Steps

Open two tabs
- Tab 1: For editing an object in the domain of another user (e.g. https://u1.objecthub.io/notmyuser/...
- Tab 2: Just open the recent tab of the Browser
Make a change to the object in tab 1

Findings

An Unauthorized: No secret matching the supplied secret. error is reported:

Exception reported: Unauthorized: No secret matching the supplied secret.
  Secret: [Token.UNSPECIFIED_TOKEN]
  Node [Nx.reference(https://objecthub.io/hub/users/main/~objecthub/home/my/~*0/it/.n/Services1/.n/Configuration)]
  Message:  [PullVersionsMessageData [forNode=Nx.reference(https://objecthub.io/hub/users/main/~objecthub/home/my/~*0/it/.n/Services1/.n/Configuration), lastReceivedVersion=Nx.reference(https://v.objecthub.io/hub/users/main/~objecthub/home/my/~*0/https_/objecth…/hub/users/main/~objecthub/home/my/~*0/it/.n/Services1/.n/_Configuration/2)]]
  Possible identifications of accepted authorizations are [[<unidentified>, <unidentified>, master-secret]]
baseJs.js:90 java.lang.Exception: Unauthorized: No secret matching the supplied secret.
  Secret: [Token.UNSPECIFIED_TOKEN]
  Node [Nx.reference(https://objecthub.io/hub/users/main/~objecthub/home/my/~*0/it/.n/Services1/.n/Configuration)]
  Message:  [PullVersionsMessageData [forNode=Nx.reference(https://objecthub.io/hub/users/main/~objecthub/home/my/~*0/it/.n/Services1/.n/Configuration), lastReceivedVersion=Nx.reference(https://v.objecthub.io/hub/users/main/~objecthub/home/my/~*0/https_/objecth…/hub/users/main/~objecthub/home/my/~*0/it/.n/Services1/.n/_Configuration/2)]]
  Possible identifications of accepted authorizations are [[<unidentified>, <unidentified>, master-secret]]<br />
Unknown.pM(0.js@113)<br/>
Unknown.w(0.js@365)<br/>
Unknown.jz(0.js@319)<br/>
Unknown._.gb(0.js@244)<br/>
Unknown.ez(0.js@323)<br/>
Unknown.Ru(0.js@68)<br/>
Unknown._.x(0.js@474)<br/>
Unknown._.P(0.js@269)<br/>
Unknown._.P(0.js@358)<br/>
Unknown._.gb(0.js@436)<br/>
Unknown.jz(0.js@289)<br/>
Unknown._.gb(0.js@476)<br/>
Unknown._.gb(0.js@82)<br/>
Unknown.jz(0.js@289)<br/>
Unknown.jz(0.js@351)<br/>
Unknown._.gb(0.js@244)<br/>
Unknown.ez(0.js@323)<br/>
Unknown.Ru(0.js@68)<br/>
Unknown._.x(0.js@474)<br/>
Unknown._.P(0.js@269)<br/>
Unknown._.P(0.js@358)<br/>
Unknown._.gb(0.js@436)<br/>
Unknown.jz(0.js@289)<br/>
Unknown._.gb(0.js@476)<br/>
Unknown.ez(0.js@323)<br/>
Unknown._.P(0.js@409)<br/>
Unknown._.P(0.js@358)<br/>
Unknown._.gb(0.js@436)<br/>
Unknown.jz(0.js@289)<br/>
Unknown._.gb(0.js@476)<br/>
Unknown._.ci(0.js@88)<br/>
Unknown._.G(0.js@210)<br/>
Unknown._.G(0.js@190)<br/>
Unknown._.fi(0.js@195)<br/>
Unknown._.G(0.js@427)<br/>
Unknown.$z(0.js@75)<br/>
Unknown.Dqc(0.js@460)<br/>
Unknown._.G(0.js@440)<br/>
Unknown.$z(0.js@75)<br/>
Unknown.Dqc(0.js@460)<br/>
Unknown.tT(0.js@26)<br/>
Unknown.Xzc(0.js@377)<br/>
Unknown._.Q(0.js@322)<br/>
Unknown.FEc(0.js@129)<br/>
Unknown._.Q(0.js@118)<br/>
Unknown.s5(0.js@116)<br/>
Unknown._.Pc(0.js@32)<br/>
Unknown._.yh(0.js@14)<br/>
Unknown.eval(0.js@323)<br/>
Unknown.eval(0.js@243)<br/>
-end of stack trace

Exception reported: Unauthorized: No secret matching the supplied secret. Secret: [Token.UNSPECIFIED_TOKEN] Node [Nx.reference(https://objecthub.io/hub/users/main/~objecthub/home/my/~*0/it/.n/Services1/.n/Configuration/baseJs)] Message: [PullVersionsMessageData [forNode=Nx.reference(https://objecthub.io/hub/users/main/~objecthub/home/my/~*0/it/.n/Services1/.n/Configuration/baseJs), lastReceivedVersion=Nx.reference(https://v.objecthub.io/hub/users/main/~objecthub/home/my/~*0/https_/objecth…ers/main/~objecthub/home/my/~*0/it/.n/Services1/.n/Configuration/_baseJs/9)]] Possible identifications of accepted authorizations are [[<unidentified>, <unidentified>, master-secret]] baseJs.js:90 java.lang.Exception: Unauthorized: No secret matching the supplied secret. Secret: [Token.UNSPECIFIED_TOKEN] Node [Nx.reference(https://objecthub.io/hub/users/main/~objecthub/home/my/~*0/it/.n/Services1/.n/Configuration/baseJs)] Message: [PullVersionsMessageData [forNode=Nx.reference(https://objecthub.io/hub/users/main/~objecthub/home/my/~*0/it/.n/Services1/.n/Configuration/baseJs), lastReceivedVersion=Nx.reference(https://v.objecthub.io/hub/users/main/~objecthub/home/my/~*0/https_/objecth…ers/main/~objecthub/home/my/~*0/it/.n/Services1/.n/Configuration/_baseJs/9)]] Possible identifications of accepted authorizations are [[<unidentified>, <unidentified>, master-secret]] Unknown.pM(0.js@113) Unknown.w(0.js@365) Unknown.jz(0.js@319) Unknown._.gb(0.js@244) Unknown.ez(0.js@323) Unknown.Ru(0.js@68) Unknown._.x(0.js@474) Unknown._.P(0.js@269) Unknown._.P(0.js@358) Unknown._.gb(0.js@436) Unknown.jz(0.js@289) Unknown._.gb(0.js@476) Unknown._.gb(0.js@82) Unknown.jz(0.js@289) Unknown.jz(0.js@351) Unknown._.gb(0.js@244) Unknown.ez(0.js@323) Unknown.Ru(0.js@68) Unknown._.x(0.js@474) Unknown._.P(0.js@269) Unknown._.P(0.js@358) Unknown._.gb(0.js@436) Unknown.jz(0.js@289) Unknown._.gb(0.js@476) Unknown.ez(0.js@323) Unknown._.P(0.js@409) Unknown._.P(0.js@358) Unknown._.gb(0.js@436) Unknown.jz(0.js@289) Unknown._.gb(0.js@476) Unknown._.ci(0.js@88) Unknown._.G(0.js@210) Unknown._.G(0.js@190) Unknown._.fi(0.js@195) Unknown._.G(0.js@427) Unknown.$z(0.js@75) Unknown.Dqc(0.js@460) Unknown._.G(0.js@440) Unknown.$z(0.js@75) Unknown.Dqc(0.js@460) Unknown.tT(0.js@26) Unknown.Xzc(0.js@377) Unknown._.Q(0.js@322) Unknown.FEc(0.js@129) Unknown._.Q(0.js@118) Unknown.s5(0.js@116) Unknown._.Pc(0.js@32) Unknown._.yh(0.js@14) Unknown.eval(0.js@323) Unknown.eval(0.js@243) -end of stack trace

objecthub-io / ObjectHub

"Unauthorized: No secret matching the supplied secret." Reported when objects from other users in recents #276

Steps

Findings