Disable CSRFToken requests and increase upload client max body size

Author: marshyski

ui/h3.nginx.conf

@@ -136,7 +136,7 @@ server {
 
   # Opensearch Dashboards route
   location /opensearch_dashboards {
-    client_max_body_size 40M;
+    client_max_body_size 100M;
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -149,7 +149,7 @@ server {
 
   # API route
   location /v1 {
-    client_max_body_size 40M;
+    client_max_body_size 100M;
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -163,6 +163,7 @@ server {
 
   # Swagger apidocs route
   location ~ ^/(apidocs|flasgger_static|apispec_[0-9].json) {
+    client_max_body_size 100M;
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -175,7 +176,7 @@ server {
 
   # Docs route
   location /docs {
-    client_max_body_size 40M;
+    client_max_body_size 10M;
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
@@ -189,7 +190,7 @@ server {
 
   # UI route
   location /ui {
-    client_max_body_size 40M;
+    client_max_body_size 100M;
     alias /usr/share/nginx/html;
     index index.html;
   }

ui/nginx.conf

@@ -44,6 +44,7 @@ http {
   open_file_cache_valid 30s;
   open_file_cache_min_uses 2;
   open_file_cache_errors on;
+  client_max_body_size 100M;
 
   # copies data between one FD and other from within the kernel
   # faster then read() + write()

ui/static/js/functions.js

@@ -18,7 +18,7 @@ async function getCsrfToken () {
 
 // Function to handle all fetch requests
 export async function fetchRequest (apiUrl, method = 'GET', body = null, headers = { 'Content-Type': 'application/json' }) {
-  headers['X-CSRFToken'] = await getCsrfToken()
+  // headers['X-CSRFToken'] = await getCsrfToken()
   const res = fetch(apiUrl, {
     method: method,
     body: body,