marcoXbresciani / TKCompanionApp

A short and small helper for Toyota Kata practitioners - If you're reading this here on GitHub, please note that main repository is now Codeberg: https://codeberg.org/marco.bresciani/TKCompanionApp
GNU General Public License v3.0
3 stars 1 forks source link

Download links error - forbidden #8

Closed g-strick closed 2 years ago

g-strick commented 2 years ago

I am getting the below error code for all downloads:

Forbidden
You don't have permission to access /~mrother/KATA_Files/5Q_Card.pdf on this server.

Additionally, a 302 Found error was encountered while trying to use an ErrorDocument to handle the request.
marcoXbresciani commented 2 years ago

Hello, sorry for the late reply. Thanks for the first real issue, and for using my app. 🥇

I'm going to check the link and see what I can do.

Could you please explain me the 302 and ErrorDocument part?

marcoXbresciani commented 2 years ago

I'm trying with version 2.0.1 from my device and it seems working fine. Since the link is HTTP instead of HTTPS, Chrome browser is complaining about security, but once confirmed it downloads the file. Also Tor browser, same device, is working fine for me. Browsing from desktop, the link http://www-personal.umich.edu/~mrother/KATA_Files/5Q_Card.pdf from the Supporting Materials page seems working as well. Could have been an update on the university server or something like that?

marcoXbresciani commented 2 years ago

Same issue is present on a Xiaomi device with Chrome browser. bug8 (2) bug8 (1)

marcoXbresciani commented 2 years ago

It could be that the bug is due to the fact that the Toyota Kata Website is in HTTP. Managing the thing inside a webview, could be that the Android security does not allow HTTP web sites anymore. I'm going to experiment by changing the way I open the files for download.

marcoXbresciani commented 2 years ago

@g-strick could you please try version 2.0.2 to check if you see the app error message (I've tried to catch it) when clicking the download button? Meanwhile, I've asked to move the Toyota Kata website from HTTP to HTTPS. Not sure I can do much more, unless embedding the files and "downloading" them from inside the app itself.

marcoXbresciani commented 2 years ago

Currently, the Toyota Kata website seems not reachable due to HTTPS misconfiguration.

See https://www-personal.umich.edu/~mrother/Homepage.html vs. http://www-personal.umich.edu/~mrother/Homepage.html

Behaviour also depends on the web browser (or web view) used for reaching the file(s).

marcoXbresciani commented 2 years ago

This problem depends on the fact that the Toyota Kata Website does not work on HTTPS and opening a webview to a file via HTTP is often forbidden by most recent devices and updates for security reason. Plan is to embed those files inside the application, if possible, while waiting for the transition of the Toyota Kata Website to HTTPS.

g-strick commented 2 years ago

I am running version 2.1.0 on pixel 6 in brave browser and I am still getting the same issue. Screenshot_20220613-123156

marcoXbresciani commented 2 years ago

Thanks @g-strick. I think I can't do much. Are you able to visit the same links from any browser without the app? Try from your Brave itself with the direct link, without using the app. This, for example http://www-personal.umich.edu/~mrother/Homepage.html The result depends on the browser, but in many cases there is the same error. For me is not working on Mull browser, both HTTP and HTTPS. I've tried changing the way I link the files, but this behaviour is the result of a HTTP-only website. I still have to try embedding the files in the app, but then the app would need write permissions on files. I'm trying to avoid permissions as much as possible.

g-strick commented 2 years ago

I just checked and it is not working on brave browser on my mac either. It is working in safari though so I agree that it is a browser issue.

marcoXbresciani commented 2 years ago

Thank you @g-strick . I've already informed Mike Rother about the issue and I think he had to cope with the website managers of the university of Michigan. I'd close this, trying to anyway find a possible alternative to download the files. Probably aiming to the Wayback Machine of Internet Archive would work. Something like https://web.archive.org/web/20210221162055/http://www-personal.umich.edu/~mrother/KATA_Files/5Q_Card.pdf