nodeSolidServer / nodeSolidServer/node-solid-server

local storage data generated from 4.x causes unauthorized login

Open
#1,155 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
JavaScript
Stars
1.8k
Forks
308
PR merge metrics
No merged PRs in 30d

Description

## Please describe what you did in reproducible steps

  • Boot the solid server at localhost:8443
  • Manually put the following in local storage:
    key: solid-auth-client
    value: {"rpConfig":{"provider":{"url":"https://localhost:8443/","configuration":{"issuer":"https://localhost:8443","authorization_endpoint":"https://localhost:8443/authorize","token_endpoint":"https://localhost:8443/token","userinfo_endpoint":"https://localhost:8443/userinfo","jwks_uri":"https://localhost:8443/jwks","registration_endpoint":"https://localhost:8443/register","response_types_supported":["code","code token","code id_token","id_token","id_token token","code id_token token","none"],"response_modes_supported":["query","fragment"],"grant_types_supported":["authorization_code","implicit","refresh_token","client_credentials"],"subject_types_supported":["public"],"id_token_signing_alg_values_supported":["RS256","RS384","RS512","none"],"token_endpoint_auth_methods_supported":["client_secret_basic"],"token_endpoint_auth_signing_alg_values_supported":["RS256"],"display_values_supported":[],"claim_types_supported":["normal"],"claims_supported":[],"claims_parameter_supported":false,"request_parameter_supported":true,"request_uri_parameter_supported":false,"require_request_uri_registration":false,"check_session_iframe":"https://localhost:8443/session","end_session_endpoint":"https://localhost:8443/logout"},"jwks":{"keys":[{"kid":"EpVZJI3V0CI","kty":"RSA","alg":"RS256","n":"v_xoE520Yib2OrJ69uwlWNhnqdy3iOZUkTqpz3_LL6YWjoFgrbsvmvSDICiVbGP0DXQ3lGG4IEzJ_8MYGO_EoK1FJq_N2rjgnWxHuF9GqaPX5NYwNlQMv2r-13hMf5cbgf6YOMI3jvecTeBbpQqkP9-aBhJuYRUn9H62aydosuQIF6lDYBSzUuhbUPBfUTXJHH6NmNDZCDf8mkAyER7t-LWvpe7zs8VnxcJ8MCp90Z2g2HO80wYzdRQOvTRf5VpGCdHl659ZxrzntAr3KY1QE_tjp4eZUjTxQC4oR3IsmJhv2RoOrPwyfV4K7rQr5vyKjxC43_FaHkUFVN65yy7I6Q","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"qpIoAYPuxe4","kty":"RSA","alg":"RS384","n":"vuJfhCVePAbD-nNKnXx-HMxSTxfsa4OXTOinCjPOluWdQYM3CrMXaNRBG3Dh3QiohMMliE3HsP5Y4sonyRnJIeX0qEupnd4pKk2jeJu0nDmPleOS5cU1KlVepAyy5dLXgiSLiyBidJry7uj2UDYe0_YAQVpa2bwTP4mtLiORgpLnVSwN2VfU0SYbw35V9LR4t_PV4qMKsjkiTSTF3ngpn6TLg0eP-6v_WLWU5_3Mem6Tv5lzNL1RYG0fXFKRKZky3u98X3ffC7qTejGr2s-p11sK8BusnqNXIfEc3Iz_pjgn7kiYBRzuzj6-wk95StaW1dq2nWaI3-k4qKjCim9IAQ","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"mm2-krmFbig","kty":"RSA","alg":"RS512","n":"3suqtSlzsyCFj_A35lOv4Y-hlB3TLn54Fjs0lw1byZt4kAhE0pGjcnYUwr58VuMK8KAAnscjhSeMN5g5e2uM6sANxqmRNrd_WMlCDRP7Z6Lvvv61xNdvM3KFn8ELJ9FYpdzcpuWU8TA9lMMGcyDx9a9Wfw1GMctl5dqN3KVmvqbPPoT114EFPZ4OB_JHcZxIPOO9S0Rvc_n7RAy6f77k7xaaSmFdSnCUCdIkq4k7ZBv-DYKhbRrQ0CKQgyuvIbdCBp-oG3yQVgAbdQFjYQG8OGjYes3DYMWJKzwlEDcTRTAiLjEkOeJxPjr36aeMbLUgtrNTEnwPsGDaw_erYJ3lPw","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"NFPwK55Ajxs","kty":"RSA","alg":"RS256","n":"rMmeNQUvKHjKcAaelOHXtXmri36jHMBjotU-UCZpO0RF5aDChg7DxvyMOUR6RQhanwLjlgrArWhfSwWi4Gg7GspE-M2SdFWrH15az-Hm_OM-cVqO_Dvey1zxCY_zIuR28-YDTEunP_0Jyq3dLumAj45W0OHcNFjhiNAs_ZbpE9sRktr8x-Ka4TPgLlW0gNV1MLg_q1SBgi3HQX2oHgvLW2LrSQRKN2DtCyAf83pjVPlOQGliO9vmoCUqdeMgsfX9vO4NT1G0Tb9OkXXGBbHWPF5qPkE-Y7RgcegITOcr6v0wWut4ZBWEkI2DeXS2e9YorWcvDb5uLt9tAogkCyAqWw","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"tAEZHHkwfdU","kty":"RSA","alg":"RS384","n":"sjsLlHVk7SaD4FeSjo8xh6im-X4JyEMnqB7obbOvfOqpkEEcS7KhBQEHmR3OYE8DHQ6G2oKCsjtpWhB6i2DfeSmpY_L7sgZxKYm-NPhp8ATQGxvl-8JgL60exwVycHydDmNNswDVEbdtmewSyppHHNobP6jjCmfMzcJ1C2HUaxPTvlSF4YsSVGZpdCF6gNV7OolpRpk91Yr_TdaQQ9uA88c9PeSyi2X1IaKSwDwNMy-qCW9gQ15TNtlrMXtLGu3lPhqOfM-4Yw9lO5sedUqZhO0sdRgAMO5bnNi5gaNeUXdYgyb-tKodxaUGYJ8-E-lNVNVJTQN3zB8lupuHDHg-vw","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"WY3L35a_lZA","kty":"RSA","alg":"RS512","n":"ue4e_vfFaAKp4G1vcCy2lppRKduRaRFdu4CwuSVmtyJXpwCiuAkdb5GIwIkHRaDYQPP6_wZoMOqNO9Fm_kFLuVN8NJGnE_2SyDCwexLq2o8Ls1pODBqLj2_u4Rdd8X63MVIoIv32SvvmvfjSCjzICiP9jAQoy5tLj_FA543kpGU9Gioi8l9_7eW_WWGCcPeVKfAdCskzCqioxlyygeRwPQm3oWh2gSmkZN8YQCuFDF_-ubGvQKu-brVajIOb1xU52c2w8Lp7jV9ClnE4F27ozBB6LVeeMlc4lkafROVFaKhX5XTY0MCFg0pISpqp5cIVIjuLsHNnkXCuoPYZdIMnhw","e":"AQAB","key_ops":["verify"],"ext":true},{"kid":"OyASAeexYaM","kty":"RSA","alg":"RS256","n":"8uP28UijSSP5mUfNYokEcA5i5fCk7uS_fU6NmZbqxw5qjb_YG-HtFhFPshOBjHaYrzUoagfl4Mtoepe6okwIUP_rKQcNiDR84Ob-3Vn3kqAv70mRCpFq6wvyWWbKYVR12KSeltr67GwaZWEQIV972qWP5DuKxXkwb4-zQhYMePw4eTlRWAEqdaQPSv5lJnFuqsKkcYU0SiFuCkBIGz0NGQi5s-lAyaVm2yP5FpMSEPMiKzOPXCfSlp9vIf9jSyiUmy9dosXBM2rZgEDucqHctPxvcunRYieoQwwawff0tnAS9ZxJV5OB-1_-Up6RgEb9csSAYiqiUh7djL2shmhv9w","e":"AQAB","key_ops":["verify"],"ext":true}]}},"defaults":{"popToken":false,"authenticate":{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"]}},"store":{},"registration":{"client_id":"2eb782b378ad78b40c8fe7b61034418e","redirect_uris":["https://localhost:8443/.well-known/solid/login"],"response_types":["id_token token"],"grant_types":["implicit"],"application_type":"web","id_token_signed_response_alg":"RS256","token_endpoint_auth_method":"client_secret_basic","frontchannel_logout_session_required":false,"registration_access_token":"eyJhbGciOiJSUzI1NiJ9.eyJpc3MiOiJodHRwczovL2xvY2FsaG9zdDo4NDQzIiwic3ViIjoiMmViNzgyYjM3OGFkNzhiNDBjOGZlN2I2MTAzNDQxOGUiLCJhdWQiOiIyZWI3ODJiMzc4YWQ3OGI0MGM4ZmU3YjYxMDM0NDE4ZSJ9.6mikjrmuyfNi37PmGg1E-kWO1nSVTnlZCb4KN88t6FCJGEwsk1LhW1TcShUkBAEcQVy6O1iTCv09k8OSchLbcCUUEeYzC72dJqfkwbQ1xgewUYTHDhunQUiRrOe6R49b8cZmi23DLRTSUTRWI1e6HGMryzoPDQTKl5DbVuYfwaBO3QecXYKaipKs2P5zUeC0gHrhTvQDILvvCTHUazsJG8DvStpZwlgF8t3oHGf6zV-8m0BHzF95s6TwI_m4KSQMEGpA8wyfOPJXC-XS8ETWPthgksRH8sq3GsvMZtDWVOgtLmkeG-H5o9p-6_WXNYTRLtyMcaqSiXNj1_rTRaVQ_Q","registration_client_uri":"https://localhost:8443/register/2eb782b378ad78b40c8fe7b61034418e","client_id_issued_at":1543357448}},"https://localhost:8443/requestHistory/LreWQ2TR9nX1tT4Llra3WZ-taYJBCe29sNqTOafNwVg":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[54,140,84,11,185,138,131,223,8,73,105,215,59,183,62,255],"nonce":[99,180,154,178,231,182,191,178,28,214,241,92,225,102,225,151]}","oidc.session.privateKey":"{"alg":"RS256","d":"C4AW4IrEpArpw0uY0zA9VUnDcl7aTU6U7aiAWCiNGU5uLovpsbd5Myn7rPzqFzkK1JClibnXLfzmzOQJvVIZxLQwu1996BhCV4P_-J_gYIQRpH773VMv_vjT-QHH3tA8BHCHQ9FFyN6HZcKRmtiz0wHaOHjwbgXo9bZz8GVbGYIveada1Lk0dbw9FvArW89Nhu0ATKPk1k53zLFZLwUbKkvZkolwPeJFG5nhICWS2LbX4uesr7gf-ift0MiiI8_kClFwPYkgH2HKUs21LTShHmdu_StY5fcdRG_IITgt39dWZpJwcDnPImRxqdGvLa9AcezHWU0wOpeWNpHntfuwQ","dp":"oUBGVkDq0AVMmzuDY_nV6x4UQWpfION6jfhGrt8PxEpy4Qra-4vG0uVg8TZcSjYcmTwnMhwW4wlx-hpIx-q3gR-fGxq3TCzOL8Ae66BIO6OixG4ttdETsgNcCoqklKmw_jLehdTMd_HfC6PaOYAZpM-Pfg1cI-Ki2yCa3WBLhEM","dq":"lCs-S4krPoIC0YJqNqmzl97QuUk8EyO8Bvqy5gdrF4ozzDhBeDXN1-2eQrR59QIUJ4JggGPDZJB8KCxptyDMtBw5AEFLYCq_bdJfBDzrCFgcFBpgKkJpSRjUEJha3dPbG_thGTMcHwmf5xdVRK7YEVrTlxCCAS5YAOarYyzVKGE","e":"AQAB","ext":true,"key_ops":["sign"],"kty":"RSA","n":"pBjhNm9trgqwzzHHo1AfhVQJXwxa-L9p-Co_sDwLBynxAWYRXooOTd_xOmO3xcMjXwCebOAc-UKmTr9TEW_QOPX92497i73rlnQEDEDvBad_nQvH1ZZI6bIFgXpKjHpr-wXASE_vacPDMdZppa_rMUMz1Jj6WUhBUeet4KRg3rN3bUxSt7bKJc4Wp3RtofvI1fmHMQjjRZVLRhbghgeqA32YrN4zT-5ZnOYS2xInHLMdmtj8foeasZAOrLNR1a43PY1G5drB93BqGCQceQYmjJgQ0xm60wMV1r_y9IqWvHqqHmjBhj4TDGYwfDBvDirWcwpjajSWUz-tjhKIuYX9Qw","p":"0xV1aQ9sFfJz7CPt-lnUsdzjdbUc1JXrr9uI77PTFLxZ6Rx8ktQlCMp3rQmTI7_fWl9DkwVESMueb1bn7BikteNA-Goz8lmxq-dzUgc5nfmZIXrX2oAnoJUVDMwvfZimFi1yyJ7Gkd9Xy3uu-g6kBHbfRo_cU-NXh5ky1fwWyM","q":"xwPhNMtVOu6HxTkTr5QuvtVdEiiQU7GRknmDCfxte1GjxBq-7Z3-JtqY-8_RdZ_7WWvoclDEDwaZTNnJvJf79FC4aXLlAM2qrpDNMyjngo75OkmXSmU0oGlr_9WVThRJ2d6wfXAnd1LFWfXa1-Eh87-eNlhpZ1Wtx-1i6hNMh2E","qi":"HjyS0nl587DhmO0EYUlQPja_a6pl13vurRvYHjEpXYicaumcw1-F8yhn0mH-aAG4Oc1vqt3L219OQ8Vlhb3EYABPCGfjyRYbjwuSZ4qxYdEdV8Nh0ZdXvj6UZUX-lNxaraWn-9ISLqMWzLCiUEDN7FNNIPO9P62WA6Iq5C86Oqw"}","session":null,"appHashFragment":"","https://localhost:8443/requestHistory/M5HfjU2LzNlSz_wVvFYgZT2NdDlnQBwIAO-HtiWQXiA":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[170,153,211,145,157,141,102,184,158,38,5,94,40,138,62,84],"nonce":[73,136,123,54,206,150,81,83,181,142,209,189,150,43,69,140]}","https://localhost:8443/requestHistory/pngqmrbYBlhQX7wt5Z10LDMLfaDpgd6LPQBHVvYKLrw":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[156,64,223,18,21,115,122,201,98,163,218,79,245,178,162,202],"nonce":[27,99,190,50,80,122,130,180,155,110,22,21,190,127,127,141]}","https://localhost:8443/requestHistory/hUkfsKeJfOQIk2x84wesTjtZwgWWxd4z_PRUSbV2xPs":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[7,52,96,114,132,177,50,89,20,35,151,67,72,246,5,35],"nonce":[86,166,93,228,207,147,181,96,246,73,43,186,25,224,219,109]}","https://localhost:8443/requestHistory/kKxA6p6syCHfbtiQg0-1WvLKoe6t77Y20KoqVZX-Vvo":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[234,144,176,130,237,211,235,170,0,161,127,219,208,169,15,174],"nonce":[151,36,170,69,206,129,247,14,186,62,197,122,98,145,167,80]}","https://localhost:8443/requestHistory/tlhWpMbLVh9hraBbRRmy7vhbJlNoiVGuWOBC9DtmQII":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[41,20,48,28,29,251,97,174,5,242,43,61,205,172,138,250],"nonce":[181,172,3,246,65,242,138,194,52,15,146,80,142,248,195,141]}","https://localhost:8443/requestHistory/teByzB4Y0sUXtEkRXs1e0j0n8R5-Go3wCUfz9qomdno":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[170,234,22,163,127,27,26,204,60,175,57,170,235,142,156,234],"nonce":[112,170,78,228,234,76,227,234,64,94,20,5,13,184,97,12]}","https://localhost:8443/requestHistory/qlHWe4KUGGVvMrVb4NYXrVBYt78NFbycw7FKl9DFve8":"{"redirect_uri":"https://localhost:8443/.well-known/solid/login","response_type":"id_token token","display":"page","scope":["openid"],"client_id":"2eb782b378ad78b40c8fe7b61034418e","state":[238,27,64,78,43,254,35,167,252,57,2,253,141,150,255,149],"nonce":[137,231,130,160,227,127,97,57,44,158,136,19,229,249,100,92]}"}
  • Try to log in

How did it work with 4.x series servers?

Login worked

What happened when you tried the same with the 5.0.0 beta?

Account is unauthorized

Any material that will help, logs, error messages, etc.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the login failure on the Solid server at localhost:8443 with the supplied solid-auth-client local-storage data, then compare the behavior with a 4.x server and the 5.0.0 beta. Done means that previously generated 4.x local-storage data no longer produces an unauthorized login.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, nodejs
Domain
authentication, backend
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.