Gateway Panics - Githubissues

owncloud / ocis

:atom_symbol: ownCloud Infinite Scale Stack

https://doc.owncloud.com/ocis/next/

Apache License 2.0

1.42k stars 183 forks source link

Gateway Panics #10594

Closed kobergj closed 4 days ago

kobergj commented 1 week ago

The gateway service panics when the reva token is not valid. This is because all grpc endpoints on gateway are unprotected. Two steps to fix it properly:

Avoid calling ContextMustGetUser in gateway and call ContextGetUser instead. Return an error if the user is not available.
Adjust UnprotectedEndpoints method of gateway service to return only specific endpoints, not all of them (not in scope of this ticket)

rhafer commented 5 days ago

@kobergj I guess this can be closed?