Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-26518

Updating users via REST API affects user tokens for Conan requests

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Done
    • Resolution: Done
    • Affects Version/s: 7.21.3
    • Fix Version/s: 7.35.1
    • Component/s: None
    • Labels:
      None
    • Severity:
      Critical
    • Location:
      External

      Description

      Problem description: If we update the user password using REST API, the token is getting affected for Conan requests. If we update the user credentials for a user with the same password again and try conan download, Artifactory is prompting for a password. This behavior is reproducible in Artifactory 7.21.x and above versions and won't occur in 7.19.x and below.

      What is the impact:
      The build jobs were failing since it requires manual intervention of entering the user password.

      What is the expected behavior:
      Artifactory shouldn't prompt for credentials after updating the user with the same password again.

      Steps to reproduce:
      1. Create a test user testuser, group, and permission to deploy on Conan remote repository
      2. Add the remote to Conan client and configure authentication.
      conan remote add test-conan-remote $ARTIFACTORY_URL/api/conan/test-conan
      conan user testuser -p testpassword -r test-conan-remote
      3. Download conan artifact 
      conan download freetype/2.10.0@bincrafters/stable:127a74da09eed6c9b69f960b147f6d7fb8e37e28 -r test-conan-remote
      4. create an user.json file with the same user and same password
      cat user.json

      { "name": "testuser", "email": "testuser@testemail.com", "password": "testpassword", "groups": ["test-group"], "state": "present" }

      5. Execute user update request
      curl -u $ARTIFACTORY_USER:$ARTIFACTORY_PWD -XPOST -H 'Content-type: application/vnd.org.jfrog.artifactory.security.User+json' $ARTIFACTORY_URL/api/security/users/testuser -d@user.json

      6. Try downloading of the conan artifact, Artifactory prompts for password.
      conan download freetype/2.10.0@bincrafters/stable:127a74da09eed6c9b69f960b147f6d7fb8e37e28 -r test-conan-remote

      Environment details:
      Artifactory 7.19.10 with default derby database. Execute the above commands and the Conan client will not prompt for the password.
      Artifactory 7.21.x and above with default derby database. Execute the above commands and Conan client prompts for the password.

      Possible workaround: No

        Attachments

          Activity

              People

              Assignee:
              Unassigned
              Reporter:
              tataraov Tatarao Vana
              Votes:
              2 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Sync Status

                  Connection: RTFACT Sync
                  RTMID-26528 -
                  ERROR
                  • Last Sync Date: