Fork me on GitHub
#clojars
<
2020-10-16
>
dharrigan14:10:29

Hi Everyone. I'm asking on behalf of someone who wishes to publish up a jar. A bit of background first, I've volunteered and tidied up this library . The original person who did it (employee of Sentry) has long left the company. I don't work for Sentry btw. Someone within Sentry is trying to now push up the jar (after requesting help from the Admins at Clojars to reclaim ownership of the repo). This person is now having difficultly uploading the jar (I'm trying to walk them through it). I can upload (via my own username), they can't.

dharrigan14:10:41

They are getting Failed to transfer file: . Return code is: 401, ReasonPhrase: Unauthorized.

dharrigan14:10:51

THey are using their own username and they are using CLOJARS_ and apparently the token scope is set to *

tcrawley14:10:39

Is their user a member of the io.sentry group on Clojars? I see brungarc and sentry as members: https://clojars.org/groups/io.sentry/

tcrawley14:10:14

Is the token they are using created under their own clojars account?

dharrigan14:10:11

Yes, I believe so (to the first question)

dharrigan14:10:33

Checking for the second question

dharrigan14:10:02

They created the token under their own account

dharrigan14:10:20

I think they need to do this, right?

dharrigan14:10:32

any artifact within a group you have access to ('group-name/*')

dharrigan14:10:32

a new deploy token for the io.sentry group

tcrawley14:10:26

I token with * should be able to deploy to any group they are a member of. I'll ssh into the server and look at the logs to see if there is any more context there.

tcrawley14:10:17

The log message is :invalid-token, which means one of: • the token itself is incorrect • the token is for another user • the token is disabled See https://github.com/clojars/clojars-web/blob/main/src/clojars/auth.clj#L106-L116

dharrigan14:10:07

Recommendation?

dharrigan14:10:15

Regenerate a new token and try?

dharrigan14:10:48

(going to try that)

tcrawley14:10:21

If I query the db for tokens for brungarc, it returns 0. So that would imply that they are using a token created for another user.

tcrawley14:10:21

They need to create a token under their own account and use that. Or use the username of the account where the token was created (`sentry`?)

dharrigan14:10:12

Thank you, I shall pass that along. Hopefully they can sort it 🙂

dharrigan14:10:13

done! they were using the wrong username!!!

dharrigan14:10:23

in all it's glory

tcrawley14:10:22

Great! Glad y'all figured it out. I do see that there is no link to the source though :( Lein auto-adds that to the pom.xml - are y'all deploying with some other tool?

dharrigan14:10:33

yes deps-deploy

dharrigan14:10:39

I will fix it and do a MR

dharrigan14:10:03

Baby steps 😉

tcrawley14:10:16

Cool. It will require another release to update it on http://clojars.org, just FYI

dharrigan14:10:23

I'll do it as a patch

dharrigan14:10:27

thank you very much!

tcrawley14:10:08

My pleasure!