kwizart: cannot login on https://release-monitoring.org using FAS #9011
Labels
No labels
announcement
authentication
automate
aws
backlog
blocked
bodhi
ci
Closed As
Duplicate
Closed As
Fixed
Closed As
Fixed with Explanation
Closed As
Initiative Worthy
Closed As
Insufficient data
Closed As
Invalid
Closed As
Spam
Closed As
Upstream
Closed As/Will Not
Can Not fix
cloud
communishift
copr
database
deprecated
dev
discourse
dns
downloads
easyfix
epel
factory2
firmitas
gitlab
greenwave
hardware
help wanted
high-gain
high-trouble
iad2
koji
koschei
lists
low-gain
low-trouble
mbs
medium-gain
medium-trouble
mini-initiative
mirrorlists
monitoring
Needs investigation
notifier
odcs
OpenShift
ops
OSBS
outage
packager_workflow_blocker
pagure
permissions
Priority
Needs Review
Priority
Next Meeting
Priority
🔥 URGENT 🔥
Priority
Waiting on Assignee
Priority
Waiting on External
Priority
Waiting on Reporter
rabbitmq
rdu-cc
release-monitoring
releng
repoSpanner
request-for-resources
s390x
security
SMTP
src.fp.o
staging
taiga
unfreeze
waiverdb
websites-general
wiki
No milestone
No project
No assignees
4 participants
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: Infrastructure/fedora-infrastructure#9011
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Seems like there is an issue specific to my account as I cannot login to release-monitoring using the Fedora FAS openidc. Once I'm authenticated using the Fedora FAS id, I receive the following message once redirected to the release-monitoring application:
"Error: There's already an account associated with your email, authenticate with openid."
(I'm authenticating using openid actually).
It might be related to my attempt to identify using another openidc provider:
(https://id.rpmfusion.org/openid/id/kwizart)
I would suggest to look at the release monitoring database to clean-up any duplicate entry...
IIRC, this issue might not be related to the recent migration, as It might be an older issue.
When do you need this to be done by? (summer 2020)
@zlopez can you take a look?
Metadata Update from @kevin:
We tried to troubleshoot this issue with kwizart in #fedora-admin channel and here is what we found.
The user with the same e-mail is already in users table, but this one is associated with openid instance (https://id.rpmfusion.org/openid/id/kwizart). He was able to connect using this openid provider, but to be able to connect with FAS we need to delete his existing account.
To do this I need someone with db access to delete user with id
0a87043e-4c9b-492c-b74d-c28c981a0842
from users table in Anitya. When this will be done the kwizart should be able to login with FAS account.To help prevent this in the future I created two tickets in Anitya:
To enhance the error message - https://github.com/fedora-infra/anitya/issues/930
To add admins ability to delete the users from the user management screen - https://github.com/fedora-infra/anitya/issues/931
anitya=# select * from users where id = '0a87043e-4c9b-492c-b74d-c28c981a0842';
id | email | username | active | admin
--------------------------------------+-------------------+----------------+--------+-------
0a87043e-4c9b-492c-b74d-c28c981a0842 | kwizart@gmail.com | NicolasChauvet | t |
(1 row)
anitya=# select from users where id = '0a87043e-4c9b-492c-b74d-c28c981a0842';
(1 row)
Metadata Update from @kevin:
It doesn't seem to work...
"Error: There's already an account associated with your email, authenticate with openid."
Is there any other user_id using the same email ? kwizart@gmail.com ?
Metadata Update from @kwizart:
Oops. That second select was supposed to be a delete. :(
However:
anitya=# delete from users where id = '0a87043e-4c9b-492c-b74d-c28c981a0842';
ERROR: update or delete on table "users" violates foreign key constraint "social_auth_usersocialauth_user_id_fkey" on table "social_auth_usersocialauth"
DETAIL: Key (id)=(0a87043e-4c9b-492c-b74d-c28c981a0842) is still referenced from table "social_auth_usersocialauth".
Hm, I thought the social auth table will be set to cascade delete. In this case we need to also delete entry in
social_auth_usersocialauth
tables.Metadata Update from @pingou:
Done:
Confirmed fixed! Thanks !
Metadata Update from @kwizart: