DSpace REST login error in SS

[J4bbi]

Expected behaviour
When Storage service has been configured to store AIP/DIPs in DSpace using a REST location it should login using credentials provided and return a session id.

Current behaviour
When trying to login to DSpace a 401 error is thrown by the login function.

The same credentials work using curl.

curl -v -X POST --data "email=dspacedemo%2Badmin@gmail.com&password=dspace" https://demo.dspace.org/rest/login

the same credentials set up in SS return a 401.

DSpaceRESTException: Bad response 401 received when attempting to login via the DSpace REST API: 401 Client Error: Unauthorized for url: https://demo.dspace.org:443/rest/login. Using url "https://demo.dspace.org:443/rest/login". Using email "dspacedemo+admin@gmail.com".

Note that when commenting out the cookies and headers lines from the following snippet:
https://github.com/artefactual/archivematica-storage-service/blob/qa/0.x/storage_service/locations/models/dspace_rest.py#L297-L299
the login error does not happen.

Steps to reproduce

Your environment (version of Archivematica, OS version, etc)
SS qa 0.x- 0.12.0 rc
DSpace 6.2

[jrwdunham]

To QA:

1. DSpace REST space functionality must be enabled by modifying https://github.com/artefactual/archivematica-storage-service/blob/dev/issue-124-fix-dspace-rest-space-form-html/storage_service/locations/models/space.py#L143 so that BETA_PROTOCOLS has the value set(). Then restart the SS service.

2. Create a DSpace REST space using values and credentials that I have. Contact me for these details.

3. Confirm that you can create an AIP and store it in the DSpace REST space.

[currmie]

Hi @sevein ,

In short, I'm unable to verify on my local deploy.

More details...
I'm encountering an SSL error: "bad handshake: Error([('SSL routines' , 'tls_process_server_certificate', 'certificate verify failed')],)" after doing the following:

1 .Enabled the DSpace REST space functionality by modifying space.py per jrwdunham's QA notes.
2. Restarted SS service.
3. Created a DSpace REST space using values and credentials that jrwdunham provided.

*I can provide more details about my DSpace Rest space location upon request.

[sevein]

@currmie I believe the certificate verify failed error means that Storage Service could not verify the authenticity of the certificate(s) offered by DSpace or ArchiveSpace. This could be happening for several reasons. You can talk to the ops team to revise the deployment for you, e.g. CA certs installed in the client, server certificates, etc...
A temporary solution is to disable the "Verify SSL certificates?" option which commands Storage Service to trust the server certificate regardless.

[currmie]

@mamedin was able to confirm that we could create an AIP and store it in the DSpace REST space associated with a test collection. No DSpace REST login errors encountered so calling this issue verified.

[currmie]

Also, I verified using new credentials for DSpace REST login (given to me for QA purposes). Using local deployment, I am able to create an AIP and store it in the DSpace REST space.