupfile
a2enmod headers
a2enmod rewrite
a2enmod ssl
a2enmod proxy
a2enmod proxy_http
a2ensite default-ssl

# [Security] Setup Firewall
ufw disable
ufw --force reset
ufw default deny
ufw allow 22
ufw limit 22
ufw allow 80
ufw allow 443
ufw --force enable


# [Code-Server] Install
if [ ! -e ./code-server_${CODESERVER}_amd64.deb ]; then
    curl -fOL https://github.com/coder/code-server/releases/download/v${CODESERVER}/code-server_${CODESERVER}_amd64.deb
    dpkg -i ./code-server_${CODESERVER}_amd64.deb
fi

# [Code-Server] Reset Permission
mkdir -p /var/lib/code-server/
chown -R ${USERNAME} /var/lib/code-server/
chgrp -R ${USERNAME} /var/lib/code-server/
find /var/lib/code-server/ -type d -exec chmod 755 {} \;
find /var/lib/code-server/ -type f -exec chmod 644 {} \;

mkdir -p /home/${USERNAME}/.local/share/code-server
chown -R ${USERNAME} /home/${USERNAME}/.local/share/code-server
chgrp -R ${USERNAME} /home/${USERNAME}/.local/share/code-server
find /home/${USERNAME}/.local/share/code-server -type d -exec chmod 755 {} \;
find /home/${USERNAME}/.local/share/code-server -type f -exec chmod 644 {} \;

# [Code-Server] Config
CONFIG=/etc/systemd/system/code-server.service
cat << EOF > ${CONFIG}
[Unit]
Description=code-server
After=apache2.service

[Service]
Type=simple
User=${USERNAME}
WorkingDirectory=/var/lib/code-server
Restart=always
RestartSec=10

ExecStart=/user/bin/code-server --host 0.0.0.0 --user-data-dir /var/lib/code-server
ExecStop=/bin/kill -s QUIT $MAINPID

[Install]
WantedBy=multi-user.target
EOF

CONFIG=/home/${USERNAME}/.config/code-server/config.yaml
cat << EOF > ${CONFIG}
bind-addr: 127.0.0.1:8888
auth: password
password: ${CODESERVERPASS}
cert: false
user-data-dir: /var/lib/code-server
log: debug
EOF


# [Apache] Reset Permission
mkdir -p /var/www/html/setting/
chown -R ${USERNAME} /var/www/html/setting/
chgrp -R ${USERNAME} /var/www/html/setting/
find /var/www/html/setting/ -type d -exec chmod 755 {} \;
find /var/www/html/setting/ -type f -exec chmod 644 {} \;

mkdir -p ${APACHELOG}
chown -R ${USERNAME} ${APACHELOG}
chgrp -R ${USERNAME} ${APACHELOG}
find ${APACHELOG} -type d -exec chmod 755 {} \;
find ${APACHELOG} -type f -exec chmod 644 {} \;

# [Apache] User to Apache
chown -R ${APACHEUSER} /var/www/html/setting/
chown -R ${APACHEUSER} ${APACHELOG}

# [Apache] Apache Only
find /var/www/html/setting/ -type f -exec chmod 600 {} \;

# [Apache] Configure http
CONFIG=/etc/apache2/sites-available/000-default.conf
cat << EOF > ${CONFIG}
AcceptFilter http none
<VirtualHost *:80>
    ServerAdmin webmaster@localhost
    ServerName localhost:80
    ServerAlias vscode.${HOSTMAIN}

    DocumentRoot /var/www/html
    <Directory /var/www/html>
        Options All
        AllowOverride All
        Require all granted
    </Directory>

    LogLevel warn
    ErrorLog ${APACHELOG}/error.log
    CustomLog ${APACHELOG}/access.log combined
</VirtualHost>
EOF
rm -f /etc/apache2/sites-enabled/000-default.conf
ln -s /etc/apache2/sites-available/000-default.conf /etc/apache2/sites-enabled/000-default.conf

# [Apache] Configure default https
CONFIG=/etc/apache2/sites-available/default-ssl.conf
cat << EOF > ${CONFIG}
AcceptFilter https none
NameVirtualHost *:443
<VirtualHost *:443>
    ServerAdmin webmaster@vscode.${HOSTMAIN}
    ServerName vscode.${HOSTMAIN}

    RewriteEngine On
    RewriteCond %{HTTP:Upgrade} =websocket [NC]
    RewriteRule /(.*) ws://127.0.0.1:8888/$1 [P,L]
    RewriteCond %{HTTP:Upgrade} !=websocket [NC]
    RewriteRule /(.*) http://127.0.0.1:8888/$1 [P,L]
    Header set X-Frame-Options ALLOWALL
    RequestHeader set X-Forwarded-Proto https
    RequestHeader set X-Forwarded-Port 443

    SSLEngine on
    SSLProtocol all -SSLv2
    SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA
    SSLCertificateFile ${CERTPATH}/fullchain.pem
    SSLCertificateKeyFile ${CERTPATH}/privkey.pem
    SSLProxyEngine on
    SSLProxyCheckPeerCN off
    SSLProxyCheckPeerName off

    ProxyRequests off
    ProxyPreserveHost on
    ProxyPass / http://127.0.0.1:8888/
    ProxyPassReverse / http://127.0.0.1:8888/
</VirtualHost>
EOF
rm -f /etc/apache2/sites-enabled/default-ssl.conf
ln -s /etc/apache2/sites-available/default-ssl.conf /etc/apache2/sites-enabled/default-ssl.conf


# Add auto-start and start services
loginctl enable-linger ${USERNAME}
systemctl enable --now apache2
systemctl enable --now code-server@${USERNAME}

== Logs ==================================================
[2022-06-28 06:06:14.287] [remoteagent] [info] Extension host agent started.
[2022-06-28 06:06:14.337] [remoteagent] [debug] ComputeTargetPlatform: linux-x64

[jsjoeio]

I'm not familiar with Apache but you might find something helpful in an old issue: https://github.com/coder/code-server/issues?q=is%3Aissue+apache+is%3Aclosed

[mafut]

Found the reason why my configuration didn't work.

Didn't work:

RewriteCond %{HTTP:Upgrade} =websocket [NC]
RewriteRule /(.*) ws://127.0.0.1:8888/$1 [P,L]
RewriteCond %{HTTP:Upgrade} !=websocket [NC]
RewriteRule /(.*) http://127.0.0.1:8888/$1 [P,L]

Worked:

RewriteCond ${HTTP:Upgrade} websocket [NC]
RewriteCond ${HTTP:Connection} upgrade [NC]
RewriteRule .* "ws:/localhost:3000/$1" [P,L]

But even though "Not found" or "Unauthenticated" were fixed, there was another issue after. It was no response of websocket request. In browser developer tool, webscoket request kept Pending.

I gave up to use apache and moved to nginx. Nginx is working perfectly.