Bug 1879140 - console auth errors not understandable by customers
Summary: console auth errors not understandable by customers
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Management Console
Version: 4.3.z
Hardware: Unspecified
OS: Unspecified
medium
medium
Target Milestone: ---
: 4.8.0
Assignee: Jakub Hadvig
QA Contact: Yadan Pei
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-09-15 14:18 UTC by Stefan Schimanski
Modified: 2023-09-15 00:48 UTC (History)
22 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1847693
Environment:
Last Closed: 2021-07-27 22:32:55 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github openshift console pull 7217 0 None open Bug 1879140: Set proper loglevel for auth errors 2021-02-01 17:54:30 UTC
Red Hat Product Errata RHSA-2021:2438 0 None None None 2021-07-27 22:33:19 UTC

Comment 2 Jakub Hadvig 2020-10-02 15:27:04 UTC
Did not have time for fixing. Will fix next sprint.

Comment 5 Jakub Hadvig 2020-11-13 16:37:50 UTC
Haven't got time to work on this issue. Will get to it next sprint.

Comment 10 Yadan Pei 2021-04-06 08:22:30 UTC
1. Set console log level to Debug
# oc patch consoles.operator.openshift.io cluster -p '{"spec":{"logLevel": "Debug"}}' --type merge

2. Login with user and then logout, check console pod logs
I0406 08:13:49.701186       1 middleware.go:28] authentication failed: unauthenticated, no value for cookie openshift-session-token
I0406 08:16:27.615631       1 auth.go:394] oauth success, redirecting to: "https://console-openshift-console.apps.ci-ln-26d5gbt-f76d1.origin-ci-int-gce.dev.openshift.com/"
2021/04/06 08:16:40 Failed to dial backend: 'websocket: bad handshake' Status: '403 Forbidden' URL: 'https://kubernetes.default.svc/apis/config.openshift.io/v1/clusterversions?watch=true&fieldSelector=metadata.name%3Dversion'
I0406 08:16:44.265075       1 middleware.go:28] authentication failed: unauthenticated, no value for cookie openshift-session-token


When user is not logged in, it shows `authentication failed: unauthenticated, no value for cookie openshift-session-token`

we didn't show `authentication failed: unauthenticated, no value for cookie openshift-session-token` by default, is customer expect a more readable error message? 

I understand that the issue in this bug is the error messages are not understandable(easily readable)

Comment 11 Yadan Pei 2021-04-06 08:24:21 UTC
Also when user logs with incorrect password, we can see messages in console logs:

I0406 08:22:54.887707       1 middleware.go:28] authentication failed: http: named cookie not present
I0406 08:22:54.980605       1 middleware.go:28] authentication failed: http: named cookie not present
I0406 08:22:55.026364       1 middleware.go:28] authentication failed: http: named cookie not present

Comment 12 Yadan Pei 2021-04-06 08:27:55 UTC
is customer expecting more readable error messages? 


authentication failed: http: named cookie not present => authentication failed: ${something more readable} 
authentication failed: unauthenticated, no value for cookie openshift-session-token   => authentication failed: unauthenticated, {something more readable}

Comment 13 Yadan Pei 2021-04-09 02:13:42 UTC
After talking with our developers, we think changing default log level so that these messages will not be logged by default, 

it will only be shown when we set higher log level such as 'Debug', we think this should be sufficient

Going to move the bug to VERIFIED, let us know if this is not satisfied

Comment 16 errata-xmlrpc 2021-07-27 22:32:55 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: OpenShift Container Platform 4.8.2 bug fix and security update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:2438

Comment 17 Red Hat Bugzilla 2023-09-15 00:48:10 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 500 days


Note You need to log in before you can comment on or make changes to this bug.