search

SBU-BMI / quip_distro

BSD 3-Clause "New" or "Revised" License
31 stars 16 forks source link

The OAuth client was not found. #137

Closed tdiprima closed 7 years ago

tdiprima commented 7 years ago

I'm running quip_distro on Ubuntu 16. Open up http://localhost/ in Chrome, and you get this error. I'm looking online for solutions. According to stackoverflow, one of the things it says is to make sure there are no spaces in client_id or secret.

Can someone please tell me which code set is doing the authentication? @lastlegion @sharmaashish

screen shot 2017-06-13 at 3 32 55 pm

sharmaashish commented 7 years ago

https://github.com/camicroscope/Security

Did you compete Step 1 and obtain the tokens from Google?

tdiprima commented 7 years ago

Nope. Didn't know about 'em because I'm going off the instructions in quip_distro. We should probably add a link to those instructions, and anything else the user wouldn't know about without a priori knowledge.

Because that's the first thing they're going to get hit with, is that error, if they don't see those instructions.

tdiprima commented 7 years ago

In a case where a person is trying out this software stack on their local machine, could you tell me how they can turn security off? I asked @bridge2014 , and he recommended I ask @lastlegion . Thanks!

lastlegion commented 7 years ago

@tdiprima https://github.com/camicroscope/Security/tree/release#disabling-authentication

tdiprima commented 7 years ago

I just saw the commit to unsecure just now. Thank you for the README link @lastlegion. I'm sorry about that; I missed it.

tdiprima commented 7 years ago

I followed the instructions and it's still requiring authentication. Next, I restarted the container and verified that both files were still updated. And it's still requiring authentication.

sharmaashish commented 7 years ago

What was the problem and what was the resolution?

tdiprima commented 7 years ago

Disabling Authentication

@sharmaashish I'm glad you asked.

We originally said you had to edit two files in Docker container quip-viewer:

Some info was missing from our instructions:

  1. You have to go back into authenticate.php, because after you uncomment that section, it would then be populated with the "real" fake API key
  2. There was another section of index.php that you had to modify... removing the if-block starting with if (!isset($_SESSION["api_key"])) { ... }.
  3. Finally, you don't go directly to your instance of quip's home page. You need to go to /select.php to bypass the authentication.

Since then, @lastlegion has very nicely made it easier for the user, so that all you have to do is toggle it on and off.

Hope this helps.