[rdo-users] Gerrit HTTP password 403

[Tristan Cacqueray]

On Sat, Feb 09, 2019 at 12:25 Artom Lifshitz wrote:
> Hey all,
>
> There's a Gerrit app for Android that I'm trying, and it doesn't
> support OAuth authentication [1]. To add RDO's Gerrit to it, I need to
> generate an HTTP password (Profile picture in near the top right ->
> Settings -> HTTP Password -> Generate). This worked fine on
> OpenStack's Gerrit, but in RDO Gerrit it does nothing. Using Firefox's
> dev tools, I was able to observe that the request [2] gets a 403 back.
> I've added the full request/response exchange at the end of this
> email, but I just want to know if this is intentionally disabled, or
> did I just stumble upon a previously-unknown problem?
>
> Cheers!
>
> [1] https://github.com/jruesga/rview/issues/62
> [2] https://review.rdoproject.org/r/Documentation/rest-api-accounts.html#set-http-password
>

Hello Artom,

The Gerrit Authentication is managed by a Software Factory service named CAUTH.
Since the upgrade, the Gerrit HTTP password is set by your user API key,
Visit this page: https://review.rdoproject.org/sf/user_settings.html
and click "Generate a new API key". Then you can use that key as
your Gerrit HTTP password. (If you haven't generated a new API key since
the upgrade, please generate a new one)

This change went un-noticed as it was part of Software Factory version
3.1 release note (and we update rdoproject from 2.7 directly to 3.2).
Here is the relevant documentation:
  https://review.rdoproject.org/docs/faqs/gerrit_rest_api.html#how-can-i-use-the-gerrit-rest-api

Let me know if it doesn't work with rview.
-Tristan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 487 bytes
Desc: not available
URL: <http://lists.rdoproject.org/pipermail/users/attachments/20190210/4c66a0c5/attachment.sig>