nodeSolidServer / nodeSolidServer/node-solid-server

Token refresh 500

未关闭
#1,588 2 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

还没有人认领这个 Issue。

主要语言
JavaScript
星标
1.8k
派生
308
PR 合并指标
30 天内没有已合并 PR

描述

@michielbdejong I am seeing 500s on the /token endpoint when solid-auth-fetcher tries to renew the token, as well as a 401. The server logs are set to verbose, but don't show the 500, only the 401. I am not sure which headers I can safely include in a message, so opted to not include any. Do you have any suggestions about how to add additional logging to debug this issue more?

Client requests / responses:

POST https://myunderstory.com/token 500
data:
grant_type: refresh_token
refresh_token: REDACTED
client_id: REDACTED

GET https://ian.myunderstory.com/inbox/ 401

Server logs:

2021-04-02T21:24:54.369Z solid:server Display login-required for https://ian.myunderstory.com/private/apps/understory/garden/workspace/default/prefs.ttl
2021-04-02T21:24:56.115Z solid:ACL Using ACL https://ian.myunderstory.com/private/.acl for ./apps/understory/garden/workspace/default/prefs.ttl
2021-04-02T21:24:56.115Z solid:ACL 1 default authentications about https://ian.myunderstory.com/private/ in https://ian.myunderstory.com/private/.acl
2021-04-02T21:24:56.162Z solid:ACL accessDenied: checking access to https://ian.myunderstory.com/private/apps/understory/garden/workspace/default/prefs.ttl by null and origin https://understory.garden
2021-04-02T21:24:56.162Z solid:ACL 1 default authentications about https://ian.myunderstory.com/private/ in https://ian.myunderstory.com/private/.acl
2021-04-02T21:24:56.162Z solid:ACL Checking auth https://ian.myunderstory.com/private/.acl#owner with agent null
2021-04-02T21:24:56.162Z solid:ACL Agent or group: Fail: not public and not logged on.
2021-04-02T21:24:56.162Z solid:ACL The agent/group check fails
2021-04-02T21:24:56.162Z solid:ACL Check failed: User Unauthorized
2021-04-02T21:24:56.162Z solid:ACL accessDenied: modeURIorReasons: ["User Unauthorized"]
2021-04-02T21:24:56.162Z solid:ACL checking http://www.w3.org/ns/auth/acl#Read
2021-04-02T21:24:56.162Z solid:ACL MODE REQUIRED NOT ALLOWED: http://www.w3.org/ns/auth/acl#Read Denying with User Unauthorized
2021-04-02T21:24:56.162Z solid:ACL Read access denied to (none): undefined - Unauthorized
2021-04-02T21:24:56.162Z solid:server Error page because of: { Error: Unauthorized
at AuthenticatedRequest.unauthorized (/opt/solid/node_modules/@solid/oidc-rs/src/AuthenticatedRequest.js:761:19)
at validateExpiry (/opt/solid/node_modules/@solid/oidc-rs/src/AuthenticatedRequest.js:627:22)
handled: true,
statusCode: 401,
realm: 'https://myunderstory.com',
error: 'invalid_token',
error_description: 'Access token is expired',
error_uri: undefined }

贡献指南

打开贡献指南

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

调研方向

从 /token 端点开始,跟踪来自 solid-auth-fetcher 的 refresh-token 请求。将其 500 响应与显示的 401 堆栈跟踪进行比较,尤其关注 validateExpiry 和 unauthorized 附近的 AuthenticatedRequest.js。完成的标准是能够复现该失败,并且相关错误会显示在服务器日志中。

由索引模型根据 Issue 内容生成。

评估

技术栈
javascript, nodejs
领域
api, authentication, backend
Issue 类型
缺陷
难度
4/5
预计耗时
3-5 天
活跃度
停滞
描述清晰度
需要澄清
新手友好度
35/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。