pglombardo / PasswordPusher

🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
https://docs.pwpush.com
Apache License 2.0
2.11k stars 358 forks source link

Ruby error in pod log when opening web page(http 500) #2811

Open Grommingen opened 1 day ago

Grommingen commented 1 day ago

Checklist

❓ Question

I filed this as a question as i don't know yet if its a bug or not.

I have deployed pwpush(i want to run on v.1.37.10) in our okd4 stage environment. When i goto the URL exposed by my ingress i get a 500 error. The pod logs say:

[cb6c7539-f9e4-4a87-822a-53dd5c70575b] method=GET path=/ format=*/* controller=PasswordsController action=new status=500 allocations=1457 duration=5.57 view=0.00 db=0.00 ip=myip forwarded_for=myip
[cb6c7539-f9e4-4a87-822a-53dd5c70575b]   
[cb6c7539-f9e4-4a87-822a-53dd5c70575b] ActionView::Template::Error (Decryption failed):
[cb6c7539-f9e4-4a87-822a-53dd5c70575b]     125:                 <div class='col'>
[cb6c7539-f9e4-4a87-822a-53dd5c70575b]     126:                     <div class="input-group">
[cb6c7539-f9e4-4a87-822a-53dd5c70575b]     127:                         <span class="input-group-text"><%= _('Passphrase Lockdown') %></span>
[cb6c7539-f9e4-4a87-822a-53dd5c70575b]     128:                         <%= f.text_field(:passphrase, { class: "form-control",
[cb6c7539-f9e4-4a87-822a-53dd5c70575b]     129:                                                         autocomplete: "off",
[cb6c7539-f9e4-4a87-822a-53dd5c70575b]     130:                                                         placeholder: _('Optional: Require recipients to enter a passphrase to view this push') }) %>
[cb6c7539-f9e4-4a87-822a-53dd5c70575b]     131:                     </div>
[cb6c7539-f9e4-4a87-822a-53dd5c70575b]   
[cb6c7539-f9e4-4a87-822a-53dd5c70575b] app/views/passwords/new.html.erb:128
[cb6c7539-f9e4-4a87-822a-53dd5c70575b] app/views/passwords/new.html.erb:32
[cb6c7539-f9e4-4a87-822a-53dd5c70575b] app/controllers/application_controller.rb:18:in `custom_set_locale_from_url'

I've generated PWPUSH_MASTER_KEY and SECRET_KEY_BASE and they are in encoded format as a secret. I've also tried it without these secrets but that did not help either. What does this custom_set_locale_from_url mean? Does it have anything to do with the master and secret keys?

I've tried to bump the versions we use but it does not help. Bumped versions to 1.40.0 and 1.42.0.

br Bjørn-Ivar Høibye - Redpill Linpro

github-actions[bot] commented 1 day ago

Hello @Grommingen, thanks for contributing to the Password Pusher community! We will respond as soon as possible.