Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

allowing basic auth breaks oidc login for the client #2094

Closed
butonic opened this issue May 28, 2021 · 0 comments · Fixed by #2095
Closed

allowing basic auth breaks oidc login for the client #2094

butonic opened this issue May 28, 2021 · 0 comments · Fixed by #2095
Labels

Comments

@butonic
Copy link
Member

butonic commented May 28, 2021

Try connecting the desktop client to an ocis instance that has PROXY_ENABLE_BASIC_AUTH=true set.

The client will try to authenticate the token, sending a basic auth, leading to:

Anmeldefehler
Beim Zugriff auf den 'token' Endpunkt trat ein Fehler auf:
Der Host verlangt eine Authentifizierung

the ocis log shows

2021-05-28T14:30:12Z DBG dataprovider routing: path=/index.cs3/unique.github.com.owncloud.ocis.accounts.pkg.proto.v0.Account.Mail/xdxot13jkxym1b1qcencf2xdklaexmbfwit9j6efhhhfjhs2km9jbjtmf8jbxe69 pkg=rhttp service=storage traceid=ce738e48883194d48e3cbec46b6e3d80
2021-05-28T14:30:12Z DBG NodeFromPath() fn=/index.cs3/unique.github.com.owncloud.ocis.accounts.pkg.proto.v0.Account.Mail/xdxot13jkxym1b1qcencf2xdklaexmbfwit9j6efhhhfjhs2km9jbjtmf8jbxe69 pkg=rhttp service=storage traceid=ce738e48883194d48e3cbec46b6e3d80
2021-05-28T14:30:12Z DBG NodeFromPath() walk node={"BlobID":"","Blobsize":0,"Exists":true,"ID":"1ed4ae5d-23f3-42e2-814b-0dedf59afbe4","Name":"index.cs3","ParentID":"root"} pkg=rhttp service=storage traceid=ce738e48883194d48e3cbec46b6e3d80
2021-05-28T14:30:12Z DBG NodeFromPath() walk node={"BlobID":"","Blobsize":0,"Exists":true,"ID":"c442473d-3101-4717-8d74-1319c6897e45","Name":"unique.github.com.owncloud.ocis.accounts.pkg.proto.v0.Account.Mail","ParentID":"1ed4ae5d-23f3-42e2-814b-0dedf59afbe4"} pkg=rhttp service=storage traceid=ce738e48883194d48e3cbec46b6e3d80
2021-05-28T14:30:12Z DBG NodeFromPath() walk node={"BlobID":"","Blobsize":0,"Exists":false,"ID":"","Name":"xdxot13jkxym1b1qcencf2xdklaexmbfwit9j6efhhhfjhs2km9jbjtmf8jbxe69","ParentID":"c442473d-3101-4717-8d74-1319c6897e45"} pkg=rhttp service=storage traceid=ce738e48883194d48e3cbec46b6e3d80
2021-05-28T14:30:12Z DBG file not found error="error: not found: c442473d-3101-4717-8d74-1319c6897e45/xdxot13jkxym1b1qcencf2xdklaexmbfwit9j6efhhhfjhs2km9jbjtmf8jbxe69" action=stat handler=download pkg=rhttp service=storage svc=datatx traceid=ce738e48883194d48e3cbec46b6e3d80
2021-05-28T14:30:12Z WRN http end="28/May/2021:14:30:12 +0000" host=127.0.0.1 method=GET pkg=rhttp proto=HTTP/1.1 service=storage size=0 start="28/May/2021:14:30:12 +0000" status=404 time_ns=1348700 traceid=ce738e48883194d48e3cbec46b6e3d80 uri=/data/index.cs3/unique.github.com.owncloud.ocis.accounts.pkg.proto.v0.Account.Mail/xdxot13jkxym1b1qcencf2xdklaexmbfwit9j6efhhhfjhs2km9jbjtmf8jbxe69 url=/data/index.cs3/unique.github.com.owncloud.ocis.accounts.pkg.proto.v0.Account.Mail/xdxot13jkxym1b1qcencf2xdklaexmbfwit9j6efhhhfjhs2km9jbjtmf8jbxe69
2021-05-28T14:30:12Z ERR error fetching from accounts-service error="{\"id\":\"com.owncloud.api.accounts\",\"code\":401,\"detail\":\"account not found or invalid credentials\",\"status\":\"Unauthorized\"}" query="login eq 'xdXOt13JKxym1B1QcEncf2XDkLAexMBFwiT9j6EfhhHFJhs2KM9jbjTmf8JBXE69' and password eq 'UBntmLjC2yYCeHwsyj73Uwo9TAaecAetRwMw0xYcvNL9yRdLSUi0hUAHfvCHFeFh'" service=proxy

the problem is caused by the fallback chain that tries to authenticate the basic auth credentials with the accounts service.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant