Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Description

None

CSP Request Details

None

CSP Rejection Details

None

Potential Workaround

None

Attachments

2
  • 04 Jun 2019, 01:37 AM
  • 04 Jun 2019, 01:37 AM

Checklist

hide

TestRail: Results

Activity

Show:

Adam DickmeissJune 5, 2019 at 5:09 PM

PR merged.

Adam DickmeissJune 5, 2019 at 4:42 PM
Edited

The duplicate permissions is most certainly a problem. Perhaps not the whole story.. https://github.com/folio-org/mod-authtoken/pull/50

John MalconianJune 4, 2019 at 3:37 PM

I don't see any errors now with the following:

[malc@ip-10-36-20-124 ansible]$ curl -X GET -D - -w '\n' -H 'Content-Type: application/json' -H 'Accept: application/json' -H "X-Okapi-Token: $OKAPI_TOKEN" -H 'X-Okapi-Tenant: diku' "https://folio-snapshot-okapi.aws.indexdata.com/configurations/entries?query=module%3D%3D%22ORG%22+and+configName%3D%3D%22localeSettings%22&limit=1&offset=0" HTTP/2 200 date: Tue, 04 Jun 2019 15:32:46 GMT content-type: application/json x-okapi-trace: GET mod-authtoken-2.2.0-SNAPSHOT.46 http://10.36.1.176:9171/configurations/entries.. : 202 1701us x-forwarded-for: 52.201.167.1 x-forwarded-proto: https x-forwarded-port: 443 host: folio-snapshot-okapi.aws.indexdata.com x-amzn-trace-id: Root=1-5cf68f1e-6be756d1a20609f2e9ff09e4 user-agent: curl/7.61.1 accept: application/json x-okapi-tenant: diku x-okapi-request-id: 569155/configurations x-okapi-url: http://10.36.1.176:9130 x-okapi-request-ip: 10.36.10.112 x-okapi-request-timestamp: 1559662366915 x-okapi-request-method: GET x-okapi-permissions: ["configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get","configuration.entries.collection.get"] x-okapi-user-id: f3bfc1ca-3470-5277-8e31-d0c8c95c7800 x-okapi-token: eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJkaWt1X2FkbWluIiwidXNlcl9pZCI6ImYzYmZjMWNhLTM0NzAtNTI3Ny04ZTMxLWQwYzhjOTVjNzgwMCIsImNhY2hlX2tleSI6IjFmNDkyYTRhLTAwN2QtNDViOS04YWFlLTcwNzIxZDY4ZWM3YyIsImlhdCI6MTU1OTY1NDc0MCwidGVuYW50IjoiZGlrdSJ9.30iQX0Tnmnsx21UMXOtILKtdXoOE-B35tRwo_KXQFGo x-okapi-match-path-pattern: /configurations/entries x-okapi-trace: GET mod-configuration-5.2.0-SNAPSHOT.54 http://10.36.1.176:9131/configurations/entries.. : 200 4556us { "configs" : [ { "id" : "d5003948-4001-43a4-a994-f7a214f95b71", "module" : "ORG", "configName" : "localeSettings", "enabled" : true, "value" : "{\"locale\":\"en-US\",\"timezone\":\"America/New_York\"}", "metadata" : { "createdDate" : "2019-06-04T03:44:13.980+0000", "createdByUserId" : "f3bfc1ca-3470-5277-8e31-d0c8c95c7800", "updatedDate" : "2019-06-04T03:44:13.980+0000", "updatedByUserId" : "f3bfc1ca-3470-5277-8e31-d0c8c95c7800" } } ], "totalRecords" : 1, "resultInfo" : { "totalRecords" : 1, "facets" : [ ], "diagnostics" : [ ] } }

Not sure why 'x-okapi-permissions' is repetitive like that though.

Marc JohnsonJune 4, 2019 at 3:03 PM

Thanks for investigating and (temporarily at least) resolving this issue

John MalconianJune 4, 2019 at 1:46 PM

After disabling the audit modules, I re-ran the UI test suite. All UI integrations tests passed. I do see the following errors, however, they look like permissions errors. Not sure they are related to this issue.

