You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Thank you for opening your first issue in this project! Engagement like this is essential for open source projects! 🤗
If you haven't done so already, check out Jupyter's Code of Conduct. Also, please try to follow the issue template as it helps other other community members to contribute more effectively.
You can meet the other Jovyans by joining our Discourse forum. There is also an intro thread there where you can stop by and say Hi! 👋
Bug description
I filed this as bug 938 on tljh, but i think it belongs here.
jupyterhub/the-littlest-jupyterhub#938
The change password url:
...url.../hub/auth/change-password
doesn't work.
Note, getting rid of the xrsf check removes the error, and changes the password, i.e. adding a dummy check to the class in firstuseauthenticator.py:
No idea if this is the right thing to do...
Expected behaviour
The password gets changed.
Actual behaviour
I get a dialog box asking me for a new password, but when I type in the new password I get:
403 : Forbidden
'_xsrf' argument missing from POST
How to reproduce
Log in to tljh and go to
...url.../hub/auth/change-password
Your personal set up
I'm running TLJH on ubuntu 22.04
Full environment
Configuration
Logs
Log extract:
Aug 24 20:41:55 juliabox-test python3[11864]: Running as unit: jupyter-jmaher.service
Aug 24 20:41:56 juliabox-test python3[764]: [I 2023-08-24 20:41:56.503 JupyterHub log:191] 302 GET /juliabox-test/hub/spawn/jmaher?next=%2Fjuliabox-test%2Fhub%2Fuser%2Fjmaher%2Flab%2Ftree%2F229-projects%2F01-calculator.ipynb -> /juliabox-test/hub/spawn->
Aug 24 20:41:56 juliabox-test python3[764]: [I 2023-08-24 20:41:56.615 JupyterHub pages:398] jmaher is pending spawn
Aug 24 20:41:56 juliabox-test python3[764]: [I 2023-08-24 20:41:56.627 JupyterHub log:191] 200 GET /juliabox-test/hub/spawn-pending/jmaher?next=%2Fjuliabox-test%2Fhub%2Fuser%2Fjmaher%2Flab%2Ftree%2F229-projects%2F01-calculator.ipynb ([email protected]) 17>
Aug 24 20:41:57 juliabox-test python3[764]: [I 2023-08-24 20:41:57.625 JupyterHub log:191] 200 GET /juliabox-test/hub/api (@127.0.0.1) 1.38ms
Aug 24 20:41:57 juliabox-test python3[764]: [I 2023-08-24 20:41:57.690 JupyterHub log:191] 200 POST /juliabox-test/hub/api/users/jmaher/activity ([email protected]) 24.55ms
Aug 24 20:42:02 juliabox-test python3[764]: [W 2023-08-24 20:42:02.081 JupyterHub _version:37] Single-user server has no version header, which means it is likely < 0.8. Expected 4.0.2
Aug 24 20:42:02 juliabox-test python3[764]: [I 2023-08-24 20:42:02.081 JupyterHub base:990] User jmaher took 6.580 seconds to start
Aug 24 20:42:02 juliabox-test python3[764]: [I 2023-08-24 20:42:02.081 JupyterHub proxy:330] Adding user jmaher to proxy /juliabox-test/user/jmaher/ => http://127.0.0.1:37459
Aug 24 20:42:03 juliabox-test python3[764]: [I 2023-08-24 20:42:03.155 JupyterHub users:768] Server jmaher is ready
Aug 24 20:42:03 juliabox-test python3[764]: [I 2023-08-24 20:42:03.156 JupyterHub log:191] 200 GET /juliabox-test/hub/api/users/jmaher/server/progress?_xsrf=[secret] ([email protected]) 5775.52ms
Aug 24 20:42:03 juliabox-test python3[764]: [I 2023-08-24 20:42:03.862 JupyterHub log:191] 302 GET /juliabox-test/hub/spawn-pending/jmaher?next=%2Fjuliabox-test%2Fhub%2Fuser%2Fjmaher%2Flab%2Ftree%2F229-projects%2F01-calculator.ipynb -> /juliabox-test/hu>
Aug 24 20:42:03 juliabox-test python3[764]: [I 2023-08-24 20:42:03.961 JupyterHub log:191] 302 GET /juliabox-test/hub/user/jmaher/lab/tree/229-projects/01-calculator.ipynb -> /juliabox-test/user/jmaher/lab/tree/229-projects/01-calculator.ipynb?redirects>
Aug 24 20:42:04 juliabox-test python3[764]: [W 2023-08-24 20:42:04.127 JupyterHub log:191] 403 GET /juliabox-test/hub/api/user (@127.0.0.1) 3.42ms
Aug 24 20:42:04 juliabox-test python3[764]: [I 2023-08-24 20:42:04.304 JupyterHub log:191] 302 GET /juliabox-test/hub/api/oauth2/authorize?client_id=jupyterhub-user-jmaher&redirect_uri=%2Fjuliabox-test%2Fuser%2Fjmaher%2Foauth_callback&response_type=code>
Aug 24 20:42:04 juliabox-test python3[764]: [I 2023-08-24 20:42:04.476 JupyterHub log:191] 200 POST /juliabox-test/hub/api/oauth2/token ([email protected]) 36.72ms
Aug 24 20:42:04 juliabox-test python3[764]: [I 2023-08-24 20:42:04.485 JupyterHub log:191] 200 GET /juliabox-test/hub/api/user ([email protected]) 5.86ms
Aug 24 20:42:33 juliabox-test python3[764]: [I 2023-08-24 20:42:33.787 JupyterHub log:191] 200 GET /juliabox-test/hub/auth/change-password ([email protected]) 37.80ms
Aug 24 20:42:47 juliabox-test python3[764]: [I 2023-08-24 20:42:47.674 JupyterHub log:191] 200 GET /juliabox-test/hub/api/ ([email protected]) 10.37ms
Aug 24 20:42:47 juliabox-test python3[764]: [I 2023-08-24 20:42:47.680 JupyterHub log:191] 200 GET /juliabox-test/hub/api/users?state=[secret] ([email protected]) 3.76ms
Aug 24 20:42:53 juliabox-test python3[764]: [W 2023-08-24 20:42:53.339 JupyterHub web:1869] 403 POST /juliabox-test/hub/auth/change-password (10.8.3.1): '_xsrf' argument missing from POST
Aug 24 20:42:53 juliabox-test python3[764]: [W 2023-08-24 20:42:53.343 JupyterHub log:191] 403 POST /juliabox-test/hub/auth/change-password (@10.8.3.1) 4.40ms
Aug 24 20:43:47 juliabox-test python3[764]: [I 2023-08-24 20:43:47.680 JupyterHub log:191] 200 GET /juliabox-test/hub/api/ ([email protected]) 16.98ms
Aug 24 20:43:47 juliabox-test python3[764]: [I 2023-08-24 20:43:47.693 JupyterHub log:191] 200 GET /juliabox-test/hub/api/users?state=[secret] ([email protected]) 9.42ms
Aug 24 20:44:47 juliabox-test python3[764]: [I 2023-08-24 20:44:47.680 JupyterHub log:191] 200 GET /juliabox-test/hub/api/ ([email protected]) 16.74ms
The text was updated successfully, but these errors were encountered: