[rdo-users] Gerrit HTTP password 403

[Artom Lifshitz]

On Sun, Feb 10, 2019, 05:21 Tristan Cacqueray <tdecacqu at redhat.com wrote:

>
> On Sat, Feb 09, 2019 at 12:25 Artom Lifshitz wrote:
> > Hey all,
> >
> > There's a Gerrit app for Android that I'm trying, and it doesn't
> > support OAuth authentication [1]. To add RDO's Gerrit to it, I need to
> > generate an HTTP password (Profile picture in near the top right ->
> > Settings -> HTTP Password -> Generate). This worked fine on
> > OpenStack's Gerrit, but in RDO Gerrit it does nothing. Using Firefox's
> > dev tools, I was able to observe that the request [2] gets a 403 back.
> > I've added the full request/response exchange at the end of this
> > email, but I just want to know if this is intentionally disabled, or
> > did I just stumble upon a previously-unknown problem?
> >
> > Cheers!
> >
> > [1] https://github.com/jruesga/rview/issues/62
> > [2]
> https://review.rdoproject.org/r/Documentation/rest-api-accounts.html#set-http-password
> >
>
> Hello Artom,
>
> The Gerrit Authentication is managed by a Software Factory service named
> CAUTH.
> Since the upgrade, the Gerrit HTTP password is set by your user API key,
> Visit this page: https://review.rdoproject.org/sf/user_settings.html
> and click "Generate a new API key". Then you can use that key as
> your Gerrit HTTP password. (If you haven't generated a new API key since
> the upgrade, please generate a new one)
>

That worked, thanks Tristan!


> This change went un-noticed as it was part of Software Factory version
> 3.1 release note (and we update rdoproject from 2.7 directly to 3.2).
> Here is the relevant documentation:
>
> https://review.rdoproject.org/docs/faqs/gerrit_rest_api.html#how-can-i-use-the-gerrit-rest-api
>
> Let me know if it doesn't work with rview.
> -Tristan
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rdoproject.org/pipermail/users/attachments/20190210/ad0efaa8/attachment.html>