Skip to content

Conversation

solracsf
Copy link
Member

@solracsf solracsf commented Oct 30, 2023

Summary

No need to Warn about these, and they can be noisy.

Resolves #41156

Checklist

Signed-off-by: Git'Fellow <12234510+solracsf@users.noreply.github.com>
@solracsf
Copy link
Member Author

/backport to stable27

@solracsf
Copy link
Member Author

/backport to stable26

@brianjmurrell
Copy link

Are either of the changes in this PR for the specific message being spammed in #41156? The message in that issue seems to be:

Token is too short for a generated token, should be the password during basic auth

@@ -802,12 +802,11 @@ private function validateToken($token, $user = null) {
'app' => 'core',
'user' => $dbToken->getUID(),
]);

return false;
}

if (!$this->checkTokenCredentials($dbToken, $token)) {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

inside this method there are critical paths that might still be worth logging. That is every time \OC\Authentication\Token\IProvider::invalidateToken or markPasswordInvalid is called, for example.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe in a follow up PR? Otherwise, feel free to commit them as output messages would require a deeper knowledge of what they exactly accomplish, which I don't have. 🦺

@skjnldsv skjnldsv mentioned this pull request Nov 1, 2023
This was referenced Nov 6, 2023
@solracsf
Copy link
Member Author

Closing as #41302 has been merged.

@solracsf solracsf closed this Nov 10, 2023
@solracsf solracsf deleted the lowerToDebug branch November 10, 2023 15:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
3. to review Waiting for reviews
Projects
None yet
Development

Successfully merging this pull request may close these issues.

[Bug]: OC\Authentication\Exceptions\InvalidTokenException: Token is too short for a generated token, should be the password during basic auth
4 participants