Putting our On-Premises Mendix application behind a Web Application Firewall (WAF) caused the issue.
The WAF was receiving false positives for SQL Injections. To resolve this issue, our firewall team created exceptions for the SQL Injection rule using:
The pages that caused this issue all had one thing in common….they used XPATH retrieves with constraints such as [attribute = false()]. It appears that certain XPATH constraints will appear as SQL injection or XPATH Injection according to OWASP.
This article may be the closest related documentation to confirm this was the issue:
Hopefully this helps someone in the future that is having EoF / Generic connection issues when your Mendix Application is behind a WAF.
Could you check the browser version of those users? If those users use Chrome or Edge let them try the incognito mode. If that works they should check their plugin / extensions. We had issues like this the last couple of weeks. We have not found yet out which extension is causing this but it was solved by using the incognito mode or removing all the extensions they had. Some end clients of ours encountered this but we could not reproduce it ourselves. I had it only once on my local machine and created a support ticket for this. But we have yet to find to root cause.
I no longer believe the issue is related to the OIDC module. The issue occurs whether Single Sign On is enabled or not. I have isolated the issue to only be reproduced when the application is running on my on-premises server. I cannot reproduce the issue on my local dev environment or our mendix cloud dev server.
Our on-premises server was recently put behind a web application firewall, and now believe this may be part of the problem.
I have found that the Mendix Service Console is reporting a connector and M2EE error when the page fails and is redirected to the users home page navigation microflow.
Connector: org.eclipse.jetty.io.EofException: Early EOF
M2EE: Could not get response writer in order to close it
Caused by: java.io.IOException: An existing connection was forcibly closed by the remote host
Has anyone experienced issues using Mendix with a Web Application Firewall?
Disabling the WAF has removed the error and resolved the issue. Our WAF team is now investigating logs to see if there is a fix.