Publishing from OwnYourSwarm has been unsuccessful

[tamaracks]

I set up OwnYourSwarm, but it hasn't been able to publish anything to my Wordpress micropub endpoint yet. I do have version 1.1 of the plugin installed.

When I try have OwnYourSwarm try again for the last checkin from the dashboard, it shows this response:

HTTP/1.1 401 Unauthorized
Date: Tue, 02 May 2017 00:48:44 GMT
Server: Apache
Link: <https://tokens.indieauth.com/token>; rel="token_endpoint", <https://www.darkglass.org/wp-json/webmention/1.0/endpoint>; rel="webmention", <https://www.darkglass.org/wp-json/webmention/1.0/endpoint>; rel="http://webmention.org/"
Content-Type: application/json; charset=UTF-8
Vary: Accept-Encoding
Transfer-Encoding: chunked

"missing access token"

It also shows a Swarm Checkin Object:

{
    "id": "5907d03dee628b2f2d74ee77",
    "createdAt": 1493684285,
    "type": "checkin",
    "entities": [],
    "shout": "Gotta get my Rita's fix!",
    "timeZoneOffset": -240,
    "user": {
        "id": "1133595",
        "firstName": "Tamara",
        "lastName": "Ng",
        "gender": "female",
        "relationship": "self",
        "photo": {
            "prefix": "https://igx.4sqi.net/img/user/",
            "suffix": "/3AC0EL3N1VK1AXPZ.jpg"
        }
    },
    "venue": {
        "id": "4ba39acbf964a520314b38e3",
        "name": "Rita's Italian Ice",
        "contact": {
            "phone": "7177318275",
            "formattedPhone": "(717) 731-8275",
            "twitter": "ritasitalianice"
        },
        "location": {
            "address": "842 Market St",
            "lat": 40.243203064685,
            "lng": -76.90323472023,
            "labeledLatLngs": [
                {
                    "label": "display",
                    "lat": 40.243203064685,
                    "lng": -76.90323472023
                }
            ],
            "postalCode": "17043",
            "cc": "US",
            "city": "Lemoyne",
            "state": "PA",
            "country": "United States",
            "formattedAddress": [
                "842 Market St",
                "Lemoyne, PA 17043"
            ]
        },
        "categories": [
            {
                "id": "4bf58dd8d48988d1d0941735",
                "name": "Dessert Shop",
                "pluralName": "Dessert Shops",
                "shortName": "Desserts",
                "icon": {
                    "prefix": "https://ss3.4sqi.net/img/categories_v2/food/dessert_",
                    "suffix": ".png"
                },
                "primary": true
            }
        ],
        "verified": false,
        "stats": {
            "checkinsCount": 700,
            "usersCount": 309,
            "tipCount": 5
        },
        "url": "http://www.ritasice.com",
        "allowMenuUrlEdit": true,
        "beenHere": {
            "lastCheckinExpiredAt": 0
        }
    }
}

and an h-entry checkin object:

{
    "type": [
        "h-entry"
    ],
    "properties": {
        "published": [
            "2017-05-01T20:18:05-04:00"
        ],
        "syndication": [
            "https://www.swarmapp.com/user/1133595/checkin/5907d03dee628b2f2d74ee77"
        ],
        "content": [
            "Gotta get my Rita's fix!"
        ],
        "checkin": [
            {
                "type": [
                    "h-card"
                ],
                "properties": {
                    "name": [
                        "Rita's Italian Ice"
                    ],
                    "url": [
                        "https://foursquare.com/v/4ba39acbf964a520314b38e3",
                        "http://www.ritasice.com",
                        "https://twitter.com/ritasitalianice"
                    ],
                    "tel": [
                        "(717) 731-8275"
                    ],
                    "latitude": [
                        40.243203064685
                    ],
                    "longitude": [
                        -76.90323472023
                    ],
                    "street-address": [
                        "842 Market St"
                    ],
                    "locality": [
                        "Lemoyne"
                    ],
                    "region": [
                        "PA"
                    ],
                    "country-name": [
                        "United States"
                    ],
                    "postal-code": [
                        "17043"
                    ]
                }
            }
        ]
    }
}

[snarfed]

thanks for filing, and sorry for the trouble!

can you check if OwnYourSwarm is passing an auth token in its HTTP request, in either the Authorization HTTP header or the access_token parameter? the missing access token error comes from here, which implies that it's not sending either of those. cc @aaronpk.

[tamaracks]

Is there any way I can see that? I checked the access and error logs on my server, but I don't seem to see anything about such a request. Or is that something I would need to ask @aaronpk?

[snarfed]

sure! if OwnYourSwarm includes the token in the request body, put define('WP_DEBUG', true); define('WP_DEBUG_LOG', true); in your wp-config.php, and the plugin will log full request bodies to wp-content/debug.log, including the token.

if OwnYourSwarm uses the Authorization header instead...the plugin doesn't have a good way to log that right now.

@aaronpk usually includes good debugging features in his projects. i suspect OwnYourSwarm might have a way to see its own full micropub requests...?

[tamaracks]

When I turn on the debug option and have ownyourswarm try again, I get this:

[03-May-2017 15:42:30 UTC] Micropub Data: a:1:{s:8:"micropub";s:8:"endpoint";} a:2:{s:4:"type";a:1:{i:0;s:7:"h-entry";}s:10:"properties";a:4:{s:9:"published";a:1:{i:0;s:25:"2017-05-02T20:00:12-04:00";}s:11:"syndication";a:1:{i:0;s:70:"https://www.swarmapp.com/user/1133595/checkin/59091d8ca35dce27dec0d29a";}s:7:"content";a:1:{i:0;s:44:"Rats, no protein boxes. Or any bistro boxes.";}s:7:"checkin";a:1:{i:0;a:2:{s:4:"type";a:1:{i:0;s:6:"h-card";}s:10:"properties";a:10:{s:4:"name";a:1:{i:0;s:9:"Starbucks";}s:3:"url";a:3:{i:0;s:49:"https://foursquare.com/v/4b9d0793f964a520b98936e3";i:1;s:37:"http://www.starbucks.com/store/10595/";i:2;s:29:"https://twitter.com/starbucks";}s:3:"tel";a:1:{i:0;s:14:"(973) 248-8260";}s:8:"latitude";a:1:{i:0;d:41.00777034;}s:9:"longitude";a:1:{i:0;d:-74.292899770000005;}s:14:"street-address";a:1:{i:0;s:17:"45 Wanaque Avenue";}s:8:"locality";a:1:{i:0;s:13:"Pompton Lakes";}s:6:"region";a:1:{i:0;s:2:"NJ";}s:12:"country-name";a:1:{i:0;s:13:"United States";}s:11:"postal-code";a:1:{i:0;s:5:"07442";}}}}}}
[03-May-2017 15:42:30 UTC] PHP Notice:  Undefined index: authorization in /home/public/wp-content/plugins/micropub/micropub.php on line 892
[03-May-2017 15:42:30 UTC] PHP Notice:  Undefined index: access_token in /home/public/wp-content/plugins/micropub/micropub.php on line 157
[03-May-2017 15:42:30 UTC] PHP Warning:  Cannot modify header information - headers already sent by (output started at /home/public/wp-content/plugins/micropub/micropub.php:892) in /home/public/wp-content/plugins/micropub/micropub.php on line 881

I am guessing that doesn't say anything we didn't already know.

The ownyourswarm doc page says this:

Once OwnYourSwarm has obtained an access token, it will send it along with each request in an HTTP Authorization header like the below.

HTTP/1.1 POST /micropub
Authorization: Bearer xxxxxxxxxxxxxxxxxxxxxxx

I don't believe there is anything else on the OwnYourSwarm page about the entire request sent. There's the home page, with a brief description, the Dashboard, which has the information I pasted to you earlier, and the Docs page, which has a bit about how to set up indieauth, the part I pasted above, and some more information about the kind of data it sends after auth.

I see from his web site that @aaronpk looks to be attending a conference, so that may be why I haven't gotten any further replies from him on the issue I put in on that project (aaronpk/OwnYourSwarm#16). His initial reply said he checked the logs, but I'm not sure which logs.

[snarfed]

thanks for the detail from their docs! looks like the Authorization header is getting lost somewhere between OwnYourSwarm sending it and this plugin receiving it.

here's where the plugin looks it up:
https://github.com/snarfed/wordpress-micropub/blob/676ef39c405a9c13eeec9af3325b8b714e20043b/micropub.php#L156 , via https://github.com/snarfed/wordpress-micropub/blob/676ef39c405a9c13eeec9af3325b8b714e20043b/micropub.php#L884-L893 and https://github.com/snarfed/wordpress-micropub/blob/676ef39c405a9c13eeec9af3325b8b714e20043b/micropub.php#L906-L921 .

@tamaracks, any chance your web server or hosting provider are stripping the Authorization header? also, could you tell me the versions of PHP and WordPress you're using?

