-
Notifications
You must be signed in to change notification settings - Fork 11
Open
Description
Hi, when starting the default mashlib recipe it works fine and looks very promising, nice work so far, thanks a lot.
I am facing an issue when I change the root .acl
from public access, to only give access to my WebID:
@prefix acl: <http://www.w3.org/ns/auth/acl#>.
@prefix foaf: <http://xmlns.com/foaf/0.1/>.
<#authorization>
a acl:Authorization;
acl:agent <https://angelo.veltens.org/profile/card#me>;
acl:mode acl:Read;
acl:mode acl:Write;
acl:mode acl:Append;
acl:mode acl:Delete;
acl:mode acl:Control;
acl:accessTo <./>;
acl:default <./>.
I can log in via mashlib, but I am getting 400
responses for any resource then.
The server log says:
2021-07-30T07:23:13.527Z [BaseHttpServerFactory] info: Received GET request for /
2021-07-30T07:23:13.531Z [WebAclAuthorizer] info: Reading ACL statements from http://localhost:3000/.acl
2021-07-30T07:23:13.533Z [WebAclAuthorizer] warn: Unauthenticated agent has no read permissions
2021-07-30T07:23:13.623Z [BaseHttpServerFactory] info: Received GET request for /mash.css
2021-07-30T07:23:13.625Z [BaseHttpServerFactory] info: Received GET request for /mashlib.min.js
2021-07-30T07:23:13.721Z [BaseHttpServerFactory] info: Received GET request for /mash.css.map
2021-07-30T07:23:13.726Z [WebAclAuthorizer] info: Reading ACL statements from http://localhost:3000/.acl
2021-07-30T07:23:13.728Z [WebAclAuthorizer] warn: Unauthenticated agent has no read permissions
2021-07-30T07:23:13.814Z [BaseHttpServerFactory] info: Received GET request for /mashlib.min.js.map
2021-07-30T07:23:13.817Z [WebAclAuthorizer] info: Reading ACL statements from http://localhost:3000/.acl
2021-07-30T07:23:13.818Z [WebAclAuthorizer] warn: Unauthenticated agent has no read permissions
2021-07-30T07:23:13.884Z [BaseHttpServerFactory] info: Received GET request for /
2021-07-30T07:23:13.885Z [BearerWebIdExtractor] warn: Error verifying WebID via Bearer access token: Expected object property webid, got:
[object Object]
2021-07-30T07:23:13.885Z [BaseHttpServerFactory] info: Received GET request for /profile/card
2021-07-30T07:23:13.886Z [BearerWebIdExtractor] warn: Error verifying WebID via Bearer access token: Expected object property webid, got:
[object Object]
2021-07-30T07:23:14.210Z [BaseHttpServerFactory] info: Received GET request for /favicon.ico
2021-07-30T07:23:17.653Z [BaseHttpServerFactory] info: Received GET request for /common/css/bootstrap.min.css
2021-07-30T07:23:17.659Z [WebAclAuthorizer] info: Reading ACL statements from http://localhost:3000/.acl
2021-07-30T07:23:17.660Z [WebAclAuthorizer] warn: Unauthenticated agent has no read permissions
I checked the request that gets a 400
response and it contains an authorization: Bearer ...
header.
The WebID I am using is hosted on NSS 5.6.7.
I wonder if there is an incompatibility between the NSS auth and the CSS auth or the auth library that mashlib uses (solid-auth-client).
Anything I can do here?
Metadata
Metadata
Assignees
Labels
No labels