Issue #9578: Token server does not validate scope data - Container Support - Pulp

Actions

Send by e-mail Copy link

Issue #9578

closed

Token server does not validate scope data

Added by lmjachky about 3 years ago. Updated almost 3 years ago.

Status:

CLOSED - DUPLICATE

Priority:

Normal

Assignee:

Sprint/Milestone:

2.11.0

Start date:

Due date:

Estimated time:

Severity:

2. Medium

Platform Release:

OS:

Triaged:

Yes

Groomed:

Sprint Candidate:

Tags:

Easy Fix

Sprint:

Quarter:

Description

Ticket moved to GitHub: "pulp/pulp_container/509":https://github.com/pulp/pulp_container/issues/509

Issue a request with a missing scope type and action (scope=repository:XXX:pull):

http http://pulp3-source-fedora34.localhost.example.com/token/?service="localhost:24817"'&'scope="57e0dd27-1b66-4e20-978a-9e195ae12622"

Receive an HTTP 500 response:

<!doctype html>
<html lang="en">
<head>
  <title>Server Error (500)</title>
</head>
<body>
  <h1>Server Error (500)</h1><p></p>
</body>
</html>

Traceback:

  File "/usr/local/lib/pulp/lib64/python3.9/site-packages/django/views/decorators/csrf.py", line 54, in wrapped_view
    return view_func(*args, **kwargs)
  File "/usr/local/lib/pulp/lib64/python3.9/site-packages/django/views/generic/base.py", line 70, in view
    return self.dispatch(request, *args, **kwargs)
  File "/usr/local/lib/pulp/lib64/python3.9/site-packages/rest_framework/views.py", line 509, in dispatch
    response = self.handle_exception(exc)
  File "/usr/local/lib/pulp/lib64/python3.9/site-packages/rest_framework/views.py", line 469, in handle_exception
    self.raise_uncaught_exception(exc)
  File "/usr/local/lib/pulp/lib64/python3.9/site-packages/rest_framework/views.py", line 480, in raise_uncaught_exception
    raise exc
  File "/usr/local/lib/pulp/lib64/python3.9/site-packages/rest_framework/views.py", line 506, in dispatch
    response = handler(request, *args, **kwargs)
  File "/home/vagrant/devel/pulp_container/pulp_container/app/registry_api.py", line 432, in get
    data = authorization_service.generate_token()
  File "/home/vagrant/devel/pulp_container/pulp_container/app/authorization.py", line 74, in generate_token
    access = self.determine_access()
  File "/home/vagrant/devel/pulp_container/pulp_container/app/authorization.py", line 139, in determine_access
    typ, name, actions = self.scope.split(":")
ValueError: not enough values to unpack (expected 3, got 1)