Skip to content

Fixed Anonymous guestbook file download via persistentId#12363

Open
stevenwinship wants to merge 2 commits intodevelopfrom
12245-anon-guestbook-download-via-persistentid
Open

Fixed Anonymous guestbook file download via persistentId#12363
stevenwinship wants to merge 2 commits intodevelopfrom
12245-anon-guestbook-download-via-persistentid

Conversation

@stevenwinship
Copy link
Copy Markdown
Contributor

What this PR does / why we need it:Guest downloads using persistentId were not working When guestbook responses were given.

Which issue(s) this PR closes:#12245

Special notes for your reviewer:

Suggestions on how to test this:

Does this PR introduce a user interface change? If mockups are available, please link/include them here:

Is there a release notes update needed for this change?: Included

Additional documentation:

@coveralls
Copy link
Copy Markdown

coveralls commented Apr 27, 2026

Coverage Status

coverage: 24.964% (+0.002%) from 24.962% — 12245-anon-guestbook-download-via-persistentid into develop

@github-actions

This comment has been minimized.

@stevenwinship stevenwinship added the FY26 Sprint 22 FY26 Sprint 22 (2026-04-22 - 2026-05-06) label Apr 27, 2026
@stevenwinship stevenwinship force-pushed the 12245-anon-guestbook-download-via-persistentid branch from 04e5ba0 to 78793ff Compare April 27, 2026 21:23
@github-actions
Copy link
Copy Markdown

📦 Pushed preview images as

ghcr.io/gdcc/dataverse:12245-anon-guestbook-download-via-persistentid
ghcr.io/gdcc/configbaker:12245-anon-guestbook-download-via-persistentid

🚢 See on GHCR. Use by referencing with full name as printed above, mind the registry name.

@stevenwinship stevenwinship moved this from In Progress 💻 to Ready for Review ⏩ in IQSS Dataverse Project Apr 28, 2026
@stevenwinship stevenwinship removed their assignment Apr 28, 2026
@landreev landreev moved this from Ready for Review ⏩ to In Review 🔎 in IQSS Dataverse Project Apr 28, 2026
@landreev landreev self-requested a review April 28, 2026 14:48
@landreev landreev self-assigned this Apr 28, 2026
Copy link
Copy Markdown
Contributor

@landreev landreev left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

One quick request:
Could you please fix all the misspelled signature-secret in config.rst as well in the same pr.

requestSpecification.body(body);
}
String getString = "/api/access/dataset/:persistentId?persistentId=" + persistentId;
String getString = "/api/access/datafile/:persistentId?persistentId=" + persistentId;
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

From a quick glance, hard-coding "datafile" here may not be ideal.
This UtilIT method is also called from FilesIT.testDownloadFileWithGuestbookResponseUsingBearerToken() method, where the pid appears to be of a dataset and in the context of /api/access/dataset.
I see that the test is @Disabled, but I'm assuming you want it to work on demand.

downloadResponse = UtilIT.downloadFilesUrlWithGuestbookResponse(persistentId, apiToken, guestbookResponse);
// Get Signed Download Url for guest with guestbook response using file's persistentId
// POST /api/access/dataset/:persistentId?persistentId=
downloadResponse = UtilIT.downloadFilesUrlWithGuestbookResponse(filePersistentId, null, guestbookResponseForGuest);
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Also, this looks like this test of /api/access/datafile/:persistentId is being added at the expense of dropping testing of /api/access/dataset/:persistentId that used to be here.
We probably want to test both, no?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

FY26 Sprint 22 FY26 Sprint 22 (2026-04-22 - 2026-05-06) Original size: 10 Type: Bug a defect

Projects

Status: In Review 🔎

Development

Successfully merging this pull request may close these issues.

Anonymous guestbook download via :persistentId returns a signed URL that immediately fails with 401 Bad signed URL, numeric dataset id works

3 participants