[tamaracks]

WordPress 4.7.4

Running php -v from the command line on my host gets

PHP 7.1.4-nfsn1 (cli) (built: Apr 26 2017 23:19:00) ( NTS )
Copyright (c) 1997-2017 The PHP Group
Zend Engine v3.1.0, Copyright (c) 1998-2017 Zend Technologies

As for the host stripping the header, that's a good question, but I am not sure. I did find a thread on the member support forum where a similar question was asked:
NearlyFreeSpeech.NET -- View topic - Stripped Authorization headers (?).pdf

(The user jdw is one of the people who runs the NearlyFreeSpeech hosting service.)

But that thread is from 2015, so I don't know if the answer is still pertinent. And I am not quite sure how to interpret the answer (maybe it will make more sense to you).

[tamaracks]

Oh, and this is the result of creating a php web page on my site that outputs phpinfo(). I was trying to remember how to get that.

As PDF

Zipped copy of the HTML output from the browser

[tamaracks]

I can switch my web site between PHP 5.6 and 7.1 on my host's admin panel. I tried 7.1, but it didn't seem to make a difference in the result for this case (didn't seem to break anything with WordPress either yet, so that's good).

I have to step away from my keyboard for a while now, but if you have any other suggestions of what I can try, I'll be happy to do so when I get back. I can submit a question on the host's member forum if you think it would help.

[snarfed]

thanks for all the info!

based on all of this, i still do suspect the Authorization header is getting stripped somewhere. mind trying another experiment? try inserting this at line 126 of wp-content/plugins/wordpress-micropub/micropub.php, right after the other error_log(... line:

error_log( 'Micropub HTTP headers: ' . serialize( getallheaders() ) );

...then get OwnYourSwarm to try again and see if the Authorization header shows up in wp-content/debug.log.

[aaronpk]

Hi! I was away from my computer the last 2 days, just catching up now. Now that you mention it, I do remember hearing about some web servers removing the Authorization header. It could be either the web server or a proxy server in between.

It looks like for Apache, some people are having luck adding this line to their .htaccess file:

SetEnvIf Authorization "(.*)" HTTP_AUTHORIZATION=$1

If that doesn't solve it, or if the host isn't using Apache, you'll need to contact someone there to ask how to allow the header through.

[tamaracks]

I tried that htaccess command, @aaronpk, but no dice, alas. The webserver is Apache, afaict.

@snarfed, I did try the extra debugging. Output below.

The first block was after I started debugging, but it appeared that the site-icon-extended plugin might have been getting in the way. I deactivated it, and tried again, so this first set of logs may not be so useful, but I included it just in case.

