Skip to content

Bad Request when sending authenticated request with mashlib recipe #1

@angelo-v

Description

@angelo-v

Hi, when starting the default mashlib recipe it works fine and looks very promising, nice work so far, thanks a lot.

I am facing an issue when I change the root .acl from public access, to only give access to my WebID:

@prefix acl: <http://www.w3.org/ns/auth/acl#>.
@prefix foaf: <http://xmlns.com/foaf/0.1/>.

<#authorization>
    a               acl:Authorization;
    acl:agent  <https://angelo.veltens.org/profile/card#me>;
    acl:mode        acl:Read;
    acl:mode        acl:Write;
    acl:mode        acl:Append;
    acl:mode        acl:Delete;
    acl:mode        acl:Control;
    acl:accessTo    <./>;
    acl:default     <./>.

I can log in via mashlib, but I am getting 400 responses for any resource then.

The server log says:

2021-07-30T07:23:13.527Z [BaseHttpServerFactory] info: Received GET request for /
2021-07-30T07:23:13.531Z [WebAclAuthorizer] info: Reading ACL statements from http://localhost:3000/.acl
2021-07-30T07:23:13.533Z [WebAclAuthorizer] warn: Unauthenticated agent has no read permissions
2021-07-30T07:23:13.623Z [BaseHttpServerFactory] info: Received GET request for /mash.css
2021-07-30T07:23:13.625Z [BaseHttpServerFactory] info: Received GET request for /mashlib.min.js
2021-07-30T07:23:13.721Z [BaseHttpServerFactory] info: Received GET request for /mash.css.map
2021-07-30T07:23:13.726Z [WebAclAuthorizer] info: Reading ACL statements from http://localhost:3000/.acl
2021-07-30T07:23:13.728Z [WebAclAuthorizer] warn: Unauthenticated agent has no read permissions
2021-07-30T07:23:13.814Z [BaseHttpServerFactory] info: Received GET request for /mashlib.min.js.map
2021-07-30T07:23:13.817Z [WebAclAuthorizer] info: Reading ACL statements from http://localhost:3000/.acl
2021-07-30T07:23:13.818Z [WebAclAuthorizer] warn: Unauthenticated agent has no read permissions
2021-07-30T07:23:13.884Z [BaseHttpServerFactory] info: Received GET request for /
2021-07-30T07:23:13.885Z [BearerWebIdExtractor] warn: Error verifying WebID via Bearer access token: Expected object property webid, got:
[object Object]
2021-07-30T07:23:13.885Z [BaseHttpServerFactory] info: Received GET request for /profile/card
2021-07-30T07:23:13.886Z [BearerWebIdExtractor] warn: Error verifying WebID via Bearer access token: Expected object property webid, got:
[object Object]
2021-07-30T07:23:14.210Z [BaseHttpServerFactory] info: Received GET request for /favicon.ico
2021-07-30T07:23:17.653Z [BaseHttpServerFactory] info: Received GET request for /common/css/bootstrap.min.css
2021-07-30T07:23:17.659Z [WebAclAuthorizer] info: Reading ACL statements from http://localhost:3000/.acl
2021-07-30T07:23:17.660Z [WebAclAuthorizer] warn: Unauthenticated agent has no read permissions

I checked the request that gets a 400 response and it contains an authorization: Bearer ... header.

The WebID I am using is hosted on NSS 5.6.7.

I wonder if there is an incompatibility between the NSS auth and the CSS auth or the auth library that mashlib uses (solid-auth-client).

Anything I can do here?

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions