search

bigbluebutton / greenlight

A really simple end-user interface for your BigBlueButton server.
GNU Lesser General Public License v3.0
788 stars 3.8k forks source link

Checksum Error when connecting to Breakout Rooms #1289

Closed svoeth closed 4 years ago

svoeth commented 4 years ago

Hey,

i have a problem using Breakout Rooms with Greenlight. Everything else is working fine. The error is reproducible in our environment

BBB: 2.2.0 Greenlight v2: Docker - current upstream version from git (i checked for updates of both systems before posting this issue)

If i try to join a breakout room i get redirectet to the main page without any warning. The greenlight production.log only shows the redirection to /b (after not beeing connected to the breakout room)

In syslog i found these errors, stating that i have some sort of checksum error.

Apr 14 01:56:10 bbb run-prod.sh[5854]: 2020-04-14T01:56:10.505+02:00 DEBUG o.b.web.controllers.ApiController - ApiController#join
Apr 14 01:56:10 bbb run-prod.sh[5854]: 2020-04-14T01:56:10.506+02:00 INFO  o.b.api.ParamsProcessorUtil - CHECKSUM=517d558343936555bdb35200835a811b270608e32d17df79438c92ab3db7ce08 length=64
Apr 14 01:56:10 bbb run-prod.sh[5854]: 2020-04-14T01:56:10.506+02:00 INFO  o.b.api.ParamsProcessorUtil - SHA256 d99d6d059b64351afe5826ac398958c233db59ce37f38694d532a1112a0e367b
Apr 14 01:56:10 bbb run-prod.sh[5854]: 2020-04-14T01:56:10.506+02:00 INFO  o.b.api.ParamsProcessorUtil - query string after checksum removed: [fullName=User+Name&isBreakout=true&joinViaHtml5=true&meetingID=e9a277611cc6a06b50b006eb05a286fd7e5f1100-1586822158431&password=slidgEbTQxMF&redirect=true&userID=w_od8e4v5awevw-2]
Apr 14 01:56:10 bbb run-prod.sh[5854]: 2020-04-14T01:56:10.507+02:00 INFO  o.b.api.ParamsProcessorUtil - checksumError: query string checksum failed. our: [d99d6d059b64351afe5826ac398958c233db59ce37f38694d532a1112a0e367b], client: [517d558343936555bdb35200835a811b270608e32d17df79438c92ab3db7ce08]
Apr 14 01:56:10 bbb run-prod.sh[5854]: 2020-04-14T01:56:10.507+02:00 DEBUG o.b.web.controllers.ApiController - ApiController#invalid You did not pass the checksum security check
Apr 14 01:56:10 bbb run-prod.sh[5854]: 2020-04-14T01:56:10.507+02:00 DEBUG o.b.web.controllers.ApiController - JSON Errors [{"message":"You did not pass the checksum security check","key":"checksumError"}]
Apr 14 01:56:10 bbb run-prod.sh[5854]: 2020-04-14T01:56:10.507+02:00 DEBUG o.b.web.controllers.ApiController - Constructed logout URL https://bbb.computerwerk.org?errors=[%7B%22message%22:%22You%20did%20not%20pass%20the%20checksum%20security%20check%22,%22key%22:%22checksumError%22%7D]

So it seems the client is providing the mentioned checksum but bbb is expecting the sha256?!

Any idea of what is going wrong here?

farhatahmad commented 4 years ago

Hi @svoeth ,

This sounds more like a BigBlueButton issue then a Greenlight one. You'd be better off posting this in the BigBlueButton repo instead (https://github.com/bigbluebutton/bigbluebutton)