-
Notifications
You must be signed in to change notification settings - Fork 50
Closed
Labels
area/commercial/aclRelated to Access Control ListsRelated to Access Control Listskind/bugSomething is broken.Something is broken.status/acceptedWe accept to work on it.We accept to work on it.
Description
Ratel cannot run any operations that require authentication after the ACL access TTL expires.
Steps to reproduce:
-
Run a Dgraph cluster with a short access TTL:
dgraph alpha ... --hmac_secret_file ./hmacsecret.txt --acl_access_ttl 3s -
Log in as groot in Ratel.
-
Take a breather for 3 seconds to let the TTL expire.
-
Try to add a user, which results in this error:
The dev tools network inspector shows the reason for the error for the /mutate request:
{"errors":[{"message":"rpc error: code = Unauthenticated desc = unable to parse jwt token:Token is expired","extensions":{"code":"ErrorInvalidRequest"}}],"data":null}
The refresh token should be used to re-authenticate the client after the TTL has expired.
Metadata
Metadata
Assignees
Labels
area/commercial/aclRelated to Access Control ListsRelated to Access Control Listskind/bugSomething is broken.Something is broken.status/acceptedWe accept to work on it.We accept to work on it.
