Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-17936

Cannot authenticate on REST with a subwiki user with path based access

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Critical
    • None
    • 12.7.1
    • REST
    • None
    • Unknown

    Description

      Reproduction steps:

      • Create a subwiki named "sub" opened for global and local users
      • Create a local user on the subwiki named SubUser with password SubPassword
      • Create a local page "SubPage" only viewable by SubUser
      • Call the following command to access the page:
        curl -u SubUser:SubPassword http://localhost:8080/xwiki/rest/wikis/sub/spaces/SubPage/pages/WebHome
        

      Expected result:

      • You obtain the information about the page

      Obtained result:

      • You get a 401 authentication failure and you have the following log in the server:
        2020-10-13 09:53:23,431 [qtp783286238-21 - http://localhost:8080/xwiki/rest/wikis/sub/spaces/SubPage/pages/WebHome] WARN  nticationFailureLoggerListener - Authentication failure with login [SubUser] 
        2020-10-13 09:53:23,439 [qtp783286238-21 - http://localhost:8080/xwiki/rest/wikis/sub/spaces/SubPage/pages/WebHome] WARN  nticationFailureLoggerListener - Authentication failure with login [SubUser] 
        2020-10-13 09:53:23,446 [qtp783286238-21 - http://localhost:8080/xwiki/rest/wikis/sub/spaces/SubPage/pages/WebHome] WARN  nticationFailureLoggerListener - Authentication failure with login [SubUser] 
        oct. 13, 2020 9:53:23 AM org.xwiki.rest.internal.XWikiSecretVerifier verify
        AVERTISSEMENT: Cannot authenticate 'SubUser'.
        

      Attachments

        Activity

          People

            Unassigned Unassigned
            surli Simon Urli
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: