Keep getting "unauthorized"

[Moray]

Launchpad is preventing me and others on my team from looking at things we were able to look at a couple of weeks ago.

I can see https://code.launchpad.net/~openpetracore/openpetraorg/trunkhosted with a list of some changes but when I click on "All revisions" for https://bazaar.launchpad.net/~openpetracore/openpetraorg/trunkhosted/changes instead of the full list that I used to get, I get "Unauthorized Server denied check_authentication" with a URL of https://bazaar.launchpad.net/+login/?back_to=...

If I try https://bazaar.launchpad.net/+login/ I get "Oops! Something broke while generating the page. Please try again in a few minutes, and if the problem persists file a bug at https://bugs.launchpad.net/launchpad and quote OOPS-ID OOPS-c6b7b85a8213f386b41cd08db17de4db"

I can access https://bazaar.launchpad.net/~openpetracore/openpetraorg/trunkhosted/revision/3561 but get "Unauthorized" if I try to access revision/3562 unless I manually put a slash on the end of the URL.

I have logged out, cleared all my launchpad.net, login.launchpad.net and bazaar.launchpad.net cookies, restarted Chrome and logged back in again but the problems persist.

What's going on?

[Colin Watson (cjwatson)]

All I've managed to find so far by scouring logs is that bazaar.launchpad.net is asking login.launchpad.net whether the OpenID signature is valid, and login.launchpad.net is saying no. But it's not failing for you on every request, just enough to break things. This is very odd.

Things to try:

 * Explicitly log out of both the code browsing frontend and SSO (there are a few different ways to log out, and I don't know exactly what you did): https://bazaar.launchpad.net/+logout and https://login.launchpad.net/+logout
 * Use an alternative browser (ideally one that uses a different rendering engine, if you can) and see if you get the same symptoms

It may yet be a problem on our side, but at the moment this is baffling so it's worth trying a few simple things first.

[Moray (moray-henderson)]

Thank you for getting back to me so quickly.

Explicit /+logout from bazaar, code, login and launchpad.net didn't help.

Using Microsoft Edge did :-(

In Edge, after logging in through https://launchpad.net I could directly access https://bazaar.launchpad.net/~openpetracore/openpetraorg/trunkhosted/changes, but clicking "Back to branch summary" brought up the "Personal Data Request Yes, log me in" page. Having done so, I could access all the URLs that remain blocked when I use Chrome.

Versions:
Chrome Version 61.0.3163.100 (Official Build) (64-bit)
Microsoft Edge 40.15063.674.0

In Chrome, we regularly had a failure message "too many redirects" before a page loaded - could that be related?

It would be good if we could continue using Chrome with Launchpad. A colleague also using the same version of Chrome earlier today (10:26) got a full username/password authentication request when he tried to access URLs that are simply blocked for me, but now he gets blocked too.

[Colin Watson (cjwatson)]

Thanks; that may give us something to work with. However, after logging out, private branch pages on bazaar.launchpad.net seem to work for me (sending me through the usual login workflow) using the same version of Chrome on Ubuntu. (I don't have access to the particular branch in question, but picked one I do have access to instead.) Are you using Ubuntu or some other OS?

[Moray (moray-henderson)]

We're using Windows 10 Pro Version 1703 Build 15063.674 (64-bit)

I don't have the login credentials stored in either browser.

Moray.
“To err is human; to purr, feline.”

-----Original Message-----
From: <email address hidden> [mailto:<email address hidden>] On Behalf Of Colin Watson
Sent: 13 October 2017 14:51
To: Moray Henderson (ICT) <email address hidden>
Subject: [Bug 1723367] Re: Keep getting "unauthorized"

Thanks; that may give us something to work with. However, after logging out, private branch pages on bazaar.launchpad.net seem to work for me (sending me through the usual login workflow) using the same version of Chrome on Ubuntu. (I don't have access to the particular branch in question, but picked one I do have access to instead.) Are you using Ubuntu or some other OS?

--
You received this bug notification because you are subscribed to the bug report.
https://bugs.launchpad.net/bugs/1723367

Title:
  Keep getting "unauthorized"

Status in Launchpad itself:
  New

Bug description:
  Launchpad is preventing me and others on my team from looking at
  things we were able to look at a couple of weeks ago.

  I can see
  https://code.launchpad.net/~openpetracore/openpetraorg/trunkhosted
  with a list of some changes but when I click on "All revisions" for
  https://bazaar.launchpad.net/~openpetracore/openpetraorg/trunkhosted/changes
  instead of the full list that I used to get, I get "Unauthorized
  Server denied check_authentication" with a URL of
  https://bazaar.launchpad.net/+login/?back_to=...

  If I try https://bazaar.launchpad.net/+login/ I get "Oops! Something
  broke while generating the page. Please try again in a few minutes,
  and if the problem persists file a bug at
  https://bugs.launchpad.net/launchpad and quote OOPS-ID OOPS-
  c6b7b85a8213f386b41cd08db17de4db"

  I can access
  https://bazaar.launchpad.net/~openpetracore/openpetraorg/trunkhosted/revision/3561
  but get "Unauthorized" if I try to access revision/3562 unless I
  manually put a slash on the end of the URL.

  I have logged out, cleared all my launchpad.net, login.launchpad.net
  and bazaar.launchpad.net cookies, restarted Chrome and logged back in
  again but the problems persist.

  What's going on?

To manage notifications about this bug go to:
https://bugs.launchpad.net/launchpad/+bug/1723367/+subscriptions
________________________________
 OM International Services (Carlisle) Ltd - Unit B Clifford Court, Cooper Way - Carlisle CA3 0JG - United Kingdom
Charity reg no: 1112655 - Company reg no: 5649412 (England and Wales)

[Moray (moray-henderson)]

I tried going into Chrome's F12 Developer Menu > Application > Clear Storage for the launchpad.net sites, but it didn't help.

Screen capture shows the following:
Click link to https://bazaar.launchpad.net/~openpetracore/openpetraorg/trunkhosted/revision/3561
Status message "Waiting for bazaar.launchpad.net..." appears briefly.
The page appears almost instantly.

Click link to https://bazaar.launchpad.net/~openpetracore/openpetraorg/trunkhosted/revision/3562
Status message "Waiting for bazaar.launchpad.net..." appears for just under a second.
Status message changes to "https://bazaar.launchpad.net/~openpetracore/openpetraorg/trunkhosted/revision/3562" briefly.
Status message changes to "Waiting for login.launchpad.net..." for around 5 seconds.
Status message changes to "Waiting for cache..." for less than half a second.
Status message changes to "Waiting for login.launchpad.net..." for less than half a second.
Status message changes to "Waiting for bazaar.launchpad.net..." for a little over a second.
Status message changes to "Waiting for login.launchpad.net..." briefly.
URL bar changes to "https://bazaar.launchpad.net/+login/?back_to=https%3A%2F%2Fbazaar.launchpad.net%2F%257Eopenpetracore%2Fopenpetraorg%2Ftrunkhosted%2Frevision%2F3562..." (without the padlock and Canonical Group Ltd [GB] site identifier).
Page content changes to "This page isn't working bazaar.launchpad.net redirected you too many times. Try clearing your cookies ERR_TOO_MANY_REDIRECTS" briefly.
Page content changes to "Unauthorized Server denied check_authentication".
URL bar gets the padlock and "Canonical Group Ltd [GB]" site identifier.

Enter the URL https://bazaar.launchpad.net/~openpetracore/openpetraorg/trunkhosted/revision/3562/
Status message "Waiting for bazaar.launchpad.net..." appears briefly.
The page appears almost instantly.

For several months we had been seeing the "ERR_TOO_MANY_REDIRECTS" page but Launchpad still continued to the page we had asked for. Now something has changed and we're getting "Unauthorized" instead. The bazaar.launchpad.net/+login/?back_to URL is long and complicated. Would any of the information in there be useful?

[Moray (moray-henderson)]

Clearing all cookies, cache and data, and allowing Chrome to save password for login.launchpad.net has helped a bit: accessing specific revision numbers is working now, with or without a trailing slash on the URL.

However I still can't access the "All revisions" link, https://bazaar.launchpad.net/~openpetracore/openpetraorg/trunkhosted/changes - with or without a trailing slash. It still says I'm "Unauthorized".

[Moray (moray-henderson)]

Wanted to try this myself using Chrome on Ubuntu. https://help.ubuntu.com/community/GettingUbuntu says "Go to the Official Download Page, http://www.ubuntu.com/getubuntu/download.

Which is "404: Page not found". But I found the download; I'll let you know if I can replicate the problem from there.

[Chen-Han Hsiao (Stanley) (swem)]

I keep getting this issue since october.

I'm using Ubuntu 16.04 LTS with chromium 62.0.3202.94-0ubuntu0.16.04.1317

This issue stop me from browsing the code of private bazaar branch. Is anything I could help to fix this issue (Like collecting log or something)?