[04-May-2017 23:00:51 UTC] PHP Deprecated:  Methods with the same name as their class will not be constructors in a future version of PHP; PHP_ICO has a deprecated constructor in /home/public/wp-content/plugins/site-icon-extended/vendor/chrisbliss18/php-ico/class-php-ico.php on line 10
[04-May-2017 23:00:53 UTC] PHP Warning:  Cannot modify header information - headers already sent by (output started at /home/public/wp-content/plugins/site-icon-extended/vendor/chrisbliss18/php-ico/class-php-ico.php:10) in /home/public/wp-content/plugins/micropub/micropub.php on line 882
[04-May-2017 23:00:53 UTC] PHP Warning:  Cannot modify header information - headers already sent by (output started at /home/public/wp-content/plugins/site-icon-extended/vendor/chrisbliss18/php-ico/class-php-ico.php:10) in /home/public/wp-content/plugins/micropub/micropub.php on line 882
[04-May-2017 23:00:53 UTC] PHP Warning:  Cannot modify header information - headers already sent by (output started at /home/public/wp-content/plugins/site-icon-extended/vendor/chrisbliss18/php-ico/class-php-ico.php:10) in /home/public/wp-content/plugins/micropub/micropub.php on line 882
[04-May-2017 23:00:53 UTC] PHP Warning:  Cannot modify header information - headers already sent by (output started at /home/public/wp-content/plugins/site-icon-extended/vendor/chrisbliss18/php-ico/class-php-ico.php:10) in /home/public/wp-content/plugins/webmention/includes/class-webmention-receiver.php on line 545
[04-May-2017 23:00:53 UTC] PHP Warning:  Cannot modify header information - headers already sent by (output started at /home/public/wp-content/plugins/site-icon-extended/vendor/chrisbliss18/php-ico/class-php-ico.php:10) in /home/public/wp-content/plugins/webmention/includes/class-webmention-receiver.php on line 547
[04-May-2017 23:00:53 UTC] Micropub Data: a:1:{s:8:"micropub";s:8:"endpoint";} a:2:{s:4:"type";a:1:{i:0;s:7:"h-entry";}s:10:"properties";a:3:{s:9:"published";a:1:{i:0;s:25:"2017-05-04T18:05:58-04:00";}s:11:"syndication";a:1:{i:0;s:70:"https://www.swarmapp.com/user/1133595/checkin/590ba5c6c0f163286063f2ad";}s:7:"checkin";a:1:{i:0;a:2:{s:4:"type";a:1:{i:0;s:6:"h-card";}s:10:"properties";a:10:{s:4:"name";a:1:{i:0;s:9:"Starbucks";}s:3:"url";a:3:{i:0;s:49:"https://foursquare.com/v/4c224109fbe5c9b6a8949921";i:1;s:37:"http://www.starbucks.com/store/13579/";i:2;s:29:"https://twitter.com/starbucks";}s:3:"tel";a:1:{i:0;s:14:"(978) 475-7752";}s:8:"latitude";a:1:{i:0;d:42.656393;}s:9:"longitude";a:1:{i:0;d:-71.140289;}s:14:"street-address";a:1:{i:0;s:10:"14 Main St";}s:8:"locality";a:1:{i:0;s:7:"Andover";}s:6:"region";a:1:{i:0;s:2:"MA";}s:12:"country-name";a:1:{i:0;s:13:"United States";}s:11:"postal-code";a:1:{i:0;s:5:"01810";}}}}}}
[04-May-2017 23:00:53 UTC] Micropub HTTP headers: a:8:{s:14:"content-length";s:3:"585";s:12:"content-type";s:16:"application/json";s:6:"accept";s:3:"*/*";s:10:"connection";s:5:"close";s:4:"host";s:17:"www.darkglass.org";s:16:"x-forwarded-host";s:17:"www.darkglass.org";s:17:"x-forwarded-proto";s:5:"https";s:18:"x-forwarded-server";s:31:"edge4.phxe.nearlyfreespeech.net";}
[04-May-2017 23:00:53 UTC] PHP Notice:  Undefined index: authorization in /home/public/wp-content/plugins/micropub/micropub.php on line 893
[04-May-2017 23:00:53 UTC] PHP Notice:  Undefined index: access_token in /home/public/wp-content/plugins/micropub/micropub.php on line 158
[04-May-2017 23:00:53 UTC] PHP Warning:  Cannot modify header information - headers already sent by (output started at /home/public/wp-content/plugins/site-icon-extended/vendor/chrisbliss18/php-ico/class-php-ico.php:10) in /home/public/wp-content/plugins/micropub/micropub.php on line 882
[04-May-2017 23:01:17 UTC] PHP Deprecated:  Methods with the same name as their class will not be constructors in a future version of PHP; PHP_ICO has a deprecated constructor in /home/public/wp-content/plugins/site-icon-extended/vendor/chrisbliss18/php-ico/class-php-ico.php on line 10
[04-May-2017 23:01:19 UTC] PHP Deprecated:  Methods with the same name as their class will not be constructors in a future version of PHP; PHP_ICO has a deprecated constructor in /home/public/wp-content/plugins/site-icon-extended/vendor/chrisbliss18/php-ico/class-php-ico.php on line 10
[04-May-2017 23:01:22 UTC] PHP Deprecated:  Methods with the same name as their class will not be constructors in a future version of PHP; PHP_ICO has a deprecated constructor in /home/public/wp-content/plugins/site-icon-extended/vendor/chrisbliss18/php-ico/class-php-ico.php on line 10
[04-May-2017 23:01:23 UTC] PHP Notice:  ob_end_flush(): failed to send buffer of zlib output compression (0) in /home/public/wp-includes/functions.php on line 3720
[04-May-2017 23:01:24 UTC] PHP Deprecated:  Methods with the same name as their class will not be constructors in a future version of PHP; PHP_ICO has a deprecated constructor in /home/public/wp-content/plugins/site-icon-extended/vendor/chrisbliss18/php-ico/class-php-ico.php on line 10
[04-May-2017 23:01:32 UTC] PHP Deprecated:  Methods with the same name as their class will not be constructors in a future version of PHP; PHP_ICO has a deprecated constructor in /home/public/wp-content/plugins/site-icon-extended/vendor/chrisbliss18/php-ico/class-php-ico.php on line 10
[04-May-2017 23:01:33 UTC] PHP Notice:  Constant IS_A_PF already defined in /home/public/wp-content/plugins/pressforward/Controllers/PFtoWPTemplates.php on line 25
[04-May-2017 23:01:35 UTC] PHP Notice:  ob_end_flush(): failed to send buffer of zlib output compression (0) in /home/public/wp-includes/functions.php on line 3720

