webcompat / web-bugs

A place to report bugs on websites.
https://webcompat.com
Mozilla Public License 2.0
747 stars 68 forks source link

schedulesdirect.org - see bug description #64062

Closed phantasyconcepts closed 3 years ago

phantasyconcepts commented 3 years ago

URL: https://schedulesdirect.org/

Browser / Version: tv_grabber_zz_sdjson Operating System: Linux Tested Another Browser: Yes Chrome

Problem type: Something else Description: xmltv sdjson client for Linux cannot get token. SSL Certificate? Steps to Reproduce: This retries until I get locked out.

POST https://json.schedulesdirect.org/20141201/token ==> 400 Bad Request
$VAR1 = bless( {
                 '_request' => bless( {
                                        '_content' => '{"password":"*********","username":"g***r@gmail.com"}',
                                        '_uri' => bless( do{\(my $o = 'https://json.schedulesdirect.org/20141201/token')}, 'URI::https' ),
                                        '_method' => 'POST',
                                        '_headers' => bless( {
                                                               'user-agent' => 'tv_grab_zz_sdjson 0.6.3',
                                                               'content-type' => 'application/json',
                                                               'accept-encoding' => 'gzip, x-gzip, deflate, x-bzip2, bzip2',
                                                               'content-length' => 94,
                                                               '::std_case' => {
                                                                                 'if-ssl-cert-subject' => 'If-SSL-Cert-Subject'
                                                                               }
                                                             }, 'HTTP::Headers' ),
                                        '_uri_canonical' => $VAR1->{'_request'}{'_uri'}
                                      }, 'HTTP::Request' ),
                 '_content' => '{"response":"INVALID_USER","code":4003,"serverID":"20141201.web.1","message":"Invalid username or token has expired.","datetime":"2020-12-20T15:18:29Z"}',
                 '_msg' => 'Bad Request',
                 '_protocol' => 'HTTP/1.1',
                 '_headers' => bless( {
                                        'date' => 'Sun, 20 Dec 2020 15:18:29 GMT',
                                        'client-ssl-cipher' => 'ECDHE-RSA-AES128-GCM-SHA256',
                                        'client-date' => 'Sun, 20 Dec 2020 15:18:29 GMT',
                                        'connection' => 'close',
                                        '::std_case' => {
                                                          'client-response-num' => 'Client-Response-Num',
                                                          'client-ssl-cert-issuer' => 'Client-SSL-Cert-Issuer',
                                                          'client-transfer-encoding' => 'Client-Transfer-Encoding',
                                                          'client-ssl-cert-subject' => 'Client-SSL-Cert-Subject',
                                                          'client-peer' => 'Client-Peer',
                                                          'client-ssl-socket-class' => 'Client-SSL-Socket-Class',
                                                          'schedulesdirect-serverid' => 'Schedulesdirect-Serverid',
                                                          'client-ssl-cipher' => 'Client-SSL-Cipher',
                                                          'client-date' => 'Client-Date'
                                                        },
                                        'client-response-num' => 1,
                                        'content-type' => 'application/json;charset=UTF-8',
                                        'client-ssl-socket-class' => 'IO::Socket::SSL',
                                        'client-ssl-cert-subject' => '/CN=*.json.schedulesdirect.org',
                                        'client-transfer-encoding' => [
                                                                        'chunked'
                                                                      ],
                                        'client-ssl-cert-issuer' => '/C=US/O=Amazon/OU=Server CA 1B/CN=Amazon',
                                        'client-peer' => '54.175.136.81:443',
                                        'schedulesdirect-serverid' => '20141201.web.1',
                                        'server' => 'nginx/1.18.0 (Ubuntu)'
                                      }, 'HTTP::Headers' ),
                 '_rc' => 400
               }, 'HTTP::Response' );
Server (ID=20141201.web.1 Time=2020-12-20T15:18:29Z) returned an error:
Invalid username or token has expired. (4003/INVALID_USER)
Retry in 10 seconds...

It looks like the token request is failing because you enabled an ssl encryption. I used to use EPG123 on Windows, but I upgraded my hardware and Windows 7 will no longer run. I am now running centos 8. I am sure it is a configuration issue, but any help you guys could give would be great. I have to get my MythTV up before New Year's Day so I can watch Dr. Who. Hey, not all Americans have their priorities out of whack!

Browser Configuration
  • gfx.webrender.all: false
  • gfx.webrender.blob-images: true
  • gfx.webrender.enabled: false
  • image.mem.shared: true
  • buildID: 20200925201429
  • channel: default
  • hasTouchScreen: false
  • mixed active content blocked: false
  • mixed passive content blocked: false
  • tracking content blocked: false

View console log messages

From webcompat.com with ❤️

phantasyconcepts commented 3 years ago

In the post, I removed username and password hash for security reasons.

softvision-oana-arbuzov commented 3 years ago

@cipriansv, could you please test this on your Linux machine and see if the issue is reproducible?

cipriansv commented 3 years ago

@denschub, could you please take a look at this one?

softvision-oana-arbuzov commented 3 years ago

For me the page loads correctly both on Windows and Linux and I'm able to create an account and sign in successfully. image image image

According to SSL Labs: image

@karlcow can you take a look on this ?

denschub commented 3 years ago

Browser / Version: tv_grabber_zz_sdjson

Hey @phantasyconcepts - thanks for the report, but here, we focus on bugs inside webbrowsers, not about bugs in Linux packages. Please get in touch with the maintainers of xmltv to work that out. :)