Project

General

Profile

Actions
Copy link

Feature #17583

closed

Remote controller forwards trusted client aware calls on a federated scenario

Added by Lucas Di Pentima about 3 years ago. Updated about 2 years ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Lucas Di Pentima
Category:
API
Target version:
2022-02-02 sprint
Story points:
-
Release:
Arvados 2.4.0
Release relationship:
Auto

Description

When a client makes for example a token list request to a remote controller using a federated token, the remote controller responds with a "Forbidden: this API client cannot manipulate other clients' access tokens." error message.

This most probably be due to the fact that federated tokens are cached on the remote controller's database but not linked to a trusted client.

The right solution would probably be to make controller forward those requests to the token issuing cluster so that from the client's perspective the operation is transparent.

Subtasks 2 (1 open — 1 closed)

Task #17872: Review 17583-federated-token-reqsResolvedLucas Di Pentima01/21/2022Actions
Task #17910: investigateNewPeter AmstutzActions

Related issues

Related to Arvados - Bug #17785: [controller/api] "Forbidden: this API client cannot manipulate other clients' access tokens." on federated login clusters (2.2.0 regression)ResolvedLucas Di Pentima11/23/2021Actions
Actions
Copy link
 #1

Updated by Ward Vandewege almost 3 years ago

  • Related to Bug #17785: [controller/api] "Forbidden: this API client cannot manipulate other clients' access tokens." on federated login clusters (2.2.0 regression) added
Actions
Copy link
 #2

Updated by Peter Amstutz almost 3 years ago

  • Target version changed from To Be Groomed to 2021-07-21 sprint
Actions
Copy link
 #3

Updated by Peter Amstutz almost 3 years ago

  • Assigned To set to Peter Amstutz
Actions
Copy link
 #4

Updated by Peter Amstutz almost 3 years ago

  • Target version changed from 2021-07-21 sprint to 2021-08-04 sprint
Actions
Copy link
 #5

Updated by Peter Amstutz almost 3 years ago

  • Target version changed from 2021-08-04 sprint to 2021-08-18 sprint
Actions
Copy link
 #6

Updated by Peter Amstutz over 2 years ago

  • Target version changed from 2021-08-18 sprint to 2021-09-01 sprint
Actions
Copy link
 #7

Updated by Peter Amstutz over 2 years ago

  • Target version changed from 2021-09-01 sprint to 2021-09-15 sprint
Actions
Copy link
 #8

Updated by Peter Amstutz over 2 years ago

  • Assigned To deleted (Peter Amstutz)
Actions
Copy link
 #9

Updated by Peter Amstutz over 2 years ago

  • Assigned To set to Lucas Di Pentima
Actions
Copy link
 #10

Updated by Lucas Di Pentima over 2 years ago

  • Target version changed from 2021-09-15 sprint to 2021-09-29 sprint
Actions
Copy link
 #11

Updated by Peter Amstutz over 2 years ago

  • Target version changed from 2021-09-29 sprint to 2021-10-13 sprint
Actions
Copy link
 #12

Updated by Lucas Di Pentima over 2 years ago

  • Target version changed from 2021-10-13 sprint to 2021-10-27 sprint
Actions
Copy link
 #13

Updated by Lucas Di Pentima over 2 years ago

  • Target version changed from 2021-10-27 sprint to 2021-11-10 sprint
Actions
Copy link
 #14

Updated by Peter Amstutz over 2 years ago

  • Target version changed from 2021-11-10 sprint to 2021-11-24 sprint
Actions
Copy link
 #15

Updated by Lucas Di Pentima over 2 years ago

  • Target version changed from 2021-11-24 sprint to 2021-12-08 sprint
Actions
Copy link
 #16

Updated by Peter Amstutz over 2 years ago

  • Target version changed from 2021-12-08 sprint to 2022-01-05 sprint
Actions
Copy link
 #17

Updated by Peter Amstutz over 2 years ago

  • Target version changed from 2022-01-05 sprint to 2022-01-19 sprint
Actions
Copy link
 #18

Updated by Lucas Di Pentima over 2 years ago

  • Target version changed from 2022-01-19 sprint to 2022-02-02 sprint
Actions
Copy link
 #19

Updated by Lucas Di Pentima over 2 years ago

  • Status changed from New to In Progress
Actions
Copy link
 #20

Updated by Lucas Di Pentima over 2 years ago

Updates at 3c18a9d - branch 17583-federated-token-reqs
Test run: developer-run-tests: #2887

  • Expands test to expose a pending bug.
  • Forwards list requests.
  • Adds code to honor the bypass_federation as done with the users.
Actions
Copy link
 #21

Updated by Ward Vandewege about 2 years ago

Lucas Di Pentima wrote:

Updates at 3c18a9d - branch 17583-federated-token-reqs
Test run: developer-run-tests: #2887

  • Expands test to expose a pending bug.
  • Forwards list requests.
  • Adds code to honor the bypass_federation as done with the users.

Excellent! LGTM, thank you.

Actions
Copy link
 #22

Updated by Lucas Di Pentima about 2 years ago

  • % Done changed from 50 to 100
  • Status changed from In Progress to Resolved

Applied in changeset arvados-private:commit:arvados|9d095072a57089b4858b632199f3b57871458dee.

Actions
Copy link
 #23

Updated by Peter Amstutz about 2 years ago

  • Release set to 46
Actions
Copy link

Also available in: Atom PDF