2019-06-04 13:40:23,526 INFO ProxyContext 840460/perms RES 202 675us mod-authtoken-2.2.0-SNAPSHOT.46 http://10.36.1.176:9171/perms/users/b5207b46-0b80-4d3f-a37e-0066fbd8a02e/permissions.. 2019-06-04 13:40:23,530 INFO ProxyContext 807923/perms REQ 172.17.0.42:35798 diku GET /perms/users/b5207b46-0b80-4d3f-a37e-0066fbd8a02e/permissions mod-authtoken-2.2.0-SNAPSHOT.46 mod-permissions-5.7.0-SNAPSHOT.48 2019-06-04 13:40:23,530 INFO ProxyContext 840460/perms RES 200 3740us mod-permissions-5.7.0-SNAPSHOT.48 http://10.36.1.176:9142/perms/users/b5207b46-0b80-4d3f-a37e-0066fbd8a02e/permissions.. 2019-06-04 13:40:23,530 INFO DockerModuleHandle mod-permissions-5.7.0-SNAPSHOT.48 04 Jun 2019 13:40:23:528 INFO LogUtil [36550608eqId] org.folio.rest.RestVerticle start invoking getPermsUsersPermissionsById 2019-06-04 13:40:23,530 INFO DockerModuleHandle mod-permissions-5.7.0-SNAPSHOT.48 04 Jun 2019 13:40:23:528 INFO LogUtil [36550608eqId] 10.36.1.176:37316 GET /perms/users/b5207b46-0b80-4d3f-a37e-0066fbd8a02e/permissions expanded=true HTTP_1_1 200 51 1 tid=diku OK 2019-06-04 13:40:23,530 INFO ProxyContext 807923/perms RES 202 503us mod-authtoken-2.2.0-SNAPSHOT.46 http://10.36.1.176:9171/perms/users/b5207b46-0b80-4d3f-a37e-0066fbd8a02e/permissions.. 2019-06-04 13:40:23,531 WARN ProxyContext 394736/configurations proxyHeaders failure: http://10.36.1.176:9171: java.lang.IllegalStateException: Response is closed at io.vertx.core.http.impl.HttpServerResponseImpl.checkValid(HttpServerResponseImpl.java:575) at io.vertx.core.http.impl.HttpServerResponseImpl.setChunked(HttpServerResponseImpl.java:138) at io.vertx.core.http.impl.HttpServerResponseImpl.setChunked(HttpServerResponseImpl.java:54) at org.folio.okapi.managers.ProxyService.relayToResponse(ProxyService.java:395) at org.folio.okapi.managers.ProxyService.lambda$proxyHeaders$22(ProxyService.java:766) at io.vertx.core.http.impl.HttpClientRequestImpl.doHandleResponse(HttpClientRequestImpl.java:430) at io.vertx.core.http.impl.HttpClientRequestBase.doHandleResponse(HttpClientRequestBase.java:175) at io.vertx.core.http.impl.HttpClientRequestBase.checkHandleResponse(HttpClientRequestBase.java:162) at io.vertx.core.http.impl.HttpClientRequestBase.handleResponse(HttpClientRequestBase.java:146) at io.vertx.core.http.impl.Http1xClientConnection.handleResponseBegin(Http1xClientConnection.java:624) at io.vertx.core.http.impl.Http1xClientConnection.handleHttpMessage(Http1xClientConnection.java:594) at io.vertx.core.http.impl.Http1xClientConnection.handleMessage(Http1xClientConnection.java:560) at io.vertx.core.net.impl.ConnectionBase.handleRead(ConnectionBase.java:390) at io.vertx.core.impl.ContextImpl.executeTask(ContextImpl.java:320) at io.vertx.core.impl.EventLoopContext.execute(EventLoopContext.java:43) at io.vertx.core.impl.ContextImpl.executeFromIO(ContextImpl.java:188) at io.vertx.core.net.impl.VertxHandler.channelRead(VertxHandler.java:174) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348) at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340) at io.netty.channel.CombinedChannelDuplexHandler$DelegatingChannelHandlerContext.fireChannelRead(CombinedChannelDuplexHandler.java:438) at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:323) at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:310) at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:426) at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:278) at io.netty.channel.CombinedChannelDuplexHandler.channelRead(CombinedChannelDuplexHandler.java:253) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348) at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340) at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1434) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348) at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:965) at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:644) at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:579) at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:496) at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:458) at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:897) at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) at java.lang.Thread.run(Thread.java:748) 2019-06-04 13:40:23,531 INFO ProxyContext 394736/configurations RES 500 29014us okapi proxyHeaders failure: mod-authtoken-2.2.0-SNAPSHOT.46 http://10.36.1.176:9171: java.lang.IllegalStateException: Response is closed Response is closed 2019-06-04 13:40:23,531 ERROR HttpResponse HTTP response code=500 msg=proxyHeaders failure: mod-authtoken-2.2.0-SNAPSHOT.46 http://10.36.1.176:9171: java.lang.IllegalStateException: Response is closed Response is closed 2019-06-04 13:40:23,531 INFO DockerModuleHandle mod-authtoken-2.2.0-SNAPSHOT.46 Jun 04, 2019 1:40:23 PM mod-auth-authtoken-module 2019-06-04 13:40:23,531 INFO DockerModuleHandle mod-authtoken-2.2.0-SNAPSHOT.46 SEVERE: [](user permissions) nor [](module permissions) do not contain configuration.entries.collection.get 2019-06-04 13:40:23,533 INFO ProxyContext 807923/perms RES 200 2097us mod-permissions-5.7.0-SNAPSHOT.48 http://10.36.1.176:9142/perms/users/b5207b46-0b80-4d3f-a37e-0066fbd8a02e/permissions.. 2019-06-04 13:40:23,533 WARN ProxyContext 681599/configurations proxyHeaders failure: http://10.36.1.176:9171: java.lang.IllegalStateException: Response is closed at io.vertx.core.http.impl.HttpServerResponseImpl.checkValid(HttpServerResponseImpl.java:575) at io.vertx.core.http.impl.HttpServerResponseImpl.setChunked(HttpServerResponseImpl.java:138) at io.vertx.core.http.impl.HttpServerResponseImpl.setChunked(HttpServerResponseImpl.java:54) at org.folio.okapi.managers.ProxyService.relayToResponse(ProxyService.java:395) at org.folio.okapi.managers.ProxyService.lambda$proxyHeaders$22(ProxyService.java:766) at io.vertx.core.http.impl.HttpClientRequestImpl.doHandleResponse(HttpClientRequestImpl.java:430) at io.vertx.core.http.impl.HttpClientRequestBase.doHandleResponse(HttpClientRequestBase.java:175) at io.vertx.core.http.impl.HttpClientRequestBase.checkHandleResponse(HttpClientRequestBase.java:162) at io.vertx.core.http.impl.HttpClientRequestBase.handleResponse(HttpClientRequestBase.java:146) at io.vertx.core.http.impl.Http1xClientConnection.handleResponseBegin(Http1xClientConnection.java:624) at io.vertx.core.http.impl.Http1xClientConnection.handleHttpMessage(Http1xClientConnection.java:594) at io.vertx.core.http.impl.Http1xClientConnection.handleMessage(Http1xClientConnection.java:560) at io.vertx.core.net.impl.ConnectionBase.handleRead(ConnectionBase.java:390) at io.vertx.core.impl.ContextImpl.executeTask(ContextImpl.java:320) at io.vertx.core.impl.EventLoopContext.execute(EventLoopContext.java:43) at io.vertx.core.impl.ContextImpl.executeFromIO(ContextImpl.java:188) at io.vertx.core.net.impl.VertxHandler.channelRead(VertxHandler.java:174) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348) at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340) at io.netty.channel.CombinedChannelDuplexHandler$DelegatingChannelHandlerContext.fireChannelRead(CombinedChannelDuplexHandler.java:438) at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:323) at io.netty.handler.codec.ByteToMessageDecoder.fireChannelRead(ByteToMessageDecoder.java:310) at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:426) at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:278) at io.netty.channel.CombinedChannelDuplexHandler.channelRead(CombinedChannelDuplexHandler.java:253) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348) at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:340) at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1434) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:362) at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:348) at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:965) at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:163) at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:644) at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:579) at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:496) at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:458) at io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:897) at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) at java.lang.Thread.run(Thread.java:748)

Details

Assignee

Adam Dickmeiss

Reporter

Zak Burke

Priority

P2

Story Points

3

Sprint

None

Development Team

Core: Platform

Fix versions

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

TestRail: Cases
TestRail: Runs