influxdata / influxdata/influxdb

Misleading authentication error message for non-existent user

Open
#9,754 1 comment 1 reaction 1 assignee Claimed by @rbetts View on GitHub
1.x area/auth
Dominant language
Rust
Stars
31.7k
Forks
3.7k
Avg merge
13h 37m
Merged PRs (30d)
8

Description

When deploying a cluster with basic enabled authentication, authentication a non-existent user returns an authorization error instead of authentication error. If would be useful to return a correct message to the end-user:
- If user exists, but does not have permissions to execute a statement - return authorization error.
- If user does not exist - return an authentication error.

Current implementation always returns 'Authorization Failed' whether user exists or existing user does not have required permissions.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.