The click-metadata page returns a 200 instead of an error when using a signed token

Bug #1489403 reported by Manuel de la Peña
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
ubuntu-system-settings (Ubuntu)
Confirmed
High
Manuel de la Peña

Bug Description

The system settings updates checks for updates in three different steps:

1. Gets the available updates against https://search.apps.ubuntu.com/api/v1/click-metadata
2. Gets the click token to be used for the download.
3. Tells udm to download the click package.

At the moment we are getting credential errors on step 2 because the server side checks the signed auth header yet the same does not happen in step 1. Ideally we would like to get the credentials/auth error as early as possible so that, if the sso token is no valid we do not even show the possible updates to the user.

no longer affects: ubuntu-system-settings
Changed in ubuntu-system-settings (Ubuntu):
status: New → Confirmed
importance: Undecided → Medium
assignee: nobody → Manuel de la Peña (mandel)
summary: - The click-metadata paged returns a 200 instead of an error when using a
+ The click-metadata page returns a 200 instead of an error when using a
signed token
Changed in ubuntu-system-settings (Ubuntu):
importance: Medium → High
Changed in click-package-index:
importance: Medium → High
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.