erre

joined 1 year ago
[–] erre@lemmy.ml 10 points 1 year ago

Yeah they're stealing jwt tokens and noting when they're admins.

https://lemmy.sdf.org/comment/850269

[–] erre@lemmy.ml 22 points 1 year ago* (last edited 1 year ago)

They're stealing jwt tokens and noting when they're admin tokens.

https://lemmy.sdf.org/post/696053 https://lemmy.sdf.org/comment/850269

[–] erre@lemmy.ml 1 points 1 year ago

I noticed the code is urlencoded, might have to do with that but not sure if it's a bug.

5
submitted 1 year ago* (last edited 1 year ago) by erre@lemmy.ml to c/lemmy_support@lemmy.ml
 

After upgrading lemmy and lemmy-ui to v0.18.0 on an instance of mine, I'm unable to login with one of two users on the instance.

On login attempt an alert slides up with content:

SyntaxError: Unexpected token 'R', "Record not found" is not valid JSON

Anyone else?

I see in lemmy server logs :

LemmyError {
  message: None,
  inner: Record not found,
  context: SpanTrace [
    {
      target: "lemmy_api::local_user::login",
      name: "perform",
      fields: "self=Login { username_or_email: Sensitive, password: Sensitive, totp_2fa_token: None }",
      file: "crates/api/src/local_user/login.rs",
      line: 16
    },
    {
      target: "lemmy_server::root_span_builder",
      name: "HTTP request",
      fields: "http.method=POST http.scheme=\"https\" http.host=my.lemmy.tld:443 http.target=/api/v3/user/login otel.kind=\"server\" request_id=06adb55b-6568-4435-96eb-c620904db0f6",
      file: "src/root_span_builder.rs",
      line: 16
    }
  ]
}

I see in postgres logs that the user is fetched

SELECT "local_user"."id", "local_user"."person_id", "local_user"."password_encrypted", "local_user"."email", "local_user"."show_nsfw", "local_user"."theme", "local_user"."default_sort_type", "local_user"."default_listing_type", "local_user"."interface_language", "local_user"."show_avatars", "local_user"."send_notifications_to_email", "local_user"."validator_time", "local_user"."show_scores", "local_user"."show_bot_accounts", "local_user"."show_read_posts", "local_user"."show_new_post_notifs", "local_user"."email_verified", "local_user"."accepted_application", "local_user"."totp_2fa_secret", "local_user"."totp_2fa_url", "person"."id", "person"."name", "person"."display_name", "person"."avatar", "person"."banned", "person"."published", "person"."updated", "person"."actor_id", "person"."bio", "person"."local", "person"."private_key", "person"."public_key", "person"."last_refreshed_at", "person"."banner", "person"."deleted", "person"."inbox_url", "person"."shared_inbox_url", "person"."matrix_user_id", "person"."admin", "person"."bot_account", "person"."ban_expires", "person"."instance_id", "person_aggregates"."id", "person_aggregates"."person_id", "person_aggregates"."post_count", "person_aggregates"."post_score", "person_aggregates"."comment_count", "person_aggregates"."comment_score"
FROM (("local_user" INNER JOIN "person" ON ("local_user"."person_id" = "person"."id")) INNER JOIN "person_aggregates" ON ("person"."id" = "person_aggregates"."person_id"))
WHERE ((lower("person"."name") = lower('MyUserName')) OR ("local_user"."email" = 'MyUserName')) LIMIT 1;

I verified that the query returns a record.

EDIT: I can login via the password reset flow. Subsequent login attempts still fails though.

EDIT 2: I'm fairly certain my issue was introduced here: https://github.com/LemmyNet/lemmy/commit/5af831c6fad0cd462f6abe3645d8c26b3481bab7

The affected account was created when registration was open and no application was necessary.

I then switched the instance to closed registration. After upgrading to v0.18.0 I saw the error above.

I toggled the site to open with application required and I was able to log in.

I toggled it back to closed..and I can still login. I'm not sure what was triggered but now I can't repro the issue. 🤷‍♂️

[–] erre@lemmy.ml 1 points 1 year ago

I'm seeing 404 responses for login after upgrading server and ui to v0.18.0. But only for one account. No solution to offer just yet though.

[–] erre@lemmy.ml 2 points 1 year ago

My hope is that this is the beginning of MLS loosening the salary rules. I hope all the rumors are true 😆

[–] erre@lemmy.ml 2 points 1 year ago

Bunch of jabronis

[–] erre@lemmy.ml 2 points 1 year ago

LAFC leaving me profoundly disappointed today. Surely this was the wakeup call.. surely!

 

Let's get the ball rolling in the community. This is my desert city I've been working on for a few months. Nothing fancy, all vanilla. About 90k population.

I'm currently taking a break since the cargo trains terminals are bugged and traffic gets stuck. CS2 may arrive before that's fixed 😅