[Cyberduck-trac] [Cyberduck] #10725: B2 fails with app key limited to specific buckets

Cyberduck trac at cyberduck.io
Thu Jun 6 17:09:29 UTC 2019


#10725: B2 fails with app key limited to specific buckets
---------------------------+-------------------------
 Reporter:  im.thatoneguy  |         Owner:  dkocher
     Type:  defect         |        Status:  assigned
 Priority:  high           |     Milestone:  7.1
Component:  b2             |       Version:  7.0
 Severity:  blocker        |    Resolution:
 Keywords:                 |  Architecture:
 Platform:  Windows 10     |
---------------------------+-------------------------
Description changed by im.thatoneguy:

Old description:

> Regression from <7.0
>
> When opening connection, b2_list_buckets will fail if the app key in-use
> is limited to one bucket.    6.9 would list one bucket, 7.0 errors and
> breaks authorization flow.
>
> Reproduction:
> 1) Create B2 app key limited to one bucket
> 2) Attempt connection POST /b2api/v2/b2_list_buckets HTTP/1.1
>
> Error: 401 Listing Directory / Failed
>
> Possible B2 v2 API bug

New description:

 Regression from <7.0

 When opening connection, b2_list_buckets will fail if the app key in-use
 is limited to one bucket.    6.9 would list one bucket, 7.0 errors and
 breaks authorization flow.

 Reproduction:
 1) Create B2 app key limited to one bucket
 2) Attempt connection POST /b2api/v2/b2_list_buckets HTTP/1.1

 Error: 401 Listing Directory / Failed


 https://www.backblaze.com/b2/docs/application_keys.html#usingRestrictedKeys
 {{{
 Most of the API calls that deal with buckets or files use a bucketId to
 identify a bucket. But, when using an application key that restricts
 access to just one bucket, you can't use b2_list_buckets to list all the
 buckets.

 When there is a bucket restriction, the bucketId and the bucketName for
 that bucket are in the response from b2_authorize_account in the allowed
 section. You can then use that bucketId in all of your later calls.
 }}}

--

--
Ticket URL: <https://trac.cyberduck.io/ticket/10725#comment:7>
Cyberduck <https://cyberduck.io>
Libre FTP, SFTP, WebDAV, S3 & OpenStack Swift browser for Mac and Windows


More information about the Cyberduck-trac mailing list