This is the request I had OwnYourSwarm try after I deactivated the other plugin:

[04-May-2017 23:01:42 UTC] Micropub Data: a:1:{s:8:"micropub";s:8:"endpoint";} a:2:{s:4:"type";a:1:{i:0;s:7:"h-entry";}s:10:"properties";a:3:{s:9:"published";a:1:{i:0;s:25:"2017-05-04T18:05:58-04:00";}s:11:"syndication";a:1:{i:0;s:70:"https://www.swarmapp.com/user/1133595/checkin/590ba5c6c0f163286063f2ad";}s:7:"checkin";a:1:{i:0;a:2:{s:4:"type";a:1:{i:0;s:6:"h-card";}s:10:"properties";a:10:{s:4:"name";a:1:{i:0;s:9:"Starbucks";}s:3:"url";a:3:{i:0;s:49:"https://foursquare.com/v/4c224109fbe5c9b6a8949921";i:1;s:37:"http://www.starbucks.com/store/13579/";i:2;s:29:"https://twitter.com/starbucks";}s:3:"tel";a:1:{i:0;s:14:"(978) 475-7752";}s:8:"latitude";a:1:{i:0;d:42.656393;}s:9:"longitude";a:1:{i:0;d:-71.140289;}s:14:"street-address";a:1:{i:0;s:10:"14 Main St";}s:8:"locality";a:1:{i:0;s:7:"Andover";}s:6:"region";a:1:{i:0;s:2:"MA";}s:12:"country-name";a:1:{i:0;s:13:"United States";}s:11:"postal-code";a:1:{i:0;s:5:"01810";}}}}}}
[04-May-2017 23:01:42 UTC] Micropub HTTP headers: a:8:{s:14:"content-length";s:3:"585";s:12:"content-type";s:16:"application/json";s:6:"accept";s:3:"*/*";s:10:"connection";s:5:"close";s:4:"host";s:17:"www.darkglass.org";s:16:"x-forwarded-host";s:17:"www.darkglass.org";s:17:"x-forwarded-proto";s:5:"https";s:18:"x-forwarded-server";s:31:"edge4.phxe.nearlyfreespeech.net";}
[04-May-2017 23:01:42 UTC] PHP Notice:  Undefined index: authorization in /home/public/wp-content/plugins/micropub/micropub.php on line 893
[04-May-2017 23:01:42 UTC] PHP Notice:  Undefined index: access_token in /home/public/wp-content/plugins/micropub/micropub.php on line 158
[04-May-2017 23:01:42 UTC] PHP Warning:  Cannot modify header information - headers already sent by (output started at /home/public/wp-content/plugins/micropub/micropub.php:893) in /home/public/wp-content/plugins/micropub/micropub.php on line 882

Let me know what you think. If it's time for me to contact the host, do you think there's any merit to the suggestion from that forum post about renaming the header:

SetEnvIf Authorization .+ MY_AUTHORIZATION=$0

Even if it wouldn't be useful for actually getting this all to work, is there a way we can test to see if the authorization token really does come through when it's renamed? It might be helpful to know when it comes to contacting them.

[snarfed]

thanks for doing all this extra debugging.

yup, confirmed, the header isn't coming through. the logged headers before and after deactivating that plugin were the same, and don't include Authorization:

[04-May-2017 23:00:53 UTC] Micropub HTTP headers: a:8:{s:14:"content-length";s:3:"585";s:12:"content-type";s:16:"application/json";s:6:"accept";s:3:"*/*";s:10:"connection";s:5:"close";s:4:"host";s:17:"www.darkglass.org";s:16:"x-forwarded-host";s:17:"www.darkglass.org";s:17:"x-forwarded-proto";s:5:"https";s:18:"x-forwarded-server";s:31:"edge4.phxe.nearlyfreespeech.net";}

you're welcome to try renaming it if you want! the micropub plugin won't currently find it if it's named something else, but we could definitely make that configurable in a future release.

[tamaracks]

If I put the rename line in there, would it show up in the same line in debug.log if it worked?

[snarfed]

yup!