SolidOS / solidos

The operating system for Solid
https://solidos.solidcommunity.net/
MIT License
127 stars 19 forks source link

Access token is expired - Can't read preferences file while logged into private. auth-upgrade #67

Closed timbl closed 3 years ago

timbl commented 3 years ago

Loading into the browser https://timbl.com/timbl/Public/Test/Meeting/

https://timbl.com/timbl/Public/Test/Meeting/

the dev console shows that trying to read by preferences file gets a 401 error which does not seem to handled by the ew auth system.

Request URL: https://timbl.inrupt.net/settings/prefs.ttl Request Method: GET Status Code: 401 Unauthorized Remote Address: 35.168.136.65:443 Referrer Policy: strict-origin-when-cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://timbl.com Access-Control-Expose-Headers: Authorization, User, Location, Link, Vary, Last-Modified, ETag, Accept-Patch, Accept-Post, Updates-Via, Allow, WAC-Allow, Content-Length, WWW-Authenticate, MS-Author-Via, X-Powered-By Allow: OPTIONS, HEAD, GET, PATCH, POST, PUT, DELETE Connection: keep-alive Content-Length: 1039 Content-Type: text/html; charset=utf-8 Date: Thu, 07 Oct 2021 15:45:16 GMT ETag: W/"40f-sw8YFaHMcnYyLPDZQk//YYRLzL8" Link: ; rel="acl", ; rel="describedBy", http://www.w3.org/ns/ldp#Resource; rel="type" Vary: Accept, Authorization, Origin WWW-Authenticate: Bearer realm="https://inrupt.net", scope="openid webid", error="invalid_token", error_description="Access token is expired" X-Powered-By: solid-server/5.6.8 Accept: / Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9,fr;q=0.8 authorization: Bearer eyJhbGciOiJS [...truncated...] JaN4WarXgw Connection: keep-alive Host: timbl.inrupt.net Origin: https://timbl.com Referer: https://timbl.com/ sec-ch-ua: "Chromium";v="94", "Google Chrome";v="94", ";Not A Brand";v="99" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "macOS" Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site sec-gpc: 1

timbl commented 3 years ago

This is presumably just because inrupt.net is using the old auth