[Cyberduck-trac] [Cyberduck] #10725: B2 fails with app key limited to specific buckets
Cyberduck
trac at cyberduck.io
Thu Jun 6 17:09:29 UTC 2019
#10725: B2 fails with app key limited to specific buckets
---------------------------+-------------------------
Reporter: im.thatoneguy | Owner: dkocher
Type: defect | Status: assigned
Priority: high | Milestone: 7.1
Component: b2 | Version: 7.0
Severity: blocker | Resolution:
Keywords: | Architecture:
Platform: Windows 10 |
---------------------------+-------------------------
Description changed by im.thatoneguy:
Old description:
> Regression from <7.0
>
> When opening connection, b2_list_buckets will fail if the app key in-use
> is limited to one bucket. 6.9 would list one bucket, 7.0 errors and
> breaks authorization flow.
>
> Reproduction:
> 1) Create B2 app key limited to one bucket
> 2) Attempt connection POST /b2api/v2/b2_list_buckets HTTP/1.1
>
> Error: 401 Listing Directory / Failed
>
> Possible B2 v2 API bug
New description:
Regression from <7.0
When opening connection, b2_list_buckets will fail if the app key in-use
is limited to one bucket. 6.9 would list one bucket, 7.0 errors and
breaks authorization flow.
Reproduction:
1) Create B2 app key limited to one bucket
2) Attempt connection POST /b2api/v2/b2_list_buckets HTTP/1.1
Error: 401 Listing Directory / Failed
https://www.backblaze.com/b2/docs/application_keys.html#usingRestrictedKeys
{{{
Most of the API calls that deal with buckets or files use a bucketId to
identify a bucket. But, when using an application key that restricts
access to just one bucket, you can't use b2_list_buckets to list all the
buckets.
When there is a bucket restriction, the bucketId and the bucketName for
that bucket are in the response from b2_authorize_account in the allowed
section. You can then use that bucketId in all of your later calls.
}}}
--
--
Ticket URL: <https://trac.cyberduck.io/ticket/10725#comment:7>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows
More information about the Cyberduck-trac
mailing list