Closed Bug 1639827 Opened 4 years ago Closed 4 years ago

OAuth authentication failing on STAGE/PROD

Categories

(Cloud Services :: Server: Remote Settings, defect, P1)

defect

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: leplatrem, Assigned: sven)

References

(Regression)

Details

:nanj reported it yesterday. I don't know for how long it was broken.

It must come from the OAuth configuration values (client id changed or something).

This is now happening on PROD too. So I'm switching this to P1

Priority: P2 → P1
Summary: OAuth authentication failing on STAGE → OAuth authentication failing on STAGE/PROD

Issue comes from caching. Maybe because of https://github.com/mozilla-services/cloudops-deployment/pull/3855

AUTH="Bearer eNGn-NxU.........."

$ http https://settings-writer.prod.mozaws.net/v1/ "Authorization: $AUTH" | jq '.user.id'
null

$ http https://settings-writer.prod.mozaws.net/v1/\?foo "Authorization: $AUTH" | jq '.user.id'
"ldap:mleplatre@mozilla.com"

A fix is currently beimg rolled out to stage and production. More details to follow.

I can now log in to stage again, so depoying to prod as well.

The fix is now rolled out to production as well.

I have disabled the microcache for the writer instances again, since it was never meant to be enabled for them.

Hopefully everything is fixed now. Page me at kinto-settings-pingdom@moz-svc-ops.pagerduty.com if you still can't log in I'm off today, so I won't see pings in Slack.

Fixed! I could log in :) Thanks @sven!

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Regressed by: 1607314
You need to log in before you can comment on or make changes to this bug.