jenkinsci / jenkinsci/gitlab-oauth-plugin

[JENKINS-75546] SSH CLI shows incorrect Authorities

Open
#208 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
34
Forks
47
PR merge metrics
No merged PRs in 30d

Description

When calling who-am-i command via SSH CLI I get only authenticated authority, while when checking via whoAmI URL I get correct list of authorities:

This makes the SSH CLI unusable, as I'm not able to perform any action (I'm not getting my admin permissions, projects are on project based security).

I suspect it might be related to GitLab Authentication plugin, but I have no idea how to debug it.

---
Originally reported by hcorg, imported from: SSH CLI shows incorrect Authorities


  • status: Open
  • priority: Major
  • component(s): cli
  • resolution: Unresolved
  • votes: 0
  • watchers: 1
  • imported: 2025-11-24

Raw content of original issue

When calling who-am-i command via SSH CLI I get only authenticated authority, while when checking via whoAmI URL I get correct list of authorities:

This makes the SSH CLI unusable, as I'm not able to perform any action (I'm not getting my admin permissions, projects are on project based security).

I suspect it might be related to GitLab Authentication plugin, but I have no idea how to debug it.

environment

```
Jenkins: 2.504

OS: Linux - 6.8.0-57-generic

Java: 17.0.14 - Ubuntu (OpenJDK 64-Bit Server VM)

---

analysis-model-api:13.2.0

antisamy-markup-formatter:173.v680e3a_b_69ff3

apache-httpcomponents-client-4-api:4.5.14-269.vfa_2321039a_83

apache-httpcomponents-client-5-api:5.4-138.veb_85eeefe21a_

asm-api:9.8-135.vb_2239d08ee90

authentication-tokens:1.131.v7199556c3004

blueocean:1.27.17

blueocean-bitbucket-pipeline:1.27.17

blueocean-commons:1.27.17

blueocean-config:1.27.17

blueocean-core-js:1.27.17

blueocean-dashboard:1.27.17

blueocean-display-url:2.4.4

blueocean-events:1.27.17

blueocean-git-pipeline:1.27.17

blueocean-github-pipeline:1.27.17

blueocean-i18n:1.27.17

blueocean-jwt:1.27.17

blueocean-personalization:1.27.17

blueocean-pipeline-api-impl:1.27.17

blueocean-pipeline-editor:1.27.17

blueocean-pipeline-scm-api:1.27.17

blueocean-rest:1.27.17

blueocean-rest-impl:1.27.17

blueocean-web:1.27.17

bootstrap5-api:5.3.3-3

bouncycastle-api:2.30.1.80-256.vf98926042a_9b_

branch-api:2.1214.v3f652804588d

build-name-setter:2.5.0

build-timeout:1.37

caffeine-api:3.2.0-166.v72a_6d74b_870f

checks-api:367.v18b_7f530e54a_

cloudbees-bitbucket-branch-source:935.1.3

cloudbees-folder:6.999.v42253c105443

command-launcher:118.v72741845c17a_

commons-compress-api:1.27.1-3

commons-lang3-api:3.17.0-87.v5cf526e63b_8b_

commons-text-api:1.13.0-153.v91dcd89e2a_22

conditional-buildstep:1.5.0

copyartifact:765.v0357cc6e6eb_3

coverage:2.2.0

cppncss:1.2

credentials:1413.va_51c53703df1

credentials-binding:687.v619cb_15e923f

custom-folder-icon:2.19

data-tables-api:2.2.2-1

display-url-api:2.209.v582ed814ff2f

docker-commons:451.vd12c371eeeb_3

docker-compose-build-step:1.0

docker-workflow:611.v16e84da_6d3ff

durable-task:587.v84b_877235b_45

echarts-api:5.6.0-2

eddsa-api:0.3.0.1-19.vc432d923e5ee

emoji-symbols-api:16.0-26.v9818ff7423f0

envinject:2.926.v69c9b_3896a_96

envinject-api:1.235.va_14c74f8f487

favorite:2.225.v68765b_b_a_1fa_3

font-awesome-api:6.7.2-1

forensics-api:3.1.0

git:5.7.0

git-client:6.1.2

git-parameter:435.va_f85861c663a_

git-server:137.ve0060b_432302

github:1.43.0

github-api:1.321-488.v9b_c0da_9533f8

github-branch-source:1815.v9152b_2ff7a_1b_

gitlab-api:5.6.0-100.v83f8f4b_f1129

