I'm running ONLYOFFICE Document Server under an https:// vhost on nginx on Ubuntu Server 18.04 LTS. It's reachable at onlyoffice.example.com and I also have a Nextcloud instance at nextcloud.example.com that it integrates with.
To prevent unauthorised access to my server, I used to have a JWT authentication key inside my
/etc/onlyoffice/documentserver/default.json file for
session strings. After updating to version
5.2.0, I had to reset my
default.json file to default (from the GitHub repository) as ONLYOFFICE would not work otherwise for some reason (?), and then I set my PostgreSQL DB password correctly as well as the four key strings (all equal) mentioned above.
I also ensured that secret key authentication was set on
true for all three options (
Then I ran:
#: supervisorctl restart all #: systemctl restart nginx
and successfully restarted my webserver and ONLYOFFICE.
When I go into Nextcloud ONLYOFFICE settings, with no key entered my instance works perfectly. If instead I specify any secret key (including the correct very one), it gives me the following error
Error when trying to connect (Error occurred in the document service: Error while downloading the document file to be converted.)
It's worth nothing that this way there is no security at all, and anyone can use my ONLYOFFICE Document Server for free on their systems.
Here's a screenshot of the relevant part (starting at line 132) of my
/etc/onlyoffice/documentserver/default.json file (where the red X is, I covered my secret key in Snipping Tool for privacy).