CaramelFur / Picsur

An easy to use, selfhostable image sharing service like Imgur with built in converting
https://picsur.org/
GNU Affero General Public License v3.0
774 stars 41 forks source link

API - Permission denied #88

Open MickGe opened 2 months ago

MickGe commented 2 months ago

Hello!

I try to get a jwt token:

curl --location 'https://<domain>/api/user/login' \
--data '{
  "username": "admin", 
  "password": "<my super password>"                                
}'

The console responds:

{"success":false,"statusCode":403,"timestamp":"2024-05-29T20:12:21.696Z","timeMs":27,"data":{"type":"permission","message":"Permission denied"}}

And the log says:

POST /api/user/login) PermissionFailure: Permission denied - Unauthorized

I use the last version (in docker).

I tried to escape specials characters in the password, I created an admin user test with password test… Same error.