gitlab-branch-source:718.v40b_5f0e67cd3

gitlab-oauth:1.21

gitlab-plugin:1.9.7

gson-api:2.12.1-113.v347686d6729f

handy-uri-templates-2-api:2.1.8-36.v85e4cb_234a_13

htmlpublisher:425

instance-identity:203.v15e81a_1b_7a_38

ionicons-api:82.v0597178874e1

jackson2-api:2.18.3-402.v74c4eb_f122b_2

jakarta-activation-api:2.1.3-2

jakarta-mail-api:2.1.3-2

javadoc:310.v032f3f16b_0f8

javax-activation-api:1.2.0-8

javax-mail-api:1.6.2-11

jaxb:2.3.9-133.vb_ec76a_73f706

jdk-tool:83.v417146707a_3d

jenkins-design-language:1.27.17

jersey2-api:2.45-154.v4ded3dc34f81

jjwt-api:0.11.5-120.v0268cf544b_89

joda-time-api:2.14.0-127.v7d9da_295a_d51

jquery3-api:3.7.1-3

jsch:0.2.16-95.v3eecb_55fa_b_78

json-api:20250107-125.v28b_a_ffa_eb_f01

json-path-api:2.9.0-148.v22a_7ffe323ce

jsoup:1.19.1-38.v216a_f3721b_3c

junit:1319.v000471ca_e5e2

leastload:62.vfa_8830902733

locale:566.v3323643741cc

lockable-resources:1349.v8b_ccb_c5487f7

mailer:489.vd4b_25144138f

matrix-auth:3.2.5

matrix-project:847.v88a_f90ff9f20

maven-plugin:3.25

metrics:4.2.21-464.vc9fa_a_0d6265d

mina-sshd-api-common:2.14.0-143.v2b_362fc39576

mina-sshd-api-core:2.14.0-143.v2b_362fc39576

msbuild:1.36

nunit:571.v30a_1e3f86709

okhttp-api:4.11.0-189.v976fa_d3379d6

oss-symbols-api:308.v0c48656b_15c1

parameterized-scheduler:285.ve611986d4c48

parameterized-trigger:840.v3c7d4a_a_5e6c7

pipeline-build-step:557.v95d96f77b_2b_8

pipeline-graph-analysis:235.vb_a_a_36b_f248c2

pipeline-graph-view:423.v765c49ca_da_3f

pipeline-groovy-lib:752.vdddedf804e72

pipeline-input-step:517.vf8e782ee645c

pipeline-milestone-step:127.vb_52887ca_3b_6d

pipeline-model-api:2.2247.va_423189a_7dff

pipeline-model-definition:2.2247.va_423189a_7dff

pipeline-model-extensions:2.2247.va_423189a_7dff

pipeline-rest-api:2.37

pipeline-stage-step:322.vecffa_99f371c

pipeline-stage-tags-metadata:2.2247.va_423189a_7dff

pipeline-utility-steps:2.19.0

plain-credentials:195.vb_906e9073dee

plugin-util-api:6.1.0

postbuildscript:3.4.1-695.vf6b_0b_8053979

prism-api:1.30.0-1

pubsub-light:1.19

pyenv-pipeline:2.1.2

role-strategy:756.v978cb_392eb_d3

run-condition:243.v3c3f94e46a_8b_

scm-api:704.v3ce5c542825a_

script-security:1373.vb_b_4a_a_c26fa_00

scriptler:397.vc46f19cb_3c18

sloccount:1.27

snakeyaml-api:2.3-125.v4d77857a_b_402

sonar:2.18

sse-gateway:1.28

ssh-credentials:355.v9b_e5b_cde5003

ssh-slaves:3.1031.v72c6b_883b_869

sshd:3.353.v2b_d33c46e970

structs:343.vdcf37b_a_c81d5

test-results-aggregator:3.0

testng-plugin:940.vc244edffc2ec

timestamper:1.28

token-macro:444.v52de7e9c573d

trilead-api:2.192.vc50a_d147e369

uno-choice:2.8.6

variant:70.va_d9f17f859e0

warnings-ng:12.5.0

workflow-aggregator:608.v67378e9d3db_1

workflow-api:1366.vf1fb_e1a_f6b_22

workflow-basic-steps:1079.vce64b_a_929c5a_

workflow-cps:4050.v8b_a_69b_587c39

workflow-durable-task-step:1405.v1fcd4a_d00096

workflow-job:1508.v9cb_c3a_a_89dfd

workflow-multibranch:803.v08103b_87c280

workflow-scm-step:437.v05a_f66b_e5ef8

workflow-step-api:700.v6e45cb_a_5a_a_21

workflow-support:963.va_600813d04a_a_

```

1 attachment

- [image-2025-04-11-11-46-03-500.png](https://raw.githubusercontent.com/jenkinsci/attachments-from-jira-issues-core-cli/refs/heads/main/attachments/64254/image-2025-04-11-11-46-03-500.png)
> ![image-2025-04-11-11-46-03-500.png](https://raw.githubusercontent.com/jenkinsci/attachments-from-jira-issues-core-cli/refs/heads/main/attachments/64254/image-2025-04-11-11-46-03-500.png)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.